last executing test programs: 3.395498621s ago: executing program 3 (id=1875): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="48000000100003052abd7000040000129871a860", @ANYRES32=0x0, @ANYBLOB="3a000000a00102001c00128009000100766c616e000000000c0002800600050088a800000a000100aa"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 3.202284709s ago: executing program 3 (id=1880): r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, 0x0) 3.016535069s ago: executing program 3 (id=1882): r0 = syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000000100)='./file0\x00', 0x200c00, &(0x7f0000000040), 0x0, 0x968e, &(0x7f000001c300)="$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") ioctl$EXT4_IOC_GROUP_ADD(r0, 0x80205871, 0x0) 1.790708447s ago: executing program 1 (id=1901): r0 = syz_open_dev$swradio(&(0x7f00000003c0), 0x0, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0xfffffff9, 0x8, 0x4, 0x800000, 0x1000, {}, {0x2, 0x1, 0xb8, 0x2, 0x1, 0x0, "89d1204b"}, 0x4, 0x2, {0x0}, 0x8002}) 1.671677588s ago: executing program 2 (id=1902): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@dellinkprop={0x38, 0x6d, 0x2ec9b2c728e3c67, 0x70bd2b, 0x25dfdaff, {0x0, 0x0, 0x0, 0x0, 0x41001, 0x2e804}, [@IFLA_PROP_LIST={0x4}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x80) 1.608816664s ago: executing program 0 (id=1904): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) 1.527990324s ago: executing program 1 (id=1905): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x96}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}}}]}, 0x1a0}}, 0x0) 1.344067526s ago: executing program 0 (id=1907): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000100)=0x9) 1.343915835s ago: executing program 2 (id=1908): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000002000)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.260290028s ago: executing program 3 (id=1909): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000080)=""/13, 0xd}], 0x2, 0x2, 0x2) 1.174747575s ago: executing program 0 (id=1910): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@bridge_newvlan={0x18, 0x76, 0x1, 0x0, 0x25dfdbfc, {0x7, 0x2}}, 0x18}, 0x1, 0x5502000000000000}, 0x0) 1.108003547s ago: executing program 2 (id=1911): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020200090f0000000000000000000000010018009f03fffd0500"], 0x78}, 0x1, 0x7}, 0x0) 1.097945499s ago: executing program 1 (id=1912): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b40)=@security={'security\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x178, 0xd8, 0x178, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "e88da88d4b38d904446136f5a64f85e19acef912a238b03d4217f8d750a8"}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x2, 0x4}, {0x0, 0x1}, 0xfffffc00, 0xbec}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x0, 0x1, 0x1, 0x5, 0x6], 0x4}, {0x1, [0x4, 0x4, 0x4, 0x2, 0x0, 0x1], 0x6, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) 1.097823861s ago: executing program 4 (id=1913): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000210011002bbd7000000000000a200000000000080000010008000a000000e4ff130001"], 0x40}, 0x1, 0x0, 0x0, 0x4040}, 0x60) 945.378604ms ago: executing program 0 (id=1914): r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000000)=0x1) 828.141069ms ago: executing program 2 (id=1915): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) 827.963549ms ago: executing program 1 (id=1916): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@my=0x1, 0x2}) 805.807418ms ago: executing program 4 (id=1917): r0 = syz_open_dev$swradio(&(0x7f0000000180), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0xb, @pix={0x38305543, 0x7, 0x38414261, 0x4, 0x5, 0x2, 0x8, 0x3, 0x0, 0x6, 0x1, 0x4}}) 717.713099ms ago: executing program 0 (id=1918): r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x3ea}, [], {0x14, 0x3e9, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x0) 624.941191ms ago: executing program 1 (id=1919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000aff000000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000031200048008000240000000120800014000000000140003006e657464657673"], 0xac}}, 0x0) 624.766935ms ago: executing program 2 (id=1920): syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0x1010004, &(0x7f0000000b80)=ANY=[@ANYBLOB='block=0x0000000000000800,block=0x0000000000000400\x00block=0x0000000000000200,nocompress,unhide,uid=', @ANYRESHEX=0x0, @ANYBLOB="41f9ff53ef6a7b72742c757466388000"], 0x1, 0x656, &(0x7f0000000c40)="$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") open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) 624.694939ms ago: executing program 4 (id=1921): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), 0xc) 605.46627ms ago: executing program 3 (id=1922): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 577.372056ms ago: executing program 0 (id=1923): r0 = syz_mount_image$btrfs(&(0x7f00000001c0), &(0x7f0000005600)='./file0\x00', 0x1, &(0x7f0000000000), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"007ea3227bafa3c5957d5221c595698d", 0x0, 0x0, {0x80000001, 0xfffffffe}, {0x3ff}, 0x8, [0x9, 0xfffffffffffffff8, 0x6, 0x1000, 0xff, 0x7, 0x2, 0x1, 0x9, 0x0, 0xfff, 0x401, 0x100000000, 0x1ff, 0x4, 0x380000000000000]}) 432.838483ms ago: executing program 3 (id=1924): r0 = socket(0xa, 0x5, 0x0) sendmmsg(r0, &(0x7f0000004680)=[{{&(0x7f0000000100)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="18", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x1, 0x6}, {0x10, 0x84, 0x1}], 0x20}}], 0x2, 0x0) 432.722736ms ago: executing program 4 (id=1925): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x4) 387.845982ms ago: executing program 2 (id=1926): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000200)={[{@pquota}, {@discard}, {@swalloc}, {@grpid}, {@logbufs={'logbufs', 0x3d, 0x3}}, {@noalign}, {@inode64}, {@inode32}]}, 0x1, 0x97ee, &(0x7f0000012f40)="$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") 378.674629ms ago: executing program 1 (id=1927): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000004580)={{0x12, 0x1, 0x110, 0xad, 0xb1, 0xc1, 0x40, 0x2040, 0x4901, 0x2701, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x20, 0xf9}}]}}, 0x0) 104.041922ms ago: executing program 4 (id=1928): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 0s ago: executing program 4 (id=1929): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000580)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x85, 0xcf, &(0x7f0000000000)="fae68670fef1c45ff0634fe72a6253b4357c978887379648e34b8e43761f35000437ab851cde4821ce97abc68f6a1c3593e2a7a267f78fff0e9e1743899a7dc5c1d2ecae353bd4bcdb61c053b1d7b1223331d664596d93a54d408700062455bf71027a99387a4c190aa0098e4554990bc6fdfd4647aad6ed8951ff86c092399a8d11b76c5e", &(0x7f00000008c0)=""/206, 0x0, 0x0, 0x4c, 0x1e, 0xfffffffffffffffe, &(0x7f00000000c0)="d5231f25b5f85be12036902ce1a29123e3c1d41aa6d9c06ff230c473bf3c", 0x0, 0x8000}, 0x48) kernel console output (not intermixed with test programs): tch(7, /dev/loop4p3, 10) failed: No such file or directory [ 135.953192][ T5869] udevd[5869]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 136.009318][ T7160] BTRFS info (device loop0): balance: start -susage=4,drange=4096..107,vrange=18446744073709551614..0,stripes=4294967295..4 [ 136.025850][ T7180] loop2: detected capacity change from 0 to 32768 [ 136.056758][ T7216] netlink: 'syz.4.486': attribute type 3 has an invalid length. [ 136.073544][ T7180] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 136.082267][ T7160] BTRFS info (device loop0): balance: ended with status: 0 [ 136.092677][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.132117][ T7180] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 136.161167][ T7180] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 136.172834][ T5906] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 136.185750][ T5906] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 136.276574][ T5820] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 136.311094][ T5906] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 125ms [ 136.340851][ T5906] gfs2: fsid=syz:syz.0: jid=0: Done [ 136.377397][ T7180] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 136.465769][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.488'. [ 136.587088][ T7230] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 136.591778][ T7225] bridge1: entered allmulticast mode [ 136.796890][ T7180] gfs2: fsid=syz:syz.0: found 1 quota changes [ 136.811461][ T7232] ieee802154 phy0 wpan0: encryption failed: -90 [ 136.836066][ T7234] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 137.009791][ T30] audit: type=1800 audit(2000000016.820:11): pid=7180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.477" name="file1" dev="loop2" ino=2342 res=0 errno=0 [ 137.272435][ T7246] netlink: 'syz.3.499': attribute type 16 has an invalid length. [ 137.280999][ T7246] netlink: 'syz.3.499': attribute type 17 has an invalid length. [ 137.419641][ T7220] loop1: detected capacity change from 0 to 32768 [ 137.524189][ T7220] JBD2: Ignoring recovery information on journal [ 137.742278][ T7220] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 137.892098][ T7240] loop0: detected capacity change from 0 to 32768 [ 137.925889][ T7240] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.495 (7240) [ 137.958116][ T5828] ocfs2: Unmounting device (7,1) on (node local) [ 138.025576][ T7240] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 138.087741][ T7240] BTRFS info (device loop0): using sha256 checksum algorithm [ 138.282938][ T7240] BTRFS info (device loop0): enabling ssd optimizations [ 138.335679][ T7240] BTRFS info (device loop0): turning on async discard [ 138.342529][ T7240] BTRFS info (device loop0): enabling free space tree [ 138.506187][ T7240] BTRFS error: failed to open device for path o_ëv7$ with flags 0x1: -2 [ 138.640001][ T7298] netlink: 'syz.3.515': attribute type 10 has an invalid length. [ 138.665910][ T7299] netlink: 'syz.1.516': attribute type 2 has an invalid length. [ 138.681174][ T7298] netlink: 40 bytes leftover after parsing attributes in process `syz.3.515'. [ 138.691062][ T5820] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 139.432671][ T7324] xt_policy: output policy not valid in PREROUTING and INPUT [ 139.543257][ T7287] loop2: detected capacity change from 0 to 40427 [ 139.568241][ T7287] F2FS-fs: heap/no_heap options were deprecated [ 139.585986][ T7287] F2FS-fs (loop2): Image doesn't support compression [ 139.598762][ T7287] F2FS-fs (loop2): build fault injection rate: 23 [ 139.605248][ T7287] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 139.696242][ T7287] F2FS-fs (loop2): invalid crc value [ 139.764109][ T7287] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810 [ 139.952409][ T7343] openvswitch: netlink: Flow key attribute not present in set flow. [ 140.010642][ T7332] loop1: detected capacity change from 0 to 8192 [ 140.022641][ T7287] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 140.052060][ T7287] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 140.093408][ T7287] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_get_read_data_folio+0xe0/0xb70 [ 140.107923][ T5984] loop1: p1 < > p3 < p5 > p4 [ 140.112674][ T5984] loop1: partition table partially beyond EOD, truncated [ 140.153574][ T5984] loop1: p1 start 4294967040 is beyond EOD, truncated [ 140.202896][ T7332] loop1: p1 < > p3 < p5 > p4 [ 140.226653][ T7332] loop1: partition table partially beyond EOD, truncated [ 140.242647][ T7332] loop1: p1 start 4294967040 is beyond EOD, truncated [ 140.415882][ T7354] netlink: 'syz.0.542': attribute type 1 has an invalid length. [ 140.527290][ T7359] comedi comedi4: bad chanlist[0]=0x00400002 chan=2 range length=2 [ 140.773224][ T5870] udevd[5870]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 140.814294][ T6063] udevd[6063]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 140.822897][ T5984] udevd[5984]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 140.925372][ T5870] udevd[5870]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 140.936936][ T5984] udevd[5984]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 140.956001][ T7370] netlink: 36 bytes leftover after parsing attributes in process `syz.1.550'. [ 140.966732][ T6063] udevd[6063]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 141.160666][ T7376] loop1: detected capacity change from 0 to 64 [ 141.203643][ T7379] netlink: 40 bytes leftover after parsing attributes in process `syz.2.541'. [ 141.214455][ T7379] netlink: 40 bytes leftover after parsing attributes in process `syz.2.541'. [ 141.261742][ T7380] netlink: 'syz.4.554': attribute type 32 has an invalid length. [ 141.511631][ T30] audit: type=1326 audit(2000000021.320:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.1.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f93d9c799 code=0x7ffc0000 [ 141.594577][ T30] audit: type=1326 audit(2000000021.320:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.1.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f93d9c799 code=0x7ffc0000 [ 141.680845][ T30] audit: type=1326 audit(2000000021.360:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.1.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f8f93d9c799 code=0x7ffc0000 [ 141.735702][ T30] audit: type=1326 audit(2000000021.360:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.1.