last executing test programs: 37.666038067s ago: executing program 0 (id=5368): io_setup(0x7, &(0x7f0000000280)=0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x80) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0xfffffc98}]) 37.316206778s ago: executing program 0 (id=5371): r0 = fsopen(&(0x7f0000004240)='fuseblk\x00', 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='\xe1llow_ovh\x9a|\x1bQ\xc1\xf8\xcb\fer', &(0x7f0000004340)="f0", 0x1) 37.06121082s ago: executing program 0 (id=5375): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000180)={{0x6, @rose, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) sendto$netrom(r0, 0x0, 0xffffffcd, 0x0, &(0x7f00000005c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x48) 36.690831373s ago: executing program 0 (id=5382): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6=r1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 36.482843991s ago: executing program 0 (id=5385): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x10) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x1) 36.277119539s ago: executing program 0 (id=5390): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7800fddbdf2505000000200001800d0001007564486daba9ed9c72"], 0x34}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) 20.924066357s ago: executing program 32 (id=5390): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7800fddbdf2505000000200001800d0001007564486daba9ed9c72"], 0x34}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) 3.583080607s ago: executing program 3 (id=5507): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x200000000000006e, &(0x7f00000005c0)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 3.130187106s ago: executing program 1 (id=5512): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) 3.129494926s ago: executing program 3 (id=5513): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8002}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x78ef}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3800000}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="6a69c274386d178550cb864bd572", 0x0, 0xffff6340, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.095542777s ago: executing program 1 (id=5516): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000001340)=[@in={0x2, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 2.012237414s ago: executing program 3 (id=5517): r0 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002900)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x100000000000}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0, 0x2a, 0x0, 0x0, 0x0, r0}]) 1.896240364s ago: executing program 1 (id=5518): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040), 0x4) 1.767543205s ago: executing program 1 (id=5519): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000002f00)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x9, @loopback, 0xcd89}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000380)=';', 0x1}], 0x1}}, {{&(0x7f00000002c0)={0xa, 0x4e20, 0x2, @remote, 0x8}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000540)=';', 0x1}], 0x1}}], 0x2, 0x4004851) setsockopt(r0, 0x84, 0x11, &(0x7f0000000000)="020000000980ffff", 0x8) 1.720194419s ago: executing program 3 (id=5520): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc000, 0x1) mount(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='jffs2\x00', 0x0, 0x0) 1.636536737s ago: executing program 4 (id=5521): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 1.520136357s ago: executing program 3 (id=5523): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file2\x00', 0x800c08, &(0x7f0000000540)=ANY=[@ANYBLOB="2c756d61736b3d300004000000000000000000", @ANYRES8=0x0, @ANYRES16=0x0, @ANYRESDEC, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRES8=0x0, @ANYBLOB="c49ecfdd8711048bea9eb55574810b5cbc454ccd5a63c7941ba393a86e5b7a8fdcf7b75e9bd7459f7e129fadabeef1e9b084a7568c9ce90014069121b0700a4f948941c59d1e8e3f80ffa601a20f979dd6e1fe150ba283f14999be8b6fe530f67dbac2443da65608409abd01602980fb5227c272180171dfa09978bf40bd650d5c4a54e6cecfcfd2e41e9ec85c6a274e668e7443cdd2c3cba6972ccffb41487a8202816ac3ba65bb5cb3d1323194c102f39aae52e46500849660e484f39210872d958d69f61e1311c51a34b64f81cb8a5cc30bf568185b0bb1f0d438777c833a9b362a10cace728b508eb7642244"], 0x21, 0x627f, &(0x7f0000001600)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') 1.474119561s ago: executing program 1 (id=5524): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0xa, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4}, 0x1c) 1.352841502s ago: executing program 1 (id=5525): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000180)=@generic={0x4, 0x2, 0x0, "0200"}) 1.352768412s ago: executing program 2 (id=5526): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000080)) 1.304128826s ago: executing program 4 (id=5527): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x4e62, 0x0, 0x0, 0x0, 0xa, 0x0, 0x100}, {0x0, 0x7, 0x0, 0x5000007ffffffc, 0x0, 0x9, 0x0, 0x3ff7}, {0x7fffffffffffffff, 0x1000000000, 0x8, 0x1f}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2}, {{@in6=@empty, 0x0, 0x32}, 0xa, @in=@empty, 0x3509, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @empty, 0xfffffffc}, 0x1c) 1.203216195s ago: executing program 2 (id=5528): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9", 0x1}], 0x1}}], 0x1, 0x200080f5) 1.112671503s ago: executing program 4 (id=5529): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1ab8ff00000000bfa100000000000007010000f0ffffffb702000002000000b70300000000000085000000c700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000003"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xce4, r0}, 0x38) 979.341325ms ago: executing program 2 (id=5530): io_setup(0x1, &(0x7f0000002500)=0x0) r1 = memfd_create(&(0x7f0000000000)='\xaa\xaa\xaa\xaa\xaa', 0x4) io_submit(r0, 0x1, &(0x7f0000002680)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x1000, r1, 0x0, 0x0, 0x40, 0x0, 0x2}]) 860.183965ms ago: executing program 4 (id=5531): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") umount2(&(0x7f0000000580)='./file0\x00', 0x1) 705.759668ms ago: executing program 2 (id=5532): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x2}, 0x101}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000023c0)={0x0, 'veth1_vlan\x00', {0x4}, 0xd}) 509.416926ms ago: executing program 4 (id=5533): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup(r0) syz_genetlink_get_family_id$team(&(0x7f0000000180), r1) 290.224085ms ago: executing program 2 (id=5534): mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 193.76µs ago: executing program 2 (id=5535): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 101.04µs ago: executing program 4 (id=5536): r0 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000100)={&(0x7f0000000040)=""/32, 0x20}) 0s ago: executing program 3 (id=5537): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0x13, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000fe1f702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a2131677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): -fs (loop0): Directory bread(block 72) failed [ 380.977281][T15758] FAT-fs (loop0): Directory bread(block 73) failed [ 381.286774][T15773] sp0: Synchronizing with TNC [ 381.301711][T15771] [U] [ 381.792077][T15791] loop1: detected capacity change from 0 to 4096 [ 381.806918][T15793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4517'. [ 381.835241][T15794] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 381.887982][ T5820] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 381.994567][T15797] loop0: detected capacity change from 0 to 256 [ 382.089868][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 382.120791][T15800] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4520'. [ 382.123705][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.155075][ T5820] usb 3-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 382.167672][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.209690][ T5820] usb 3-1: config 0 descriptor?? [ 382.247973][ T967] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 382.277637][T15804] netlink: 'syz.3.4522': attribute type 2 has an invalid length. [ 382.438363][ T967] usb 2-1: Using ep0 maxpacket: 16 [ 382.458602][ T967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.481087][ T967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.502663][ T967] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 382.517676][ T967] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 382.548935][ T967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.574564][ T967] usb 2-1: config 0 descriptor?? [ 382.645793][ T5820] kye 0003:0458:5005.0006: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 382.706240][ T5820] kye 0003:0458:5005.0006: hidraw0: USB HID v10.00 Device [HID 0458:5005] on usb-dummy_hcd.2-1/input0 [ 382.732234][ T5820] kye 0003:0458:5005.0006: tablet-enabling feature report not found [ 382.741446][ T5820] kye 0003:0458:5005.0006: tablet enabling failed [ 382.930745][ T5752] usb 3-1: USB disconnect, device number 29 [ 383.001654][ T967] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 383.030803][ T967] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 383.121814][T15830] loop0: detected capacity change from 0 to 128 [ 383.146288][T15830] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 383.174238][T15830] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 383.190501][ T967] microsoft 0003:045E:07DA.0007: No inputs registered, leaving [ 383.210758][ T967] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 383.235856][ T967] microsoft 0003:045E:07DA.0007: no inputs found [ 383.256011][ T967] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 383.290712][T15830] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 383.306766][ T967] usb 2-1: USB disconnect, device number 26 [ 383.329958][T15830] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 383.359761][T15830] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 383.937995][ T967] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 384.014966][T15837] loop3: detected capacity change from 0 to 32768 [ 384.106670][T15837] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 384.156426][ T967] usb 3-1: Using ep0 maxpacket: 32 [ 384.211602][ T967] usb 3-1: config 0 interface 0 has no altsetting 0 [ 384.225210][ T967] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 384.255875][T15868] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_macvtap, syncid = 786440, id = 0 [ 384.262359][ T967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.272010][T15867] IPVS: stopping backup sync thread 15868 ... [ 384.308048][T15837] XFS (loop3): Ending clean mount [ 384.338972][ T967] usb 3-1: config 0 descriptor?? [ 384.498015][ T28] audit: type=1800 audit(1771843904.999:224): pid=15837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4538" name="bus" dev="loop3" ino=6153 res=0 errno=0 [ 384.606800][ T5771] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 384.795893][ T967] corsair-psu 0003:1B1C:1C0D.0008: unknown main item tag 0x0 [ 384.824320][ T967] corsair-psu 0003:1B1C:1C0D.0008: unknown main item tag 0x0 [ 384.846432][ T967] corsair-psu 0003:1B1C:1C0D.0008: unknown main item tag 0x0 [ 384.864799][ T967] corsair-psu 0003:1B1C:1C0D.0008: unknown main item tag 0x0 [ 384.885090][ T967] corsair-psu 0003:1B1C:1C0D.0008: unknown main item tag 0x0 [ 384.915752][ T967] corsair-psu 0003:1B1C:1C0D.0008: hidraw0: USB HID v0.05 Device [HID 1b1c:1c0d] on usb-dummy_hcd.2-1/input0 [ 385.018461][ T967] corsair-psu 0003:1B1C:1C0D.0008: unable to initialize device (-71) [ 385.088672][ T967] corsair-psu: probe of 0003:1B1C:1C0D.0008 failed with error -71 [ 385.136461][ T967] usb 3-1: USB disconnect, device number 30 [ 385.361537][T15882] loop3: detected capacity change from 0 to 2048 [ 385.390414][T15882] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 385.411061][T15875] loop1: detected capacity change from 0 to 32768 [ 385.473503][T15875] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 385.612795][T15875] XFS (loop1): Ending clean mount [ 385.662910][T15875] XFS (loop1): Quotacheck needed: Please wait. [ 385.758991][T15875] XFS (loop1): Quotacheck: Done. [ 385.820121][ T28] audit: type=1800 audit(1771843906.349:225): pid=15875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4552" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 385.999064][ T5765] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 386.744384][T15921] loop3: detected capacity change from 0 to 512 [ 386.789457][T15921] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 386.813009][T15921] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e028, mo2=0002] [ 386.830742][T15921] EXT4-fs (loop3): orphan cleanup on readonly fs [ 386.841791][T15921] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.4569: bg 0: block 361: padding at end of block bitmap is not set [ 386.861666][T15921] EXT4-fs (loop3): Remounting filesystem read-only [ 386.901567][T15921] EXT4-fs (loop3): 1 truncate cleaned up [ 386.903468][T15921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 387.014803][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 387.103752][T15913] loop2: detected capacity change from 0 to 40427 [ 387.155629][T15913] F2FS-fs (loop2): invalid crc value [ 387.171922][T15913] F2FS-fs (loop2): Found nat_bits in checkpoint [ 387.288175][T15913] F2FS-fs (loop2): Start checkpoint disabled! [ 387.316743][T15913] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 387.604375][ T78] kworker/u4:4: attempt to access beyond end of device [ 387.604375][ T78] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 387.623667][ T78] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 387.635234][ T78] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 388.291272][T15957] loop3: detected capacity change from 0 to 4096 [ 388.299127][T15957] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 388.376770][T15957] ntfs: volume version 3.1. [ 388.418883][ T5752] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 388.448764][T15957] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set macinuit. You might want to try to use the mount option nls=utf8. [ 388.467418][T15957] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 388.630047][ T5752] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 388.656658][ T5752] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.677889][ T5752] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 388.701251][ T5752] usb 2-1: New USB device found, idVendor=056a, idProduct=037b, bcdDevice= 0.00 [ 388.717863][ T5752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.747306][ T5752] usb 2-1: config 0 descriptor?? [ 389.011571][T15967] loop2: detected capacity change from 0 to 512 [ 389.060938][T15967] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c1a8, mo2=0002] [ 389.086099][T15967] EXT4-fs error (device loop2): ext4_iget_extra_inode:4732: inode #15: comm syz.2.4587: corrupted in-inode xattr: invalid ea_ino [ 389.123438][T15967] EXT4-fs (loop2): Remounting filesystem read-only [ 389.131474][T15967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.202428][ T5762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.215357][ T5752] wacom 0003:056A:037B.0009: Unknown device_type for 'HID 056a:037b'. Assuming pen. [ 389.273321][ T5752] wacom 0003:056A:037B.0009: hidraw0: USB HID v0.00 Device [HID 056a:037b] on usb-dummy_hcd.1-1/input0 [ 389.315946][ T5752] input: Wacom One by Wacom M Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:037B.0009/input/input30 [ 389.503219][T15985] loop0: detected capacity change from 0 to 128 [ 389.557393][ T5752] usb 2-1: USB disconnect, device number 27 [ 389.886071][ T28] audit: type=1326 audit(1771843910.409:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15995 comm="syz.2.4596" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbdc9d9c629 code=0x0 [ 390.188147][T16003] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4599'. [ 390.196397][T15998] loop3: detected capacity change from 0 to 32768 [ 390.218071][T15998] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.4597 (15998) [ 390.249071][T15998] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 390.272199][T15998] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 390.302862][T15998] BTRFS info (device loop3): using free space tree [ 390.349332][T15998] BTRFS info (device loop3): enabling ssd optimizations [ 390.356608][T15998] BTRFS info (device loop3): auto enabling async discard [ 390.487423][ T5771] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 391.097787][ T28] audit: type=1326 audit(1771843911.619:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.2.