last executing test programs: 4.819856949s ago: executing program 0 (id=1356): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) io_setup(0x3, &(0x7f00000003c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 4.580482713s ago: executing program 0 (id=1360): r0 = socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000080)=[{r0, 0x2}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 4.421283768s ago: executing program 0 (id=1362): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0xe) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x7) 4.239154786s ago: executing program 0 (id=1366): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.762509794s ago: executing program 1 (id=1387): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="318300000001000000001900000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) 2.645233086s ago: executing program 1 (id=1389): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000240)) 2.496813601s ago: executing program 1 (id=1391): ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0) syz_read_part_table(0x5c2, &(0x7f0000000000)="$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") creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 2.311539789s ago: executing program 0 (id=1394): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x11c0, 0x5506, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) 2.170269433s ago: executing program 1 (id=1396): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="000349"], 0x0, 0x0}) 1.413130249s ago: executing program 3 (id=1406): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.348998825s ago: executing program 3 (id=1407): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1f, &(0x7f0000000240)=0x3, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) 1.181847292s ago: executing program 3 (id=1409): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x6, 0x0, 0x8, 0xfffff62a, 0x14, "127c3c273aaf1639f1f2a46c613859452ca5a3"}) 1.00355956s ago: executing program 3 (id=1411): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x3a, 0x1c, 0x66, 0x0, 0x6, 0x11, 0x0, @multicast1, @multicast2}, {0x4e24, 0x4e21, 0x8}}}}}, 0x0) 856.532655ms ago: executing program 3 (id=1413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c8016}, 0x94) 695.615281ms ago: executing program 3 (id=1415): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000000004032150e0100000000000109022400010000c00009040000010300210009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="200508"], 0x0, 0x0, 0x0, 0x0}, 0x0) 603.65749ms ago: executing program 2 (id=1417): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0xffffffff, "89e5422911b5280686e57061720d98334ff03f2df01aceb1065e4907e5009617", 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r1, 0x400}], 0x1, 0xc) 507.59641ms ago: executing program 2 (id=1418): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4ea4, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) 493.396612ms ago: executing program 2 (id=1419): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0xa}, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x0, 0x0, 0x0) 482.082932ms ago: executing program 0 (id=1420): syz_mount_image$ocfs2(&(0x7f0000000600), &(0x7f0000004780)='./file0\x00', 0x10000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4710, &(0x7f0000008f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x0, 0x400, 0xfffffffffffffff8}) 379.203853ms ago: executing program 2 (id=1421): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @mcast2, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="8857c5fc68d9", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="a027", 0x2}, {&(0x7f00000006c0)="b6ac09f46d", 0x5}], 0x2}}], 0x3, 0x28048005) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="63efd66ad1b839bdbd", 0x9}], 0x1}}], 0x1, 0x9) 308.74018ms ago: executing program 1 (id=1422): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRES8, @ANYRESOCT], 0x1, 0x273, &(0x7f0000001200)="$eJzs3U9rE0EYx/HfbNIabalrWxHEg1QLnsTWi3gRpO/AiydRmwjFUEErqBerZ/EFePctePAleBLPQm6e9J5bZP7EbNJsNo2Jk8TvBxI2yTw7z2RnOzO7lAjAf+v2TuPj9R/2YaSSSpJuSomkilSWdFbnKs/3D/YO6rXqoB2VXIR9GPlIc6TM7n6tX6iNcxFBal+VtZx9D5NR+R47A0wDd/Z7v7LvJ9KJcHa6zytRshu/w9gJRGaaauqFVmLnAQCIK4z/SRjnl8P8PUmkzTDsd4//Mz6ANmMnEFlm/HerrJaxx/e0+6iz3jN+9meFVeIodS3K96xSVwJFq0qXS3Ly0V69dnX3Sb2a6K1uBZli6+656rtuWyOT7Zuju97oszYdoDFy25dcGxZsG7Zz8l8bb43FzBfz1dwzqT6o+mf+V24Ze5jckUp7jpTP/1r+Hl0rU18qp5VnXCXnQw3BwFaW1JNG1mLYZ9cFgrQoTxe12hPlW7dVELXWN2q7IGq9N6rTm/MjJ828N3fNhn7qk3Yy8//EftubGubMtGVcydAzBran7EqmbjwxF91bhxf6lkxGbhKO750e6oZWnr189fhBvV57ysYIG6/Dlzkt+Qy70e4E05LP3G7YLzlK7eW/7plR/irhH+sc9GMGcm9mXth5l/Hrv/Z65fNCuH1nn9IB8/RW0c4zK6CtnLXBqns+lb+C62LcpYclmbxbEcOuuS5dkS4PU6OXhjznhNnRN93n+j8AAAAAAAAAAAAAAAAAAMCsGd+/HFSU91HsNgIAAAAAAAAAAAAAAAAAAAAAMOum7vd/78i/4vd/gYn7HQAA//8NSnOZ") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 284.800482ms ago: executing program 2 (id=1423): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x30, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008081}, 0x810) 105.38911ms ago: executing program 2 (id=1424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 0s ago: executing program 1 (id=1425): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31030000cd05e7ffffff080000000800", @ANYRES32=r0, @ANYBLOB='\b'], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) kernel console output (not intermixed with test programs): T8] dvb-usb: bulk message failed: -22 (2/0) [ 112.448941][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 112.464345][ T3470] hfsplus: b-tree write err: -5, ino 4 [ 112.488997][ T8] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 112.520897][ T8] usb 1-1: media controller created [ 112.595720][ T6843] cxusb: i2c rd: len=120 is too big! [ 112.595720][ T6843] [ 112.610907][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 112.702545][ T8] cxusb: set interface failed [ 112.708740][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 112.750059][ T8] DVB: Unable to find symbol mt352_attach() [ 112.759436][ T8] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 112.874565][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 112.924246][ T8] rc_core: IR keymap rc-dvico-portable not found [ 112.930809][ T8] Registered IR keymap rc-empty [ 112.943820][ T8] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 112.976850][ T8] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input9 [ 112.983712][ T6876] loop1: detected capacity change from 0 to 32768 [ 113.006406][ T8] dvb-usb: schedule remote query interval to 100 msecs. [ 113.023763][ T5787] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.036539][ T8] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 113.091778][ T8] usb 1-1: USB disconnect, device number 4 [ 113.106032][ T23] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 113.134209][ T23] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 113.164317][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 113.194061][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 113.234182][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 113.278297][ T23] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 113.298632][ T23] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 113.310289][ T8] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 113.334889][ T23] usb 4-1: Product: syz [ 113.339121][ T23] usb 4-1: Manufacturer: syz [ 113.378776][ T23] cdc_wdm 4-1:1.0: skipping garbage [ 113.384038][ T23] cdc_wdm 4-1:1.0: skipping garbage [ 113.439543][ T23] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 113.464272][ T23] cdc_wdm 4-1:1.0: Unknown control protocol [ 113.562727][ T6882] loop2: detected capacity change from 0 to 32768 [ 113.578621][ T6882] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 113.666472][ T5793] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 113.724676][ T5787] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.785544][ T6890] loop0: detected capacity change from 0 to 128 [ 113.804507][ T5787] Bluetooth: hci3: command 0x0c1a tx timeout [ 113.805023][ T5789] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.828791][ T5849] usb 4-1: USB disconnect, device number 3 [ 113.863113][ T6890] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.884555][ T6890] ext4 filesystem being mounted at /113/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.042124][ T5783] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.262159][ T6901] loop1: detected capacity change from 0 to 2048 [ 114.339392][ T6901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.554590][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.886527][ T6921] loop1: detected capacity change from 0 to 22 [ 114.904036][ T6921] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 114.927805][ T6921] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 114.979400][ T6911] loop0: detected capacity change from 0 to 32768 [ 115.041308][ T6911] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 115.094258][ T5789] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.151888][ T6911] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 115.162835][ T6932] loop1: detected capacity change from 0 to 4096 [ 115.179940][ T6932] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 115.272226][ T6911] XFS (loop0): Ending clean mount [ 115.314050][ T6911] XFS (loop0): Quotacheck needed: Please wait. [ 115.349764][ T6932] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 115.431732][ T6911] XFS (loop0): Quotacheck: Done. [ 115.490945][ T27] audit: type=1800 audit(1763131595.835:19): pid=6911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.400" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 115.517377][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 115.572498][ T5783] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 115.597205][ T5781] ntfs3: loop1: ino=1a, ntfs_sync_fs failed, -22. [ 115.760515][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 115.783796][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 115.804415][ T5789] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.824583][ T23] usb 4-1: config 4 interface 0 has no altsetting 0 [ 115.838709][ T23] usb 4-1: string descriptor 0 read error: -22 [ 115.864384][ T23] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 115.884429][ T5789] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.889966][ T5787] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.896642][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.942972][ T23] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 115.960358][ T23] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 115.977793][ T23] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 115.985958][ T23] usb 4-1: media controller created [ 116.030163][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.221565][ T6941] loop2: detected capacity change from 0 to 32768 [ 116.293933][ T6941] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 116.419237][ T6941] XFS (loop2): Ending clean mount [ 116.619947][ T5782] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 117.012876][ T6943] loop1: detected capacity change from 0 to 65536 [ 117.049155][ T6943] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 117.136254][ T6943] XFS (loop1): Ending clean mount [ 117.164295][ T5787] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.175612][ T23] zl10353_read_register: readreg error (reg=127, ret==0) [ 117.218475][ T23] usb 4-1: USB disconnect, device number 4 [ 117.361800][ T5781] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 117.424248][ T27] audit: type=1326 audit(1763131597.765:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6968 comm="syz.0.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a93d8f6c9 code=0x7ffc0000 [ 117.468583][ T27] audit: type=1326 audit(1763131597.765:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6968 comm="syz.0.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a93d8f6c9 code=0x7ffc0000 [ 117.506661][ T27] audit: type=1326 audit(1763131597.795:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6968 comm="syz.0.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f5a93d8f6c9 code=0x7ffc0000 [ 117.533985][ T27] audit: type=1326 audit(1763131597.795:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6968 comm="syz.0.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a93d8f6c9 code=0x7ffc0000 [ 117.599910][ T27] audit: type=1326 audit(1763131597.795:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6968 comm="syz.0.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a93d8f6c9 code=0x7ffc0000 [ 117.627811][ T27] audit: type=1326 audit(1763131597.795:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6968 comm="syz.0.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f5a93d8f6c9 code=0x7ffc0000 [ 117.694280][ T27] audit: type=1326 audit(1763131597.795:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6968 comm="syz.0.