last executing test programs: 1m1.133561265s ago: executing program 1 (id=676): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4000001}}}, 0x10) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) 1m0.975844551s ago: executing program 1 (id=679): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000d"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000020000000000000004000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1m0.7699103s ago: executing program 1 (id=681): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000380)={0xd5, 0x0, 0xa3d846ff51ab7fae}) 1m0.368844538s ago: executing program 1 (id=685): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x8) 1m0.116834359s ago: executing program 1 (id=688): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x92, 0x0, 0x3, 0xd59f80, 0x5, 0x2800, 0x10, 0x3, 0x2, 0x2800, 0xf20, 0xffffffff, 0x0, 0x1, 0x10, {0x401}, 0xce, 0x9}}) 59.617782111s ago: executing program 1 (id=693): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/consoles\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000080)=0x9, 0x8) 59.151810211s ago: executing program 32 (id=693): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/consoles\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000080)=0x9, 0x8) 3.015684448s ago: executing program 0 (id=1137): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000002c0)={0x18, 0x0, {0x4, @remote, 'erspan0\x00'}}) 2.835310316s ago: executing program 0 (id=1140): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x400000000000045c], 0x0, 0xffffffffff600000, 0x1, 0x1}}, 0x40) 2.620636765s ago: executing program 0 (id=1142): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000002b40)='cubic', 0x4) setsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, 0x0) 2.237838172s ago: executing program 0 (id=1145): r0 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r1, r0}, &(0x7f0000000440)=""/183, 0xb7, &(0x7f00000003c0)={&(0x7f0000000340)={'sha224-generic\x00'}}) 2.05671425s ago: executing program 0 (id=1147): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000002c0)={0x40, 0x93cbdfa27418ee13, 0xd, "f9ba220c4c93375f37405c9a93"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.548454752s ago: executing program 3 (id=1155): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x1c, &(0x7f0000010140)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020001008500000082000000bf91000000000000b7020000030000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.285530944s ago: executing program 4 (id=1159): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="89db70ac", 0x4}], 0x1}}], 0x1, 0x0) 396.728503ms ago: executing program 2 (id=1170): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) 281.884498ms ago: executing program 4 (id=1171): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="10", 0x5e0, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r1, 0x1, 0x6, 0x6, @broadcast}, 0x14) 253.829439ms ago: executing program 2 (id=1172): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x8001, 0x3ff, 0x1, 0x0, 0x2, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x4be, 0x9, 0x7, 0x1100004, 0x6, 0x9, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0x820b, 0x8, 0x9, 0x8, 0x8, 0x10000, 0xfffffff7]}) 159.396093ms ago: executing program 4 (id=1173): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x0, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x2f, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) 110.121255ms ago: executing program 2 (id=1174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x7a, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 41.136718ms ago: executing program 3 (id=1175): syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x80) r0 = syz_open_dev$usbmon(&(0x7f0000000f40), 0x9, 0x101800) close(r0) 0s ago: executing program 0 (id=1176): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x20c802, &(0x7f0000000cc0)=ANY=[], 0x1, 0x5f5b, &(0x7f0000003100)="$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") mkdir(&(0x7f0000000040)='./bus\x00', 0xf2) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./bus\x00') kernel console output (not intermixed with test programs): [ 130.087096][ T6712] EXT4-fs error (device loop3): ext4_evict_inode:252: inode #11: comm syz.3.316: mark_inode_dirty error [ 130.114471][ T5832] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 130.136433][ T6712] EXT4-fs warning (device loop3): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 130.142643][ T6720] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d) [ 130.195744][ T6712] EXT4-fs (loop3): 1 orphan inode deleted [ 130.216482][ T6712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.226967][ T12] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 130.264439][ T12] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 130.277425][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u4:1: Failed to release dquot type 0 [ 130.304609][ T5832] usb 1-1: Using ep0 maxpacket: 8 [ 130.319829][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.374345][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.404025][ T5832] usb 1-1: New USB device found, idVendor=056a, idProduct=033d, bcdDevice= 0.00 [ 130.421540][ T6712] EXT4-fs error (device loop3): __ext4_get_inode_loc:4489: comm syz.3.316: Invalid inode table block 1 in block_group 0 [ 130.442097][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.465119][ T5832] usb 1-1: config 0 descriptor?? [ 130.474366][ T6712] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 130.623037][ T5802] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.643021][ T5802] EXT4-fs error (device loop3): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 130.675275][ T5802] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 130.700164][ T5802] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 130.770630][ T6729] loop2: detected capacity change from 0 to 64 [ 130.947649][ T5832] wacom 0003:056A:033D.0007: Unknown device_type for 'HID 056a:033d'. Assuming pen. [ 130.997014][ T5832] wacom 0003:056A:033D.0007: hidraw0: USB HID v0.00 Device [HID 056a:033d] on usb-dummy_hcd.0-1/input0 [ 131.060136][ T5832] input: Wacom Intuos P M 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:033D.0007/input/input8 [ 131.159194][ T5832] usb 1-1: USB disconnect, device number 3 [ 131.303454][ T6735] fido_id[6735]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 131.504818][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 131.654789][ T5863] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 131.664105][ T6740] loop3: detected capacity change from 0 to 40427 [ 131.676680][ T6740] F2FS-fs (loop3): heap/no_heap options were deprecated [ 131.684989][ T6740] F2FS-fs (loop3): Image doesn't support compression [ 131.692236][ T6740] F2FS-fs (loop3): heap/no_heap options were deprecated [ 131.719023][ T6740] F2FS-fs (loop3): invalid crc value [ 131.721704][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 131.737483][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.740762][ T6740] F2FS-fs (loop3): Found nat_bits in checkpoint [ 131.755715][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 131.765665][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.777583][ T9] usb 2-1: config 0 descriptor?? [ 131.866346][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.889172][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.923190][ T5863] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 131.953201][ T6740] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 131.961984][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.997506][ T5863] usb 3-1: config 0 descriptor?? [ 132.156986][ T5802] syz-executor: attempt to access beyond end of device [ 132.156986][ T5802] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 132.173064][ T5802] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 132.222049][ T9] kye 0003:0458:5005.0008: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 132.236576][ T9] kye 0003:0458:5005.0008: unknown main item tag 0x2 [ 132.280255][ T9] kye 0003:0458:5005.0008: hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.1-1/input0 [ 132.312007][ T9] kye 0003:0458:5005.0008: tablet-enabling feature report not found [ 132.344354][ T9] kye 0003:0458:5005.0008: tablet enabling failed [ 132.436735][ T5863] hid (null): report_id 393985501 is invalid [ 132.466949][ T5863] macally 0003:060B:0001.0009: report_id 393985501 is invalid [ 132.471740][ T9] usb 2-1: USB disconnect, device number 3 [ 132.496391][ T5863] macally 0003:060B:0001.0009: item 0 4 1 8 parsing failed [ 132.517887][ T5863] macally: probe of 0003:060B:0001.0009 failed with error -22 [ 132.701279][ T787] usb 3-1: USB disconnect, device number 3 [ 132.979452][ T6752] loop0: detected capacity change from 0 to 32768 [ 133.028930][ T6752] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 133.150065][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.159193][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.271309][ T6752] XFS (loop0): Ending clean mount [ 133.286023][ T6752] XFS (loop0): Quotacheck needed: Please wait. [ 133.404396][ T6752] XFS (loop0): Quotacheck: Done. [ 133.475036][ T6773] loop2: detected capacity change from 0 to 16 [ 133.529040][ T6773] erofs: (device loop2): mounted with root inode @ nid 36. [ 133.570312][ T5789] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 133.648197][ T6773] syz.2.337: attempt to access beyond end of device [ 133.648197][ T6773] loop2: rw=524288, sector=48, nr_sectors = 976 limit=16 [ 133.663791][ T6773] syz.2.337: attempt to access beyond end of device [ 133.663791][ T6773] loop2: rw=524288, sector=0, nr_sectors = 1024 limit=16 [ 133.702789][ T6773] syz.2.337: attempt to access beyond end of device [ 133.702789][ T6773] loop2: rw=524288, sector=0, nr_sectors = 560 limit=16 [ 134.207106][ T6786] loop2: detected capacity change from 0 to 4096 [ 134.223583][ T6786] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 134.368239][ T6786] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 134.601566][ T5797] ntfs3: loop2: ino=1a, ntfs_sync_fs failed, -22. [ 134.617659][ T6793] loop0: detected capacity change from 0 to 128 [ 134.628289][ T6779] loop3: detected capacity change from 0 to 32768 [ 134.709958][ T6793] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 134.795120][ T6779] JBD2: Ignoring recovery information on journal [ 134.853116][ T28] audit: type=1800 audit(1763639896.431:4): pid=6793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.346" name="file2" dev="loop0" ino=95 res=0 errno=0 [ 134.941779][ T6793] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 134.991337][ T6779] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 135.333807][ T5802] ocfs2: Unmounting device (7,3) on (node local) [ 135.481131][ T6813] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.617061][ T6817] netlink: 'syz.2.357': attribute type 4 has an invalid length. [ 135.705668][ T6818] netlink: 'syz.2.357': attribute type 4 has an invalid length. [ 135.803090][ T6818] syz.2.357 (6818) used greatest stack depth: 20648 bytes left [ 136.083473][ T6825] loop3: detected capacity change from 0 to 8192 [ 136.094216][ T6825] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 136.114578][ T6825] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 136.145628][ T6825] REISERFS (device loop3): using ordered data mode [ 136.152251][ T6825] reiserfs: using flush barriers [ 136.168663][ T6825] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 136.207764][ T6825] REISERFS (device loop3): checking transaction log (loop3) [ 136.266868][ T6825] REISERFS (device loop3): Using r5 hash to sort names [ 136.368595][ T6825] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 136.403747][ T6825] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 136.658276][ T6840] loop0: detected capacity change from 0 to 4096 [ 136.709514][ T6849] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.926879][ T6848] loop1: detected capacity change from 0 to 4096 [ 136.962545][ T6848] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 137.155966][ T6848] ntfs: volume version 3.1. [ 137.650619][ T6867] loop0: detected capacity change from 0 to 512 [ 137.697352][ T6865] loop2: detected capacity change from 0 to 4096 [ 137.754362][ T6865] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 137.769118][ T6867] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 137.785167][ T6867] System zones: 0-2 [ 137.785195][ T6865] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 137.803309][ T6867] , 18-18, 34-34 [ 137.806788][ T6865] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 137.880420][ T6867] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #3: comm syz.0.380: corrupted inode contents [ 137.904185][ T6865] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 137.966310][ T6865] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 137.986398][ T6867] EXT4-fs error (device loop0): ext4_dirty_inode:6120: inode #3: comm syz.0.380: mark_inode_dirty error [ 138.019537][ T6867] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #3: comm syz.0.380: corrupted inode contents [ 138.033780][ T6865] ntfs: volume version 3.1. [ 138.041198][ T6867] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.380: mark_inode_dirty error [ 138.041404][ T6865] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 138.085264][ T6867] Quota error (device loop0): write_blk: dquota write failed [ 138.092885][ T6867] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 138.098652][ T6865] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 138.115449][ T6867] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.380: Failed to acquire dquot type 0 [ 138.154024][ T6867] EXT4-fs (loop0): 1 orphan inode deleted [ 138.187328][ T6867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.211251][ T3450] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u4:9: Failed to release dquot type 1 [ 138.264067][ T6867] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.358631][ T6863] loop3: detected capacity change from 0 to 32768 [ 138.427192][ T6863] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 138.450516][ T6867] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 