last executing test programs: 4m0.218441629s ago: executing program 1 (id=108): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x20, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x20}}, 0x0) 3m59.99787492s ago: executing program 1 (id=110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x7ffffffe}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) 3m59.798810941s ago: executing program 1 (id=111): r0 = socket$unix(0x1, 0x2, 0x0) shutdown(r0, 0x1) sendto$unix(r0, 0x0, 0x0, 0x48010, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) 3m59.624743909s ago: executing program 1 (id=114): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000140)={[{@utf8}, {@discard}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@discard}, {@discard}, {}, {@discard}, {@keep_last_dots}, {@time_offset={'time_offset', 0x3d, 0x78}}, {@errors_remount}]}, 0x1, 0x1528, &(0x7f0000001f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800000, 0x0) 3m59.137299884s ago: executing program 1 (id=117): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x540, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3m58.562872492s ago: executing program 1 (id=119): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="e730390dbc2554602bb6eae2735266ce78726135510d15fb", 0x18}], 0x1) 3m57.837493368s ago: executing program 32 (id=119): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="e730390dbc2554602bb6eae2735266ce78726135510d15fb", 0x18}], 0x1) 2m36.6731718s ago: executing program 4 (id=648): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0xc, 0x8, 0x0, 0x1, [{0x4}, {0x4}]}]}, 0x34}}, 0x0) 2m36.382821954s ago: executing program 4 (id=651): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x3a, 0x2}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 2m36.220867502s ago: executing program 4 (id=652): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x934, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x3, "", [{{0x9, 0x4, 0x0, 0xfd, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xa, 0xb, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0xff, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="200529"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m33.051031351s ago: executing program 4 (id=683): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x54b, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 2m32.518537117s ago: executing program 4 (id=689): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x6, 0x401, 0x0, 0x3, 0x8, 0x9a, 0x61e883bb, 0x4, 0x284f97, 0x7ff, 0x7, 0x1, 0xf, 0xff, 0x5, 0x8, {0x0, 0x7fffffff}, 0x0, 0x1}}) 2m31.271195959s ago: executing program 4 (id=694): r0 = msgget$private(0x0, 0xb) msgsnd(r0, &(0x7f0000002500)=ANY=[@ANYBLOB="03"], 0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x3, 0x800) 2m30.808057732s ago: executing program 33 (id=694): r0 = msgget$private(0x0, 0xb) msgsnd(r0, &(0x7f0000002500)=ANY=[@ANYBLOB="03"], 0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x3, 0x800) 1m54.568044611s ago: executing program 2 (id=925): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf25130000000e0001006e657464657673696d0000000f0002006e"], 0x80}, 0x1, 0x0, 0x0, 0x8c0}, 0x20000000) 1m54.254576637s ago: executing program 2 (id=928): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x4, 0x1}, 0xc) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000140)) 1m53.972096611s ago: executing program 2 (id=931): r0 = semget$private(0x0, 0x3, 0x401) semop(r0, &(0x7f00000011c0)=[{0x0, 0x7fff, 0x1800}, {0x1, 0x8001, 0x1000}], 0x1f4) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001580)=[0x5]) 1m53.614304909s ago: executing program 2 (id=933): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x1) 1m53.364571912s ago: executing program 2 (id=935): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000300)='\x00', 0x1}], 0x1, 0x0, 0x80) 1m52.822398249s ago: executing program 2 (id=937): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x36}, 0x78, r1}) 1m52.047933228s ago: executing program 34 (id=937): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x36}, 0x78, r1}) 6.198874171s ago: executing program 6 (id=1822): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x12, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 6.049698339s ago: executing program 6 (id=1824): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000006c0)={0x1c, &(0x7f0000000540)={0x0, 0xa, 0x1, '\a'}, 0x0, 0x0}) 3.908105495s ago: executing program 6 (id=1851): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xe8c}, 0x2d, 0xfffffffffffffff9) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000040)=""/43, 0x1dab) 3.706033855s ago: executing program 6 (id=1853): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x1, 0x4a6, 0x4, 0xadeb, 0x7, "8c00000000000000000000ffff00", 0x4000000, 0x80}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001280)=0xff) 3.387864762s ago: executing program 6 (id=1856): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@clear_cache}, {@metadata_ratio}, {@ssd_spread}]}, 0x0, 0x559e, &(0x7f0000005680)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 2.696406426s ago: executing program 3 (id=1866): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x75, 0x140341) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2.520820805s ago: executing program 3 (id=1868): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000002000010000000000fadbdf2d0a080000000000000000000014000200fc020000000000000000000000000001140001002001000000000000"], 0x44}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="52540000000000003c0012800b000100697036746e6c00002c00028014000300200100000000000000000000000000011400020008"], 0x5c}}, 0x0) 2.2111021s ago: executing program 3 (id=1870): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2.189544681s ago: executing program 0 (id=1871): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1.896957216s ago: executing program 0 (id=1872): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000180)=0x9c) 1.650870718s ago: executing program 6 (id=1873): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[], 0x5, 0x5598, &(0x7f00000013c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) 1.40484609s ago: executing program 5 (id=1874): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd2a, 0x100003, {0x0, 0x0, 0x0, 0x0, {0x9, 0xfff3}, {0x2, 0xfff1}, {0xf, 0xfff1}}}, 0x24}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) 938.138023ms ago: executing program 5 (id=1875): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a08"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x10}, 0x94) 910.862385ms ago: executing program 0 (id=1876): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0xfffb, 0x0, @mcast1={0xff, 0x7}, 0x400009}}, {{0xa, 0x0, 0x1, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0xb5) 704.992405ms ago: executing program 0 (id=1877): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4}) 679.879447ms ago: executing program 5 (id=1878): setreuid(0xffffffffffffffff, 0xee01) mlockall(0x2) brk(0x55d55ede6004) 550.106113ms ago: executing program 3 (id=1879): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) write$char_usb(r0, 0x0, 0x0) 492.003046ms ago: executing program 5 (id=1880): r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x10) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000000)={0x1, 0x4, 0x5, &(0x7f0000000100)={0x0, "fd5a44512b7e1b0020ed2abb4301002700"}}) 428.115069ms ago: executing program 0 (id=1881): syz_mount_image$minix(&(0x7f0000002580), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f00000025c0)=ANY=[], 0x6, 0x236, &(0x7f0000000800)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) truncate(&(0x7f0000000080)='./file2\x00', 0x1500) 351.421423ms ago: executing program 3 (id=1882): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) bind$qrtr(r0, &(0x7f00000002c0)={0x2a, 0x1, 0x7fff}, 0xc) 292.778166ms ago: executing program 5 (id=1883): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000003c0)='./file1\x00', 0x8680, &(0x7f0000020b00)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES8], 0xfd, 0x2a1, &(0x7f0000000100)="$eJzs3b9u01wYx/HfcdI270tV3D8ICTEVKjGhtgwglkqod8DChChNkKpaRYIi0U6BGXEB7NwCF8DIVDEjsTExMBaWoHN8Quw0jpMoqZP0+5ESJfZ57OfYxz1+UrURgAvrwfb3j3d+2IeRSipJui8FkipSWdIVXa28OjjcO4xq1W4bKrkI+zClrDa7B7VOi22c25cX2ndlzSeXYTQq31QvOgcUz139HQTSnL863frKuWc2Ghd90JtTneq1ForOAwBQLD//B36en48XKQikNT/tp+f/yZ5Aza+GU3QeI/M5Z31i/ndVVsPY83vZrWrVe3YI6K4PcVWi9KfvgzareGSlbjBNXlXpcgn+e7YX1W7vPo+qgd5qy5tpNVtxz9V46DY1a1r7+s3ZTa/GHfOZ5UpurT+XXB9mbB82g5NW/okmy8PdYz7zxZyYxybUB1X/3f+VG8YeDHc8wrYzFee/nr1F18tZuVbJs5Rosuh2ci19xLv2sqSMikTN87ao9AcEYV6eLmqpLSru3UZO1HLHqM2cqJX2qNZozo4cNfPePDKr+qlP2k7c/wf2aK+plyvTtnEt/cjo2p+yaxm6+cRfdfXrHVsGg/YIA3inp7qnhZdHx/s7UVR7MbUv7JU4BmkcHe//boxFGjtR1BwE45LP1L6wB7mQvTfnncG3U9hPJpyj1knvM5DfzUwLe99l4vovUa+su5s1+xSm79PnkrG5tWBiixsZtcGSe/4/u4JLMVJdjczKoK3m6rxHV3PduCXd7GWPsdDnOX62Bgky2/qqJ3z+DwAAAAAAAAAAAAAAAAAAMGmG9ycHFWWtKrqPAAAAAAAAAAAAAAAAAAAAAABMulF8/6//7/DmTJtevv/3oeJ3Zc1rZhg9BJDlbwAAAP//e1SAFg==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 208.36ms ago: executing program 0 (id=1884): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0xffff0018) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1) 179.013431ms ago: executing program 3 (id=1885): r0 = socket$netlink(0x10, 0x3, 0x4) setreuid(0x0, 0xee00) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000100000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) 0s ago: executing program 5 (id=1886): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x50, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_DPORT={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}, 0x1, 0x620b}, 0x0) kernel console output (not intermixed with test programs): 7156][ T8623] exfat: Deprecated parameter 'utf8' [ 221.598264][ T8623] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 221.758875][ T5772] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 221.835188][ T8593] loop2: detected capacity change from 0 to 32768 [ 221.887554][ T8593] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 221.942577][ T5772] usb 4-1: Using ep0 maxpacket: 32 [ 221.948664][ T8593] XFS (loop2): Ending clean mount [ 221.956181][ T5772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.974635][ T5772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.995411][ T5772] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 222.006403][ T8593] XFS (loop2): Quotacheck needed: Please wait. [ 222.023882][ T5772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.057197][ T5772] usb 4-1: config 0 descriptor?? [ 222.106254][ T8593] XFS (loop2): Quotacheck: Done. [ 222.275875][ T5769] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 222.541592][ T5772] ft260 0003:0403:6030.000A: item fetching failed at offset 0/2 [ 222.582610][ T5772] ft260 0003:0403:6030.000A: failed to parse HID [ 222.618911][ T5772] ft260: probe of 0003:0403:6030.000A failed with error -22 [ 222.810783][ T5772] usb 4-1: USB disconnect, device number 4 [ 223.500767][ T8673] syz_tun: entered promiscuous mode [ 223.525719][ T8673] macvtap1: entered promiscuous mode [ 223.549405][ T8673] syz_tun: left promiscuous mode [ 223.607882][ T8651] loop5: detected capacity change from 0 to 40427 [ 223.666563][ T8651] F2FS-fs (loop5): invalid crc value [ 223.713482][ T8651] F2FS-fs (loop5): Found nat_bits in checkpoint [ 223.897805][ T8651] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 224.556730][ T8697] openvswitch: netlink: Duplicate or invalid key (type 0). [ 224.579078][ T8697] openvswitch: netlink: Actions may not be safe on all matching packets [ 225.028641][ T8] IPVS: starting estimator thread 0... [ 225.040483][ T8709] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 225.139088][ T8712] IPVS: using max 20 ests per chain, 48000 per kthread [ 225.549653][ T8695] loop0: detected capacity change from 0 to 32768 [ 225.646525][ T8695] read_mapping_page failed! [ 225.678995][ T8695] ERROR: (device loop0): txCommit: [ 225.678995][ T8695] [ 226.920790][ T8729] loop5: detected capacity change from 0 to 40427 [ 226.993673][ T8729] F2FS-fs (loop5): Invalid log blocks per segment (4278190089) [ 227.052482][ T8729] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 227.125401][ T8729] F2FS-fs (loop5): invalid crc value [ 227.179387][ T8729] F2FS-fs (loop5): Found nat_bits in checkpoint [ 227.611455][ T8729] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 227.678901][ T8729] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 227.816611][ T8751] loop3: detected capacity change from 0 to 131072 [ 227.836769][ T8751] F2FS-fs (loop3): Test dummy encryption mode enabled [ 227.851771][ T8751] F2FS-fs (loop3): invalid crc value [ 227.865525][ T8773] loop0: detected capacity change from 0 to 128 [ 227.909361][ T8751] F2FS-fs (loop3): Mismatch valid blocks 4 vs. 5 [ 227.920270][ T8751] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 227.988464][ T8778] netlink: 76 bytes leftover after parsing attributes in process `syz.2.925'. [ 228.011044][ T8773] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 228.079080][ T7984] syz-executor: attempt to access beyond end of device [ 228.079080][ T7984] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 228.137108][ T7984] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 228.163141][ T8773] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.209045][ T8773] ext2 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.225712][ T8783] pim6reg: entered allmulticast mode [ 228.472231][ T5767] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.729045][ T5772] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 229.803272][ T3434] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.959411][ T5772] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 229.967756][ T5772] usb 1-1: config 0 has no interface number 0 [ 230.016633][ T5772] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 230.055624][ T3434] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.065639][ T5772] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 230.094364][ T5772] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 230.112854][ T5772] usb 1-1: Manufacturer: syz [ 230.117635][ T5772] usb 1-1: SerialNumber: syz [ 230.174759][ T5772] usb 1-1: config 0 descriptor?? [ 230.290041][ T3434] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.475000][ T3434] bond0: (slave netdevsim0): Releasing backup interface [ 230.510072][ T3434] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.697000][ T8818] loop5: detected capacity change from 0 to 32768 [ 230.808762][ T8818] XFS (loop5): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 230.889561][ T5772] usbtouchscreen: probe of 1-1:0.214 failed with error -71 [ 230.926725][ T5772] usb 1-1: USB disconnect, device number 5 [ 231.163454][ T8818] XFS (loop5): Ending clean mount [ 231.306165][ T7984] XFS (loop5): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 231.504635][ T8828] loop3: detected capacity change from 0 to 32768 [ 231.532204][ T5773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 231.543439][ T5773] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 231.552512][ T5773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 231.614489][ T8846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.942'. [ 231.623590][ T8846] netlink: 24 