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a93d8f6c9 code=0x7ffc0000 [ 117.739981][ T6973] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 117.884932][ T5787] Bluetooth: hci1: command 0x0c1a tx timeout [ 117.918176][ T6975] nbd: must specify at least one socket [ 117.964436][ T5787] Bluetooth: hci3: command 0x0c1a tx timeout [ 117.964591][ T5789] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.575294][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 118.672616][ T6978] loop1: detected capacity change from 0 to 32768 [ 118.688332][ T6978] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.419 (6978) [ 118.752466][ T6978] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.783656][ T6978] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 118.799542][ T6978] BTRFS info (device loop1): turning on sync discard [ 118.806557][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 118.823137][ T6978] BTRFS info (device loop1): enabling disk space caching [ 118.831708][ T23] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.843201][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 118.856787][ T6978] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 118.867699][ T23] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 118.877216][ T6978] BTRFS info (device loop1): trying to use backup root at mount time [ 118.888407][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.896916][ T6978] BTRFS info (device loop1): force clearing of disk cache [ 118.912533][ T23] usb 1-1: config 0 descriptor?? [ 118.919693][ T6978] BTRFS info (device loop1): disk space caching is enabled [ 119.070147][ T6978] BTRFS info (device loop1): rebuilding free space tree [ 119.148903][ T6978] BTRFS info (device loop1): disabling free space tree [ 119.177833][ T6978] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 119.224463][ T6978] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 119.352085][ T23] ryos 0003:1E7D:3138.0005: unknown main item tag 0x0 [ 119.369452][ T23] ryos 0003:1E7D:3138.0005: unknown main item tag 0x0 [ 119.384219][ T23] ryos 0003:1E7D:3138.0005: unknown main item tag 0x0 [ 119.396391][ T6999] loop2: detected capacity change from 0 to 40427 [ 119.402972][ T23] ryos 0003:1E7D:3138.0005: unknown main item tag 0x0 [ 119.410552][ T23] ryos 0003:1E7D:3138.0005: unknown main item tag 0x0 [ 119.434659][ T6999] F2FS-fs (loop2): Image doesn't support compression [ 119.452305][ T6999] F2FS-fs (loop2): heap/no_heap options were deprecated [ 119.459928][ T23] ryos 0003:1E7D:3138.0005: hidraw0: USB HID v0.05 Device [HID 1e7d:3138] on usb-dummy_hcd.0-1/input0 [ 119.499566][ T6999] F2FS-fs (loop2): invalid crc value [ 119.532884][ T6999] F2FS-fs (loop2): Found nat_bits in checkpoint [ 119.666608][ T23] usb 1-1: USB disconnect, device number 5 [ 119.725057][ T7023] fido_id[7023]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 119.781937][ T6999] F2FS-fs (loop2): Start checkpoint disabled! [ 119.837587][ T6999] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 119.877175][ T5781] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.110266][ T7033] loop3: detected capacity change from 0 to 1024 [ 120.573846][ T7043] loop1: detected capacity change from 0 to 512 [ 120.763266][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.442'. [ 120.862355][ T7043] EXT4-fs (loop1): Test dummy encryption mode enabled [ 120.954853][ T7043] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2249: inode #12: comm syz.1.445: corrupted in-inode xattr: invalid ea_ino [ 121.030472][ T7043] EXT4-fs (loop1): Remounting filesystem read-only [ 121.045441][ T7043] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.236179][ T5781] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 121.379469][ T7068] loop3: detected capacity change from 0 to 8192 [ 121.410157][ T7068] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 121.451935][ T7068] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 121.481424][ T7068] REISERFS (device loop3): using ordered data mode [ 121.488945][ T7068] reiserfs: using flush barriers [ 121.515339][ T7068] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 121.534088][ T7068] REISERFS (device loop3): checking transaction log (loop3) [ 121.582579][ T7068] REISERFS (device loop3): Using r5 hash to sort names [ 121.604870][ T7068] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 121.742766][ T7063] loop2: detected capacity change from 0 to 32768 [ 121.764721][ T7068] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "dax=never" [ 122.740244][ T7108] Bluetooth: MGMT ver 1.22 [ 122.967739][ T7116] ALSA: mixer_oss: invalid OSS volume '' [ 123.115543][ T7095] loop2: detected capacity change from 0 to 32768 [ 123.176886][ T7095] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 123.347456][ T7095] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 123.650575][ T7140] xt_hashlimit: max too large, truncated to 1048576 [ 123.819695][ T7146] loop0: detected capacity change from 0 to 64 [ 123.865180][ T7144] pim6reg9: entered allmulticast mode [ 123.882048][ T7146] hfs: unable to locate alternate MDB [ 123.890318][ T7146] hfs: continuing without an alternate MDB [ 123.988447][ T7148] loop3: detected capacity change from 0 to 2048 [ 124.052360][ T7148] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 124.129760][ T7151] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.505972][ T7161] tipc: Started in network mode [ 124.528641][ T7161] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 124.551058][ T7161] tipc: Enabling of bearer rejected, failed to enable media [ 124.717885][ T7167] loop3: detected capacity change from 0 to 1024 [ 124.785974][ T7169] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.832088][ T27] audit: type=1800 audit(1763131605.175:27): pid=7167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.500" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 125.001697][ T7173] loop1: detected capacity change from 0 to 512 [ 125.127451][ T7179] loop3: detected capacity change from 0 to 256 [ 125.128983][ T7173] Quota error (device loop1): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 125.148452][ T5782] ocfs2: Unmounting device (7,2) on (node local) [ 125.150663][ T7173] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 125.166624][ T7173] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.503: Failed to acquire dquot type 1 [ 125.224462][ T7173] EXT4-fs (loop1): 1 truncate cleaned up [ 125.254077][ T7173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.294819][ T7173] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.516868][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.815732][ T7197] sg_write: data in/out 852092/1 bytes for SCSI command 0x1c-- guessing data in; [ 125.815732][ T7197] program syz.1.513 not setting count and/or reply_len properly [ 126.044352][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 126.266197][ T8] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 126.291958][ T8] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 126.296131][ T7211] ip6tnl1: entered allmulticast mode [ 126.310237][ T7191] loop3: detected capacity change from 0 to 32768 [ 126.324232][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 126.363747][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 126.396104][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 126.406295][ T7191] [ 126.406295][ T7191] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.406295][ T7191] [ 126.415630][ T8] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 126.429125][ T8] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 126.459294][ T8] usb 3-1: Product: syz [ 126.463513][ T8] usb 3-1: Manufacturer: syz [ 126.497924][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 126.503193][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 126.506862][ T7191] ERROR: (device loop3): diWrite: ixpxd invalid [ 126.506862][ T7191] [ 126.518056][ T7215] loop0: detected capacity change from 0 to 128 [ 126.541077][ T8] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 126.556679][ T8] cdc_wdm 3-1:1.0: Unknown control protocol [ 126.581503][ T7191] ERROR: (device loop3): txCommit: [ 126.581503][ T7191] [ 126.594502][ T7215] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 126.610804][ T7215] System zones: 1-3, 19-19, 35-36 [ 126.626575][ T7215] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 126.652039][ T7215] ext4 filesystem being mounted at /156/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 126.763755][ T7215] EXT4-fs warning (device loop0): ext4_group_extend:1892: will only finish group (8193 blocks, 8129 new) [ 126.765829][ T27] audit: type=1800 audit(1763131607.105:28): pid=7215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.522" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 126.781646][ T7215] EXT4-fs warning (device loop0): ext4_group_extend:1897: can't read last block, resize aborted [ 126.823041][ T5784] [ 126.823041][ T5784] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.823041][ T5784] [ 126.871399][ T5784] [ 126.871399][ T5784] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.871399][ T5784] [ 126.883271][ T5786] usb 3-1: USB disconnect, device number 5 [ 126.923137][ T5783] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.364376][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 127.434359][ T23] IPVS: starting estimator thread 0... [ 127.482762][ T7240] loop3: detected capacity change from 0 to 128 [ 127.490276][ T7240] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 127.514225][ T7240] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 127.565933][ T7236] IPVS: using max 22 ests per chain, 52800 per kthread [ 127.580578][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 127.632496][ T8] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 127.642524][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.660113][ T8] usb 1-1: Product: syz [ 127.676469][ T8] usb 1-1: Manufacturer: syz [ 127.681114][ T8] usb 1-1: SerialNumber: syz [ 127.684292][ T7244] netlink: 24 bytes leftover after parsing attributes in process `syz.1.535'. [ 127.709983][ T8] usb 1-1: config 0 descriptor?? [ 127.769234][ T7247] netlink: 56 bytes leftover after parsing attributes in process `syz.2.537'. [ 127.814514][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.537'. [ 128.248778][ T28] usb 1-1: USB disconnect, device number 6 [ 128.511177][ T7265] loop2: detected capacity change from 0 to 512 [ 128.529089][ T7265] EXT4-fs: Ignoring removed oldalloc option [ 128.578524][ T7248] loop3: detected capacity change from 0 to 40427 [ 128.584846][ T7265] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2249: inode #15: comm syz.2.545: corrupted in-inode xattr: e_value size too large [ 128.608562][ T7265] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.545: couldn't read orphan inode 15 (err -117) [ 128.633634][ T7265] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.634187][ T7248] F2FS-fs (loop3): Found nat_bits in checkpoint [ 128.757644][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.796134][ T7248] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 129.367205][ T7290] loop2: detected capacity change from 0 to 512 [ 129.398024][ T7290] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #12: comm syz.2.556: iget: bad extra_isize 64544 (inode size 256) [ 129.450132][ T7290] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.556: couldn't read orphan inode 12 (err -117) [ 129.573986][ T7290] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.671599][ T7290] EXT4-fs warning (device loop2): __ext4fs_dirhash:283: invalid/unsupported hash tree version 9 [ 129.779210][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.088307][ T7317] loop1: detected capacity change from 0 to 128 [ 130.141810][ T7318] loop3: detected capacity change from 0 to 1024 [ 130.157899][ T7320] netlink: 236 bytes leftover after parsing attributes in process `syz.2.569'. [ 130.175286][ T7317] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 130.330870][ T5781] sysv_free_block: trying to free block not in datazone [ 130.359974][ T5781] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 130.372223][ T2116] hfsplus: b-tree write err: -5, ino 4 [ 130.671256][ T7336] loop1: detected capacity change from 0 to 1024 [ 130.693019][ T7336] EXT4-fs: Ignoring removed bh option [ 130.709791][ T7336] EXT4-fs: inline encryption not supported [ 130.717495][ T7336] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 130.730871][ T7336] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 130.764346][ T789] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 130.773157][ T7336] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 2: comm syz.1.577: lblock 2 mapped to illegal pblock 2 (length 1) [ 130.877540][ T7336] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 130.934411][ T7336] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 48: comm syz.1.577: lblock 0 mapped to illegal pblock 48 (length 1) [ 130.940647][ T7343] mkiss: ax0: crc mode is auto. [ 130.966205][ T789] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 130.971587][ T7336] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 130.985458][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.011749][ T7336] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.577: Failed to acquire dquot type 0 [ 131.021044][ T789] usb 4-1: config 0 descriptor?? [ 131.043950][ T7336] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 131.062823][ T789] gspca_main: spca508-2.14.0 probing 8086:0110 [ 131.072466][ T7336] EXT4-fs error (device loop1): ext4_evict_inode:252: inode #11: comm syz.1.577: mark_inode_dirty error [ 131.090617][ T7336] EXT4-fs warning (device loop1): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 131.123048][ T7336] EXT4-fs (loop1): 1 orphan inode deleted [ 131.134808][ T79] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 131.153370][ T7336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.175825][ T79] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 131.204541][ T79] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u4:5: Failed to release dquot type 0 [ 131.253873][ T789] gspca_spca508: reg_read err -32 [ 131.261554][ T7332] loop0: detected capacity change from 0 to 32768 [ 131.307559][ T7336] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 131.329666][ T7332] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 131.351259][ T7336] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 131.386082][ T7336] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 131.424794][ T7336] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 48: comm syz.1.577: lblock 0 mapped to illegal pblock 48 (length 1) [ 131.447971][ T5798] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 131.471335][ T7348] loop2: detected capacity change from 0 to 64 [ 131.472925][ T789] gspca_spca508: reg_read err -71 [ 131.479982][ T7336] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 131.497558][ T789] gspca_spca508: reg_read err -71 [ 131.522571][ T7336] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 131.536810][ T789] gspca_spca508: reg_read err -71 [ 131.557478][ T27] audit: type=1326 audit(1763131611.905:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a93d8f6c9 code=0x7ffc0000 [ 131.564533][ T789] gspca_spca508: reg write: error -71 [ 