138.658226][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.722823][ T6863] XFS (loop3): Ending clean mount [ 138.802581][ T6863] XFS (loop3): Quotacheck needed: Please wait. [ 138.901055][ T6890] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.384'. [ 138.922811][ T6890] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 138.946698][ T6863] XFS (loop3): Quotacheck: Done. [ 139.149084][ T6895] loop1: detected capacity change from 0 to 256 [ 139.183477][ T6895] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 139.211944][ T6895] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 139.240890][ T5802] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 139.348765][ T6895] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 139.844772][ T787] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 140.037772][ T787] usb 1-1: too many endpoints for config 0 interface 0 altsetting 7: 253, using maximum allowed: 30 [ 140.037819][ T787] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.037843][ T787] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 140.037870][ T787] usb 1-1: config 0 interface 0 has no altsetting 0 [ 140.037906][ T787] usb 1-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 140.037930][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.055469][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 140.056976][ T787] usb 1-1: config 0 descriptor?? [ 140.281077][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.304406][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.316274][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.329988][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.342262][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.367529][ T9] usb 4-1: config 0 descriptor?? [ 140.553813][ T787] wacom 0003:056A:0003.000A: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 140.586423][ T787] wacom 0003:056A:0003.000A: hidraw0: USB HID v0.04 Device [HID 056a:0003] on usb-dummy_hcd.0-1/input0 [ 140.617185][ T6925] loop1: detected capacity change from 0 to 8 [ 140.621711][ T787] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0003.000A/input/input11 [ 140.788482][ T6925] SQUASHFS error: lzo decompression failed, data probably corrupt [ 140.797196][ T9] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x6 [ 140.797236][ T9] plantronics 0003:047F:FFFF.000B: unbalanced collection at end of report description [ 140.798070][ T9] plantronics 0003:047F:FFFF.000B: parse failed [ 140.864616][ T6925] SQUASHFS error: Failed to read block 0x71: -5 [ 140.872015][ T6925] SQUASHFS error: lzo decompression failed, data probably corrupt [ 140.889437][ T787] usb 1-1: USB disconnect, device number 4 [ 140.907384][ T9] plantronics: probe of 0003:047F:FFFF.000B failed with error -22 [ 140.929642][ T6925] SQUASHFS error: Failed to read block 0x71: -5 [ 141.038810][ T27] usb 4-1: USB disconnect, device number 5 [ 141.474421][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 141.588387][ T6939] loop0: detected capacity change from 0 to 256 [ 141.599763][ T6939] exfat: Deprecated parameter 'namecase' [ 141.632733][ T6939] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 141.675333][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 141.687680][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.706996][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.734602][ T8] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 141.760906][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.795518][ T6941] loop3: detected capacity change from 0 to 128 [ 141.813575][ T8] usb 2-1: config 0 descriptor?? [ 141.850551][ T6941] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 141.912908][ T6945] loop0: detected capacity change from 0 to 256 [ 141.927035][ T6945] exfat: Deprecated parameter 'utf8' [ 141.964870][ T6945] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 142.120977][ T1139] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 142.251410][ T6949] loop0: detected capacity change from 0 to 64 [ 142.281811][ T8] hid-picolcd 0003:04D8:F002.000C: unknown main item tag 0x0 [ 142.347539][ T6949] syz.0.413: attempt to access beyond end of device [ 142.347539][ T6949] loop0: rw=2049, sector=78, nr_sectors = 88 limit=64 [ 142.398131][ T8] hid-picolcd 0003:04D8:F002.000C: No report with id 0xf3 found [ 142.418594][ T8] hid-picolcd 0003:04D8:F002.000C: No report with id 0xf4 found [ 142.505495][ T1135] kworker/u4:6: attempt to access beyond end of device [ 142.505495][ T1135] loop0: rw=1, sector=65, nr_sectors = 1 limit=64 [ 142.531480][ T8] usb 2-1: USB disconnect, device number 4 [ 142.550921][ T6951] loop3: detected capacity change from 0 to 8192 [ 142.555864][ T1135] Buffer I/O error on dev loop0, logical block 65, lost async page write [ 142.578819][ T1135] kworker/u4:6: attempt to access beyond end of device [ 142.578819][ T1135] loop0: rw=1, sector=66, nr_sectors = 1 limit=64 [ 142.601214][ T6951] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 142.650068][ T1135] Buffer I/O error on dev loop0, logical block 66, lost async page write [ 142.662680][ T6951] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 142.683299][ T1135] kworker/u4:6: attempt to access beyond end of device [ 142.683299][ T1135] loop0: rw=1, sector=67, nr_sectors = 1 limit=64 [ 142.700186][ T6951] REISERFS (device loop3): using ordered data mode [ 142.710568][ T6951] reiserfs: using flush barriers [ 142.720232][ T6951] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 142.742947][ T6951] REISERFS (device loop3): checking transaction log (loop3) [ 142.744722][ T1135] Buffer I/O error on dev loop0, logical block 67, lost async page write [ 142.770060][ T6951] REISERFS (device loop3): Using r5 hash to sort names [ 142.780340][ T1135] kworker/u4:6: attempt to access beyond end of device [ 142.780340][ T1135] loop0: rw=1, sector=68, nr_sectors = 1 limit=64 [ 142.786818][ T6951] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 142.837774][ T1135] Buffer I/O error on dev loop0, logical block 68, lost async page write [ 142.853792][ T6947] loop2: detected capacity change from 0 to 32768 [ 142.877705][ T1135] kworker/u4:6: attempt to access beyond end of device [ 142.877705][ T1135] loop0: rw=1, sector=72, nr_sectors = 1 limit=64 [ 142.900619][ T6947] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.411 (6947) [ 142.915848][ T1135] Buffer I/O error on dev loop0, logical block 72, lost async page write [ 142.931957][ T1135] kworker/u4:6: attempt to access beyond end of device [ 142.931957][ T1135] loop0: rw=1, sector=73, nr_sectors = 1 limit=64 [ 142.945763][ T1135] Buffer I/O error on dev loop0, logical block 73, lost async page write [ 142.954260][ T1135] kworker/u4:6: attempt to access beyond end of device [ 142.954260][ T1135] loop0: rw=1, sector=76, nr_sectors = 1 limit=64 [ 142.966515][ T6947] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 142.968367][ T1135] Buffer I/O error on dev loop0, logical block 76, lost async page write [ 142.997587][ T1135] kworker/u4:6: attempt to access beyond end of device [ 142.997587][ T1135] loop0: rw=1, sector=77, nr_sectors = 1 limit=64 [ 143.011530][ T6947] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 143.014986][ T1135] Buffer I/O error on dev loop0, logical block 77, lost async page write [ 143.079850][ T6947] BTRFS info (device loop2): disabling free space tree [ 143.102713][ T6947] BTRFS info (device loop2): turning on flush-on-commit [ 143.137493][ T6947] BTRFS info (device loop2): enabling auto defrag [ 143.144016][ T6947] BTRFS info (device loop2): force clearing of disk cache [ 143.194978][ T6947] BTRFS info (device loop2): setting nodatacow, compression disabled [ 143.203391][ T6947] BTRFS info (device loop2): turning on async discard [ 143.420858][ T6947] BTRFS info (device loop2): enabling ssd optimizations [ 143.544929][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 143.755725][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 143.762824][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.786892][ T5797] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 143.802621][ T27] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 143.835650][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.866294][ T27] usb 4-1: config 0 descriptor?? [ 143.906454][ T27] hub 4-1:0.0: bad descriptor, ignoring hub [ 143.921897][ T27] hub: probe of 4-1:0.0 failed with error -5 [ 144.078764][ T6986] loop0: detected capacity change from 0 to 128 [ 144.114908][ T6986] EXT4-fs (loop0): Test dummy encryption mode enabled [ 144.164902][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.423'. [ 144.190182][ T6986] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.330924][ T6986] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 144.528163][ T27] usb 4-1: reset high-speed USB device number 6 using dummy_hcd [ 144.867089][ T6986] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 144.887578][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 144.887593][ T28] audit: type=1800 audit(1763639906.471:13): pid=6986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.422" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 144.922794][ T7010] loop2: detected capacity change from 0 to 64 [ 144.947364][ T7007] loop1: detected capacity change from 0 to 4096 [ 144.991806][ T7007] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 145.068797][ T5789] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.175199][ T27] usb 4-1: USB disconnect, device number 6 [ 145.504894][ T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 145.696929][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.718861][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.728078][ T7031] loop2: detected capacity change from 0 to 128 [ 145.744911][ T27] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 145.775742][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.788275][ T27] usb 1-1: config 0 descriptor?? [ 145.810207][ T9] Process accounting resumed [ 145.918067][ T28] audit: type=1326 audit(1763639907.501:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7032 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb239b8f749 code=0x7ffc0000 [ 145.978266][ T28] audit: type=1326 audit(1763639907.541:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7032 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb239b8f749 code=0x7ffc0000 [ 146.005719][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 146.022000][ T28] audit: type=1326 audit(1763639907.551:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7032 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fb239b8f749 code=0x7ffc0000 [ 146.051095][ T28] audit: type=1326 audit(1763639907.551:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7032 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb239b8f749 code=0x7ffc0000 [ 146.082582][ T28] audit: type=1326 audit(1763639907.551:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7032 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb239b8f749 code=0x7ffc0000 [ 146.135420][ T28] audit: type=1326 audit(1763639907.591:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7032 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fb239b8f749 code=0x7ffc0000 [ 146.200388][ T28] audit: type=1326 audit(1763639907.591:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7032 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb239b8f749 code=0x7ffc0000 [ 146.224685][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 146.241594][ T27] cypress 0003:04B4:DE61.000D: unknown main item tag 0x0 [ 146.260822][ T27] cypress 0003:04B4:DE61.000D: unknown main item tag 0x0 [ 146.261229][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 146.276258][ T28] audit: type=1326 audit(1763639907.591:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7032 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb239b8f749 code=0x7ffc0000 [ 146.311153][ T8] usb 4-1: too many endpoints for config 4 interface 0 altsetting 102: 65, using maximum allowed: 30 [ 146.312236][ T27] cypress 0003:04B4:DE61.000D: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.0-1/input0 [ 146.323401][ T8] usb 4-1: config 4 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 146.370196][ T8] usb 4-1: config 4 interface 0 has no altsetting 0 [ 146.386162][ T8] usb 4-1: string descriptor 0 read error: -22 [ 146.392544][ T8] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 146.414920][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.438969][ T8] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 146.514173][ T8] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 146.545998][ T8] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 146.546236][ T5863] usb 1-1: USB disconnect, device number 5 [ 146.553517][ T8] usb 4-1: media controller created [ 146.610090][ T7042] fido_id[7042]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 146.694795][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 146.752051][ T8] zl10353_read_register: readreg error (reg=127, ret==0) [ 146.891628][ T8] usb 4-1: USB disconnect, device number 7 [ 147.262576][ T7046] loop1: detected capacity change from 0 to 32768 [ 147.381247][ T7046] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 147.612776][ T7046] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 147.630252][ T7048] loop2: detected capacity change from 0 to 32768 [ 147.681594][ T7046] XFS (loop1): Starting recovery (logdev: internal) [ 147.748275][ T7046] XFS (loop1): Ending recovery (logdev: internal) [ 147.805514][ T7057] loop0: detected capacity change from 0 to 32768 [ 147.891590][ T7057] JBD2: Ignoring recovery information on journal [ 148.057156][ T5793] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 148.107266][ T7057] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 148.261511][ T7057] (syz.0.448,7057,1):ocfs2_group_extend:306 ERROR: The disk is too old and small. Force to do offline resize. [ 148.409350][ T5789] ocfs2: Unmounting device (7,0) on (node local) [ 148.569025][ T7062] loop3: detected capacity change from 0 to 32768 [ 148.645639][ T7071] loop2: detected capacity change from 0 to 512 [ 148.666268][ T7071] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 148.699762][ T7062] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 