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f93d9c799 code=0x7ffc0000 [ 141.791275][ T7388] loop2: detected capacity change from 0 to 4096 [ 141.937158][ T7356] loop3: detected capacity change from 0 to 32768 [ 141.992751][ T7356] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 142.055804][ T7374] loop0: detected capacity change from 0 to 32768 [ 142.088284][ T7356] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 142.129751][ T7384] loop4: detected capacity change from 0 to 32768 [ 142.151224][ T7384] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 142.183740][ T7374] JBD2: Ignoring recovery information on journal [ 142.235380][ T7384] JBD2: Ignoring recovery information on journal [ 142.255370][ T7356] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 142.272296][ T7374] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 142.326073][ T5906] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 142.356007][ T5906] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 142.409051][ T7384] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 142.428038][ T7374] OCFS2: ERROR (device loop0): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 142.428110][ T7374] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 142.520336][ T7374] OCFS2: File system is now read-only. [ 142.580304][ T7374] (syz.0.552,7374,1):ocfs2_setattr:1306 ERROR: status = -117 [ 142.649036][ T7403] Cannot find add_set index 2 as target [ 142.696997][ T5833] ocfs2: Unmounting device (7,4) on (node local) [ 142.723997][ T5906] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 367ms [ 142.737981][ T5906] gfs2: fsid=syz:syz.0: jid=0: Done [ 142.751304][ T7356] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 142.811357][ T5820] ocfs2: Unmounting device (7,0) on (node local) [ 143.077351][ T7356] gfs2: fsid=syz:syz.0: found 1 quota changes [ 143.221792][ T30] audit: type=1800 audit(2000000023.030:16): pid=7356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.543" name="file1" dev="loop3" ino=2342 res=0 errno=0 [ 143.423703][ T7417] xt_CT: No such helper "snmp" [ 143.535963][ T7422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.571'. [ 143.682941][ T7430] nbd: illegal input index 895345970 [ 144.161093][ T5141] Bluetooth: Wrong link type (-71) [ 144.580131][ T7470] Cannot find add_set index 0 as target [ 144.643121][ T7474] loop0: detected capacity change from 0 to 512 [ 144.658034][ T7474] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 144.684721][ T7476] loop1: detected capacity change from 0 to 16 [ 144.717538][ T7474] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 144.734944][ T7476] erofs (device loop1): mounted with root inode @ nid 36. [ 144.776630][ T7476] erofs (device loop1): readahead error at folio 2 @ nid 89 [ 144.828772][ T5141] erofs (device loop1): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 144.843395][ T7476] erofs (device loop1): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 144.856197][ T7476] erofs (device loop1): read error -117 @ 1 of nid 89 [ 144.885170][ T30] audit: type=1800 audit(2000000024.690:17): pid=7476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.596" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 145.026350][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 145.043914][ T7484] deleting an unspecified loop device is not supported. [ 145.300680][ T7496] mmap: syz.1.608 (7496) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 145.489683][ T30] audit: type=1326 audit(2000000025.300:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7504 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e499c799 code=0x7ffc0000 [ 145.603939][ T30] audit: type=1326 audit(2000000025.300:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7504 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e499c799 code=0x7ffc0000 [ 145.685902][ T7516] kAFS: No cell specified [ 145.689760][ T30] audit: type=1326 audit(2000000025.330:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7504 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f09e499c799 code=0x7ffc0000 [ 145.755274][ T7519] qrtr: Invalid version 17 [ 145.776294][ T30] audit: type=1326 audit(2000000025.330:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7504 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e499c799 code=0x7ffc0000 [ 145.830595][ T30] audit: type=1326 audit(2000000025.330:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7504 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e499c799 code=0x7ffc0000 [ 145.908529][ T7521] QAT: failed to copy from user cfg_data. [ 145.976123][ T7528] loop3: detected capacity change from 0 to 164 [ 145.986750][ T7528] Unable to read rock-ridge attributes [ 146.015829][ T7528] Unable to read rock-ridge attributes [ 146.035611][ T7528] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 146.163498][ T7534] loop0: detected capacity change from 0 to 256 [ 146.337816][ T7534] FAT-fs (loop0): Directory bread(block 64) failed [ 146.360818][ T7534] FAT-fs (loop0): Directory bread(block 65) failed [ 146.390354][ T7542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.629'. [ 146.401924][ T7534] FAT-fs (loop0): Directory bread(block 66) failed [ 146.432051][ T7534] FAT-fs (loop0): Directory bread(block 67) failed [ 146.452355][ T7534] FAT-fs (loop0): Directory bread(block 68) failed [ 146.469699][ T7534] FAT-fs (loop0): Directory bread(block 69) failed [ 146.515892][ T7534] FAT-fs (loop0): Directory bread(block 70) failed [ 146.533109][ T7534] FAT-fs (loop0): Directory bread(block 71) failed [ 146.570114][ T7534] FAT-fs (loop0): Directory bread(block 72) failed [ 146.589166][ T7534] FAT-fs (loop0): Directory bread(block 73) failed [ 147.106472][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'. [ 147.139936][ T7576] netlink: 'syz.4.645': attribute type 10 has an invalid length. [ 147.156075][ T7576] netlink: 228 bytes leftover after parsing attributes in process `syz.4.645'. [ 147.783457][ T7604] loop3: detected capacity change from 0 to 764 [ 148.062103][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.666'. [ 148.122008][ T7618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.289032][ T7624] ptrace attach of "./syz-executor exec"[5820] was attempted by " Œ Ðÿ ð¥ Àÿ Àÿ Ðÿ À• ðÿ °ÿ Àÿ ÿÿÿÿ"[7624] [ 148.516423][ T7633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.674'. [ 148.787483][ T7645] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 148.819397][ T7646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.681'. [ 148.926529][ T7646] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 149.189301][ T7659] netlink: 'syz.0.687': attribute type 1 has an invalid length. [ 149.589585][ T7678] netlink: 52 bytes leftover after parsing attributes in process `syz.0.698'. [ 149.654303][ T7682] loop3: detected capacity change from 0 to 128 [ 149.709062][ T5891] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 149.877389][ T5891] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 149.895869][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'. [ 149.919925][ T5891] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.950145][ T7694] loop4: detected capacity change from 0 to 256 [ 149.958763][ T5891] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 149.985863][ T5891] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 150.004520][ T5891] usb 2-1: Product: syz [ 150.022178][ T5891] usb 2-1: Manufacturer: syz [ 150.050900][ T5891] hub 2-1:4.0: USB hub found [ 150.143284][ T7694] FAT-fs (loop4): Directory bread(block 64) failed [ 150.175827][ T7694] FAT-fs (loop4): Directory bread(block 65) failed [ 150.207038][ T7694] FAT-fs (loop4): Directory bread(block 66) failed [ 150.234039][ T7694] FAT-fs (loop4): Directory bread(block 67) failed [ 150.255590][ T7694] FAT-fs (loop4): Directory bread(block 68) failed [ 150.256362][ T5891] hub 2-1:4.0: 2 ports detected [ 150.269352][ T7694] FAT-fs (loop4): Directory bread(block 69) failed [ 150.288328][ T5891] hub 2-1:4.0: insufficient power available to use all downstream ports [ 150.290460][ T7702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.709'. [ 150.315646][ T7694] FAT-fs (loop4): Directory bread(block 70) failed [ 150.345582][ T7694] FAT-fs (loop4): Directory bread(block 71) failed [ 150.365694][ T7694] FAT-fs (loop4): Directory bread(block 72) failed [ 150.372313][ T7694] FAT-fs (loop4): Directory bread(block 73) failed [ 150.464963][ T5891] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 150.488120][ T5891] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 150.548123][ T7712] comedi comedi3: pcl818: I/O port conflict (0x4,16) [ 150.563155][ T5891] usb 2-1: USB disconnect, device number 3 [ 150.979392][ T7727] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 151.005965][ T7727] block device autoloading is deprecated and will be removed. [ 151.243103][ T7743] netlink: 'syz.2.729': attribute type 1 has an invalid length. [ 151.514910][ T7757] netlink: zone id is out of range [ 151.545674][ T7757] netlink: zone id is out of range [ 151.565015][ T7757] netlink: zone id is out of range [ 151.581664][ T7757] netlink: zone id is out of range [ 151.593928][ T7757] netlink: zone id is out of range [ 151.599602][ T7757] netlink: zone id is out of range [ 151.604884][ T7757] netlink: zone id is out of range [ 151.610437][ T7757] netlink: zone id is out of range [ 151.645616][ T7757] netlink: zone id is out of range [ 151.650947][ T7757] netlink: zone id is out of range [ 151.838189][ T7772] netlink: 5 bytes leftover after parsing attributes in process `syz.1.741'. [ 152.056305][ T5891] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 152.157035][ T30] audit: type=1326 audit(2000000031.970:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.0.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569659c799 code=0x7ffc0000 [ 152.235898][ T5891] usb 4-1: Using ep0 maxpacket: 8 [ 152.257639][ T7789] netlink: 68 bytes leftover after parsing attributes in process `syz.4.753'. [ 152.266746][ T30] audit: type=1326 audit(2000000031.970:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.0.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569659c799 code=0x7ffc0000 [ 152.266800][ T30] audit: type=1326 audit(2000000032.000:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.0.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f569659c799 code=0x7ffc0000 [ 152.266900][ T30] audit: type=1326 audit(2000000032.000:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.0.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569659c799 code=0x7ffc0000 [ 152.266985][ T30] audit: type=1326 audit(2000000032.000:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.0.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569659c799 code=0x7ffc0000 [ 152.375784][ T5891] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 152.385202][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.407450][ T5891] usb 4-1: config 0 has no interface number 0 [ 152.413614][ T5891] usb 4-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 152.425859][ T5891] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 152.437186][ T5891] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 152.454291][ T5891] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.467724][ T5891] usb 4-1: config 0 interface 52 has no altsetting 0 [ 152.474714][ T5891] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 152.486813][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.507749][ T5891] usb 4-1: config 0 descriptor?? [ 152.516032][ T7795] netlink: 'syz.0.755': attribute type 21 has an invalid length. [ 152.740482][ T5891] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input10 [ 152.969257][ T5891] usb 4-1: USB disconnect, device number 5 [ 152.969334][ C1] synaptics_usb 4-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 153.062476][ T7814] comedi comedi2: ni_at_a2150: I/O port conflict (0xafff,28) [ 153.290365][ T7824] loop4: detected capacity change from 0 to 512 [ 153.317561][ T7824] EXT4-fs: Ignoring removed nobh option [ 153.370943][ T7824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.404899][ T7824] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.449559][ T7833] cgroup: noprefix used incorrectly [ 153.497027][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.890553][ T30] audit: type=1326 audit(2000000033.700:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff911b9c799 code=0x7ffc0000 [ 153.972340][ T30] audit: type=1326 audit(2000000033.700:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff911b9c799 code=0x7ffc0000 [ 154.083186][ T30] audit: type=1326 audit(2000000033.730:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ff911b9c799 code=0x7ffc0000 [ 154.165251][ T30] audit: type=1326 audit(2000000033.730:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff911b9c799 code=0x7ffc0000 [ 154.238457][ T30] audit: type=1326 audit(2000000033.730:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff911b9c799 code=0x7ffc0000 [ 154.723948][ T7883] loop3: detected capacity change from 0 to 736 [ 154.858993][ T7887] loop0: detected capacity change from 0 to 1764 [ 154.888761][ T7887] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 154.898550][ T7883] rock: directory entry would overflow storage [ 154.935083][ T7883] rock: sig=0x3b10, size=4, remaining=3 [ 154.972037][ T7887] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 155.218908][ T7899] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 155.225686][ T7899] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 155.235363][ T7893] loop4: detected capacity change from 0 to 4096 [ 155.242670][ T7874] loop1: detected capacity change from 0 to 32768 [ 155.270961][ T7874] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.792 (7874) [ 155.284794][ T7899] vhci_hcd vhci_hcd.0: Device attached [ 155.323695][ T7893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.363262][ T7902] vhci_hcd vhci_hcd.0: port 0 already used [ 155.369785][ T7874] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 155.380130][ T7900] vhci_hcd: connection closed [ 155.386626][ T173] vhci_hcd vhci_hcd.0: stop threads [ 155.437226][ T7874] BTRFS info (device loop1): using sha256 checksum algorithm [ 155.449080][ T173] vhci_hcd vhci_hcd.0: release socket [ 155.460859][ T173] vhci_hcd vhci_hcd.0: disconnect device [ 155.477682][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.563984][ T7921] netlink: 'syz.2.809': attribute type 1 has an invalid length. [ 155.627832][ T7921] netlink: 228 bytes leftover after parsing attributes in process `syz.2.809'. [ 155.659806][ T7874] BTRFS info (device loop1): enabling ssd optimizations [ 155.677865][ T7874] BTRFS info (device loop1): turning on async discard [ 155.715285][ T7874] BTRFS info (device loop1): enabling free space tree [ 155.770757][ T7931] loop4: detected capacity change from 0 to 256 [ 155.844572][ T5828] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 155.883077][ T7931] FAT-fs (loop4): Directory bread(block 64) failed [ 155.901391][ T7931] FAT-fs (loop4): Directory bread(block 65) failed [ 155.920123][ T7931] FAT-fs (loop4): Directory bread(block 66) failed [ 155.946341][ T7931] FAT-fs (loop4): Directory bread(block 67) failed [ 155.953037][ T7931] FAT-fs (loop4): Directory bread(block 68) failed [ 155.966069][ T7931] FAT-fs (loop4): Directory bread(block 69) failed [ 155.973200][ T7931] FAT-fs (loop4): Directory bread(block 70) failed [ 156.039180][ T7931] FAT-fs (loop4): Directory bread(block 71) failed [ 156.082764][ T7931] FAT-fs (loop4): Directory bread(block 72) failed [ 156.115651][ T7931] FAT-fs (loop4): Directory bread(block 73) failed [ 156.134119][ T7939] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 156.162723][ T7939] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 156.717898][ T7958] loop2: detected capacity change from 0 to 164 [ 156.783705][ T7958] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 157.387400][ T7976] loop2: detected capacity change from 0 to 256 [ 157.435113][ T7976] FAT-fs (loop2): Directory bread(block 64) failed [ 157.457420][ T7976] FAT-fs (loop2): Directory bread(block 65) failed [ 157.477190][ T7976] FAT-fs (loop2): Directory bread(block 66) failed [ 157.497353][ T7976] FAT-fs (loop2): Directory bread(block 67) failed [ 157.525769][ T7976] FAT-fs (loop2): Directory bread(block 68) failed [ 157.532404][ T7976] FAT-fs (loop2): Directory bread(block 69) failed [ 157.556102][ T7976] FAT-fs (loop2): Directory bread(block 70) failed [ 157.572688][ T7954] loop3: detected capacity change from 0 to 32768 [ 157.581454][ T7976] FAT-fs (loop2): Directory bread(block 71) failed [ 157.590984][ T7976] FAT-fs (loop2): Directory bread(block 72) failed [ 157.600549][ T7976] FAT-fs (loop2): Directory bread(block 73) failed [ 157.649424][ T7954] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 157.774038][ T7954] XFS (loop3): Ending clean mount [ 157.981808][ T5834] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 158.018218][ T7998] loop2: detected capacity change from 0 to 512 [ 158.049831][ T7998] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 158.133324][ T7998] FAT-fs (loop2): FAT read failed (blocknr 1568) [ 158.307002][ T8008] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 158.994183][ T8036] loop4: detected capacity change from 0 to 256 [ 159.160649][ T8041] warning: `syz.0.860' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 159.282320][ T8047] net_ratelimit: 4 callbacks suppressed [ 159.282343][ T8047] openvswitch: netlink: Missing key (keys=800040, expected=2000) [ 159.428898][ T30] audit: type=1326 audit(2000000039.240:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8053 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569659c799 code=0x7ffc0000 [ 159.504861][ T30] audit: type=1326 audit(2000000039.240:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8053 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569659c799 code=0x7ffc0000 [ 159.555797][ T8059] ieee802154 phy0 wpan0: encryption failed: -22 [ 159.586500][ T30] audit: type=1326 audit(2000000039.290:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8053 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f569659c799 code=0x7ffc0000 [ 159.645795][ T30] audit: type=1326 audit(2000000039.350:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8053 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569659c799 code=0x7ffc0000 [ 159.719230][ T30] audit: type=1326 audit(2000000039.350:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8053 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569659c799 code=0x7ffc0000 [ 159.839909][ T8070] ieee802154 phy0 wpan0: encryption failed: -22 [ 160.163217][ T8085] xt_l2tp: missing protocol rule (udp|l2tpip) [ 160.218722][ T8089] netlink: 32 bytes leftover after parsing attributes in process `syz.4.885'. [ 160.235266][ T8089] netlink: 32 bytes leftover after parsing attributes in process `syz.4.885'. [ 160.249050][ T8090] openvswitch: netlink: Tunnel attr 183 out of range max 16 [ 160.267314][ T30] audit: type=1326 audit(2000000040.070:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz.3.