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc9d9c629 code=0x7ffc0000 [ 391.123178][ T28] audit: type=1326 audit(1771843911.619:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.2.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc9d9c629 code=0x7ffc0000 [ 391.165908][ T28] audit: type=1326 audit(1771843911.629:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.2.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fbdc9d9c629 code=0x7ffc0000 [ 391.215934][ T28] audit: type=1326 audit(1771843911.629:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.2.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc9d9c629 code=0x7ffc0000 [ 391.246031][ T28] audit: type=1326 audit(1771843911.629:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.2.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc9d9c629 code=0x7ffc0000 [ 391.271780][ T28] audit: type=1326 audit(1771843911.659:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.2.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fbdc9d9c629 code=0x7ffc0000 [ 391.295395][ T28] audit: type=1326 audit(1771843911.659:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.2.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc9d9c629 code=0x7ffc0000 [ 391.301608][T16044] loop2: detected capacity change from 0 to 128 [ 391.322724][ T28] audit: type=1326 audit(1771843911.659:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.2.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc9d9c629 code=0x7ffc0000 [ 391.626746][T16053] loop2: detected capacity change from 0 to 512 [ 391.652051][T16053] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 391.660305][T16053] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 391.678805][T16053] EXT4-fs (loop2): 1 truncate cleaned up [ 391.686046][T16053] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.722203][T16053] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #2: block 4: comm syz.2.4614: lblock 0 mapped to illegal pblock 4 (length 1) [ 391.740273][T16053] EXT4-fs (loop2): Remounting filesystem read-only [ 391.766476][ T5762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.174175][T16070] netlink: 'syz.1.4621': attribute type 11 has an invalid length. [ 392.855821][T16099] loop1: detected capacity change from 0 to 256 [ 393.067003][T16103] bridge_slave_1: default FDB implementation only supports local addresses [ 393.131361][T16105] loop1: detected capacity change from 0 to 1024 [ 393.184384][T16105] hfsplus: invalid btree flag [ 393.203360][T16105] hfsplus: failed to load extents file [ 393.737447][T16101] loop0: detected capacity change from 0 to 32768 [ 393.831034][T16101] XFS (loop0): Mounting V5 Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 394.019723][T16135] loop1: detected capacity change from 0 to 1024 [ 394.079099][T16135] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 394.096100][T16137] Zero length message leads to an empty skb [ 394.157494][T16135] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.299646][T16115] loop3: detected capacity change from 0 to 32768 [ 394.345165][T16115] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 394.414923][T16101] XFS (loop0): Starting recovery (logdev: internal) [ 394.452373][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.459811][T16115] XFS (loop3): Ending clean mount [ 394.487353][T16101] XFS (loop0): Ending recovery (logdev: internal) [ 394.494341][T16115] XFS (loop3): Quotacheck needed: Please wait. [ 394.663462][T16115] XFS (loop3): Quotacheck: Done. [ 394.717674][T16142] loop2: detected capacity change from 0 to 32768 [ 394.830826][ T5769] XFS (loop0): Unmounting Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 394.834625][ T5771] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 394.842859][T16142] ERROR: (device loop2): diWrite: ixpxd invalid [ 394.842859][T16142] [ 394.904874][T16142] ERROR: (device loop2): remounting filesystem as read-only [ 394.915881][T16142] ERROR: (device loop2): txCommit: [ 394.915881][T16142] [ 395.018402][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 395.249650][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.282974][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.308562][ T9] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 395.349497][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.389820][ T9] usb 2-1: config 0 descriptor?? [ 395.825578][ T9] zydacron 0003:13EC:0006.000A: unexpected long global item [ 395.856731][ T9] zydacron 0003:13EC:0006.000A: parse failed [ 395.867528][ T9] zydacron: probe of 0003:13EC:0006.000A failed with error -22 [ 395.875714][T16168] vim2m vim2m.0: vidioc_s_fmt queue busy [ 396.027577][ T9] usb 2-1: USB disconnect, device number 28 [ 396.281585][T16163] loop2: detected capacity change from 0 to 32768 [ 396.389870][T16163] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 396.401419][T16189] loop0: detected capacity change from 0 to 64 [ 396.763205][T16163] XFS (loop2): Ending clean mount [ 396.816216][T16163] XFS (loop2): Quotacheck needed: Please wait. [ 396.932859][T16163] XFS (loop2): Quotacheck: Done. [ 397.033789][T16212] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4678'. [ 397.044737][ T28] audit: type=1800 audit(1771843917.579:235): pid=16163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4659" name="file2" dev="loop2" ino=9287 res=0 errno=0 [ 397.116554][T16217] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 397.171752][ T5762] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 397.437919][ T967] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 397.660472][ T967] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 397.687590][ T967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.718334][ T967] usb 2-1: Product: syz [ 397.722629][ T967] usb 2-1: Manufacturer: syz [ 397.727251][ T967] usb 2-1: SerialNumber: syz [ 397.750608][ T967] usb 2-1: config 0 descriptor?? [ 397.759211][ T967] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 397.789447][ T967] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 397.796783][T16232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4686'. [ 397.826388][ T967] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 397.833065][T16232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4686'. [ 397.844639][ T967] usb 2-1: media controller created [ 397.887635][ T967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 397.993603][T16218] dvb-usb: bulk message failed: -22 (7/0) [ 398.051443][T16222] loop3: detected capacity change from 0 to 32768 [ 398.058346][ T967] DVB: Unable to find symbol mt352_attach() [ 398.094614][T16222] ERROR: (device loop3): dbAllocAG: unable to allocate blocks [ 398.094614][T16222] [ 398.142525][T16222] ERROR: (device loop3): dbDiscardAG: -EIO [ 398.142525][T16222] [ 398.152911][ T967] DVB: Unable to find symbol nxt6000_attach() [ 398.165366][ T967] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 398.181928][ T967] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input33 [ 398.245137][ T967] dvb-usb: schedule remote query interval to 1000 msecs. [ 398.278361][ T967] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 398.304646][ T967] dvb-usb: bulk message failed: -22 (7/0) [ 398.324852][ T967] dvb-usb: bulk message failed: -22 (7/0) [ 398.355981][ T967] usb 2-1: USB disconnect, device number 29 [ 398.411147][T16245] loop2: detected capacity change from 0 to 4096 [ 398.450690][T16245] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 398.507051][T16245] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 398.563555][ T967] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 398.863331][T16256] netlink: 'syz.2.4697': attribute type 10 has an invalid length. [ 398.938419][T16256] netlink: 'syz.2.4697': attribute type 10 has an invalid length. [ 398.971621][T16256] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 399.224052][T16269] loop3: detected capacity change from 0 to 512 [ 399.297990][T16269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.311045][T16269] ext4 filesystem being mounted at /1168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.539313][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.690111][T16266] loop0: detected capacity change from 0 to 32768 [ 400.167461][T16296] loop1: detected capacity change from 0 to 256 [ 400.185135][T16296] exfat: Deprecated parameter 'utf8' [ 400.206361][T16296] exfat: Deprecated parameter 'utf8' [ 400.228475][T16296] exfat: Deprecated parameter 'utf8' [ 400.339368][T16296] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18acb235, utbl_chksum : 0xe619d30d) [ 400.363005][T16300] loop2: detected capacity change from 0 to 2048 [ 400.404755][ T28] audit: type=1800 audit(1771843920.929:236): pid=16296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4716" name="file0" dev="loop1" ino=1048699 res=0 errno=0 [ 400.446350][T16300] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 129: 0x80 != 0x7e [ 400.491234][T16300] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 400.555231][ T28] audit: type=1800 audit(1771843921.079:237): pid=16300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4718" name="file2" dev="loop2" ino=1416 res=0 errno=0 [ 400.937268][T16316] loop0: detected capacity change from 0 to 256 [ 400.983968][T16320] loop3: detected capacity change from 0 to 64 [ 400.992194][T16316] FAT-fs (loop0): Directory bread(block 64) failed [ 401.010536][T16316] FAT-fs (loop0): Directory bread(block 65) failed [ 401.020731][T16316] FAT-fs (loop0): Directory bread(block 66) failed [ 401.027322][T16316] FAT-fs (loop0): Directory bread(block 67) failed [ 401.056248][T16316] FAT-fs (loop0): Directory bread(block 68) failed [ 401.077970][T16316] FAT-fs (loop0): Directory bread(block 69) failed [ 401.089396][T16316] FAT-fs (loop0): Directory bread(block 70) failed [ 401.093667][T16319] Trying to free block not in datazone [ 401.096119][T16316] FAT-fs (loop0): Directory bread(block 71) failed [ 401.121562][T16316] FAT-fs (loop0): Directory bread(block 72) failed [ 401.129480][T16316] FAT-fs (loop0): Directory bread(block 73) failed [ 401.233231][ T5752] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 401.254385][T16322] loop3: detected capacity change from 0 to 1764 [ 401.447554][ T5752] usb 2-1: Using ep0 maxpacket: 16 [ 401.458166][ T5752] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.483039][ T5752] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.498891][ T5752] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 401.508487][ T5752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.526812][ T5752] usb 2-1: config 0 descriptor?? [ 401.963539][ T5752] apple 0003:05AC:024B.000B: unknown global tag 0xe [ 402.005157][ T5752] apple 0003:05AC:024B.000B: item 0 1 1 14 parsing failed [ 402.019445][ T5752] apple 0003:05AC:024B.000B: parse failed [ 402.035931][ T5752] apple: probe of 0003:05AC:024B.000B failed with error -22 [ 402.136926][T16326] loop3: detected capacity change from 0 to 40427 [ 402.166667][T16326] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 402.180234][T16326] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 402.189395][T16326] F2FS-fs (loop3): heap/no_heap options were deprecated [ 402.206265][ T5752] usb 2-1: USB disconnect, device number 30 [ 402.216114][T16326] F2FS-fs (loop3): invalid crc value [ 402.257914][T16326] F2FS-fs (loop3): Found nat_bits in checkpoint [ 402.338157][ T967] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 402.381871][T16326] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 402.398214][T16326] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 402.435629][T16337] [ 402.435629][T16337] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 402.435629][T16337] [ 402.488212][T16337] ERROR: (device loop0): diWrite: ixpxd invalid [ 402.488212][T16337] [ 402.504557][ T5771] syz-executor: attempt to access beyond end of device [ 402.504557][ T5771] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 402.506985][T16337] ERROR: (device loop0): txCommit: [ 402.506985][T16337] [ 402.529936][ T5771] F2FS-fs (loop3): Remounting filesystem read-only [ 402.547108][ T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 402.566963][ T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 402.579242][ T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 402.590815][ T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 402.610497][ T967] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 402.621547][ T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.630401][T16337] [ 402.630401][T16337] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 402.630401][T16337] [ 402.641629][ T967] usb 3-1: Product: syz [ 402.645818][ T967] usb 3-1: Manufacturer: syz [ 402.651304][ T967] usb 3-1: SerialNumber: syz [ 402.656449][T16337] [ 402.656449][T16337] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 402.656449][T16337] [ 402.671254][ T967] usb 3-1: config 0 descriptor?? [ 402.902433][ T967] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 403.202687][ T9] usb 3-1: USB disconnect, device number 31 [ 403.225535][T16356] set_capacity_and_notify: 1 callbacks suppressed [ 403.225552][T16356] loop1: detected capacity change from 0 to 128 [ 403.398863][T16358] loop0: detected capacity change from 0 to 2048 [ 403.440102][T16358] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 403.906989][T16370] loop3: detected capacity change from 0 to 8192 [ 403.969547][T16370] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 404.044913][T16366] loop1: detected capacity change from 0 to 32768 [ 404.047874][T16370] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 404.099246][T16366] [ 404.099246][T16366] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 404.099246][T16366] [ 404.128075][T16370] REISERFS (device loop3): using ordered data mode [ 404.134680][T16370] reiserfs: using flush barriers [ 404.187293][T16370] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 404.204260][T16366] ERROR: (device loop1): diWrite: ixpxd invalid [ 404.204260][T16366] [ 404.242778][T16366] ERROR: (device loop1): txCommit: [ 404.242778][T16366] [ 404.262941][T16370] REISERFS (device loop3): checking transaction log (loop3) [ 404.291272][T16366] [ 404.291272][T16366] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 404.291272][T16366] [ 404.303825][T16380] loop0: detected capacity change from 0 to 2048 [ 404.350303][T16366] [ 404.350303][T16366] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 404.350303][T16366] [ 404.357529][T16380] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 129: 0x80 != 0x7e [ 404.418344][T16380] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 404.492477][ T51] Bluetooth: hci0: Invalid connection link type handle 0x00c9 [ 404.537862][ T28] audit: type=1800 audit(1771843925.059:238): pid=16380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4754" name="file2" dev="loop0" ino=1416 res=0 errno=0 [ 404.599533][T16370] REISERFS (device loop3): Using tea hash to sort names [ 404.607069][T16370] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 404.854053][T16389] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4759'. [ 404.894921][T16389] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4759'. [ 404.938667][T16389] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4759'. [ 405.170732][T16396] loop0: detected capacity change from 0 to 1024 [ 405.259645][T16396] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.410568][T16396] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #12: block 7: comm syz.0.4763: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 405.463577][T16402] loop3: detected capacity change from 0 to 4096 [ 405.484302][T16391] loop1: detected capacity change from 0 to 32768 [ 405.520126][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.524660][T16402] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 405.546435][T16391] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 405.657956][ T967] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 405.709430][T16391] XFS (loop1): Ending clean mount [ 405.806385][ T28] audit: type=1800 audit(1771843926.329:239): pid=16391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4760" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 405.877265][ T967] usb 3-1: Using ep0 maxpacket: 16 [ 405.884795][ T967] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 405.905120][ T967] usb 3-1: config 0 has no interface number 0 [ 405.934417][ T967] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 405.957076][ T5765] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 405.979552][ T967] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 405.992393][T16421] netlink: 'syz.0.4769': attribute type 62 has an invalid length. [ 406.005272][ T967] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 406.034396][ T967] usb 3-1: Product: syz [ 406.062282][ T967] usb 3-1: SerialNumber: syz [ 406.097638][ T967] usb 3-1: config 0 descriptor?? [ 406.116677][ T967] cm109 3-1:0.8: invalid payload size 208, expected 4 [ 406.129239][ T967] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input34 [ 406.378229][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 406.379080][ T5797] usb 3-1: USB disconnect, device number 32 [ 406.385583][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 406.461807][ T5797] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 406.656332][T16427] loop1: detected capacity change from 0 to 1024 [ 406.691890][T16419] loop3: detected capacity change from 0 to 32768 [ 406.709907][T16419] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.4768 (16419) [ 406.745687][T16419] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 406.777512][T16419] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 406.810228][T16419] BTRFS info (device loop3): using free space tree [ 406.929665][T16419] BTRFS info (device loop3): enabling ssd optimizations [ 406.988263][T16419] BTRFS info (device loop3): auto enabling async discard [ 407.286108][T16423] XFS (loop0): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 407.375333][T16461] EXT4-fs: Ignoring removed nobh option [ 407.409992][ T5771] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 407.435347][T16423] XFS (loop0): Ending clean mount [ 407.469189][ T5820] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x20 [ 407.500882][T16461] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 407.514701][ T5820] XFS (loop0): Unmount and run xfs_repair [ 407.533055][ T5820] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 407.547996][T16461] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 407.570665][ T5820] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 407.585777][T16461] EXT4-fs error (device loop2): ext4_orphan_get:1398: inode #13: comm syz.2.4777: inode has both inline data and extents flags [ 407.605075][ T5820] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 407.615508][ T5820] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 407.630343][T16461] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.4777: couldn't read orphan inode 13 (err -117) [ 407.654645][ T5820] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 407.676751][T16461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.684332][ T5820] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 407.698849][ T5820] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 407.723951][ T5820] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 407.785323][ T5820] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 407.834181][T16423] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x20 len 8 error 74 [ 407.854997][T16461] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 407.898559][T16423] XFS (loop0): Failed to initialize disk quotas. [ 407.976727][ T5762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.244603][ T5769] XFS (loop0): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 408.373132][T16479] set_capacity_and_notify: 2 callbacks suppressed [ 408.373148][T16479] loop2: detected capacity change from 0 to 256 [ 408.432832][T16479] exfat: Unknown parameter 'zero_size_dir' [ 408.827153][T16471] loop1: detected capacity change from 0 to 32768 [ 408.894231][T16471] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 409.020943][T16471] XFS (loop1): Ending clean mount [ 409.059423][T16471] XFS (loop1): Quotacheck needed: Please wait. [ 409.196175][T16471] XFS (loop1): Quotacheck: Done. [ 409.303104][T16479] loop2: detected capacity change from 0 to 32768 [ 409.360001][ T28] audit: type=1326 audit(1771843929.889:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16498 comm="syz.0.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6079c629 code=0x7ffc0000 [ 409.381401][T16479] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 409.391435][ T28] audit: type=1326 audit(1771843929.929:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16498 comm="syz.0.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6079c629 code=0x7ffc0000 [ 409.429029][ T5765] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 409.441684][ T28] audit: type=1326 audit(1771843929.969:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16498 comm="syz.0.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d6079c629 code=0x7ffc0000 [ 409.476091][ T28] audit: type=1326 audit(1771843929.969:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16498 comm="syz.0.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6079c629 code=0x7ffc0000 [ 409.500267][ T28] audit: type=1326 audit(1771843929.969:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16498 comm="syz.0.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f9d6079c629 code=0x7ffc0000 [ 409.528451][ T28] audit: type=1326 audit(1771843929.969:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16498 comm="syz.0.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6079c629 code=0x7ffc0000 [ 409.554236][ T28] audit: type=1326 audit(1771843929.969:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16498 comm="syz.0.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6079c629 code=0x7ffc0000 [ 409.583578][T16479] XFS (loop2): Ending clean mount [ 409.627257][T16479] cifs: Unknown parameter 'inode32' [ 409.641820][T16481] loop3: detected capacity change from 0 to 32768 [ 409.706532][ T5762] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 409.776310][T16481] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 409.790031][T16509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4792'. [ 409.979230][T16481] XFS (loop3): Ending clean mount [ 410.063978][T16481] XFS (loop3): Quotacheck needed: Please wait. [ 410.173607][T16481] XFS (loop3): Quotacheck: Done. [ 410.355315][ T5771] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 410.454370][T16523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4795'. [ 411.090486][T16535] loop1: detected capacity change from 0 to 4096 [ 411.175409][T16535] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 411.202978][T16535] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 411.297676][T16535] ntfs3: loop1: ino=1e, "file1" The size of extended attributes must not exceed 64KiB [ 411.828182][ T5820] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 411.895423][T16541] loop2: detected capacity change from 0 to 32768 [ 411.987446][T16541] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 412.017956][ T5820] usb 2-1: Using ep0 maxpacket: 16 [ 412.036233][ T5820] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 412.049964][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.058082][ T5820] usb 2-1: Product: syz [ 412.072553][ T5820] usb 2-1: Manufacturer: syz [ 412.077200][ T5820] usb 2-1: SerialNumber: syz [ 412.109653][ T5820] usb 2-1: config 0 descriptor?? [ 412.110347][T16541] XFS (loop2): Ending clean mount [ 412.130023][ T5820] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 412.297235][T16566] loop0: detected capacity change from 0 to 128 [ 412.304471][ T5762] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 412.374914][T16566] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 412.422848][T16566] ext4 filesystem being mounted at /1190/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 412.434145][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 412.558141][ T5820] usb 2-1: clie_3_5_startup: get interface number bad return length: 0 [ 412.566750][ T5820] visor: probe of 2-1:0.0 failed with error -5 [ 412.576385][ T5769] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 412.668204][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.682207][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.722109][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 412.745936][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 412.756478][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.768319][ T9] usb 4-1: config 0 descriptor?? [ 412.784836][T16570] loop0: detected capacity change from 0 to 4096 [ 412.794952][ T5752] usb 2-1: USB disconnect, device number 31 [ 412.841728][T16573] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 413.194519][ T9] plantronics 0003:047F:FFFF.000C: unbalanced collection at end of report description [ 413.218367][ T9] plantronics 0003:047F:FFFF.000C: parse failed [ 413.224816][ T9] plantronics: probe of 0003:047F:FFFF.000C failed with error -22 [ 413.435542][ T8] usb 4-1: USB disconnect, device number 31 [ 413.703415][T16589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4819'. [ 413.713127][T16589] tipc: Started in network mode [ 413.718667][T16589] tipc: Node identity 68b, cluster identity 4711 [ 413.725153][T16589] tipc: Node number set to 1675 [ 414.064720][T16595] loop1: detected capacity change from 0 to 4096 [ 414.114556][T16595] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 414.253040][T16595] ntfs: (device loop1): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 414.290064][T16595] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 414.347649][T16595] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 414.371763][T16595] ntfs: volume version 3.1. [ 414.633383][ T5765] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 414.659813][T16609] loop0: detected capacity change from 0 to 256 [ 414.765510][T16609] FAT-fs (loop0): Directory bread(block 64) failed [ 414.801699][T16609] FAT-fs (loop0): Directory bread(block 65) failed [ 414.818167][T16609] FAT-fs (loop0): Directory bread(block 66) failed [ 414.824926][T16609] FAT-fs (loop0): Directory bread(block 67) failed [ 414.838330][T16609] FAT-fs (loop0): Directory bread(block 68) failed [ 414.844921][T16609] FAT-fs (loop0): Directory bread(block 69) failed [ 414.878162][T16609] FAT-fs (loop0): Directory bread(block 70) failed [ 414.884778][T16609] FAT-fs (loop0): Directory bread(block 71) failed [ 414.928316][T16609] FAT-fs (loop0): Directory bread(block 72) failed [ 414.934987][T16609] FAT-fs (loop0): Directory bread(block 73) failed [ 415.310383][T16603] loop2: detected capacity change from 0 to 40427 [ 415.341535][T16603] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 415.380779][T16603] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 415.414480][T16603] F2FS-fs (loop2): invalid crc value [ 415.463455][T16603] F2FS-fs (loop2): Found nat_bits in checkpoint [ 415.564450][T16603] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 415.572576][T16603] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 415.685440][T16603] syz.2.4825: attempt to access beyond end of device [ 