148.731546][ T7071] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 148.788029][ T7071] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 148.814400][ T7071] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 148.858708][ T7071] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 148.909949][ T7071] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=a040e01c, mo2=0000] [ 149.006270][ T7062] XFS (loop3): Ending clean mount [ 149.015162][ T7071] EXT4-fs (loop2): failed to initialize system zone (-117) [ 149.022547][ T7071] EXT4-fs (loop2): mount failed [ 149.309007][ T7081] loop0: detected capacity change from 0 to 256 [ 149.375634][ T5802] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 149.692328][ T7089] loop2: detected capacity change from 0 to 256 [ 150.091983][ T7100] loop2: detected capacity change from 0 to 1024 [ 150.118087][ T7100] EXT4-fs: Ignoring removed i_version option [ 150.124769][ T7100] EXT4-fs: Ignoring removed nobh option [ 150.130671][ T7100] EXT4-fs: inline encryption not supported [ 150.146907][ T7100] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 150.223642][ T7100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.342828][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.568922][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 150.798203][ T8] usb 1-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 150.816589][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 150.840552][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.872307][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.898250][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.924392][ T8] usb 1-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 150.943198][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.985807][ T8] usb 1-1: config 0 descriptor?? [ 151.372983][ T7130] loop2: detected capacity change from 0 to 512 [ 151.378109][ T7129] loop1: detected capacity change from 0 to 256 [ 151.451943][ T8] input: HID 28bd:0909 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0909.000E/input/input14 [ 151.483435][ T7129] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 151.620992][ T8] uclogic 0003:28BD:0909.000E: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.0-1/input0 [ 151.682983][ T7130] EXT4-fs (loop2): Test dummy encryption mode enabled [ 151.712303][ T8] usb 1-1: USB disconnect, device number 6 [ 151.750038][ T7130] EXT4-fs error (device loop2): __ext4_iget:5067: inode #11: block 1: comm syz.2.475: invalid block [ 151.792687][ T7130] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.475: couldn't read orphan inode 11 (err -117) [ 151.823398][ T7136] fido_id[7136]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 151.861928][ T7130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.029828][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.190524][ T1139] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 152.490243][ T7153] loop1: detected capacity change from 0 to 64 [ 152.569000][ T7155] loop0: detected capacity change from 0 to 256 [ 153.279542][ T7176] loop3: detected capacity change from 0 to 256 [ 153.295748][ T8] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 153.339659][ T7176] FAT-fs (loop3): Directory bread(block 64) failed [ 153.347036][ T7176] FAT-fs (loop3): Directory bread(block 65) failed [ 153.353840][ T7176] FAT-fs (loop3): Directory bread(block 66) failed [ 153.378953][ T7176] FAT-fs (loop3): Directory bread(block 67) failed [ 153.387588][ T7176] FAT-fs (loop3): Directory bread(block 68) failed [ 153.394361][ T7176] FAT-fs (loop3): Directory bread(block 69) failed [ 153.401087][ T7176] FAT-fs (loop3): Directory bread(block 70) failed [ 153.407981][ T7176] FAT-fs (loop3): Directory bread(block 71) failed [ 153.415626][ T7176] FAT-fs (loop3): Directory bread(block 72) failed [ 153.423031][ T7176] FAT-fs (loop3): Directory bread(block 73) failed [ 153.434785][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 153.509090][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.519622][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 153.532767][ T8] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 153.542763][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.556583][ T8] usb 3-1: config 0 descriptor?? [ 153.575213][ T8] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 153.599635][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 153.626490][ T8] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 153.646791][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.668866][ T8] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 153.678352][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.694860][ T8] usb 3-1: media controller created [ 153.704162][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.713069][ T9] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 153.722430][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.725138][ T28] audit: type=1326 audit(1763639915.301:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7162 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbf78f749 code=0x7fc00000 [ 153.744219][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 153.776922][ T28] audit: type=1326 audit(1763639915.301:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7162 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbcbf78f749 code=0x7fc00000 [ 153.799703][ T9] usb 2-1: config 0 descriptor?? [ 153.807006][ T28] audit: type=1326 audit(1763639915.301:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7162 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbf78f749 code=0x7fc00000 [ 153.830604][ T7168] dvb-usb: bulk message failed: -22 (2/0) [ 153.837903][ T8] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 153.847342][ T28] audit: type=1326 audit(1763639915.301:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7162 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbf78f749 code=0x7fc00000 [ 153.874028][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 153.948042][ T8] dvb-usb: schedule remote query interval to 150 msecs. [ 153.956384][ T28] audit: type=1326 audit(1763639915.301:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7162 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbf78f749 code=0x7fc00000 [ 153.975704][ T8] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 154.041766][ T28] audit: type=1326 audit(1763639915.301:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7162 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbf78f749 code=0x7fc00000 [ 154.049552][ T8] usb 3-1: USB disconnect, device number 4 [ 154.100762][ T28] audit: type=1326 audit(1763639915.301:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7162 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbf78f749 code=0x7fc00000 [ 154.201382][ T8] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 154.290992][ T9] aquacomputer_d5next 0003:0C70:F00D.000F: hidraw0: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.1-1/input0 [ 154.470673][ T7188] program syz.3.499 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.522449][ T8] usb 2-1: USB disconnect, device number 5 [ 154.841815][ T7181] loop0: detected capacity change from 0 to 32768 [ 154.906823][ T7181] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 155.187198][ T5789] ocfs2: Unmounting device (7,0) on (node local) [ 155.847672][ T7216] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 155.866966][ T7216] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 155.894463][ T7216] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 155.914686][ T7216] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 156.012918][ T7202] loop2: detected capacity change from 0 to 32768 [ 156.074204][ T7202] (syz.2.505,7202,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 156.113696][ T7202] (syz.2.505,7202,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 156.172518][ T7202] JBD2: Ignoring recovery information on journal [ 156.290477][ T7202] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 156.362684][ T7214] loop0: detected capacity change from 0 to 32768 [ 156.405039][ T7226] netlink: 16 bytes leftover after parsing attributes in process `syz.3.516'. [ 156.555071][ T7214] overlayfs: upper fs needs to support d_type. [ 156.565821][ T7214] overlayfs: upper fs does not support tmpfile. [ 156.589585][ T7214] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 156.630483][ T7214] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 156.630483][ T7214] [ 156.633098][ T5797] ocfs2: Unmounting device (7,2) on (node local) [ 156.720570][ T7214] ERROR: (device loop0): remounting filesystem as read-only [ 156.742349][ T7214] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null. [ 157.162389][ T7222] loop1: detected capacity change from 0 to 32768 [ 157.255532][ T7222] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 157.362825][ T7222] XFS (loop1): Ending clean mount [ 157.399456][ T7246] loop3: detected capacity change from 0 to 64 [ 157.599014][ T5793] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 157.707590][ T7250] loop2: detected capacity change from 0 to 256 [ 157.790752][ T7250] exfat: Deprecated parameter 'utf8' [ 157.827869][ T7254] loop3: detected capacity change from 0 to 512 [ 157.845671][ T7250] exfat: Deprecated parameter 'utf8' [ 157.857844][ T7254] EXT4-fs: Ignoring removed oldalloc option [ 157.908515][ T7250] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 158.012341][ T7254] EXT4-fs (loop3): 1 truncate cleaned up [ 158.049646][ T7254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.588858][ T5802] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.782846][ T7280] loop0: detected capacity change from 0 to 256 [ 159.023196][ T7286] Bluetooth: MGMT ver 1.22 [ 159.178415][ T7290] team0: Device vlan2 is already an upper device of the team interface [ 159.537188][ T7300] loop3: detected capacity change from 0 to 1024 [ 159.739631][ T7305] loop2: detected capacity change from 0 to 512 [ 159.790734][ T7305] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 159.805124][ T7305] EXT4-fs (loop2): mount failed [ 159.893415][ T7307] loop1: detected capacity change from 0 to 4096 [ 159.958850][ T7307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.127857][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.235721][ T7318] loop3: detected capacity change from 0 to 1024 [ 160.319098][ T7318] hfsplus: bad catalog entry type [ 160.901414][ T7340] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 161.036058][ T7346] loop3: detected capacity change from 0 to 256 [ 161.066505][ T7346] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 161.463883][ T7360] loop3: detected capacity change from 0 to 128 [ 161.504201][ T7360] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 161.525834][ T7356] bridge1: entered promiscuous mode [ 161.538352][ T7356] bridge1: entered allmulticast mode [ 161.547944][ T7360] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.595358][ T27] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 161.606967][ T7356] team0: Port device bridge1 added [ 161.618823][ T7366] loop1: detected capacity change from 0 to 512 [ 161.669580][ T7366] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2822: inode #11: comm syz.1.576: corrupted xattr block 95: invalid header [ 161.724360][ T7366] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2872: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 161.743007][ T7366] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.576: bg 0: block 7: invalid block bitmap [ 161.746625][ T5802] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.769143][ T7366] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 161.786007][ T7366] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2988: inode #11: comm syz.1.576: corrupted xattr block 95: invalid header [ 161.800322][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 161.808668][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.822189][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.832902][ T7366] EXT4-fs warning (device loop1): ext4_evict_inode:272: xattr delete (err -117) [ 161.844115][ T7366] EXT4-fs (loop1): 1 orphan inode deleted [ 161.845140][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.851041][ T27] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 161.885001][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.903069][ T7366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.937693][ T27] usb 3-1: config 0 descriptor?? [ 162.148087][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.378494][ T27] steelseries 0003:1038:1410.0010: ignoring exceeding usage max [ 162.407829][ T27] steelseries 0003:1038:1410.0010: missing HID_OUTPUT_REPORT 0 [ 162.631989][ T27] usb 3-1: USB disconnect, device number 5 [ 162.978593][ T27] IPVS: starting estimator thread 0... [ 162.987076][ T7400] loop1: detected capacity change from 0 to 2048 [ 163.023020][ T7400] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.091868][ T7401] IPVS: using max 17 ests per chain, 40800 per kthread [ 163.222591][ T7405] netlink: zone id is out of range [ 163.916460][ T7426] pimreg: entered allmulticast mode [ 163.960793][ T7426] pimreg: left allmulticast mode [ 164.017020][ T7428] loop0: detected capacity change from 0 to 1024 [ 164.062221][ T7428] hfsplus: bad catalog entry type [ 164.344569][ T5103] Bluetooth: hci3: command tx timeout [ 164.462594][ T7418] loop2: detected capacity change from 0 to 32768 [ 164.557364][ T7418] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.598 (7418) [ 164.633374][ T7418] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 164.657558][ T7418] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 164.679885][ T7418] BTRFS info (device loop2): using free space tree [ 164.753563][ T7418] BTRFS info (device loop2): enabling ssd optimizations [ 164.779216][ T7418] BTRFS info (device loop2): auto enabling async discard [ 165.095149][ T5797] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 165.986256][ T7489] loop3: detected capacity change from 0 to 1024 [ 166.011113][ T7491] loop2: detected capacity change from 0 to 512 [ 166.044488][ T7491] EXT4-fs: inline encryption not supported [ 166.056950][ T7491] EXT4-fs: Ignoring removed mblk_io_submit