bytes leftover after parsing attributes in process `syz.0.942'. [ 231.669667][ T5773] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 231.693598][ T5773] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 231.708937][ T5773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 232.686784][ T8871] loop0: detected capacity change from 0 to 512 [ 232.768751][ T8871] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 232.843978][ T8871] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 232.899149][ T8871] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 232.959751][ T8871] EXT4-fs (loop0): 1 truncate cleaned up [ 232.987286][ T8861] loop3: detected capacity change from 0 to 32768 [ 233.008358][ T8861] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.943 (8861) [ 233.021803][ T8871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.051401][ T8861] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 233.069444][ T8861] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 233.078368][ T8861] BTRFS info (device loop3): using free space tree [ 233.217991][ T8871] EXT4-fs error (device loop0) in ext4_setattr:5682: error 28 [ 233.361991][ T8861] BTRFS info (device loop3): enabling ssd optimizations [ 233.390713][ T8861] BTRFS info (device loop3): auto enabling async discard [ 233.405310][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.478863][ T8841] chnl_net:caif_netlink_parms(): no params data found [ 233.609787][ T5768] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 233.768998][ T5776] Bluetooth: hci3: command tx timeout [ 233.821192][ T8906] loop0: detected capacity change from 0 to 256 [ 233.829098][ T8906] exfat: Deprecated parameter 'utf8' [ 233.953793][ T8906] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 234.426176][ T8919] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 234.438773][ T8919] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 234.476278][ T8919] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 234.484822][ T8919] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 234.499273][ T8919] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 234.539531][ T8919] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 234.562465][ T8919] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 234.599585][ T8919] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 234.606200][ T8919] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 234.688811][ T8919] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 234.705758][ T8919] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 234.765212][ T8919] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 234.796701][ T3434] hsr_slave_0: left promiscuous mode [ 234.821219][ T8931] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 234.850802][ T3434] hsr_slave_1: left promiscuous mode [ 234.878797][ T3434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.918764][ T3434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.960074][ T3434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.967574][ T3434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.975151][ T8935] netlink: 'syz.3.962': attribute type 3 has an invalid length. [ 234.991443][ T8935] netlink: 'syz.3.962': attribute type 1 has an invalid length. [ 235.019503][ T3434] bridge_slave_1: left allmulticast mode [ 235.028882][ T3434] bridge_slave_1: left promiscuous mode [ 235.045884][ T3434] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.050925][ T8935] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.962'. [ 235.085293][ T3434] bridge_slave_0: left allmulticast mode [ 235.112767][ T3434] bridge_slave_0: left promiscuous mode [ 235.127682][ T3434] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.199200][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.964'. [ 235.338870][ T3434] veth1_macvtap: left promiscuous mode [ 235.344586][ T3434] veth0_macvtap: left promiscuous mode [ 235.366634][ T8943] netlink: 32 bytes leftover after parsing attributes in process `syz.5.965'. [ 235.388844][ T3434] veth1_vlan: left promiscuous mode [ 235.394310][ T3434] veth0_vlan: left promiscuous mode [ 235.428267][ T8945] loop0: detected capacity change from 0 to 2048 [ 235.527552][ T8950] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.779351][ T3434] pim6reg (unregistering): left allmulticast mode [ 235.859559][ T5776] Bluetooth: hci3: command tx timeout [ 236.152017][ T8962] loop5: detected capacity change from 0 to 512 [ 236.182385][ T8962] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 236.760290][ T3434] team0 (unregistering): Port device team_slave_1 removed [ 236.824020][ T3434] team0 (unregistering): Port device team_slave_0 removed [ 236.883516][ T3434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.944973][ T3434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.406149][ T3434] bond0 (unregistering): Released all slaves [ 237.586452][ T8841] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.620649][ T8841] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.641563][ T8841] bridge_slave_0: entered allmulticast mode [ 237.680408][ T8841] bridge_slave_0: entered promiscuous mode [ 237.709817][ T8841] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.719319][ T8841] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.726670][ T8841] bridge_slave_1: entered allmulticast mode [ 237.749337][ T8841] bridge_slave_1: entered promiscuous mode [ 237.891523][ T8841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.944122][ T5776] Bluetooth: hci3: command tx timeout [ 237.953703][ T8841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.002108][ T8841] team0: Port device team_slave_0 added [ 238.013334][ T8841] team0: Port device team_slave_1 added [ 238.080621][ T8841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.087660][ T8841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.124880][ T5811] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 238.196533][ T8841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.264296][ T8841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.276650][ T8841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.344838][ T8841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.389762][ T5811] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 238.399694][ T5811] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 238.418980][ T5811] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.488358][ T5811] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 238.530436][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.538528][ T5811] usb 1-1: Product: syz [ 238.542960][ T8985] loop5: detected capacity change from 0 to 64 [ 238.558955][ T5811] usb 1-1: Manufacturer: syz [ 238.581550][ T5811] usb 1-1: SerialNumber: syz [ 238.650861][ T5811] hub 1-1:1.0: bad descriptor, ignoring hub [ 238.656874][ T5811] hub: probe of 1-1:1.0 failed with error -5 [ 238.730337][ T8841] hsr_slave_0: entered promiscuous mode [ 238.747410][ T8841] hsr_slave_1: entered promiscuous mode [ 238.871027][ T3434] IPVS: stop unused estimator thread 0... [ 238.876258][ T5811] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 238.904015][ T7984] hfs: node 4:3 still has 2 user(s)! [ 239.231557][ T5772] usb 1-1: USB disconnect, device number 6 [ 239.250163][ T5772] usblp0: removed [ 239.392907][ T9004] loop3: detected capacity change from 0 to 256 [ 239.520693][ T9004] FAT-fs (loop3): Directory bread(block 64) failed [ 239.530353][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 239.530371][ T27] audit: type=1326 audit(1776500081.952:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9005 comm="syz.5.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69e99c819 code=0x7ffc0000 [ 239.559163][ T9004] FAT-fs (loop3): Directory bread(block 65) failed [ 239.559575][ T9004] FAT-fs (loop3): Directory bread(block 66) failed [ 239.579933][ T27] audit: type=1326 audit(1776500081.952:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9005 comm="syz.5.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69e99c819 code=0x7ffc0000 [ 239.599756][ T9004] FAT-fs (loop3): Directory bread(block 67) failed [ 239.610047][ T9004] FAT-fs (loop3): Directory bread(block 68) failed [ 239.616633][ T9004] FAT-fs (loop3): Directory bread(block 69) failed [ 239.624260][ T9004] FAT-fs (loop3): Directory bread(block 70) failed [ 239.631009][ T9004] FAT-fs (loop3): Directory bread(block 71) failed [ 239.637784][ T9004] FAT-fs (loop3): Directory bread(block 72) failed [ 239.644856][ T9004] FAT-fs (loop3): Directory bread(block 73) failed [ 239.705505][ T8841] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 239.715193][ T27] audit: type=1326 audit(1776500082.132:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9005 comm="syz.5.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69e99c819 code=0x7ffc0000 [ 239.738417][ T27] audit: type=1326 audit(1776500082.142:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9005 comm="syz.5.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fe69e99c819 code=0x7ffc0000 [ 239.764286][ T27] audit: type=1326 audit(1776500082.142:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9005 comm="syz.5.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69e99c819 code=0x7ffc0000 [ 239.786998][ T27] audit: type=1326 audit(1776500082.182:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9005 comm="syz.5.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69e99c819 code=0x7ffc0000 [ 239.812862][ T8841] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 239.834966][ T27] audit: type=1326 audit(1776500082.182:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9005 comm="syz.5.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe69e99c819 code=0x7ffc0000 [ 239.863978][ T8841] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 239.912591][ T8841] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 239.982412][ T27] audit: type=1326 audit(1776500082.182:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9005 comm="syz.5.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe69e99c819 code=0x7ffc0000 [ 240.013818][ T5776] Bluetooth: hci3: command tx timeout [ 240.062456][ T27] audit: type=1326 audit(1776500082.142:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9005 comm="syz.5.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69e99c819 code=0x7ffc0000 [ 240.241652][ T8841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.325050][ T8841] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.360900][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.368143][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.446407][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.453627][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.902662][ T9032] loop3: detected capacity change from 0 to 164 [ 241.031396][ T9032] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 241.211567][ T9038] futex_wake_op: syz.0.996 tries to shift op by 32; fix this program [ 241.246024][ T9013] loop5: detected capacity change from 0 to 40427 [ 241.303691][ T9013] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x7 [ 241.376200][ T9040] loop3: detected capacity change from 0 to 1024 [ 241.395836][ T9013] F2FS-fs (loop5): invalid crc value [ 241.405975][ T8841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.419172][ T9013] F2FS-fs (loop5): Found nat_bits in checkpoint [ 241.427398][ T9040] EXT4-fs: Ignoring removed i_version option [ 241.468862][ T9040] EXT4-fs: inline encryption not supported [ 241.483449][ T9040] EXT4-fs (loop3): Test dummy encryption mode enabled [ 241.571428][ T9040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.605039][ T9013] F2FS-fs (loop5): Start checkpoint disabled! [ 241.652508][ T9013] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 241.661456][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.833031][ T27] audit: type=1800 audit(1776500084.252:93): pid=9013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.990" name="bus" dev="loop5" ino=10 res=0 errno=0 [ 241.879109][ T9013] syz.5.990: attempt to access beyond end of device [ 241.879109][ T9013] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 242.139993][ T3434] kworker/u4:6: attempt to access beyond end of device [ 242.139993][ T3434] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 242.169633][ T3434] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 242.186719][ T3434] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 242.262446][ T9059] loop0: detected capacity change from 0 to 8192 [ 242.304152][ T9059] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 242.339061][ T9059] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 242.355279][ T9059] REISERFS (device loop0): using ordered data mode [ 242.363575][ T9059] reiserfs: using flush barriers [ 242.371497][ T9059] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 242.393701][ T9059] REISERFS (device loop0): checking transaction log (loop0) [ 242.461436][ T9059] REISERFS (device loop0): Using r5 hash to sort names [ 242.732026][ T8841] veth0_vlan: entered promiscuous mode [ 242.807098][ T8841] veth1_vlan: entered promiscuous mode [ 242.916517][ T9074] loop3: detected capacity change from 0 to 256 [ 242.934972][ T8841] veth0_macvtap: entered promiscuous mode [ 242.985403][ T8841] veth1_macvtap: entered promiscuous mode [ 243.072966][ T8841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.086451][ T9074] FAT-fs (loop3): Directory bread(block 64) failed [ 243.094601][ T9074] FAT-fs (loop3): Directory bread(block 65) failed [ 243.101795][ T5098] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 243.112588][ T9074] FAT-fs (loop3): Directory bread(block 66) failed [ 243.119420][ T9074] FAT-fs (loop3): Directory bread(block 67) failed [ 243.124461][ T8841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.168694][ T8841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.178127][ T9074] FAT-fs (loop3): Directory bread(block 68) failed [ 243.186102][ T9074] FAT-fs (loop3): Directory bread(block 69) failed [ 243.204790][ T9074] FAT-fs (loop3): Directory bread(block 70) failed [ 243.216620][ T8841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.216782][ T9074] FAT-fs (loop3): Directory bread(block 71) failed [ 243.237163][ T9074] FAT-fs (loop3): Directory bread(block 72) failed [ 243.246127][ T9074] FAT-fs (loop3): Directory bread(block 73) failed [ 243.263026][ T8841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.274649][ T8841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.317037][ T8841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.356760][ T5098] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 243.378419][ T8841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.388718][ T5098] usb 1-1: config 0 has no interface number 0 [ 243.409490][ T5098] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 243.420573][ T8841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.434813][ T5098] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.456611][ T5098] usb 1-1: config 0 descriptor?? [ 243.474490][ T8841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.486754][ T5098] usb 1-1: selecting invalid altsetting 1 [ 243.492990][ T5098] dvb_ttusb_budget: ttusb_init_controller: error [ 243.509397][ T8841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.520142][ T5098] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 243.558702][ T8841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.579852][ T8841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.625698][ T8841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.696538][ T9083] mkiss: ax0: crc mode is auto. [ 243.714301][ T8841] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.752321][ T8841] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.781703][ T8841] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.786281][ T5098] DVB: Unable to find symbol cx22700_attach() [ 243.809764][ T8841] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.965118][ T5098] DVB: Unable to find symbol tda10046_attach() [ 243.980560][ T5098] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 244.042585][ T5098] usb 1-1: USB disconnect, device number 7 [ 244.121042][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.166796][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.246698][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.298922][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.822312][ T9100] loop5: detected capacity change from 0 to 32768 [ 245.946236][ T9100] JBD2: Ignoring recovery information on journal [ 246.138343][ T9100] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 246.355314][ T9108] loop6: detected capacity change from 0 to 32768 [ 246.558332][ T9134] loop0: detected capacity change from 0 to 4096 [ 246.597914][ T9108] ERROR: (device loop6): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 246.597914][ T9108] [ 246.657322][ T9134] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 246.671755][ T9100] (syz.5.1009,9100,0):ocfs2_verify_group_and_input:425 ERROR: the add group should be in chain 1 [ 246.717091][ T9108] ERROR: (device loop6): remounting filesystem as read-only [ 246.769908][ T9100] (syz.5.1009,9100,0):ocfs2_group_add:503 ERROR: status = -22 [ 247.335969][ T7984] ocfs2: Unmounting device (7,5) on (node local) [ 247.405667][ T9118] loop3: detected capacity change from 0 to 262144 [ 247.447502][ T9141] loop6: detected capacity change from 0 to 256 [ 247.455215][ T9141] exfat: Deprecated parameter 'namecase' [ 247.465145][ T9141] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 247.502361][ T9118] F2FS-fs (loop3): Found nat_bits in checkpoint [ 247.589040][ T9118] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 247.608671][ T9141] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 247.981101][ T27] audit: type=1326 audit(1776500090.402:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef899c819 code=0x7ffc0000 [ 248.089510][ T9155] loop6: detected capacity change from 0 to 512 [ 248.107890][ T27] audit: type=1326 audit(1776500090.402:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef899c819 code=0x7ffc0000 [ 248.185984][ T9155] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.1023: inode has both inline data and extents flags [ 248.190269][ T27] audit: type=1326 audit(1776500090.422:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef899c819 code=0x7ffc0000 [ 248.221728][ T27] audit: type=1326 audit(1776500090.422:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef899c819 code=0x7ffc0000 [ 248.245146][ T27] audit: type=1326 audit(1776500090.442:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7faef899c819 code=0x7ffc0000 [ 248.273775][ T27] audit: type=1326 audit(1776500090.442:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef899c819 code=0x7ffc0000 [ 248.289769][ T9155] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.1023: couldn't read orphan inode 15 (err -117) [ 248.318237][ T27] audit: type=1326 audit(1776500090.442:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef899c819 code=0x7ffc0000 [ 248.381729][ T27] audit: type=1326 audit(1776500090.442:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faef895d04e code=0x7ffc0000 [ 248.411954][ T9155] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.483854][ T27] audit: type=1326 audit(1776500090.452:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef899c819 code=0x7ffc0000 [ 248.519830][ T9155] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #2: comm syz.6.1023: invalid size [ 248.573660][ T9159] loop3: detected capacity change from 0 to 4096 [ 248.598921][ T27] audit: type=1326 audit(1776500090.452:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef899c819 code=0x7ffc0000 [ 248.645979][ T9166] loop0: detected capacity change from 0 to 16 [ 248.691268][ T9159] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 248.704434][ T9166] erofs: (device loop0): mounted with root inode @ nid 36. [ 248.740008][ T8841] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.768670][ T9159] NILFS (loop3): mounting unchecked fs [ 248.892968][ T9159] NILFS (loop3): recovery complete [ 248.939063][ T9172] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 248.979595][ T9173] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1026'. [ 249.851213][ T9197] loop3: detected capacity change from 0 to 2048 [ 249.955986][ T9197] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.190196][ T9209] loop6: detected capacity change from 0 to 256 [ 250.260246][ T9209] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395e47cf, utbl_chksum : 0xe619d30d) [ 250.323711][ T9215] loop0: detected capacity change from 0 to 256 [ 250.526377][ T9215] FAT-fs (loop0): Directory bread(block 64) failed [ 250.549537][ T9215] FAT-fs (loop0): Directory bread(block 65) failed [ 250.588623][ T5811] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 250.599080][ T9215] FAT-fs (loop0): Directory bread(block 66) failed [ 250.624245][ T9215] FAT-fs (loop0): Directory bread(block 67) failed [ 250.658770][ T9215] FAT-fs (loop0): Directory bread(block 68) failed [ 250.685400][ T9215] FAT-fs (loop0): Directory bread(block 69) failed [ 250.722868][ T9215] FAT-fs (loop0): Directory bread(block 70) failed [ 250.755501][ T9215] FAT-fs (loop0): Directory bread(block 71) failed [ 250.781522][ T9215] FAT-fs (loop0): Directory bread(block 72) failed [ 250.801831][ T5811] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.820018][ T9215] FAT-fs (loop0): Directory bread(block 73) failed [ 250.850779][ T5811] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.898876][ T5811] usb 6-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 250.948928][ T5811] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.966501][ T5811] usb 6-1: config 0 descriptor?? [ 251.509181][ T5811] wacom 0003:056A:030C.000B: hidraw0: USB HID v0.06 Device [HID 056a:030c] on usb-dummy_hcd.5-1/input0 [ 251.646338][ T5811] usb 6-1: USB disconnect, device number 3 [ 251.796639][ T9238] fido_id[9238]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 252.203218][ T9229] loop6: detected capacity change from 0 to 32768 [ 252.306698][ T9229] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 252.469797][ T9229] ocfs2: Unmounting device (7,6) on (node local) [ 252.770308][ T9232] loop3: detected capacity change from 0 to 40427 [ 252.798420][ T9261] netlink: 9 bytes leftover after parsing attributes in process `syz.6.1054'. [ 252.827018][ T9232] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 252.864918][ T9232] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 252.899945][ T9232] F2FS-fs (loop3): invalid crc value [ 253.245245][ T9275] netlink: 'syz.5.1059': attribute type 1 has an invalid length. [ 253.288778][ T9275] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.1059'. [ 253.331068][ T9232] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 253.375296][ T9232] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 253.711744][ T5768] syz-executor: attempt to access beyond end of device [ 253.711744][ T5768] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 253.760118][ T5768] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 253.908771][ T5806] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 254.112277][ T5806] usb 7-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 254.137815][ T5806] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 254.159460][ T5806] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.180003][ T5806] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 254.200023][ T9300] loop5: detected capacity change from 0 to 1024 [ 254.206553][ T9302] loop0: detected capacity change from 0 to 16 [ 254.235092][ T9300] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 254.247960][ T5806] usb 7-1: config 0 interface 0 has no altsetting 0 [ 254.257316][ T9302] erofs: (device loop0): mounted with root inode @ nid 36. [ 254.275291][ T5806] usb 7-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 254.284771][ T9300] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 254.311580][ T9300] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 254.322050][ T5806] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.346999][ T9302] syz.0.1070: attempt to access beyond end of device [ 254.346999][ T9302] loop0: rw=0, sector=36, nr_sectors = 1 limit=16 [ 254.363563][ T5806] usb 7-1: config 0 descriptor?? [ 254.383610][ T9300] EXT4-fs error (device loop5): ext4_get_journal_inode:5820: inode #5: comm syz.5.1069: unexpected bad inode w/o EXT4_IGET_BAD [ 254.413322][ T9302] syz.0.1070: attempt to access beyond end of device [ 254.413322][ T9302] loop0: rw=0, sector=131156, nr_sectors = 1 limit=16 [ 254.431915][ T9300] EXT4-fs (loop5): no journal found [ 254.437338][ T9300] EXT4-fs (loop5): can't get journal size [ 254.465899][ T9302] syz.0.1070: attempt to access beyond end of device [ 254.465899][ T9302] loop0: rw=0, sector=36, nr_sectors = 1 limit=16 [ 254.521144][ T9302] syz.0.1070: attempt to access beyond end of device [ 254.521144][ T9302] loop0: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 254.550651][ T9300] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 254.583176][ T9302] syz.0.1070: attempt to access beyond end of device [ 254.583176][ T9302] loop0: rw=0, sector=41, nr_sectors = 1 limit=16 [ 254.653010][ T9302] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 254.733794][ T9309] loop3: detected capacity change from 0 to 4096 [ 254.810389][ T7984] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.850412][ T5806] hid-alps 0003:044E:120C.000C: unknown main item tag 0x6 [ 254.889382][ T5806] hid-alps 0003:044E:120C.000C: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.6-1/input0 [ 255.145949][ T5811] usb 7-1: USB disconnect, device number 2 [ 255.205648][ T9312] fido_id[9312]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 255.536717][ T9330] loop5: detected capacity change from 0 to 764 [ 255.546431][ T9330] rock: directory entry would overflow storage [ 255.566071][ T9330] rock: sig=0x4654, size=5, remaining=4 [ 256.016792][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.024940][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.063736][ T9344] loop6: detected capacity change from 0 to 1024 [ 256.091194][ T9344] hfsplus: found bad thread record in catalog [ 256.153542][ T3434] hfsplus: b-tree write err: -5, ino 25 [ 256.173768][ T3434] hfsplus: b-tree write err: -5, ino 4 [ 256.209436][ T3434] hfsplus: b-tree write err: -5, ino 2 [ 256.382615][ T9328] loop3: detected capacity change from 0 to 32768 [ 256.434159][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 256.434173][ T27] audit: type=1800 audit(1776500098.852:108): pid=9328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1078" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 256.468986][ T5098] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 256.702884][ T5098] usb 6-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 256.717317][ T5098] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.746053][ T5098] usb 6-1: Product: syz [ 256.757520][ T5098] usb 6-1: Manufacturer: syz [ 256.770795][ T5098] usb 6-1: SerialNumber: syz [ 256.798088][ T5098] usb 6-1: config 0 descriptor?? [ 256.865221][ T9361] loop6: detected capacity change from 0 to 1024 [ 256.945260][ T3509] hfsplus: b-tree write err: -5, ino 25 [ 256.959920][ T3509] hfsplus: b-tree write err: -5, ino 4 [ 256.965562][ T3509] hfsplus: b-tree write err: -5, ino 2 [ 257.058810][ T5098] peak_usb 6-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 257.251093][ T5098] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 257.280470][ T5098] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 257.287355][ T5098] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 257.345332][ T9371] loop6: detected capacity change from 0 to 512 [ 257.388072][ T9373] loop0: detected capacity change from 0 to 1024 [ 257.406698][ T9371] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 257.420244][ T5098] peak_usb: probe of 6-1:0.0 failed with error -22 [ 257.454330][ T9371] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 257.485632][ T5098] usb 6-1: USB disconnect, device number 4 [ 257.505374][ T9371] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1099: invalid indirect mapped block 2683928664 (level 1) [ 257.560381][ T9377] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1091'. [ 257.616937][ T9371] EXT4-fs (loop6): Remounting filesystem read-only [ 257.662498][ T9371] EXT4-fs (loop6): 1 truncate cleaned up [ 257.727687][ T9371] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.911084][ T9371] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 257.953564][ T9371] EXT4-fs (loop6): changing journal_checksum during remount not supported; ignoring [ 257.986625][ T9383] loop0: detected capacity change from 0 to 512 [ 258.073715][ T9383] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.094512][ T8841] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.163423][ T9383] ext4 filesystem being mounted at /294/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.374730][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.858932][ T5806] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 259.040759][ T5806] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 259.069108][ T5806] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.098817][ T5806] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 259.118635][ T5806] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.143621][ T5806] usb 6-1: config 0 descriptor?? [ 259.161451][ T5806] hub 6-1:0.0: USB hub found [ 259.368814][ T5806] hub 6-1:0.0: 1 port detected [ 259.565198][ T5806] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 259.597911][ T5806] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 259.628848][ T5806] usbhid 6-1:0.0: can't add hid device: -71 [ 259.634974][ T5806] usbhid: probe of 6-1:0.0 failed with error -71 [ 259.682662][ T5806] usb 6-1: USB disconnect, device number 5 [ 259.982784][ T9424] loop6: detected capacity change from 0 to 40427 [ 260.021981][ T9424] F2FS-fs (loop6): build fault injection attr: rate: 14, type: 0x7ffff [ 260.052513][ T9424] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0xe4 [ 260.094707][ T9424] F2FS-fs (loop6): invalid crc value [ 260.171986][ T9424] F2FS-fs (loop6): Found nat_bits in checkpoint [ 260.310516][ T9452] loop5: detected capacity change from 0 to 256 [ 260.322426][ T9424] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 260.425641][ T9424] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 260.436909][ T9456] loop0: detected capacity change from 0 to 512 [ 