415.685440][T16603] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 415.835242][T16624] loop1: detected capacity change from 0 to 40427 [ 415.868065][T16624] F2FS-fs (loop1): invalid crc value [ 415.891503][T16624] F2FS-fs (loop1): Found nat_bits in checkpoint [ 415.905505][T16638] loop3: detected capacity change from 0 to 512 [ 416.003829][T16638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.035206][T16638] ext4 filesystem being mounted at /1199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 416.069741][T16624] F2FS-fs (loop1): Start checkpoint disabled! [ 416.127197][T16644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4842'. [ 416.171128][T16624] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 416.322599][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.624054][ T3467] kworker/u4:9: attempt to access beyond end of device [ 416.624054][ T3467] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 416.661022][ T3467] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 416.683201][ T3467] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 416.731963][T16655] loop3: detected capacity change from 0 to 4096 [ 416.895917][T16655] ntfs3: loop3: ino=9, attr_set_size [ 417.174978][T16665] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4853'. [ 417.887903][ T8] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 418.057419][T16703] loop0: detected capacity change from 0 to 512 [ 418.067912][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 418.087138][ T8] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 418.113180][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.134829][ T8] usb 3-1: Product: syz [ 418.144551][ T8] usb 3-1: Manufacturer: syz [ 418.152368][ T8] usb 3-1: SerialNumber: syz [ 418.172900][ T8] usb 3-1: config 0 descriptor?? [ 418.197434][ T8] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 418.208204][ T8] pctv452e: pctv452e_power_ctrl: 1 [ 418.208204][ T8] [ 418.215570][ T8] usb 3-1: selecting invalid altsetting 3 [ 418.221769][ T8] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 418.221769][ T8] [ 418.229135][T16703] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.232746][ T8] dvb-usb: bulk message failed: -22 (5/0) [ 418.255502][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 418.266923][T16703] ext4 filesystem being mounted at /1210/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 418.278913][ T8] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 418.287333][ T8] usb 3-1: media controller created [ 418.293684][ T8] dvb-usb: bulk message failed: -22 (8/0) [ 418.307180][T16710] loop1: detected capacity change from 0 to 512 [ 418.308113][ T8] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 418.324462][ T8] dvb-usb: MAC address reading failed. [ 418.360944][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 418.419073][T16685] pctv452e: I2C error -22; AA 02 00 3D 00 -> 00 00 00 00 00 00 00 [ 418.439709][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.535603][ T8] DVB: Unable to find symbol stb0899_attach() [ 418.549187][ T8] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 418.600875][T16713] loop0: detected capacity change from 0 to 128 [ 418.708226][ T8] rc_core: IR keymap rc-tt-1500 not found [ 418.714204][ T8] Registered IR keymap rc-empty [ 418.742374][ T8] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 418.769313][ T8] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input35 [ 418.804271][ T8] dvb-usb: schedule remote query interval to 100 msecs. [ 418.829107][ T8] pctv452e: pctv452e_power_ctrl: 0 [ 418.829107][ T8] [ 418.836452][ T8] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 418.898925][ T8] usb 3-1: USB disconnect, device number 33 [ 419.069663][ T8] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 419.216339][T16725] loop1: detected capacity change from 0 to 256 [ 419.258507][T16725] exfat: Deprecated parameter 'utf8' [ 419.274543][T16725] exfat: Deprecated parameter 'namecase' [ 419.295272][T16725] exfat: Deprecated parameter 'namecase' [ 419.316628][T16725] exfat: Deprecated parameter 'utf8' [ 419.433344][T16725] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 419.803938][T16746] RDS: rds_bind could not find a transport for fe80::3e, load rds_tcp or rds_rdma? [ 420.565460][T16764] loop2: detected capacity change from 0 to 32768 [ 420.612261][T16764] ERROR: (device loop2): dbAllocAG: unable to allocate blocks [ 420.612261][T16764] [ 420.624363][T16764] ERROR: (device loop2): remounting filesystem as read-only [ 420.635092][T16764] ERROR: (device loop2): dbDiscardAG: -EIO [ 420.635092][T16764] [ 420.656726][T16765] loop1: detected capacity change from 0 to 32768 [ 420.681432][T16765] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.4898 (16765) [ 420.714576][T16765] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 420.739890][T16765] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 420.768056][T16765] BTRFS info (device loop1): setting nodatasum [ 420.774279][T16765] BTRFS info (device loop1): force zlib compression, level 3 [ 420.798724][T16765] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 420.828545][T16765] BTRFS info (device loop1): use lzo compression, level 0 [ 420.835727][T16765] BTRFS info (device loop1): turning on flush-on-commit [ 420.847023][T16765] BTRFS info (device loop1): enabling auto defrag [ 420.859165][T16765] BTRFS info (device loop1): max_inline at 4096 [ 420.865470][T16765] BTRFS info (device loop1): using free space tree [ 420.963870][T16765] BTRFS info (device loop1): enabling ssd optimizations [ 421.166483][ T5765] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 421.864729][T16809] loop1: detected capacity change from 0 to 16 [ 421.911625][T16809] erofs: (device loop1): mounted with root inode @ nid 36. [ 421.946299][ T28] audit: type=1800 audit(1771843942.469:247): pid=16809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4910" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 422.573974][T16803] loop0: detected capacity change from 0 to 32768 [ 422.625977][T16803] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 422.639596][T16828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4918'. [ 422.704181][T16813] loop2: detected capacity change from 0 to 32768 [ 422.742965][T16813] (syz.2.4912,16813,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 422.805306][T16813] (syz.2.4912,16813,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 422.831865][T16803] XFS (loop0): Ending clean mount [ 422.870621][T16813] JBD2: Ignoring recovery information on journal [ 422.957032][ T5769] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 423.009340][T16813] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 423.392384][ T5762] ocfs2: Unmounting device (7,2) on (node local) [ 423.966321][T16860] loop1: detected capacity change from 0 to 256 [ 424.536724][T16883] loop1: detected capacity change from 0 to 64 [ 424.699269][T16887] comedi comedi3: pcl812: a I/O base address must be specified [ 424.902199][T16895] loop3: detected capacity change from 0 to 128 [ 424.952396][T16895] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 424.981061][T16900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4948'. [ 424.995375][T16895] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 425.135562][ T1076] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 425.387190][T16917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4955'. [ 425.406508][T16913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.429638][T16913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.451859][T16913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.465684][T16913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.482278][T16913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.492926][T16913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.513229][T16913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.523894][T16913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.539526][T16913] batadv_slave_1: entered promiscuous mode [ 425.552120][T16917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4955'. [ 425.792156][T16926] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 425.799549][T16926] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 425.842194][T16926] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 425.848719][T16926] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 425.865712][T16926] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 425.872227][T16926] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 425.906413][T16926] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 425.912921][T16926] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 425.928705][T16926] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 425.935222][T16926] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 425.971181][T16935] CUSE: unknown device info "" [ 425.976171][T16935] CUSE: unknown device info "" [ 426.011704][T16935] CUSE: DEVNAME unspecified [ 426.023561][T16937] loop3: detected capacity change from 0 to 512 [ 426.101848][T16937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.220119][T16937] EXT4-fs error (device loop3): ext4_lookup:1858: inode #14: comm syz.3.4964: casefold flag without casefold feature [ 426.351402][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.655259][T16960] Bluetooth: MGMT ver 1.22 [ 427.127520][T16980] netlink: 'syz.0.4982': attribute type 1 has an invalid length. [ 427.145253][T16973] loop1: detected capacity change from 0 to 8192 [ 428.462360][T16990] loop1: detected capacity change from 0 to 131072 [ 428.473012][T16990] F2FS-fs (loop1): QUOTA feature is enabled, so ignore jquota_fmt [ 428.484220][T16990] F2FS-fs (loop1): invalid crc value [ 428.496926][T16990] F2FS-fs (loop1): Found nat_bits in checkpoint [ 428.540790][T16990] F2FS-fs (loop1): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 428.541900][ T28] audit: type=1326 audit(1771843949.049:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17011 comm="syz.2.4997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc9d9c629 code=0x7ffc0000 [ 428.553217][T16990] F2FS-fs (loop1): Failed to read root inode [ 428.653163][ T28] audit: type=1326 audit(1771843949.069:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17011 comm="syz.2.4997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc9d9c629 code=0x7ffc0000 [ 428.686310][ T28] audit: type=1326 audit(1771843949.119:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17011 comm="syz.2.4997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fbdc9d9c629 code=0x7ffc0000 [ 428.762646][ T28] audit: type=1326 audit(1771843949.119:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17011 comm="syz.2.4997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc9d9c629 code=0x7ffc0000 [ 428.817028][ T28] audit: type=1326 audit(1771843949.119:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17011 comm="syz.2.4997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fbdc9d9c629 code=0x7ffc0000 [ 428.839913][ T28] audit: type=1326 audit(1771843949.119:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17011 comm="syz.2.4997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc9d9c629 code=0x7ffc0000 [ 428.862259][ C1] vkms_vblank_simulate: vblank timer overrun [ 428.897926][ T28] audit: type=1326 audit(1771843949.119:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17011 comm="syz.2.4997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc9d9c629 code=0x7ffc0000 [ 428.975415][T17023] gretap0: entered promiscuous mode [ 428.989833][T17023] vlan3: entered promiscuous mode [ 429.015859][ T28] audit: type=1326 audit(1771843949.539:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17026 comm="syz.0.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6079c629 code=0x7ffc0000 [ 429.018200][T17025] loop1: detected capacity change from 0 to 512 [ 429.093246][ T28] audit: type=1326 audit(1771843949.539:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17026 comm="syz.0.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6079c629 code=0x7ffc0000 [ 429.115593][ C1] vkms_vblank_simulate: vblank timer overrun [ 429.129276][T17025] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 429.193088][T17025] EXT4-fs (loop1): orphan cleanup on readonly fs [ 429.216144][ T28] audit: type=1326 audit(1771843949.569:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17026 comm="syz.0.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9d6079c629 code=0x7ffc0000 [ 429.223744][T17025] EXT4-fs error (device loop1): ext4_orphan_get:1424: comm syz.1.5001: bad orphan inode 15 [ 429.303359][T17025] ext4_test_bit(bit=14, block=18) = 1 [ 429.309832][T17025] is_bad_inode(inode)=0 [ 429.314963][T17025] NEXT_ORPHAN(inode)=1023 [ 429.319422][T17025] max_ino=32 [ 429.322636][T17025] i_nlink=0 [ 429.347888][T17025] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.5001: bg 0: block 161: padding at end of block bitmap is not set [ 429.386527][T17025] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 429.418755][T17025] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 429.449026][T17036] loop3: detected capacity change from 0 to 4096 [ 429.478235][ T5820] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 429.497980][T17037] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 429.549759][T17036] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 429.580643][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.606624][T17036] Remounting filesystem read-only [ 429.704182][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.718333][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.742023][ T5820] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 429.769216][ T5771] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 429.775956][ T5771] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 429.790900][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.813718][ T5820] usb 3-1: config 0 descriptor?? [ 429.828058][ T5771] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 429.836749][ T5771] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 429.859299][ T5771] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 429.876569][ T5771] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 430.065523][T17043] loop3: detected capacity change from 0 to 512 [ 430.091336][T17043] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 430.112418][T17043] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 430.123747][T17043] System zones: 1-12 [ 430.129126][T17043] EXT4-fs (loop3): orphan cleanup on readonly fs [ 430.139583][T17043] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.5009: attempt to clear invalid blocks 1024 len 1 [ 430.171359][T17043] EXT4-fs (loop3): Remounting filesystem read-only [ 430.181255][T17043] EXT4-fs (loop3): 1 truncate cleaned up [ 430.206363][T17043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 430.269575][ T5820] hid-led 0003:1D34:000A.000D: unknown main item tag 0x0 [ 430.286946][ T5820] hid-led 0003:1D34:000A.000D: unknown main item tag 0x0 [ 430.307199][ T5820] hid-led 0003:1D34:000A.000D: unknown main item tag 0x0 [ 430.342138][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 430.398831][T17041] loop1: detected capacity change from 0 to 32768 [ 430.463797][ T5820] hid-led: probe of 0003:1D34:000A.000D failed with error -71 [ 430.508482][ T5820] usb 3-1: USB disconnect, device number 34 [ 430.780023][T17050] loop3: detected capacity change from 0 to 4096 [ 430.808133][T17050] EXT4-fs (loop3): Test dummy encryption mode enabled [ 430.846540][T17050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.932819][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.820378][T17069] loop1: detected capacity change from 0 to 32768 [ 431.858585][T17069] JBD2: Ignoring recovery information on journal [ 432.010857][T17069] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 432.356696][T17095] program syz.2.5022 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 432.381747][ T5765] ocfs2: Unmounting device (7,1) on (node local) [ 433.943637][T17116] loop2: detected capacity change from 0 to 32768 [ 435.832121][T17166] loop0: detected capacity change from 0 to 32768 [ 435.895207][T17166] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 435.993363][T17166] XFS (loop0): Ending clean mount [ 436.088100][ T5752] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 436.182589][ T5769] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 436.298315][ T8] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 436.322256][ T5752] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 436.341393][ T5752] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 436.366088][ T5752] usb 3-1: config 220 has no interface number 2 [ 436.387494][ T5752] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 436.411558][ T5752] usb 3-1: config 220 interface 0 has no altsetting 0 [ 436.428070][ T5752] usb 3-1: config 220 interface 76 has no altsetting 0 [ 436.440067][ T5752] usb 3-1: config 220 interface 1 has no altsetting 0 [ 436.461197][ T5752] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 436.478218][ T5752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.496490][ T5752] usb 3-1: Product: syz [ 436.501128][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 436.506924][ T5752] usb 3-1: Manufacturer: syz [ 436.511739][ T5752] usb 3-1: SerialNumber: syz [ 436.541724][ T8] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 436.560129][ T8] usb 2-1: config 0 has no interface number 0 [ 436.583723][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 436.607931][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.636351][ T8] usb 2-1: Product: syz [ 436.640989][ T8] usb 2-1: Manufacturer: syz [ 436.645624][ T8] usb 2-1: SerialNumber: syz [ 436.661628][ T8] usb 2-1: config 0 descriptor?? [ 436.770576][ T5752] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 436.782032][ T5752] usb 3-1: No valid video chain found. [ 436.793698][ T5752] usb 3-1: selecting invalid altsetting 0 [ 436.809789][ T5752] usb 3-1: selecting invalid altsetting 0 [ 436.816060][ T5752] usbtest: probe of 3-1:220.1 failed with error -22 [ 436.841561][ T5752] usb 3-1: USB disconnect, device number 35 [ 436.880322][ T8] usb 2-1: USB disconnect, device number 32 [ 436.955963][T17195] loop0: detected capacity change from 0 to 512 [ 437.022993][T17195] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.058189][T17195] ext4 filesystem being mounted at /1261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.167184][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.436083][T17202] mkiss: ax0: crc mode is auto. [ 438.016414][T17223] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5075'. [ 438.034821][T17223] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 438.047673][T17223] batman_adv: batadv0: Adding interface: ip6gretap2 [ 438.055095][T17223] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.099969][T17223] batman_adv: batadv0: Interface activated: ip6gretap2 [ 438.243075][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 438.243090][ T28] audit: type=1326 audit(1771843958.769:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17229 comm="syz.3.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9aed9c629 code=0x7ffc0000 [ 438.298104][ T28] audit: type=1326 audit(1771843958.769:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17229 comm="syz.3.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9aed9c629 code=0x7ffc0000 [ 438.324932][ T28] audit: type=1326 audit(1771843958.809:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17229 comm="syz.3.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa9aed9c629 code=0x7ffc0000 [ 438.353813][ T28] audit: type=1326 audit(1771843958.809:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17229 comm="syz.3.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa9aed9c392 code=0x7ffc0000 [ 438.434453][ T28] audit: type=1326 audit(1771843958.819:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17229 comm="syz.3.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa9aed9c392 code=0x7ffc0000 [ 438.475970][ T28] audit: type=1326 audit(1771843958.819:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17229 comm="syz.3.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9aed9c629 code=0x7ffc0000 [ 438.509332][ T28] audit: type=1326 audit(1771843958.819:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17229 comm="syz.3.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9aed9c629 code=0x7ffc0000 [ 438.561545][T17245] loop1: detected capacity change from 0 to 8 [ 438.612673][T17245] SQUASHFS error: Failed to read block 0xdfa: -5 [ 438.635470][T17245] SQUASHFS error: Unable to read metadata cache entry [dfa] [ 438.647247][T17245] SQUASHFS error: Failed to read block 0x4e8: -5 [ 438.663154][T17245] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 438.673419][T17245] SQUASHFS error: Failed to read block 0x4de: -5 [ 438.683144][T17245] SQUASHFS error: Failed to read block 0x4de: -5 [ 438.694063][T17245] SQUASHFS error: Failed to read block 0x4de: -5 [ 438.717055][T17245] SQUASHFS error: Failed to read block 0x4de: -5 [ 438.739359][T17245] SQUASHFS error: Failed to read block 0x4de: -5 [ 438.751959][T17245] SQUASHFS error: Failed to read block 0x4de: -5 [ 438.768558][T17245] SQUASHFS error: Failed to read block 0x4e8: -5 [ 438.777312][ T28] audit: type=1800 audit(1771843959.299:269): pid=17245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5084" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 438.995193][T17261] loop2: detected capacity change from 0 to 512 [ 439.030611][T17259] loop1: detected capacity change from 0 to 2048 [ 439.042731][T17261] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 439.073733][T17261] EXT4-fs (loop2): 1 truncate cleaned up [ 439.086775][T17259] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 439.098476][T17261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.125713][T17261] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.5092: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 439.144363][ T7319] udevd[7319]: incorrect nilfs2 checksum on /dev/loop1 [ 439.190588][T17265] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 439.206962][ T5762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.207167][T17264] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5093'. [ 439.349290][T17259] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 262144 [ 439.398220][T17259] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=15) [ 439.437917][T17259] Remounting filesystem read-only [ 439.443077][T17259] NILFS (loop1): error -5 truncating bmap (ino=15) [ 439.453017][T17271] ucma_write: process 2570 (syz.2.5096) changed security contexts after opening file descriptor, this is not allowed. [ 439.524150][ T5765] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 439.543782][ T5765] NILFS (loop1): discard dirty page: offset=0, ino=2097152 [ 439.560411][ T5765] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 439.569052][ T5765] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 439.580993][ T5765] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 439.590400][ T5765] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 439.600142][ T5765] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 439.607014][ T5765] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 439.614947][ T5765] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 439.624376][ T5765] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 439.633967][ T5765] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 439.645636][ T5765] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 439.654443][ T5765] NILFS (loop1): discard dirty block: blocknr=3, size=1024 [ 439.666385][ T5765] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 439.675039][ T5765] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 439.686029][ T5765] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 439.695686][ T5765] NILFS (loop1): discard dirty page: offset=268697600, ino=6 [ 439.707380][ T5765] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 439.717636][ T5765] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 439.728271][ T5765] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 439.735517][ T5765] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 439.750791][ T5765] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 439.759067][ T5765] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 439.766391][ T5765] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 439.774781][ T5765] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 439.782249][ T5765] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 439.792351][ T5765] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 439.799550][ T5765] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 439.809524][ T5765] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 439.818457][ T5765] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 439.825850][ T5765] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 439.835594][ T5765] NILFS (loop1): discard dirty page: offset=67371008, ino=3 [ 439.843116][ T27] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 439.852231][ T5765] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 439.862284][ T5765] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 439.871703][ T5765] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 439.879417][ T5765] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 440.037906][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 440.050079][ T27] usb 3-1: unable to get BOS descriptor or descriptor too short [ 440.067120][ T27] usb 3-1: config 13 has an invalid interface number: 50 but max is 0 [ 440.080263][T17278] loop3: detected capacity change from 0 to 32768 [ 440.080834][ T27] usb 3-1: config 13 has no interface number 0 [ 440.113767][ T27] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 440.134762][ T27] usb 3-1: config 13 interface 50 has no altsetting 0 [ 440.152440][ T27] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 440.167936][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.186246][ T27] usb 3-1: Product: syz [ 440.193679][ T27] usb 3-1: Manufacturer: syz [ 440.208064][ T27] usb 3-1: SerialNumber: syz [ 440.229906][T17275] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 440.268849][T17284] loop1: detected capacity change from 0 to 4096 [ 440.282215][T17284] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 440.326105][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.332910][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.361566][T17284] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 440.438489][T17284] ntfs: volume version 3.1. [ 440.479952][ T27] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 440.488203][ T27] usb 3-1: MIDIStreaming interface descriptor not found [ 440.584638][ T27] usb 3-1: USB disconnect, device number 36 [ 440.693576][ T7320] udevd[7320]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 440.765419][T17290] pimreg3: entered allmulticast mode [ 440.983678][T17294] loop0: detected capacity change from 0 to 4096 [ 441.003196][T17294] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 441.052143][T17294] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 441.084925][T17294] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 441.301033][T17305] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 441.307530][T17305] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 441.346327][T17305] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 441.369186][T17305] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 442.340786][T17351] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5135'. [ 442.896959][T17375] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5146'. [ 442.898150][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 443.119755][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 443.133526][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.152884][ T9] usb 2-1: config 0 descriptor?? [ 443.231247][T17373] loop2: detected capacity change from 0 to 32768 [ 443.274802][T17373] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 443.366253][T17373] XFS (loop2): Ending clean mount [ 443.503649][ T5762] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 443.808605][ T9] ath6kl: Failed to read usb control message: -71 [ 443.815128][ T9] ath6kl: Unable to read the bmi data from the device: -71 [ 443.852773][ T9] ath6kl: unable to read target info byte count: -71 [ 443.869242][ T9] ath6kl: Failed to init ath6kl core: -71 [ 443.896485][ T9] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 443.925169][ T9] usb 2-1: USB disconnect, device number 33 [ 446.766698][T17478] loop1: detected capacity change from 0 to 4096 [ 446.845399][T17484] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 446.966923][T17478] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 447.004837][T17478] Remounting filesystem read-only [ 447.133094][ T5765] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 447.144586][ T5765] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 447.197938][ T5765] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 447.204945][ T5765] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 447.218897][ T5765] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 447.225887][ T5765] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 