last executing test programs: 3m52.916458703s ago: executing program 2 (id=10478): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000068000100000000000000000002000000000000000c0008"], 0x3c}}, 0x0) 3m52.78188753s ago: executing program 2 (id=10480): r0 = socket$inet(0xa, 0x801, 0x84) getsockopt$sock_buf(r0, 0x1, 0xc, &(0x7f0000000080)=""/51, &(0x7f00000000c0)=0x33) 3m52.663266237s ago: executing program 2 (id=10483): r0 = socket(0x8000000010, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x8014) 3m52.571799643s ago: executing program 2 (id=10485): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 3m52.249199692s ago: executing program 2 (id=10489): r0 = fsopen(&(0x7f0000000080)='msdos\x00', 0x1) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)='discard', &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff) 3m51.534032704s ago: executing program 2 (id=10496): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x88c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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") newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) 3m51.197575413s ago: executing program 32 (id=10496): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x88c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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") newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) 3m27.002376977s ago: executing program 1 (id=10758): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@empty, 0x0, 0x1000, 0x2000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0xfffffffffffffff9, 0xe, 0xfffffff800000005, 0xfffffffffffffffd, 0x0, 0x3e}, {0x0, 0x800004, 0x0, 0x100000001}, {}, 0x0, 0x0, 0xa, 0x1, 0xe}, [@encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e22, 0x4e24, @in6=@mcast2}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4054}, 0x90) 3m26.872308805s ago: executing program 1 (id=10760): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, 0x0) 3m26.763997462s ago: executing program 1 (id=10763): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x3d, &(0x7f0000000540)=0x8, 0x4) 3m26.643722658s ago: executing program 1 (id=10766): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002a00)={[{@dmask={'dmask', 0x3d, 0x8}}, {@namecase}, {@dmask={'dmask', 0x3d, 0x6}}, {@utf8}, {@dmask={'dmask', 0x3d, 0x80}}, {@keep_last_dots}, {@keep_last_dots}, {@sys_tz}, {@namecase}, {@keep_last_dots}]}, 0x1, 0x153b, &(0x7f0000000340)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 3m26.154227867s ago: executing program 1 (id=10770): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x80) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"ae42ffff", 0x4, 0x5, 0x4, 0x100, 0x1000, "000000ffff0600000800", '\x00', "05030400", '\x00', ['\x00', "6cb8ff080000000000fffd00", "f0ffffffffebffff00000010", "fdffffffff40b82dc44d00"]}) 3m25.331537935s ago: executing program 1 (id=10782): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x5a, 0xe4, 0xc4, 0x10, 0x596, 0x1, 0x5f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x0, 0x1, 0xb5, 0xe1, 0x45, 0x0, [], [{{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)={0x40, 0x5, 0x10, "7e8919dd3fd273b1dd33fd5f5c924477"}, 0x0, 0x0}) 3m24.858566473s ago: executing program 33 (id=10782): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x5a, 0xe4, 0xc4, 0x10, 0x596, 0x1, 0x5f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x0, 0x1, 0xb5, 0xe1, 0x45, 0x0, [], [{{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)={0x40, 0x5, 0x10, "7e8919dd3fd273b1dd33fd5f5c924477"}, 0x0, 0x0}) 2.827331975s ago: executing program 5 (id=13624): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0xd, 0x3, 0x1, 0x80000000}) 2.687023273s ago: executing program 5 (id=13627): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, 0x0, 0x0) 2.518517773s ago: executing program 5 (id=13631): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x100, 0x1, 0x1, 0xd, 0x10, 0x1, 0x2, 0x3, 0x20, 0x1, 0x20, 0x2000000, 0x0, 0x0, 0x0}) 2.320034695s ago: executing program 5 (id=13635): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) 2.208405851s ago: executing program 5 (id=13638): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000140)={0x101, "13f20afd86c17f9dfa507069d57c6684154bc7ec29052b9ec48e707a4f251dd9", 0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 2.089852838s ago: executing program 5 (id=13640): syz_usb_connect(0x1, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf5000905840274"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$mice(0xffffff9c, &(0x7f0000000140), 0x1ad100) 1.092252996s ago: executing program 0 (id=13654): r0 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000280)={0x4000000, 0x2, 0x0, 0x40, 0x0, 0x8}) 1.017865501s ago: executing program 4 (id=13657): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0xe}, {0x18, 0x110, 0x1, '\x00'}, {0x10, 0x10c, 0x5}], 0x38}, 0xfc40) 896.333728ms ago: executing program 0 (id=13658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000004c000000030a03000000000000000000030000000900030073797a30000000000900010073797a300000000014000480080002400000000008000140000000000b000700662666746572"], 0x94}}, 0x0) 758.547216ms ago: executing program 4 (id=13659): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x9, 0x12f, 0x9ae, 0x1, 0x6, 0xff, 0x8}, 0x1c) 758.001976ms ago: executing program 3 (id=13660): io_setup(0x3, &(0x7f0000000200)=0x0) io_pgetevents(r0, 0x7, 0x0, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={[0x1]}, 0x8}) 590.020455ms ago: executing program 4 (id=13661): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x22000c0, &(0x7f0000000080)={[{@codepage={'codepage', 0x3d, 'macceltic'}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}]}, 0x4, 0x335, &(0x7f0000000880)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) 589.660836ms ago: executing program 0 (id=13662): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000180)={0x0, 0xabdf, 0x7}) 509.482ms ago: executing program 3 (id=13663): r0 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000400)={0x0, 0x50424752, 0x2, @discrete={0xffffffff}}) 416.393426ms ago: executing program 4 (id=13664): r0 = socket$packet(0x11, 0x2, 0x300) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40) 410.026056ms ago: executing program 0 (id=13665): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000049c0)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0xbd2}}], 0x18, 0x44000}, 0x4000081) 376.783748ms ago: executing program 3 (id=13666): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0xfb, 0x53, 0x3, 0x58, @mcast1, @mcast2={0xff, 0x5}, 0x8, 0x40, 0xe3e1, 0xcfe}}) 273.177944ms ago: executing program 0 (id=13667): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x11e, 0x1, 0xffffffffffffffff, &(0x7f0000000540)) 272.345634ms ago: executing program 3 (id=13668): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x4, 0xffffffffffffffff, &(0x7f0000000c80)) 201.063088ms ago: executing program 4 (id=13669): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@gettaction={0x24, 0x30, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40011}, 0x4) 139.291852ms ago: executing program 3 (id=13670): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0xcc19, 0x10000, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 91.932645ms ago: executing program 0 (id=13671): r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f00000000c0)=""/17, 0x11) 90.877025ms ago: executing program 4 (id=13672): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") lstat(&(0x7f0000000640)='.\x02/file0\x00', 0x0) 0s ago: executing program 3 (id=13673): syz_mount_image$ocfs2(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x880, &(0x7f0000000280)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4454, &(0x7f000000cd80)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1380443, 0x0, 0x3, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): 5.347253][ T788] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1365.371561][ T788] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1365.379440][ T788] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1365.565418][ T788] usb 6-1: palm_os_3_probe - error -71 getting bytes available request [ 1365.587253][ T788] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 1365.609682][ T788] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1365.633163][ T788] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1365.634402][ T1122] netlink: 'syz.0.11848': attribute type 1 has an invalid length. [ 1365.669759][ T788] usb 6-1: USB disconnect, device number 5 [ 1365.701065][ T788] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1365.732055][ T788] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1365.765821][ T788] visor 6-1:1.0: device disconnected [ 1366.092279][ T1141] loop0: detected capacity change from 0 to 512 [ 1366.119414][ T1141] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.11857: inode has both inline data and extents flags [ 1366.119703][ T1144] loop4: detected capacity change from 0 to 256 [ 1366.149780][ T1141] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.11857: couldn't read orphan inode 15 (err -117) [ 1366.195716][ T1141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1366.300695][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1366.314741][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.334253][ T1147] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1366.582220][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1366.582235][ T27] audit: type=1326 audit(2000000044.141:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1155 comm="syz.4.11863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1366.653225][ T27] audit: type=1326 audit(2000000044.141:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1155 comm="syz.4.11863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1366.710762][ T27] audit: type=1326 audit(2000000044.141:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1155 comm="syz.4.11863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1366.766829][ T27] audit: type=1326 audit(2000000044.141:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1155 comm="syz.4.11863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1366.775424][ T1159] loop4: detected capacity change from 0 to 2048 [ 1366.793327][ T27] audit: type=1326 audit(2000000044.141:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1155 comm="syz.4.11863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1366.824526][ T1163] loop5: detected capacity change from 0 to 1024 [ 1366.856419][ T1163] EXT4-fs: Ignoring removed orlov option [ 1366.869510][ T1159] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1366.908422][ T1163] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1366.969405][ T1169] loop3: detected capacity change from 0 to 1024 [ 1367.191632][ T3001] hfsplus: b-tree write err: -5, ino 4 [ 1367.206088][T30813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1368.518665][ T1229] loop5: detected capacity change from 0 to 2048 [ 1368.556778][ T1229] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1368.567092][ T1231] loop4: detected capacity change from 0 to 1764 [ 1368.651035][ T1229] UDF-fs: error (device loop5): udf_read_inode: (ino 1345) failed !bh [ 1369.281905][ T1253] Cannot find del_set index 2 as target [ 1369.323506][ T1255] netlink: 'syz.3.11906': attribute type 3 has an invalid length. [ 1369.434286][ T1257] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 1369.482098][ T1257] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1370.028818][ T1283] __nla_validate_parse: 74 callbacks suppressed [ 1370.028836][ T1283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11920'. [ 1370.072513][ T1283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11920'. [ 1370.104311][ T1283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11920'. [ 1370.138115][ T1283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11920'. [ 1370.164662][ T1283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11920'. [ 1370.196731][ T1283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11920'. [ 1370.230554][ T1283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11920'. [ 1370.270869][ T1283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11920'. [ 1370.291030][ T1283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11920'. [ 1370.300438][ T1283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11920'. [ 1370.399590][ T1290] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 1370.448844][ T1290] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1370.569651][ T1278] loop0: detected capacity change from 0 to 32768 [ 1370.642250][ T1278] (syz.0.11917,1278,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1370.692227][ T1278] (syz.0.11917,1278,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1370.714756][ T1294] loop4: detected capacity change from 0 to 2048 [ 1370.765206][ T1294] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1370.802181][ T1278] JBD2: Ignoring recovery information on journal [ 1370.905232][ T1301] bridge5: entered promiscuous mode [ 1370.912984][ T1278] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1370.964563][ T1301] bridge5: entered allmulticast mode [ 1371.386432][ T5830] ocfs2: Unmounting device (7,0) on (node local) [ 1371.534244][ T1320] loop5: detected capacity change from 0 to 64 [ 1372.009425][ T27] audit: type=1400 audit(2000000049.152:206): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3AF6EFF374925873ECE44CF3460B0BA260624F2A08BDBB6D3C92592016EA4E0F401876B1958B3F9AA5153386EED838C49D3A pid=1337 comm="syz.4.11942" [ 1372.296375][ T27] audit: type=1326 audit(2000000049.410:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1349 comm="syz.4.11947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1372.330645][ T27] audit: type=1326 audit(2000000049.410:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1349 comm="syz.4.11947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1372.425054][ T27] audit: type=1326 audit(2000000049.419:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1349 comm="syz.4.11947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1372.509146][ T27] audit: type=1326 audit(2000000049.419:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1349 comm="syz.4.11947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1372.569568][ T27] audit: type=1326 audit(2000000049.419:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1349 comm="syz.4.11947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1372.602950][ T1362] loop0: detected capacity change from 0 to 64 [ 1372.658434][ T1362] Trying to free block not in datazone [ 1373.181288][ T1358] loop4: detected capacity change from 0 to 32768 [ 1373.863821][ T1400] netlink: 'syz.4.11972': attribute type 1 has an invalid length. [ 1373.883124][ T1400] netlink: 'syz.4.11972': attribute type 2 has an invalid length. [ 1374.229093][ T1413] autofs4:pid:1413:validate_dev_ioctl: path string terminator missing for cmd(0xc0189374) [ 1374.793778][ T1436] loop5: detected capacity change from 0 to 512 [ 1374.870430][ T1436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1374.904664][ T1436] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1375.024716][ T1436] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.11989: corrupted xattr block 33: invalid ea_ino [ 1375.047563][ T1436] fscrypt (loop5, inode 15): Error -117 getting encryption context [ 1375.125809][T30813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1375.204556][ T1445] QAT: Invalid ioctl 1076910120 [ 1375.303941][ T1447] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1375.362845][ T1447] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1375.793277][ T1463] loop0: detected capacity change from 0 to 1024 [ 1375.813303][ T1463] EXT4-fs: Ignoring removed mblk_io_submit option [ 1375.860410][ T1463] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1375.917543][ T1463] EXT4-fs error (device loop0): ext4_orphan_get:1424: comm syz.0.12000: bad orphan inode 11 [ 1375.956548][ T1463] ext4_test_bit(bit=10, block=4) = 1 [ 1375.962661][ T1463] is_bad_inode(inode)=0 [ 1375.966845][ T1463] NEXT_ORPHAN(inode)=3254779904 [ 1375.979393][ T1463] max_ino=32 [ 1375.986327][ T1463] i_nlink=0 [ 