260.480938][ T9456] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0002] [ 260.510983][ T9456] System zones: 1-20 [ 260.517859][ T9456] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.628746][ T5098] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 260.676536][ T8841] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_page of f2fs_grab_meta_page+0x67/0x200 [ 260.793211][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.850633][ T5098] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 260.884275][ T5098] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.926712][ T5098] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 260.965828][ T5098] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.002509][ T5098] usb 4-1: config 0 descriptor?? [ 261.010944][ T5098] hub 4-1:0.0: USB hub found [ 261.184606][ T9469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1131'. [ 261.268697][ T5098] hub 4-1:0.0: 7 ports detected [ 261.278853][ T5098] hub 4-1:0.0: insufficient power available to use all downstream ports [ 261.677574][ T5098] usb 4-1: USB disconnect, device number 5 [ 262.279372][ T9476] loop6: detected capacity change from 0 to 32768 [ 262.365790][ T27] audit: type=1800 audit(1776500104.772:109): pid=9476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1129" name="file1" dev="loop6" ino=7 res=0 errno=0 [ 262.409910][ T9493] syz.0.1142 (9493): /proc/9492/oom_adj is deprecated, please use /proc/9492/oom_score_adj instead. [ 262.687899][ T9501] binder: 9500:9501 ioctl c0306201 0 returned -14 [ 262.947294][ T9505] loop0: detected capacity change from 0 to 4096 [ 263.142322][ T9505] ntfs: volume version 3.1. [ 263.365515][ T9505] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 263.428118][ T9505] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 263.492189][ T9505] ntfs: (device loop0): parse_options(): Option iocharset is deprecated. Please use option nls= in the future. [ 263.538790][ T9505] ntfs: (device loop0): parse_options(): Option iocharset is deprecated. Please use option nls= in the future. [ 263.549181][ T5845] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 263.584301][ T9505] ntfs: (device loop0): parse_options(): Unrecognized mount option discard. [ 263.618591][ T9505] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 263.671838][ T9505] ntfs: (device loop0): parse_options(): Unrecognized mount option allow_utime. [ 263.688664][ T9505] ntfs: (device loop0): parse_options(): Unrecognized mount option allow_utime. [ 263.708451][ T9505] ntfs: (device loop0): parse_options(): Unrecognized mount option . [ 263.761027][ T5845] usb 4-1: Using ep0 maxpacket: 16 [ 263.776877][ T5845] usb 4-1: unable to get BOS descriptor or descriptor too short [ 263.794817][ T5845] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 263.819517][ T5845] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 263.853332][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.879229][ T5845] usb 4-1: Product: syz [ 263.883488][ T5845] usb 4-1: Manufacturer: syz [ 263.888126][ T5845] usb 4-1: SerialNumber: syz [ 264.062128][ T9512] loop5: detected capacity change from 0 to 32768 [ 264.114237][ T9512] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 scanned by syz.5.1151 (9512) [ 264.184818][ T5845] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 264.198862][ T9512] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 264.235064][ T9512] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 264.240978][ T5845] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 264.280013][ T9512] BTRFS info (device loop5): using free space tree [ 264.463776][ T9512] BTRFS info (device loop5): enabling ssd optimizations [ 264.478769][ T9512] BTRFS info (device loop5): auto enabling async discard [ 264.653698][ T5845] usb 4-1: USB disconnect, device number 6 [ 264.777939][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.889010][ T7984] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 265.210907][ T5760] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 9 /dev/loop5 scanned by udevd (5760) [ 265.241365][ T9538] loop6: detected capacity change from 0 to 32768 [ 265.291139][ T9538] (syz.6.1158,9538,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 265.378686][ T9538] (syz.6.1158,9538,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 265.501866][ T9538] JBD2: Ignoring recovery information on journal [ 265.762714][ T9538] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 265.859531][ T9587] loop0: detected capacity change from 0 to 16 [ 265.910720][ T9587] erofs: (device loop0): mounted with root inode @ nid 36. [ 266.149094][ T5845] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 266.324203][ T8841] ocfs2: Unmounting device (7,6) on (node local) [ 266.378719][ T5845] usb 6-1: Using ep0 maxpacket: 32 [ 266.387696][ T5845] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 266.408097][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.446287][ T5845] usb 6-1: config 0 descriptor?? [ 266.467248][ T5845] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 267.073831][ T5845] gspca_vc032x: reg_w err -71 [ 267.079050][ T5845] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.084394][ T5845] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.131417][ T5845] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.142907][ T5845] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.148271][ T5845] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.173875][ T5845] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.193572][ T5845] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.203716][ T5845] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.214962][ T5845] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.222761][ T5845] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.228261][ T5845] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.237587][ T5845] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.273073][ T5845] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.288987][ T5845] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.317180][ T5845] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.330983][ T5845] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.353255][ T5845] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.373918][ T5845] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.395601][ T5845] gspca_vc032x: Unknown sensor... [ 267.413409][ T5845] vc032x: probe of 6-1:0.0 failed with error -22 [ 267.436531][ T5845] usb 6-1: USB disconnect, device number 6 [ 267.746131][ T9638] loop5: detected capacity change from 0 to 512 [ 267.767015][ T9638] EXT4-fs: Ignoring removed bh option [ 267.816720][ T9638] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 267.921450][ T9643] loop6: detected capacity change from 0 to 64 [ 267.945696][ T9638] EXT4-fs (loop5): 1 truncate cleaned up [ 267.991509][ T9638] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.209513][ T9638] EXT4-fs warning (device loop5): ext4_group_add:1742: No reserved GDT blocks, can't resize [ 268.439840][ T7984] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.575930][ T9657] team0: Device gtp0 is of different type [ 268.959317][ T9671] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 269.287757][ T9682] lo speed is unknown, defaulting to 1000 [ 269.312065][ T9682] lo speed is unknown, defaulting to 1000 [ 269.349084][ T9682] lo speed is unknown, defaulting to 1000 [ 269.409125][ T9682] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 269.473545][ T9682] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 269.590796][ T9682] lo speed is unknown, defaulting to 1000 [ 269.614007][ T9682] lo speed is unknown, defaulting to 1000 [ 269.631502][ T9682] lo speed is unknown, defaulting to 1000 [ 269.660400][ T9682] lo speed is unknown, defaulting to 1000 [ 269.995229][ T9705] raw_sendmsg: syz.0.1201 forgot to set AF_INET. Fix it! [ 270.421921][ T5845] IPVS: starting estimator thread 0... [ 270.516272][ T9725] loop5: detected capacity change from 0 to 128 [ 270.522912][ T9722] IPVS: using max 20 ests per chain, 48000 per kthread [ 270.545734][ T9725] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 270.586395][ T9725] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 271.567462][ T9759] loop3: detected capacity change from 0 to 2048 [ 271.687223][ T9759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.738880][ T5845] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 271.854216][ T9759] EXT4-fs error (device loop3): ext4_find_extent:945: inode #2: comm syz.3.1218: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 271.936012][ T9759] EXT4-fs (loop3): Remounting filesystem read-only [ 271.992079][ T5845] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 272.000540][ T5845] usb 7-1: config 0 has no interface number 0 [ 272.007548][ T5845] usb 7-1: config 0 interface 41 has no altsetting 0 [ 272.074312][ T5845] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 272.088712][ T5845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.097337][ T5845] usb 7-1: Product: syz [ 272.112043][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.138731][ T5845] usb 7-1: Manufacturer: syz [ 272.150953][ T5845] usb 7-1: SerialNumber: syz [ 272.199873][ T5845] usb 7-1: config 0 descriptor?? [ 272.894301][ T5845] CoreChips: probe of 7-1:0.41 failed with error -71 [ 272.928257][ T5845] usb 7-1: USB disconnect, device number 3 [ 274.142161][ T9827] loop6: detected capacity change from 0 to 256 [ 274.151145][ T9827] exfat: Deprecated parameter 'namecase' [ 274.179993][ T9821] loop3: detected capacity change from 0 to 4096 [ 274.195899][ T9821] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 274.246970][ T9827] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d) [ 274.644308][ T9821] ntfs3: loop3: ino=9, attr_set_size [ 274.708701][ T9821] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 274.734857][ T9840] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 274.778994][ T9840] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 274.799867][ T9840] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 274.855424][ T9840] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 274.904030][ T9840] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 274.933266][ T9843] loop6: detected capacity change from 0 to 1024 [ 274.939969][ T9840] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 274.955544][ T9840] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 274.963445][ T9843] EXT4-fs: Ignoring removed orlov option [ 274.989140][ T9840] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 275.008341][ T9840] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 275.027776][ T9840] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 275.036497][ T9840] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 275.057355][ T9840] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 275.090823][ T9840] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 275.124840][ T9840] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 275.139861][ T9843] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.160026][ T9840] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 275.186104][ T9840] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 275.230599][ T9840] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 275.250369][ T8841] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.294267][ T9840] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 276.097685][ T9883] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1257'. [ 276.127134][ T9883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 276.282789][ T9889] loop3: detected capacity change from 0 to 256 [ 276.309779][ T5098] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 276.335743][ T9889] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfe5fe6b3, utbl_chksum : 0xe619d30d) [ 276.520346][ T5098] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 276.531579][ T5098] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 276.542408][ T5098] usb 6-1: config 220 has no interface number 2 [ 276.548965][ T5098] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 276.616655][ T5098] usb 6-1: config 220 interface 0 has no altsetting 0 [ 276.629008][ T5098] usb 6-1: config 220 interface 76 has no altsetting 0 [ 276.635955][ T5098] usb 6-1: config 220 interface 1 has no altsetting 0 [ 276.673316][ T5098] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 276.688676][ T5098] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.696958][ T5098] usb 6-1: Product: syz [ 276.707061][ T5098] usb 6-1: Manufacturer: syz [ 276.717604][ T5098] usb 6-1: SerialNumber: syz [ 276.959908][ T5098] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 276.976656][ T5098] usb 6-1: No valid video chain found. [ 276.983601][ T5098] usb 6-1: selecting invalid altsetting 0 [ 277.055796][ T5098] usb 6-1: selecting invalid altsetting 0 [ 277.078591][ T5098] usbtest: probe of 6-1:220.1 failed with error -22 [ 277.111867][ T5098] usb 6-1: USB disconnect, device number 7 [ 277.590875][ T9899] loop6: detected capacity change from 0 to 40427 [ 277.647641][ T9899] F2FS-fs (loop6): invalid crc value [ 277.684302][ T9899] F2FS-fs (loop6): Found nat_bits in checkpoint [ 277.772480][ T5776] Bluetooth: hci3: command tx timeout [ 277.825512][ T9899] F2FS-fs (loop6): Start checkpoint disabled! [ 277.897510][ T9899] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 278.016060][ T27] audit: type=1800 audit(1776500120.432:110): pid=9899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1265" name="bus" dev="loop6" ino=10 res=0 errno=0 [ 278.294019][ T3509] kworker/u4:10: attempt to access beyond end of device [ 278.294019][ T3509] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 278.327123][ T9905] loop3: detected capacity change from 0 to 40427 [ 278.334016][ T3509] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 278.346722][ T3509] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 278.378821][ T9905] F2FS-fs (loop3): Invalid log blocks per segment (83886089) [ 278.386303][ T9905] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 279.564393][ T9937] loop6: detected capacity change from 0 to 4096 [ 279.647072][ T9937] ntfs: volume version 3.1. [ 279.695614][ T9942] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1283'. [ 279.804960][ T9920] loop3: detected capacity change from 0 to 40427 [ 279.834595][ T9920] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 279.865581][ T9920] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 279.924032][ T9920] F2FS-fs (loop3): Found nat_bits in checkpoint [ 280.112164][ T9920] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 280.147531][ T9920] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 280.218383][ T9958] loop6: detected capacity change from 0 to 256 [ 281.099764][ T9956] loop5: detected capacity change from 0 to 32768 [ 281.384150][ T9984] hugetlbfs: Bad value for 'uid' [ 281.492742][ T9986] tipc: Started in network mode [ 281.497727][ T9986] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 281.543740][ T9986] tipc: Enabled bearer , priority 12 [ 281.552021][ T9988] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1305'. [ 282.092143][T10004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1311'. [ 282.151776][T10008] loop5: detected capacity change from 0 to 512 [ 282.243208][T10008] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.304962][T10008] ext4 filesystem being mounted at /138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 282.412632][T10014] siw: device registration error -23 [ 282.427372][T10008] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 3: comm syz.5.1313: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 282.447037][ T9996] loop6: detected capacity change from 0 to 32768 [ 282.537704][ T7984] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.555789][ T5098] tipc: Node number set to 15444650 [ 282.596978][ T9996] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 282.746773][ T9996] XFS (loop6): Ending clean mount [ 282.812182][T10029] rdma_op ffff88805dbc69f0 conn xmit_rdma 0000000000000000 [ 282.875169][ T9996] XFS (loop6): syz.6.1307 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 282.907176][T10031] loop5: detected capacity change from 0 to 512 [ 282.956045][ T8841] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 282.970422][T10031] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 283.127045][T10031] EXT4-fs (loop5): 1 orphan inode deleted [ 283.193496][T10031] EXT4-fs (loop5): 1 truncate cleaned up [ 283.239992][T10031] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.366855][T10042] loop3: detected capacity change from 0 to 512 [ 283.412042][T10042] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 283.432452][T10042] EXT4-fs (loop3): orphan cleanup on readonly fs [ 283.479048][T10042] EXT4-fs error (device loop3): ext4_quota_enable:7140: comm syz.3.1323: Bad quota inum: 393216, type: 0 [ 283.560922][T10047] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 283.564344][T10042] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=0, err=-117, ino=393216). Please run e2fsck to fix. [ 283.620192][ T7984] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.638913][T10042] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 283.681807][T10042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 283.792337][T10049] loop5: detected capacity change from 0 to 64 [ 283.843940][T10042] EXT4-fs error (device loop3): ext4_get_link:104: inode #16: comm syz.3.1323: bad symlink. [ 283.990584][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.228476][T10046] loop6: detected capacity change from 0 to 32768 [ 284.272124][T10046] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 ./bus scanned by syz.6.1325 (10046) [ 284.330533][T10046] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 284.349793][T10046] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 284.379318][T10046] BTRFS error (device loop6): superblock checksum mismatch [ 284.405119][T10046] BTRFS error (device loop6): open_ctree failed: -22 [ 284.454386][ T5760] udevd[5760]: incorrect btrfs checksum on /dev/loop6 [ 285.560568][T10079] loop5: detected capacity change from 0 to 512 [ 285.612641][T10079] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 285.645488][T10079] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 285.655236][T10079] System zones: 0-1, 15-15, 18-18, 34-34 [ 285.662280][T10079] EXT4-fs (loop5): orphan cleanup on readonly fs [ 285.670292][T10079] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 285.680020][T10079] EXT4-fs warning (device loop5): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 285.697163][T10079] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 285.716858][T10079] EXT4-fs (loop5): 1 truncate cleaned up [ 285.735064][T10079] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 285.865481][T10079] fscrypt (loop5, inode 16): Error -61 getting encryption context [ 286.013681][ T7984] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.763380][T10097] loop5: detected capacity change from 0 to 40427 [ 286.781219][T10097] F2FS-fs (loop5): invalid crc value [ 286.820744][T10097] F2FS-fs (loop5): Found nat_bits in checkpoint [ 286.948363][T10097] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 287.053430][T10110] loop6: detected capacity change from 0 to 8192 [ 287.082555][T10110] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 287.130467][T10110] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 287.188866][T10110] REISERFS (device loop6): using ordered data mode [ 287.195494][T10110] reiserfs: using flush barriers [ 287.230524][T10110] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 287.265033][T10110] REISERFS (device loop6): checking transaction log (loop6) [ 287.288781][T10110] REISERFS (device loop6): Using r5 hash to sort names [ 287.299237][T10110] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 287.362515][ T7984] syz-executor: attempt to access beyond end of device [ 287.362515][ T7984] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 287.411441][T10118] tipc: Started in network mode [ 287.416564][T10118] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 287.427105][T10118] tipc: Enabled bearer , priority 12 [ 287.430895][ T7984] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 288.254374][T10130] netlink: 9 bytes leftover after parsing attributes in process `syz.6.1359'. [ 288.341670][T10130] 0: renamed from hsr_slave_1 (while UP) [ 288.371403][T10130] 0: entered allmulticast mode [ 288.387146][T10130] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 288.538774][ T9] tipc: Node number set to 15444650 [ 288.596790][T10120] loop3: detected capacity change from 0 to 32768 [ 288.674769][T10120] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 288.700762][T10141] netlink: 'syz.6.1360': attribute type 1 has an invalid length. [ 288.876765][T10120] XFS (loop3): Ending clean mount [ 288.926015][T10120] XFS (loop3): Quotacheck needed: Please wait. [ 289.030641][T10120] XFS (loop3): Quotacheck: Done. [ 289.036688][T10132] loop5: detected capacity change from 0 to 32768 [ 289.121708][T10132] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 289.206364][T10132] XFS (loop5): Ending clean mount [ 289.287070][ T27] audit: type=1800 audit(1776500131.702:111): pid=10132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1354" name="file1" dev="loop5" ino=6150 res=0 errno=0 [ 289.348289][ T5768] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 289.443633][ T7984] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 289.863299][T10171] loop6: detected capacity change from 0 to 164 [ 290.007474][T10177] loop5: detected capacity change from 0 to 512 [ 290.051136][T10171] Unsupported NM flag settings (240) [ 290.072809][T10177] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 290.109121][T10177] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 290.212840][T10177] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.1369: bad orphan inode 117440527 [ 290.289259][T10177] EXT4-fs (loop5): Remounting filesystem read-only [ 290.297222][T10177] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.323698][ T8841] Unsupported NM flag settings (240) [ 290.363475][ T8841] Unsupported NM flag settings (240) [ 290.399067][ T8841] Unsupported NM flag settings (240) [ 290.438382][ T8841] Unsupported NM flag settings (240) [ 290.471965][ T8841] Unsupported NM flag settings (240) [ 290.477737][ T8841] Unsupported NM flag settings (240) [ 290.493982][ T7984] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.682114][ T27] audit: type=1326 audit(1776500133.102:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10190 comm="syz.6.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cecf9c819 code=0x7ffc0000 [ 290.735243][ T27] audit: type=1326 audit(1776500133.102:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10190 comm="syz.6.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cecf9c819 code=0x7ffc0000 [ 290.757748][ C1] vkms_vblank_simulate: vblank timer overrun [ 290.878607][ T27] audit: type=1326 audit(1776500133.122:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10190 comm="syz.6.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8cecf9c819 code=0x7ffc0000 [ 290.950027][ T27] audit: type=1326 audit(1776500133.122:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10190 comm="syz.6.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cecf9c819 code=0x7ffc0000 [ 290.974953][T10193] loop5: detected capacity change from 0 to 4096 [ 291.476047][T10216] loop3: detected capacity change from 0 to 512 [ 291.509025][T10216] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 291.544239][T10216] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.1389: bad orphan inode 131083 [ 291.577148][T10216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.744774][ T27] audit: type=1326 audit(1776500134.162:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10220 comm="syz.6.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cecf9c819 code=0x7ffc0000 [ 291.793105][ T27] audit: type=1326 audit(1776500134.182:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10220 comm="syz.6.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cecf9c819 code=0x7ffc0000 [ 291.816553][ T27] audit: type=1326 audit(1776500134.192:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10220 comm="syz.6.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f8cecf9c819 code=0x7ffc0000 [ 292.002215][T10218] loop5: detected capacity change from 0 to 32768 [ 292.012658][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.087363][T10218] JBD2: Ignoring recovery information on journal [ 292.204745][T10218] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 292.430858][T10218] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 292.470627][T10218] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 292.498651][T10218] OCFS2: File system is now read-only. [ 292.514542][T10218] (syz.5.1390,10218,0):ocfs2_trim_mainbm:7610 ERROR: status = -30 [ 292.681247][ T7984] ocfs2: Unmounting device (7,5) on (node local) [ 292.892849][T10236] loop3: detected capacity change from 0 to 32768 [ 292.963795][T10236] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 293.299642][T10252] syz.3.1397 (10252) used greatest stack depth: 18768 bytes left [ 293.385458][ T5768] ocfs2: Unmounting device (7,3) on (node local) [ 293.968680][ T5811] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 294.018748][ T5098] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 294.148924][ T5811] usb 1-1: Using ep0 maxpacket: 8 [ 294.159640][ T5811] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 294.179254][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.187357][ T5811] usb 1-1: Product: syz [ 294.198620][ T5098] usb 4-1: Using ep0 maxpacket: 16 [ 294.203969][ T5811] usb 1-1: Manufacturer: syz [ 294.217319][T10276] loop5: detected capacity change from 0 to 40427 [ 294.224507][ T5811] usb 1-1: SerialNumber: syz [ 294.232125][ T5098] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 294.243669][ T5811] usb 1-1: config 0 descriptor?? [ 294.248852][ T5098] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 294.279790][T10276] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff [ 294.288226][T10276] F2FS-fs (loop5): Image doesn't support compression [ 294.295375][ T5098] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 294.305498][ T5098] usb 4-1: config 0 interface 0 has no altsetting 0 [ 294.315254][ T5811] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 294.325734][T10276] F2FS-fs (loop5): Image doesn't support compression [ 294.340240][ T5098] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 294.355595][ T5098] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.364699][T10276] F2FS-fs (loop5): invalid crc value [ 294.370496][ T5098] usb 4-1: Product: syz [ 294.374746][ T5098] usb 4-1: Manufacturer: syz [ 294.380047][ T5098] usb 4-1: SerialNumber: syz [ 294.388294][ T5098] usb 4-1: config 0 descriptor?? [ 294.420328][T10276] F2FS-fs (loop5): Found nat_bits in checkpoint [ 294.512385][T10276] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 294.633539][ T5098] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15 [ 294.672813][ T5123] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 294.717851][ T5123] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 294.756103][ T7984] syz-executor: attempt to access beyond end of device [ 294.756103][ T7984] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 294.756120][ T5123] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 294.804211][ T7984] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 294.815653][ T5123] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 294.846292][ T5123] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 294.879679][ T5123] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 294.891002][ T5811] gspca_sonixj: reg_w1 err -71 [ 294.895927][ T5811] sonixj: probe of 1-1:0.0 failed with error -71 [ 294.920895][ T5761] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 294.944680][ T5811] usb 1-1: USB disconnect, device number 8 [ 294.969199][T10272] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 295.003527][ T5123] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 295.014290][ T5845] usb 4-1: USB disconnect, device number 7 [ 295.055697][ T5123] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 295.189075][T10278] loop6: detected capacity change from 0 to 32768 [ 295.694488][T10287] loop5: detected capacity change from 0 to 128 [ 295.737215][T10287] EXT4-fs (loop5): Test dummy encryption mode enabled [ 295.801895][T10287] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 295.825299][T10287] System zones: 1-3, 19-19, 35-36 [ 295.844491][T10287] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 295.918853][T10287] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.174397][ T7984] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 296.337088][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1426'. [ 296.521271][T10309] loop5: detected capacity change from 0 to 16 [ 296.562050][T10309] erofs: (device loop5): mounted with root inode @ nid 36. [ 296.622708][T10309] syz.5.1429: attempt to access beyond end of device [ 296.622708][T10309] loop5: rw=0, sector=48, nr_sectors = 16 limit=16 [ 296.675426][T10315] syz.5.1429: attempt to access beyond end of device [ 296.675426][T10315] loop5: rw=0, sector=48, nr_sectors = 16 limit=16 [ 296.934204][T10322] loop3: detected capacity change from 0 to 1024 [ 297.048124][ T3509] hfsplus: b-tree write err: -5, ino 25 [ 297.058884][ T3509] hfsplus: b-tree write err: -5, ino 4 [ 297.064524][ T3509] hfsplus: b-tree write err: -5, ino 2 [ 297.616464][T10320] loop6: detected capacity change from 0 to 32768 [ 297.653595][T10320] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9 [ 297.710141][T10344] loop3: detected capacity change from 0 to 4096 [ 297.778704][ T5811] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 297.868370][ T5760] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9 [ 298.002244][ T5811] usb 6-1: Using ep0 maxpacket: 8 [ 298.041127][ T5811] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 298.055851][ T5811] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.086670][ T5811] usb 6-1: Product: syz [ 298.101633][ T5811] usb 6-1: Manufacturer: syz [ 298.119485][ T5811] usb 6-1: SerialNumber: syz [ 298.154737][ T5811] usb 6-1: config 0 descriptor?? [ 298.180805][ T5813] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 298.379039][ T5813] usb 