447.260089][T17497] sctp: [Deprecated]: syz.2.5201 (pid 17497) Use of int in max_burst socket option. [ 447.260089][T17497] Use struct sctp_assoc_value instead [ 447.945473][T17518] loop1: detected capacity change from 0 to 512 [ 447.976754][T17520] loop2: detected capacity change from 0 to 256 [ 447.997119][T17520] exfat: Deprecated parameter 'namecase' [ 448.006276][T17518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.038029][T17520] exfat: Deprecated parameter 'namecase' [ 448.077598][T17499] loop0: detected capacity change from 0 to 32768 [ 448.145448][T17518] EXT4-fs error (device loop1): ext4_get_first_dir_block:3584: inode #12: comm syz.1.5211: Directory block failed checksum [ 448.195729][T17499] jfs_mkdir: dtInsert returned -EIO [ 448.216016][T17520] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 448.247747][T17499] ERROR: (device loop0): jfs_mkdir: [ 448.247747][T17499] [ 448.276100][T17499] ERROR: (device loop0): remounting filesystem as read-only [ 448.279177][T17520] syz.2.5210: attempt to access beyond end of device [ 448.279177][T17520] loop2: rw=524288, sector=34225520824, nr_sectors = 1 limit=256 [ 448.313661][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.317424][T17499] jfs_lookup: iget failed on inum 4 [ 448.360321][T17520] syz.2.5210: attempt to access beyond end of device [ 448.360321][T17520] loop2: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 448.364296][T17499] jfs_lookup: iget failed on inum 4 [ 448.384897][T17499] jfs_lookup: iget failed on inum 4 [ 448.391495][T17499] jfs_lookup: iget failed on inum 4 [ 448.427567][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 448.427581][ T28] audit: type=1800 audit(1771843968.949:270): pid=17520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5210" name="file1" dev="loop2" ino=1048727 res=0 errno=0 [ 448.472011][T17516] exFAT-fs (loop2): invalid start cluster (4278190088) [ 448.629214][T17511] loop3: detected capacity change from 0 to 40427 [ 448.655890][T17511] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 448.679082][T17511] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 448.693254][T17511] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 448.754199][T17511] F2FS-fs (loop3): Found nat_bits in checkpoint [ 448.920095][T17511] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 448.947519][T17511] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 449.661099][T17557] loop1: detected capacity change from 0 to 4096 [ 449.781464][T17565] loop0: detected capacity change from 0 to 256 [ 449.817105][T17565] exfat: Deprecated parameter 'namecase' [ 449.843472][T17557] ntfs3: loop1: failed to convert "0080" to cp862 [ 449.852004][T17565] exfat: Deprecated parameter 'utf8' [ 449.873534][T17557] ntfs3: loop1: failed to convert name for inode 1e. [ 449.905372][T17565] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012366, chksum : 0x6ab66362, utbl_chksum : 0xe619d30d) [ 449.932448][T17567] loop2: detected capacity change from 0 to 256 [ 449.947763][T17567] exfat: Deprecated parameter 'utf8' [ 449.953896][T17567] exfat: Deprecated parameter 'namecase' [ 450.098007][T17567] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 450.413460][T17583] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5237'. [ 450.846082][T17606] ubi31: attaching mtd0 [ 450.865472][T17606] ubi31 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80) [ 450.888031][ T5752] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 451.128224][ T5752] usb 3-1: unable to get BOS descriptor or descriptor too short [ 451.152328][ T5752] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 451.175782][ T5752] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 451.193829][ T5752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.222755][ T5752] usb 3-1: Product: syz [ 451.235464][ T5752] usb 3-1: Manufacturer: syz [ 451.242998][ T5752] usb 3-1: SerialNumber: syz [ 451.418169][ T5820] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 451.536704][T17632] loop0: detected capacity change from 0 to 4096 [ 451.557338][T17632] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 451.574479][T17634] loop1: detected capacity change from 0 to 1024 [ 451.608190][ T5820] usb 4-1: Using ep0 maxpacket: 8 [ 451.628732][ T5820] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 451.650997][ T5820] usb 4-1: config 0 has no interface number 0 [ 451.665433][T17632] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 451.679232][ T5820] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 451.697071][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.705939][ T12] hfsplus: b-tree write err: -5, ino 4 [ 451.736024][ T5820] usb 4-1: Product: syz [ 451.756257][ T5820] usb 4-1: Manufacturer: syz [ 451.772412][ T5769] ntfs3: loop0: ino=1a, ntfs_sync_fs failed, -22. [ 451.775626][ T5820] usb 4-1: SerialNumber: syz [ 451.786538][ T5820] usb 4-1: config 0 descriptor?? [ 451.840921][T17636] loop1: detected capacity change from 0 to 1024 [ 451.896784][T17636] hfsplus: keylen 65060 too large [ 451.905882][T17636] hfsplus: xattr searching failed [ 451.923838][T17636] hfsplus: keylen 65060 too large [ 451.931666][T17636] hfsplus: xattr searching failed [ 452.037424][T17640] loop0: detected capacity change from 0 to 256 [ 452.046110][T17640] exfat: Deprecated parameter 'namecase' [ 452.088631][T17640] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 452.148396][ T28] audit: type=1400 audit(1771843972.679:271): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 3-1: reset high-speed USB device number 37 using dummy_hcd [ 452.222054][ T5820] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 452.290149][T17643] [U] [ 452.291669][ T5820] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized! [ 452.365644][ T5820] usb 4-1: Failed to initialize entity for entity 5 [ 452.393189][ T5820] usb 4-1: Failed to register entities (-22). [ 452.476652][ T5820] usb 4-1: USB disconnect, device number 32 [ 452.523827][T17652] net_ratelimit: 67 callbacks suppressed [ 452.523843][T17652] netlink: zone id is out of range [ 452.542962][ T5752] usb 3-1: unable to get BOS descriptor or descriptor too short [ 452.564092][ T5752] usb 3-1: device firmware changed [ 452.592195][ T5752] usb 3-1: USB disconnect, device number 37 [ 453.182613][T17673] Bluetooth: hci0: Opcode 0x0c03 failed: -38 [ 453.489838][T17691] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5284'. [ 454.109405][T17708] loop2: detected capacity change from 0 to 4096 [ 454.233702][T17708] ntfs3: loop2: failed to convert "0080" to cp1255 [ 454.254074][T17708] ntfs3: loop2: failed to convert name for inode 1e. [ 454.292726][T17717] loop3: detected capacity change from 0 to 256 [ 454.309578][T17717] exfat: Deprecated parameter 'namecase' [ 454.337284][T17717] exfat: Deprecated parameter 'namecase' [ 454.396137][T17717] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 454.508471][T17717] syz.3.5296: attempt to access beyond end of device [ 454.508471][T17717] loop3: rw=524288, sector=34225520824, nr_sectors = 1 limit=256 [ 454.531280][T17717] syz.3.5296: attempt to access beyond end of device [ 454.531280][T17717] loop3: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 454.587642][ T28] audit: type=1800 audit(1771843975.109:272): pid=17717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5296" name="file1" dev="loop3" ino=1048732 res=0 errno=0 [ 454.612078][T17714] exFAT-fs (loop3): invalid start cluster (4278190088) [ 454.660190][T17726] loop2: detected capacity change from 0 to 4096 [ 454.837938][ T5797] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 455.023208][T17728] loop3: detected capacity change from 0 to 32768 [ 455.048116][ T5797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 455.063653][T17728] JBD2: Ignoring recovery information on journal [ 455.071943][ T5797] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 455.098019][ T5797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 455.119472][ T5797] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 455.130660][ T5797] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 455.131472][T17728] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 455.145348][ T5797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.186869][ T5797] usb 2-1: config 0 descriptor?? [ 455.281371][ T5771] ocfs2: Unmounting device (7,3) on (node local) [ 455.415186][ T5797] hdpvr 2-1:0.0: firmware version 0xfe dated O~w8r7/g,ET._FRN5rNeוkp [ 455.427382][ T5797] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 455.864599][ T5797] hdpvr 2-1:0.0: Could not setup controls [ 455.896719][ T5797] hdpvr 2-1:0.0: registering videodev failed [ 455.937229][ T5797] hdpvr: probe of 2-1:0.0 failed with error -71 [ 455.968823][ T5797] usb 2-1: USB disconnect, device number 34 [ 456.562910][T17733] loop2: detected capacity change from 0 to 32768 [ 456.635729][T17733] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 456.735092][T17765] loop1: detected capacity change from 0 to 256 [ 456.754111][T17733] XFS (loop2): Ending clean mount [ 456.763937][T17765] FAT-fs (loop1): Directory bread(block 1285) failed [ 456.789512][T17765] FAT-fs (loop1): Directory bread(block 1286) failed [ 456.807449][ T27] XFS (loop2): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:112). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 456.828014][T17765] FAT-fs (loop1): Directory bread(block 1287) failed [ 456.834993][T17765] FAT-fs (loop1): Directory bread(block 1288) failed [ 456.857612][ T27] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x20 [ 456.880798][T17765] FAT-fs (loop1): Directory bread(block 1285) failed [ 456.894627][ T27] XFS (loop2): Unmount and run xfs_repair [ 456.908185][T17765] FAT-fs (loop1): Directory bread(block 1286) failed [ 456.915661][ T27] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 456.931754][T17765] FAT-fs (loop1): Directory bread(block 1287) failed [ 456.942007][ T27] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 456.955722][T17765] FAT-fs (loop1): Directory bread(block 1288) failed [ 456.976450][ T27] 00000010: 00 00 00 00 00 00 00 20 00 00 00 02 00 00 00 10 ....... ........ [ 456.989369][T17765] FAT-fs (loop1): FAT read failed (blocknr 1281) [ 457.004703][ T27] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 457.029631][T17770] FAT-fs (loop1): Directory bread(block 1285) failed [ 457.034045][ T27] 00000030: 00 00 00 00 ca b4 20 ce 00 00 11 40 00 00 40 37 ...... ....@..@7 [ 457.052623][ T27] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 457.062043][ T27] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 457.080282][ T27] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 457.093687][ T27] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 457.106209][T17733] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x20 len 8 error 74 [ 457.127110][T17733] XFS (loop2): Failed to initialize disk quotas. [ 457.248543][ T5762] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 457.318498][T17778] loop1: detected capacity change from 0 to 1024 [ 457.534662][T17786] loop3: detected capacity change from 0 to 1024 [ 457.543858][ T78] hfsplus: b-tree write err: -5, ino 4 [ 457.647910][T17786] hfsplus: keylen 65060 too large [ 457.652989][T17786] hfsplus: xattr searching failed [ 457.745081][ T5752] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 457.948060][ T5752] usb 3-1: Using ep0 maxpacket: 8 [ 457.959746][ T5752] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 458.002120][ T5752] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 458.027975][ T5752] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.057545][ T5752] usb 3-1: config 0 descriptor?? [ 458.100588][T17804] loop3: detected capacity change from 0 to 512 [ 458.132756][T17804] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 458.157084][T17804] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0102] [ 458.191452][T17804] System zones: 1-12 [ 458.195775][T17804] EXT4-fs (loop3): orphan cleanup on readonly fs [ 458.208619][T17809] netlink: 'syz.0.5334': attribute type 10 has an invalid length. [ 458.227065][T17809] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5334'. [ 458.243581][T17804] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.5333: bg 0: block 361: padding at end of block bitmap is not set [ 458.245663][T17809] batman_adv: batadv0: Adding interface: vlan1 [ 458.264573][T17809] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.294850][T17804] EXT4-fs (loop3): Remounting filesystem read-only [ 458.308460][T17804] EXT4-fs (loop3): 1 truncate cleaned up [ 458.315304][T17809] batman_adv: batadv0: Interface activated: vlan1 [ 458.328387][T17804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 458.430797][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 458.520769][ T5752] stadia 0003:18D1:9400.000E: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.2-1/input0 [ 458.552826][T17813] loop0: detected capacity change from 0 to 1024 [ 458.558014][ T5752] stadia 0003:18D1:9400.000E: no inputs found [ 458.575975][ T5752] stadia 0003:18D1:9400.000E: force feedback init failed [ 458.616182][T17813] hfsplus: keylen 65060 too large [ 458.632453][T17813] hfsplus: xattr searching failed [ 458.649744][T17813] hfsplus: keylen 65060 too large [ 458.665123][T17813] hfsplus: xattr searching failed [ 458.702927][ T5752] usb 3-1: USB disconnect, device number 38 [ 458.739115][T17815] fido_id[17815]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 459.018074][T17811] loop1: detected capacity change from 0 to 32768 [ 459.046551][T17811] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 459.072003][T17811] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 459.181868][ T5765] ocfs2: Unmounting device (7,1) on (node local) [ 459.668633][T17833] loop1: detected capacity change from 0 to 4096 [ 459.885118][T17833] ntfs3: loop1: failed to convert "0080" to cp1255 [ 459.911866][T17833] ntfs3: loop1: failed to convert name for inode 1e. [ 460.189941][T17849] loop2: detected capacity change from 0 to 64 [ 460.623728][T17863] netlink: 'syz.1.5358': attribute type 2 has an invalid length. [ 460.914865][T17855] loop3: detected capacity change from 0 to 32768 [ 461.502692][T17868] loop1: detected capacity change from 0 to 32768 [ 461.513348][T17868] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.5369 (17868) [ 461.540315][T17868] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 461.551829][T17868] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 461.561360][T17868] BTRFS info (device loop1): using free space tree [ 461.697870][T17868] BTRFS info (device loop1): enabling ssd optimizations [ 461.727888][T17868] BTRFS info (device loop1): auto enabling async discard [ 461.894450][ T5765] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 462.031564][T17902] loop3: detected capacity change from 0 to 128 [ 462.065798][T17902] FAT-fs (loop3): Directory bread(block 524322) failed [ 462.092463][T17902] FAT-fs (loop3): Directory bread(block 524323) failed [ 462.120870][T17902] FAT-fs (loop3): Directory bread(block 524324) failed [ 462.140314][T17902] FAT-fs (loop3): Directory bread(block 524325) failed [ 462.158209][T17902] FAT-fs (loop3): Directory bread(block 524326) failed [ 462.165249][T17902] FAT-fs (loop3): Directory bread(block 524327) failed [ 462.185421][T17902] FAT-fs (loop3): Directory bread(block 524328) failed [ 462.197492][T17902] FAT-fs (loop3): Directory bread(block 524329) failed [ 462.765240][T17920] loop3: detected capacity change from 0 to 2048 [ 462.784543][T17920] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 462.837975][T17926] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 462.878591][ T5756] udevd[5756]: incorrect nilfs2 checksum on /dev/loop3 [ 462.970110][T17920] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 262144 [ 462.979046][T17920] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15) [ 463.007408][T17920] Remounting filesystem read-only [ 463.015062][T17920] NILFS (loop3): error -5 truncating bmap (ino=15) [ 463.125195][ T5771] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 463.158267][ T5771] NILFS (loop3): discard dirty page: offset=0, ino=2097152 [ 463.165526][ T5771] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 463.186848][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 463.192762][T17937] loop1: detected capacity change from 0 to 64 [ 463.203406][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 463.221165][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 463.251934][ T5771] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 463.268985][ T5771] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 463.308468][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 463.327141][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 463.355843][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 463.393464][ T5771] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 463.418280][ T5771] NILFS (loop3): discard dirty block: blocknr=3, size=1024 [ 463.425575][ T5771] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 463.457976][ T5771] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 463.477871][ T5771] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 463.485234][ T5771] NILFS (loop3): discard dirty page: offset=268697600, ino=6 [ 463.515799][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 463.548876][ T5771] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 463.556554][ T5771] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 463.588171][ T5771] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 463.597623][ T5771] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 463.638836][ T5771] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 463.646182][ T5771] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 463.689313][ T5771] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 463.696656][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 463.738385][ T5771] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 463.776730][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 463.798506][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 463.818258][ T5771] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 463.825685][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 463.852754][ T5771] NILFS (loop3): discard dirty page: offset=67371008, ino=3 [ 463.877880][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 463.886783][ T5771] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 463.887504][T17955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5396'. [ 463.927962][ T5771] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 463.935223][ T5771] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 464.592200][ T28] audit: type=1326 audit(1771843985.119:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17975 comm="syz.1.5405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0119c629 code=0x7ffc0000 [ 464.669355][ T28] audit: type=1326 audit(1771843985.119:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17975 comm="syz.1.5405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0119c629 code=0x7ffc0000 [ 464.728997][ T28] audit: type=1326 audit(1771843985.149:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17975 comm="syz.1.5405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab0119c629 code=0x7ffc0000 [ 464.799384][ T28] audit: type=1326 audit(1771843985.149:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17975 comm="syz.1.5405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0119c629 code=0x7ffc0000 [ 464.826116][ T28] audit: type=1326 audit(1771843985.149:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17975 comm="syz.1.5405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0119c629 code=0x7ffc0000 [ 464.849119][ T28] audit: type=1326 audit(1771843985.159:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17975 comm="syz.1.5405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fab0119c629 code=0x7ffc0000 [ 464.872018][ T28] audit: type=1326 audit(1771843985.159:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17975 comm="syz.1.5405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0119c629 code=0x7ffc0000 [ 465.047941][ T8] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 465.234795][ T8] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 465.246324][ T8] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.256846][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 465.274902][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.319825][ T8] hub 4-1:4.0: USB hub found [ 465.516964][ T8] hub 4-1:4.0: 13 ports detected [ 465.522187][ T8] usb 4-1: selecting invalid altsetting 1 [ 465.528334][ T8] hub 4-1:4.0: Using single TT (err -22) [ 465.541390][ T8] hub 4-1:4.0: insufficient power available to use all downstream ports [ 465.954203][ T8] usb 4-1: USB disconnect, device number 33 [ 479.217955][ T5797] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 479.387878][ T28] audit: type=1326 audit(1771843999.889:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18005 comm="syz.2.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc9d9c629 code=0x7ffc0000 [ 479.419403][ T5797] usb 2-1: Using ep0 maxpacket: 8 [ 479.478127][ T28] audit: type=1326 audit(1771843999.889:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18005 comm="syz.2.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc9d9c629 code=0x7ffc0000 [ 479.500974][ T5797] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 479.518499][ T5797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.533115][ T5797] usb 2-1: Product: syz [ 479.537338][ T5797] usb 2-1: Manufacturer: syz [ 479.561327][ T28] audit: type=1326 audit(1771843999.959:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18005 comm="syz.2.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbdc9d9c629 code=0x7ffc0000 [ 479.595261][ T5764] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 479.608680][ T5764] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 479.618473][ T5797] usb 2-1: SerialNumber: syz [ 479.624084][ T5764] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 479.634872][ T5797] usb 2-1: config 0 descriptor?? [ 479.641311][ T5764] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 479.652644][ T5797] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 479.661782][ T5764] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 479.669575][ T5764] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 479.679190][ T28] audit: type=1326 audit(1771843999.959:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18005 comm="syz.2.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc9d9c629 code=0x7ffc0000 [ 479.756334][ T28] audit: type=1326 audit(1771843999.959:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18005 comm="syz.2.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc9d9c629 code=0x7ffc0000 [ 479.779651][ T28] audit: type=1326 audit(1771843999.979:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18005 comm="syz.2.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fbdc9d9c629 code=0x7ffc0000 [ 479.802587][ T28] audit: type=1326 audit(1771843999.979:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18005 comm="syz.2.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc9d9c629 code=0x7ffc0000 [ 479.916100][T18007] lo speed is unknown, defaulting to 1000 [ 480.077201][T18017] loop2: detected capacity change from 0 to 8192 [ 480.104360][T18017] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 480.121212][T18017] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 480.139501][T18017] REISERFS (device loop2): using ordered data mode [ 480.152314][T18017] reiserfs: using flush barriers [ 480.183356][T18017] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 480.223313][T18017] REISERFS (device loop2): checking transaction log (loop2) [ 480.250475][ T78] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.299626][ T5797] radio-usb-si4713: probe of 2-1:0.0 failed with error -71 [ 480.307531][ T5797] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 480.325328][ T5797] usb 2-1: USB disconnect, device number 35 [ 480.401622][T18017] REISERFS (device loop2): Using tea hash to sort names [ 480.416108][ T78] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.430699][T18017] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 480.476855][T18017] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 480.570973][ T78] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.771336][T18007] chnl_net:caif_netlink_parms(): no params data found [ 481.145297][T18022] loop3: detected capacity change from 0 to 32768 [ 481.208163][T18022] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 481.363615][T18007] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.390565][T18007] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.432258][T18007] bridge_slave_0: entered allmulticast mode [ 481.450099][T18022] XFS (loop3): Ending clean mount [ 481.457430][T18007] bridge_slave_0: entered promiscuous mode [ 481.498991][T18022] XFS (loop3): Quotacheck needed: Please wait. [ 481.513029][T18007] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.548116][T18007] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.568110][T18007] bridge_slave_1: entered allmulticast mode [ 481.581474][T18007] bridge_slave_1: entered promiscuous mode [ 481.614647][ T78] tipc: Left network mode [ 481.634232][T18022] XFS (loop3): Quotacheck: Done. [ 481.668221][ T5764] Bluetooth: hci3: command 0x0406 tx timeout [ 481.748552][ T5764] Bluetooth: hci4: command tx timeout [ 481.773154][T18007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.839450][ T5771] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 481.853011][T18027] loop1: detected capacity change from 0 to 32768 [ 481.973713][T18027] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 482.228440][T18027] XFS (loop1): Ending clean mount [ 482.284902][T18007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.414205][ T5765] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 482.488170][ T1189] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 482.533077][T18007] team0: Port device team_slave_0 added [ 482.623557][T18007] team0: Port device team_slave_1 added [ 482.701649][ T1189] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 482.727905][ T1189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.736192][ T1189] usb 3-1: Product: syz [ 482.762562][ T1189] usb 3-1: Manufacturer: syz [ 482.767241][ T1189] usb 3-1: SerialNumber: syz [ 482.802064][ T1189] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 482.847880][ T5797] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 482.872750][T18007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.924131][T18007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.985257][T18007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.012411][T18007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.055808][T18007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.141796][T18007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.402450][ T1189] usb 3-1: USB disconnect, device number 39 [ 483.664393][T18007] hsr_slave_0: entered promiscuous mode [ 483.701966][T18007] hsr_slave_1: entered promiscuous mode [ 483.837739][ T5764] Bluetooth: hci4: command tx timeout [ 483.924373][ T5797] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 483.951944][ T5797] ath9k_htc: Failed to initialize the device [ 483.992338][ T1189] usb 3-1: ath9k_htc: USB layer deinitialized [ 484.040912][ T78] IPVS: stopping backup sync thread 16217 ... [ 484.304682][T18089] loop1: detected capacity change from 0 to 32768 [ 484.332777][T18089] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.5439 (18089) [ 484.358700][T18089] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 484.398672][T18089] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 484.407465][T18089] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 484.457921][T18089] BTRFS info (device loop1): use lzo compression, level 0 [ 484.465313][T18089] BTRFS info (device loop1): using free space tree [ 484.675142][T18120] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5447'. [ 484.715497][T18120] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5447'. [ 484.726501][T18089] BTRFS info (device loop1): enabling ssd optimizations [ 484.752259][T18089] BTRFS info (device loop1): auto enabling async discard [ 484.808243][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 484.875746][ T28] audit: type=1800 audit(1771844005.399:287): pid=18089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5439" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 484.984335][T18135] loop3: detected capacity change from 0 to 2048 [ 485.018167][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 485.046978][ T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 485.086393][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.110910][T18135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 485.141135][ T9] usb 3-1: Product: syz [ 485.146165][ T9] usb 3-1: Manufacturer: syz [ 485.151478][ T9] usb 3-1: SerialNumber: syz [ 485.202610][ T9] usb 3-1: config 0 descriptor?? [ 485.213707][ T9] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 485.227364][ T9] pctv452e: pctv452e_power_ctrl: 1 [ 485.227364][ T9] [ 485.235773][ T9] usb 3-1: selecting invalid altsetting 3 [ 485.242249][ T9] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 