1375.994399][ T1463] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 2: comm syz.0.12000: lblock 2 mapped to illegal pblock 2 (length 1) [ 1376.045889][ T1463] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 1376.054068][ T1463] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 48: comm syz.0.12000: lblock 0 mapped to illegal pblock 48 (length 1) [ 1376.118590][ T1463] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 1376.149315][ T1463] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.12000: Failed to acquire dquot type 0 [ 1376.193491][ T1463] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 1376.229395][ T1463] EXT4-fs error (device loop0): ext4_evict_inode:252: inode #11: comm syz.0.12000: mark_inode_dirty error [ 1376.253393][ T1463] EXT4-fs warning (device loop0): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 1376.267944][ T1463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1376.361910][T22516] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 2: comm kworker/u4:3: lblock 2 mapped to illegal pblock 2 (length 1) [ 1376.424013][T22516] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 1376.434108][T22516] EXT4-fs error (device loop0): ext4_write_dquot:6929: comm kworker/u4:3: Failed to commit dquot type 0 [ 1376.477621][T22516] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 1376.540033][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1376.553409][ T5830] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1376.598991][ T5830] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 1376.617422][ T1491] ip6erspan0: entered promiscuous mode [ 1376.646688][ T5830] EXT4-fs error (device loop0): ext4_quota_off:7233: inode #3: comm syz-executor: mark_inode_dirty error [ 1376.667397][T19416] Bluetooth: hci0: command tx timeout [ 1376.832424][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1376.839015][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1376.934262][ T968] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1376.973732][ T1505] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1376.996283][ T1505] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1377.151254][ T968] usb 5-1: Using ep0 maxpacket: 8 [ 1377.175066][ T968] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1377.177251][ T968] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1377.177278][ T968] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1377.177297][ T968] usb 5-1: Product: syz [ 1377.177325][ T968] usb 5-1: Manufacturer: syz [ 1377.177371][ T968] usb 5-1: SerialNumber: syz [ 1377.188273][ T1513] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 1377.308653][ T1516] (unnamed net_device) (uninitialized): option ad_select: invalid value (4) [ 1377.427325][ T968] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1377.451599][ T968] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1377.486419][ T968] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1377.655362][ T968] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 1377.657410][ T1529] __nla_validate_parse: 70 callbacks suppressed [ 1377.657427][ T1529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12032'. [ 1377.674904][ T968] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 1377.712560][ T968] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1377.722150][ T1529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12032'. [ 1377.752007][ T968] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1377.758768][ T1529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12032'. [ 1377.789940][ T1529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12032'. [ 1377.805033][ T968] usb 5-1: USB disconnect, device number 6 [ 1377.814653][ T1529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12032'. [ 1377.828903][ T1529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12032'. [ 1377.834305][ T968] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1377.839126][ T1529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12032'. [ 1377.883893][ T1529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12032'. [ 1377.895460][ T1529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12032'. [ 1377.899329][ T968] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1377.905269][ T1529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12032'. [ 1377.945358][ T968] visor 5-1:1.0: device disconnected [ 1378.059192][ T1532] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1378.669166][ T1560] loop5: detected capacity change from 0 to 512 [ 1378.676380][ T1560] EXT4-fs: Ignoring removed nobh option [ 1378.744876][ T1560] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1378.776641][ T1560] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1378.806513][ T1560] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.12048: corrupted xattr block 33: bad e_name length [ 1378.901816][ T1560] EXT4-fs error (device loop5): ext4_get_inode_usage:888: inode #15: comm syz.5.12048: corrupted xattr block 33: bad e_name length [ 1379.067232][T30813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1379.383770][ T788] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 1379.428260][ T1583] loop5: detected capacity change from 0 to 4096 [ 1379.450133][ T1583] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 1379.527243][ T1589] loop0: detected capacity change from 0 to 512 [ 1379.547375][ T1589] EXT4-fs: Ignoring removed nobh option [ 1379.575333][ T1589] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 1379.580663][ T788] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1379.590767][ T1589] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.12061: attempt to clear invalid blocks 1 len 1 [ 1379.610043][ T1589] EXT4-fs (loop0): Remounting filesystem read-only [ 1379.621691][ T1589] EXT4-fs (loop0): 1 truncate cleaned up [ 1379.653197][ T1589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1379.669270][ T788] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 42769, setting to 64 [ 1379.716363][ T788] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1379.761918][ T788] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1379.762139][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1379.782442][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.812755][ T788] usb 4-1: Product: syz [ 1379.817786][ T788] usb 4-1: Manufacturer: syz [ 1379.822402][ T788] usb 4-1: SerialNumber: syz [ 1379.831566][ T788] usb 4-1: config 0 descriptor?? [ 1379.841115][ T788] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 1380.103520][ T788] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 1380.111141][ T1602] binder: BC_ATTEMPT_ACQUIRE not supported [ 1380.119821][ T788] snd_usb_toneport: probe of 4-1:0.0 failed with error -22 [ 1380.139468][ T1602] binder: 1601:1602 ioctl c0306201 2000000003c0 returned -22 [ 1380.303516][ T788] usb 4-1: USB disconnect, device number 82 [ 1380.799073][ T1629] netlink: 'syz.0.12078': attribute type 10 has an invalid length. [ 1380.910831][ T1629] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1381.068123][ T1633] loop5: detected capacity change from 0 to 4096 [ 1381.077277][ T1641] loop0: detected capacity change from 0 to 64 [ 1381.109931][ T1633] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 1381.210981][ T1633] ntfs3: loop5: Failed to initialize $Extend/$Reparse. [ 1381.337499][ T27] audit: type=1326 audit(2000000057.761:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1645 comm="syz.4.12088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1381.359880][ C1] vkms_vblank_simulate: vblank timer overrun [ 1381.464516][ T27] audit: type=1326 audit(2000000057.761:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1645 comm="syz.4.12088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1381.486875][ C1] vkms_vblank_simulate: vblank timer overrun [ 1381.541418][ T27] audit: type=1326 audit(2000000057.761:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1645 comm="syz.4.12088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1381.608708][ T27] audit: type=1326 audit(2000000057.761:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1645 comm="syz.4.12088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1381.631070][ C1] vkms_vblank_simulate: vblank timer overrun [ 1381.708784][ T27] audit: type=1326 audit(2000000057.761:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1645 comm="syz.4.12088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1381.757858][ T27] audit: type=1326 audit(2000000057.761:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1645 comm="syz.4.12088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1381.831618][ T27] audit: type=1326 audit(2000000057.761:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1645 comm="syz.4.12088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1381.836013][ T1666] netlink: 'syz.4.12096': attribute type 1 has an invalid length. [ 1381.930834][ T27] audit: type=1326 audit(2000000057.761:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1645 comm="syz.4.12088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1382.045422][ T1670] loop0: detected capacity change from 0 to 1024 [ 1382.094358][ T1670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1382.122869][ T1670] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #11: comm syz.0.12099: directory missing '..' [ 1382.242425][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1382.266746][ T1681] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 1382.385810][ T968] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1382.640676][ T968] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1382.665769][ T968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.699971][ T968] usb 5-1: Product: syz [ 1382.704195][ T968] usb 5-1: Manufacturer: syz [ 1382.708801][ T968] usb 5-1: SerialNumber: syz [ 1382.748462][ T968] r8152-cfgselector 5-1: config 0 descriptor?? [ 1382.887790][ T1694] loop0: detected capacity change from 0 to 8192 [ 1382.939253][ T1694] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1382.971239][ T1694] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1382.998157][ T1694] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1383.018476][ T1698] xt_bpf: check failed: parse error [ 1383.036211][ T1694] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1383.045088][ T1694] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1383.079451][ T1694] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1383.122782][ T1694] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1383.158501][ T1694] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1383.183451][ T1694] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1383.208404][ T1694] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1383.218856][ T968] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1383.236777][ T1694] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1383.238255][ T968] r8152-cfgselector 5-1: USB disconnect, device number 7 [ 1383.263654][ T27] audit: type=1800 audit(2000000059.541:220): pid=1694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.12109" name="file2" dev="loop0" ino=1048696 res=0 errno=0 [ 1383.366167][ T1689] loop3: detected capacity change from 0 to 32768 [ 1383.468305][ T1704] __nla_validate_parse: 79 callbacks suppressed [ 1383.468323][ T1704] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12113'. [ 1383.721231][ T1708] loop0: detected capacity change from 0 to 1024 [ 1383.766333][ T1708] syz.0.12116: attempt to access beyond end of device [ 1383.766333][ T1708] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1383.803296][ T1708] Buffer I/O error on dev loop0, logical block 2889, async page read [ 1383.838213][ T1708] syz.0.12116: attempt to access beyond end of device [ 1383.838213][ T1708] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1383.871145][ T1708] Buffer I/O error on dev loop0, logical block 2889, async page read [ 1383.892072][ T27] audit: type=1800 audit(2000000060.095:221): pid=1708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.12116" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 1383.922879][ T1708] hfsplus: can't free extent [ 1384.071761][ T1716] loop4: detected capacity change from 0 to 256 [ 1384.182809][ T1716] FAT-fs (loop4): Directory bread(block 64) failed [ 1384.209367][ T1716] FAT-fs (loop4): Directory bread(block 65) failed [ 1384.216662][ T1716] FAT-fs (loop4): Directory bread(block 66) failed [ 1384.244874][ T1716] FAT-fs (loop4): Directory bread(block 67) failed [ 1384.262797][ T1716] FAT-fs (loop4): Directory bread(block 68) failed [ 1384.269371][ T1716] FAT-fs (loop4): Directory bread(block 69) failed [ 1384.296966][ T1716] FAT-fs (loop4): Directory bread(block 70) failed [ 1384.303600][ T1716] FAT-fs (loop4): Directory bread(block 71) failed [ 1384.311170][ T1716] FAT-fs (loop4): Directory bread(block 72) failed [ 1384.318065][ T1716] FAT-fs (loop4): Directory bread(block 73) failed [ 1384.498994][ T28] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1384.523071][ T1728] loop3: detected capacity change from 0 to 256 [ 1384.611857][ T1728] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1384.667624][ T1728] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1384.705053][ T1728] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1384.717007][ T28] usb 6-1: Using ep0 maxpacket: 16 [ 1384.737414][ T28] usb 6-1: config 0 has an invalid interface number: 104 but max is 1 [ 1384.761794][ T28] usb 6-1: config 0 has an invalid interface number: 104 but max is 1 [ 1384.770398][ T1728] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 1384.790301][ T1736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12129'. [ 1384.791869][ T28] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1384.805756][ T1736] ip6tnl3: entered allmulticast mode [ 1384.835039][ T28] usb 6-1: config 0 has no interface number 0 [ 1384.845820][ T28] usb 6-1: config 0 interface 104 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 1384.888282][ T28] usb 6-1: config 0 interface 104 has no altsetting 1 [ 1384.902293][ T28] usb 6-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1384.912043][ T28] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.920098][ T28] usb 6-1: Product: syz [ 1384.940029][ T28] usb 6-1: Manufacturer: syz [ 1384.954166][ T28] usb 6-1: SerialNumber: syz [ 1384.978788][ T28] usb 6-1: config 0 descriptor?? [ 1385.023854][ T28] asix: probe of 6-1:0.104 failed with error -22 [ 1385.166379][ T1748] loop3: detected capacity change from 0 to 128 [ 1385.192880][ T1750] tmpfs: User quota block hardlimit too large. [ 1385.339503][ T968] usb 6-1: USB disconnect, device number 6 [ 1385.818373][ T1774] loop4: detected capacity change from 0 to 512 [ 1386.097908][ T1780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12150'. [ 1386.235420][ T1770] loop0: detected capacity change from 0 to 32768 [ 1386.299992][ T1770] ERROR: (device loop0): dbAllocAG: unable to allocate blocks [ 1386.299992][ T1770] [ 1386.753674][ T1798] loop5: detected capacity change from 0 to 64 [ 1387.386514][ T1816] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1387.503353][ T1802] loop3: detected capacity change from 0 to 32768 [ 1387.679555][ T1792] loop4: detected capacity change from 0 to 32768 [ 1387.692008][ T1822] loop5: detected capacity change from 0 to 256 [ 1387.708787][ T1792] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1387.717021][ T1792] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1387.757866][ T1822] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1387.792711][ T1792] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 1387.804047][ T1822] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1387.814784][ T1822] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1387.825395][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1387.825409][ T27] audit: type=1800 audit(2000000063.749:223): pid=1822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.12172" name="file1" dev="loop5" ino=1048700 res=0 errno=0 [ 1387.853415][ T1822] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 1387.858303][ T968] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1387.913770][ T968] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1388.009736][ T968] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 88ms [ 1388.035566][ T968] gfs2: fsid=syz:syz.0: jid=0: Done [ 1388.051833][ T1792] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1388.553020][ T27] audit: type=1326 audit(2000000064.413:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1842 comm="syz.0.12181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17cad9bf79 code=0x7ffc0000 [ 1388.591593][ T27] audit: type=1326 audit(2000000064.413:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1842 comm="syz.0.12181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17cad9bf79 code=0x7ffc0000 [ 1388.610931][ T1845] netlink: 'syz.3.12182': attribute type 2 has an invalid length. [ 1388.615277][ T27] audit: type=1326 audit(2000000064.450:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1842 comm="syz.0.12181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f17cad9bf79 code=0x7ffc0000 [ 1388.656862][ T1845] netlink: 'syz.3.12182': attribute type 1 has an invalid length. [ 1388.665481][ T1792] gfs2: fsid=syz:syz.0: found 1 quota changes [ 1388.725770][ T27] audit: type=1326 audit(2000000064.450:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1842 comm="syz.0.12181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17cad9bf79 code=0x7ffc0000 [ 1388.815255][ T27] audit: type=1326 audit(2000000064.450:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1842 comm="syz.0.12181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17cad9bf79 code=0x7ffc0000 [ 1388.988046][ T1852] sctp: [Deprecated]: syz.0.12185 (pid 1852) Use of int in maxseg socket option. [ 1388.988046][ T1852] Use struct sctp_assoc_value instead [ 1389.028895][T30004] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 1389.053898][T30004] CPU: 0 PID: 30004 Comm: syz-executor Not tainted syzkaller #0 [ 1389.061598][T30004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1389.071675][T30004] Call Trace: [ 1389.074951][T30004] [ 1389.077873][T30004] dump_stack_lvl+0x18c/0x250 [ 1389.082556][T30004] ? show_regs_print_info+0x20/0x20 [ 1389.087750][T30004] ? load_image+0x400/0x400 [ 1389.092249][T30004] ? do_raw_spin_unlock+0x121/0x230 [ 1389.097478][T30004] gfs2_assert_warn_i+0x193/0x2c0 [ 1389.102511][T30004] gfs2_qd_dispose+0x4aa/0x5b0 [ 1389.107394][T30004] gfs2_quota_cleanup+0x410/0x720 [ 1389.112416][T30004] ? spin_lock_bucket+0x150/0x150 [ 1389.117431][T30004] ? __might_sleep+0xe0/0xe0 [ 1389.122016][T30004] ? gfs2_ail_empty_tr+0x2f0/0x2f0 [ 1389.127130][T30004] ? gfs2_quota_sync+0x591/0x5a0 [ 1389.132066][T30004] gfs2_make_fs_ro+0x2aa/0x320 [ 1389.136824][T30004] ? gfs2_dinode_out+0xb10/0xb10 [ 1389.141755][T30004] ? __lock_acquire+0x7d40/0x7d40 [ 1389.146774][T30004] ? __rwlock_init+0x150/0x150 [ 1389.151536][T30004] ? do_raw_spin_unlock+0x121/0x230 [ 1389.156744][T30004] gfs2_put_super+0x224/0x930 [ 1389.161424][T30004] ? gfs2_evict_inode+0x1350/0x1350 [ 1389.166704][T30004] generic_shutdown_super+0x134/0x2b0 [ 1389.172074][T30004] kill_block_super+0x44/0x90 [ 1389.176745][T30004] deactivate_locked_super+0x97/0x100 [ 1389.182135][T30004] cleanup_mnt+0x43b/0x4d0 [ 1389.186565][T30004] task_work_run+0x1d4/0x260 [ 1389.191163][T30004] ? task_work_cancel+0x220/0x220 [ 1389.196186][T30004] ? exit_to_user_mode_loop+0x3b/0x110 [ 1389.201642][T30004] exit_to_user_mode_loop+0xe6/0x110 [ 1389.206927][T30004] exit_to_user_mode_prepare+0xee/0x180 [ 1389.212467][T30004] syscall_exit_to_user_mode+0x1a/0x50 [ 1389.217925][T30004] do_syscall_64+0x61/0xa0 [ 1389.222344][T30004] ? clear_bhb_loop+0x40/0x90 [ 1389.227019][T30004] ? clear_bhb_loop+0x40/0x90 [ 1389.231693][T30004] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1389.237578][T30004] RIP: 0033:0x7fe15699d1d7 [ 1389.241988][T30004] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1389.261593][T30004] RSP: 002b:00007ffccbea6bf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1389.270019][T30004] RAX: 0000000000000000 RBX: 00007fe156a31c3b RCX: 00007fe15699d1d7 [ 1389.277994][T30004] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffccbea6cb0 [ 1389.285959][T30004] RBP: 00007ffccbea6cb0 R08: 00007ffccbea7cb0 R09: 00000000ffffffff [ 1389.293926][T30004] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffccbea7d40 [ 1389.301892][T30004] R13: 00007fe156a31c3b R14: 000000000014029e R15: 00007ffccbea7d80 [ 1389.309876][T30004] [ 1389.326151][ T1835] loop5: detected capacity change from 0 to 32768 [ 1389.802105][ T1864] netlink: 460 bytes leftover after parsing attributes in process `syz.0.12193'. [ 1390.103856][ T1867] loop4: detected capacity change from 0 to 4096 [ 1390.131456][ T1867] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 1390.140061][ T1875] delete_channel: no stack [ 1390.188861][T19416] Bluetooth: hci1: command 0x0406 tx timeout [ 1390.927508][ T1879] loop0: detected capacity change from 0 to 32768 [ 1390.957784][ T1904] netlink: 'syz.3.12208': attribute type 64 has an invalid length. [ 1390.967653][ T1904] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12208'. [ 1390.986002][ T1904] netlink: 'syz.3.12208': attribute type 64 has an invalid length. [ 1391.008673][ T1879] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1391.027846][ T1904] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12208'. [ 1391.061433][ T1879] XFS (loop0): Ending clean mount [ 1391.186543][ T5830] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1391.446308][ T1919] netlink: 'syz.4.12214': attribute type 3 has an invalid length. [ 1391.454280][ T1919] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12214'. [ 1391.658297][ T1927] loop4: detected capacity change from 0 to 64 [ 1391.720538][ T27] audit: type=1800 audit(2000000067.338:229): pid=1927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.12217" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 1391.752637][ T1923] loop3: detected capacity change from 0 to 8192 [ 1391.816433][ T1923] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1392.061554][ T1936] loop3: detected capacity change from 0 to 2048 [ 1392.105394][ T1939] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1392.177780][ T1936] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1 [ 1392.240663][ T1936] Remounting filesystem read-only [ 1392.510628][T18776] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1392.727544][T18776] usb 5-1: Using ep0 maxpacket: 16 [ 1392.740418][T18776] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1392.761115][T18776] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.781606][T18776] usb 5-1: config 0 descriptor?? [ 1392.805495][T18776] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1393.028432][T18776] usb 5-1: Detected FT232B [ 1393.283044][T18776] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1393.294273][T18776] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1393.316821][T18776] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1393.346318][T18776] usb 5-1: USB disconnect, device number 8 [ 1393.386594][T18776] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1393.418673][T18776] ftdi_sio 5-1:0.0: device disconnected [ 1393.638408][ T1993] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1394.036234][ T788] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1394.253065][ T788] usb 1-1: Using ep0 maxpacket: 8 [ 1394.272967][ T788] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1394.296442][ T788] usb 1-1: config 179 has no interface number 0 [ 1394.302787][ T788] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1394.337980][ T788] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1394.380910][ T2030] loop5: detected capacity change from 0 to 1024 [ 1394.383072][ T788] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1394.426498][ T788] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1394.436911][ T788] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1394.503303][ T788] usb 1-1: config 179 interface 65 has no altsetting 0 [ 1394.512669][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1394.529762][ T788] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1394.550108][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.572468][ T2034] loop3: detected capacity change from 0 to 256 [ 1394.613710][ T788] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input103 [ 1394.654167][ T2034] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 196) [ 1394.685291][ T2034] FAT-fs (loop3): Filesystem has been set read-only [ 1394.832530][ T5829] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 196) [ 1394.834221][ T2040] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.12272'. [ 1395.025296][T18776] usb 1-1: USB disconnect, device number 85 [ 1395.025346][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1395.040515][T18776] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1395.214428][ T2050] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1395.545128][ T2065] netlink: 180 bytes leftover after parsing attributes in process `syz.5.12282'. [ 1395.759816][ T2074] netlink: 144 bytes leftover after parsing attributes in process `syz.4.12288'. [ 1395.795318][ T2075] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12290'. [ 1395.835384][ T2075] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1396.026176][ T2079] loop0: detected capacity change from 0 to 4096 [ 1396.055898][ T2089] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1396.071138][ T2079] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1396.116695][ T2079] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1396.150230][ T2079] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1396.199605][ T2079] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1396.257694][ T2093] tmpfs: Unknown parameter 'func' [ 1396.258526][ T2079] ntfs: volume version 3.1. [ 1396.307651][ T2079] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1396.328321][ T2079] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1396.352194][ T2079] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 1396.400358][ T2079] ntfs: (device loop0): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is missing. [ 1396.442313][ T2079] ntfs: (device loop0): ntfs_read_locked_index_inode(): Failed with error code -2 while reading index inode (mft_no 0x0, name_len 2. [ 1396.474293][ T2079] ntfs: (device loop0): load_and_init_quota(): Failed to load $Quota/$Q index. [ 1396.954678][ T2120] netlink: 264 bytes leftover after parsing attributes in process `syz.0.12311'. [ 1396.984916][ T2120] netlink: 264 bytes leftover after parsing attributes in process `syz.0.12311'. [ 1396.994340][ T2120] netlink: 175 bytes leftover after parsing attributes in process `syz.0.12311'. [ 1397.173096][ T2130] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode [ 1397.190098][ T2130] mac80211_hwsim hwsim17 wlan0: left allmulticast mode [ 1397.197181][ T2130] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1397.760485][ T2154] loop5: detected capacity change from 0 to 16 [ 1397.787269][ T2154] erofs: (device loop5): mounted with root inode @ nid 36. [ 1397.804015][ T2158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12329'. [ 1398.044779][ T2165] loop5: detected capacity change from 0 to 1024 [ 1398.072249][ T2165] hfsplus: bad catalog entry type [ 1398.163786][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1398.422298][ T2181] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1398.772815][ T2192] loop4: detected capacity change from 0 to 4096 [ 1398.822523][ T2192] ntfs: volume version 3.1. [ 1399.191415][ T2188] loop3: detected capacity change from 0 to 32768 [ 1399.224475][ T2188] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.12344 (2188) [ 1399.328857][ T2188] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1399.354361][ T2188] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 1399.375735][ T2188] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1399.387967][ T2194] loop0: detected capacity change from 0 to 32768 [ 1399.401275][ T2194] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.12346 (2194) [ 1399.407220][ T2188] BTRFS info (device loop3): use lzo compression, level 0 [ 1399.465982][ T2188] BTRFS info (device loop3): max_inline at 0 [ 1399.477102][ T2188] BTRFS info (device loop3): using free space tree [ 1399.482472][ T2194] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1399.511677][ T2194] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1399.542041][ T5826] Bluetooth: hci1: Malformed Event: 0x02 [ 1399.559265][ T2194] BTRFS info (device loop0): turning on flush-on-commit [ 1399.593404][ T2194] BTRFS info (device loop0): turning off barriers [ 1399.611796][ T2194] BTRFS info (device loop0): turning on sync discard [ 1399.628755][ T2194] BTRFS info (device loop0): using free space tree [ 1399.682719][ T2188] BTRFS info (device loop3): enabling ssd optimizations [ 1399.689773][ T2188] BTRFS info (device loop3): auto enabling async discard [ 1399.765302][ T2188] BTRFS error (device loop3: state M): unrecognized mount option 'ÿÿÿÿÿÿÿÿÿÿ0x0000000000000000ÿÿ18446744073709551615' [ 1399.872297][ T5829] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1400.065814][ T5830] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1400.293374][T24073] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by udevd (24073) [ 1400.301172][ T2247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12357'. [ 1400.351014][ T2247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12357'. [ 1400.877489][ T2263] netlink: 192436 bytes leftover after parsing attributes in process `syz.5.12363'. [ 1400.918241][ T2263] openvswitch: netlink: Message has 13056 unknown bytes. [ 1401.163966][ T2273] netlink: 'syz.3.12368': attribute type 15 has an invalid length. [ 1401.211263][ T2273] netlink: 666 bytes leftover after parsing attributes in process `syz.3.12368'. [ 1401.565860][ T2287] loop4: detected capacity change from 0 to 16 [ 1401.599099][ T2287] erofs: (device loop4): mounted with root inode @ nid 36. [ 1401.717522][ T2295] loop0: detected capacity change from 0 to 256 [ 1401.753820][ T2295] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1402.585130][ T2330] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12396'. [ 1402.900040][ T2345] netlink: 'syz.5.12404': attribute type 15 has an invalid length. [ 1402.916217][ T2344] loop0: detected capacity change from 0 to 2048 [ 1402.981593][ T2348] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1403.045323][ T2344] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 1403.084068][ T2344] Remounting filesystem read-only [ 1403.182969][ T2353] loop4: detected capacity change from 0 to 256 [ 1403.337672][ T2353] FAT-fs (loop4): Directory bread(block 64) failed [ 1403.370413][ T2353] FAT-fs (loop4): Directory bread(block 65) failed [ 1403.377109][ T2353] FAT-fs (loop4): Directory bread(block 66) failed [ 1403.420060][ T2353] FAT-fs (loop4): Directory bread(block 67) failed [ 1403.446532][ T2353] FAT-fs (loop4): Directory bread(block 68) failed [ 1403.464175][ T2353] FAT-fs (loop4): Directory bread(block 69) failed [ 1403.477558][ T2353] FAT-fs (loop4): Directory bread(block 70) failed [ 1403.484538][ T2353] FAT-fs (loop4): Directory bread(block 71) failed [ 1403.502241][ T2353] FAT-fs (loop4): Directory bread(block 72) failed [ 1403.510158][ T2353] FAT-fs (loop4): Directory bread(block 73) failed [ 1403.569686][ T2363] netlink: 'syz.5.12412': attribute type 10 has an invalid length. [ 1403.587073][ T2363] team0: Device vxcan1 is of different type [ 1403.644409][ T2346] loop3: detected capacity change from 0 to 32768 [ 1403.663601][ T2346] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.12402 (2346) [ 1403.741581][ T2346] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1403.775963][ T2346] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1403.787004][ T2346] BTRFS info (device loop3): using free space tree [ 1403.990904][ T2346] BTRFS info (device loop3): enabling ssd optimizations [ 1404.023689][ T2346] BTRFS info (device loop3): auto enabling async discard [ 1404.253732][ T5829] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1404.541056][ T5934] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (5934) [ 1405.215514][T18776] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1405.260295][ T2447] netlink: 36 bytes leftover after parsing attributes in