option [ 166.086904][ T7489] hfsplus: walked past end of dir [ 166.099137][ T7491] EXT4-fs (loop2): Test dummy encryption mode enabled [ 166.154910][ T7491] EXT4-fs (loop2): orphan cleanup on readonly fs [ 166.194027][ T7491] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.626: inode #13: comm syz.2.626: iget: illegal inode # [ 166.251726][ T7498] loop0: detected capacity change from 0 to 512 [ 166.269478][ T7491] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.626: couldn't read orphan inode 13 (err -117) [ 166.318740][ T7491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 166.325383][ T7498] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.509088][ T7506] sp0: Synchronizing with TNC [ 166.545425][ T7498] EXT4-fs error (device loop0): ext4_readdir:223: inode #12: comm syz.0.629: path /154/file0/file0: directory fails checksum at offset 0 [ 166.586146][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.765920][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.004537][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.637'. [ 167.105172][ T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 167.191550][ T7526] loop2: detected capacity change from 0 to 512 [ 167.209135][ T7526] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 167.224643][ T7526] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 167.282944][ T7526] EXT4-fs (loop2): 1 truncate cleaned up [ 167.287267][ T7526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.315007][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 167.317078][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 167.317127][ T27] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 167.317152][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.346163][ T27] usb 2-1: config 0 descriptor?? [ 167.352094][ T27] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input16 [ 167.510405][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.566233][ T5143] bcm5974 2-1:0.0: could not read from device [ 167.610538][ T27] bcm5974 2-1:0.0: could not read from device [ 167.615164][ T5103] Bluetooth: hci3: command tx timeout [ 167.624955][ T5143] bcm5974 2-1:0.0: could not read from device [ 167.645297][ T27] input: failed to attach handler mousedev to device input16, error: -5 [ 167.660885][ T5143] bcm5974 2-1:0.0: could not read from device [ 167.663199][ T27] usb 2-1: USB disconnect, device number 6 [ 168.005051][ T7531] loop3: detected capacity change from 0 to 32768 [ 168.081010][ T7531] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 168.302892][ T7531] XFS (loop3): Ending clean mount [ 168.345520][ T7531] XFS (loop3): Quotacheck needed: Please wait. [ 168.366867][ T7533] loop2: detected capacity change from 0 to 40427 [ 168.398592][ T7533] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 168.426881][ T7533] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 168.510575][ T7531] XFS (loop3): Quotacheck: Done. [ 168.582526][ T7533] F2FS-fs (loop2): Found nat_bits in checkpoint [ 168.652711][ T5802] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 168.931592][ T7533] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 168.955239][ T7533] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 168.963186][ T7559] loop3: detected capacity change from 0 to 16 [ 169.054020][ T7559] erofs: (device loop3): mounted with root inode @ nid 36. [ 169.140403][ T28] audit: type=1800 audit(1763639930.721:29): pid=7559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.650" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 169.227151][ T28] audit: type=1800 audit(1763639930.761:30): pid=7533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.644" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 169.327854][ T5797] syz-executor: attempt to access beyond end of device [ 169.327854][ T5797] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 169.368858][ T5797] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 170.209218][ T7581] loop1: detected capacity change from 0 to 256 [ 170.339903][ T7581] FAT-fs (loop1): Directory bread(block 64) failed [ 170.354556][ T7581] FAT-fs (loop1): Directory bread(block 65) failed [ 170.369739][ T7583] loop0: detected capacity change from 0 to 164 [ 170.384670][ T7581] FAT-fs (loop1): Directory bread(block 66) failed [ 170.394996][ T7581] FAT-fs (loop1): Directory bread(block 67) failed [ 170.401786][ T7581] FAT-fs (loop1): Directory bread(block 68) failed [ 170.433629][ T7581] FAT-fs (loop1): Directory bread(block 69) failed [ 170.455509][ T7581] FAT-fs (loop1): Directory bread(block 70) failed [ 170.462446][ T7581] FAT-fs (loop1): Directory bread(block 71) failed [ 170.469796][ T7583] rock: directory entry would overflow storage [ 170.479408][ T7583] rock: sig=0x66, size=4, remaining=3 [ 170.486008][ T7581] FAT-fs (loop1): Directory bread(block 72) failed [ 170.503461][ T7581] FAT-fs (loop1): Directory bread(block 73) failed [ 171.018537][ T7597] loop0: detected capacity change from 0 to 1024 [ 171.239375][ T1139] hfsplus: b-tree write err: -5, ino 4 [ 171.518299][ T7591] mmap: syz.2.667 (7591) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 171.649846][ T7616] loop0: detected capacity change from 0 to 8 [ 171.709835][ T7616] process 'syz.0.678' launched './file1' with NULL argv: empty string added [ 171.722673][ T7616] SQUASHFS error: zstd decompression error: 10 [ 171.751598][ T7616] SQUASHFS error: zstd decompression failed, data probably corrupt [ 171.784242][ T7616] SQUASHFS error: Failed to read block 0x60: -5 [ 171.803776][ T7616] SQUASHFS error: zstd decompression error: 10 [ 171.815098][ T7616] SQUASHFS error: zstd decompression failed, data probably corrupt [ 171.830755][ T7616] SQUASHFS error: Failed to read block 0x60: -5 [ 172.000700][ T7624] genirq: Flags mismatch irq 31. 00000000 (comedi_parport) vs. 00000000 (virtio1-input.0) [ 172.222504][ T7626] loop0: detected capacity change from 0 to 8192 [ 172.983731][ T1135] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.168674][ T1135] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.274463][ T7634] loop2: detected capacity change from 0 to 32768 [ 173.307621][ T1135] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.330746][ T7634] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 173.330746][ T7634] [ 173.351958][ T7634] ERROR: (device loop2): remounting filesystem as read-only [ 173.475416][ T1135] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.584617][ T7652] netlink: 40 bytes leftover after parsing attributes in process `syz.2.698'. [ 173.774526][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 173.878781][ T28] audit: type=1326 audit(1763639935.451:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6138f749 code=0x7ffc0000 [ 173.946526][ T7656] loop0: detected capacity change from 0 to 512 [ 173.961683][ T28] audit: type=1326 audit(1763639935.451:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6138f749 code=0x7ffc0000 [ 173.974487][ T7656] EXT4-fs: inline encryption not supported [ 174.024999][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 174.054054][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 109: 65, using maximum allowed: 30 [ 174.101840][ T9] usb 4-1: config 0 interface 0 altsetting 109 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.103210][ T28] audit: type=1326 audit(1763639935.491:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f6138df90 code=0x7ffc0000 [ 174.138794][ T7656] EXT4-fs: Ignoring removed i_version option [ 174.149268][ T28] audit: type=1326 audit(1763639935.491:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f6138df90 code=0x7ffc0000 [ 174.194458][ T9] usb 4-1: config 0 interface 0 altsetting 109 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 174.246638][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 174.263702][ T9] usb 4-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 174.279318][ T7656] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.700: inode has both inline data and extents flags [ 174.283999][ T28] audit: type=1326 audit(1763639935.491:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6138f749 code=0x7ffc0000 [ 174.325679][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.346229][ T7656] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.700: couldn't read orphan inode 15 (err -117) [ 174.355236][ T28] audit: type=1326 audit(1763639935.491:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6138f749 code=0x7ffc0000 [ 174.366647][ T9] usb 4-1: config 0 descriptor?? [ 174.382946][ T7661] overlayfs: disabling nfs_export due to verity=on [ 174.405539][ T7656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.463166][ T7661] overlayfs: conflicting options: userxattr,redirect_dir=on [ 174.486348][ T28] audit: type=1326 audit(1763639935.511:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f8f6138f749 code=0x7ffc0000 [ 174.561426][ T28] audit: type=1326 audit(1763639935.511:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6138f749 code=0x7ffc0000 [ 174.631618][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.652784][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.670900][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.694827][ T28] audit: type=1326 audit(1763639935.511:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6138f749 code=0x7ffc0000 [ 174.752016][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.764054][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.781778][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 174.801581][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.875684][ T9] waltop 0003:172F:0500.0011: unknown main item tag 0x0 [ 174.897735][ T9] waltop 0003:172F:0500.0011: unknown main item tag 0x0 [ 174.906841][ T9] waltop 0003:172F:0500.0011: unknown main item tag 0x0 [ 174.913862][ T9] waltop 0003:172F:0500.0011: unknown main item tag 0x0 [ 174.923817][ T9] waltop 0003:172F:0500.0011: unknown main item tag 0x0 [ 174.945260][ T9] waltop 0003:172F:0500.0011: hidraw0: USB HID v0.05 Device [HID 172f:0500] on usb-dummy_hcd.3-1/input0 [ 175.161271][ T5863] usb 4-1: USB disconnect, device number 8 [ 175.579246][ T7690] loop2: detected capacity change from 0 to 64 [ 175.979559][ T7699] loop2: detected capacity change from 0 to 256 [ 176.095077][ T7699] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 176.235691][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.713'. [ 176.528140][ T7664] chnl_net:caif_netlink_parms(): no params data found [ 176.844387][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 176.894561][ T5103] Bluetooth: hci1: command tx timeout [ 177.016117][ T7664] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.030285][ T7664] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.046440][ T7664] bridge_slave_0: entered allmulticast mode [ 177.064542][ T7664] bridge_slave_0: entered promiscuous mode [ 177.110013][ T8] usb 3-1: config 0 has an invalid interface number: 95 but max is 0 [ 177.118888][ T8] usb 3-1: config 0 has no interface number 0 [ 177.135139][ T8] usb 3-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 177.147311][ T1135] hsr_slave_0: left promiscuous mode [ 177.154235][ T1135] hsr_slave_1: left promiscuous mode [ 177.164181][ T8] usb 3-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 177.164212][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.188304][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.213437][ T8] usb 3-1: Product: syz [ 177.219457][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.229436][ T7702] loop3: detected capacity change from 0 to 32768 [ 177.241640][ T8] usb 3-1: Manufacturer: syz [ 177.246574][ T8] usb 3-1: SerialNumber: syz [ 177.249028][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.255185][ T8] usb 3-1: config 0 descriptor?? [ 177.273328][ T7712] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 177.280091][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.316219][ T1135] bridge_slave_1: left allmulticast mode [ 177.321930][ T1135] bridge_slave_1: left promiscuous mode [ 177.357427][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.393089][ T7702] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 177.418519][ T1135] bridge_slave_0: left allmulticast mode [ 177.446815][ T1135] bridge_slave_0: left promiscuous mode [ 177.452794][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.510619][ T7702] XFS (loop3): Ending clean mount [ 177.563322][ T8] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 177.573820][ T1135] veth1_macvtap: left promiscuous mode [ 177.587131][ T8] usb 3-1: MIDIStreaming interface descriptor not found [ 177.597265][ T1135] veth0_macvtap: left promiscuous mode [ 177.620885][ T1135] veth1_vlan: left promiscuous mode [ 177.638334][ T1135] veth0_vlan: left promiscuous mode [ 177.726460][ T5802] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 177.776107][ T8] usb 3-1: USB disconnect, device number 6 [ 178.078558][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.887511][ T1135] team0 (unregistering): Port device team_slave_1 removed [ 178.942462][ T1135] team0 (unregistering): Port device team_slave_0 removed [ 178.986076][ T5103] Bluetooth: hci1: command tx timeout [ 179.005393][ T1135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.059959][ T1135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.619028][ T1135] bond0 (unregistering): Released all slaves [ 179.700746][ T7664] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.708032][ T7664] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.716002][ T7664] bridge_slave_1: entered allmulticast mode [ 179.723068][ T7664] bridge_slave_1: entered promiscuous mode [ 179.855826][ T7664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.913867][ T7664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.056584][ T7664] team0: Port device team_slave_0 added [ 180.097333][ T7664] team0: Port device team_slave_1 added [ 180.211302][ T7664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.241698][ T7664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.276813][ T7664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.294788][ T7664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.312008][ T7664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.349622][ T7664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.570718][ T7664] hsr_slave_0: entered promiscuous mode [ 180.609713][ T7664] hsr_slave_1: entered promiscuous mode [ 180.633321][ T7664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.692626][ T7664] Cannot create hsr debugfs directory [ 181.064444][ T5103] Bluetooth: hci1: command tx timeout [ 181.111601][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.738'. [ 181.262416][ T7797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.740'. [ 181.304790][ T7797] sch_tbf: peakrate 2 is lower than or equals to rate 8 ! [ 181.650956][ T7664] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 181.703402][ T7810] loop0: detected capacity change from 0 to 128 [ 181.713509][ T7664] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 181.750940][ T7664] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 181.769035][ T7810] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 181.843433][ T7664] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 181.860595][ T7810] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.880810][ T7813] loop3: detected capacity change from 0 to 1024 [ 182.132006][ T7822] hfsplus: xattr exists yet [ 182.335022][ T42] hfsplus: b-tree write err: -5, ino 4 [ 182.352721][ T7664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.394029][ T7664] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.466314][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.473540][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.524922][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.532541][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.136986][ T5103] Bluetooth: hci1: command tx timeout [ 183.218714][ T1135] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 183.337731][ T7664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.601120][ T7831] loop3: detected capacity change from 0 to 32768 [ 183.637950][ T7831] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.748 (7831) [ 183.745435][ T7831] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 183.782083][ T7831] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 183.796377][ T7831] BTRFS info (device loop3): turning on sync discard [ 183.803537][ T7831] BTRFS info (device loop3): setting nodatacow, compression disabled [ 183.831363][ T7831] BTRFS info (device loop3): turning off barriers [ 183.874887][ T7831] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 183.924492][ T7831] BTRFS info (device loop3): trying to use backup root at mount time [ 183.961403][ T7831] BTRFS info (device loop3): metadata ratio 32769 [ 183.985417][ T7831] BTRFS info (device loop3): max_inline at 0 [ 183.991483][ T7831] BTRFS info (device loop3): using free space tree [ 184.219567][ T1135] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 184.264903][ T7831] BTRFS error (device loop3): failed to load root extent [ 184.272050][ T7831] BTRFS warning (device loop3): try to load backup roots slot 1 [ 184.295583][ T3459] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 184.383079][ T7831] BTRFS warning (device loop3): couldn't read tree root [ 184.415080][ T7831] BTRFS warning (device loop3): try to load backup roots slot 2 [ 184.469446][ T42] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 184.496566][ T7831] BTRFS warning (device loop3): couldn't read tree root [ 184.503627][ T7831] BTRFS warning (device loop3): try to load backup roots slot 3 [ 184.572118][ T7831] BTRFS info (device loop3): enabling ssd optimizations [ 184.608937][ T7664] veth0_vlan: entered promiscuous mode [ 184.631584][ T7831] BTRFS info (device loop3): rebuilding free space tree [ 184.686358][ T7664] veth1_vlan: entered promiscuous mode [ 184.829413][ T7664] veth0_macvtap: entered promiscuous mode [ 184.841970][ T7870] loop0: detected capacity change from 0 to 32768 [ 184.855850][ T7664] veth1_macvtap: entered promiscuous mode [ 184.866758][ T7831] BTRFS info (device loop3): checking UUID tree [ 184.910666][ T7664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.954132][ T7664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.969021][ T7870] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 185.044150][ T7664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.094585][ T7664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.157158][ T7664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.204340][ T7664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.225687][ T7870] XFS (loop0): Ending clean mount [ 185.271174][ T7664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.296311][ T5802] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 185.348246][ T7664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.407162][ T7664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.464481][ T7664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.494658][ T7664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.520269][ T7664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.539376][ T7664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.576185][ T7664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.654487][ T7664] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.663270][ T7664] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.667410][ T5789] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 185.688051][ T7664] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.701274][ T7664] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.745075][ T7921] loop2: detected capacity change from 0 to 8192 [ 186.044206][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.074335][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.209463][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.240174][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.356745][ T7929] loop3: detected capacity change from 0 to 512 [ 186.364149][ T7929] EXT4-fs: Ignoring removed orlov option [ 186.446793][ T7929] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 186.506933][ T7929] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 186.593479][ T7929] EXT4-fs (loop3): 1 orphan inode deleted [ 186.647803][ T7929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.931133][ T5802] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.384505][ T7952] loop4: detected capacity change from 0 to 40427 [ 188.450525][ T7952] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 188.503572][ T7952] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 188.528417][ T7983] loop3: detected capacity change from 0 to 8192 [ 188.557219][ T7952] F2FS-fs (loop4): invalid crc value [ 188.565836][ T7983] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 188.585149][ T7983] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 188.629361][ T7983] REISERFS (device loop3): using journaled data mode [ 188.637314][ T7983] reiserfs: using flush barriers [ 188.654433][ T7983] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 188.688852][ T7952] F2FS-fs (loop4): Found nat_bits in checkpoint [ 188.695520][ T7983] REISERFS (device loop3): checking transaction log (loop3) [ 188.738418][ T7995] Zero length message leads to an empty skb [ 188.756385][ T7983] REISERFS (device loop3): Using r5 hash to sort names [ 188.793229][ T7983] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 188.876794][ T7983] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 188.975823][ T7952] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 188.982238][ T8003] loop2: detected capacity change from 0 to 128 [ 188.982915][ T7952] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 189.010684][ T8003] EXT4-fs: Ignoring removed nobh option [ 189.071686][ T8003] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.157642][ T8003] ext4 filesystem being mounted at /210/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 189.219702][ T8010] CUSE: unknown device info "€" [ 189.267334][ T8010] CUSE: unknown device info "" [ 189.289154][ T8010] CUSE: unknown device info "" [ 189.304970][ T8003] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 1073745927 (only 1 groups) [ 189.308952][ T8010] CUSE: unknown device info "" [ 189.359597][ T8010] CUSE: zero length info key specified [ 189.446512][ T5797] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.987219][ T8026] loop0: detected capacity change from 0 to 1024 [ 190.105250][ T8026] hfsplus: xattr searching failed [ 190.333073][ T8033] loop4: detected capacity change from 0 to 128 [ 190.376005][ T8033] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 190.403522][ T8037] loop3: detected capacity change from 0 to 512 [ 190.450345][ T8033] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.527955][ T8037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.564472][ T8037] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.564858][ T28] audit: type=1800 audit(1763639952.131:40): pid=8033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.792" name="file1" dev="loop4" ino=94 res=0 errno=0 [ 190.634734][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 190.817519][ T5802] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.856782][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 190.876736][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.924548][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.958927][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 191.002363][ T8] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 191.033494][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.077973][ T8] usb 3-1: config 0 descriptor?? [ 191.525956][ T8] microsoft 0003:045E:07DA.0012: ignoring exceeding usage max [ 191.552578][ T8] microsoft 0003:045E:07DA.0012: ignoring exceeding usage max [ 191.562971][ T8039] loop0: detected capacity change from 0 to 32768 [ 191.569586][ T8] microsoft 0003:045E:07DA.0012: usage index exceeded [ 191.583237][ T8064] loop3: detected capacity change from 0 to 256 [ 191.599397][ T8064] exfat: Deprecated parameter 'utf8' [ 191.601427][ T8] microsoft 0003:045E:07DA.0012: item 0 0 2 2 parsing failed [ 191.645343][ T8072] loop4: detected capacity change from 0 to 256 [ 191.651877][ T8064] exfat: Deprecated parameter 'utf8' [ 191.663443][ T8] microsoft 0003:045E:07DA.0012: parse failed [ 191.670043][ T8064] exfat: Deprecated parameter 'namecase' [ 191.682093][ T8039] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 191.692521][ T8] microsoft: probe of 0003:045E:07DA.0012 failed with error -22 [ 191.723500][ T8] usb 3-1: USB disconnect, device number 7 [ 191.758246][ T8072] FAT-fs (loop4): Directory bread(block 64) failed [ 191.783987][ T8064] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 191.796524][ T8072] FAT-fs (loop4): Directory bread(block 65) failed [ 191.803429][ T8072] FAT-fs (loop4): Directory bread(block 66) failed [ 191.832575][ T8072] FAT-fs (loop4): Directory bread(block 67) failed [ 191.854029][ T8072] FAT-fs (loop4): Directory bread(block 68) failed [ 191.879143][ T8072] FAT-fs (loop4): Directory bread(block 69) failed [ 191.900951][ T8039] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 191.932875][ T8072] FAT-fs (loop4): Directory bread(block 70) failed [ 191.943759][ T8072] FAT-fs (loop4): Directory bread(block 71) failed [ 191.970171][ T8072] FAT-fs (loop4): Directory bread(block 72) failed [ 191.990289][ T8072] FAT-fs (loop4): Directory bread(block 73) failed [ 192.006345][ T8039] XFS (loop0): Starting recovery (logdev: internal) [ 192.117529][ T8039] XFS (loop0): Ending recovery (logdev: internal) [ 192.156800][ T8039] XFS (loop0): Quotacheck needed: Please wait. [ 192.238542][ T8039] XFS (loop0): Quotacheck: Done. [ 192.490650][ T5789] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 192.774381][ T5832] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 192.986575][ T5832] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 193.014392][ T5832] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 193.035977][ T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 193.040120][ T5832] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 193.064875][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.096635][ T8088] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 193.112325][ T5832] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 193.224442][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 193.237860][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.268361][ T23] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 193.298298][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.325664][ T23] usb 4-1: config 0 descriptor?? [ 193.362374][ T8093] loop2: detected capacity change from 0 to 40427 [ 193.380991][ T8093] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 193.403418][ T8093] F2FS-fs (loop2): Image doesn't support compression [ 193.411115][ T8093] F2FS-fs (loop2): Image doesn't support compression [ 193.425369][ T8093] F2FS-fs (loop2): invalid crc value [ 193.443968][ T8093] F2FS-fs (loop2): Found nat_bits in checkpoint [ 193.520915][ T8093] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 193.683465][ T5797] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x5b4/0x19c0 [ 193.740797][ T5797] F2FS-fs (loop2): invalid blkaddr: 1535, type: 10, run fsck to fix. [ 193.790515][ T23] wacom 0003:056A:0045.0013: unknown main item tag 0x0 [ 193.834832][ T23] wacom 0003:056A:0045.0013: unknown main item tag 0x0 [ 193.867538][ T23] wacom 0003:056A:0045.0013: unknown main item tag 0x0 [ 193.876786][ T23] wacom 0003:056A:0045.0013: unknown main item tag 0x0 [ 193.883810][ T23] wacom 0003:056A:0045.0013: unknown main item tag 0x0 [ 193.891613][ T23] wacom 0003:056A:0045.0013: unknown main item tag 0x0 [ 193.899995][ T23] wacom 0003:056A:0045.0013: unknown main item tag 0x0 [ 193.923311][ T5863] usb 5-1: USB disconnect, device number 2 [ 193.936955][ T23] wacom 0003:056A:0045.0013: Unknown device_type for 'HID 056a:0045'. Assuming pen. [ 193.997444][ T23] wacom 0003:056A:0045.0013: hidraw0: USB HID v0.00 Device [HID 056a:0045] on usb-dummy_hcd.3-1/input0 [ 194.058306][ T23] input: Wacom Intuos2 12x18 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0045.0013/input/input18 [ 194.218988][ T23] usb 4-1: USB disconnect, device number 9 [ 194.487999][ T8118] loop2: detected capacity change from 0 to 512 [ 194.510128][ T8118] EXT4-fs: Ignoring removed orlov option [ 194.523607][ T8118] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 194.565652][ T8118] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 194.596447][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.611366][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.687705][ T8118] EXT4-fs (loop2): 1 orphan inode deleted [ 194.735809][ T8118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.829596][ T8127] raw_sendmsg: syz.4.821 forgot to set AF_INET. Fix it! [ 194.906945][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.674722][ T8124] loop0: detected capacity change from 0 to 32768 [ 195.731251][ T8150] netlink: 104 bytes leftover after parsing attributes in process `syz.4.832'. [ 195.749939][ T8124] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 195.893675][ T8139] loop2: detected capacity change from 0 to 32768 [ 195.925960][ T8139] (syz.2.827,8139,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 195.963053][ T8124] XFS (loop0): Ending clean mount [ 195.969592][ T8159] loop3: detected capacity change from 0 to 256 [ 195.989379][ T8139] (syz.2.827,8139,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 196.072697][ T8139] JBD2: Ignoring recovery information on journal [ 196.167257][ T8159] FAT-fs (loop3): Directory bread(block 64) failed [ 196.198114][ T8159] FAT-fs (loop3): Directory bread(block 65) failed [ 196.215848][ T8139] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 196.226239][ T8159] FAT-fs (loop3): Directory bread(block 66) failed [ 196.232872][ T8159] FAT-fs (loop3): Directory bread(block 67) failed [ 196.270550][ T8159] FAT-fs (loop3): Directory bread(block 68) failed [ 196.282611][ T8159] FAT-fs (loop3): Directory bread(block 69) failed [ 196.291476][ T8159] FAT-fs (loop3): Directory bread(block 70) failed [ 196.294668][ T5789] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 196.302741][ T8159] FAT-fs (loop3): Directory bread(block 71) failed [ 196.313584][ T8159] FAT-fs (loop3): Directory bread(block 72) failed [ 196.334642][ T8159] FAT-fs (loop3): Directory bread(block 73) failed [ 196.659490][ T8170] netlink: 88 bytes leftover after parsing attributes in process `syz.4.839'. [ 196.689341][ T5797] ocfs2: Unmounting device (7,2) on (node local) [ 197.054706][ T27] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 197.248485][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 197.262320][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.283266][ T27] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 197.303517][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.325256][ T27] usb 4-1: config 0 descriptor?? [ 197.344695][ T8189] loop0: detected capacity change from 0 to 128 [ 197.385986][ T8189] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 197.405476][ T8189] hpfs: filesystem error: improperly stopped [ 197.411601][ T8189] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 197.434418][ T8189] hpfs: You really don't want any checks? You are crazy... [ 197.443740][ T8189] hpfs: hpfs_map_sector(): read error [ 197.490664][ T8189] hpfs: code page support is disabled [ 197.514699][ T8189] hpfs: hpfs_map_4sectors(): unaligned read [ 197.520810][ T8189] hpfs: hpfs_map_4sectors(): unaligned read [ 197.537081][ T8189] hpfs: filesystem error: unable to find root dir [ 197.798626][ T27] konepure 0003:1E7D:2DBE.0014: hidraw0: USB HID v12.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.3-1/input0 [ 198.031501][ T8] usb 4-1: USB disconnect, device number 10 [ 198.163145][ T8211] netlink: 16 bytes leftover after parsing attributes in process `syz.4.856'. [ 198.321117][ T27] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 198.513216][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.544356][ T27] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 198.553474][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.593674][ T27] usb 1-1: config 0 descriptor?? [ 199.091900][ T27] steelseries 0003:1038:12B6.0015: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.0-1/input0 [ 199.218773][ T8218] loop2: detected capacity change from 0 to 32768 [ 199.235325][ T8218] XFS: ikeep mount option is deprecated. [ 199.241058][ T8218] XFS: attr2 mount option is deprecated. [ 199.276018][ T27] steelseries 0003:1038:12B6.0015: hid_hw_raw_request() failed with -71 [ 199.305546][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 199.315254][ T8218] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 199.332944][ T27] usb 1-1: USB disconnect, device number 7 [ 199.524837][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 199.537480][ T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.561074][ T23] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 199.580329][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.598771][ T23] usb 5-1: config 0 descriptor?? [ 199.638331][ T8218] XFS (loop2): Ending clean mount [ 199.651744][ T8218] XFS (loop2): Quotacheck needed: Please wait. [ 199.720806][ T8218] XFS (loop2): Quotacheck: Done. [ 199.848869][ T5797] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 200.065598][ T23] kye 0003:0458:4018.0016: unbalanced collection at end of report description [ 200.085140][ T23] kye 0003:0458:4018.0016: parse failed [ 200.094059][ T23] kye: probe of 0003:0458:4018.0016 failed with error -22 [ 200.339298][ T23] usb 5-1: USB disconnect, device number 3 [ 200.343476][ T8267] netlink: 16 bytes leftover after parsing attributes in process `syz.2.871'. [ 200.471204][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.877'. [ 200.602872][ T8277] loop2: detected capacity change from 0 to 256 [ 200.605207][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 200.610834][ T8277] exfat: Deprecated parameter 'namecase' [ 200.624485][ T8277] exfat: Deprecated parameter 'namecase' [ 200.668168][ T8277] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 200.826761][ T9] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.844349][ T9] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.864370][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 200.881430][ T9] usb 4-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 200.901206][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.936076][ T9] usb 4-1: config 0 descriptor?? [ 201.122550][ T8285] loop4: detected capacity change from 0 to 2048 [ 201.157865][ T8285] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 201.228117][ T8288] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.405947][ T9] hid-u2fzero 0003:20A0:4287.0017: item fetching failed at offset 4/5 [ 201.427097][ T8285] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 201.445622][ T9] hid-u2fzero: probe of 0003:20A0:4287.0017 failed with error -22 [ 201.484401][ T8285] Remounting filesystem read-only [ 201.500488][ T8285] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 3044605952 [ 201.514505][ T8285] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=15) [ 201.541637][ T8285] NILFS (loop4): error -5 truncating bmap (ino=15) [ 201.571428][ T8279] loop0: detected capacity change from 0 to 40427 [ 201.619433][ T8279] F2FS-fs (loop0): invalid crc value [ 201.662637][ T8279] F2FS-fs (loop0): Found nat_bits in checkpoint [ 201.670913][ T9] usb 4-1: USB disconnect, device number 11 [ 201.679440][ T8285] syz.4.883 (8285) used greatest stack depth: 19440 bytes left [ 201.703599][ T7664] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 201.716876][ T8295] tmpfs: Cannot change global quota limit on remount [ 201.724637][ T7664] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 201.750726][ T7664] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 201.775530][ T7664] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 201.799999][ T7664] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 201.813929][ T7664] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 201.844577][ T7664] NILFS (loop4): discard dirty page: offset=0, ino=15 [ 201.857489][ T8279] F2FS-fs (loop0): Start checkpoint disabled! [ 201.871491][ T7664] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 201.875034][ T8279] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 201.893770][ T7664] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 201.906288][ T7664] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 201.919976][ T7664] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 201.931120][ T7664] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 201.965448][ T7664] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 201.977551][ T7664] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 201.996932][ T7664] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 202.014673][ T7664] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 202.054491][ T7664] NILFS (loop4): discard dirty page: offset=229376, ino=3 [ 202.079967][ T7664] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 202.102140][ T7664] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 202.139004][ T7664] NILFS (loop4): discard dirty block: blocknr=50, size=1024 [ 202.164328][ T7664] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 202.354064][ T3459] kworker/u4:10: attempt to access beyond end of device [ 202.354064][ T3459] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 202.415140][ T3459] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 202.422404][ T3459] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 202.944417][ T5832] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 203.056193][ T8328] netlink: 44 bytes leftover after parsing attributes in process `syz.0.892'. [ 203.077481][ T8328] netlink: 43 bytes leftover after parsing attributes in process `syz.0.892'. [ 203.101069][ T8328] netlink: 'syz.0.892': attribute type 5 has an invalid length. [ 203.115423][ T8330] loop2: detected capacity change from 0 to 512 [ 203.132406][ T8330] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 203.134541][ T8328] netlink: 43 bytes leftover after parsing attributes in process `syz.0.892'. [ 203.174385][ T5832] usb 5-1: Using ep0 maxpacket: 32 [ 203.201626][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.219600][ T8330] EXT4-fs (loop2): orphan cleanup on readonly fs [ 203.266908][ T8330] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:512: comm syz.2.904: Block bitmap for bg 0 marked uninitialized [ 203.275271][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.294900][ T8330] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 203.314713][ T8330] EXT4-fs (loop2): 1 orphan inode deleted [ 203.328480][ T5832] usb 5-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 203.328936][ T8330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 203.337828][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.382337][ T5832] usb 5-1: config 0 descriptor?? [ 203.509777][ T8339] loop3: detected capacity change from 0 to 1024 [ 203.515194][ T8330] EXT4-fs: Ignoring sb option on remount [ 203.521996][ T8330] EXT4-fs: Ignoring removed orlov option [ 203.543136][ T8330] EXT4-fs: Ignoring removed nomblk_io_submit option [ 203.564168][ T8330] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 203.589618][ T8330] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 203.620731][ T8339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.632353][ T8330] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 203.733596][ T8339] CIFS: iocharset name too long [ 203.868764][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.903500][ T5802] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.913374][ T5832] smartjoyplus 0003:0925:8866.0018: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.4-1/input0 [ 203.961351][ T5832] smartjoyplus 0003:0925:8866.0018: Force feedback for SmartJoy PLUS PS2/USB adapter [ 204.230429][ T8] usb 5-1: USB disconnect, device number 4 [ 204.541618][ T8348] loop0: detected capacity change from 0 to 32768 [ 204.934412][ T28] audit: type=1326 audit(1763639966.501:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8368 comm="syz.0.914" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbcbf78f749 code=0x0 [ 205.294880][ T5832] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 205.484334][ T5832] usb 5-1: Using ep0 maxpacket: 32 [ 205.497775][ T5832] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 205.506832][ T5832] usb 5-1: config 0 has no interface number 0 [ 205.522822][ T5832] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 205.534470][ T8365] loop2: detected capacity change from 0 to 32768 [ 205.542042][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.553688][ T5832] usb 5-1: Product: syz [ 205.558357][ T5832] usb 5-1: Manufacturer: syz [ 205.563195][ T5832] usb 5-1: SerialNumber: syz [ 205.589434][ T5832] usb 5-1: config 0 descriptor?? [ 205.614543][ T8365] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 205.636652][ T5832] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 205.675640][ T5832] radio-si470x: probe of 5-1:0.35 failed with error -5 [ 205.876688][ T5832] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 205.953269][ T8365] XFS (loop2): Ending clean mount [ 205.996389][ T8365] XFS (loop2): Quotacheck needed: Please wait. [ 206.103306][ T8365] XFS (loop2): Quotacheck: Done. [ 206.143844][ T5832] radio-raremono 5-1:0.35: V4L2 device registered as radio48 [ 206.285681][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 206.394483][ T5832] usb 5-1: USB disconnect, device number 5 [ 206.400926][ T5832] radio-raremono 5-1:0.35: Thanko's Raremono disconnected [ 206.454920][ T5797] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 206.518626][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 206.533221][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.546898][ T23] usb 1-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 206.556884][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.576832][ T23] usb 1-1: config 0 descriptor?? [ 207.000718][ T23] wacom 0003:056A:0045.0019: unknown main item tag 0x0 [ 207.030507][ T23] wacom 0003:056A:0045.0019: unknown main item tag 0x0 [ 207.069193][ T23] wacom 0003:056A:0045.0019: unknown main item tag 0x0 [ 207.095200][ T23] wacom 0003:056A:0045.0019: unknown main item tag 0x0 [ 207.102178][ T23] wacom 0003:056A:0045.0019: unknown main item tag 0x0 [ 207.123133][ T23] wacom 0003:056A:0045.0019: unknown main item tag 0x0 [ 207.142968][ T23] wacom 0003:056A:0045.0019: unknown main item tag 0x0 [ 207.167588][ T28] audit: type=1326 audit(1763639968.751:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8428 comm="syz.4.925" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faab7f8f749 code=0x0 [ 207.191374][ T23] wacom 0003:056A:0045.0019: Unknown device_type for 'HID 056a:0045'. Assuming pen. [ 207.221077][ T23] wacom 0003:056A:0045.0019: hidraw0: USB HID v0.00 Device [HID 056a:0045] on usb-dummy_hcd.0-1/input0 [ 207.257169][ T23] input: Wacom Intuos2 12x18 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0045.0019/input/input21 [ 207.459002][ T23] usb 1-1: USB disconnect, device number 8 [ 207.547873][ T8434] fido_id[8434]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 208.145608][ T8454] ALSA: mixer_oss: invalid OSS volume '' [ 208.165417][ T8451] loop2: detected capacity change from 0 to 1024 [ 208.244418][ T8451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.320179][ T8451] EXT4-fs error (device loop2): ext4_read_inline_dir:1573: inode #12: block 7: comm syz.2.931: path /253/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 208.416991][ T8436] loop3: detected capacity change from 0 to 32768 [ 208.539022][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.567705][ T8436] read_mapping_page failed! [ 208.572758][ T8436] ERROR: (device loop3): txCommit: [ 208.572758][ T8436] [ 208.829496][ T8473] loop2: detected capacity change from 0 to 1024 [ 208.882327][ T8473] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 208.971248][ T8473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.080612][ T8473] EXT4-fs error (device loop2): ext4_xattr_inode_iget:444: inode #11: comm syz.2.936: missing EA_INODE flag [ 209.147065][ T8473] EXT4-fs (loop2): Remounting filesystem read-only [ 209.404705][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.482615][ T8492] loop4: detected capacity change from 0 to 128 [ 209.521688][ T8495] loop0: detected capacity change from 0 to 512 [ 209.559622][ T8495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.576163][ T8495] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.672075][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.957188][ T8508] usb usb8: usbfs: process 8508 (syz.2.949) did not claim interface 0 before use [ 211.748688][ T8570] loop2: detected capacity change from 0 to 256 [ 211.811842][ T8572] pim6reg9: entered allmulticast mode [ 211.947788][ T8574] loop3: detected capacity change from 0 to 256 [ 211.995479][ T8574] exfat: Deprecated parameter 'namecase' [ 212.019513][ T5792] Bluetooth: hci2: command 0x0406 tx timeout [ 212.025780][ T5792] Bluetooth: hci0: command 0x0406 tx timeout [ 212.029998][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 212.076085][ T8574] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 212.162527][ T8574] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 212.279121][ T8579] loop2: detected capacity change from 0 to 128 [ 212.312810][ T8562] loop4: detected capacity change from 0 to 32768 [ 212.382744][ T8562] (syz.4.966,8562,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 212.428140][ T8579] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 212.454591][ T8562] (syz.4.966,8562,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 212.568125][ T8562] JBD2: Ignoring recovery information on journal [ 212.726859][ T5797] sysv_free_block: trying to free block not in datazone [ 212.729572][ T8562] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 212.790901][ T5797] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 212.925688][ T8593] netlink: 20 bytes leftover after parsing attributes in process `syz.3.978'. [ 213.009740][ T8597] loop0: detected capacity change from 0 to 256 [ 213.034893][ T8593] netlink: 'syz.3.978': attribute type 4 has an invalid length. [ 213.092701][ T8597] exfat: Deprecated parameter 'namecase' [ 213.138741][ T7664] ocfs2: Unmounting device (7,4) on (node local) [ 213.162779][ T8597] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d) [ 213.718317][ T8614] sock: sock_timestamping_bind_phc: sock not bind to device [ 214.031641][ T28] audit: type=1326 audit(1763639975.601:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.4.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab7f8f749 code=0x7ffc0000 [ 214.124398][ T28] audit: type=1326 audit(1763639975.601:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.4.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab7f8f749 code=0x7ffc0000 [ 214.232017][ T28] audit: type=1326 audit(1763639975.621:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.4.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faab7f8f749 code=0x7ffc0000 [ 214.294412][ T28] audit: type=1326 audit(1763639975.621:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.4.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab7f8f749 code=0x7ffc0000 [ 214.346435][ T1139] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 214.368450][ T28] audit: type=1326 audit(1763639975.621:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.4.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab7f8f749 code=0x7ffc0000 [ 214.431469][ T28] audit: type=1326 audit(1763639975.631:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.4.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7faab7f8f749 code=0x7ffc0000 [ 214.514357][ T28] audit: type=1326 audit(1763639975.631:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.4.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab7f8f749 code=0x7ffc0000 [ 214.630627][ T8608] loop3: detected capacity change from 0 to 32768 [ 214.705566][ T8608] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 214.909208][ T5802] (syz-executor,5802,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 214.987477][ T5802] ocfs2: Unmounting device (7,3) on (node local) [ 215.463694][ T8628] loop2: detected capacity change from 0 to 32768 [ 215.514351][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 215.546181][ T8630] loop0: detected capacity change from 0 to 32768 [ 215.552728][ T8628] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 215.573829][ T8657] loop3: detected capacity change from 0 to 4096 [ 215.591519][ T8630] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.988 (8630) [ 215.605535][ T8657] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 215.635829][ T8657] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 215.659612][ T8630] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 215.696490][ T8628] XFS (loop2): Ending clean mount [ 215.714834][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 215.716135][ T8630] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 215.730385][ T9] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 215.740048][ T8628] XFS (loop2): Quotacheck needed: Please wait. [ 215.753756][ T8630] BTRFS info (device loop0): enabling auto defrag [ 215.762209][ T9] usb 5-1: config 0 has no interface number 0 [ 215.771711][ T8669] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 215.792065][ T8630] BTRFS info (device loop0): doing ref verification [ 215.813061][ T9] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 215.834651][ T8630] BTRFS info (device loop0): use no compression [ 215.841002][ T8630] BTRFS info (device loop0): force clearing of disk cache [ 215.866505][ T8630] BTRFS info (device loop0): max_inline at 57 [ 215.872731][ T8628] XFS (loop2): Quotacheck: Done. [ 215.878281][ T9] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 215.884072][ T8630] BTRFS info (device loop0): disabling free space tree [ 215.913681][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.964345][ T9] usb 5-1: Product: syz [ 215.968594][ T9] usb 5-1: Manufacturer: syz [ 216.004962][ T9] usb 5-1: SerialNumber: syz [ 216.027003][ T9] usb 5-1: config 0 descriptor?? [ 216.041207][ T9] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 216.080329][ T9] em28xx 5-1:0.132: Video interface 132 found: [ 216.200460][ T8630] BTRFS info (device loop0): enabling ssd optimizations [ 216.254530][ T8630] BTRFS info (device loop0): auto enabling async discard [ 216.297824][ T5797] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 216.337690][ T8630] BTRFS info (device loop0): rebuilding free space tree [ 216.448094][ T8630] BTRFS info (device loop0): disabling free space tree [ 216.474554][ T9] em28xx 5-1:0.132: chip ID is em2710/2820 [ 216.482699][ T8630] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 216.540406][ T8630] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 216.801360][ T9] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 216.834535][ T9] em28xx 5-1:0.132: board has no eeprom [ 216.914396][ T9] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 216.922315][ T9] em28xx 5-1:0.132: analog set to bulk mode. [ 216.965148][ T5832] em28xx 5-1:0.132: Registering V4L2 extension [ 216.999461][ T9] usb 5-1: USB disconnect, device number 6 [ 217.016260][ T9] em28xx 5-1:0.132: Disconnecting em28xx [ 217.231001][ T5789] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 217.413814][ T5832] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 217.450460][ T5832] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 217.472798][ T5832] em28xx 5-1:0.132: No AC97 audio processor [ 217.535992][ T5832] usb 5-1: Decoder not found [ 217.569374][ T5832] em28xx 5-1:0.132: failed to create media graph [ 217.604463][ T5832] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 217.663234][ T5832] em28xx 5-1:0.132: Remote control support is not available for this card. [ 217.720813][ T9] em28xx 5-1:0.132: Closing input extension [ 217.780614][ T8714] loop4: detected capacity change from 0 to 4096 [ 217.878007][ T9] em28xx 5-1:0.132: Freeing device [ 217.962850][ T8720] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 218.037776][ T8722] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1009'. [ 218.498071][ T8733] loop0: detected capacity change from 0 to 256 [ 218.629699][ T28] audit: type=1326 audit(1763639980.211:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.2.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6138f749 code=0x7ffc0000 [ 218.717468][ T28] audit: type=1326 audit(1763639980.211:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.2.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6138f749 code=0x7ffc0000 [ 218.807004][ T28] audit: type=1326 audit(1763639980.211:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.2.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f8f6138f749 code=0x7ffc0000 [ 219.143653][ T8757] loop0: detected capacity change from 0 to 512 [ 219.195702][ T8757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.209072][ T8757] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.271918][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.331360][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 219.514451][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 219.529841][ T9] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 219.541776][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.559171][ T9] usb 5-1: Product: syz [ 219.563601][ T9] usb 5-1: Manufacturer: syz [ 219.564464][ T8769] loop3: detected capacity change from 0 to 256 [ 219.571901][ T9] usb 5-1: SerialNumber: syz [ 219.591172][ T8768] loop0: detected capacity change from 0 to 4096 [ 219.591888][ T9] usb 5-1: config 0 descriptor?? [ 219.605991][ T8769] exfat: Deprecated parameter 'utf8' [ 219.629557][ T9] gspca_main: sq930x-2.14.0 probing 2770:930c [ 219.698328][ T8769] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d) [ 219.952069][ T8773] tipc: Started in network mode [ 219.970568][ T8773] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 220.000109][ T8773] tipc: Enabled bearer , priority 10 [ 220.290223][ T8781] loop3: detected capacity change from 0 to 1024 [ 220.297520][ T9] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 220.304222][ T9] sq930x: probe of 5-1:0.0 failed with error -71 [ 220.329766][ T9] usb 5-1: USB disconnect, device number 7 [ 220.868428][ T8794] loop3: detected capacity change from 0 to 2048 [ 220.946996][ T8796] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 221.074000][ T8794] NILFS error (device loop3): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 221.121685][ T787] tipc: Node number set to 10005162 [ 221.171219][ T8794] Remounting filesystem read-only [ 221.238926][ T8786] loop2: detected capacity change from 0 to 32768 [ 221.279314][ T5802] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 221.289260][ T5802] NILFS (loop3): discard dirty page: offset=0, ino=18 [ 221.296638][ T5802] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 221.305438][ T5802] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 221.315807][ T5802] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 221.325159][ T5802] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 221.344701][ T5802] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 221.346230][ T8786] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 221.351580][ T5802] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 221.368213][ T5802] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 221.377608][ T5802] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 221.387013][ T5802] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 221.396453][ T5802] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 221.403271][ T5802] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 221.411527][ T5802] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 221.419047][ T5802] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 221.426563][ T5802] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 221.434140][ T5802] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 221.441414][ T5802] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 221.448992][ T5802] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 221.458050][ T5802] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 221.467165][ T5802] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 221.478269][ T5802] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 221.485377][ T5802] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 221.492801][ T5802] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 221.500373][ T5802] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 221.509005][ T5802] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 221.518978][ T5802] NILFS (loop3): discard dirty page: offset=65536, ino=3 [ 221.541760][ T5802] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 221.561937][ T5802] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 221.587225][ T5802] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 221.601632][ T5802] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 221.641719][ T5797] ocfs2: Unmounting device (7,2) on (node local) [ 221.751718][ T8808] loop4: detected capacity change from 0 to 512 [ 221.784936][ T8808] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 221.857142][ T8808] EXT4-fs (loop4): 1 truncate cleaned up [ 221.909536][ T8808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.161126][ T7664] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.171146][ T8823] loop3: detected capacity change from 0 to 16 [ 222.200561][ T8823] erofs: (device loop3): mounted with root inode @ nid 36. [ 222.394463][ T8822] loop2: detected capacity change from 0 to 4096 [ 222.724554][ T787] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 222.853671][ T8836] loop4: detected capacity change from 0 to 4096 [ 222.904413][ T8836] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 222.927013][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.952702][ T787] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 222.953810][ T8840] loop0: detected capacity change from 0 to 512 [ 222.990719][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.011109][ T8840] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 223.032073][ T787] usb 4-1: config 0 descriptor?? [ 223.160737][ T8840] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.201684][ T8840] ext4 filesystem being mounted at /264/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.227224][ T8840] EXT4-fs (loop0): resizing filesystem from 128 to 1 blocks [ 223.234796][ T8840] EXT4-fs warning (device loop0): ext4_resize_fs:2048: can't shrink FS - resize aborted [ 223.351807][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.507733][ T787] lua 0003:1E7D:2C2E.001A: unbalanced collection at end of report description [ 223.540149][ T8852] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1065'. [ 223.545508][ T787] lua 0003:1E7D:2C2E.001A: parse failed [ 223.578367][ T787] lua: probe of 0003:1E7D:2C2E.001A failed with error -22 [ 223.751114][ T23] usb 4-1: USB disconnect, device number 12 [ 224.025653][ T8866] IPVS: set_ctl: invalid protocol: 94 100.1.1.0:20003 [ 224.362356][ T8879] loop0: detected capacity change from 0 to 512 [ 224.435375][ T8879] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 224.471338][ T8879] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 224.554621][ T8884] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1080'. [ 224.632721][ T8879] FAT-fs (loop0): FAT read failed (blocknr 128) [ 224.775170][ T8891] loop4: detected capacity change from 0 to 64 [ 224.905295][ T5832] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 225.108585][ T5832] usb 4-1: Using ep0 maxpacket: 8 [ 225.147576][ T5832] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 225.164643][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.172729][ T5832] usb 4-1: Product: syz [ 225.196054][ T5832] usb 4-1: Manufacturer: syz [ 225.201853][ T5832] usb 4-1: SerialNumber: syz [ 225.225586][ T5832] usb 4-1: config 0 descriptor?? [ 225.251747][ T5832] gspca_main: sq930x-2.14.0 probing 2770:930c [ 225.584371][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 225.726290][ T8899] loop0: detected capacity change from 0 to 32768 [ 225.784462][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 225.795523][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.837536][ T9] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 225.865265][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.896382][ T9] usb 3-1: config 0 descriptor?? [ 225.914373][ T5832] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 225.921758][ T5832] sq930x: probe of 4-1:0.0 failed with error -71 [ 225.954880][ T5832] usb 4-1: USB disconnect, device number 13 [ 226.158099][ T8919] loop4: detected capacity change from 0 to 4096 [ 226.330922][ T8921] loop0: detected capacity change from 0 to 2048 [ 226.361915][ T9] cypress 0003:04B4:07B1.001B: unknown main item tag 0x0 [ 226.385358][ T9] cypress 0003:04B4:07B1.001B: unknown main item tag 0x0 [ 226.402721][ T9] cypress 0003:04B4:07B1.001B: unknown main item tag 0x0 [ 226.420843][ T9] cypress 0003:04B4:07B1.001B: unknown main item tag 0x0 [ 226.425815][ T8925] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 226.460888][ T9] cypress 0003:04B4:07B1.001B: unknown main item tag 0x0 [ 226.478749][ T8925] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 226.501196][ T9] cypress 0003:04B4:07B1.001B: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.2-1/input0 [ 226.538798][ T8925] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 226.629682][ T8925] Remounting filesystem read-only [ 226.699846][ T23] usb 3-1: USB disconnect, device number 8 [ 226.752723][ T5789] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 226.791434][ T5789] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 226.799560][ T8926] fido_id[8926]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 226.824483][ T5789] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 226.833426][ T5789] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 226.887650][ T5789] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 226.916091][ T5789] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 226.942581][ T5789] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 226.973922][ T5789] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 227.000932][ T5789] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 227.047518][ T5789] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 227.159273][ T8940] loop4: detected capacity change from 0 to 8 [ 227.461781][ T8948] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1110'. [ 227.471736][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 227.605588][ T8956] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1112'. [ 227.654847][ T8956] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1112'. [ 227.674939][ T8953] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1112'. [ 227.684467][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 227.705427][ T9] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 227.713862][ T9] usb 4-1: config 0 has no interface number 0 [ 227.734036][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 227.754071][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.765260][ T9] usb 4-1: Product: syz [ 227.769494][ T9] usb 4-1: Manufacturer: syz [ 227.804445][ T9] usb 4-1: SerialNumber: syz [ 227.825300][ T9] usb 4-1: config 0 descriptor?? [ 227.847829][ T9] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.69/input/input24 [ 227.903257][ T8958] loop4: detected capacity change from 0 to 8192 [ 227.949863][ T8958] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 227.977182][ T8958] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 227.989057][ T8958] REISERFS (device loop4): using ordered data mode [ 227.996454][ T8958] reiserfs: using flush barriers [ 228.004740][ T8958] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 228.022014][ T8958] REISERFS (device loop4): checking transaction log (loop4) [ 228.046960][ T5143] bcm5974 4-1:0.69: could not read from device [ 228.065861][ T8958] REISERFS (device loop4): Using r5 hash to sort names [ 228.080153][ T9] usb 4-1: USB disconnect, device number 14 [ 228.086754][ T5143] bcm5974 4-1:0.69: could not read from device [ 228.123307][ T8958] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 228.213764][ T8969] netlink: 'syz.0.1119': attribute type 1 has an invalid length. [ 229.100814][ T8994] loop2: detected capacity change from 0 to 1024 [ 229.199781][ T8994] hfsplus: bad catalog entry type [ 229.216168][ T8996] Bluetooth: MGMT ver 1.22 [ 229.345591][ T12] hfsplus: b-tree write err: -5, ino 4 [ 229.363142][ T8999] netlink: 'syz.0.1133': attribute type 9 has an invalid length. [ 229.646197][ T9007] loop4: detected capacity change from 0 to 2048 [ 229.695551][ T9007] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 229.741166][ T9007] NILFS (loop4): mounting unchecked fs [ 229.764643][ T9007] NILFS (loop4): recovery required for readonly filesystem [ 229.771929][ T9007] NILFS (loop4): write access will be enabled during recovery [ 229.812465][ T5805] udevd[5805]: incorrect nilfs2 checksum on /dev/loop4 [ 229.859974][ T9007] NILFS (loop4): recovery complete [ 230.202399][ T9021] loop2: detected capacity change from 0 to 2048 [ 230.251647][ T9021] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 230.281656][ T9021] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.621907][ T9033] loop3: detected capacity change from 0 to 256 [ 230.663696][ T9033] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 230.884339][ T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 231.097093][ T23] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 231.115139][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.143206][ T23] usb 1-1: config 0 descriptor?? [ 231.161336][ T23] cp210x 1-1:0.0: cp210x converter detected [ 231.280991][ T9056] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 231.326403][ T9056] CIFS: Unable to determine destination address [ 231.495470][ T9062] loop4: detected capacity change from 0 to 256 [ 231.627743][ T23] usb 1-1: cp210x converter now attached to ttyUSB0 [ 231.867617][ T27] usb 1-1: USB disconnect, device number 9 [ 231.907034][ T27] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 231.955174][ T27] cp210x 1-1:0.0: device disconnected [ 231.970915][ T9073] loop3: detected capacity change from 0 to 512 [ 232.016745][ T9073] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 232.062623][ T9073] EXT4-fs (loop3): 1 truncate cleaned up [ 232.076191][ T9073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.453824][ T9089] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1174'. [ 232.456798][ T9088] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 232.474501][ T9088] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 232.482977][ T9088] CPU: 0 PID: 9088 Comm: syz.4.1173 Not tainted syzkaller #0 [ 232.490407][ T9088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 232.500519][ T9088] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 232.506128][ T9088] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 59 96 df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 38 96 df f9 4d 8b 24 24 48 83 c3 [ 232.525881][ T9088] RSP: 0018:ffffc9000e49fa80 EFLAGS: 00010206 [ 232.531996][ T9088] RAX: 0000000000000005 RBX: ffff8880256e8d00 RCX: 0000000000080000 [ 232.540099][ T9088] RDX: ffffc900148b3000 RSI: 00000000000007d8 RDI: 00000000000007d9 [ 232.548104][ T9088] RBP: 0000000000000001 R08: ffff88802b73312f R09: 1ffff110056e6625 [ 232.556111][ T9088] R10: dffffc0000000000 R11: ffffed10056e6626 R12: 0000000000000028 [ 232.564300][ T9088] R13: dffffc0000000000 R14: ffff88802b733000 R15: dffffc0000000000 [ 232.572312][ T9088] FS: 00007faab8f146c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 232.581266][ T9088] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 232.587865][ T9088] CR2: 00005555930435c8 CR3: 0000000020ec3000 CR4: 00000000003506f0 [ 232.595874][ T9088] Call Trace: [ 232.599167][ T9088] [ 232.602110][ T9088] pcl818_detach+0x66/0xd0 [ 232.606553][ T9088] comedi_device_detach_locked+0x172/0x710 [ 232.612396][ T9088] comedi_unlocked_ioctl+0xccc/0xfe0 [ 232.617707][ T9088] ? comedi_poll+0x8c0/0x8c0 [ 232.622334][ T9088] ? __fget_files+0x28/0x4d0 [ 232.626982][ T9088] ? bpf_lsm_file_ioctl+0x9/0x10 [ 232.632028][ T9088] ? security_file_ioctl+0x80/0xa0 [ 232.637157][ T9088] ? comedi_poll+0x8c0/0x8c0 [ 232.641770][ T9088] __se_sys_ioctl+0xfd/0x170 [ 232.646382][ T9088] do_syscall_64+0x55/0xb0 [ 232.650911][ T9088] ? clear_bhb_loop+0x40/0x90 [ 232.655602][ T9088] ? clear_bhb_loop+0x40/0x90 [ 232.660322][ T9088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.666264][ T9088] RIP: 0033:0x7faab7f8f749 [ 232.670715][ T9088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.690355][ T9088] RSP: 002b:00007faab8f14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.698814][ T9088] RAX: ffffffffffffffda RBX: 00007faab81e5fa0 RCX: 00007faab7f8f749 [ 232.706887][ T9088] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 232.714966][ T9088] RBP: 00007faab8013f91 R08: 0000000000000000 R09: 0000000000000000 [ 232.722955][ T9088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.730939][ T9088] R13: 00007faab81e6038 R14: 00007faab81e5fa0 R15: 00007ffed574e118 [ 232.738928][ T9088] [ 232.741966][ T9088] Modules linked in: [ 232.752715][ T9088] ---[ end trace 0000000000000000 ]--- [ 232.759041][ T9088] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 232.776774][ T5802] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.791745][ T9088] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 59 96 df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 38 96 df f9 4d 8b 24 24 48 83 c3 [ 232.864146][ T9088] RSP: 0018:ffffc9000e49fa80 EFLAGS: 00010206 [ 232.880533][ T9088] RAX: 0000000000000005 RBX: ffff8880256e8d00 RCX: 0000000000080000 [ 232.904295][ T9088] RDX: ffffc900148b3000 RSI: 00000000000007d8 RDI: 00000000000007d9 [ 232.922566][ T9088] RBP: 0000000000000001 R08: ffff88802b73312f R09: 1ffff110056e6625 [ 232.937419][ T9088] R10: dffffc0000000000 R11: ffffed10056e6626 R12: 0000000000000028 [ 232.947813][ T9088] R13: dffffc0000000000 R14: ffff88802b733000 R15: dffffc0000000000 [ 232.958090][ T9088] FS: 00007faab8f146c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 232.969294][ T9088] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 232.978348][ T9088] CR2: 00007f319cdb42f8 CR3: 0000000020ec3000 CR4: 00000000003506e0 [ 232.987857][ T9088] Kernel panic - not syncing: Fatal exception [ 232.994293][ T9088] Kernel Offset: disabled [ 232.998725][ T9088] Rebooting in 86400 seconds..