131.634711][ T789] spca508: probe of 4-1:0.0 failed with error -71 [ 131.662576][ T789] usb 4-1: USB disconnect, device number 5 [ 131.670666][ T27] audit: type=1326 audit(1763131611.945:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f5a93d8f6c9 code=0x7ffc0000 [ 131.745067][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.759540][ T27] audit: type=1326 audit(1763131611.945:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a93d8f6c9 code=0x7ffc0000 [ 131.823274][ T27] audit: type=1326 audit(1763131611.945:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a93d8f6c9 code=0x7ffc0000 [ 131.960786][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.587'. [ 132.084090][ T7363] loop2: detected capacity change from 0 to 512 [ 132.237580][ T8] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 132.464782][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 132.490192][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 132.531811][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.574242][ T8] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 132.600598][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.640859][ T8] usb 2-1: config 0 descriptor?? [ 132.649516][ T7357] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 132.894321][ T789] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 132.943205][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.950950][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.999334][ T7377] loop0: detected capacity change from 0 to 32768 [ 133.068994][ T7377] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 133.094747][ T789] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 133.113760][ T8] uclogic 0003:5543:0004.0006: No inputs registered, leaving [ 133.131833][ T789] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 133.164796][ T8] uclogic 0003:5543:0004.0006: hidraw0: USB HID v0.01 Device [HID 5543:0004] on usb-dummy_hcd.1-1/input0 [ 133.215130][ T789] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 133.253520][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.268903][ T5783] ocfs2: Unmounting device (7,0) on (node local) [ 133.272190][ T789] usb 3-1: Product: syz [ 133.302489][ T789] usb 3-1: Manufacturer: syz [ 133.337174][ T789] usb 3-1: SerialNumber: syz [ 133.356019][ T789] usb 3-1: config 0 descriptor?? [ 133.371747][ T789] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 133.404439][ T5849] usb 2-1: USB disconnect, device number 4 [ 133.415009][ T7389] overlayfs: missing 'lowerdir' [ 133.674582][ T7392] loop0: detected capacity change from 0 to 4096 [ 133.689195][ T7392] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 133.908145][ T7399] vivid-000: disconnect [ 133.915067][ T7395] vivid-000: reconnect [ 133.984510][ T789] gspca_sunplus: reg_r err -71 [ 133.996538][ T789] sunplus: probe of 3-1:0.0 failed with error -71 [ 134.030213][ T789] usb 3-1: USB disconnect, device number 6 [ 135.101766][ T7416] loop0: detected capacity change from 0 to 40427 [ 135.109820][ T7422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.616'. [ 135.124399][ T5849] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 135.131279][ T7422] vlan2: entered allmulticast mode [ 135.132060][ T7416] F2FS-fs (loop0): Invalid segment/section count (31, 2328 x 1) [ 135.151939][ T7416] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 135.164663][ T7422] vlan1: entered allmulticast mode [ 135.169882][ T7422] veth0_vlan: entered allmulticast mode [ 135.175717][ T7416] F2FS-fs (loop0): invalid crc value [ 135.196554][ T7416] F2FS-fs (loop0): Found nat_bits in checkpoint [ 135.247465][ T7408] comedi comedi0: reset error (fatal) [ 135.299072][ T7416] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 135.314430][ T7416] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 135.347434][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.367704][ T5849] usb 3-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 135.394177][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.424731][ T5849] usb 3-1: config 0 descriptor?? [ 135.868302][ T5849] wacom 0003:056A:00C6.0007: unknown main item tag 0x0 [ 135.880868][ T7435] netlink: 76 bytes leftover after parsing attributes in process `syz.0.619'. [ 135.900918][ T5849] wacom 0003:056A:00C6.0007: hidraw0: USB HID v0.00 Device [HID 056a:00c6] on usb-dummy_hcd.2-1/input0 [ 136.141097][ T5849] usb 3-1: USB disconnect, device number 7 [ 136.142889][ T7438] loop3: detected capacity change from 0 to 4096 [ 136.281299][ T7438] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 136.383377][ T7438] ntfs3: loop3: failed to convert name for inode 1e. [ 136.405160][ T7438] ntfs3: loop3: ino=5, "/" directory corrupted [ 136.560143][ T7449] loop1: detected capacity change from 0 to 16 [ 136.586101][ T7449] erofs: (device loop1): mounted with root inode @ nid 36. [ 136.643046][ T27] audit: type=1800 audit(1763131616.985:33): pid=7449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.625" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 136.959672][ T7457] tipc: Enabling of bearer <Ýth:h> rejected, media not registered [ 137.018750][ T7445] loop0: detected capacity change from 0 to 32768 [ 137.120260][ T7445] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 137.120260][ T7445] [ 137.121265][ T7463] loop2: detected capacity change from 0 to 64 [ 137.792734][ T7461] loop1: detected capacity change from 0 to 32768 [ 137.827068][ T7461] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.632 (7461) [ 137.866475][ T7461] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 137.894387][ T7461] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 137.913358][ T7461] BTRFS info (device loop1): using free space tree [ 138.039137][ T7461] BTRFS info (device loop1): enabling ssd optimizations [ 138.064709][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 138.082447][ T7461] BTRFS info (device loop1): auto enabling async discard [ 138.156167][ T7501] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 138.277421][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.304385][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.344230][ T8] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 138.375062][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.398112][ T7503] loop0: detected capacity change from 0 to 128 [ 138.410883][ T8] usb 3-1: config 0 descriptor?? [ 138.475789][ T7503] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 138.493322][ T5781] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 138.524748][ T7503] hpfs: filesystem error: improperly stopped [ 138.530800][ T7503] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 138.559003][ T7503] hpfs: You really don't want any checks? You are crazy... [ 138.580937][ T7503] hpfs: hpfs_map_sector(): read error [ 138.620025][ T7503] hpfs: code page support is disabled [ 138.656446][ T7503] hpfs: hpfs_map_4sectors(): unaligned read [ 138.662703][ T7503] hpfs: hpfs_map_4sectors(): unaligned read [ 138.726107][ T7503] hpfs: filesystem error: unable to find root dir [ 138.829509][ T7503] hpfs: hpfs_map_4sectors(): unaligned read [ 138.856475][ T7503] hpfs: hpfs_map_sector(): read error [ 138.864960][ T8] hid (null): report_id 393985501 is invalid [ 138.896327][ T8] macally 0003:060B:0001.0008: report_id 393985501 is invalid [ 138.912733][ T8] macally 0003:060B:0001.0008: item 0 4 1 8 parsing failed [ 138.935011][ T8] macally: probe of 0003:060B:0001.0008 failed with error -22 [ 138.985089][ T7479] loop3: detected capacity change from 0 to 40427 [ 139.031210][ T7479] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 139.108061][ T7479] F2FS-fs (loop3): invalid crc value [ 139.119965][ T7479] F2FS-fs (loop3): Found nat_bits in checkpoint [ 139.132760][ T8] usb 3-1: USB disconnect, device number 8 [ 139.314707][ T7479] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 139.386879][ T7514] loop1: detected capacity change from 0 to 256 [ 139.452196][ T27] audit: type=1800 audit(1763131619.795:34): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.642" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 139.466472][ T7516] loop0: detected capacity change from 0 to 16 [ 139.524081][ T7514] FAT-fs (loop1): Directory bread(block 64) failed [ 139.531188][ T7514] FAT-fs (loop1): Directory bread(block 65) failed [ 139.538795][ T7516] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 139.540017][ T7514] FAT-fs (loop1): Directory bread(block 66) failed [ 139.572678][ T7516] erofs: (device loop0): mounted with root inode @ nid 36. [ 139.583876][ T7514] FAT-fs (loop1): Directory bread(block 67) failed [ 139.598836][ T5784] syz-executor: attempt to access beyond end of device [ 139.598836][ T5784] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 139.638042][ T7514] FAT-fs (loop1): Directory bread(block 68) failed [ 139.650919][ T5784] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 139.658055][ T7514] FAT-fs (loop1): Directory bread(block 69) failed [ 139.673772][ T7514] FAT-fs (loop1): Directory bread(block 70) failed [ 139.687074][ T7514] FAT-fs (loop1): Directory bread(block 71) failed [ 139.757490][ T7514] FAT-fs (loop1): Directory bread(block 72) failed [ 139.764074][ T7514] FAT-fs (loop1): Directory bread(block 73) failed [ 140.130809][ T7520] loop2: detected capacity change from 0 to 8192 [ 140.516351][ T7530] loop2: detected capacity change from 0 to 4096 [ 140.529642][ T7530] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 140.554724][ T28] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 140.644664][ T7530] ntfs: volume version 3.1. [ 140.697716][ T7530] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 140.735773][ T7530] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 140.771959][ T28] usb 2-1: too many endpoints for config 0 interface 0 altsetting 7: 253, using maximum allowed: 30 [ 140.774284][ T7530] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to map page. [ 140.793331][ T28] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.816750][ T7530] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 140.820874][ T28] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 140.836043][ T7530] ntfs: (device loop2): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 140.868638][ T7530] ntfs: (device loop2): ntfs_prepare_file_for_write(): Cannot perform write to inode 0x43, attribute type 0x80, because extending the allocation failed (error 5). [ 140.869788][ T28] usb 2-1: config 0 interface 0 has no altsetting 0 [ 140.912646][ T28] usb 2-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 140.944458][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.965622][ T28] usb 2-1: config 0 descriptor?? [ 141.065526][ T7532] loop0: detected capacity change from 0 to 32768 [ 141.099857][ T7532] (syz.0.659,7532,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 141.130275][ T7532] (syz.0.659,7532,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 141.188027][ T7532] JBD2: Ignoring recovery information on journal [ 141.248249][ T7532] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 141.284044][ T7542] usb usb8: usbfs: process 7542 (syz.3.662) did not claim interface 4 before use [ 141.388964][ T28] wacom 0003:056A:0003.0009: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 141.410803][ T5783] ocfs2: Unmounting device (7,0) on (node local) [ 141.417670][ T28] wacom 0003:056A:0003.0009: hidraw0: USB HID v0.04 Device [HID 056a:0003] on usb-dummy_hcd.1-1/input0 [ 141.465248][ T28] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0003.0009/input/input16 [ 141.536581][ T7545] loop0: detected capacity change from 0 to 16 [ 141.584602][ T7545] erofs: (device loop0): mounted with root inode @ nid 36. [ 141.614622][ T28] usb 2-1: USB disconnect, device number 5 [ 141.640598][ T27] audit: type=1800 audit(1763131621.985:35): pid=7545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.663" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 142.156356][ T7539] loop2: detected capacity change from 0 to 40427 [ 142.172549][ T7539] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 142.191812][ T7539] F2FS-fs (loop2): invalid crc value [ 142.212410][ T7539] F2FS-fs (loop2): Found nat_bits in checkpoint [ 142.310982][ T7539] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 142.449931][ T27] audit: type=1800 audit(1763131622.785:36): pid=7539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.660" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 142.479233][ T7558] loop0: detected capacity change from 0 to 256 [ 142.505244][ T7558] exfat: Deprecated parameter 'utf8' [ 142.515269][ T5782] syz-executor: attempt to access beyond end of device [ 142.515269][ T5782] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 142.547407][ T5782] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 142.578003][ T7558] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 142.608549][ T7553] loop3: detected capacity change from 0 to 32768 [ 142.645134][ T7553] XFS: ikeep mount option is deprecated. [ 142.719283][ T7553] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 142.995239][ T7553] XFS (loop3): Ending clean mount [ 143.024010][ T7553] XFS (loop3): Quotacheck needed: Please wait. [ 143.109350][ T7553] XFS (loop3): Quotacheck: Done. [ 143.386396][ T5784] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 143.569939][ T7574] loop0: detected capacity change from 0 to 32768 [ 143.581658][ T7574] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.671 (7574) [ 143.628867][ T7574] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 143.655045][ T7574] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 143.672669][ T7574] BTRFS info (device loop0): using free space tree [ 143.836702][ T7574] BTRFS info (device loop0): enabling ssd optimizations [ 143.843716][ T7574] BTRFS info (device loop0): auto enabling async discard [ 144.080589][ T5783] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 144.889851][ T7613] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 144.909035][ T7613] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 144.924644][ T7613] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 