process `syz.5.12438'. [ 1405.276813][ T2447] netlink: 36 bytes leftover after parsing attributes in process `syz.5.12438'. [ 1405.445155][ T2454] netlink: 292 bytes leftover after parsing attributes in process `syz.0.12439'. [ 1405.471399][T18776] usb 4-1: config 1 has an invalid interface number: 213 but max is 0 [ 1405.499367][T18776] usb 4-1: config 1 has no interface number 0 [ 1405.506081][T18776] usb 4-1: config 1 interface 213 has no altsetting 0 [ 1405.522383][T18776] usb 4-1: New USB device found, idVendor=0499, idProduct=5002, bcdDevice=2a.7a [ 1405.544895][T18776] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.553330][T18776] usb 4-1: Product: syz [ 1405.564314][T18776] usb 4-1: Manufacturer: 濦í„닫鼮㴩횠茶瞤歜ง๡䳲敯𿌼 [ 1405.579943][T18776] usb 4-1: SerialNumber: syz [ 1405.846852][T18776] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1405.920428][T18776] snd-usb-audio: probe of 4-1:1.213 failed with error -2 [ 1405.940959][T18776] usb 4-1: USB disconnect, device number 83 [ 1406.051803][ T5934] udevd[5934]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.213/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1406.163276][ T2453] loop5: detected capacity change from 0 to 32768 [ 1406.351624][ T2471] loop0: detected capacity change from 0 to 4096 [ 1406.448027][ T2471] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1406.516730][ T2471] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 1406.639775][ T2471] ntfs3: loop0: ino=5, "/" directory corrupted [ 1406.665303][ T2479] loop5: detected capacity change from 0 to 1764 [ 1406.880280][ T2488] netlink: 'syz.4.12455': attribute type 10 has an invalid length. [ 1406.926619][ T968] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1406.953187][ T2488] team0: Device ipvlan1 failed to register rx_handler [ 1407.162796][ T968] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1407.178283][ T968] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1407.215147][ T968] usb 4-1: config 220 has no interface number 2 [ 1407.221515][ T968] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1407.255799][ T968] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1407.263916][ T968] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1407.271536][ T968] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1407.291843][ T968] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1407.308498][ T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.335803][ T968] usb 4-1: Product: syz [ 1407.345583][ T968] usb 4-1: Manufacturer: syz [ 1407.350240][ T968] usb 4-1: SerialNumber: syz [ 1407.537284][ T2510] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1407.554135][ T2492] loop5: detected capacity change from 0 to 32768 [ 1407.616447][ T2492] [ 1407.616447][ T2492] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1407.616447][ T2492] [ 1407.658145][ T968] usb 4-1: selecting invalid altsetting 0 [ 1407.675772][ T968] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1407.712535][ T968] usb 4-1: No valid video chain found. [ 1407.742023][ T968] usb 4-1: selecting invalid altsetting 0 [ 1407.762035][ T968] usbtest: probe of 4-1:220.1 failed with error -22 [ 1407.776251][ T2492] jfs_rename: dtInsert returned -EIO [ 1407.786535][ T968] usb 4-1: USB disconnect, device number 84 [ 1407.813101][ T2516] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1407.877095][T30813] [ 1407.877095][T30813] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1407.877095][T30813] [ 1407.922120][ T2522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12467'. [ 1407.926861][T30813] [ 1407.926861][T30813] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1407.926861][T30813] [ 1408.224209][ T2530] netlink: 'syz.4.12472': attribute type 2 has an invalid length. [ 1408.274470][ T2537] loop0: detected capacity change from 0 to 2048 [ 1408.355299][ T2537] loop0: p1 p3 < > p4 < p5 > [ 1408.360073][ T2537] loop0: partition table partially beyond EOD, truncated [ 1408.363120][ T2539] loop5: detected capacity change from 0 to 16 [ 1408.381773][ T2537] loop0: p1 size 33024 extends beyond EOD, truncated [ 1408.403003][ T2537] loop0: p3 start 4284289 is beyond EOD, truncated [ 1408.413069][ T2539] erofs: (device loop5): mounted with root inode @ nid 36. [ 1408.427669][ T2537] loop0: p5 size 33024 extends beyond EOD, truncated [ 1408.733379][ T2552] loop0: detected capacity change from 0 to 2048 [ 1408.790259][ T2552] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1408.852322][ T968] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1408.920297][T24073] udevd[24073]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 1408.931702][T10700] udevd[10700]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 1409.061732][ T5934] udevd[5934]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 1409.090245][ T968] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1409.110397][ T968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.153985][ T968] usb 5-1: config 0 descriptor?? [ 1409.169944][ T968] cp210x 5-1:0.0: cp210x converter detected [ 1409.198784][ T2569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12487'. [ 1409.364266][ T2577] autofs4:pid:2577:autofs_fill_super: called with bogus options [ 1409.623302][ T968] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1409.648774][ T968] cp210x 5-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 1409.670576][ T968] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 1409.693250][ T968] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1409.709208][ T968] usb 5-1: USB disconnect, device number 9 [ 1409.718093][ T968] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1409.736500][ T968] cp210x 5-1:0.0: device disconnected [ 1409.978299][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 1409.978314][ T27] audit: type=1326 audit(2000000084.177:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2606 comm="syz.3.12502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ff39bf79 code=0x7ffc0000 [ 1410.030486][ T27] audit: type=1326 audit(2000000084.177:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2606 comm="syz.3.12502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ff39bf79 code=0x7ffc0000 [ 1410.060466][ T27] audit: type=1326 audit(2000000084.224:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2606 comm="syz.3.12502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fe9ff39bf79 code=0x7ffc0000 [ 1410.091999][ T27] audit: type=1326 audit(2000000084.224:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2606 comm="syz.3.12502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ff39bf79 code=0x7ffc0000 [ 1410.133251][ T27] audit: type=1326 audit(2000000084.224:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2606 comm="syz.3.12502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ff39bf79 code=0x7ffc0000 [ 1410.684965][ T2640] loop5: detected capacity change from 0 to 2048 [ 1410.768707][ T2640] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1410.820830][ T2640] ext4 filesystem being mounted at /442/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1410.899220][ T2640] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.12516: bg 0: block 345: padding at end of block bitmap is not set [ 1410.985121][ T2640] EXT4-fs (loop5): Remounting filesystem read-only [ 1411.014085][ T2640] EXT4-fs warning (device loop5): ext4_xattr_inode_lookup_create:1607: inode #18: comm syz.5.12516: cleanup dec ref error -117 [ 1411.101665][T30813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1411.276519][ T2667] loop4: detected capacity change from 0 to 8192 [ 1411.323397][ T2667] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1411.367898][ T2667] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 1411.378332][ T2676] netlink: 'syz.3.12528': attribute type 21 has an invalid length. [ 1411.417926][ T2667] REISERFS (device loop4): using ordered data mode [ 1411.470739][ T2667] reiserfs: using flush barriers [ 1411.495805][ T2667] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1411.556077][ T2667] REISERFS (device loop4): checking transaction log (loop4) [ 1411.666833][ T2690] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.12533'. [ 1411.797299][ T27] audit: type=1326 audit(2000000085.857:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2691 comm="syz.3.12534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ff39bf79 code=0x7ffc0000 [ 1411.855426][ T2667] REISERFS (device loop4): Using tea hash to sort names [ 1411.889222][ T2667] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1411.896844][ T27] audit: type=1326 audit(2000000085.857:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2691 comm="syz.3.12534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ff39bf79 code=0x7ffc0000 [ 1412.006954][ T27] audit: type=1326 audit(2000000085.866:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2691 comm="syz.3.12534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fe9ff39bf79 code=0x7ffc0000 [ 1412.089076][ T27] audit: type=1326 audit(2000000085.866:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2691 comm="syz.3.12534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ff39bf79 code=0x7ffc0000 [ 1412.153474][ T27] audit: type=1326 audit(2000000085.866:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2691 comm="syz.3.12534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ff39bf79 code=0x7ffc0000 [ 1412.453355][ T2714] loop4: detected capacity change from 0 to 2048 [ 1412.490108][ T2714] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 1412.532870][ T2714] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1412.603079][ T2714] UDF-fs: unknown compression code (0) [ 1412.884364][ T2705] loop5: detected capacity change from 0 to 32768 [ 1413.060863][ T2735] loop4: detected capacity change from 0 to 256 [ 1413.119087][ T2735] FAT-fs (loop4): Directory bread(block 64) failed [ 1413.146353][ T2735] FAT-fs (loop4): Directory bread(block 65) failed [ 1413.153053][ T2735] FAT-fs (loop4): Directory bread(block 66) failed [ 1413.203004][ T2735] FAT-fs (loop4): Directory bread(block 67) failed [ 1413.220550][ T2735] FAT-fs (loop4): Directory bread(block 68) failed [ 1413.227159][ T2735] FAT-fs (loop4): Directory bread(block 69) failed [ 1413.248766][ T2739] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1413.263398][ T2735] FAT-fs (loop4): Directory bread(block 70) failed [ 1413.269970][ T2735] FAT-fs (loop4): Directory bread(block 71) failed [ 1413.310861][ T2735] FAT-fs (loop4): Directory bread(block 72) failed [ 1413.321720][ T2735] FAT-fs (loop4): Directory bread(block 73) failed [ 1414.302285][ T2776] loop3: detected capacity change from 0 to 64 [ 1414.972351][ T2817] netlink: 'syz.3.12582': attribute type 29 has an invalid length. [ 1414.981107][ T2817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12582'. [ 1415.005241][ T2817] netlink: 'syz.3.12582': attribute type 29 has an invalid length. [ 1415.046049][ T2817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12582'. [ 1415.493369][ T2845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12593'. [ 1415.535452][ T2838] loop4: detected capacity change from 0 to 4096 [ 1415.561767][ T2838] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1415.571234][ T2847] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12594'. [ 1415.652978][ T2820] loop0: detected capacity change from 0 to 32768 [ 1415.712123][ T2820] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 1415.843644][ T2851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12596'. [ 1415.996830][T24073] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 1417.058981][ T2869] loop3: detected capacity change from 0 to 32768 [ 1417.103402][ T2869] [ 1417.103402][ T2869] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1417.103402][ T2869] [ 1417.170320][ T2869] [ 1417.170320][ T2869] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1417.170320][ T2869] [ 1417.196615][ T2906] netlink: 180 bytes leftover after parsing attributes in process `syz.5.12620'. [ 1417.205944][ T2869] [ 1417.205944][ T2869] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1417.205944][ T2869] [ 1417.209204][ T2905] loop4: detected capacity change from 0 to 764 [ 1417.224154][ T2869] [ 1417.224154][ T2869] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1417.224154][ T2869] [ 1417.249117][ T2905] rock: directory entry would overflow storage [ 1417.265389][ T2905] rock: sig=0x4654, size=5, remaining=4 [ 1417.272434][ T2869] [ 1417.272434][ T2869] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1417.272434][ T2869] [ 1417.317166][ T114] [ 1417.317166][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1417.317166][ T114] [ 1417.335201][ T2905] isofs: Unable to find the ".." directory for NFS. [ 1417.447125][ T5829] [ 1417.447125][ T5829] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1417.447125][ T5829] [ 1417.482131][ T5829] [ 1417.482131][ T5829] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1417.482131][ T5829] [ 1418.025171][ T2928] xt_limit: Overflow, try lower: 2147483649/3300 [ 1418.197667][ T2912] loop5: detected capacity change from 0 to 32768 [ 1418.629377][ T2947] loop3: detected capacity change from 0 to 8 [ 1418.636493][ T2947] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1418.689207][T24073] udevd[24073]: incorrect cramfs checksum on /dev/loop3 [ 1418.754967][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 1418.754982][ T27] audit: type=1326 audit(2000000092.279:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2949 comm="syz.4.12643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1418.774986][T24073] udevd[24073]: incorrect cramfs checksum on /dev/loop3 [ 1419.733908][ T2993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12663'. [ 1419.758824][ T2993] netlink: 540 bytes leftover after parsing attributes in process `syz.3.12663'. [ 1420.277552][ T3016] tmpfs: Bad value for 'mpol' [ 1420.460766][ T3026] netlink: 188 bytes leftover after parsing attributes in process `syz.4.12679'. [ 1421.010458][ T3021] loop5: detected capacity change from 0 to 32768 [ 1421.033421][ T3021] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 1421.068941][ T3048] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12690'. [ 1421.216896][ T5934] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 1421.240809][ T3053] trusted_key: encrypted_key: master key parameter is missing [ 1421.615674][ T3066] sock: sock_timestamping_bind_phc: sock not bind to device [ 1421.854430][ T27] audit: type=1326 audit(2000000095.139:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3075 comm="syz.4.12704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1421.959418][ T27] audit: type=1326 audit(2000000095.158:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3075 comm="syz.4.12704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1421.973329][ T3074] loop3: detected capacity change from 0 to 4096 [ 1422.027109][ T27] audit: type=1326 audit(2000000095.167:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3075 comm="syz.4.12704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1422.038453][ T3074] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1422.060108][ T3083] netlink: 96 bytes leftover after parsing attributes in process `syz.5.12707'. [ 1422.088897][ T3080] loop0: detected capacity change from 0 to 4096 [ 1422.119042][ T3080] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1422.151032][ T27] audit: type=1326 audit(2000000095.167:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3075 comm="syz.4.12704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1422.185393][ T27] audit: type=1326 audit(2000000095.167:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3075 comm="syz.4.12704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1422.329787][ T3074] ntfs3: loop3: failed to convert "c46c" to maccroatian [ 1422.376912][ T3080] ntfs3: loop0: failed to convert "c46c" to cp855 [ 1422.569199][ T3095] binder: 3094:3095 ioctl c018620c 200000001180 returned -22 [ 1422.659512][ T5877] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1422.807629][ T3104] loop3: detected capacity change from 0 to 256 [ 1422.834749][ T3106] kAFS: unable to lookup cell '' [ 1422.877681][ T5877] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1422.889895][ T3104] FAT-fs (loop3): Directory bread(block 64) failed [ 1422.896496][ T3104] FAT-fs (loop3): Directory bread(block 65) failed [ 1422.915995][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 1422.932215][ T3104] FAT-fs (loop3): Directory bread(block 66) failed [ 1422.938691][ T5877] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1422.958473][ T3104] FAT-fs (loop3): Directory bread(block 67) failed [ 1422.964056][ T5877] usb 5-1: language id specifier not provided by device, defaulting to English [ 1422.967508][ T3104] FAT-fs (loop3): Directory bread(block 68) failed [ 1422.981117][ T3104] FAT-fs (loop3): Directory bread(block 69) failed [ 1422.988694][ T3104] FAT-fs (loop3): Directory bread(block 70) failed [ 1422.997035][ T3104] FAT-fs (loop3): Directory bread(block 71) failed [ 1423.002604][ T5877] usb 5-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 1423.003669][ T3104] FAT-fs (loop3): Directory bread(block 72) failed [ 1423.028223][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.046518][ T5877] usb 5-1: Manufacturer: ‰ [ 1423.064431][ T3104] FAT-fs (loop3): Directory bread(block 73) failed [ 1423.070480][ T5877] usb 5-1: SerialNumber: syz [ 1423.083796][ T5877] usb 5-1: config 0 descriptor?? [ 1423.095881][ T5877] em28xx 5-1:0.0: New device ‰ @ 480 Mbps (2013:0251, interface 0, class 0) [ 1423.113629][ T5877] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1423.396557][ T5877] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1423.416826][ T5877] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1423.449976][ T5877] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1423.456981][ T5877] em28xx 5-1:0.0: No AC97 audio processor [ 1423.483623][ T5877] usb 5-1: USB disconnect, device number 10 [ 1423.505994][ T5877] em28xx 5-1:0.0: Disconnecting em28xx [ 1423.531050][ T5877] em28xx 5-1:0.0: Freeing device [ 1424.179487][ T3143] loop4: detected capacity change from 0 to 512 [ 1424.279032][ T3143] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1424.334563][ T3150] loop5: detected capacity change from 0 to 256 [ 1424.343529][ T3143] ext4 filesystem being mounted at /544/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1424.405244][ T3150] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f41, chksum : 0x31e44978, utbl_chksum : 0xe619d30d) [ 1424.595529][T30004] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1424.824877][ T3163] loop0: detected capacity change from 0 to 164 [ 1425.094532][ T3174] loop4: detected capacity change from 0 to 512 [ 1425.152388][ T3174] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0022] [ 1425.195001][ T3174] System zones: 1-12 [ 1425.199346][ T3174] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.12749: Directory hole found for htree index block 0 [ 1425.238398][ T3174] EXT4-fs (loop4): Remounting filesystem read-only [ 1425.246373][ T3174] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 1425.319344][ T3174] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 1425.343520][ T3174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1425.552708][ T3189] loop5: detected capacity change from 0 to 4096 [ 1425.574540][ T3189] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 1425.658034][ T3174] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 1425.724040][ T3189] ntfs3: loop5: failed to convert "c46c" to cp862 [ 1425.940381][T30004] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1426.416135][ T3215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12768'. [ 1426.462774][ T3215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12768'. [ 1426.471870][ T3215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12768'. [ 1426.787350][ T3232] loop3: detected capacity change from 0 to 164 [ 1427.253267][ T3252] ubi0: attaching mtd0 [ 1427.271215][ T3252] ubi0 error: ubi_attach_mtd_dev: bad VID header (37978) or data offsets (38042) [ 1427.520602][ T3266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12793'. [ 1427.611965][ T28] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1427.817557][ T28] usb 5-1: Using ep0 maxpacket: 32 [ 1427.832353][ T28] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1427.842060][ T28] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.852977][ T28] usb 5-1: Product: syz [ 1427.857172][ T28] usb 5-1: Manufacturer: syz [ 1427.865110][ T28] usb 5-1: SerialNumber: syz [ 1427.875470][ T28] usb 5-1: config 0 descriptor?? [ 1427.975770][ T3282] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.12801'. [ 1427.985807][ T3282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1428.113190][ T28] airspy 5-1:0.0: usb_control_msg() failed -71 request 09 [ 1428.128946][ T28] airspy 5-1:0.0: Could not detect board [ 1428.135085][ T28] airspy: probe of 5-1:0.0 failed with error -71 [ 1428.144937][ T28] usb 5-1: USB disconnect, device number 11 [ 1428.351844][ T3294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12807'. [ 1428.863547][ T3315] ip6erspan0: entered allmulticast mode [ 1428.927882][ T3317] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12818'. [ 1428.943478][ T3317] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12818'. [ 1428.954732][ T3317] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12818'. [ 1428.973716][ T3321] loop5: detected capacity change from 0 to 256 [ 1429.070458][ T3321] FAT-fs (loop5): Directory bread(block 64) failed [ 1429.094206][ T3321] FAT-fs (loop5): Directory bread(block 65) failed [ 1429.101367][ T3321] FAT-fs (loop5): Directory bread(block 66) failed [ 1429.121945][ T3321] FAT-fs (loop5): Directory bread(block 67) failed [ 1429.139956][ T3321] FAT-fs (loop5): Directory bread(block 68) failed [ 1429.172342][ T3321] FAT-fs (loop5): Directory bread(block 69) failed [ 1429.189017][ T3321] FAT-fs (loop5): Directory bread(block 70) failed [ 1429.213046][ T3321] FAT-fs (loop5): Directory bread(block 71) failed [ 1429.231402][ T3321] FAT-fs (loop5): Directory bread(block 72) failed [ 1429.258946][ T3321] FAT-fs (loop5): Directory bread(block 73) failed [ 1429.538451][ T3342] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12830'. [ 1429.556350][ T3342] netlink: 'syz.5.12830': attribute type 3 has an invalid length. [ 1429.594926][ T28] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1429.791683][ T28] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1429.813322][ T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.829998][ T28] usb 5-1: config 0 descriptor?? [ 1429.858210][ T3353] netlink: 'syz.3.12835': attribute type 10 has an invalid length. [ 1429.895703][ T28] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1430.128830][ T3353] team0 (unregistering): Port device team_slave_0 removed [ 1430.157318][ T3353] team0 (unregistering): Port device team_slave_1 removed [ 1430.233314][ T3353] team0 (unregistering): Port device virt_wifi0 removed [ 1430.262701][ T3353] team0 (unregistering): Port device dummy0 removed [ 1430.316434][ T28] gspca_spca508: reg_read err -71 [ 1430.327277][ T28] gspca_spca508: reg_read err -71 [ 1430.343061][ T28] gspca_spca508: reg_read err -71 [ 1430.354357][ T28] gspca_spca508: reg_read err -71 [ 1430.361090][ T28] gspca_spca508: reg write: error -71 [ 1430.374129][ T28] spca508: probe of 5-1:0.0 failed with error -71 [ 1430.406685][ T28] usb 5-1: USB disconnect, device number 12 [ 1430.535042][ T3357] loop5: detected capacity change from 0 to 32768 [ 1431.136423][ T3399] netlink: 'syz.4.12855': attribute type 6 has an invalid length. [ 1431.973066][ T3433] loop0: detected capacity change from 0 to 256 [ 1432.053567][ T3433] FAT-fs (loop0): Directory bread(block 64) failed [ 1432.090076][ T3439] __nla_validate_parse: 5 callbacks suppressed [ 1432.090093][ T3439] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12873'. [ 1432.098342][ T3433] FAT-fs (loop0): Directory bread(block 65) failed [ 1432.141992][ T3433] FAT-fs (loop0): Directory bread(block 66) failed [ 1432.148750][ T3433] FAT-fs (loop0): Directory bread(block 67) failed [ 1432.163630][ T3439] netlink: 'syz.5.12873': attribute type 1 has an invalid length. [ 1432.176975][ T3433] FAT-fs (loop0): Directory bread(block 68) failed [ 1432.196007][ T3439] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12873'. [ 1432.216365][ T3433] FAT-fs (loop0): Directory bread(block 69) failed [ 1432.239643][ T3433] FAT-fs (loop0): Directory bread(block 70) failed [ 1432.246238][ T3433] FAT-fs (loop0): Directory bread(block 71) failed [ 1432.285794][ T3433] FAT-fs (loop0): Directory bread(block 72) failed [ 1432.326459][ T3433] FAT-fs (loop0): Directory bread(block 73) failed [ 1432.351353][ T3445] netlink: 'syz.4.12877': attribute type 3 has an invalid length. [ 1432.380387][ T3447] netlink: 'syz.3.12878': attribute type 6 has an invalid length. [ 1432.388455][ T3445] netlink: 'syz.4.12877': attribute type 1 has an invalid length. [ 1432.402111][ T3449] vlan1: entered allmulticast mode [ 1432.406838][ T3445] netlink: 216 bytes leftover after parsing attributes in process `syz.4.12877'. [ 1432.408337][ T3449] veth0_vlan: entered allmulticast mode [ 1432.443283][ T3445] NCSI netlink: No device for ifindex 33022 [ 1433.047814][ T3469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12889'. [ 1433.203857][ T788] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1433.432248][ T788] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 1433.440521][ T788] usb 4-1: config 0 has no interface number 0 [ 1433.456704][ T788] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1433.485267][ T788] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1433.512606][ T788] usb 4-1: config 0 interface 255 has no altsetting 0 [ 1433.525533][ T788] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1433.538444][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.581342][ T788] usb 4-1: config 0 descriptor?? [ 1433.591803][ T788] ums-realtek 4-1:0.255: USB Mass Storage device detected [ 1433.631738][ T3492] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12898'. [ 1433.766893][ T3496] loop4: detected capacity change from 0 to 512 [ 1433.825048][ T3496] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1433.863776][ T28] usb 4-1: USB disconnect, device number 85 [ 1433.923794][ T3496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1433.941414][ T3505] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12904'. [ 1433.941475][ T3500] loop0: detected capacity change from 0 to 256 [ 1433.999786][ T3496] ext4 filesystem being mounted at /570/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1434.046789][ T3507] loop5: detected capacity change from 0 to 4096 [ 1434.064008][ T3500] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x19066d23, utbl_chksum : 0xe619d30d) [ 1434.087794][ T3507] ntfs: (device loop5): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2. [ 1434.117809][ T3496] EXT4-fs error (device loop4): ext4_get_verity_descriptor_location:335: inode #15: comm syz.4.12902: verity file corrupted; can't find descriptor [ 1434.131698][ T3507] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1434.156206][ T3496] EXT4-fs (loop4): Remounting filesystem read-only [ 1434.190929][ T3496] fs-verity (loop4, inode 15): Error -117 getting verity descriptor size [ 1434.262625][ T3507] ntfs: volume version 3.1. [ 1434.279416][ T3507] ntfs: (device loop5): map_mft_record_page(): Mft record 0x2 is corrupt. Run chkdsk. [ 1434.306263][T30004] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1434.317550][ T3507] ntfs: (device loop5): map_mft_record(): Failed with error code 5. [ 1434.354370][ T3507] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 1434.385177][ T3507] ntfs: (device loop5): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1434.545975][ T3507] ntfs: (device loop5): ntfs_read_locked_inode(): Index block size (0) < NTFS_BLOCK_SIZE (512) is not supported. Sorry. [ 1434.622049][ T3507] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -95. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 1434.926018][ T3521] [U] „ [ 1435.086592][ T3509] loop0: detected capacity change from 0 to 32768 [ 1435.166699][ T3509] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1435.423397][ T3509] XFS (loop0): Ending clean mount [ 1435.642139][ T5830] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1436.141680][ T3574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12934'. [ 1436.387704][ T3583] loop4: detected capacity change from 0 to 1024 [ 1436.556856][T14613] hfsplus: b-tree write err: -5, ino 4 [ 1436.618172][ T3592] netlink: 'syz.5.12942': attribute type 10 has an invalid length. [ 1436.937865][ T3604] loop3: detected capacity change from 0 to 1024 [ 1436.975958][ T3592] team0 (unregistering): Port device team_slave_0 removed [ 1437.004051][ T3604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1437.031042][ T3592] team0 (unregistering): Port device team_slave_1 removed [ 1437.080348][ T3604] ext4 filesystem being mounted at /3285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1437.425118][ T3608] loop4: detected capacity change from 0 to 4096 [ 1437.426214][ T5927] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1437.442881][ T3608] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 1437.658207][ T5927] usb 4-1: Using ep0 maxpacket: 8 [ 1437.694711][ T5927] usb 4-1: config 4 has an invalid interface number: 244 but max is 0 [ 1437.724136][ T5927] usb 4-1: config 4 has no interface number 0 [ 1437.738012][ T5927] usb 4-1: config 4 interface 244 altsetting 1 endpoint 0x1 has an invalid bInterval 41, changing to 7 [ 1437.767372][ T5927] usb 4-1: config 4 interface 244 altsetting 1 endpoint 0x2 has invalid maxpacket 65267, setting to 1024 [ 1437.812967][ T5927] usb 4-1: config 4 interface 244 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1437.836318][ T5927] usb 4-1: config 4 interface 244 has no altsetting 0 [ 1437.850780][ T5927] usb 4-1: New USB device found, idVendor=05ac, idProduct=fa33, bcdDevice=cb.aa [ 1437.883381][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.894445][ T5927] usb 4-1: Product: syz [ 1437.901477][ T5927] usb 4-1: Manufacturer: syz [ 1437.914112][ T3621] loop0: detected capacity change from 0 to 64 [ 1437.921358][ T5927] usb 4-1: SerialNumber: syz [ 1437.947612][ T3604] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1437.961284][ T3622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12957'. [ 1438.206524][ T5927] ipheth 4-1:4.244: Unable to find endpoints [ 1438.233994][ T5927] usb 4-1: USB disconnect, device number 86 [ 1438.359811][ T3632] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12962'. [ 1438.938271][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1439.701163][ T3663] loop4: detected capacity change from 0 to 32768 [ 1440.185067][ T3703] netlink: 'syz.0.12998': attribute type 7 has an invalid length. [ 1440.193147][ T3703] netlink: 'syz.0.12998': attribute type 8 has an invalid length. [ 1440.270148][ T5927] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1440.350642][ T3706] loop5: detected capacity change from 0 to 128 [ 1440.397754][ T3706] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1440.417035][ T3709] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 1440.424620][ T3711] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 1440.443636][ T3706] ext4 filesystem being mounted at /563/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1440.454535][ T3711] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 1440.475470][ T5927] usb 4-1: config 1 has an invalid interface number: 28 but max is 0 [ 1440.504241][ T5927] usb 4-1: config 1 has no interface number 0 [ 1440.515778][ T3706] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #2: comm syz.5.13000: No space for directory leaf checksum. Please run e2fsck -D. [ 1440.534484][ T5927] usb 4-1: config 1 interface 28 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1440.542268][ T3706] EXT4-fs error (device loop5): __ext4_find_entry:1696: inode #2: comm syz.5.13000: checksumming directory block 0 [ 1440.549236][ T5927] usb 4-1: config 1 interface 28 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 0 [ 1440.597501][ T5927] usb 4-1: config 1 interface 28 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 1440.611324][ T5927] usb 4-1: config 1 interface 28 has no altsetting 0 [ 1440.621769][ T5927] usb 4-1: New USB device found, idVendor=045e, idProduct=0473, bcdDevice=e4.34 [ 1440.640708][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.648796][ T5927] usb 4-1: Product: syz [ 1440.659458][T30813] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1440.663868][ T5927] usb 4-1: Manufacturer: syz [ 1440.675826][ T3715] loop0: detected capacity change from 0 to 256 [ 1440.755794][ T5927] usb 4-1: SerialNumber: syz [ 1440.790901][ T3693] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1440.813738][ T5927] ipaq 4-1:1.28: PocketPC PDA converter detected [ 1441.045802][ T5927] usb 4-1: PocketPC PDA converter now attached to ttyUSB0 [ 1441.365086][ T5927] usb 4-1: USB disconnect, device number 87 [ 1441.442271][ T3739] usb usb8: usbfs: process 3739 (syz.5.13015) did not claim interface 0 before use [ 1441.472857][ T5927] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 1441.495582][ T5927] ipaq 4-1:1.28: device disconnected [ 1441.876016][ T3757] xt_TCPMSS: Only works on TCP SYN packets [ 1442.489325][ T3787] loop5: detected capacity change from 0 to 16 [ 1442.522057][ T3787] erofs: (device loop5): mounted with root inode @ nid 36. [ 1442.573495][ T3787] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639] [ 1442.616902][ T3787] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 39 of nid 36 [ 1442.745378][ T3795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13042'. [ 1442.753086][ T3797] libceph: resolve '0.' (ret=-3): failed [ 1443.086608][ T3808] loop3: detected capacity change from 0 to 512 [ 1443.101831][ T3808] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1443.140279][ T3808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1443.159534][ T3808] ext4 filesystem being mounted at /3298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1443.280290][ T3814] loop5: detected capacity change from 0 to 256 [ 1443.327779][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1443.421235][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1443.431116][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1443.447807][ T3814] FAT-fs (loop5): Directory bread(block 64) failed [ 1443.454429][ T3814] FAT-fs (loop5): Directory bread(block 65) failed [ 1443.477604][ T3814] FAT-fs (loop5): Directory bread(block 66) failed [ 1443.486239][ T3814] FAT-fs (loop5): Directory bread(block 67) failed [ 1443.494031][ T3814] FAT-fs (loop5): Directory bread(block 68) failed [ 1443.554098][ T3814] FAT-fs (loop5): Directory bread(block 69) failed [ 1443.560910][ T3814] FAT-fs (loop5): Directory bread(block 70) failed [ 1443.597291][ T3814] FAT-fs (loop5): Directory bread(block 71) failed [ 1443.604009][ T3814] FAT-fs (loop5): Directory bread(block 72) failed [ 1443.631162][ T3814] FAT-fs (loop5): Directory bread(block 73) failed [ 1443.897349][ T3833] loop3: detected capacity change from 0 to 1024 [ 1444.020706][ T5927] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1444.031946][ T79] hfsplus: b-tree write err: -5, ino 4 [ 1444.215244][ T5927] usb 5-1: Using ep0 maxpacket: 32 [ 1444.222580][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1444.237475][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1444.263808][ T5927] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1444.302121][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.328514][ T5927] usb 5-1: config 0 descriptor?? [ 1444.351632][ T5927] hub 5-1:0.0: USB hub found [ 1444.571514][ T5927] hub 5-1:0.0: 1 port detected [ 1444.793929][ T5927] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 1444.809418][ T5927] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 1444.834398][ T5927] usbhid 5-1:0.0: can't add hid device: -71 [ 1444.840468][ T5927] usbhid: probe of 5-1:0.0 failed with error -71 [ 1444.890610][ T3861] loop3: detected capacity change from 0 to 64 [ 1444.898785][ T5927] usb 5-1: USB disconnect, device number 13 [ 1445.123494][ T3845] loop5: detected capacity change from 0 to 40427 [ 1445.144489][ T3845] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1445.154028][ T3845] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1445.167950][ T3845] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1445.311539][ T3845] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1445.318646][ T3845] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1445.537238][ T5927] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1445.659818][ T3883] netlink: 2184 bytes leftover after parsing attributes in process `syz.5.13080'. [ 1445.676345][ T3883] netlink: 144 bytes leftover after parsing attributes in process `syz.5.13080'. [ 1445.736848][ T5927] usb 1-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1445.775820][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.800678][ T5927] usb 1-1: Product: syz [ 1445.804897][ T5927] usb 1-1: Manufacturer: syz [ 1445.825183][ T5927] usb 1-1: SerialNumber: syz [ 1445.862266][ T5927] usb 1-1: config 0 descriptor?? [ 1445.886253][ T5927] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1446.334541][ T788] usb 1-1: USB disconnect, device number 86 [ 1446.512020][ T3914] autofs4:pid:3914:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2147483646), cmd(0xc0189375) [ 1446.583666][ T3914] autofs4:pid:3914:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 1446.859530][ T5927] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1446.972781][ T3932] netlink: 'syz.4.13103': attribute type 1 has an invalid length. [ 1447.062128][ T3936] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1447.087277][ T5927] usb 6-1: Using ep0 maxpacket: 16 [ 1447.110521][ T5927] usb 6-1: config 0 has no interfaces? [ 1447.118571][ T5927] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1447.130371][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.144903][ T5927] usb 6-1: Product: syz [ 1447.149123][ T5927] usb 6-1: Manufacturer: syz [ 1447.184820][ T5927] usb 6-1: SerialNumber: syz [ 1447.188021][ T3939] loop0: detected capacity change from 0 to 2048 [ 1447.209646][ T5927] r8152-cfgselector 6-1: config 0 descriptor?? [ 1447.248515][ T3942] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1447.311747][ T3939] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1447.341934][ T3939] Remounting filesystem read-only [ 1447.355663][ T3939] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1447.489758][ T5927] usbip-host 6-1: 6-1 is not in match_busid table... skip! [ 1447.750057][ T5927] usb 6-1: USB disconnect, device number 7 [ 1447.947965][ T3964] loop4: detected capacity change from 0 to 512 [ 1447.966425][ T3964] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1448.064775][ T3964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1448.095165][ T3964] ext4 filesystem being mounted at /624/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1448.258050][T30004] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1448.376044][ T3958] loop0: detected capacity change from 0 to 32768 [ 1448.816940][ T3983] loop3: detected capacity change from 0 to 4096 [ 1449.016519][ T3993] autofs4:pid:3993:validate_dev_ioctl: invalid path supplied for cmd(0xc0189374) [ 1449.174398][ T3997] loop4: detected capacity change from 0 to 64 [ 1449.412944][ T4003] loop0: detected capacity change from 0 to 1024 [ 1449.515656][ T4003] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1449.612613][ T4003] EXT4-fs error (device loop0): __ext4_new_inode:1075: comm syz.0.13136: reserved inode found cleared - inode=18 [ 1449.734496][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1449.920783][ T4021] loop5: detected capacity change from 0 to 1024 [ 1450.146261][ T4028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13147'. [ 1450.481372][ T4039] netlink: 'syz.4.13152': attribute type 21 has an invalid length. [ 1450.489569][ T4039] netlink: 'syz.4.13152': attribute type 1 has an invalid length. [ 1451.102118][ T4056] loop0: detected capacity change from 0 to 4096 [ 1451.137603][ T4060] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1451.282119][ T4056] NILFS error (device loop0): nilfs_dotdot: directory #12 missing '.' [ 1451.322170][ T4056] Remounting filesystem read-only [ 1451.397640][ T4041] loop3: detected capacity change from 0 to 32768 [ 1451.508418][ T4041] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 1451.576976][ T4041] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1451.602843][ T4058] loop5: detected capacity change from 0 to 32768 [ 1451.671726][ T4058] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1451.813471][ T4041] XFS (loop3): Ending clean mount [ 1451.852100][ T4041] XFS (loop3): Quotacheck needed: Please wait. [ 1451.870429][ T4058] XFS (loop5): Ending clean mount [ 1451.894080][ T4058] XFS (loop5): Quotacheck needed: Please wait. [ 1451.931427][ T4041] XFS (loop3): Quotacheck: Done. [ 1452.085586][ T4058] XFS (loop5): Quotacheck: Done. [ 1452.204271][T30813] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1452.221016][ T5829] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1452.556988][ T4088] netlink: 148 bytes leftover after parsing attributes in process `syz.0.13168'. [ 1452.964895][ T4062] loop4: detected capacity change from 0 to 65536 [ 1453.001140][ T4102] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1453.044842][ T4062] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1453.262901][ T4062] XFS (loop4): Ending clean mount [ 1453.450853][T30004] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1453.536405][ T3001] hfsplus: b-tree write err: -5, ino 4 [ 1454.322987][ T4151] netlink: 'syz.3.13193': attribute type 1 has an invalid length. [ 1454.348540][ T4151] netlink: 248 bytes leftover after parsing attributes in process `syz.3.13193'. [ 1454.783986][ T4167] set_capacity_and_notify: 1 callbacks suppressed [ 1454.784002][ T4167] loop3: detected capacity change from 0 to 4096 [ 1454.812339][ T4173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13204'. [ 1454.837639][ T4173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13204'. [ 1454.883638][ T4173] netlink: 'syz.4.13204': attribute type 6 has an invalid length. [ 1454.911122][ T4167] ntfs: (device loop3): parse_options(): NLS character set maccentHuro not found. Using previous one cp857. [ 1454.924048][ T4167] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1454.977996][ T4167] ntfs: volume version 3.1. [ 1454.987439][ T4167] ntfs: (device loop3): ntfs_index_lookup(): Corrupt index. Aborting lookup. [ 1455.015637][ T4167] ntfs: (device loop3): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed. [ 1455.049105][ T4167] ntfs: (device loop3): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 1455.077692][ T4167] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 1455.090586][ T4167] ntfs: (device loop3): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl. [ 1455.118415][ T4167] ntfs: (device loop3): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 1455.377158][ T4191] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1455.763854][ T4208] loop5: detected capacity change from 0 to 8 [ 1455.786520][ T4210] tmpfs: Bad value for 'mpol' [ 1455.931779][ T4207] loop0: detected capacity change from 0 to 4096 [ 1455.987238][ T27] audit: type=1800 audit(2000000126.631:251): pid=4208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.13220" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 1456.269910][ T4221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13227'. [ 1457.130228][ T4257] loop5: detected capacity change from 0 to 4096 [ 1457.170554][ T4257] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 1457.297736][ T4257] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1457.348252][ T4266] loop3: detected capacity change from 0 to 256 [ 1457.360709][ T4267] netlink: 'syz.0.13249': attribute type 1 has an invalid length. [ 1457.379960][ T4267] netlink: 'syz.0.13249': attribute type 1 has an invalid length. [ 1457.402536][ T4267] netlink: 180 bytes leftover after parsing attributes in process `syz.0.13249'. [ 1457.456522][ T4266] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1457.922628][ T4254] loop4: detected capacity change from 0 to 32768 [ 1458.157431][ T4285] netlink: 48 bytes leftover after parsing attributes in process `syz.5.13260'. [ 1458.214350][ T4287] Unsupported ieee802154 address type: 0 [ 1458.492148][ T4299] loop0: detected capacity change from 0 to 256 [ 1458.913012][ T4315] loop3: detected capacity change from 0 to 8 [ 1458.944478][ T4315] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1458.984924][T10700] udevd[10700]: incorrect cramfs checksum on /dev/loop3 [ 1459.011484][ T4315] cramfs: Error -3 while decompressing! [ 1459.017731][ T4318] netlink: 'syz.4.13277': attribute type 5 has an invalid length. [ 1459.030320][ T4315] cramfs: ffffffff973f8368(1306)->ffff888049ca9000(4096) [ 1459.030328][ T4320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13276'. [ 1459.030370][ T4315] cramfs: bad data blocksize 3221485966 [ 1459.084857][ T5934] udevd[5934]: incorrect cramfs checksum on /dev/loop3 [ 1459.103458][ T4315] cramfs: Error -3 while decompressing! [ 1459.117091][ T4315] cramfs: ffffffff973f8368(1306)->ffff888049ca9000(4096) [ 1459.124341][ T27] audit: type=1800 audit(2000000129.528:252): pid=4315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.13274" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 1459.509303][ T4339] netlink: 168 bytes leftover after parsing attributes in process `syz.5.13286'. [ 1460.941852][ T4404] netlink: 'syz.5.13318': attribute type 2 has an invalid length. [ 1461.647737][ T4428] loop3: detected capacity change from 0 to 2048 [ 1461.715280][ T4428] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1461.790615][ T27] audit: type=1800 audit(2000000131.992:253): pid=4428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.13329" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 1461.884223][ T4434] loop4: detected capacity change from 0 to 256 [ 1461.988016][ T4434] FAT-fs (loop4): Directory bread(block 64) failed [ 1462.017578][ T4434] FAT-fs (loop4): Directory bread(block 65) failed [ 1462.041241][ T4434] FAT-fs (loop4): Directory bread(block 66) failed [ 1462.069968][ T4434] FAT-fs (loop4): Directory bread(block 67) failed [ 1462.081997][ T4434] FAT-fs (loop4): Directory bread(block 68) failed [ 1462.108206][ T4434] FAT-fs (loop4): Directory bread(block 69) failed [ 1462.114948][ T4434] FAT-fs (loop4): Directory bread(block 70) failed [ 1462.123458][ T4434] FAT-fs (loop4): Directory bread(block 71) failed [ 1462.130833][ T4434] FAT-fs (loop4): Directory bread(block 72) failed [ 1462.137508][ T4434] FAT-fs (loop4): Directory bread(block 73) failed [ 1462.433409][ T4451] Scaler: ================= START STATUS ================= [ 1462.440855][ T4451] Scaler: ================== END STATUS ================== [ 1462.480407][ T4454] xt_TCPMSS: Only works on TCP SYN packets [ 1462.686698][ T4459] loop0: detected capacity change from 0 to 1764 [ 1462.786764][ T4459] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 1463.019270][ T27] audit: type=1326 audit(2000000133.117:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4470 comm="syz.4.13350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1463.094775][ T27] audit: type=1326 audit(2000000133.117:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4470 comm="syz.4.13350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1463.170519][ T27] audit: type=1326 audit(2000000133.127:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4470 comm="syz.4.13350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1463.235835][ T27] audit: type=1326 audit(2000000133.127:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4470 comm="syz.4.13350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1463.310508][ T4479] loop4: detected capacity change from 0 to 4096 [ 1463.313574][ T27] audit: type=1326 audit(2000000133.127:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4470 comm="syz.4.13350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1463.386684][ T4483] SET target dimension over the limit! [ 1463.404320][ T4479] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1463.455481][ T4487] loop5: detected capacity change from 0 to 256 [ 1463.462888][ T4487] exfat: Deprecated parameter 'utf8' [ 1463.505252][T30004] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1463.529728][ T4487] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1463.601313][ T4455] loop3: detected capacity change from 0 to 40427 [ 1463.687586][ T4455] F2FS-fs (loop3): invalid crc value [ 1463.746483][ T4455] F2FS-fs (loop3): Mismatch valid blocks 2 vs. 3 [ 1463.777619][ T4455] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 1463.816139][ T4496] xt_TCPMSS: Only works on TCP SYN packets [ 1464.012707][ T4503] loop0: detected capacity change from 0 to 1024 [ 1464.070175][ T4505] netlink: 'syz.5.13366': attribute type 1 has an invalid length. [ 1464.243833][ T1090] hfsplus: b-tree write err: -5, ino 4 [ 1465.035112][ T4544] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1465.450381][ T4562] netlink: 'syz.3.13394': attribute type 4 has an invalid length. [ 1465.469815][ T4562] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.13394'. [ 1465.754656][ T27] audit: type=1326 audit(2000000135.646:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4573 comm="syz.3.13401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ff39bf79 code=0x7ffc0000 [ 1465.777034][ C1] vkms_vblank_simulate: vblank timer overrun [ 1465.844014][ T27] audit: type=1326 audit(2000000135.683:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4573 comm="syz.3.13401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ff39bf79 code=0x7ffc0000 [ 1465.917856][ T27] audit: type=1326 audit(2000000135.683:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4573 comm="syz.3.13401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fe9ff39bf79 code=0x7ffc0000 [ 1465.982131][ T4585] netlink: 'syz.0.13406': attribute type 10 has an invalid length. [ 1465.994696][ T27] audit: type=1326 audit(2000000135.683:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4573 comm="syz.3.13401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ff39bf79 code=0x7ffc0000 [ 1466.092011][ T4585] team0: Port device syz_tun added [ 1466.296971][ T4596] QAT: failed to copy from user cfg_data. [ 1466.332676][ T4599] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13412'. [ 1466.528557][ T4608] loop0: detected capacity change from 0 to 512 [ 1466.590299][ T4608] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1466.651605][ T4608] EXT4-fs (loop0): 1 truncate cleaned up [ 1466.704958][ T4608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1466.814142][ T4608] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.13415: Directory hole found for htree leaf block 0 [ 1466.862269][ T4608] EXT4-fs (loop0): Remounting filesystem read-only [ 1466.911313][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1467.114936][ T4634] loop0: detected capacity change from 0 to 256 [ 1467.178870][ T4634] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 1468.248839][ T4646] loop5: detected capacity change from 0 to 32768 [ 1468.281373][ T4646] jfs_strtoUCS: char2uni returned -22. [ 1468.290298][ T4646] charset = cp864, char = 0x9f [ 1468.407287][ T4665] loop0: detected capacity change from 0 to 64 [ 1468.572989][ T4671] loop3: detected capacity change from 0 to 256 [ 1469.084703][ T4687] loop0: detected capacity change from 0 to 256 [ 1469.455637][ T4701] netlink: 'syz.5.13458': attribute type 2 has an invalid length. [ 1469.867380][ T4684] loop3: detected capacity change from 0 to 40427 [ 1469.903723][ T4684] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 1469.910742][ T4684] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1469.972395][ T4684] F2FS-fs (loop3): invalid crc value [ 1470.001914][ T4684] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1470.094691][ T4684] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1470.114187][ T4684] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1470.253982][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1470.253998][ T27] audit: type=1800 audit(2000000139.798:264): pid=4684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.13448" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 1470.443683][ T5829] syz-executor: attempt to access beyond end of device [ 1470.443683][ T5829] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1470.514334][ T5829] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1470.551909][ T4740] loop5: detected capacity change from 0 to 512 [ 1470.633756][ T4740] EXT4-fs (loop5): 1 truncate cleaned up [ 1470.650121][ T4740] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1470.722337][ T4740] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.13476: bg 0: block 465: padding at end of block bitmap is not set [ 1470.753986][ T4740] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 1470.791989][ T4740] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.13476: invalid indirect mapped block 234881024 (level 0) [ 1470.940705][T30813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1471.300885][ T4760] loop0: detected capacity change from 0 to 1024 [ 1471.597191][ T4773] loop4: detected capacity change from 0 to 512 [ 1471.612819][ T4774] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13490'. [ 1471.629545][ T4774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13490'. [ 1471.679665][ T4773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1471.699700][ T4773] ext4 filesystem being mounted at /720/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1471.954287][T30004] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1472.055375][ T4796] netlink: 52 bytes leftover after parsing attributes in process `syz.4.13500'. [ 1472.190525][ T4800] xt_hashlimit: Unknown mode mask E2, kernel too old? [ 1472.531139][ T4814] loop0: detected capacity change from 0 to 736 [ 1472.856468][ T27] audit: type=1326 audit(2000000142.197:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4828 comm="syz.4.13516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1472.951793][ T27] audit: type=1326 audit(2000000142.197:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4828 comm="syz.4.13516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1472.999379][ T27] audit: type=1326 audit(2000000142.197:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4828 comm="syz.4.13516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1473.035987][ T4832] IPv6: Can't replace route, no match found [ 1473.042195][ T27] audit: type=1326 audit(2000000142.224:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4828 comm="syz.4.13516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1473.097695][ T27] audit: type=1326 audit(2000000142.224:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4828 comm="syz.4.13516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1473.159582][ T4833] loop5: detected capacity change from 0 to 4096 [ 1473.181604][ T27] audit: type=1326 audit(2000000142.224:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4828 comm="syz.4.13516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1473.212482][ T4833] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 1473.256762][ T27] audit: type=1326 audit(2000000142.224:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4828 comm="syz.4.13516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1473.298372][ T27] audit: type=1326 audit(2000000142.224:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4828 comm="syz.4.13516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe15699bf79 code=0x7ffc0000 [ 1473.362478][ T4833] ntfs3: loop5: Failed to initialize $Extend/$Reparse. [ 1473.567337][T30813] ntfs3: loop5: ino=1a, ntfs_sync_fs failed, -22. [ 1473.606738][ T4849] loop0: detected capacity change from 0 to 4096 [ 1473.635483][ T4849] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1473.788401][ T4849] ntfs: volume version 3.1. [ 1473.861316][ T4852] loop3: detected capacity change from 0 to 8192 [ 1473.902033][ T4852] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1473.967712][ T4852] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1474.013552][ T4852] REISERFS (device loop3): using ordered data mode [ 1474.060875][ T4852] reiserfs: using flush barriers [ 1474.119524][ T4852] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1474.193704][ T4852] REISERFS (device loop3): checking transaction log (loop3) [ 1474.438233][ T4870] loop5: detected capacity change from 0 to 256 [ 1474.449217][ T4852] REISERFS (device loop3): Using tea hash to sort names [ 1474.463923][ T4852] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1474.942753][ T4874] loop5: detected capacity change from 0 to 4096 [ 1474.999064][ T4878] loop4: detected capacity change from 0 to 4096 [ 1475.004680][ T4874] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 1475.080265][ T4878] ntfs: volume version 3.1. [ 1475.134688][ T4874] ntfs3: loop5: failed to convert "c46c" to cp869 [ 1475.677003][ T5927] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1475.904639][ T5927] usb 1-1: Using ep0 maxpacket: 8 [ 1475.923322][ T5927] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1475.939751][ T5927] usb 1-1: config 0 has no interface number 0 [ 1475.951798][ T4886] loop3: detected capacity change from 0 to 32768 [ 1475.953267][ T5927] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1476.030413][ T5927] usb 1-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 1476.032091][ T4886] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1476.039639][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.039666][ T5927] usb 1-1: Product: syz [ 1476.060621][ T5927] usb 1-1: Manufacturer: syz [ 1476.065232][ T5927] usb 1-1: SerialNumber: syz [ 1476.073588][ T5927] usb 1-1: config 0 descriptor?? [ 1476.184336][ T4886] XFS (loop3): Ending clean mount [ 1476.301959][ T5927] i2c-cp2615: probe of 1-1:0.1 failed with error -22 [ 1476.324103][ T5829] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1476.530533][ T28] usb 1-1: USB disconnect, device number 87 [ 1476.758693][ T4916] loop5: detected capacity change from 0 to 32768 [ 1476.792840][ T4916] JBD2: Ignoring recovery information on journal [ 1476.926397][ T4916] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1477.204202][ T4916] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #20 has bad signature [ 1477.248534][ T4916] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1477.269418][ T4916] OCFS2: File system is now read-only. [ 1477.276310][ T4931] netlink: 'syz.3.13560': attribute type 10 has an invalid length. [ 1477.280352][ T4916] (syz.5.13555,4916,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 1477.302581][ T4916] (syz.5.13555,4916,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 1477.321563][ T4916] (syz.5.13555,4916,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 1477.335065][ T4916] (syz.5.13555,4916,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 1477.354424][ T4916] (syz.5.13555,4916,0):ocfs2_claim_metadata:2018 ERROR: status = -30 [ 1477.373746][ T4916] (syz.5.13555,4916,0):ocfs2_claim_metadata:2031 ERROR: status = -30 [ 1477.389265][ T4916] (syz.5.13555,4916,0):ocfs2_dx_dir_attach_index:2330 ERROR: status = -30 [ 1477.397835][ T4916] (syz.5.13555,4916,0):ocfs2_expand_inline_dir:3023 ERROR: status = -30 [ 1477.432158][ T4916] (syz.5.13555,4916,0):ocfs2_extend_dir:3205 ERROR: status = -30 [ 1477.454284][ T4916] (syz.5.13555,4916,0):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30 [ 1477.473613][ T4935] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13561'. [ 1477.487018][ T4916] (syz.5.13555,4916,0):ocfs2_mknod:298 ERROR: status = -30 [ 1477.494285][ T4916] (syz.5.13555,4916,0):ocfs2_mknod:502 ERROR: status = -30 [ 1477.519335][ T4916] (syz.5.13555,4916,0):ocfs2_mkdir:659 ERROR: status = -30 [ 1477.606225][ T4916] syz.5.13555 (4916) used greatest stack depth: 18128 bytes left [ 1477.677930][T30813] (syz-executor,30813,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 1477.699578][T30813] (syz-executor,30813,0):_ocfs2_free_suballoc_bits:2489 ERROR: status = -12 [ 1477.722359][T30813] (syz-executor,30813,0):_ocfs2_free_clusters:2583 ERROR: status = -12 [ 1477.757873][T30813] (syz-executor,30813,0):ocfs2_sync_local_to_main:1001 ERROR: status = -12 [ 1477.766948][T30813] (syz-executor,30813,0):ocfs2_sync_local_to_main:1013 ERROR: status = -12 [ 1477.797792][T30813] (syz-executor,30813,0):ocfs2_shutdown_local_alloc:449 ERROR: status = -12 [ 1477.909929][T30813] ocfs2: Unmounting device (7,5) on (node local) [ 1477.970712][ T4945] bond2: entered allmulticast mode [ 1477.980480][ T4945] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1478.066366][ T4948] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.13569'. [ 1478.649526][ T4973] loop5: detected capacity change from 0 to 256 [ 1478.665794][ T4971] ieee802154 phy0 wpan0: encryption failed: -22 [ 1478.694701][ T4973] exfat: Deprecated parameter 'utf8' [ 1478.767029][ T4976] netlink: 'syz.3.13582': attribute type 1 has an invalid length. [ 1478.775023][ T4976] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13582'. [ 1478.795236][ T4976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13582'. [ 1478.815928][ T4973] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1479.238531][ T4989] openvswitch: netlink: Actions may not be safe on all matching packets [ 1479.461292][ T5000] loop4: detected capacity change from 0 to 64 [ 1479.869447][ T4992] loop0: detected capacity change from 0 to 32768 [ 1479.965742][ T4992] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1480.102313][ T4992] XFS (loop0): Ending clean mount [ 1480.211136][ T4994] loop5: detected capacity change from 0 to 32768 [ 1480.226955][ T5830] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1480.259812][ T5022] loop3: detected capacity change from 0 to 8192 [ 1480.278954][ T4994] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1480.287912][ T5022] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1480.287937][ T5022] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1480.288032][ T5022] REISERFS (device loop3): using ordered data mode [ 1480.322971][ T5022] reiserfs: using flush barriers [ 1480.336193][ T5022] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1480.418803][ T5022] REISERFS (device loop3): checking transaction log (loop3) [ 1480.420650][ T4994] XFS (loop5): Ending clean mount [ 1480.464855][ T5022] REISERFS (device loop3): Using r5 hash to sort names [ 1480.629973][ T5877] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 1480.836165][T30813] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1480.848919][ T5877] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1480.879134][ T5877] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 1480.905016][ T5877] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 1480.934961][ T5877] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1480.995136][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1481.043050][ T5877] usb 5-1: SerialNumber: syz [ 1481.073434][ T5025] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1481.098166][ T5877] hub 5-1:1.0: bad descriptor, ignoring hub [ 1481.113975][ T5877] hub: probe of 5-1:1.0 failed with error -5 [ 1481.137583][ T5877] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1481.269444][ T788] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1481.358901][ T5877] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 1481.417942][ T5877] usb 5-1: USB disconnect, device number 14 [ 1481.421746][ T5051] loop5: detected capacity change from 0 to 512 [ 1481.453759][ T5051] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1481.453780][ T5051] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1481.453892][ T5051] System zones: 0-1, 15-15, 18-18, 34-34 [ 1481.454243][ T5051] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1481.454328][ T5051] __quota_error: 6 callbacks suppressed [ 1481.454338][ T5051] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 1481.454406][ T5051] EXT4-fs warning (device loop5): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1481.454428][ T5051] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1481.460591][ T5051] EXT4-fs (loop5): 1 truncate cleaned up [ 1481.461785][ T5051] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1481.473450][ T788] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1481.477352][ T788] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1481.477389][ T788] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1481.477415][ T788] usb 4-1: config 1 interface 0 has no altsetting 1 [ 1481.486983][ T788] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1481.487013][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.487031][ T788] usb 4-1: Product: syz [ 1481.487044][ T788] usb 4-1: Manufacturer: syz [ 1481.487057][ T788] usb 4-1: SerialNumber: syz [ 1481.504456][ T788] smsusb:smsusb_probe: board id=8, interface number 0 [ 1481.527724][ T5051] fscrypt (loop5, inode 16): Error -61 getting encryption context [ 1481.734971][ T788] smsusb:smsusb_probe: Device initialized with return code -19 [ 1481.744471][T30813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1481.945655][ T5060] loop0: detected capacity change from 0 to 128 [ 1481.956010][ T788] usb 4-1: USB disconnect, device number 88 [ 1481.989878][ T5060] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1482.078878][ T5060] ext4 filesystem being mounted at /3447/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1482.113408][ T5826] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 1482.164701][ T5060] EXT4-fs warning (device loop0): verify_group_input:151: Cannot add at group 49 (only 1 groups) [ 1482.259379][ T5830] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1482.273949][ T5070] loop4: detected capacity change from 0 to 8192 [ 1482.297860][ T5070] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1482.359215][ T5070] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1482.405111][ T5070] FAT-fs (loop4): Filesystem has been set read-only [ 1482.927597][ T5097] netlink: 'syz.3.13630': attribute type 1 has an invalid length. [ 1482.935482][ T5097] netlink: 228 bytes leftover after parsing attributes in process `syz.3.13630'. [ 1482.996923][ T27] audit: type=1107 audit(2000000151.553:273): pid=5100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1483.654000][ T788] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 1483.804973][ T5147] loop3: detected capacity change from 0 to 256 [ 1483.843728][ T5142] bond1: entered allmulticast mode [ 1483.853295][ T5142] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1483.918273][ T5147] FAT-fs (loop3): Directory bread(block 64) failed [ 1483.935323][ T5147] FAT-fs (loop3): Directory bread(block 65) failed [ 1483.943360][ T5147] FAT-fs (loop3): Directory bread(block 66) failed [ 1483.950157][ T5147] FAT-fs (loop3): Directory bread(block 67) failed [ 1483.957045][ T5147] FAT-fs (loop3): Directory bread(block 68) failed [ 1483.959042][ T788] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 1483.963582][ T5147] FAT-fs (loop3): Directory bread(block 69) failed [ 1483.963692][ T5147] FAT-fs (loop3): Directory bread(block 70) failed [ 1483.986235][ T788] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 1484.000441][ T5147] FAT-fs (loop3): Directory bread(block 71) failed [ 1484.007121][ T5147] FAT-fs (loop3): Directory bread(block 72) failed [ 1484.017951][ T788] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1484.022001][ T5147] FAT-fs (loop3): Directory bread(block 73) failed [ 1484.058313][ T788] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1484.091421][ T788] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1484.145205][ T788] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1484.187882][ T5147] syz.3.13649: attempt to access beyond end of device [ 1484.187882][ T5147] loop3: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 1484.196241][ T788] usb 6-1: string descriptor 0 read error: -22 [ 1484.208225][ T5153] QAT: failed to copy from user cfg_data. [ 1484.228016][ T788] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1484.237135][ T788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.242183][ T5147] syz.3.13649: attempt to access beyond end of device [ 1484.242183][ T5147] loop3: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 1484.269209][ T788] usb 6-1: config 0 descriptor?? [ 1484.289836][ T27] audit: type=1800 audit(2000000152.752:274): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.13649" name="file0" dev="loop3" ino=1048726 res=0 errno=0 [ 1484.315285][ T5120] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1484.323646][ T788] hub 6-1:0.0: bad descriptor, ignoring hub [ 1484.334835][ T788] hub: probe of 6-1:0.0 failed with error -5 [ 1484.382585][ T788] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input104 [ 1484.447887][ C1] usb_acecad 6-1:0.0: can't resubmit intr, dummy_hcd.5-1/input0, status -1 [ 1484.714703][ C0] usb_acecad 6-1:0.0: can't resubmit intr, dummy_hcd.5-1/input0, status -1 [ 1484.765725][ T28] usb 6-1: USB disconnect, device number 8 [ 1484.823524][ T5174] loop4: detected capacity change from 0 to 64 [ 1485.329926][ T5194] loop4: detected capacity change from 0 to 512 [ 1485.364997][ T5194] ================================================================== [ 1485.373134][ T5194] BUG: KASAN: slab-out-of-bounds in __ext4_iget+0x2c0/0x3f40 [ 1485.380535][ T5194] Read of size 8 at addr ffff8880782aff30 by task syz.4.13672/5194 [ 1485.388440][ T5194] [ 1485.390767][ T5194] CPU: 0 PID: 5194 Comm: syz.4.13672 Not tainted syzkaller #0 [ 1485.398207][ T5194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1485.408260][ T5194] Call Trace: [ 1485.411556][ T5194] [ 1485.414495][ T5194] dump_stack_lvl+0x18c/0x250 [ 1485.419194][ T5194] ? __lock_acquire+0x7d40/0x7d40 [ 1485.424232][ T5194] ? show_regs_print_info+0x20/0x20 [ 1485.429451][ T5194] ? load_image+0x400/0x400 [ 1485.433976][ T5194] ? __virt_addr_valid+0x469/0x540 [ 1485.439115][ T5194] print_report+0xa8/0x210 [ 1485.443553][ T5194] ? __ext4_iget+0x2c0/0x3f40 [ 1485.448245][ T5194] kasan_report+0x117/0x150 [ 1485.452760][ T5194] ? do_raw_spin_unlock+0x121/0x230 [ 1485.457975][ T5194] ? __ext4_iget+0x2c0/0x3f40 [ 1485.462672][ T5194] __ext4_iget+0x2c0/0x3f40 [ 1485.467193][ T5194] ? free_unref_page+0x190/0x2e0 [ 1485.472150][ T5194] ? apply_workqueue_attrs+0x180/0x180 [ 1485.477623][ T5194] ? ext4_get_projid+0x140/0x140 [ 1485.482575][ T5194] ? mb_cache_create+0x433/0x530 [ 1485.487528][ T5194] ext4_fill_super+0x5020/0x6790 [ 1485.492469][ T5194] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1485.498703][ T5194] ? __might_sleep+0xe0/0xe0 [ 1485.503285][ T5194] ? read_lock_is_recursive+0x20/0x20 [ 1485.508646][ T5194] ? snprintf+0xe9/0x140 [ 1485.512884][ T5194] ? down_read_killable+0x340/0x340 [ 1485.518080][ T5194] ? setup_bdev_super+0x56b/0x660 [ 1485.523098][ T5194] get_tree_bdev+0x3f3/0x520 [ 1485.527677][ T5194] ? vfs_parse_fs_string+0x170/0x170 [ 1485.532954][ T5194] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1485.539186][ T5194] ? setup_bdev_super+0x660/0x660 [ 1485.544208][ T5194] ? apparmor_capable+0x137/0x1a0 [ 1485.549222][ T5194] ? bpf_lsm_capable+0x9/0x10 [ 1485.553924][ T5194] ? security_capable+0x89/0xb0 [ 1485.558774][ T5194] vfs_get_tree+0x8c/0x280 [ 1485.563191][ T5194] do_new_mount+0x24b/0xa40 [ 1485.567693][ T5194] __se_sys_mount+0x2e7/0x3d0 [ 1485.572361][ T5194] ? __x64_sys_mount+0xc0/0xc0 [ 1485.577115][ T5194] ? lockdep_hardirqs_on+0x98/0x150 [ 1485.582301][ T5194] ? __x64_sys_mount+0x20/0xc0 [ 1485.587053][ T5194] do_syscall_64+0x55/0xa0 [ 1485.591464][ T5194] ? clear_bhb_loop+0x40/0x90 [ 1485.596128][ T5194] ? clear_bhb_loop+0x40/0x90 [ 1485.600795][ T5194] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1485.606683][ T5194] RIP: 0033:0x7fe15699d20a [ 1485.611091][ T5194] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1485.630692][ T5194] RSP: 002b:00007fe1577bae58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1485.639099][ T5194] RAX: ffffffffffffffda RBX: 00007fe1577baee0 RCX: 00007fe15699d20a [ 1485.647062][ T5194] RDX: 0000200000000080 RSI: 0000200000000480 RDI: 00007fe1577baea0 [ 1485.655026][ T5194] RBP: 0000200000000080 R08: 00007fe1577baee0 R09: 0000000000000010 [ 1485.662992][ T5194] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000000480 [ 1485.670984][ T5194] R13: 00007fe1577baea0 R14: 00000000000004c2 R15: 00002000000000c0 [ 1485.678991][ T5194] [ 1485.682052][ T5194] [ 1485.684366][ T5194] Allocated by task 18069: [ 1485.688766][ T5194] kasan_set_track+0x4e/0x70 [ 1485.693354][ T5194] __kasan_slab_alloc+0x6c/0x80 [ 1485.698196][ T5194] slab_post_alloc_hook+0x6e/0x4b0 [ 1485.703299][ T5194] kmem_cache_alloc+0x11a/0x2d0 [ 1485.708144][ T5194] alloc_buffer_head+0x2d/0x280 [ 1485.712987][ T5194] folio_alloc_buffers+0x39b/0x980 [ 1485.718092][ T5194] folio_create_empty_buffers+0x3a/0x720 [ 1485.723719][ T5194] ntfs_read_folio+0xe1f/0x2990 [ 1485.728565][ T5194] filemap_read_folio+0x172/0x760 [ 1485.733575][ T5194] do_read_cache_folio+0x468/0x7d0 [ 1485.738675][ T5194] do_read_cache_page+0x32/0x250 [ 1485.743599][ T5194] load_system_files+0x4f5/0x4550 [ 1485.748612][ T5194] ntfs_fill_super+0x1818/0x2a50 [ 1485.753536][ T5194] mount_bdev+0x221/0x2d0 [ 1485.757852][ T5194] legacy_get_tree+0xea/0x180 [ 1485.762517][ T5194] vfs_get_tree+0x8c/0x280 [ 1485.766923][ T5194] do_new_mount+0x24b/0xa40 [ 1485.771419][ T5194] __se_sys_mount+0x2e7/0x3d0 [ 1485.776084][ T5194] do_syscall_64+0x55/0xa0 [ 1485.780495][ T5194] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1485.786378][ T5194] [ 1485.788689][ T5194] The buggy address belongs to the object at ffff8880782afe80 [ 1485.788689][ T5194] which belongs to the cache buffer_head of size 168 [ 1485.802731][ T5194] The buggy address is located 8 bytes to the right of [ 1485.802731][ T5194] allocated 168-byte region [ffff8880782afe80, ffff8880782aff28) [ 1485.817212][ T5194] [ 1485.819522][ T5194] The buggy address belongs to the physical page: [ 1485.825932][ T5194] page:ffffea0001e0abc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x782af [ 1485.836070][ T5194] memcg:ffff8880258c6201 [ 1485.840303][ T5194] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1485.847834][ T5194] page_type: 0xffffffff() [ 1485.852152][ T5194] raw: 00fff00000000800 ffff88801b276c80 dead000000000122 0000000000000000 [ 1485.860725][ T5194] raw: 0000000000000000 0000000000110011 00000001ffffffff ffff8880258c6201 [ 1485.869292][ T5194] page dumped because: kasan: bad access detected [ 1485.875701][ T5194] page_owner tracks the page as allocated [ 1485.881401][ T5194] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112c50(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 18069, tgid 18068 (syz.2.5344), ts 690330377374, free_ts 682325222525 [ 1485.902842][ T5194] post_alloc_hook+0x1c1/0x200 [ 1485.907608][ T5194] get_page_from_freelist+0x1951/0x19e0 [ 1485.913150][ T5194] __alloc_pages+0x1f0/0x460 [ 1485.917731][ T5194] alloc_slab_page+0x5d/0x160 [ 1485.922399][ T5194] new_slab+0x87/0x2d0 [ 1485.926464][ T5194] ___slab_alloc+0xc5d/0x12f0 [ 1485.931133][ T5194] kmem_cache_alloc+0x1b3/0x2d0 [ 1485.935977][ T5194] alloc_buffer_head+0x2d/0x280 [ 1485.940822][ T5194] folio_alloc_buffers+0x39b/0x980 [ 1485.945926][ T5194] folio_create_empty_buffers+0x3a/0x720 [ 1485.951558][ T5194] ntfs_read_folio+0xe1f/0x2990 [ 1485.956409][ T5194] filemap_read_folio+0x172/0x760 [ 1485.961422][ T5194] do_read_cache_folio+0x468/0x7d0 [ 1485.966520][ T5194] do_read_cache_page+0x32/0x250 [ 1485.971460][ T5194] load_system_files+0x4f5/0x4550 [ 1485.976476][ T5194] ntfs_fill_super+0x1818/0x2a50 [ 1485.981404][ T5194] page last free stack trace: [ 1485.986059][ T5194] free_unref_page_prepare+0x7b2/0x8c0 [ 1485.991510][ T5194] free_unref_page+0x32/0x2e0 [ 1485.996177][ T5194] __unfreeze_partials+0x1cf/0x210 [ 1486.001277][ T5194] put_cpu_partial+0x17c/0x250 [ 1486.006030][ T5194] __slab_free+0x319/0x400 [ 1486.010435][ T5194] qlist_free_all+0x75/0xd0 [ 1486.014929][ T5194] kasan_quarantine_reduce+0x143/0x160 [ 1486.020379][ T5194] __kasan_slab_alloc+0x22/0x80 [ 1486.025217][ T5194] slab_post_alloc_hook+0x6e/0x4b0 [ 1486.030322][ T5194] __kmem_cache_alloc_node+0x13a/0x250 [ 1486.035774][ T5194] __kmalloc+0xa4/0x230 [ 1486.039963][ T5194] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1486.045504][ T5194] tomoyo_path_perm+0x282/0x560 [ 1486.050350][ T5194] security_inode_getattr+0xd3/0x120 [ 1486.055624][ T5194] __x64_sys_newfstat+0x12c/0x250 [ 1486.060637][ T5194] do_syscall_64+0x55/0xa0 [ 1486.065047][ T5194] [ 1486.067353][ T5194] Memory state around the buggy address: [ 1486.072971][ T5194] ffff8880782afe00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 1486.081025][ T5194] ffff8880782afe80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1486.089074][ T5194] >ffff8880782aff00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 1486.097120][ T5194] ^ [ 1486.102744][ T5194] ffff8880782aff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1486.110805][ T5194] ffff8880782b0000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1486.118848][ T5194] ================================================================== [ 1486.126986][ C0] vkms_vblank_simulate: vblank timer overrun [ 1486.189962][ T5194] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1486.197207][ T5194] CPU: 1 PID: 5194 Comm: syz.4.13672 Not tainted syzkaller #0 [ 1486.204679][ T5194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1486.214753][ T5194] Call Trace: [ 1486.218041][ T5194] [ 1486.220974][ T5194] dump_stack_lvl+0x18c/0x250 [ 1486.225674][ T5194] ? show_regs_print_info+0x20/0x20 [ 1486.230895][ T5194] ? load_image+0x400/0x400 [ 1486.235422][ T5194] panic+0x2dc/0x730 [ 1486.239336][ T5194] ? bpf_jit_dump+0xd0/0xd0 [ 1486.243857][ T5194] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 1486.249856][ T5194] ? _raw_spin_unlock+0x40/0x40 [ 1486.249876][ T5201] loop5: detected capacity change from 0 to 512 [ 1486.260947][ T5194] ? print_memory_metadata+0x314/0x400 [ 1486.266432][ T5194] ? __ext4_iget+0x2c0/0x3f40 [ 1486.271129][ T5194] check_panic_on_warn+0x84/0xa0 [ 1486.276088][ T5194] ? __ext4_iget+0x2c0/0x3f40 [ 1486.280786][ T5194] end_report+0x6f/0x130 [ 1486.285052][ T5194] kasan_report+0x128/0x150 [ 1486.289571][ T5194] ? do_raw_spin_unlock+0x121/0x230 [ 1486.294789][ T5194] ? __ext4_iget+0x2c0/0x3f40 [ 1486.299491][ T5194] __ext4_iget+0x2c0/0x3f40 [ 1486.304042][ T5194] ? free_unref_page+0x190/0x2e0 [ 1486.309003][ T5194] ? apply_workqueue_attrs+0x180/0x180 [ 1486.314477][ T5194] ? ext4_get_projid+0x140/0x140 [ 1486.319429][ T5194] ? mb_cache_create+0x433/0x530 [ 1486.324393][ T5194] ext4_fill_super+0x5020/0x6790 [ 1486.329365][ T5194] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1486.335638][ T5194] ? __might_sleep+0xe0/0xe0 [ 1486.340250][ T5194] ? read_lock_is_recursive+0x20/0x20 [ 1486.345654][ T5194] ? snprintf+0xe9/0x140 [ 1486.349894][ T5194] ? down_read_killable+0x340/0x340 [ 1486.355087][ T5194] ? setup_bdev_super+0x56b/0x660 [ 1486.360103][ T5194] get_tree_bdev+0x3f3/0x520 [ 1486.364684][ T5194] ? vfs_parse_fs_string+0x170/0x170 [ 1486.369961][ T5194] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1486.376190][ T5194] ? setup_bdev_super+0x660/0x660 [ 1486.381203][ T5194] ? apparmor_capable+0x137/0x1a0 [ 1486.386214][ T5194] ? bpf_lsm_capable+0x9/0x10 [ 1486.390886][ T5194] ? security_capable+0x89/0xb0 [ 1486.395730][ T5194] vfs_get_tree+0x8c/0x280 [ 1486.400143][ T5194] do_new_mount+0x24b/0xa40 [ 1486.404638][ T5194] __se_sys_mount+0x2e7/0x3d0 [ 1486.409304][ T5194] ? __x64_sys_mount+0xc0/0xc0 [ 1486.414063][ T5194] ? lockdep_hardirqs_on+0x98/0x150 [ 1486.419251][ T5194] ? __x64_sys_mount+0x20/0xc0 [ 1486.424011][ T5194] do_syscall_64+0x55/0xa0 [ 1486.428429][ T5194] ? clear_bhb_loop+0x40/0x90 [ 1486.433104][ T5194] ? clear_bhb_loop+0x40/0x90 [ 1486.437771][ T5194] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1486.443653][ T5194] RIP: 0033:0x7fe15699d20a [ 1486.448058][ T5194] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1486.467659][ T5194] RSP: 002b:00007fe1577bae58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1486.476173][ T5194] RAX: ffffffffffffffda RBX: 00007fe1577baee0 RCX: 00007fe15699d20a [ 1486.484137][ T5194] RDX: 0000200000000080 RSI: 0000200000000480 RDI: 00007fe1577baea0 [ 1486.492185][ T5194] RBP: 0000200000000080 R08: 00007fe1577baee0 R09: 0000000000000010 [ 1486.500148][ T5194] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000000480 [ 1486.508111][ T5194] R13: 00007fe1577baea0 R14: 00000000000004c2 R15: 00002000000000c0 [ 1486.516088][ T5194] [ 1486.519842][ T5194] Kernel Offset: disabled [ 1486.524156][ T5194] Rebooting in 86400 seconds..