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e499c799 code=0x7ffc0000 [ 160.347115][ T30] audit: type=1326 audit(2000000040.070:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz.3.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e499c799 code=0x7ffc0000 [ 160.419795][ T30] audit: type=1326 audit(2000000040.120:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz.3.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f09e499c799 code=0x7ffc0000 [ 160.463101][ T30] audit: type=1326 audit(2000000040.120:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz.3.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e499c799 code=0x7ffc0000 [ 160.466871][ T8089] netlink: 32 bytes leftover after parsing attributes in process `syz.4.885'. [ 160.516906][ T8089] netlink: 32 bytes leftover after parsing attributes in process `syz.4.885'. [ 160.528495][ T30] audit: type=1326 audit(2000000040.120:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz.3.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e499c799 code=0x7ffc0000 [ 160.762434][ T8108] loop2: detected capacity change from 0 to 512 [ 160.795131][ T8108] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 160.840482][ T8108] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 160.869625][ T8108] EXT4-fs (loop2): orphan cleanup on readonly fs [ 160.898325][ T8108] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.893: bad orphan inode 267 [ 160.898789][ T8089] netlink: 32 bytes leftover after parsing attributes in process `syz.4.885'. [ 160.937605][ T8089] netlink: 32 bytes leftover after parsing attributes in process `syz.4.885'. [ 160.965062][ T8108] loop2: lost filesystem error report for type 5 error -117 [ 160.965534][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 160.979676][ C0] EXT4-fs (loop2): initial error at time 2000000040: ext4_orphan_get:1417 [ 160.988295][ C0] EXT4-fs (loop2): last error at time 2000000040: ext4_orphan_get:1417 [ 161.007242][ T8108] EXT4-fs (loop2): Remounting filesystem read-only [ 161.092161][ T8108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 161.183414][ T8108] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.893: dx entry: limit 0 != root limit 125 [ 161.218863][ T8108] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.893: Corrupt directory, running e2fsck is recommended [ 161.239994][ T8126] netlink: 'syz.4.901': attribute type 10 has an invalid length. [ 161.247955][ T8126] netlink: 40 bytes leftover after parsing attributes in process `syz.4.901'. [ 161.293412][ T8126] team0: entered promiscuous mode [ 161.313579][ T8126] team_slave_0: entered promiscuous mode [ 161.336165][ T8126] team_slave_1: entered promiscuous mode [ 161.393127][ T8126] team0: entered allmulticast mode [ 161.406976][ T8126] team_slave_0: entered allmulticast mode [ 161.413016][ T8126] team_slave_1: entered allmulticast mode [ 161.420989][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 161.427852][ T8126] bridge0: port 3(team0) entered blocking state [ 161.497825][ T8126] bridge0: port 3(team0) entered disabled state [ 161.522299][ T8126] bridge0: port 3(team0) entered blocking state [ 161.528809][ T8126] bridge0: port 3(team0) entered forwarding state [ 161.593395][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.907'. [ 161.624168][ T8139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.907'. [ 161.790735][ T8145] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 161.939798][ T8156] loop0: detected capacity change from 0 to 736 [ 161.955676][ T29] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 162.135671][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 162.179893][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.209499][ T29] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 162.236189][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.249056][ T29] usb 3-1: Product: syz [ 162.254506][ T29] usb 3-1: Manufacturer: syz [ 162.261816][ T29] usb 3-1: SerialNumber: syz [ 162.270600][ T29] usb 3-1: config 0 descriptor?? [ 162.300535][ T29] usb 3-1: bad CDC descriptors [ 162.319401][ T29] usb 3-1: unsupported MDLM descriptors [ 162.377497][ T8174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.923'. [ 162.380264][ T8173] netlink: 'syz.4.924': attribute type 33 has an invalid length. [ 162.403864][ T8172] loop3: detected capacity change from 0 to 256 [ 162.435653][ T8172] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 162.452489][ T8172] FAT-fs (loop3): Filesystem has been set read-only [ 162.460536][ T8172] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 162.512014][ T8172] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 162.529315][ T29] usb 3-1: USB disconnect, device number 2 [ 162.556316][ T8172] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 162.582510][ T8172] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 162.598442][ T8179] QAT: failed to copy from user cfg_data. [ 162.604311][ T8172] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 162.638217][ T8172] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 162.686741][ T8172] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 162.715816][ T8172] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 162.974468][ T8192] Driver unsupported XDP return value 0 on prog (id 49) dev N/A, expect packet loss! [ 163.148991][ T8199] xt_hashlimit: size too large, truncated to 1048576 [ 163.160397][ T8197] IPv6: sit1: Disabled Multicast RS [ 163.167603][ T5891] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 163.177492][ T8199] xt_hashlimit: invalid rate [ 163.183642][ T8197] sit1: entered allmulticast mode [ 163.359474][ T5891] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 163.372773][ T8208] loop0: detected capacity change from 0 to 512 [ 163.401755][ T5891] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.445099][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 163.479148][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 163.514250][ T8208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.521311][ T5891] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.545763][ T8208] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.620180][ T5891] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 163.655607][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.678544][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.698344][ T5891] usb 4-1: Product: syz [ 163.702620][ T5891] usb 4-1: Manufacturer: syz [ 163.720616][ T5891] usb 4-1: SerialNumber: syz [ 163.749587][ T8221] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 163.819392][ T5891] usb 4-1: config 0 descriptor?? [ 163.876411][ T5891] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11 [ 163.897978][ T8225] loop4: detected capacity change from 0 to 2048 [ 163.919557][ T8225] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.169084][ T5898] usb 4-1: USB disconnect, device number 6 [ 164.211088][ T8237] netlink: 'syz.2.954': attribute type 1 has an invalid length. [ 164.386308][ T8242] binder: binder_mmap: 8241 2000004cd000-2000004ce000 bad vm_flags failed -1 [ 164.776794][ T8262] fuse: blksize only supported for fuseblk [ 164.899585][ T8267] netlink: 'syz.1.969': attribute type 10 has an invalid length. [ 165.025652][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 165.025672][ T30] audit: type=1400 audit(2000000044.820:44): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=8271 comm="syz.3.971" [ 165.616007][ T29] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 165.820982][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 165.838280][ T29] usb 1-1: config 0 has an invalid interface number: 88 but max is 3 [ 165.870073][ T29] usb 1-1: config 0 has an invalid interface number: 250 but max is 3 [ 165.888620][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.918248][ T29] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 165.935369][ T29] usb 1-1: config 0 has no interface number 0 [ 165.951244][ T29] usb 1-1: config 0 has no interface number 1 [ 165.958041][ T29] usb 1-1: config 0 interface 88 has no altsetting 0 [ 165.964778][ T29] usb 1-1: config 0 interface 250 has no altsetting 0 [ 165.992652][ T29] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=12.b3 [ 166.035949][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.065033][ T29] usb 1-1: config 0 descriptor?? [ 166.238121][ T8329] loop2: detected capacity change from 0 to 8 [ 166.245437][ T8329] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 166.281029][ T8329] cramfs: Error -5 while decompressing! [ 166.297602][ T6063] udevd[6063]: incorrect cramfs checksum on /dev/loop2 [ 166.305060][ T8329] cramfs: ffffffff9a3b9b08(18)->ffff888054f33000(4096) [ 166.313177][ T29] usb 1-1: string descriptor 0 read error: -71 [ 166.340274][ T8329] cramfs: Error -5 while decompressing! [ 166.347204][ T29] usb 1-1: USB disconnect, device number 4 [ 166.355274][ T8329] cramfs: ffffffff9a3b9b08(18)->ffff888054f33000(4096) [ 166.388748][ T30] audit: type=1800 audit(2000000046.200:45): pid=8329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1000" name="file1" dev="loop2" ino=324 res=0 errno=0 [ 166.562650][ T8338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.049595][ T8362] loop3: detected capacity change from 0 to 256 [ 167.084384][ T8362] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 167.154328][ T8365] netlink: 'syz.2.1018': attribute type 8 has an invalid length. [ 167.333023][ T8372] netlink: 'syz.1.1022': attribute type 4 has an invalid length. [ 167.365672][ T8372] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1022'. [ 167.480696][ T8378] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 167.873500][ T8401] loop4: detected capacity change from 0 to 64 [ 167.886188][ T8403] veth1: entered promiscuous mode [ 167.919006][ T8401] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. Mounting read-only. [ 167.955635][ T8401] hfs: filesystem is marked locked, mounting read-only. [ 168.056651][ T8404] can: request_module (can-proto-0) failed. [ 168.374760][ T8420] loop0: detected capacity change from 0 to 1024 [ 168.448579][ T8420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.556933][ T8429] veth4: entered promiscuous mode [ 168.598184][ T8429] veth4: entered allmulticast mode [ 168.730531][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.868218][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1047'. [ 168.971895][ T8442] loop0: detected capacity change from 0 to 1024 [ 169.181153][ T8448] loop3: detected capacity change from 0 to 1024 [ 169.220445][ T8448] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.241064][ T2209] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 169.407822][ T2209] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 169.430701][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 169.451742][ T2209] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 169.473970][ T2209] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 169.498905][ T2209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.517030][ T2209] usb 2-1: Product: syz [ 169.521436][ T2209] usb 2-1: Manufacturer: syz [ 169.542766][ T2209] usb 2-1: SerialNumber: syz [ 169.582105][ T2209] usb 2-1: config 0 descriptor?? [ 169.611173][ T2209] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 169.646577][ T8454] netlink: 'syz.2.1058': attribute type 5 has an invalid length. [ 169.934341][ T8464] loop3: detected capacity change from 0 to 4096 [ 169.993325][ T8464] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 170.025351][ T8464] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 170.038202][ T2209] gspca_sunplus: reg_r err -71 [ 170.043129][ T2209] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 170.089533][ T2209] usb 2-1: USB disconnect, device number 4 [ 170.104980][ T1162] kworker/u8:8: attempt to access beyond end of device [ 170.104980][ T1162] loop0: rw=1, sector=2412, nr_sectors = 2056 limit=1024 [ 170.119876][ T8471] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.140998][ T1162] kworker/u8:8: attempt to access beyond end of device [ 170.140998][ T1162] loop0: rw=1, sector=4468, nr_sectors = 2064 limit=1024 [ 170.170870][ T8464] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 170.211659][ T1162] kworker/u8:8: attempt to access beyond end of device [ 170.211659][ T1162] loop0: rw=1, sector=6532, nr_sectors = 3144 limit=1024 [ 170.242831][ T8464] Remounting filesystem read-only [ 170.270370][ T1162] kworker/u8:8: attempt to access beyond end of device [ 170.270370][ T1162] loop0: rw=1, sector=9676, nr_sectors = 3224 limit=1024 [ 170.290879][ T1162] kworker/u8:8: attempt to access beyond end of device [ 170.290879][ T1162] loop0: rw=1, sector=12900, nr_sectors = 2248 limit=1024 [ 170.312553][ T1162] kworker/u8:8: attempt to access beyond end of device [ 170.312553][ T1162] loop0: rw=1, sector=15148, nr_sectors = 3608 limit=1024 [ 170.501893][ T8477] loop3: detected capacity change from 0 to 256 [ 170.579324][ T8477] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 170.655724][ T8477] exFAT-fs (loop3): valid_size(150994954) is greater than size(10) [ 170.907154][ T8488] loop2: detected capacity change from 0 to 4096 [ 171.016085][ T8495] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.137104][ T8488] NILFS (loop2): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 171.157402][ T8500] loop0: detected capacity change from 0 to 256 [ 171.208676][ T8500] exfat: Deprecated parameter 'namecase' [ 171.263934][ T8500] exfat: Deprecated parameter 'namecase' [ 171.309009][ T8500] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 171.583764][ T8512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1085'. [ 171.625341][ T8516] netlink: 'syz.4.1087': attribute type 28 has an invalid length. [ 171.661525][ T8516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1087'. [ 172.272607][ T8543] loop3: detected capacity change from 0 to 64 [ 172.705153][ T8557] loop1: detected capacity change from 0 to 64 [ 172.837147][ T8531] loop4: detected capacity change from 0 to 32768 [ 172.864972][ T8531] xfs: Deprecated parameter 'attr2' [ 172.877909][ T8556] loop0: detected capacity change from 0 to 4096 [ 172.885048][ T8531] XFS: attr2 mount option is deprecated. [ 172.913204][ T8556] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 172.975759][ T8531] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 172.989755][ T8556] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 173.010135][ T8564] loop2: detected capacity change from 0 to 64 [ 173.119058][ T8531] XFS (loop4): Ending clean mount [ 173.207237][ T8531] XFS (loop4): Quotacheck needed: Please wait. [ 173.286570][ T8531] XFS (loop4): Quotacheck: Done. [ 173.464496][ T5833] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 173.776158][ T8596] netlink: 'syz.1.1123': attribute type 11 has an invalid length. [ 173.828546][ T8593] nvme_fabrics: missing parameter 'transport=%s' [ 173.875652][ T8593] nvme_fabrics: missing parameter 'nqn=%s' [ 174.109089][ T8610] xt_TCPMSS: Only works on TCP SYN packets [ 174.135983][ T796] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 174.164821][ T8612] comedi comedi2: rti802: I/O port conflict (0xffffffffffffffff,4) [ 174.308446][ T796] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 174.356319][ T796] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 174.393888][ T796] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 174.417741][ T796] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 174.431223][ T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.467879][ T796] usb 1-1: Product: syz [ 174.472140][ T796] usb 1-1: Manufacturer: syz [ 174.494037][ T796] usb 1-1: SerialNumber: syz [ 174.514317][ T796] usb 1-1: config 0 descriptor?? [ 174.530447][ T8600] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 174.538554][ T8625] loop2: detected capacity change from 0 to 256 [ 174.557828][ T8600] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 174.569551][ T8628] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 174.610298][ T796] usb 1-1: ucan: probing device on interface #0 [ 174.714367][ T8625] FAT-fs (loop2): Directory bread(block 64) failed [ 174.740604][ T30] audit: type=1326 audit(2000000054.550:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.3.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e499c799 code=0x7ffc0000 [ 174.775658][ T8625] FAT-fs (loop2): Directory bread(block 65) failed [ 174.802381][ T796] usb 1-1: ucan: device protocol version 0 is not supported [ 174.808721][ T8625] FAT-fs (loop2): Directory bread(block 66) failed [ 174.827049][ T796] usb 1-1: ucan: probe failed; try to update the device firmware [ 174.838391][ T8625] FAT-fs (loop2): Directory bread(block 67) failed [ 174.845043][ T8625] FAT-fs (loop2): Directory bread(block 68) failed [ 174.851748][ T30] audit: type=1326 audit(2000000054.550:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.3.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e499c799 code=0x7ffc0000 [ 174.916268][ T8625] FAT-fs (loop2): Directory bread(block 69) failed [ 174.937285][ T8625] FAT-fs (loop2): Directory bread(block 70) failed [ 174.943887][ T8625] FAT-fs (loop2): Directory bread(block 71) failed [ 174.951509][ T30] audit: type=1326 audit(2000000054.560:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.3.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f09e499c799 code=0x7ffc0000 [ 174.995994][ T8625] FAT-fs (loop2): Directory bread(block 72) failed [ 175.002614][ T8625] FAT-fs (loop2): Directory bread(block 73) failed [ 175.013386][ T2209] usb 1-1: USB disconnect, device number 5 [ 175.019478][ T30] audit: type=1326 audit(2000000054.560:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.3.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e499c799 code=0x7ffc0000 [ 175.094344][ T8640] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 175.106010][ T30] audit: type=1326 audit(2000000054.560:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.3.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e499c799 code=0x7ffc0000 [ 175.138545][ T8640] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 175.408251][ T8648] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1148'. [ 175.436693][ T8648] 0ªX¹¦À: renamed from caif0 [ 175.450670][ T8648] 0ªX¹¦À: entered allmulticast mode [ 175.466113][ T8648] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 175.483844][ T8632] loop1: detected capacity change from 0 to 32768 [ 175.497712][ T8632] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1140 (8632) [ 175.546008][ T8632] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 175.571618][ T8632] BTRFS info (device loop1): using crc32c checksum algorithm [ 175.594297][ T8632] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 175.709923][ T8632] BTRFS info (device loop1): rebuilding free space tree [ 175.790215][ T8632] BTRFS info (device loop1): disabling free space tree [ 175.844842][ T8632] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 175.868372][ T8632] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 175.959790][ T8632] BTRFS info (device loop1): enabling ssd optimizations [ 175.985733][ T8632] BTRFS info (device loop1): turning on async discard [ 176.007487][ T8632] BTRFS info (device loop1): enabling disk space caching [ 176.040764][ T8632] BTRFS info (device loop1): force clearing of disk cache [ 176.064951][ T8632] BTRFS info (device loop1): use zstd compression, level 3 [ 176.153174][ T8682] geneve2: entered promiscuous mode [ 176.195991][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.244979][ T8685] loop0: detected capacity change from 0 to 256 [ 176.251604][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.297631][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.330703][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.365783][ T5828] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 176.927086][ T8708] netlink: 'syz.4.1170': attribute type 4 has an invalid length. [ 176.964821][ T8708] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1170'. [ 177.096057][ T2209] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 177.201398][ T8720] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 177.253327][ T8720] CIFS mount error: No usable UNC path provided in device string! [ 177.253327][ T8720] [ 177.276050][ T8720] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 177.285591][ T2209] usb 1-1: Using ep0 maxpacket: 32 [ 177.304139][ T2209] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.343477][ T2209] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.392348][ T2209] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 177.425631][ T2209] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 177.434535][ T2209] usb 1-1: Product: syz [ 177.442177][ T2209] usb 1-1: Manufacturer: syz [ 177.470640][ T2209] hub 1-1:4.0: USB hub found [ 177.589282][ T8732] loop3: detected capacity change from 0 to 512 [ 177.638738][ T8734] openvswitch: netlink: IP tunnel TTL not specified. [ 177.663064][ T8732] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 177.688047][ T2209] hub 1-1:4.0: 2 ports detected [ 177.695980][ T8732] EXT4-fs (loop3): orphan cleanup on readonly fs [ 177.748446][ T8732] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 177.826318][ T8732] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 177.864823][ T8732] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.1182: Failed to acquire dquot type 1 [ 177.880050][ T2209] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 177.895560][ T2209] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 177.895754][ T8732] loop3: lost filesystem error report for type 5 error -5 [ 177.933412][ T8732] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1182: bg 0: block 40: padding at end of block bitmap is not set [ 177.940909][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 177.940934][ C1] EXT4-fs (loop3): initial error at time 2000000057: ext4_acquire_dquot:7001 [ 177.940961][ C1] EXT4-fs (loop3): last error at time 2000000057: ext4_acquire_dquot:7001 [ 177.983383][ T8732] loop3: lost filesystem error report for type 5 error -117 [ 177.987729][ T8732] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 178.010644][ T8732] loop3: lost filesystem error report for type 5 error -117 [ 178.013532][ T8732] EXT4-fs (loop3): 1 truncate cleaned up [ 178.050012][ T2209] usb 1-1: USB disconnect, device number 6 [ 178.108194][ T8732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 178.282391][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.327132][ T8757] netlink: 'syz.1.1193': attribute type 1 has an invalid length. [ 178.372077][ T8757] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1193'. [ 178.385111][ T8757] NCSI netlink: No device for ifindex 0 [ 178.455617][ T29] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 178.596431][ T8767] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 178.604079][ T8767] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 178.636259][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 178.654592][ T29] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 178.675889][ T8771] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1201'. [ 178.686463][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.694680][ T29] usb 3-1: Product: syz [ 178.734270][ T29] usb 3-1: Manufacturer: syz [ 178.746016][ T29] usb 3-1: SerialNumber: syz [ 178.797516][ T8775] QAT: failed to copy from user cfg_data. [ 178.997721][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 179.043311][ T29] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 179.205596][ T5906] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 179.218663][ T29] snd-usb-audio 3-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 179.241284][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1212'. [ 179.257674][ T29] usb 3-1: USB disconnect, device number 3 [ 179.269046][ T8793] openvswitch: netlink: Duplicate key (type 32). [ 179.309663][ T6063] udevd[6063]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.406608][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 179.424991][ T5906] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.450423][ T5906] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 179.461638][ T5906] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.474974][ T5906] usb 5-1: config 0 interface 0 has no altsetting 0 [ 179.508164][ T5906] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 179.525568][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.537269][ T5906] usb 5-1: Product: syz [ 179.543827][ T5906] usb 5-1: Manufacturer: syz [ 179.562580][ T5906] usb 5-1: SerialNumber: syz [ 179.578752][ T5906] usb 5-1: config 0 descriptor?? [ 179.696388][ T8803] loop1: detected capacity change from 0 to 2048 [ 179.731207][ T8803] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 179.768011][ T8803] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 179.839138][ T8803] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.942693][ T8797] loop3: detected capacity change from 0 to 32768 [ 179.969876][ T8797] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1213 (8797) [ 180.040966][ T8797] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 180.060516][ T8797] BTRFS info (device loop3): using xxhash64 checksum algorithm [ 180.070508][ T5891] usb 5-1: USB disconnect, device number 4 [ 180.268058][ T8797] BTRFS info (device loop3): enabling ssd optimizations [ 180.303419][ T8797] BTRFS info (device loop3): turning on flush-on-commit [ 180.347872][ T8797] BTRFS info (device loop3): turning on async discard [ 180.354742][ T8797] BTRFS info (device loop3): enabling free space tree [ 180.415946][ T8797] BTRFS info (device loop3): force zlib compression, level 3 [ 180.438670][ T8797] BTRFS info (device loop3): max_inline set to 4096 [ 180.619633][ T5834] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 180.659069][ T8829] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1222'. [ 180.670855][ T8801] loop0: detected capacity change from 0 to 40427 [ 180.692249][ T8801] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 180.710964][ T8801] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 180.747500][ T8801] F2FS-fs (loop0): invalid crc value [ 180.805682][ T8805] loop2: detected capacity change from 0 to 32768 [ 180.855653][ T8805] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1218 (8805) [ 180.987625][ T8805] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 181.035013][ T8805] BTRFS info (device loop2): using sha256 checksum algorithm [ 181.283058][ T8801] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 181.322212][ T8805] BTRFS info (device loop2): enabling ssd optimizations [ 181.366771][ T8805] BTRFS info (device loop2): turning on async discard [ 181.373610][ T8805] BTRFS info (device loop2): enabling free space tree [ 181.422832][ T8864] loop3: detected capacity change from 0 to 8 [ 181.431116][ T8801] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 181.449845][ T8801] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 181.632280][ T5825] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 182.142257][ T8880] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1238'. [ 182.272684][ T8882] loop1: detected capacity change from 0 to 256 [ 182.281933][ T8859] loop4: detected capacity change from 0 to 32768 [ 182.307872][ T8859] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1227 (8859) [ 182.358772][ T8882] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 182.409833][ T8859] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 182.437912][ T8859] BTRFS info (device loop4): using sha256 checksum algorithm [ 182.664609][ T8859] BTRFS info (device loop4): enabling ssd optimizations [ 182.681902][ T8859] BTRFS info (device loop4): turning on async discard [ 182.695558][ T8859] BTRFS info (device loop4): enabling free space tree [ 182.729203][ T8901] openvswitch: netlink: IP tunnel dst address not specified [ 182.874013][ T8878] loop2: detected capacity change from 0 to 32768 [ 182.913152][ T8878] (syz.2.1237,8878,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 182.913424][ T5833] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 182.961140][ T8878] (syz.2.1237,8878,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 183.006419][ T8903] loop3: detected capacity change from 0 to 4096 [ 183.096517][ T8878] JBD2: Ignoring recovery information on journal [ 183.232981][ T8878] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 183.261514][ T8903] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 183.513437][ T8922] loop0: detected capacity change from 0 to 1024 [ 183.535715][ T8922] EXT4-fs: Ignoring removed bh option [ 183.610838][ T8922] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.663639][ T8930] mmap: syz.4.1251 (8930): VmData 37462016 exceed data ulimit 84. Update limits or use boot option ignore_rlimit_data. [ 183.756466][ T5825] ocfs2: Unmounting device (7,2) on (node local) [ 183.756657][ T8922] EXT4-fs warning (device loop0): ext4_empty_dir:3087: inode #11: comm syz.0.1249: directory missing '.' [ 183.953413][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.055945][ T8939] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1256'. [ 184.420149][ T8953] program syz.4.1262 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.570668][ T8957] bond1 (unregistering): Released all slaves [ 184.648362][ T8966] loop4: detected capacity change from 0 to 512 [ 184.710710][ T8966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.950961][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.223765][ T8950] loop1: detected capacity change from 0 to 32768 [ 185.252271][ T8950] (syz.1.1263,8950,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 185.266132][ T5891] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 185.295439][ T8950] (syz.1.1263,8950,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 185.349664][ T8950] JBD2: Ignoring recovery information on journal [ 185.429425][ T5891] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.438270][ T8990] netlink: 'syz.0.1278': attribute type 6 has an invalid length. [ 185.447548][ T8990] netlink: 'syz.0.1278': attribute type 23 has an invalid length. [ 185.456082][ T8990] IPv6: NLM_F_CREATE should be specified when creating new route [ 185.477471][ T5891] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 185.528527][ T5891] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.541012][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.551694][ T5891] usb 3-1: Product: syz [ 185.573108][ T5891] usb 3-1: Manufacturer: syz [ 185.583233][ T5891] usb 3-1: SerialNumber: syz [ 185.590978][ T8950] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 185.647620][ T5891] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 185.669144][ T5891] cdc_ncm 3-1:1.0: bind() failure [ 185.703164][ T5891] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 185.710433][ T8997] veth1: left promiscuous mode [ 185.724056][ T8997] geneve2: left promiscuous mode [ 185.735679][ T5891] cdc_ncm 3-1:1.1: bind() failure [ 185.871523][ T5828] ocfs2: Unmounting device (7,1) on (node local) [ 185.939254][ T5898] usb 3-1: USB disconnect, device number 4 [ 185.996602][ T9005] program syz.4.1285 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.048520][ T9001] loop0: detected capacity change from 0 to 4096 [ 186.123077][ T9006] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 186.616607][ T9031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1296'. [ 186.798067][ T9035] netlink: 'syz.0.1298': attribute type 19 has an invalid length. [ 186.819649][ T9040] sctp: [Deprecated]: syz.4.1300 (pid 9040) Use of int in max_burst socket option deprecated. [ 186.819649][ T9040] Use struct sctp_assoc_value instead [ 186.836447][ T9035] netlink: 'syz.0.1298': attribute type 28 has an invalid length. [ 186.844302][ T9035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1298'. [ 186.929099][ T9043] loop2: detected capacity change from 0 to 64 [ 186.979351][ T9043] minix: block size(59136) > page size(4096) not supported by filesystem [ 187.015585][ T5891] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 187.180369][ T5891] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 187.198557][ T5891] usb 2-1: config 0 has no interface number 0 [ 187.215169][ T5891] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 187.240987][ T5891] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 187.270864][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.285600][ T5891] usb 2-1: Product: syz [ 187.291111][ T5891] usb 2-1: Manufacturer: syz [ 187.302827][ T5891] usb 2-1: SerialNumber: syz [ 187.316700][ T5891] usb 2-1: config 0 descriptor?? [ 187.325741][ T5877] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 187.367136][ T5891] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 187.538181][ T5877] usb 5-1: unable to get BOS descriptor or descriptor too short [ 187.556691][ T5877] usb 5-1: not running at top speed; connect to a high speed hub [ 187.584700][ T5877] usb 5-1: config 9 has an invalid interface number: 244 but max is 0 [ 187.595438][ C0] yurex 2-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 187.611701][ T5877] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 187.632437][ T5877] usb 5-1: config 9 has no interface number 0 [ 187.645557][ T5877] usb 5-1: config 9 interface 244 has no altsetting 0 [ 187.664842][ T5877] usb 5-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 187.684345][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.692776][ T5877] usb 5-1: Product: syz [ 187.702663][ T5877] usb 5-1: Manufacturer: syz [ 187.712739][ T5877] usb 5-1: SerialNumber: syz [ 187.746986][ T30] audit: type=1326 audit(2000000067.560:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9062 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c86b9c799 code=0x7ffc0000 [ 187.793505][ T30] audit: type=1326 audit(2000000067.560:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9062 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c86b9c799 code=0x7ffc0000 [ 187.826006][ T2209] usb 2-1: USB disconnect, device number 5 [ 187.858217][ T2209] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 187.866319][ T9051] loop0: detected capacity change from 0 to 32768 [ 187.874930][ T30] audit: type=1326 audit(2000000067.580:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9062 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f5c86b9c799 code=0x7ffc0000 [ 187.913676][ T9051] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1306 (9051) [ 187.925761][ T30] audit: type=1326 audit(2000000067.630:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9064 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5c86b5cfce code=0x7ffc0000 [ 187.965967][ T5877] ums-karma 5-1:9.244: USB Mass Storage device detected [ 187.975936][ T9051] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 187.993619][ T30] audit: type=1326 audit(2000000067.640:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9062 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c86b9c799 code=0x7ffc0000 [ 188.029168][ T9051] BTRFS info (device loop0): using sha256 checksum algorithm [ 188.085546][ T30] audit: type=1326 audit(2000000067.640:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9062 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c86b9c799 code=0x7ffc0000 [ 188.181848][ T30] audit: type=1326 audit(2000000067.790:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9064 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f5c86b9c799 code=0x7ffc0000 [ 188.237455][ T9051] BTRFS info (device loop0): enabling ssd optimizations [ 188.259030][ T9051] BTRFS info (device loop0): turning on async discard [ 188.266043][ T9051] BTRFS info (device loop0): enabling free space tree [ 188.332604][ T5877] usb 5-1: USB disconnect, device number 5 [ 188.440014][ T5820] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 188.667610][ T9095] netlink: 'syz.3.1320': attribute type 10 has an invalid length. [ 188.695597][ T9095] veth0_vlan: entered allmulticast mode [ 188.701602][ T9095] veth0_vlan: left promiscuous mode [ 188.753212][ T9095] veth0_vlan: entered promiscuous mode [ 188.795950][ T9095] team0: Device veth0_vlan failed to register rx_handler [ 188.978563][ T9104] netlink: 'syz.1.1324': attribute type 1 has an invalid length. [ 189.756551][ T9105] loop0: detected capacity change from 0 to 32768 [ 189.808056][ T9138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1340'. [ 189.830030][ T9135] loop3: detected capacity change from 0 to 1024 [ 189.831856][ T9105] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 189.989977][ T9105] XFS (loop0): Ending clean mount [ 190.032102][ T9105] XFS (loop0): Quotacheck needed: Please wait. [ 190.144810][ T9105] XFS (loop0): Quotacheck: Done. [ 190.328744][ T5820] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 190.361109][ T9157] loop2: detected capacity change from 0 to 64 [ 190.512564][ T9133] loop1: detected capacity change from 0 to 32768 [ 190.545371][ T9133] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1338 (9133) [ 190.583361][ T9159] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1348'. [ 190.636056][ T9133] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 190.665812][ T9133] BTRFS info (device loop1): using sha256 checksum algorithm [ 190.838318][ T9176] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 190.865397][ T9133] BTRFS info (device loop1): enabling ssd optimizations [ 190.879568][ T9133] BTRFS info (device loop1): turning on async discard [ 190.912656][ T58] kworker/u8:4: attempt to access beyond end of device [ 190.912656][ T58] loop3: rw=1, sector=7092, nr_sectors = 1608 limit=1024 [ 190.926643][ T9133] BTRFS info (device loop1): enabling free space tree [ 190.951020][ T9183] overlayfs: missing 'lowerdir' [ 191.100355][ T5828] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 191.168356][ T9187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1353'. [ 191.766657][ T9199] loop3: detected capacity change from 0 to 4096 [ 191.793653][ T9207] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request [ 191.864255][ T9211] Invalid ELF header magic: != ELF [ 192.101621][ T9220] xt_cluster: node mask cannot exceed total number of nodes [ 192.503309][ T9239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1379'. [ 192.516477][ T9237] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1377'. [ 192.563344][ T9237] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1377'. [ 192.989098][ T9260] xt_TPROXY: Can be used only with -p tcp or -p udp [ 193.481910][ T9242] loop3: detected capacity change from 0 to 32768 [ 193.530407][ T9282] loop4: detected capacity change from 0 to 164 [ 193.539662][ T9242] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 193.870711][ T9242] XFS (loop3): Ending clean mount [ 193.939104][ T9302] ip6t_REJECT: ECHOREPLY is not supported [ 194.013631][ T5834] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 194.067959][ T9304] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 194.314590][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.321302][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.788465][ T9336] loop0: detected capacity change from 0 to 512 [ 194.886205][ T9336] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.933724][ T9345] loop2: detected capacity change from 0 to 512 [ 194.976027][ T9345] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 194.989168][ T9348] netlink: 'syz.1.1426': attribute type 1 has an invalid length. [ 195.005831][ T9345] System zones: 1-12 [ 195.010023][ T9336] ext4 filesystem being mounted at /264/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.019484][ T9348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1426'. [ 195.042158][ T9345] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.1425: Directory hole found for htree index block 0 [ 195.058672][ T9345] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 195.065536][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 195.081113][ C0] EXT4-fs (loop2): initial error at time 2000000074: dx_probe:791: inode 2 [ 195.089805][ C0] EXT4-fs (loop2): last error at time 2000000074: dx_probe:791: inode 2 [ 195.098369][ T9345] EXT4-fs (loop2): Remounting filesystem read-only [ 195.117417][ T9345] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 195.175849][ T9345] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 195.223310][ T9345] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.238544][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.380535][ T9357] loop4: detected capacity change from 0 to 764 [ 195.393005][ T9345] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 195.455963][ T9357] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 195.498617][ T9357] Symlink component flag not implemented [ 195.526881][ T9357] Symlink component flag not implemented (7) [ 195.583611][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.765743][ T9372] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 195.790496][ T9372] /dev/nullb0: Can't open blockdev [ 195.992592][ T9375] loop2: detected capacity change from 0 to 2048 [ 196.038728][ T9375] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 196.124104][ T9383] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 196.142938][ T9386] loop3: detected capacity change from 0 to 64 [ 196.248753][ T9355] loop1: detected capacity change from 0 to 32768 [ 196.286543][ T9355] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1430 (9355) [ 196.338218][ T9355] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 196.389233][ T9355] BTRFS info (device loop1): using crc32c checksum algorithm [ 196.596598][ T9355] BTRFS info (device loop1): rebuilding free space tree [ 196.666660][ T9355] BTRFS info (device loop1): allowing degraded mounts [ 196.695890][ T9414] netlink: 'syz.4.1451': attribute type 10 has an invalid length. [ 196.699382][ T9355] BTRFS info (device loop1): enabling ssd optimizations [ 196.705015][ T9414] veth0_vlan: entered allmulticast mode [ 196.764326][ T9355] BTRFS info (device loop1): enabling free space tree [ 196.797421][ T9355] BTRFS info (device loop1): force clearing of disk cache [ 196.804614][ T9355] BTRFS info (device loop1): use zstd compression, level 3 [ 196.862142][ T9355] BTRFS info (device loop1): max_inline set to 0 [ 196.930948][ T9414] veth0_vlan: left promiscuous mode [ 196.983600][ T9414] veth0_vlan: entered promiscuous mode [ 197.036550][ T9414] team0: Device veth0_vlan failed to register rx_handler [ 197.304501][ T5828] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 197.565257][ T9435] loop3: detected capacity change from 0 to 4096 [ 197.693050][ T9435] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 197.772644][ T9435] ntfs3(loop3): Failed to load $Extend (-22). [ 197.805615][ T9435] ntfs3(loop3): Failed to initialize $Extend. [ 198.184895][ T9462] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1474'. [ 198.222124][ T9462] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1474'. [ 198.379986][ T9468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1477'. [ 198.435627][ T9468] netlink: 'syz.0.1477': attribute type 1 has an invalid length. [ 198.718082][ T9481] loop0: detected capacity change from 0 to 256 [ 198.758687][ T9485] netlink: 'syz.4.1485': attribute type 1 has an invalid length. [ 198.838396][ T9485] nbd: illegal input index -1677720961 [ 198.943780][ T9491] Unsupported ieee802154 address type: 0 [ 199.509100][ T9515] @ÿ: renamed from veth0_vlan (while UP) [ 199.680655][ T9523] netlink: 'syz.1.1504': attribute type 2 has an invalid length. [ 199.875068][ T9527] loop2: detected capacity change from 0 to 4096 [ 199.899163][ T9527] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 200.119790][ T9527] ntfs3(loop2): ino=19, mi_enum_attr [ 200.192976][ T9527] ntfs3(loop2): failed to convert "c46c" to cp737 [ 200.216391][ T9527] ntfs3(loop2): ino=20, mi_enum_attr [ 200.380363][ T9551] xfrm0: entered promiscuous mode [ 200.403741][ T9551] xfrm0: entered allmulticast mode [ 200.669370][ T9563] loop3: detected capacity change from 0 to 1024 [ 200.710072][ T9563] EXT4-fs: Ignoring removed oldalloc option [ 200.768788][ T9563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.842210][ T9563] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #11: comm syz.3.1522: directory missing '..' [ 200.989047][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.026695][ T9566] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1524'. [ 201.052969][ T9566] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1524'. [ 201.084088][ T9566] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1524'. [ 201.319433][ T9587] loop0: detected capacity change from 0 to 256 [ 201.533848][ T9596] loop2: detected capacity change from 0 to 1024 [ 201.881455][ T9611] netlink: 'syz.3.1544': attribute type 11 has an invalid length. [ 202.217052][ T9621] netlink: 'syz.1.1550': attribute type 1 has an invalid length. [ 202.238393][ T9623] x_tables: duplicate underflow at hook 1 [ 202.246426][ T9621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1550'. [ 202.400388][ T9629] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1554'. [ 202.434894][ T9629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1554'. [ 202.484989][ T9629] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1554'. [ 202.659803][ T12] kworker/u8:0: attempt to access beyond end of device [ 202.659803][ T12] loop2: rw=1, sector=4196, nr_sectors = 2160 limit=1024 [ 202.717501][ T12] kworker/u8:0: attempt to access beyond end of device [ 202.717501][ T12] loop2: rw=1, sector=6356, nr_sectors = 2048 limit=1024 [ 202.783159][ T12] kworker/u8:0: attempt to access beyond end of device [ 202.783159][ T12] loop2: rw=1, sector=8404, nr_sectors = 2064 limit=1024 [ 202.852984][ T12] kworker/u8:0: attempt to access beyond end of device [ 202.852984][ T12] loop2: rw=1, sector=10468, nr_sectors = 2048 limit=1024 [ 202.865369][ T9647] netlink: 'syz.1.1564': attribute type 1 has an invalid length. [ 202.909290][ T12] kworker/u8:0: attempt to access beyond end of device [ 202.909290][ T12] loop2: rw=1, sector=12516, nr_sectors = 1456 limit=1024 [ 203.237157][ T30] audit: type=1326 audit(2000000083.040:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.1.