144.947149][ T7613] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 144.964684][ T5793] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 10 /dev/loop0 scanned by udevd (5793) [ 145.378921][ T7623] loop1: detected capacity change from 0 to 32768 [ 145.497859][ T7646] netlink: 'syz.0.696': attribute type 1 has an invalid length. [ 145.497927][ T7623] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 145.562202][ T7648] loop0: detected capacity change from 0 to 512 [ 145.580270][ T7623] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 145.638877][ T7648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.654288][ T7623] XFS (loop1): Ending clean mount [ 145.686112][ T7623] XFS (loop1): Quotacheck needed: Please wait. [ 145.697490][ T7648] ext4 filesystem being mounted at /207/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 145.820669][ T7623] XFS (loop1): Quotacheck: Done. [ 145.891511][ T27] audit: type=1800 audit(1763131626.235:37): pid=7623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.689" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 145.918011][ T7648] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #2: comm syz.0.697: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 145.992296][ T7648] EXT4-fs (loop0): Remounting filesystem read-only [ 146.028121][ T5781] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 146.139444][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.204338][ T5789] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.480959][ T7676] netlink: 36 bytes leftover after parsing attributes in process `syz.0.709'. [ 146.578260][ T7682] loop2: detected capacity change from 0 to 256 [ 146.674239][ T5786] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 146.739544][ T7686] loop2: detected capacity change from 0 to 64 [ 146.885367][ T5786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.903916][ T5786] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 146.924451][ T5789] Bluetooth: hci1: command 0x0c1a tx timeout [ 146.924466][ T5786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.963527][ T5786] usb 4-1: config 0 descriptor?? [ 147.004407][ T5787] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.012526][ T5789] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.396313][ T7698] loop0: detected capacity change from 0 to 4096 [ 147.409825][ T5786] aquacomputer_d5next 0003:0C70:F00B.000A: unknown main item tag 0x0 [ 147.459063][ T5786] aquacomputer_d5next 0003:0C70:F00B.000A: unknown main item tag 0x0 [ 147.509531][ T5786] aquacomputer_d5next 0003:0C70:F00B.000A: hidraw0: USB HID v0.04 Device [HID 0c70:f00b] on usb-dummy_hcd.3-1/input0 [ 147.541880][ T7698] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 147.631430][ T7698] ntfs3: loop0: ino=5, "/" attr_set_size [ 147.695979][ T5786] usb 4-1: USB disconnect, device number 6 [ 148.179302][ T7719] pimreg3: entered allmulticast mode [ 148.194271][ T23] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 148.320307][ T7709] loop1: detected capacity change from 0 to 32768 [ 148.361484][ T7709] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 148.386332][ T23] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 148.419237][ T23] usb 1-1: config 0 has no interface number 0 [ 148.437116][ T7709] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 148.456809][ T23] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 148.509485][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.531846][ T23] usb 1-1: config 0 descriptor?? [ 148.559866][ T23] usb 1-1: selecting invalid altsetting 1 [ 148.578852][ T23] dvb_ttusb_budget: ttusb_init_controller: error [ 148.604572][ T23] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 148.764490][ T23] DVB: Unable to find symbol cx22700_attach() [ 148.890620][ T23] DVB: Unable to find symbol tda10046_attach() [ 148.914871][ T23] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 148.945016][ T23] usb 1-1: USB disconnect, device number 7 [ 149.877005][ T5781] ocfs2: Unmounting device (7,1) on (node local) [ 149.877783][ T7765] loop0: detected capacity change from 0 to 16 [ 149.920757][ T7765] erofs: (device loop0): mounted with root inode @ nid 36. [ 150.731134][ T7786] loop1: detected capacity change from 0 to 256 [ 150.991474][ T7775] loop2: detected capacity change from 0 to 32768 [ 151.014622][ T7775] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.754 (7775) [ 151.086429][ T7775] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 151.111816][ T7775] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 151.163587][ T7775] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 151.189570][ T7774] loop0: detected capacity change from 0 to 40427 [ 151.203396][ T7775] BTRFS info (device loop2): use zstd compression, level 3 [ 151.223786][ T7775] BTRFS info (device loop2): using free space tree [ 151.255865][ T7774] F2FS-fs (loop0): invalid crc value [ 151.296749][ T7774] F2FS-fs (loop0): Found nat_bits in checkpoint [ 151.396022][ T7774] F2FS-fs (loop0): Start checkpoint disabled! [ 151.428096][ T7774] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 151.456075][ T7775] BTRFS info (device loop2): enabling ssd optimizations [ 151.463111][ T7775] BTRFS info (device loop2): auto enabling async discard [ 151.655012][ T7820] loop3: detected capacity change from 0 to 512 [ 151.709428][ T2116] kworker/u4:6: attempt to access beyond end of device [ 151.709428][ T2116] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 151.718836][ T7818] loop1: detected capacity change from 0 to 4096 [ 151.754865][ T7818] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 151.776340][ T5782] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 151.792860][ T2116] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 151.814047][ T2116] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 151.998382][ T5968] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop2 scanned by udevd (5968) [ 152.377494][ T7827] netlink: 'syz.1.770': attribute type 1 has an invalid length. [ 152.700284][ T7835] loop0: detected capacity change from 0 to 512 [ 152.775758][ T7835] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.766: inode has both inline data and extents flags [ 152.806471][ T7835] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.766: couldn't read orphan inode 15 (err -117) [ 152.860907][ T7835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.869071][ T7839] loop1: detected capacity change from 0 to 256 [ 152.952421][ T7822] loop2: detected capacity change from 0 to 32768 [ 152.960287][ T7839] exfat: Deprecated parameter 'namecase' [ 153.000345][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.062540][ T7839] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 153.085555][ T7841] loop3: detected capacity change from 0 to 1024 [ 153.267564][ T12] hfsplus: b-tree write err: -5, ino 4 [ 153.377733][ T7848] loop1: detected capacity change from 0 to 256 [ 153.436614][ T7848] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 153.748176][ T7860] loop0: detected capacity change from 0 to 256 [ 153.858733][ T7860] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 153.915481][ T7860] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 198) [ 154.221961][ T7876] loop0: detected capacity change from 0 to 8 [ 154.233628][ T7878] loop3: detected capacity change from 0 to 128 [ 154.267288][ T7878] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 154.311371][ T7878] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.395993][ T7876] SQUASHFS error: Unable to read directory block [2c0:35] [ 154.467156][ T7882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.795'. [ 154.476446][ T789] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 154.599913][ T7886] netlink: 'syz.3.798': attribute type 62 has an invalid length. [ 154.687827][ T789] usb 2-1: Using ep0 maxpacket: 16 [ 154.718294][ T789] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 154.743125][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.770685][ T789] usb 2-1: Product: syz [ 154.784844][ T789] usb 2-1: Manufacturer: syz [ 154.789578][ T789] usb 2-1: SerialNumber: syz [ 154.800805][ T789] usb 2-1: config 0 descriptor?? [ 154.818192][ T789] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 154.875008][ T7894] loop3: detected capacity change from 0 to 4096 [ 154.897825][ T7894] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 154.921859][ T7896] tipc: Started in network mode [ 154.935567][ T7896] tipc: Node identity ac1414aa, cluster identity 4711 [ 154.966189][ T7896] tipc: Enabled bearer , priority 10 [ 154.999648][ T7894] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 155.035030][ T7894] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 155.075398][ T7894] ntfs3: loop3: ino=5, "/" directory corrupted [ 155.175087][ T7902] loop0: detected capacity change from 0 to 512 [ 155.240153][ T789] usb 2-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 155.272555][ T7902] EXT4-fs error (device loop0): ext4_quota_enable:7120: comm syz.0.804: Bad quota inum: 1, type: 2 [ 155.356918][ T7902] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 155.427790][ T7902] EXT4-fs (loop0): mount failed [ 155.489676][ T7909] loop3: detected capacity change from 0 to 8192 [ 155.495756][ T23] usb 2-1: USB disconnect, device number 6 [ 155.525037][ T23] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 155.544311][ T7909] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 155.547724][ T23] visor 2-1:0.0: device disconnected [ 155.609513][ T7909] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 155.660928][ T7909] REISERFS (device loop3): using ordered data mode [ 155.707584][ T7909] reiserfs: using flush barriers [ 155.741513][ T7909] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 155.769756][ T7909] REISERFS (device loop3): checking transaction log (loop3) [ 155.783209][ T7909] REISERFS (device loop3): Using r5 hash to sort names [ 155.805418][ T7909] REISERFS (device loop3): using 3.5.x disk format [ 155.956925][ T23] tipc: Node number set to 2886997162 [ 156.135059][ T7927] netlink: 'syz.2.815': attribute type 1 has an invalid length. [ 156.820375][ T7933] loop1: detected capacity change from 0 to 32768 [ 156.852876][ T7933] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 156.953042][ T7933] XFS (loop1): Ending clean mount [ 157.031960][ T7932] loop2: detected capacity change from 0 to 32768 [ 157.045591][ T5781] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 157.068105][ T7959] netlink: 'syz.0.825': attribute type 1 has an invalid length. [ 157.106771][ T7932] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 157.312588][ T7932] XFS (loop2): Ending clean mount [ 157.362629][ T7932] XFS (loop2): Quotacheck needed: Please wait. [ 157.522173][ T7932] XFS (loop2): Quotacheck: Done. [ 157.604227][ T28] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 157.710286][ T5782] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 157.845660][ T28] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 157.874212][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.902778][ T28] usb 1-1: Product: syz [ 157.912934][ T28] usb 1-1: Manufacturer: syz [ 157.923330][ T28] usb 1-1: SerialNumber: syz [ 157.944444][ T28] usb 1-1: config 0 descriptor?? [ 157.965809][ T28] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 158.001667][ T28] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 158.041987][ T28] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 158.064004][ T7984] netlink: 'syz.3.836': attribute type 4 has an invalid length. [ 158.072023][ T28] usb 1-1: media controller created [ 158.074319][ T7984] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.836'. [ 158.130152][ T28] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.175140][ T7972] dvb-usb: bulk message failed: -22 (7/0) [ 158.270852][ T28] DVB: Unable to find symbol mt352_attach() [ 158.391243][ T28] DVB: Unable to find symbol nxt6000_attach() [ 158.398644][ T28] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 158.420762][ T28] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19 [ 158.446157][ T28] dvb-usb: schedule remote query interval to 1000 msecs. [ 158.453242][ T28] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 158.457230][ T7976] loop1: detected capacity change from 0 to 40427 [ 158.476357][ T7976] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 158.490335][ T28] dvb-usb: bulk message failed: -22 (7/0) [ 158.495485][ T7976] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 158.515928][ T28] dvb-usb: bulk message failed: -22 (7/0) [ 158.538244][ T28] usb 1-1: USB disconnect, device number 8 [ 158.643467][ T7976] F2FS-fs (loop1): Found nat_bits in checkpoint [ 158.743602][ T28] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 158.808418][ T7976] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 158.824295][ T7976] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 158.948227][ T7976] fscrypt (loop1, inode 3): Error -61 getting encryption context [ 159.128879][ T8012] loop0: detected capacity change from 0 to 512 [ 159.181023][ T8012] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 159.565958][ T8024] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.851'. [ 159.604614][ T8024] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.851'. [ 159.624823][ T8021] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.851'. [ 159.642418][ T8028] loop1: detected capacity change from 0 to 256 [ 159.715137][ T8028] exFAT-fs (loop1): failed to load upcase table (idx : 0x00000c00, chksum : 0x08037f6a, utbl_chksum : 0xe619d30d) [ 159.955988][ T8035] openvswitch: netlink: Actions may not be safe on all matching packets [ 160.340392][ T8047] loop1: detected capacity change from 0 to 1024 [ 160.478687][ T3470] hfsplus: b-tree write err: -5, ino 4 [ 160.771818][ T8033] loop0: detected capacity change from 0 to 32768 [ 160.825334][ T8033] non-latin1 character 0x230 found in JFS file name [ 160.848113][ T8033] mount with iocharset=utf8 to access [ 161.000843][ T8063] vlan2: entered promiscuous mode [ 161.019879][ T8063] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 161.055741][ T8063] vlan2: entered allmulticast mode [ 161.067550][ T8063] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 161.278192][ T8071] loop1: detected capacity change from 0 to 256 [ 161.533812][ T8075] rtc_cmos 00:00: Alarms can be up to one day in the future [ 161.622381][ T8051] loop2: detected capacity change from 0 to 40427 [ 161.657112][ T8051] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 161.714684][ T8051] F2FS-fs (loop2): invalid crc value [ 161.759978][ T8051] F2FS-fs (loop2): Found nat_bits in checkpoint [ 161.999438][ T8051] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 162.202987][ T5782] syz-executor: attempt to access beyond end of device [ 162.202987][ T5782] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 162.254890][ T5782] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 162.583161][ T8081] loop1: detected capacity change from 0 to 32768 [ 162.650370][ T8081] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 162.650370][ T8081] [ 162.674452][ T8081] ERROR: (device loop1): remounting filesystem as read-only [ 162.945540][ T27] audit: type=1326 audit(1763131643.295:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.1.