7-1: Using ep0 maxpacket: 32 [ 298.403576][ T5811] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 298.415189][ T5813] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 298.448726][ T5813] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.466876][ T5813] usb 7-1: Product: syz [ 298.473937][ T5813] usb 7-1: Manufacturer: syz [ 298.483448][ T5813] usb 7-1: SerialNumber: syz [ 298.494270][ T5813] usb 7-1: config 0 descriptor?? [ 298.513677][ T5813] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 298.532966][ T5813] dvb-usb: bulk message failed: -22 (4/0) [ 298.546247][ T5813] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 298.563695][ T5813] dvb-usb: bulk message failed: -22 (5/0) [ 298.569941][ T5813] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 298.597384][ T5813] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 298.609198][ T5813] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 298.617302][ T5813] usb 7-1: media controller created [ 298.661646][ T5813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 298.698200][ T5813] usb 7-1: selecting invalid altsetting 3 [ 298.716629][ T5813] ttusb2: set interface to alts=3 failed [ 298.796701][ T5813] DVB: Unable to find symbol tda10086_attach() [ 298.806627][ T5813] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 298.830449][ T5813] dvb-usb: bulk message failed: -22 (4/0) [ 298.840135][ T5811] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 298.848661][ T5813] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 298.872911][ T5813] dvb-usb: bulk message failed: -22 (5/0) [ 298.878932][ T5811] usb 6-1: USB disconnect, device number 8 [ 298.886848][T10363] loop3: detected capacity change from 0 to 4096 [ 298.896299][ T5813] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 298.913824][ T5813] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 298.961605][ T5813] usb 7-1: USB disconnect, device number 4 [ 299.058205][T10363] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 299.066842][ T5813] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 299.086938][T10363] ntfs3: loop3: Failed to load $Extend (-22). [ 299.096980][T10363] ntfs3: loop3: Failed to initialize $Extend. [ 299.601674][T10380] netlink: 'syz.3.1463': attribute type 39 has an invalid length. [ 299.844198][T10390] loop3: detected capacity change from 0 to 2048 [ 299.888664][T10390] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 299.946211][T10395] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 300.363306][T10403] loop5: detected capacity change from 0 to 512 [ 300.388788][T10403] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 300.442407][T10403] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.1474: bad orphan inode 131083 [ 300.492008][T10403] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.827798][T10397] loop6: detected capacity change from 0 to 40427 [ 300.844522][T10397] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 300.865032][T10397] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 300.885043][T10397] F2FS-fs (loop6): invalid crc_offset: 33558524 [ 300.913558][T10397] F2FS-fs (loop6): Found nat_bits in checkpoint [ 301.039138][T10397] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 301.047213][T10397] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 301.076349][ T7984] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.205250][ T27] audit: type=1800 audit(1776500143.622:119): pid=10397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1471" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 302.220083][T10443] erspan0: entered promiscuous mode [ 303.301035][T10451] loop6: detected capacity change from 0 to 40427 [ 303.362562][T10451] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 303.383227][T10451] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 303.419569][T10451] F2FS-fs (loop6): invalid crc value [ 303.436219][T10454] loop3: detected capacity change from 0 to 40427 [ 303.461283][T10451] F2FS-fs (loop6): Found nat_bits in checkpoint [ 303.483249][T10472] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 1, id = 0 [ 303.515503][T10454] F2FS-fs (loop3): invalid crc value [ 303.553207][T10454] F2FS-fs (loop3): Found nat_bits in checkpoint [ 303.675971][T10451] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 303.699655][T10451] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 303.758819][T10454] F2FS-fs (loop3): Start checkpoint disabled! [ 303.787966][T10454] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 303.898895][T10454] F2FS-fs (loop3): Skipping Checkpoint. Checkpoints currently disabled. [ 304.242299][ T49] kworker/u4:3: attempt to access beyond end of device [ 304.242299][ T49] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 304.267529][ T49] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 304.306182][ T49] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 304.321616][ T49] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 304.358720][ T49] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 305.067344][T10502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1508'. [ 305.683467][ T5098] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 305.896814][ T5098] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 305.916063][ T5098] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 305.967083][ T5098] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 306.000522][ T5098] usb 6-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 306.028712][ T5098] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.049800][ T5098] usb 6-1: config 0 descriptor?? [ 306.055705][T10516] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 306.495659][ T5098] elecom 0003:056E:00FB.000D: unknown main item tag 0x3 [ 306.513744][ T5098] elecom 0003:056E:00FB.000D: unknown global tag 0xe [ 306.525612][ T5098] elecom 0003:056E:00FB.000D: item 0 1 1 14 parsing failed [ 306.542026][ T5098] elecom: probe of 0003:056E:00FB.000D failed with error -22 [ 306.675645][T10540] xt_l2tp: v2 tid > 0xffff: 37482740 [ 306.688264][ T9] usb 6-1: USB disconnect, device number 9 [ 306.837855][T10534] loop3: detected capacity change from 0 to 40427 [ 306.851928][T10534] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 306.868842][T10534] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 306.879815][T10534] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 306.904331][T10534] F2FS-fs (loop3): Found nat_bits in checkpoint [ 307.059130][T10534] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 307.075587][T10534] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 307.114753][T10534] F2FS-fs (loop3): f2fs_fill_dentries: corrupted namelen=27648, run fsck to fix. [ 307.449246][ T5098] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 307.658683][ T5098] usb 7-1: Using ep0 maxpacket: 32 [ 307.668074][ T5098] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.680094][ T5098] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.701541][ T5098] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 307.721764][ T5098] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.742287][ T5098] usb 7-1: config 0 descriptor?? [ 307.765485][ T5098] hub 7-1:0.0: USB hub found [ 308.011204][ T5098] hub 7-1:0.0: config failed, can't read hub descriptor (err -90) [ 308.093005][T10573] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1549'. [ 308.118777][T10573] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1549'. [ 308.147238][T10575] loop5: detected capacity change from 0 to 2048 [ 308.204047][T10576] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 308.217391][ T5098] usbhid 7-1:0.0: can't add hid device: -71 [ 308.244431][ T5098] usbhid: probe of 7-1:0.0 failed with error -71 [ 308.301793][ T5098] usb 7-1: USB disconnect, device number 5 [ 308.367986][T10578] loop3: detected capacity change from 0 to 1024 [ 308.407999][T10576] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 308.421224][T10578] EXT4-fs: Ignoring removed bh option [ 308.440709][T10576] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 308.474646][T10578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.506750][T10576] Remounting filesystem read-only [ 308.540388][ T7984] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 308.547161][ T7984] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 308.568824][ T7984] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 308.586206][ T7984] NILFS (loop5): discard dirty block: blocknr=37, size=1024 [ 308.593723][ T7984] NILFS (loop5): discard dirty block: blocknr=38, size=1024 [ 308.605078][ T7984] NILFS (loop5): discard dirty page: offset=0, ino=5 [ 308.613304][ T7984] NILFS (loop5): discard dirty block: blocknr=41, size=1024 [ 308.620872][ T7984] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 308.629947][ T7984] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 308.639032][ T7984] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 308.648237][ T7984] NILFS (loop5): discard dirty page: offset=0, ino=4 [ 308.678914][ T7984] NILFS (loop5): discard dirty block: blocknr=40, size=1024 [ 308.687499][ T7984] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 308.718668][ T7984] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 308.733778][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.743400][ T7984] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 308.755392][ T7984] NILFS (loop5): discard dirty page: offset=0, ino=3 [ 308.770428][ T7984] NILFS (loop5): discard dirty block: blocknr=42, size=1024 [ 308.798837][ T7984] NILFS (loop5): discard dirty block: blocknr=43, size=1024 [ 308.822342][ T7984] NILFS (loop5): discard dirty block: blocknr=44, size=1024 [ 308.859180][ T7984] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 308.959976][T10585] mkiss: ax0: crc mode is auto. [ 309.040714][T10589] loop5: detected capacity change from 0 to 256 [ 309.097055][T10589] FAT-fs (loop5): Directory bread(block 64) failed [ 309.138980][T10589] FAT-fs (loop5): Directory bread(block 65) failed [ 309.145705][T10589] FAT-fs (loop5): Directory bread(block 66) failed [ 309.199900][T10589] FAT-fs (loop5): Directory bread(block 67) failed [ 309.206645][T10589] FAT-fs (loop5): Directory bread(block 68) failed [ 309.228983][T10589] FAT-fs (loop5): Directory bread(block 69) failed [ 309.235723][T10589] FAT-fs (loop5): Directory bread(block 70) failed [ 309.283862][T10589] FAT-fs (loop5): Directory bread(block 71) failed [ 309.299886][T10589] FAT-fs (loop5): Directory bread(block 72) failed [ 309.306504][T10589] FAT-fs (loop5): Directory bread(block 73) failed [ 311.253985][T10634] loop6: detected capacity change from 0 to 4096 [ 311.297879][T10634] ntfs: (device loop6): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 311.317604][T10634] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 311.377067][T10634] ntfs: (device loop6): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 311.425189][T10634] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 311.485869][T10634] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 311.541865][T10634] ntfs: volume version 3.1. [ 311.565161][T10634] ntfs: (device loop6): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 311.611859][T10634] ntfs: (device loop6): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 311.645982][T10634] ntfs: (device loop6): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 311.673485][T10634] ntfs: (device loop6): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 311.688442][T10634] ntfs: (device loop6): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 312.547079][T10665] loop5: detected capacity change from 0 to 32768 [ 312.980879][T10679] loop3: detected capacity change from 0 to 4096 [ 313.038673][T10682] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 313.276871][T10686] sp0: Synchronizing with TNC [ 313.338879][T10686] sp0: Found TNC [ 313.406535][T10672] loop6: detected capacity change from 0 to 32768 [ 313.441075][T10672] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9 [ 313.791507][ T5760] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9 [ 313.843895][T10703] loop5: detected capacity change from 0 to 128 [ 313.955355][T10707] hsr0: entered promiscuous mode [ 313.980890][T10707] macsec2: entered promiscuous mode [ 314.565253][T10726] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1618'. [ 314.764077][T10731] loop3: detected capacity change from 0 to 512 [ 314.870893][T10731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 314.917232][T10731] ext4 filesystem being mounted at /452/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.027093][T10741] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.1621: Failed to acquire dquot type 0 [ 315.154492][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 315.206081][ T5098] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 315.236667][T10719] loop6: detected capacity change from 0 to 32768 [ 315.295760][T10719] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 315.370413][T10719] XFS (loop6): Ending clean mount [ 315.425895][ T5098] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 315.437235][ T5098] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.447275][ T5098] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 315.458684][ T5098] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.470633][ T5098] usb 1-1: config 0 descriptor?? [ 315.575954][ T8841] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 315.641701][T10759] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1627'. [ 315.859521][T10765] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1631'. [ 315.927420][ T5098] elan 0003:04F3:0755.000E: unknown main item tag 0x0 [ 315.973049][ T5098] elan 0003:04F3:0755.000E: item fetching failed at offset 4/5 [ 316.000090][ T5098] elan 0003:04F3:0755.000E: Hid Parse failed [ 316.016549][ T5098] elan: probe of 0003:04F3:0755.000E failed with error -22 [ 316.195810][ T9] usb 1-1: USB disconnect, device number 9 [ 316.446540][T10780] loop3: detected capacity change from 0 to 512 [ 316.493694][T10780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.658001][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.016028][T10800] netlink: 436 bytes leftover after parsing attributes in process `syz.5.1646'. [ 317.158287][T10806] loop5: detected capacity change from 0 to 64 [ 317.359203][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 317.461624][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.468155][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.530914][T10818] loop5: detected capacity change from 0 to 128 [ 317.548753][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 317.562378][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.574669][T10818] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 317.587113][ T9] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.602357][ T9] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.640659][ T9] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 317.648685][T10818] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 317.683136][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 317.697009][T10820] loop6: detected capacity change from 0 to 1024 [ 317.715811][ T9] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 317.729139][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.765142][ T9] usb 4-1: config 0 descriptor?? [ 317.802695][T10820] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.050208][ T8841] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.087584][T10824] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1657'. [ 318.232168][ T9] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 318.260308][ T9] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 318.268238][ T9] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 318.277201][ T9] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 318.294544][ T9] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 318.310109][ T9] hid-thrustmaster 0003:044F:B65D.000F: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 318.348845][ T9] hid-thrustmaster 0003:044F:B65D.000F: Wrong number of endpoints? [ 318.461090][T10827] loop6: detected capacity change from 0 to 8192 [ 318.515239][ C0] hid-thrustmaster 0003:044F:B65D.000F: URB to get model id failed with error -71 [ 318.534953][ T5098] usb 4-1: USB disconnect, device number 8 [ 318.551562][T10827] REISERFS warning (device loop6): super-6510 reiserfs_parse_options: journal device was already specified to be ./file0 [ 318.586702][T10831] fido_id[10831]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 318.848720][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 319.051144][ T9] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 319.075853][ T9] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 319.093892][ T9] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 319.118656][ T9] usb 6-1: config 220 has no interface number 2 [ 319.139189][ T9] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 319.188618][ T9] usb 6-1: config 220 interface 0 has no altsetting 0 [ 319.209076][ T9] usb 6-1: config 220 interface 76 has no altsetting 0 [ 319.227284][ T9] usb 6-1: config 220 interface 1 has no altsetting 0 [ 319.251565][ T9] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 319.259632][T10840] netlink: 'syz.3.1664': attribute type 10 has an invalid length. [ 319.268774][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.287066][ T9] usb 6-1: Product: syz [ 319.291829][ T9] usb 6-1: Manufacturer: syz [ 319.308644][ T9] usb 6-1: SerialNumber: syz [ 319.342858][T10840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.374785][T10840] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 319.390561][T10842] netlink: 'syz.3.1664': attribute type 10 has an invalid length. [ 319.401347][T10842] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1664'. [ 319.447645][T10842] batadv0: entered promiscuous mode [ 319.463926][T10842] batadv0: entered allmulticast mode [ 319.475321][T10842] bond0: (slave batadv0): Releasing backup interface [ 319.501123][T10842] bridge0: port 3(batadv0) entered blocking state [ 319.514608][T10842] bridge0: port 3(batadv0) entered disabled state [ 319.528845][ T5776] Bluetooth: hci0: command 0x0406 tx timeout [ 319.579440][ T9] usb 6-1: selecting invalid altsetting 0 [ 319.598860][ T9] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 319.605306][ T9] usb 6-1: No valid video chain found. [ 319.677038][ T9] usb 6-1: selecting invalid altsetting 0 [ 319.690775][ T9] usbtest: probe of 6-1:220.1 failed with error -22 [ 319.729017][ T9] usb 6-1: USB disconnect, device number 10 [ 319.783620][ T3473] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 319.793888][ T3473] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 319.911681][T10838] loop6: detected capacity change from 0 to 40427 [ 319.920869][T10838] F2FS-fs (loop6): build fault injection attr: rate: 14, type: 0x7ffff [ 319.938825][T10838] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0xe4 [ 319.948135][T10838] F2FS-fs (loop6): invalid crc value [ 319.964869][T10838] F2FS-fs (loop6): Found nat_bits in checkpoint [ 319.998126][T10848] loop3: detected capacity change from 0 to 8192 [ 320.038055][T10848] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 320.115848][T10848] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 320.134937][T10838] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 320.169073][T10848] REISERFS (device loop3): using ordered data mode [ 320.175729][T10848] reiserfs: using flush barriers [ 320.205122][T10848] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 320.261180][T10838] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 320.269810][T10848] REISERFS (device loop3): checking transaction log (loop3) [ 320.290583][T10848] REISERFS (device loop3): Using r5 hash to sort names [ 320.309607][T10848] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 320.566535][T10858] loop5: detected capacity change from 0 to 4096 [ 320.600356][T10858] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 320.780953][T10858] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 320.819853][T10858] ntfs3: loop5: Failed to initialize $Extend/$Reparse. [ 321.063360][T10866] loop3: detected capacity change from 0 to 4096 [ 321.291774][T10876] loop6: detected capacity change from 0 to 1024 [ 321.331372][T10876] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 322.256507][T10903] loop5: detected capacity change from 0 to 2048 [ 322.334459][T10908] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 322.421190][T10884] loop3: detected capacity change from 0 to 32768 [ 322.688711][T10908] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 322.721531][T10908] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 322.753981][T10908] Remounting filesystem read-only [ 322.769593][ T3509] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 322.777643][T10916] loop6: detected capacity change from 0 to 4096 [ 322.788686][ T3509] NILFS (loop5): discard dirty block: blocknr=39, size=1024 [ 322.818133][ T3509] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 322.858950][ T3509] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 322.867907][ T3509] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 322.919602][ T3509] NILFS (loop5): discard dirty page: offset=0, ino=2 [ 322.927304][T10923] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 322.941840][ T3509] NILFS (loop5): discard dirty block: blocknr=18, size=1024 [ 322.970451][ T3509] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 323.012181][ T3509] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 323.045375][ T3509] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 323.074436][T10916] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 64 already freed [ 323.080565][ T3509] NILFS (loop5): discard dirty page: offset=0, ino=3 [ 323.091334][T10916] NILFS (loop6): nilfs_sufile_do_free: segment 9 is already clean [ 323.123410][ T3509] NILFS (loop5): discard dirty block: blocknr=42, size=1024 [ 323.151017][ T3509] NILFS (loop5): discard dirty block: blocknr=43, size=1024 [ 323.198566][ T3509] NILFS (loop5): discard dirty block: blocknr=44, size=1024 [ 323.210689][ T3509] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 323.232913][ T3509] NILFS (loop5): discard dirty page: offset=196608, ino=3 [ 323.258654][ T3509] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 323.267598][ T3509] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 323.335375][ T3509] NILFS (loop5): discard dirty block: blocknr=49, size=1024 [ 323.368808][ T3509] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 323.392687][ T3509] NILFS (loop5): discard dirty page: offset=229376, ino=3 [ 323.416397][ T3509] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 323.435142][ T3509] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 323.472771][ T3509] NILFS (loop5): discard dirty block: blocknr=50, size=1024 [ 323.498722][ T3509] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 323.515560][ T7984] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 323.534868][ T7984] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 323.550586][ T7984] NILFS (loop5): discard dirty block: blocknr=35, size=1024 [ 323.568297][ T7984] NILFS (loop5): discard dirty block: blocknr=36, size=1024 [ 323.585328][ T7984] NILFS (loop5): discard dirty block: blocknr=37, size=1024 [ 323.607235][ T7984] NILFS (loop5): discard dirty block: blocknr=38, size=1024 [ 323.660268][ T7984] NILFS (loop5): discard dirty page: offset=0, ino=5 [ 323.667125][ T7984] NILFS (loop5): discard dirty block: blocknr=41, size=1024 [ 323.714619][ T7984] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 323.735436][ T7984] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 323.754737][ T7984] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 323.776658][ T7984] NILFS (loop5): discard dirty page: offset=0, ino=4 [ 323.798926][ T7984] NILFS (loop5): discard dirty block: blocknr=40, size=1024 [ 323.808585][ T7984] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 323.817507][ T7984] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 323.869762][ T7984] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 324.168785][ T9] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 324.197712][T10955] loop5: detected capacity change from 0 to 64 [ 324.377826][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 324.402411][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 324.415908][ T9] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 324.429863][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 324.448940][ T9] usb 4-1: Product: syz [ 324.458476][ T9] usb 4-1: Manufacturer: syz [ 324.477916][ T9] usb 4-1: SerialNumber: syz [ 324.485844][ T9] usb 4-1: config 0 descriptor?? [ 324.502765][ T9] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 324.524129][ T9] pctv452e: pctv452e_power_ctrl: 1 [ 324.524129][ T9] [ 324.561809][T10961] loop5: detected capacity change from 0 to 64 [ 324.707258][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 324.730061][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 324.759086][ T9] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 324.914352][ T5813] usb 4-1: USB disconnect, device number 9 [ 324.965530][T10966] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1714'. [ 325.014898][T10966] netlink: 'syz.6.1714': attribute type 22 has an invalid length. [ 325.025571][T10966] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1714'. [ 325.148473][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 325.148489][ T27] audit: type=1326 audit(1776500167.562:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10969 comm="syz.5.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69e99c819 code=0x7ffc0000 [ 325.279992][ T27] audit: type=1326 audit(1776500167.602:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10969 comm="syz.5.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69e99c819 code=0x7ffc0000 [ 325.323359][ T27] audit: type=1326 audit(1776500167.602:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10969 comm="syz.5.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fe69e99c819 code=0x7ffc0000 [ 325.388659][ T27] audit: type=1326 audit(1776500167.602:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10969 comm="syz.5.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69e99c819 code=0x7ffc0000 [ 325.441879][ T27] audit: type=1326 audit(1776500167.602:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10969 comm="syz.5.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69e99c819 code=0x7ffc0000 [ 325.491932][ T27] audit: type=1326 audit(1776500167.602:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10969 comm="syz.5.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fe69e99c819 code=0x7ffc0000 [ 325.542091][ T27] audit: type=1326 audit(1776500167.602:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10969 comm="syz.5.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69e99c819 code=0x7ffc0000 [ 325.566788][ T27] audit: type=1326 audit(1776500167.602:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10969 comm="syz.5.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69e99c819 code=0x7ffc0000 [ 326.077039][T10972] loop6: detected capacity change from 0 to 40427 [ 326.120618][T10972] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 326.127228][T10972] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 326.183678][T10972] F2FS-fs (loop6): invalid crc value [ 326.343749][T10994] Bluetooth: MGMT ver 1.22 [ 326.478621][T10972] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 326.486588][T10972] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 326.691905][T10985] loop5: detected capacity change from 0 to 32768 [ 328.039168][T11026] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 328.413842][T11014] loop3: detected capacity change from 0 to 131072 [ 328.427170][T11014] F2FS-fs (loop3): Test dummy encryption mode enabled [ 328.442856][T11014] F2FS-fs (loop3): invalid crc value [ 328.484456][T11014] F2FS-fs (loop3): Found nat_bits in checkpoint [ 328.522086][T11014] F2FS-fs (loop3): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 328.525140][T11014] F2FS-fs (loop3): Failed to read root inode [ 328.939641][T11042] loop3: detected capacity change from 0 to 4096 [ 328.999023][T11047] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 329.059230][T11042] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 64 already freed [ 329.101448][T11042] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 329.276772][T11051] loop6: detected capacity change from 0 to 4096 [ 329.511384][T11061] loop3: detected capacity change from 0 to 256 [ 329.549021][T11061] exfat: Deprecated parameter 'utf8' [ 329.555309][T11061] exfat: Deprecated parameter 'utf8' [ 329.584521][T11051] ntfs3: loop6: failed to convert "0080" to koi8-ru [ 329.596423][T11051] ntfs3: loop6: failed to convert name for inode 1e. [ 329.625379][T11061] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x97423c56, utbl_chksum : 0xe619d30d) [ 329.720701][ T27] audit: type=1800 audit(1776500172.132:129): pid=11061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1754" name="file1" dev="loop3" ino=1048742 res=0 errno=0 [ 330.230802][T11075] loop3: detected capacity change from 0 to 4096 [ 330.273395][T11075] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 330.487903][T11075] ntfs3: loop3: failed to convert "c46c" to iso8859-13 [ 330.571743][T11087] loop5: detected capacity change from 0 to 256 [ 330.664499][T11091] loop6: detected capacity change from 0 to 1024 [ 330.671028][T11087] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 330.726674][T11087] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 330.806909][T11087] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 330.889015][ T42] hfsplus: b-tree write err: -5, ino 25 [ 330.926652][ T42] hfsplus: b-tree write err: -5, ino 4 [ 330.961367][ T42] hfsplus: b-tree write err: -5, ino 2 [ 331.309254][T11099] loop3: detected capacity change from 0 to 4096 [ 331.337837][T11099] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 331.461743][T11099] ntfs3: loop3: failed to convert "c46c" to maccenteuro [ 331.579496][T11112] loop6: detected capacity change from 0 to 2048 [ 331.646575][T11114] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 331.707762][T11112] NILFS error (device loop6): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 331.756087][T11112] Remounting filesystem read-only [ 331.835970][ T8841] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer [ 331.855683][T11121] loop5: detected capacity change from 0 to 128 [ 331.869150][ T8841] NILFS (loop6): discard dirty page: offset=0, ino=18 [ 331.882095][T11121] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 331.896839][ T8841] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 331.945394][ T8841] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 331.968962][ T8841] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 331.978035][ T8841] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 332.003776][ T8841] NILFS (loop6): discard dirty page: offset=0, ino=2 [ 332.023897][ T8841] NILFS (loop6): discard dirty block: blocknr=18, size=1024 [ 332.056215][ T8841] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 332.081666][ T8841] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 332.106920][ T8841] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 332.120090][ T8841] NILFS (loop6): discard dirty page: offset=0, ino=6 [ 332.126947][ T8841] NILFS (loop6): discard dirty block: blocknr=35, size=1024 [ 332.137887][ T8841] NILFS (loop6): discard dirty block: blocknr=36, size=1024 [ 332.148246][ T8841] NILFS (loop6): discard dirty block: blocknr=37, size=1024 [ 332.158496][ T8841] NILFS (loop6): discard dirty block: blocknr=38, size=1024 [ 332.187708][ T8841] NILFS (loop6): discard dirty page: offset=4096, ino=6 [ 332.212950][ T8841] NILFS (loop6): discard dirty block: blocknr=39, size=1024 [ 332.236353][ T8841] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 332.259121][ T8841] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 332.283610][ T8841] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 332.307220][ T8841] NILFS (loop6): discard dirty page: offset=0, ino=3 [ 332.314834][ T8841] NILFS (loop6): discard dirty block: blocknr=42, size=1024 [ 332.334195][ T8841] NILFS (loop6): discard dirty block: blocknr=43, size=1024 [ 332.345233][ T8841] NILFS (loop6): discard dirty block: blocknr=44, size=1024 [ 332.356555][ T8841] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 332.369055][ T8841] NILFS (loop6): discard dirty page: offset=65536, ino=3 [ 332.382934][ T8841] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 332.394699][ T8841] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 332.404764][ T8841] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 332.422633][ T8841] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 332.789069][ T5811] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 333.032874][ T5811] usb 7-1: Using ep0 maxpacket: 8 [ 333.047821][ T5811] usb 7-1: config 2 has an invalid interface number: 31 but max is 0 [ 333.068721][ T5811] usb 7-1: config 2 has no interface number 0 [ 333.088896][ T5811] usb 7-1: config 2 interface 31 has no altsetting 0 [ 333.118867][ T5811] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 333.129974][ T5811] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.171004][ T5811] usb 7-1: Product: syz [ 333.175247][ T5811] usb 7-1: Manufacturer: syz [ 333.199059][ T5811] usb 7-1: SerialNumber: syz [ 333.606418][T11139] loop5: detected capacity change from 0 to 40427 [ 333.628960][T11139] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 333.658889][T11139] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 333.687397][T11139] F2FS-fs (loop5): invalid crc value [ 333.719028][T11139] F2FS-fs (loop5): Found nat_bits in checkpoint [ 333.849051][T11139] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 333.863634][ T5811] ch9200: probe of 7-1:2.31 failed with error -22 [ 333.877551][T11139] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 333.942770][ T5811] usb 7-1: USB disconnect, device number 6 [ 334.100928][ T3473] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 334.120203][ T3473] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 334.181902][T11167] loop3: detected capacity change from 0 to 512 [ 334.242343][T11167] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 334.266697][T11167] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 334.293806][T11167] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.1803: Invalid block bitmap block 0 in block_group 0 [ 334.328317][T11167] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 334.386569][T11167] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.1803: attempt to clear invalid blocks 983261 len 1 [ 334.424674][T11167] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz.3.1803: Invalid inode table block 0 in block_group 0 [ 334.473956][T11167] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 334.513823][T11167] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 334.569976][T11167] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz.3.1803: Invalid inode table block 0 in block_group 0 [ 334.615436][T11167] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 334.636223][T11167] EXT4-fs error (device loop3): ext4_truncate:4301: inode #11: comm syz.3.1803: mark_inode_dirty error [ 334.673554][T11167] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 334.690636][T11167] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz.3.1803: Invalid inode table block 0 in block_group 0 [ 334.716426][T11167] EXT4-fs (loop3): 1 truncate cleaned up [ 334.769207][T11167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.006593][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.170437][T11187] vlan3: entered allmulticast mode [ 335.185514][T11187] bond0: entered allmulticast mode [ 335.197360][T11187] bond_slave_0: entered allmulticast mode [ 335.210826][T11187] bond_slave_1: entered allmulticast mode [ 335.767279][T11183] loop5: detected capacity change from 0 to 32768 [ 335.846721][ T27] audit: type=1800 audit(1776500178.262:130): pid=11183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1809" name="file2" dev="loop5" ino=5 res=0 errno=0 [ 335.976489][T11183] ERROR: (device loop5): dbAdjCtl: Corrupt dmapctl page [ 335.976489][T11183] [ 336.006397][T11183] ERROR: (device loop5): remounting filesystem as read-only [ 336.160765][T11207] loop3: detected capacity change from 0 to 1024 [ 336.239499][T11207] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 336.799226][ T5098] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 336.991626][ T5098] usb 7-1: Using ep0 maxpacket: 32 [ 337.005036][ T5098] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 337.014950][ T5098] usb 7-1: config 0 has no interface number 0 [ 337.025533][ T5098] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 337.045312][ T5098] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 337.075474][ T5098] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.088578][ T5098] usb 7-1: Product: syz [ 337.092819][ T5098] usb 7-1: Manufacturer: syz [ 337.106862][ T5098] usb 7-1: SerialNumber: syz [ 337.120073][ T5098] usb 7-1: config 0 descriptor?? [ 337.133544][ T5098] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 337.156090][ T5098] em28xx 7-1:0.132: Video interface 132 found: [ 337.574355][ T5098] em28xx 7-1:0.132: chip ID is em2800 [ 337.661330][T11252] loop3: detected capacity change from 0 to 1024 [ 337.671973][T11252] EXT4-fs: Ignoring removed nobh option [ 337.722606][T11252] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 337.744603][T11252] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 337.767547][T11252] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 337.893946][ T5098] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 337.915138][ T5098] em28xx 7-1:0.132: board has no eeprom [ 338.009080][ T5098] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 338.017007][ T5098] em28xx 7-1:0.132: analog set to bulk mode. [ 338.031771][ T5806] em28xx 7-1:0.132: Registering V4L2 extension [ 338.078990][ T5098] usb 7-1: USB disconnect, device number 7 [ 338.089594][ T5098] em28xx 7-1:0.132: Disconnecting em28xx [ 338.314659][T11271] loop3: detected capacity change from 0 to 16 [ 338.341305][T11271] erofs: (device loop3): mounted with root inode @ nid 36. [ 338.369428][ T27] audit: type=1800 audit(1776500180.792:131): pid=11271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1847" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 338.484627][T11276] netlink: 'syz.5.1848': attribute type 10 has an invalid length. [ 338.487356][ T5806] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 338.548587][ T5806] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 338.576075][T11276] team0: Port device dummy0 added [ 338.583007][ T5806] em28xx 7-1:0.132: No AC97 audio processor [ 338.614492][T11277] netlink: 'syz.5.1848': attribute type 10 has an invalid length. [ 338.646851][ T5806] usb 7-1: Decoder not found [ 338.651632][T11280] trusted_key: encrypted_key: key trusted:syz not found [ 338.677227][ T5806] em28xx 7-1:0.132: failed to create media graph [ 338.692209][T11281] loop3: detected capacity change from 0 to 256 [ 338.729095][ T5806] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 338.768454][ T5806] em28xx 7-1:0.132: Remote control support is not available for this card. [ 338.802756][ T5098] em28xx 7-1:0.132: Closing input extension [ 338.914840][T11277] team0: Port device dummy0 removed [ 338.930584][ T5098] em28xx 7-1:0.132: Freeing device [ 338.964226][T11277] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 339.406232][T11300] vivid-002: disconnect [ 339.425107][T11299] vivid-002: reconnect [ 339.946974][T11294] loop6: detected capacity change from 0 to 32768 [ 340.001475][T11294] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1856 (11294) [ 340.070831][T11294] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 340.099509][T11294] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 340.138657][T11294] BTRFS info (device loop6): force clearing of disk cache [ 340.165580][T11294] BTRFS info (device loop6): metadata ratio 0 [ 340.188602][T11294] BTRFS info (device loop6): enabling ssd optimizations [ 340.195726][T11294] BTRFS info (device loop6): using spread ssd allocation scheme [ 340.249947][T11294] BTRFS info (device loop6): using free space tree [ 340.375910][T11332] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 340.425741][T11332] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 340.428912][T11294] BTRFS info (device loop6): auto enabling async discard [ 340.463136][T11294] BTRFS info (device loop6): rebuilding free space tree [ 340.562314][T11308] loop5: detected capacity change from 0 to 32768 [ 340.635575][T11308] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 340.778150][ T8841] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 340.812749][T11308] XFS (loop5): Ending clean mount [ 341.040165][ T7984] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 341.129424][ T5773] Bluetooth: hci2: command 0x0406 tx timeout [ 342.227045][T11352] loop6: detected capacity change from 0 to 40427 [ 342.256706][T11373] loop5: detected capacity change from 0 to 64 [ 342.262716][T11352] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 342.284713][T11352] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 342.318665][T11352] F2FS-fs (loop6): invalid crc value [ 342.368926][T11352] F2FS-fs (loop6): Found nat_bits in checkpoint [ 342.430097][ T985] ------------[ cut here ]------------ [ 342.435642][ T985] kernel BUG at fs/hfs/inode.c:449! [ 342.467485][ T985] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 342.473651][ T985] CPU: 1 PID: 985 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 342.481145][ T985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 342.491251][ T985] Workqueue: writeback wb_workfn (flush-7:5) [ 342.497289][ T985] RIP: 0010:hfs_write_inode+0x87a/0x880 [ 342.502874][ T985] Code: c7 c1 00 f3 30 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 f3 30 97 e8 20 fa 83 ff e9 62 fe ff ff e8 96 c2 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 [ 342.522522][ T985] RSP: 0018:ffffc900046b7340 EFLAGS: 00010293 [ 342.528635][ T985] RAX: ffffffff825b5f6a RBX: ffff8880450df028 RCX: ffff8880230a9e00 [ 342.536638][ T985] RDX: 0000000000000000 RSI: ffffffff8d339b00 RDI: 0000000000000000 [ 342.544649][ T985] RBP: ffffc900046b74d0 R08: ffff8880230a9e00 R09: 0000000000000003 [ 342.552691][ T985] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 342.560701][ T985] R13: 1ffff920008d6e6c R14: ffff8880450defd8 R15: 0000000000000000 [ 342.568716][ T985] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 342.577692][ T985] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.584412][ T985] CR2: 00007fcc20342000 CR3: 0000000021835000 CR4: 00000000003506e0 [ 342.592422][ T985] Call Trace: [ 342.595762][ T985] [ 342.598718][ T985] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 342.604124][ T985] ? __rwlock_init+0x150/0x150 [ 342.609003][ T985] __writeback_single_inode+0x705/0xec0 [ 342.614675][ T985] writeback_sb_inodes+0x7cd/0xf50 [ 342.619821][ T985] ? queue_io+0x550/0x550 [ 342.624183][ T985] ? rcu_is_watching+0x15/0xb0 [ 342.628976][ T985] wb_writeback+0x46a/0xbf0 [ 342.633500][ T985] ? queue_io+0x341/0x550 [ 342.637895][ T985] ? percpu_ref_tryget+0x250/0x250 [ 342.643048][ T985] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 342.649069][ T985] ? _raw_spin_unlock_irq+0x23/0x50 [ 342.654300][ T985] wb_workfn+0x400/0xe60 [ 342.658597][ T985] ? try_to_wake_up+0x70a/0x1190 [ 342.663582][ T985] ? inode_wait_for_writeback+0x230/0x230 [ 342.669362][ T985] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 342.675374][ T985] ? read_lock_is_recursive+0x20/0x20 [ 342.680800][ T985] ? _raw_spin_unlock_irq+0x23/0x50 [ 342.686036][ T985] ? process_scheduled_works+0x96f/0x15d0 [ 342.691793][ T985] ? process_scheduled_works+0x96f/0x15d0 [ 342.697553][ T985] process_scheduled_works+0xa5d/0x15d0 [ 342.703155][ T985] ? worker_attach_to_pool+0x380/0x380 [ 342.708652][ T985] ? assign_work+0x3d2/0x5d0 [ 342.713266][ T985] worker_thread+0xa55/0xfc0 [ 342.717935][ T985] kthread+0x2fa/0x390 [ 342.722021][ T985] ? pr_cont_work+0x560/0x560 [ 342.726733][ T985] ? kthread_blkcg+0xd0/0xd0 [ 342.731441][ T985] ret_from_fork+0x48/0x80 [ 342.735885][ T985] ? kthread_blkcg+0xd0/0xd0 [ 342.740500][ T985] ret_from_fork_asm+0x11/0x20 [ 342.745295][ T985] [ 342.748336][ T985] Modules linked in: [ 342.781514][ T985] ---[ end trace 0000000000000000 ]--- [ 342.787044][ T985] RIP: 0010:hfs_write_inode+0x87a/0x880 [ 342.792711][ T985] Code: c7 c1 00 f3 30 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 f3 30 97 e8 20 fa 83 ff e9 62 fe ff ff e8 96 c2 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 [ 342.845300][ T985] RSP: 0018:ffffc900046b7340 EFLAGS: 00010293 [ 342.858765][ T985] RAX: ffffffff825b5f6a RBX: ffff8880450df028 RCX: ffff8880230a9e00 [ 342.879118][ T985] RDX: 0000000000000000 RSI: ffffffff8d339b00 RDI: 0000000000000000 [ 342.887305][ T985] RBP: ffffc900046b74d0 R08: ffff8880230a9e00 R09: 0000000000000003 [ 342.896173][ T985] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 342.897029][T11352] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 342.904322][ T985] R13: 1ffff920008d6e6c R14: ffff8880450defd8 R15: 0000000000000000 [ 342.904340][ T985] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 342.904358][ T985] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.904372][ T985] CR2: 0000001b2d720ff8 CR3: 000000002c7f2000 CR4: 00000000003506f0 [ 342.904391][ T985] Kernel panic - not syncing: Fatal exception [ 342.904969][ T985] Kernel Offset: disabled