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f93d9c799 code=0x7ffc0000 [ 203.320077][ T30] audit: type=1326 audit(2000000083.050:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.1.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f93d9c799 code=0x7ffc0000 [ 203.370907][ T30] audit: type=1326 audit(2000000083.050:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.1.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f8f93d9c799 code=0x7ffc0000 [ 203.415611][ T30] audit: type=1326 audit(2000000083.050:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.1.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f93d9c799 code=0x7ffc0000 [ 203.456538][ T30] audit: type=1326 audit(2000000083.050:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.1.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f93d9c799 code=0x7ffc0000 [ 203.551766][ T9669] loop3: detected capacity change from 0 to 256 [ 203.574442][ T9669] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 203.645572][ T5884] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 203.743233][ T9675] netlink: 'syz.1.1577': attribute type 10 has an invalid length. [ 203.795595][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 203.806576][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 203.817610][ T5884] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 203.835264][ T5884] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 161 [ 203.863104][ T5884] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 203.872787][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.888401][ T5884] usb 1-1: Product: syz [ 203.892617][ T5884] usb 1-1: Manufacturer: syz [ 203.895912][ T9677] __nla_validate_parse: 2 callbacks suppressed [ 203.895954][ T9677] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1578'. [ 203.920001][ T5884] usb 1-1: SerialNumber: syz [ 203.948693][ T5884] usb 1-1: config 0 descriptor?? [ 203.954574][ T9663] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 203.962636][ T9677] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1578'. [ 203.993249][ T9680] netlink: 'syz.4.1579': attribute type 2 has an invalid length. [ 204.017371][ T5884] mcba_usb 1-1:0.0 can0: failed tx_urb -90 [ 204.033527][ T5884] mcba_usb 1-1:0.0 can0: Failed to send cmd (169) [ 204.043705][ T5884] mcba_usb 1-1:0.0 can0: failed tx_urb -90 [ 204.062146][ T5884] mcba_usb 1-1:0.0 can0: Failed to send cmd (169) [ 204.084340][ T5884] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 204.181398][ T9685] netlink: 65173 bytes leftover after parsing attributes in process `syz.1.1582'. [ 204.202303][ T5884] usb 1-1: USB disconnect, device number 7 [ 204.228116][ T5884] mcba_usb 1-1:0.0 can0: device disconnected [ 204.550161][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 204.587860][ T9700] loop4: detected capacity change from 0 to 512 [ 204.601779][ T9700] EXT4-fs: inline encryption not supported [ 204.630393][ T9671] loop2: detected capacity change from 0 to 32768 [ 204.649738][ T9671] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1562 (9671) [ 204.686423][ T9700] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1589: Invalid inode bitmap blk 4 in block_group 0 [ 204.735719][ T9700] loop4: lost filesystem error report for type 5 error -117 [ 204.745521][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 204.759413][ C0] EXT4-fs (loop4): initial error at time 2000000084: ext4_read_inode_bitmap:139 [ 204.768549][ C0] EXT4-fs (loop4): last error at time 2000000084: ext4_read_inode_bitmap:139 [ 204.782632][ T9700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.820730][ T9671] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 204.868429][ T9671] BTRFS info (device loop2): using sha256 checksum algorithm [ 204.904388][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.033910][ T9714] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 205.068531][ T9714] bond1 (unregistering): Released all slaves [ 205.076097][ T9671] BTRFS info (device loop2): enabling ssd optimizations [ 205.083136][ T9671] BTRFS info (device loop2): turning on async discard [ 205.097989][ T9671] BTRFS info (device loop2): enabling free space tree [ 205.335860][ T5825] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 205.706187][ T9748] loop4: detected capacity change from 0 to 164 [ 205.759801][ T9748] Unsupported NM flag settings (8) [ 205.783854][ T9751] loop3: detected capacity change from 0 to 512 [ 205.809811][ T9751] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 205.876369][ T5884] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 205.877646][ T9751] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 205.944735][ T9751] EXT4-fs error (device loop3): ext4_orphan_get:1391: comm syz.3.1605: inode #15: comm syz.3.1605: iget: illegal inode # [ 205.978251][ T9751] loop3: lost filesystem error report for type 5 error -117 [ 205.985573][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 205.999457][ C1] EXT4-fs (loop3): initial error at time 2000000085: ext4_orphan_get:1391 [ 206.008091][ C1] EXT4-fs (loop3): last error at time 2000000085: ext4_orphan_get:1391 [ 206.025109][ T9751] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1605: couldn't read orphan inode 15 (err -117) [ 206.039300][ T9751] loop3: lost filesystem error report for type 5 error -117 [ 206.050123][ T9751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.055978][ T5884] usb 1-1: Using ep0 maxpacket: 32 [ 206.078916][ T5884] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 206.095557][ T5884] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.108910][ T5884] usb 1-1: config 0 has no interface number 0 [ 206.115082][ T5884] usb 1-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 206.142347][ T9756] bridge2: entered promiscuous mode [ 206.144977][ T5884] usb 1-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 206.151692][ T9756] bridge2: entered allmulticast mode [ 206.200583][ T9751] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #12: block 13: comm syz.3.1605: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=98304, size=4096 fake=0 [ 206.211495][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.268951][ T5884] usb 1-1: Product: syz [ 206.273186][ T5884] usb 1-1: Manufacturer: syz [ 206.276952][ T9751] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #12: comm syz.3.1605: directory missing '.' [ 206.307569][ T5884] usb 1-1: SerialNumber: syz [ 206.345827][ T9762] loop1: detected capacity change from 0 to 512 [ 206.364079][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.416030][ T5884] usb 1-1: config 0 descriptor?? [ 206.426615][ T5884] hub 1-1:0.89: bad descriptor, ignoring hub [ 206.432670][ T5884] hub 1-1:0.89: probe with driver hub failed with error -5 [ 206.491818][ T5884] option 1-1:0.89: GSM modem (1-port) converter detected [ 206.499053][ T9762] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 206.532965][ T9762] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 206.587408][ T9766] loop2: detected capacity change from 0 to 4096 [ 206.598426][ T9766] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 206.615865][ T9762] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 206.663448][ T9699] Bluetooth: hci0: command 0x0406 tx timeout [ 206.669594][ T9699] Bluetooth: hci2: command 0x0406 tx timeout [ 206.675055][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 206.676272][ T9699] Bluetooth: hci3: command 0x0406 tx timeout [ 206.708886][ T9762] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01d, mo2=0006] [ 206.744502][ T9762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.814968][ T9766] ntfs3(loop2): ino=1e, "file1" ntfs_sync_inode failed, -22. [ 206.829946][ T5898] usb 1-1: USB disconnect, device number 8 [ 206.858839][ T9766] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 206.867174][ T5898] option 1-1:0.89: device disconnected [ 206.927378][ T9762] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 207.047611][ T12] ntfs3(loop2): ino=1e, ntfs3_write_inode failed, -22. [ 207.092029][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.527988][ T9771] loop4: detected capacity change from 0 to 32768 [ 207.576734][ T9771] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 207.769532][ T9771] XFS (loop4): Ending clean mount [ 207.859740][ T9771] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x139/0x200, xfs_agfl block 0x3 [ 207.897241][ T9771] XFS (loop4): Unmount and run xfs_repair [ 207.905111][ T9771] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 207.915787][ T5877] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 207.925642][ T9771] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 207.944209][ T9771] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 207.976497][ T9771] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 208.022483][ T9771] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 208.062165][ T9771] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 208.088541][ T9771] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 208.097646][ T9771] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 208.106842][ T9771] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 208.132398][ T9771] XFS (loop4): metadata I/O error in "xfs_alloc_read_agfl+0x233/0x430" at daddr 0x3 len 1 error 74 [ 208.169015][ T5877] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 208.192976][ T9771] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x950 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 208.208626][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.224354][ T5877] usb 3-1: Product: syz [ 208.229962][ T5877] usb 3-1: Manufacturer: syz [ 208.231791][ T9771] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 208.234634][ T5877] usb 3-1: SerialNumber: syz [ 208.263056][ T5877] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 208.284852][ T5898] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 208.356657][ T5833] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 208.455202][ T9827] tmpfs: Bad value for 'mpol' [ 208.651529][ T9831] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1640'. [ 208.673444][ T9831] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1640'. [ 208.724787][ T9831] netlink: 21 bytes leftover after parsing attributes in process `syz.3.1640'. [ 208.748837][ T9560] usb 3-1: USB disconnect, device number 5 [ 208.932898][ T9839] nft_compat: unsupported protocol 1 [ 209.246893][ T9857] loop0: detected capacity change from 0 to 256 [ 209.263205][ T9853] block device autoloading is deprecated and will be removed. [ 209.272057][ T9857] exfat: Deprecated parameter 'utf8' [ 209.325804][ T9857] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 209.502215][ T9862] loop4: detected capacity change from 0 to 2048 [ 209.538950][ T9862] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 209.585774][ T5898] usb 3-1: Service connection timeout for: 256 [ 209.607108][ T5898] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 209.646876][ T9862] syz.4.1655: attempt to access beyond end of device [ 209.646876][ T9862] loop4: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048 [ 209.664583][ T5898] ath9k_htc: Failed to initialize the device [ 209.680266][ T9867] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 209.725617][ T9560] usb 3-1: ath9k_htc: USB layer deinitialized [ 209.823560][ T9862] syz.4.1655: attempt to access beyond end of device [ 209.823560][ T9862] loop4: rw=8388608, sector=33554430, nr_sectors = 2 limit=2048 [ 209.885636][ T9862] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=3) [ 210.332288][ T9886] loop4: detected capacity change from 0 to 256 [ 210.401146][ T9886] FAT-fs (loop4): Directory bread(block 64) failed [ 210.415544][ T9886] FAT-fs (loop4): Directory bread(block 65) failed [ 210.422491][ T9890] --map-set only usable from mangle table [ 210.455654][ T9886] FAT-fs (loop4): Directory bread(block 66) failed [ 210.462264][ T9886] FAT-fs (loop4): Directory bread(block 67) failed [ 210.522528][ T9886] FAT-fs (loop4): Directory bread(block 68) failed [ 210.544057][ T9886] FAT-fs (loop4): Directory bread(block 69) failed [ 210.569505][ T9886] FAT-fs (loop4): Directory bread(block 70) failed [ 210.585903][ T9894] netlink: 'syz.0.1670': attribute type 58 has an invalid length. [ 210.593933][ T9886] FAT-fs (loop4): Directory bread(block 71) failed [ 210.608000][ T9856] loop3: detected capacity change from 0 to 40427 [ 210.643629][ T9886] FAT-fs (loop4): Directory bread(block 72) failed [ 210.662780][ T9856] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x1f52010) [ 210.684127][ T9886] FAT-fs (loop4): Directory bread(block 73) failed [ 210.697979][ T9856] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 210.737792][ T9856] F2FS-fs (loop3): Image doesn't support compression [ 210.767618][ T9898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1672'. [ 210.777336][ T9856] F2FS-fs (loop3): build fault injection type: 0x4 [ 210.801414][ T9856] F2FS-fs (loop3): invalid crc value [ 211.071217][ T9856] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 211.083950][ T9856] F2FS-fs (loop3): Start checkpoint disabled! [ 211.103200][ T9856] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 211.126844][ T9856] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 211.140654][ T9856] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 211.340511][ T1162] kworker/u8:8: attempt to access beyond end of device [ 211.340511][ T1162] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 211.392481][ T1162] CPU: 0 UID: 0 PID: 1162 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 211.392525][ T1162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 211.392539][ T1162] Workqueue: writeback wb_workfn (flush-7:3) [ 211.392583][ T1162] Call Trace: [ 211.392595][ T1162] [ 211.392603][ T1162] dump_stack_lvl+0xe8/0x150 [ 211.392637][ T1162] f2fs_handle_critical_error+0x37c/0x540 [ 211.392678][ T1162] f2fs_write_end_io+0xcdb/0xff0 [ 211.392722][ T1162] __submit_merged_bio+0x256/0x700 [ 211.392763][ T1162] __submit_merged_write_cond+0x3c9/0x4e0 [ 211.392806][ T1162] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 211.392864][ T1162] f2fs_write_data_pages+0x2975/0x35e0 [ 211.392888][ T1162] ? unwind_next_frame+0xa5/0x23c0 [ 211.392918][ T1162] ? lock_release+0x4b/0x3d0 [ 211.392981][ T1162] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 211.393043][ T1162] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 211.393108][ T1162] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 211.393155][ T1162] ? __lock_acquire+0x6b5/0x2cf0 [ 211.393200][ T1162] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 211.393226][ T1162] do_writepages+0x32e/0x550 [ 211.393265][ T1162] ? reacquire_held_locks+0x104/0x190 [ 211.393294][ T1162] ? writeback_sb_inodes+0x477/0x1a20 [ 211.393331][ T1162] __writeback_single_inode+0x133/0x11a0 [ 211.393362][ T1162] ? do_raw_spin_unlock+0xf5/0x210 [ 211.393390][ T1162] writeback_sb_inodes+0x992/0x1a20 [ 211.393442][ T1162] ? __lock_acquire+0x6b5/0x2cf0 [ 211.393476][ T1162] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 211.393503][ T1162] ? do_raw_spin_lock+0x12b/0x2f0 [ 211.393570][ T1162] ? rcu_is_watching+0x15/0xb0 [ 211.393610][ T1162] wb_writeback+0x456/0xb70 [ 211.393642][ T1162] ? queue_io+0x261/0x4a0 [ 211.393680][ T1162] ? __pfx_wb_writeback+0x10/0x10 [ 211.393707][ T1162] ? do_raw_spin_lock+0x12b/0x2f0 [ 211.393747][ T1162] wb_workfn+0x414/0xf50 [ 211.393775][ T1162] ? look_up_lock_class+0x57/0x110 [ 211.393820][ T1162] ? __pfx_wb_workfn+0x10/0x10 [ 211.393848][ T1162] ? do_raw_spin_lock+0x12b/0x2f0 [ 211.393874][ T1162] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 211.393920][ T1162] ? process_one_work+0x87c/0x1650 [ 211.393947][ T1162] process_one_work+0x949/0x1650 [ 211.393999][ T1162] ? __pfx_process_one_work+0x10/0x10 [ 211.394030][ T1162] ? do_raw_spin_lock+0x12b/0x2f0 [ 211.394071][ T1162] worker_thread+0xb46/0x1140 [ 211.394111][ T1162] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 211.394160][ T1162] kthread+0x388/0x470 [ 211.394182][ T1162] ? __pfx_worker_thread+0x10/0x10 [ 211.394208][ T1162] ? __pfx_kthread+0x10/0x10 [ 211.394232][ T1162] ret_from_fork+0x51e/0xb90 [ 211.394271][ T1162] ? __pfx_ret_from_fork+0x10/0x10 [ 211.394298][ T1162] ? __switch_to+0xc7d/0x1450 [ 211.394327][ T1162] ? __pfx_kthread+0x10/0x10 [ 211.394349][ T1162] ret_from_fork_asm+0x1a/0x30 [ 211.394388][ T1162] [ 211.394397][ T1162] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 211.788942][ T9928] Cannot find add_set index 6 as target [ 211.795623][ T9560] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 211.881863][ T9932] loop2: detected capacity change from 0 to 1024 [ 211.968757][ T9932] hfsplus: inconsistency in B*Tree (1,0,2,1,0) [ 211.985611][ T9560] usb 1-1: Using ep0 maxpacket: 32 [ 212.010875][ T9560] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 212.022977][ T9932] hfsplus: xattr searching failed [ 212.030921][ T9560] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 212.056868][ T9932] hfsplus: inconsistency in B*Tree (1,0,2,1,0) [ 212.073022][ T9560] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 212.089161][ T9932] hfsplus: xattr searching failed [ 212.107381][ T9560] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 51093, setting to 1024 [ 212.125687][ T5898] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 212.158359][ T9560] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 212.177960][ T9560] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.192545][ T9560] usb 1-1: Product: syz [ 212.200065][ T9560] usb 1-1: Manufacturer: syz [ 212.204772][ T9560] usb 1-1: SerialNumber: syz [ 212.209390][ T1162] hfsplus: b-tree write err: -5, ino 25 [ 212.209900][ T1162] hfsplus: b-tree write err: -5, ino 4 [ 212.244401][ T1162] hfsplus: b-tree write err: -5, ino 2 [ 212.247291][ T9560] usb 1-1: config 0 descriptor?? [ 212.255908][ T9920] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 212.286953][ T1162] hfsplus: b-tree write err: -5, ino 20 [ 212.287635][ T9560] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12 [ 212.317523][ T5898] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 212.335546][ T5898] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 212.367062][ T9938] netlink: 'syz.4.1693': attribute type 10 has an invalid length. [ 212.375233][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.475183][ T5898] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 212.585904][ T2209] usb 1-1: USB disconnect, device number 9 [ 212.585980][ C0] xpad 1-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 212.599979][ C0] xpad 1-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 212.622456][ T5870] udevd[5870]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 212.623660][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1694'. [ 212.905663][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 212.947221][ T5877] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 212.972620][ T9956] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 213.066012][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 213.074976][ T24] usb 4-1: config 1 has an invalid interface number: 128 but max is 1 [ 213.084750][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.095977][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 213.108444][ T24] usb 4-1: config 1 has no interface number 0 [ 213.114584][ T24] usb 4-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.126905][ T5877] usb 3-1: Using ep0 maxpacket: 8 [ 213.133730][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.143837][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.148665][ T5877] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 213.153036][ T24] usb 4-1: Product: syz [ 213.164667][ T24] usb 4-1: Manufacturer: syz [ 213.169668][ T24] usb 4-1: SerialNumber: syz [ 213.180941][ T5877] usb 3-1: config 0 has no interface number 0 [ 213.192697][ T5877] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 213.194806][ T24] cdc_wdm 4-1:1.128: skipping garbage [ 213.217976][ T24] cdc_wdm 4-1:1.128: probe with driver cdc_wdm failed with error -22 [ 213.231803][ T5877] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 213.269626][ T5877] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 213.303280][ T5877] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 213.327728][ T5877] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 213.343260][ T5877] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 213.352753][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.376158][ T5877] usb 3-1: config 0 descriptor?? [ 213.393499][ T24] usb 4-1: USB disconnect, device number 7 [ 213.405154][ T5877] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 213.557456][ T9968] loop0: detected capacity change from 0 to 4096 [ 213.596263][ T5898] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 213.613872][ T9946] ldusb 3-1:0.55: Couldn't submit interrupt_in_urb -90 [ 213.625350][ T5898] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 213.631950][ T9968] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 213.642587][ T24] usb 3-1: USB disconnect, device number 6 [ 213.661689][ T5898] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 213.676674][ T24] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 213.693486][ T5898] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 213.726550][ T5898] usb 2-1: USB disconnect, device number 6 [ 213.841404][ T9974] nbd: couldn't find device at index 1073807360 [ 214.199925][ T9992] loop3: detected capacity change from 0 to 512 [ 214.290378][ T9992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.345073][ T9992] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.361955][ T9992] EXT4-fs warning (device loop3): ext4_group_add:1715: Can't resize non-sparse filesystem further [ 214.399026][T10001] lo speed is unknown, defaulting to 1000 [ 214.424484][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.442515][T10001] lo speed is unknown, defaulting to 1000 [ 214.451972][T10001] lo speed is unknown, defaulting to 1000 [ 214.505154][T10005] netlink: 'syz.0.1722': attribute type 61 has an invalid length. [ 214.572541][T10008] loop1: detected capacity change from 0 to 8 [ 214.604692][T10008] SQUASHFS error: zlib decompression failed, data probably corrupt [ 214.630436][T10008] SQUASHFS error: Failed to read block 0x9b: -5 [ 214.663125][T10008] SQUASHFS error: Unable to read metadata cache entry [99] [ 214.685058][T10008] SQUASHFS error: Unable to read inode 0x127 [ 214.822597][T10013] netlink: 'syz.3.1727': attribute type 10 has an invalid length. [ 214.853774][T10013] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1727'. [ 214.864567][T10016] loop4: detected capacity change from 0 to 1024 [ 215.101928][T10023] loop1: detected capacity change from 0 to 512 [ 215.136981][T10023] EXT4-fs: Ignoring removed oldalloc option [ 215.227248][T10023] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.1729: Parent and EA inode have the same ino 15 [ 215.304587][T10023] loop1: lost filesystem error report for type 5 error -117 [ 215.305600][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 215.319428][ C1] EXT4-fs (loop1): initial error at time 2000000095: ext4_xattr_inode_iget:437 [ 215.328466][ C1] EXT4-fs (loop1): last error at time 2000000095: ext4_xattr_inode_iget:437 [ 215.353114][ T30] audit: type=1326 audit(2000000095.120:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.0.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569659c799 code=0x7ffc0000 [ 215.392390][T10023] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 215.454765][ T30] audit: type=1326 audit(2000000095.120:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.0.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569659c799 code=0x7ffc0000 [ 215.476127][T10023] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.1729: Parent and EA inode have the same ino 15 [ 215.491995][T10023] loop1: lost filesystem error report for type 5 error -117 [ 215.493459][ T30] audit: type=1326 audit(2000000095.120:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.0.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f569659c799 code=0x7ffc0000 [ 215.529588][T10023] EXT4-fs (loop1): 1 orphan inode deleted [ 215.568935][T10023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.601889][ T30] audit: type=1326 audit(2000000095.120:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.0.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569659c799 code=0x7ffc0000 [ 215.686307][ T30] audit: type=1326 audit(2000000095.120:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.0.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569659c799 code=0x7ffc0000 [ 215.757417][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.984166][ T1162] kworker/u8:8: attempt to access beyond end of device [ 215.984166][ T1162] loop4: rw=1, sector=2340, nr_sectors = 2048 limit=1024 [ 216.024621][T10001] infiniband syz0: set active [ 216.032001][ T5898] lo speed is unknown, defaulting to 1000 [ 216.070113][T10001] infiniband syz0: added lo [ 216.085894][ T1162] kworker/u8:8: attempt to access beyond end of device [ 216.085894][ T1162] loop4: rw=1, sector=4388, nr_sectors = 2048 limit=1024 [ 216.123865][T10051] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1740'. [ 216.139388][ T1162] kworker/u8:8: attempt to access beyond end of device [ 216.139388][ T1162] loop4: rw=1, sector=6436, nr_sectors = 2144 limit=1024 [ 216.158049][T10051] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1740'. [ 216.173277][ T1162] kworker/u8:8: attempt to access beyond end of device [ 216.173277][ T1162] loop4: rw=1, sector=8580, nr_sectors = 2072 limit=1024 [ 216.190042][ T1162] kworker/u8:8: attempt to access beyond end of device [ 216.190042][ T1162] loop4: rw=1, sector=10652, nr_sectors = 640 limit=1024 [ 216.284087][T10059] netlink: zone id is out of range [ 216.289418][T10059] netlink: get zone limit has 4 unknown bytes [ 216.333354][T10001] RDS/IB: syz0: added [ 216.346397][T10001] smc: adding ib device syz0 with port count 1 [ 216.353058][T10001] smc: ib device syz0 port 1 has no pnetid [ 216.412736][T10001] lo speed is unknown, defaulting to 1000 [ 216.451845][ T24] lo speed is unknown, defaulting to 1000 [ 216.981911][T10082] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1739'. [ 217.047957][T10082] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1739'. [ 217.429027][T10101] loop3: detected capacity change from 0 to 128 [ 217.439076][T10104] netlink: 'syz.1.1757': attribute type 10 has an invalid length. [ 217.457349][T10104] veth0_vlan: entered allmulticast mode [ 217.551302][T10104] veth0_vlan: left promiscuous mode [ 217.583793][T10104] veth0_vlan: entered promiscuous mode [ 217.645017][T10104] team0: Device veth0_vlan failed to register rx_handler [ 217.722233][T10001] lo speed is unknown, defaulting to 1000 [ 217.827615][T10116] x_tables: unsorted underflow at hook 3 [ 217.907513][T10089] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 217.934619][T10120] netlink: 892 bytes leftover after parsing attributes in process `syz.1.1764'. [ 218.702800][T10152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1777'. [ 218.735902][T10001] lo speed is unknown, defaulting to 1000 [ 218.812495][T10157] netlink: 'syz.4.1779': attribute type 1 has an invalid length. [ 218.851074][T10157] netlink: 'syz.4.1779': attribute type 1 has an invalid length. [ 219.105687][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 219.539295][T10143] loop1: detected capacity change from 0 to 32768 [ 219.622703][T10143] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 219.686970][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1787'. [ 219.766257][T10143] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 219.809848][T10001] lo speed is unknown, defaulting to 1000 [ 219.935158][T10171] loop0: detected capacity change from 0 to 32768 [ 219.963103][T10143] XFS (loop1): Ending clean mount [ 220.016626][T10171] jfs_strtoUCS: char2uni returned -22. [ 220.022305][T10171] charset = iso8859-3, char = 0xc3 [ 220.089879][T10163] loop4: detected capacity change from 0 to 32768 [ 220.146830][ T5828] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 220.239025][T10163] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 220.427065][T10163] XFS (loop4): Ending clean mount [ 220.694480][ T5833] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 220.757050][T10211] netlink: 'syz.0.1788': attribute type 10 has an invalid length. [ 220.783845][T10211] veth0_vlan: entered allmulticast mode [ 220.849951][T10211] veth0_vlan: left promiscuous mode [ 220.889238][T10211] veth0_vlan: entered promiscuous mode [ 220.944784][T10211] team0: Device veth0_vlan failed to register rx_handler [ 221.040688][T10212] netlink: 