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc718f6c9 code=0x7ffc0000 [ 162.959688][ T8096] loop1: detected capacity change from 0 to 256 [ 163.014229][ T27] audit: type=1326 audit(1763131643.295:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.1.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc718f6c9 code=0x7ffc0000 [ 163.085057][ T27] audit: type=1326 audit(1763131643.295:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.1.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc718f6c9 code=0x7ffc0000 [ 163.104263][ T8096] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 163.152919][ T27] audit: type=1326 audit(1763131643.305:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.1.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc718f6c9 code=0x7ffc0000 [ 163.161156][ T8094] loop3: detected capacity change from 0 to 32768 [ 163.181708][ T8096] FAT-fs (loop1): Filesystem has been set read-only [ 163.182801][ T8090] loop0: detected capacity change from 0 to 40427 [ 163.227067][ T27] audit: type=1326 audit(1763131643.305:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.1.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1fc718f6c9 code=0x7ffc0000 [ 163.257413][ T8090] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 163.290118][ T8090] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 163.327064][ T8094] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 163.343414][ T27] audit: type=1326 audit(1763131643.305:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.1.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1fc718f703 code=0x7ffc0000 [ 163.381146][ T8090] F2FS-fs (loop0): invalid crc value [ 163.430208][ T8094] XFS (loop3): Ending clean mount [ 163.442022][ T27] audit: type=1326 audit(1763131643.305:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.1.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1fc718e17f code=0x7ffc0000 [ 163.443107][ T8090] F2FS-fs (loop0): Found nat_bits in checkpoint [ 163.580775][ T27] audit: type=1326 audit(1763131643.305:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.1.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1fc718f757 code=0x7ffc0000 [ 163.665876][ T8090] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 163.686420][ T27] audit: type=1326 audit(1763131643.305:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.1.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1fc718df10 code=0x7ffc0000 [ 163.704192][ T8090] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 163.731215][ T5784] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 163.774264][ T27] audit: type=1326 audit(1763131643.305:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.1.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1fc718f2cb code=0x7ffc0000 [ 163.872160][ T8090] syz.0.882: attempt to access beyond end of device [ 163.872160][ T8090] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 164.369591][ T8108] loop2: detected capacity change from 0 to 32768 [ 164.464946][ T8108] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 164.476406][ T8119] loop3: detected capacity change from 0 to 2048 [ 164.505475][ T8127] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.529296][ T8113] loop1: detected capacity change from 0 to 32768 [ 164.640027][ T8108] XFS (loop2): Ending clean mount [ 164.668006][ T8108] XFS (loop2): Quotacheck needed: Please wait. [ 164.669064][ T8113] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 164.781366][ T8108] XFS (loop2): Quotacheck: Done. [ 164.951868][ T8113] XFS (loop1): Ending clean mount [ 165.127471][ T5781] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 165.156883][ T5782] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 165.433401][ T8150] loop3: detected capacity change from 0 to 4096 [ 165.494383][ T8152] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.058474][ T8171] loop3: detected capacity change from 0 to 4096 [ 166.091324][ T8176] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.106510][ T8171] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 166.152932][ T8171] NILFS (loop3): mounting fs with errors [ 166.617518][ T8189] loop0: detected capacity change from 0 to 47 [ 166.642580][ T8191] loop3: detected capacity change from 0 to 736 [ 167.097628][ T8201] loop1: detected capacity change from 0 to 1024 [ 167.107975][ T8199] loop3: detected capacity change from 0 to 4096 [ 167.185229][ T8206] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.186005][ T8199] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 167.308363][ T8199] NILFS (loop3): mounting fs with errors [ 167.330314][ T3502] hfsplus: b-tree write err: -5, ino 4 [ 167.360298][ T8211] loop0: detected capacity change from 0 to 256 [ 167.471772][ T8211] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d) [ 167.495511][ T8214] sctp: [Deprecated]: syz.2.925 (pid 8214) Use of int in max_burst socket option. [ 167.495511][ T8214] Use struct sctp_assoc_value instead [ 167.791137][ T8223] loop0: detected capacity change from 0 to 64 [ 168.284478][ T28] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 168.473391][ T8221] loop3: detected capacity change from 0 to 32768 [ 168.484670][ T28] usb 1-1: Using ep0 maxpacket: 32 [ 168.492659][ T8221] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 168.501580][ T28] usb 1-1: unable to get BOS descriptor or descriptor too short [ 168.524464][ T28] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 168.542844][ T28] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 168.570212][ T28] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 168.584970][ T28] usb 1-1: config 128 has no interface number 0 [ 168.591464][ T28] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 168.628355][ T28] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.647072][ T5793] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 168.653702][ T28] usb 1-1: config 128 interface 127 has no altsetting 0 [ 168.668548][ T8252] netlink: 'syz.2.942': attribute type 1 has an invalid length. [ 168.681584][ T28] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 168.693244][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.710237][ T28] usb 1-1: Product: syz [ 168.720321][ T28] usb 1-1: Manufacturer: syz [ 168.731300][ T28] usb 1-1: SerialNumber: syz [ 168.968031][ T8260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.945'. [ 169.001878][ T8260] sch_tbf: peakrate 2 is lower than or equals to rate 8 ! [ 169.055025][ T28] usb 1-1: USB disconnect, device number 9 [ 169.131623][ T5793] udevd[5793]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.523984][ T8279] loop3: detected capacity change from 0 to 1024 [ 169.528178][ T8275] loop1: detected capacity change from 0 to 4096 [ 169.539132][ T8279] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 169.556085][ T8279] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 169.558427][ T8275] __ntfs_error: 23 callbacks suppressed [ 169.558444][ T8275] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 169.587995][ T8275] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 169.598835][ T8275] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 169.612604][ T8275] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 169.631398][ T8279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.641233][ T8275] ntfs: volume version 3.1. [ 169.726791][ T8275] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp850. You might want to try to use the mount option nls=utf8. [ 169.762741][ T8275] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 169.772713][ T8275] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp850. You might want to try to use the mount option nls=utf8. [ 169.794356][ T28] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 169.798832][ T8275] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x45. [ 169.855675][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.909344][ T8287] comedi comedi3: 8255: I/O port conflict (0x10003,4) [ 169.934324][ T8287] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 169.944778][ T8287] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 169.986464][ T28] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 170.014329][ T28] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 170.041043][ T8289] ip6gre1: entered promiscuous mode [ 170.057512][ T28] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 170.072124][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.138235][ T28] usb 3-1: Product: syz [ 170.142455][ T28] usb 3-1: Manufacturer: syz [ 170.157378][ T28] usb 3-1: SerialNumber: syz [ 170.178723][ T28] usb 3-1: config 0 descriptor?? [ 170.201480][ T8295] loop3: detected capacity change from 0 to 736 [ 170.298394][ T8297] loop0: detected capacity change from 0 to 512 [ 170.362425][ T8297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.397686][ T28] mos7840 3-1:0.0: required endpoints missing [ 170.408034][ T8297] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.531684][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.640200][ T23] usb 3-1: USB disconnect, device number 9 [ 170.803657][ T8292] loop1: detected capacity change from 0 to 32768 [ 170.816656][ T8292] XFS: noikeep mount option is deprecated. [ 170.867746][ T8292] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 170.970046][ T8292] XFS (loop1): Ending clean mount [ 171.014523][ T8292] XFS (loop1): Quotacheck needed: Please wait. [ 171.184757][ T8292] XFS (loop1): Quotacheck: Done. [ 171.232798][ T8322] loop3: detected capacity change from 0 to 512 [ 171.371640][ T5781] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 172.169200][ T8344] ALSA: seq fatal error: cannot create timer (-19) [ 172.263497][ T8332] loop3: detected capacity change from 0 to 32768 [ 172.318926][ T8332] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 172.336576][ T8332] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 172.380272][ T27] audit: type=1800 audit(1763131652.725:71): pid=8332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.975" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 172.384511][ T23] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 172.463998][ T5784] ocfs2: Unmounting device (7,3) on (node local) [ 172.584364][ T28] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 172.634259][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 172.643609][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.664228][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.684575][ T23] usb 1-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 172.693664][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.697155][ T8360] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.986'. [ 172.713340][ T23] usb 1-1: config 0 descriptor?? [ 172.796832][ T28] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.818381][ T28] usb 3-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 172.828328][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.844401][ T28] usb 3-1: Product: syz [ 172.854339][ T28] usb 3-1: Manufacturer: syz [ 172.864154][ T28] usb 3-1: SerialNumber: syz [ 172.909434][ T28] usb 3-1: config 0 descriptor?? [ 172.946926][ T28] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 172.974299][ T28] dvb-usb: bulk message failed: -22 (3/0) [ 173.028081][ T28] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 173.048878][ T28] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 173.076527][ T28] usb 3-1: media controller created [ 173.083987][ T28] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 173.115089][ T28] dvb-usb: bulk message failed: -22 (6/0) [ 173.124416][ T28] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 173.165887][ T23] uclogic 0003:28BD:0074.000B: interface is invalid, ignoring [ 173.174279][ T28] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input20 [ 173.196888][ T8355] dvb-usb: bulk message failed: -22 (2/0) [ 173.223526][ T28] dvb-usb: schedule remote query interval to 150 msecs. [ 173.231212][ T28] dvb-usb: bulk message failed: -22 (3/0) [ 173.264190][ T28] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 173.293992][ T28] usb 3-1: USB disconnect, device number 10 [ 173.400772][ T23] usb 1-1: USB disconnect, device number 10 [ 173.459671][ T28] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 173.799772][ T8385] loop3: detected capacity change from 0 to 4096 [ 173.837273][ T8385] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 173.918931][ T8385] ntfs: volume version 3.1. [ 174.292988][ T8393] loop3: detected capacity change from 0 to 1024 [ 174.447690][ T8387] loop1: detected capacity change from 0 to 32768 [ 174.467035][ T8393] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 174.509995][ T8387] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 174.623459][ T8387] XFS (loop1): Ending clean mount [ 174.636372][ T8387] XFS (loop1): Quotacheck needed: Please wait. [ 174.707407][ T8411] loop2: detected capacity change from 0 to 128 [ 174.726946][ T8411] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 174.776171][ T8411] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 174.793002][ T8387] XFS (loop1): Quotacheck: Done. [ 174.859480][ T8415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1007'. [ 174.891417][ T8414] pimreg: entered allmulticast mode [ 174.920655][ T5781] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 175.250012][ T8428] ieee802154 phy0 wpan0: encryption failed: -22 [ 175.449837][ T8434] loop1: detected capacity change from 0 to 512 [ 175.461531][ T8434] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2249: inode #12: comm syz.1.1018: corrupted in-inode xattr: overlapping e_value [ 175.482723][ T8434] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1018: couldn't read orphan inode 12 (err -117) [ 175.503256][ T8434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.587101][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.984265][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 176.113327][ T8444] loop2: detected capacity change from 0 to 32768 [ 176.120443][ T8442] loop0: detected capacity change from 0 to 32768 [ 176.132713][ T8444] (syz.2.1022,8444,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 176.147212][ T8444] (syz.2.1022,8444,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 176.174499][ T8444] JBD2: Ignoring recovery information on journal [ 176.189457][ T8442] loop0: p9 p11 p16 [ 176.199773][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.211720][ T9] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 176.222094][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.240005][ T9] usb 2-1: config 0 descriptor?? [ 176.309544][ T8444] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 176.569880][ T8454] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 176.569880][ T8454] The task syz.3.1024 (8454) triggered the difference, watch for misbehavior. [ 176.631858][ T5782] ocfs2: Unmounting device (7,2) on (node local) [ 176.668935][ T5798] udevd[5798]: inotify_add_watch(7, /dev/loop0p11, 10) failed: No such file or directory [ 176.682977][ T5793] udevd[5793]: inotify_add_watch(7, /dev/loop0p9, 10) failed: No such file or directory [ 176.694702][ T9] hid (null): bogus close delimiter [ 176.703442][ T5968] udevd[5968]: inotify_add_watch(7, /dev/loop0p16, 10) failed: No such file or directory [ 176.727180][ T9] itetech 0003:06CB:73F4.000C: bogus close delimiter [ 176.733907][ T9] itetech 0003:06CB:73F4.000C: item 0 1 2 10 parsing failed [ 176.759003][ T9] itetech: probe of 0003:06CB:73F4.000C failed with error -22 [ 176.941058][ T9] usb 2-1: USB disconnect, device number 7 [ 177.043516][ T8458] loop2: detected capacity change from 0 to 256 [ 177.084615][ T8458] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 177.098713][ T8453] loop0: detected capacity change from 0 to 32768 [ 177.107258][ T8458] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 177.127154][ T8453] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 177.171046][ T8453] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 177.219849][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 177.219863][ T27] audit: type=1800 audit(1763131657.565:72): pid=8453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1023" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 177.281966][ T5783] ocfs2: Unmounting device (7,0) on (node local) [ 177.894305][ T23] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 178.117274][ T23] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 178.125638][ T23] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 178.151764][ T23] usb 3-1: config 0 has no interface number 0 [ 178.187767][ T23] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 178.197641][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.208366][ T23] usb 3-1: Product: syz [ 178.212664][ T23] usb 3-1: Manufacturer: syz [ 178.234171][ T23] usb 3-1: SerialNumber: syz [ 178.265783][ T23] usb 3-1: config 0 descriptor?? [ 178.516323][ T8482] loop1: detected capacity change from 0 to 32768 [ 178.526707][ T8489] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1040'. [ 178.695652][ T23] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 178.715553][ T23] usb 3-1: No valid video chain found. [ 178.732409][ T8491] loop0: detected capacity change from 0 to 512 [ 178.754978][ T8491] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 178.792761][ T8491] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 178.844351][ T8491] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 178.852511][ T8491] System zones: 0-2, 18-18, 34-34 [ 178.874826][ T8491] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.1041: inode #15: comm syz.0.1041: iget: illegal inode # [ 178.894208][ T8491] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1041: couldn't read orphan inode 15 (err -117) [ 178.924542][ T23] usb 3-1: USB disconnect, device number 11 [ 178.936070][ T8491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.051610][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.125031][ T8500] loop0: detected capacity change from 0 to 64 [ 179.133346][ T8498] loop1: detected capacity change from 0 to 4096 [ 179.173552][ T8498] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 179.238204][ T8498] ntfs3: loop1: Failed to load $Extend (-22). [ 179.250135][ T8498] ntfs3: loop1: Failed to initialize $Extend. [ 179.393478][ T8502] loop0: detected capacity change from 0 to 2048 [ 179.460585][ T8502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.500670][ T8504] loop1: detected capacity change from 0 to 128 [ 179.526492][ T8504] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 179.610021][ T5781] sysv_free_block: trying to free block not in datazone [ 179.620836][ T5781] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 179.735215][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.331775][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1062'. [ 180.332743][ T8510] loop1: detected capacity change from 0 to 32768 [ 180.355714][ T8524] loop3: detected capacity change from 0 to 64 [ 180.394614][ T8510] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1048 (8510) [ 180.438441][ T8510] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 180.460940][ T8510] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 180.494348][ T8510] BTRFS info (device loop1): using free space tree [ 180.566787][ T8508] loop2: detected capacity change from 0 to 40427 [ 180.613588][ T8508] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 180.667872][ T8508] F2FS-fs (loop2): invalid crc value [ 180.720069][ T8508] F2FS-fs (loop2): Found nat_bits in checkpoint [ 180.755657][ T8510] BTRFS info (device loop1): enabling ssd optimizations [ 180.807389][ T8510] BTRFS info (device loop1): auto enabling async discard [ 180.830454][ T8508] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 181.018869][ T5782] syz-executor: attempt to access beyond end of device [ 181.018869][ T5782] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 181.068410][ T27] audit: type=1326 audit(1763131661.415:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8554 comm="syz.3.1060" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fae1698f6c9 code=0x0 [ 181.102255][ T5782] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 181.168964][ T5781] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 181.331371][ T5793] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop1 scanned by udevd (5793) [ 181.382274][ T8560] ptrace attach of "./syz-executor exec"[5783] was attempted by ""[8560] [ 181.722126][ T8569] loop0: detected capacity change from 0 to 64 [ 182.044344][ T8575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1070'. [ 182.271482][ T8581] loop2: detected capacity change from 0 to 2048 [ 182.764475][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 182.809172][ T8602] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 182.977938][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 183.007237][ T23] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 183.018716][ T23] usb 4-1: config 0 has no interface number 0 [ 183.047877][ T23] usb 4-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 183.065070][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.084335][ T23] usb 4-1: Product: syz [ 183.090772][ T23] usb 4-1: Manufacturer: syz [ 183.112429][ T23] usb 4-1: SerialNumber: syz [ 183.132591][ T23] usb 4-1: config 0 descriptor?? [ 183.159182][ T23] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.69/input/input21 [ 183.376820][ T5144] bcm5974 4-1:0.69: could not read from device [ 183.403897][ T5144] bcm5974 4-1:0.69: could not read from device [ 183.423068][ T8617] netlink: 'syz.2.1090': attribute type 29 has an invalid length. [ 183.459446][ T23] usb 4-1: USB disconnect, device number 7 [ 183.479575][ T5144] bcm5974 4-1:0.69: could not read from device [ 183.656482][ T8607] loop1: detected capacity change from 0 to 40427 [ 183.698564][ T8607] F2FS-fs (loop1): invalid crc value [ 183.739856][ T8607] F2FS-fs (loop1): Found nat_bits in checkpoint [ 183.864768][ T8607] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 183.940949][ T8632] loop2: detected capacity change from 0 to 2048 [ 184.008099][ T8635] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.165193][ T5781] syz-executor: attempt to access beyond end of device [ 184.165193][ T5781] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 184.194346][ T5781] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 184.867892][ T8656] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1108'. [ 184.994915][ T788] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 185.194255][ T788] usb 3-1: Using ep0 maxpacket: 32 [ 185.229023][ T788] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 185.242046][ T788] usb 3-1: config 0 has no interface number 0 [ 185.255319][ T788] usb 3-1: config 0 interface 12 has no altsetting 0 [ 185.268980][ T788] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 185.283616][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.291968][ T788] usb 3-1: Product: syz [ 185.296343][ T788] usb 3-1: Manufacturer: syz [ 185.304559][ T788] usb 3-1: SerialNumber: syz [ 185.316558][ T788] usb 3-1: config 0 descriptor?? [ 185.966714][ T788] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 185.984378][ T788] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 185.994139][ T788] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 186.015751][ T788] f81534: probe of 3-1:0.12 failed with error -71 [ 186.053001][ T788] usb 3-1: USB disconnect, device number 12 [ 186.633302][ T8695] loop2: detected capacity change from 0 to 64 [ 186.725620][ T8697] loop1: detected capacity change from 0 to 1024 [ 186.739028][ T8697] EXT4-fs: Ignoring removed oldalloc option [ 186.745761][ T8697] EXT4-fs: Ignoring removed bh option [ 186.758461][ T8697] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 186.799561][ T8697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.904527][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.206791][ T8714] overlayfs: maximum fs stacking depth exceeded [ 187.297683][ T8718] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.457308][ T8726] loop3: detected capacity change from 0 to 512 [ 187.465315][ T8726] EXT4-fs: Ignoring removed oldalloc option [ 187.520458][ T8726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.565266][ T8726] ext4 filesystem being mounted at /283/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.650790][ T8726] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz.3.1138: iget: bad i_size value: 2533274857506816 [ 187.671614][ T8726] EXT4-fs (loop3): Remounting filesystem read-only [ 187.774219][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.055294][ T8743] loop0: detected capacity change from 0 to 64 [ 188.181269][ T8747] loop2: detected capacity change from 0 to 128 [ 188.229108][ T8747] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 188.273699][ T8747] hpfs: filesystem error: improperly stopped [ 188.301773][ T8747] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 188.319561][ T8747] hpfs: You really don't want any checks? You are crazy... [ 188.352441][ T8747] hpfs: hpfs_map_sector(): read error [ 188.382444][ T8747] hpfs: code page support is disabled [ 188.393396][ T8747] hpfs: hpfs_map_4sectors(): unaligned read [ 188.394590][ T8754] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 188.422900][ T8747] hpfs: hpfs_map_4sectors(): unaligned read [ 188.437056][ T8747] hpfs: filesystem error: unable to find root dir [ 188.496498][ T8758] loop1: detected capacity change from 0 to 256 [ 188.532070][ T8758] exfat: Deprecated parameter 'utf8' [ 188.564641][ T8758] exfat: Deprecated parameter 'utf8' [ 188.601652][ T8758] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00a69, utbl_chksum : 0xe619d30d) [ 189.227664][ T8786] loop1: detected capacity change from 0 to 64 [ 189.625582][ T8793] loop0: detected capacity change from 0 to 4096 [ 189.651075][ T8793] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 189.677186][ T8803] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1171'. [ 189.716602][ T8793] ntfs3: loop0: Failed to load $Extend (-22). [ 189.732151][ T8793] ntfs3: loop0: Failed to initialize $Extend. [ 189.801499][ T8800] loop3: detected capacity change from 0 to 4096 [ 189.823277][ T8801] loop1: detected capacity change from 0 to 8192 [ 189.844427][ T8800] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 189.892945][ T8801] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 190.013859][ T8800] ntfs3: loop3: Failed to load $Extend (-22). [ 190.039966][ T8801] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 190.055599][ T8800] ntfs3: loop3: Failed to initialize $Extend. [ 190.094404][ T8801] REISERFS (device loop1): using ordered data mode [ 190.117197][ T8801] reiserfs: using flush barriers [ 190.132419][ T8801] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 190.194025][ T8801] REISERFS (device loop1): checking transaction log (loop1) [ 190.238488][ T8801] REISERFS (device loop1): Using r5 hash to sort names [ 190.276683][ T8801] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 