485.242249][ T9] [ 485.248927][T18135] EXT4-fs error (device loop3): ext4_iget_extra_inode:4732: inode #12: comm syz.3.5448: corrupted in-inode xattr: invalid size in ea xattr [ 485.253536][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 485.300221][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 485.338807][ T9] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 485.382454][ T9] usb 3-1: media controller created [ 485.387745][ T9] dvb-usb: bulk message failed: -22 (8/0) [ 485.452069][ T9] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 485.475827][ T5765] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 485.493417][ T9] dvb-usb: MAC address reading failed. [ 485.499440][T18112] dvb-usb: bulk message failed: -22 (7/0) [ 485.506556][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 485.519586][T18112] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 485.556018][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 485.738935][T18007] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 485.775319][ T9] DVB: Unable to find symbol stb0899_attach() [ 485.810767][ T9] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 485.824000][T18007] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 485.918699][ T5764] Bluetooth: hci4: command tx timeout [ 485.924602][T18007] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 486.004105][T18007] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 486.038213][ T9] rc_core: IR keymap rc-tt-1500 not found [ 486.044259][ T9] Registered IR keymap rc-empty [ 486.108260][ T9] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 486.166067][ T9] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input36 [ 486.314205][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 486.374267][ T9] pctv452e: pctv452e_power_ctrl: 0 [ 486.374267][ T9] [ 486.407986][ T9] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 486.444763][ T9] usb 3-1: USB disconnect, device number 40 [ 486.495064][ T967] dvb-usb: bulk message failed: -22 (4/0) [ 486.503119][ T967] dvb-usb: error -22 while querying for an remote control event. [ 486.976308][ T9] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 487.383751][T18168] loop3: detected capacity change from 0 to 40427 [ 487.390767][ T78] hsr_slave_0: left promiscuous mode [ 487.419969][T18168] F2FS-fs (loop3): invalid crc value [ 487.464775][ T78] hsr_slave_1: left promiscuous mode [ 487.475307][T18168] F2FS-fs (loop3): Found nat_bits in checkpoint [ 487.488372][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.506859][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.548077][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.567676][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.596905][ T78] batman_adv: batadv0: Interface deactivated: vlan1 [ 487.610797][ T78] batman_adv: batadv0: Removing interface: vlan1 [ 487.622256][T18168] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 487.683710][ T78] veth1_macvtap: left promiscuous mode [ 487.691214][ T78] veth0_macvtap: left promiscuous mode [ 487.697258][ T78] veth1_vlan: left promiscuous mode [ 487.715824][ T78] veth0_vlan: left promiscuous mode [ 487.726962][T18168] syz.3.5455: attempt to access beyond end of device [ 487.726962][T18168] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 487.771082][T18168] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 487.989883][ T5764] Bluetooth: hci4: command tx timeout [ 488.231980][T18194] loop2: detected capacity change from 0 to 128 [ 488.259536][T18194] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 488.275044][T18194] ext4 filesystem being mounted at /1357/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 488.446815][T18194] EXT4-fs: Ignoring sb option on remount [ 488.476965][T18194] EXT4-fs (loop2): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 488.595137][ T5762] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 489.711834][T18204] loop2: detected capacity change from 0 to 2048 [ 489.909849][T18204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.329683][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.472004][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.358797][ T78] bond0 (unregistering): Released all slaves [ 491.522525][T18007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.683102][T18007] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.784519][T18218] tipc: Enabled bearer , priority 10 [ 491.846738][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.855624][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.924196][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.931582][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.154293][T18007] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 492.364502][T18238] loop3: detected capacity change from 0 to 1024 [ 492.558806][T18238] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 492.565886][T18238] hfsplus: xattr search failed [ 492.613936][T18238] hfsplus: can't free extent [ 492.814264][T18007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.091317][ T28] audit: type=1326 audit(1771844013.619:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18262 comm="syz.3.5483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9aed9c629 code=0x7ffc0000 [ 493.147156][ T28] audit: type=1326 audit(1771844013.619:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18262 comm="syz.3.5483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9aed9c629 code=0x7ffc0000 [ 493.233711][ T28] audit: type=1326 audit(1771844013.629:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18262 comm="syz.3.5483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9aed9c629 code=0x7ffc0000 [ 493.329275][ T28] audit: type=1326 audit(1771844013.629:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18262 comm="syz.3.5483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9aed9c629 code=0x7ffc0000 [ 493.418796][ T28] audit: type=1326 audit(1771844013.629:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18262 comm="syz.3.5483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9aed9c629 code=0x7ffc0000 [ 493.541015][ T28] audit: type=1326 audit(1771844013.639:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18262 comm="syz.3.5483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fa9aed9c629 code=0x7ffc0000 [ 493.645448][ T28] audit: type=1326 audit(1771844013.639:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18262 comm="syz.3.5483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9aed9c629 code=0x7ffc0000 [ 493.866924][T18007] veth0_vlan: entered promiscuous mode [ 493.896954][T18007] veth1_vlan: entered promiscuous mode [ 494.022827][T18007] veth0_macvtap: entered promiscuous mode [ 494.064948][T18007] veth1_macvtap: entered promiscuous mode [ 494.073549][T18259] loop1: detected capacity change from 0 to 32768 [ 494.107000][T18259] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.5481 (18259) [ 494.113076][T18007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.154087][T18259] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 494.171893][T18007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.178740][T18259] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 494.206989][T18007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.230777][T18259] BTRFS info (device loop1): enabling auto defrag [ 494.247905][T18007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.253087][T18259] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 494.283755][T18259] BTRFS info (device loop1): force lzo compression, level 0 [ 494.289384][T18007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.342354][T18007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.349710][T18259] BTRFS info (device loop1): use no compression [ 494.396199][T18007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.401173][T18259] BTRFS info (device loop1): force clearing of disk cache [ 494.427935][T18259] BTRFS info (device loop1): max_inline at 4096 [ 494.448094][T18259] BTRFS info (device loop1): disabling free space tree [ 494.451584][T18007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.490872][T18007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.518055][T18007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.556612][T18007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.588375][T18007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.603777][T18007] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.647971][T18007] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.656813][T18007] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.666163][T18007] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.692409][T18259] BTRFS info (device loop1): enabling ssd optimizations [ 494.708234][T18207] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 494.737626][T18259] BTRFS info (device loop1): auto enabling async discard [ 494.783540][T18259] BTRFS info (device loop1): rebuilding free space tree [ 494.927229][T18259] BTRFS info (device loop1): disabling free space tree [ 494.975675][T18259] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 494.999675][T18259] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 495.115050][T18138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.143187][T18138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.299129][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.325274][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.459639][ T5765] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 495.600213][T18341] ipvlan2: entered allmulticast mode [ 495.627948][T18341] syz_tun: entered allmulticast mode [ 497.937701][T18411] MTD: Couldn't look up 'memory.events': -15 [ 498.083466][T18416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5521'. [ 498.597887][ T8] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 498.826001][T18443] loop4: detected capacity change from 0 to 2048 [ 498.839533][ T8] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 498.865404][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.880687][ T8] usb 2-1: Product: syz [ 498.917964][ T8] usb 2-1: Manufacturer: syz [ 498.937878][ T8] usb 2-1: SerialNumber: syz [ 498.954612][T18443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 498.981916][ T8] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 498.995382][T18420] loop3: detected capacity change from 0 to 32768 [ 499.023632][T18443] EXT4-fs error (device loop4): ext4_iget_extra_inode:4732: inode #12: comm syz.4.5531: corrupted in-inode xattr: invalid size in ea xattr [ 499.035532][T18170] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 499.112028][T18420] add_index: next_index = 0. Resetting! [ 499.118644][T18420] find_entry called with index >= next_index [ 499.139872][T18420] find_entry called with index >= next_index [ 499.145919][T18420] find_entry called with index >= next_index [ 499.166487][T18007] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 499.212883][T18420] find_entry called with index >= next_index [ 499.257175][T18420] find_entry called with index >= next_index [ 499.328983][T18420] find_entry called with index >= next_index [ 499.368295][T18420] find_entry called with index >= next_index [ 499.418311][T18420] read_mapping_page failed! [ 499.429860][T18420] ERROR: (device loop3): txCommit: [ 499.429860][T18420] [ 499.475450][T18420] ERROR: (device loop3): remounting filesystem as read-only [ 499.599168][ T112] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0) [ 499.606738][ T112] ------------[ cut here ]------------ [ 499.612908][ T112] kernel BUG at fs/jfs/jfs_txnmgr.c:932! [ 499.623868][ T5797] usb 2-1: USB disconnect, device number 36 [ 499.663383][ T112] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 499.669518][ T112] CPU: 0 PID: 112 Comm: jfsCommit Not tainted syzkaller #0 [ 499.676722][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 499.686791][ T112] RIP: 0010:txUnlock+0xc87/0xcb0 [ 499.691757][ T112] Code: af 9f 71 07 0f 0b e8 38 c8 7f fe 48 c7 c7 00 1c 04 8b 48 c7 c6 f9 17 04 8b ba a4 03 00 00 48 c7 c1 e0 28 04 8b e8 89 9f 71 07 <0f> 0b e8 12 c8 7f fe 48 c7 c7 00 1c 04 8b 48 c7 c6 f9 17 04 8b ba [ 499.711463][ T112] RSP: 0018:ffffc90002cd7d08 EFLAGS: 00010246 [ 499.717572][ T112] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 32ae7050e035b900 [ 499.725638][ T112] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 499.733630][ T112] RBP: ffffc9000283a240 R08: ffffc90002cd7a07 R09: 1ffff9200059af40 [ 499.741610][ T112] R10: dffffc0000000000 R11: fffff5200059af41 R12: ffff8880588edba0 [ 499.749671][ T112] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88802d572494 [ 499.757664][ T112] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 499.766638][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 499.773241][ T112] CR2: 00007f6857239440 CR3: 0000000055a81000 CR4: 00000000003506f0 [ 499.781234][ T112] Call Trace: [ 499.784541][ T112] [ 499.787489][ T112] ? lockdep_hardirqs_on+0x98/0x150 [ 499.792715][ T112] jfs_lazycommit+0x56e/0xa70 [ 499.797558][ T112] ? txFreelock+0x5a0/0x5a0 [ 499.802183][ T112] ? do_task_dead+0xd0/0xd0 [ 499.806710][ T112] ? __kthread_parkme+0x7a/0x1c0 [ 499.811671][ T112] kthread+0x2fa/0x390 [ 499.815759][ T112] ? txFreelock+0x5a0/0x5a0 [ 499.820284][ T112] ? kthread_blkcg+0xd0/0xd0 [ 499.824897][ T112] ret_from_fork+0x48/0x80 [ 499.829339][ T112] ? kthread_blkcg+0xd0/0xd0 [ 499.833952][ T112] ret_from_fork_asm+0x11/0x20 [ 499.838840][ T112] [ 499.841875][ T112] Modules linked in: [ 499.916619][ T112] ---[ end trace 0000000000000000 ]--- [ 499.923346][ T112] RIP: 0010:txUnlock+0xc87/0xcb0 [ 499.928400][ T112] Code: af 9f 71 07 0f 0b e8 38 c8 7f fe 48 c7 c7 00 1c 04 8b 48 c7 c6 f9 17 04 8b ba a4 03 00 00 48 c7 c1 e0 28 04 8b e8 89 9f 71 07 <0f> 0b e8 12 c8 7f fe 48 c7 c7 00 1c 04 8b 48 c7 c6 f9 17 04 8b ba [ 499.949357][ T112] RSP: 0018:ffffc90002cd7d08 EFLAGS: 00010246 [ 499.955557][ T112] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 32ae7050e035b900 [ 499.963728][ T112] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 499.973857][ T112] RBP: ffffc9000283a240 R08: ffffc90002cd7a07 R09: 1ffff9200059af40 [ 499.982910][ T112] R10: dffffc0000000000 R11: fffff5200059af41 R12: ffff8880588edba0 [ 499.993250][ T112] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88802d572494 [ 500.001431][ T112] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 500.011920][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 500.018830][ T112] CR2: 0000200000000100 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 500.026849][ T112] Kernel panic - not syncing: Fatal exception [ 500.033281][ T112] Kernel Offset: disabled [ 500.037600][ T112] Rebooting in 86400 seconds..