'syz.3.1791': attribute type 4 has an invalid length. [ 221.085741][T10001] lo speed is unknown, defaulting to 1000 [ 221.109055][T10218] netlink: 'syz.1.1793': attribute type 10 has an invalid length. [ 221.130842][T10218] team0: Device vxcan1 is of different type [ 221.167145][T10220] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1792'. [ 221.215633][T10220] bridge_slave_1: default FDB implementation only supports local addresses [ 221.515886][T10230] loop3: detected capacity change from 0 to 2048 [ 221.565085][T10230] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.595550][T10236] syz.1.1800 (10236): /proc/10235/oom_adj is deprecated, please use /proc/10235/oom_score_adj instead. [ 221.730103][T10234] loop0: detected capacity change from 0 to 2048 [ 221.828569][T10234] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.038471][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.473454][T10239] loop4: detected capacity change from 0 to 32768 [ 222.484088][T10268] loop1: detected capacity change from 0 to 256 [ 222.502299][T10239] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1801 (10239) [ 222.552763][T10268] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 222.572458][T10239] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 222.605567][T10239] BTRFS info (device loop4): using sha256 checksum algorithm [ 222.645612][T10239] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 222.861596][T10239] BTRFS info (device loop4): rebuilding free space tree [ 222.991822][T10239] BTRFS info (device loop4): disabling free space tree [ 223.017572][T10239] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 223.082958][T10239] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 223.164361][T10239] BTRFS info (device loop4): checking UUID tree [ 223.200920][T10239] BTRFS info (device loop4): setting nodatasum [ 223.235151][T10239] BTRFS info (device loop4): setting nodatacow [ 223.259560][T10239] BTRFS info (device loop4): enabling ssd optimizations [ 223.302809][T10239] BTRFS info (device loop4): enabling disk space caching [ 223.337339][T10239] BTRFS info (device loop4): force clearing of disk cache [ 223.382313][T10239] BTRFS info (device loop4): enabling auto defrag [ 223.616199][ T5833] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 223.634410][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1828'. [ 223.775578][ T24] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 223.892497][T10336] netlink: 'syz.4.1830': attribute type 9 has an invalid length. [ 223.978623][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.020669][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.086986][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 224.114101][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 224.127302][T10342] loop0: detected capacity change from 0 to 64 [ 224.136343][ T24] usb 4-1: SerialNumber: syz [ 224.259607][T10347] loop2: detected capacity change from 0 to 256 [ 224.292635][T10347] exfat: Deprecated parameter 'utf8' [ 224.376186][ T24] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 224.396573][T10347] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 224.416796][ T5884] usb 4-1: USB disconnect, device number 8 [ 224.583662][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 224.606795][ T24] usb 5-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 224.616836][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.624868][ T24] usb 5-1: Product: syz [ 224.659704][ T24] usb 5-1: Manufacturer: syz [ 224.664358][ T24] usb 5-1: SerialNumber: syz [ 224.703991][ T24] usb 5-1: config 0 descriptor?? [ 224.734537][ T24] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -32 [ 224.809067][T10355] ip6t_srh: unknown srh invflags 4000 [ 224.959103][ T24] usb 5-1: USB disconnect, device number 6 [ 225.210144][T10371] xt_socket: unknown flags 0x48 [ 225.445811][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 225.608530][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 225.615626][ T5822] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 225.623367][ T24] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 225.646809][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.679954][ T24] usb 2-1: config 0 descriptor?? [ 225.726652][ T24] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 225.787998][ T5822] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.819571][ T5822] usb 4-1: config 0 interface 0 has no altsetting 0 [ 225.835655][ T5822] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 225.851495][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.869097][ T5822] usb 4-1: config 0 descriptor?? [ 225.904696][ T5822] usb 4-1: selecting invalid altsetting 0 [ 225.946996][T10375] loop2: detected capacity change from 0 to 32768 [ 226.128585][ T24] gspca_vc032x: reg_w err -71 [ 226.133342][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.155963][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.163339][ T5822] usb 4-1: USB disconnect, device number 9 [ 226.187660][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.193011][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.227001][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.240855][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.247929][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.253260][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.264438][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.270057][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.275572][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.280973][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.305775][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.312160][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.320653][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.327350][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.332674][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.339995][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.345333][ T24] gspca_vc032x: Unknown sensor... [ 226.351790][ T24] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 226.381262][ T24] usb 2-1: USB disconnect, device number 7 [ 226.828975][T10413] loop2: detected capacity change from 0 to 1024 [ 227.044485][T10425] loop0: detected capacity change from 0 to 512 [ 227.094760][T10425] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 227.155572][T10425] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (4742!=33349) [ 227.213587][T10425] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 227.224850][T10425] EXT4-fs (loop0): orphan cleanup on readonly fs [ 227.236988][T10425] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1878: invalid indirect mapped block 2185560079 (level 1) [ 227.253184][T10425] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 227.255997][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 227.271630][ C0] EXT4-fs (loop0): initial error at time 2000000107: ext4_free_branches:1023: inode 11 [ 227.281348][ C0] EXT4-fs (loop0): last error at time 2000000107: ext4_free_branches:1023: inode 11 [ 227.300560][T10425] EXT4-fs (loop0): Remounting filesystem read-only [ 227.307832][T10425] EXT4-fs (loop0): 1 truncate cleaned up [ 227.317652][T10425] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 227.338272][T10427] loop1: detected capacity change from 0 to 4096 [ 227.355770][T10427] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 227.444754][T10425] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.1878: dx entry: limit 0 != root limit 125 [ 227.492861][T10425] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1878: Corrupt directory, running e2fsck is recommended [ 227.717526][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 228.224130][T10461] loop1: detected capacity change from 0 to 764 [ 228.264754][T10461] rock: directory entry would overflow storage [ 228.295746][T10461] rock: sig=0x4654, size=5, remaining=4 [ 228.409833][T10467] i2c i2c-0: Invalid block write size 255 [ 228.464565][T10471] xt_l2tp: invalid flags combination: 4 [ 228.489954][T10435] loop3: detected capacity change from 0 to 32768 [ 228.599493][T10435] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 228.772494][T10435] XFS (loop3): Ending clean mount [ 228.839818][T10490] loop4: detected capacity change from 0 to 2048 [ 228.876983][T10490] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 228.920711][ T5834] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 228.933696][T10490] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 229.269779][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1913'. [ 229.627864][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1919'. [ 229.643961][T10522] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1919'. [ 229.656019][T10523] loop2: detected capacity change from 0 to 164 [ 229.891960][T10532] sctp: [Deprecated]: syz.4.1925 (pid 10532) Use of int in maxseg socket option. [ 229.891960][T10532] Use struct sctp_assoc_value instead [ 230.125664][ T9560] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 230.176522][ C0] list_del corruption, ffff8880795f4090->next is NULL [ 230.184232][ C0] ------------[ cut here ]------------ [ 230.189732][ C0] kernel BUG at lib/list_debug.c:53! [ 230.195085][ C0] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 230.201352][ C0] CPU: 0 UID: 0 PID: 10527 Comm: syz.0.1923 Not tainted syzkaller #0 PREEMPT(full) [ 230.210717][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 230.220765][ C0] RIP: 0010:__list_del_entry_valid_or_report+0xdf/0x190 [ 230.227706][ C0] Code: 49 39 1f 0f 85 9e 00 00 00 b0 01 5b 41 5c 41 5d 41 5e 41 5f e9 52 5c f8 06 cc 48 c7 c7 a0 e8 27 8c 48 89 de e8 12 51 6e fc 90 <0f> 0b 48 c7 c7 00 e9 27 8c 48 89 de e8 00 51 6e fc 90 0f 0b 4c 89 [ 230.247309][ C0] RSP: 0018:ffffc90000007d58 EFLAGS: 00010046 [ 230.253378][ C0] RAX: 0000000000000033 RBX: ffff8880795f4090 RCX: c154c9c16087bd00 [ 230.261361][ C0] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 230.269324][ C0] RBP: 0000000000000203 R08: ffffc90000007ae7 R09: 1ffff92000000f5c [ 230.277291][ C0] R10: dffffc0000000000 R11: fffff52000000f5d R12: 1ffff1100f2be812 [ 230.285277][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 230.293258][ C0] FS: 00007f56973d96c0(0000) GS:ffff888125457000(0000) knlGS:0000000000000000 [ 230.302178][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.308758][ C0] CR2: 00007f7be18039bf CR3: 000000007da44000 CR4: 00000000003526f0 [ 230.316728][ C0] Call Trace: [ 230.320022][ C0] [ 230.322866][ C0] dst_destroy+0x202/0x5a0 [ 230.327285][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 230.333097][ C0] ? rcu_core+0x751/0x1070 [ 230.337511][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 230.342796][ C0] rcu_core+0x7cd/0x1070 [ 230.347046][ C0] ? __pfx_rcu_core+0x10/0x10 [ 230.351721][ C0] ? sched_clock_cpu+0x74/0x440 [ 230.356576][ C0] handle_softirqs+0x22a/0x870 [ 230.361344][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 230.366107][ C0] __irq_exit_rcu+0x5f/0x150 [ 230.370694][ C0] irq_exit_rcu+0x9/0x30 [ 230.374935][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 230.380566][ C0] [ 230.383492][ C0] [ 230.386417][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 230.392389][ C0] RIP: 0010:security_vm_enough_memory_mm+0x4d7/0x4f0 [ 230.399060][ C0] Code: eb 1f e8 7c cb 67 fd eb 18 e8 75 cb 67 fd bd 01 00 00 00 eb 0c e8 69 cb 67 fd eb 05 e8 62 cb 67 fd 4c 89 f7 48 89 de 89 ea 5b <41> 5c 41 5e 41 5f 5d e9 7d 05 af fd 66 66 66 66 2e 0f 1f 84 00 00 [ 230.418667][ C0] RSP: 0018:ffffc9001ab2f818 EFLAGS: 00000246 [ 230.424750][ C0] RAX: ffffffff845ddadb RBX: ffff888058f28680 RCX: 0000000000080000 [ 230.432716][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8880783f6200 [ 230.440698][ C0] RBP: 0000000000000001 R08: ffffffff9a448023 R09: 1ffffffff3489004 [ 230.448665][ C0] R10: dffffc0000000000 R11: fffffbfff3489005 R12: dffffc0000000000 [ 230.456644][ C0] R13: ffff888031d02440 R14: ffff8880783f6200 R15: 0000000000000000 [ 230.464615][ C0] ? security_vm_enough_memory_mm+0x4bb/0x4f0 [ 230.470686][ C0] shmem_inode_acct_blocks+0xd5/0x460 [ 230.476061][ C0] ? shmem_alloc_and_add_folio+0x872/0xf80 [ 230.481882][ C0] shmem_alloc_and_add_folio+0x8df/0xf80 [ 230.487513][ C0] ? filemap_get_entry+0xca/0x320 [ 230.492535][ C0] ? filemap_get_entry+0xca/0x320 [ 230.497564][ C0] ? filemap_get_entry+0x2ac/0x320 [ 230.502684][ C0] ? __pfx_filemap_get_entry+0x10/0x10 [ 230.508137][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 230.514285][ C0] ? shmem_allowable_huge_orders+0x309/0x690 [ 230.520269][ C0] shmem_get_folio_gfp+0x5a9/0x1670 [ 230.525474][ C0] shmem_write_begin+0x16c/0x330 [ 230.530408][ C0] generic_perform_write+0x2e2/0x8f0 [ 230.535696][ C0] ? __pfx_generic_perform_write+0x10/0x10 [ 230.541646][ C0] ? preempt_count_add+0x91/0x190 [ 230.546696][ C0] ? mnt_put_write_access_file+0xb9/0x100 [ 230.552426][ C0] ? file_update_time_flags+0x400/0x4a0 [ 230.557992][ C0] shmem_file_write_iter+0xf8/0x120 [ 230.563189][ C0] vfs_write+0x61d/0xb90 [ 230.567435][ C0] ? __pfx_vfs_write+0x10/0x10 [ 230.572209][ C0] ? __fget_files+0x2a/0x420 [ 230.576810][ C0] ksys_write+0x150/0x270 [ 230.581137][ C0] ? __pfx_ksys_write+0x10/0x10 [ 230.585989][ C0] do_syscall_64+0x14d/0xf80 [ 230.590574][ C0] ? trace_irq_disable+0x3b/0x150 [ 230.595594][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.601662][ C0] ? clear_bhb_loop+0x40/0x90 [ 230.606350][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.612253][ C0] RIP: 0033:0x7f569655cfce [ 230.616676][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 230.636278][ C0] RSP: 002b:00007f56973d8da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 230.644695][ C0] RAX: ffffffffffffffda RBX: 00007f56973d96c0 RCX: 00007f569655cfce [ 230.652660][ C0] RDX: 0000000001000000 RSI: 00007f568c200000 RDI: 0000000000000003 [ 230.660656][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 230.668627][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 230.676601][ C0] R13: 00007f56973d8ee0 R14: 00007f56973d8ea0 R15: 00007f568c200000 [ 230.684582][ C0] [ 230.687599][ C0] Modules linked in: [ 230.691506][ C0] ---[ end trace 0000000000000000 ]--- [ 230.696966][ C0] RIP: 0010:__list_del_entry_valid_or_report+0xdf/0x190 [ 230.703906][ C0] Code: 49 39 1f 0f 85 9e 00 00 00 b0 01 5b 41 5c 41 5d 41 5e 41 5f e9 52 5c f8 06 cc 48 c7 c7 a0 e8 27 8c 48 89 de e8 12 51 6e fc 90 <0f> 0b 48 c7 c7 00 e9 27 8c 48 89 de e8 00 51 6e fc 90 0f 0b 4c 89 [ 230.723510][ C0] RSP: 0018:ffffc90000007d58 EFLAGS: 00010046 [ 230.729942][ C0] RAX: 0000000000000033 RBX: ffff8880795f4090 RCX: c154c9c16087bd00 [ 230.737910][ C0] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 230.745881][ C0] RBP: 0000000000000203 R08: ffffc90000007ae7 R09: 1ffff92000000f5c [ 230.753847][ C0] R10: dffffc0000000000 R11: fffff52000000f5d R12: 1ffff1100f2be812 [ 230.761819][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 230.769787][ C0] FS: 00007f56973d96c0(0000) GS:ffff888125457000(0000) knlGS:0000000000000000 [ 230.778712][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.785289][ C0] CR2: 00007f7be18039bf CR3: 000000007da44000 CR4: 00000000003526f0 [ 230.793258][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 231.910199][ C0] Shutting down cpus with NMI [ 231.915538][ C0] Kernel Offset: disabled [ 231.919867][ C0] Rebooting in 86400 seconds..