190.464803][ T27] audit: type=1804 audit(1763131670.805:74): pid=8801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1170" name="/newroot/287/file1/file0" dev="loop1" ino=2 res=1 errno=0 [ 190.773853][ T8828] overlayfs: maximum fs stacking depth exceeded [ 191.438857][ T8853] loop2: detected capacity change from 0 to 512 [ 191.500890][ T8853] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 191.616815][ T8853] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 191.728721][ T8853] EXT4-fs (loop2): 1 truncate cleaned up [ 191.776065][ T8853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.003663][ T8844] loop0: detected capacity change from 0 to 32768 [ 192.036927][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.070913][ T8844] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 192.083710][ T8850] loop1: detected capacity change from 0 to 32768 [ 192.090567][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 192.119210][ T8850] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 192.226199][ T8844] XFS (loop0): Ending clean mount [ 192.238467][ T8844] XFS (loop0): Quotacheck needed: Please wait. [ 192.266498][ T8871] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1197'. [ 192.317650][ T8] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 192.344715][ T8844] XFS (loop0): Quotacheck: Done. [ 192.358231][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.378772][ T5968] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 192.404975][ T8] usb 4-1: Product: syz [ 192.409191][ T8] usb 4-1: Manufacturer: syz [ 192.432997][ T8] usb 4-1: SerialNumber: syz [ 192.453250][ T8] usb 4-1: config 0 descriptor?? [ 192.540600][ T8875] loop2: detected capacity change from 0 to 256 [ 192.559101][ T8875] exfat: Deprecated parameter 'utf8' [ 192.568516][ T5783] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 192.716389][ T8875] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 192.897925][ T8] usb 4-1: USB disconnect, device number 8 [ 193.021911][ T8877] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 193.724014][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1210'. [ 193.856220][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1211'. [ 194.133134][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1215'. [ 194.306672][ T8892] loop1: detected capacity change from 0 to 40427 [ 194.318746][ T8892] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 194.344183][ T8892] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 194.379172][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.386784][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.407671][ T8892] F2FS-fs (loop1): invalid crc value [ 194.442736][ T8892] F2FS-fs (loop1): Found nat_bits in checkpoint [ 194.588767][ T8892] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 194.598686][ T8892] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 194.766385][ T11] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 194.791066][ T11] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 194.852483][ T8929] loop3: detected capacity change from 0 to 256 [ 194.865914][ T8929] exfat: Deprecated parameter 'namecase' [ 194.901083][ T8929] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 195.187736][ T8931] loop0: detected capacity change from 0 to 4096 [ 195.210041][ T8931] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 195.299008][ T8931] ntfs: (device loop0): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 195.334418][ T8931] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 195.385090][ T8931] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 195.418135][ T8931] ntfs: volume version 3.1. [ 195.463692][ T8938] loop3: detected capacity change from 0 to 2048 [ 195.544147][ T8941] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 195.620873][ T5783] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 195.646876][ T8938] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 195.733949][ T8938] Remounting filesystem read-only [ 195.751919][ T8938] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 195.808358][ T8938] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 195.861470][ T8938] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 195.884907][ T8938] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 195.970474][ T27] audit: type=1800 audit(1763131676.315:75): pid=8938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1228" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 196.026805][ T8943] NILFS (loop3): error -2 truncating bmap (ino=16) [ 196.058144][ T8954] program syz.0.1232 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.107450][ T5784] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 196.122030][ T5784] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 196.157615][ T5784] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 196.181237][ T5784] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 196.192914][ T5784] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 196.214962][ T5784] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 196.231367][ T5784] NILFS (loop3): discard dirty page: offset=0, ino=16 [ 196.238373][ T5784] NILFS (loop3): discard dirty block: blocknr=23, size=1024 [ 196.253107][ T5784] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 196.262406][ T5784] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 196.274393][ T5784] NILFS (loop3): discard dirty block: blocknr=26, size=1024 [ 196.283690][ T5784] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 196.310041][ T5784] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 196.334393][ T8960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1236'. [ 196.344816][ T5784] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 196.364600][ T5784] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 196.379785][ T8962] vivid-000: disconnect [ 196.387481][ T5784] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 196.405278][ T8961] vivid-000: reconnect [ 197.165626][ T8988] loop2: detected capacity change from 0 to 512 [ 197.186015][ T8990] netlink: 'syz.1.1250': attribute type 3 has an invalid length. [ 197.294192][ T5786] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 197.319495][ T8988] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.416262][ T8969] loop0: detected capacity change from 0 to 32768 [ 197.494593][ T5786] usb 4-1: Using ep0 maxpacket: 8 [ 197.501315][ T27] audit: type=1800 audit(1763131677.845:76): pid=8969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1240" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 197.517806][ T8969] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 197.517806][ T8969] [ 197.534577][ T5786] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 197.563059][ T5786] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 197.570657][ T5782] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 197.583016][ T5786] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 197.591296][ T8969] ERROR: (device loop0): remounting filesystem as read-only [ 197.591314][ T8969] xtLookup: xtSearch returned -5 [ 197.591340][ T8969] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 197.591340][ T8969] [ 197.591370][ T8969] xtLookup: xtSearch returned -5 [ 197.684199][ T5786] usb 4-1: Product: syz [ 197.688459][ T5786] usb 4-1: Manufacturer: syz [ 197.693105][ T5786] usb 4-1: SerialNumber: syz [ 197.720593][ T9000] program syz.1.1255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.774925][ T9001] program syz.1.1255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.973180][ T5786] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 197.980748][ T9007] loop0: detected capacity change from 0 to 512 [ 197.990991][ T5786] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 198.016784][ T9007] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1257: inode has both inline data and extents flags [ 198.040046][ T5786] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 198.058753][ T9007] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1257: couldn't read orphan inode 15 (err -117) [ 198.069288][ T5786] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 198.092265][ T9007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.181247][ T5786] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 198.220142][ T5786] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 198.220594][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.256172][ T5786] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 198.310091][ T9010] loop1: detected capacity change from 0 to 4096 [ 198.329247][ T9010] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 198.466929][ T9010] ntfs: (device loop1): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 198.484465][ T5849] usb 4-1: USB disconnect, device number 9 [ 198.499371][ T5849] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 198.504161][ T9010] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 198.568834][ T9010] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 198.583697][ T5849] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 198.591061][ T9010] ntfs: volume version 3.1. [ 198.620661][ T5849] visor 4-1:1.0: device disconnected [ 198.926282][ T5781] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 199.324281][ T5786] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 199.355633][ T9031] loop2: detected capacity change from 0 to 64 [ 199.526294][ T5786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.534762][ T9031] hfs: hfs: Invalid key length: 94 [ 199.544241][ T5786] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 199.563563][ T5786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.601381][ T5786] usb 2-1: config 0 descriptor?? [ 199.944442][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 200.075425][ T5786] lenovo 0003:17EF:6047.000D: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 200.324581][ T5786] usb 2-1: USB disconnect, device number 8 [ 200.529970][ T9052] sock: sock_set_timeout: `syz.3.1277' (pid 9052) tries to set negative timeout [ 201.270674][ T9077] loop2: detected capacity change from 0 to 2048 [ 201.291224][ T9081] loop0: detected capacity change from 0 to 128 [ 201.308675][ T9077] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 201.361420][ T9082] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.374924][ T9081] process 'syz.0.1288' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 201.376730][ T9081] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/syz-executor /root/syz-executor /newroot/359/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 201.708938][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1292'. [ 202.015239][ T9099] sp0: Synchronizing with TNC [ 202.075389][ T9104] loop3: detected capacity change from 0 to 512 [ 202.128083][ T9104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.128907][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1300'. [ 202.267813][ T9108] syz_tun: entered promiscuous mode [ 202.276078][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.304623][ T9108] macsec1: entered allmulticast mode [ 202.325598][ T9108] syz_tun: entered allmulticast mode [ 202.355669][ T9108] syz_tun: left allmulticast mode [ 202.367594][ T9108] syz_tun: left promiscuous mode [ 202.377332][ T9113] loop0: detected capacity change from 0 to 256 [ 202.549022][ T9113] FAT-fs (loop0): Directory bread(block 64) failed [ 202.573444][ T9113] FAT-fs (loop0): Directory bread(block 65) failed [ 202.594705][ T9113] FAT-fs (loop0): Directory bread(block 66) failed [ 202.618324][ T9113] FAT-fs (loop0): Directory bread(block 67) failed [ 202.642365][ T9113] FAT-fs (loop0): Directory bread(block 68) failed [ 202.664209][ T9113] FAT-fs (loop0): Directory bread(block 69) failed [ 202.670897][ T9113] FAT-fs (loop0): Directory bread(block 70) failed [ 202.715336][ T9113] FAT-fs (loop0): Directory bread(block 71) failed [ 202.734330][ T9113] FAT-fs (loop0): Directory bread(block 72) failed [ 202.740921][ T9113] FAT-fs (loop0): Directory bread(block 73) failed [ 202.763075][ T9122] loop1: detected capacity change from 0 to 1024 [ 202.803884][ T9122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.867585][ T9129] loop3: detected capacity change from 0 to 64 [ 202.943863][ T9122] EXT4-fs error (device loop1): ext4_xattr_inode_iget:444: comm syz.1.1307: inode #398253073: comm syz.1.1307: iget: illegal inode # [ 202.981745][ T9122] EXT4-fs error (device loop1): ext4_xattr_inode_iget:449: comm syz.1.1307: error while reading EA inode 398253073 err=-117 [ 203.109832][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.342581][ T9141] loop2: detected capacity change from 0 to 64 [ 203.414387][ T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 203.614305][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 203.640264][ T23] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 203.671549][ T23] usb 4-1: config 1 has no interface number 0 [ 203.688844][ T23] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 203.714862][ T23] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 203.730405][ T9155] loop2: detected capacity change from 0 to 1024 [ 203.754158][ T23] usb 4-1: config 1 interface 105 has no altsetting 0 [ 203.766092][ T23] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 203.784337][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.810828][ T23] usb 4-1: Product: syz [ 203.821135][ T23] usb 4-1: Manufacturer: syz [ 203.834755][ T23] usb 4-1: SerialNumber: syz [ 203.846865][ T9155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.874768][ T9133] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 203.911878][ T9133] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 204.045652][ T9155] EXT4-fs: Ignoring sb option on remount [ 204.061910][ T9155] EXT4-fs: Ignoring removed orlov option [ 204.072053][ T9155] EXT4-fs: Ignoring removed nomblk_io_submit option [ 204.084269][ T9155] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 204.114301][ T9155] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 204.132301][ T9155] EXT4-fs: can't change dax mount option while remounting [ 204.226452][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.400244][ T9133] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 204.434416][ T9133] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 204.605595][ T9167] loop1: detected capacity change from 0 to 32768 [ 204.662795][ T23] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 204.695290][ T23] aqc111: probe of 4-1:1.105 failed with error -71 [ 204.708603][ T9167] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 204.725327][ T23] usb 4-1: USB disconnect, device number 10 [ 204.790431][ T9161] loop0: detected capacity change from 0 to 32768 [ 204.892757][ T9161] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 204.949882][ T5781] ocfs2: Unmounting device (7,1) on (node local) [ 205.027155][ T9161] XFS (loop0): Ending clean mount [ 205.053468][ T9161] XFS (loop0): Quotacheck needed: Please wait. [ 205.141284][ T9161] XFS (loop0): Quotacheck: Done. [ 205.347965][ T5783] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 205.764312][ T788] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 205.944286][ T788] usb 2-1: Using ep0 maxpacket: 16 [ 205.955057][ T23] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 205.964830][ T9210] loop3: detected capacity change from 0 to 2048 [ 205.975981][ T788] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 205.984014][ T788] usb 2-1: config 0 has no interface number 0 [ 205.999398][ T9210] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=27485, location=27485 [ 206.004389][ T788] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.011665][ T9210] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 100: 0x6a != 0x00 [ 206.036649][ T788] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.064578][ T788] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 206.066337][ T9210] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.085959][ T788] usb 2-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 206.112740][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.137838][ T788] usb 2-1: config 0 descriptor?? [ 206.144560][ T9214] loop2: detected capacity change from 0 to 256 [ 206.182135][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.193137][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 206.209127][ T23] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 206.228465][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.240679][ T27] audit: type=1800 audit(1763131686.585:77): pid=9210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1343" name="file1" dev="loop3" ino=1367 res=0 errno=0 [ 206.244794][ T23] usb 1-1: config 0 descriptor?? [ 206.291259][ T23] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 206.309053][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 206.325222][ T23] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 206.344545][ T23] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 206.365313][ T23] usb 1-1: media controller created [ 206.373542][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 206.402965][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 206.410155][ T9214] FAT-fs (loop2): Directory bread(block 64) failed [ 206.417069][ T9214] FAT-fs (loop2): Directory bread(block 65) failed [ 206.425986][ T9214] FAT-fs (loop2): Directory bread(block 66) failed [ 206.432769][ T23] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 206.440626][ T9214] FAT-fs (loop2): Directory bread(block 67) failed [ 206.449072][ T9214] FAT-fs (loop2): Directory bread(block 68) failed [ 206.462205][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input22 [ 206.479373][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 206.486964][ T9214] FAT-fs (loop2): Directory bread(block 69) failed [ 206.504404][ T9200] dvb-usb: bulk message failed: -22 (2/0) [ 206.514372][ T9214] FAT-fs (loop2): Directory bread(block 70) failed [ 206.521039][ T23] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 206.547535][ T9214] FAT-fs (loop2): Directory bread(block 71) failed [ 206.561161][ T23] usb 1-1: USB disconnect, device number 11 [ 206.570628][ T9214] FAT-fs (loop2): Directory bread(block 72) failed [ 206.578120][ T9214] FAT-fs (loop2): Directory bread(block 73) failed [ 206.597470][ T788] holtek_mouse 0003:04D9:A072.000E: unknown main item tag 0x2 [ 206.619152][ T788] holtek_mouse 0003:04D9:A072.000E: hidraw0: USB HID v0.00 Device [HID 04d9:a072] on usb-dummy_hcd.1-1/input1 [ 206.674836][ T23] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 206.749362][ T9221] loop3: detected capacity change from 0 to 256 [ 206.881050][ T5849] usb 2-1: USB disconnect, device number 9 [ 207.060593][ T9227] sp0: Synchronizing with TNC [ 207.258065][ T9234] loop3: detected capacity change from 0 to 64 [ 207.301964][ T9235] sp0: Synchronizing with TNC [ 207.320109][ T9234] Trying to free block not in datazone [ 207.339863][ T9234] Trying to free block not in datazone [ 207.356957][ T9234] Trying to free block not in datazone [ 207.368677][ T9234] Trying to free block not in datazone [ 207.379275][ T9234] minix_free_block (loop3:6): bit already cleared [ 207.391150][ T9234] Trying to free block not in datazone [ 207.398960][ T9234] Trying to free block not in datazone [ 208.064584][ T9262] loop2: detected capacity change from 0 to 2048 [ 208.142198][ T9262] Alternate GPT is invalid, using primary GPT. [ 208.149870][ T9262] loop2: p1 p2 p3 [ 208.153649][ T9262] loop2: partition table partially beyond EOD, truncated [ 208.264249][ T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 208.271955][ T27] audit: type=1326 audit(1763131688.615:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.3.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1698f6c9 code=0x7ffc0000 [ 208.359344][ T27] audit: type=1326 audit(1763131688.615:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.3.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1698f6c9 code=0x7ffc0000 [ 208.433700][ T9274] loop1: detected capacity change from 0 to 8 [ 208.445150][ T27] audit: type=1326 audit(1763131688.615:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.3.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fae1698f6c9 code=0x7ffc0000 [ 208.494301][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 208.501766][ T9274] SQUASHFS error: zstd decompression error: 10 [ 208.512186][ T9274] SQUASHFS error: zstd decompression failed, data probably corrupt [ 208.514557][ T23] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 208.523541][ T9274] SQUASHFS error: Failed to read block 0x60: -5 [ 208.546123][ T9274] SQUASHFS error: zstd decompression error: 10 [ 208.546220][ T27] audit: type=1326 audit(1763131688.615:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.3.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1698f6c9 code=0x7ffc0000 [ 208.552402][ T9274] SQUASHFS error: zstd decompression failed, data probably corrupt [ 208.584178][ T23] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 208.600484][ T5798] udevd[5798]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 208.611348][ T5793] udevd[5793]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 208.616226][ T23] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 208.638412][ T9274] SQUASHFS error: Failed to read block 0x60: -5 [ 208.647771][ T5968] udevd[5968]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 208.689544][ T27] audit: type=1326 audit(1763131688.615:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.3.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1698f6c9 code=0x7ffc0000 [ 208.714252][ T23] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 208.764619][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 208.792488][ T27] audit: type=1326 audit(1763131688.615:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.3.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fae1698f6c9 code=0x7ffc0000 [ 208.836294][ T23] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 208.847049][ T23] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 208.874197][ T23] usb 1-1: Product: syz [ 208.878414][ T23] usb 1-1: Manufacturer: syz [ 208.883142][ T27] audit: type=1326 audit(1763131688.615:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.3.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1698f6c9 code=0x7ffc0000 [ 208.924493][ T23] usb 1-1: SerialNumber: syz [ 208.937958][ T23] usb 1-1: config 0 descriptor?? [ 208.969692][ T23] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 208.989647][ T23] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 209.157552][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1382'. [ 209.190396][ T23] usb 1-1: USB disconnect, device number 12 [ 209.198991][ T9292] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1383'. [ 209.209271][ T23] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 209.222554][ T9292] nbd: couldn't find device at index 134217728 [ 209.622130][ T9306] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1390'. [ 209.673144][ T9308] loop1: detected capacity change from 0 to 2048 [ 209.740524][ T9308] Alternate GPT is invalid, using primary GPT. [ 209.774381][ T9308] loop1: p1 p2 p3 [ 209.778168][ T9308] loop1: partition table partially beyond EOD, truncated [ 210.099794][ T5968] udevd[5968]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 210.101555][ T5798] udevd[5798]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 210.112391][ T5793] udevd[5793]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 210.129713][ T5849] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 210.195718][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1398'. [ 210.294835][ T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 210.326255][ T5849] usb 1-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 210.336122][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.351942][ T5849] usb 1-1: config 0 descriptor?? [ 210.487247][ T23] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 210.503309][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.521043][ T23] usb 2-1: config 0 descriptor?? [ 210.542771][ T23] cp210x 2-1:0.0: cp210x converter detected [ 210.782378][ T5849] betop 0003:11C0:5506.000F: unknown main item tag 0x0 [ 210.789594][ T5849] betop 0003:11C0:5506.000F: unknown main item tag 0x0 [ 210.797217][ T5849] betop 0003:11C0:5506.000F: unknown main item tag 0x0 [ 210.811347][ T5849] betop 0003:11C0:5506.000F: unknown main item tag 0x0 [ 210.824301][ T5849] betop 0003:11C0:5506.000F: unknown main item tag 0x0 [ 210.841444][ T5849] betop 0003:11C0:5506.000F: unknown main item tag 0x0 [ 210.872746][ T5849] betop 0003:11C0:5506.000F: unknown main item tag 0x0 [ 210.901722][ T5849] betop 0003:11C0:5506.000F: hidraw0: USB HID v10.00 Device [HID 11c0:5506] on usb-dummy_hcd.0-1/input0 [ 210.933877][ T5849] betop 0003:11C0:5506.000F: no inputs found [ 211.056809][ T788] usb 1-1: USB disconnect, device number 13 [ 211.169952][ T23] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 211.189248][ T23] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 211.204896][ T23] usb 2-1: cp210x converter now attached to ttyUSB0 [ 211.221633][ T23] usb 2-1: USB disconnect, device number 10 [ 211.272099][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 211.299213][ T23] cp210x 2-1:0.0: device disconnected [ 211.684499][ T789] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 211.870797][ T9373] loop1: detected capacity change from 0 to 64 [ 211.890180][ T789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.927364][ T789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.947736][ T27] audit: type=1800 audit(1763131692.295:85): pid=9373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1422" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 211.969187][ T789] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 211.994169][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.026588][ T789] usb 4-1: config 0 descriptor?? [ 212.066791][ T79] ------------[ cut here ]------------ [ 212.072309][ T79] kernel BUG at fs/hfs/inode.c:449! [ 212.081998][ T79] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 212.088133][ T79] CPU: 0 PID: 79 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 212.095523][ T79] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 212.105614][ T79] Workqueue: writeback wb_workfn (flush-7:1) [ 212.111644][ T79] RIP: 0010:hfs_write_inode+0x7c4/0x7d0 [ 212.117202][ T79] Code: c7 c1 00 23 ef 96 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 00 23 ef 96 e8 86 c2 85 ff e9 6c fe ff ff e8 4c 67 2e ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 41 57 41 56 41 [ 212.136817][ T79] RSP: 0018:ffffc900020cf360 EFLAGS: 00010293 [ 212.142878][ T79] RAX: ffffffff82572844 RBX: ffff88807809a8a8 RCX: ffff88801eaeda00 [ 212.150834][ T79] RDX: 0000000000000000 RSI: ffffffff8cf36e80 RDI: 0000000000000000 [ 212.158792][ T79] RBP: ffffc900020cf4f0 R08: ffff88801eaeda00 R09: 0000000000000003 [ 212.166746][ T79] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 212.174713][ T79] R13: 1ffff92000419e70 R14: ffff88807809a858 R15: 0000000000000000 [ 212.182670][ T79] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 212.191587][ T79] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.198158][ T79] CR2: 00007fecce48fe90 CR3: 0000000061ffd000 CR4: 00000000003506f0 [ 212.206124][ T79] Call Trace: [ 212.209389][ T79] [ 212.212314][ T79] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 212.217685][ T79] ? __rwlock_init+0x150/0x150 [ 212.222441][ T79] __writeback_single_inode+0x705/0xee0 [ 212.227980][ T79] writeback_sb_inodes+0x77c/0xef0 [ 212.233090][ T79] ? queue_io+0x560/0x560 [ 212.237422][ T79] ? rcu_is_watching+0x15/0xb0 [ 212.242178][ T79] wb_writeback+0x450/0xba0 [ 212.246670][ T79] ? queue_io+0x381/0x560 [ 212.251008][ T79] ? percpu_ref_tryget+0x250/0x250 [ 212.256127][ T79] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 212.262109][ T79] ? _raw_spin_unlock_irq+0x23/0x50 [ 212.267302][ T79] wb_workfn+0x3ff/0xe20 [ 212.271547][ T79] ? inode_wait_for_writeback+0x200/0x200 [ 212.277262][ T79] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 212.283233][ T79] ? read_lock_is_recursive+0x20/0x20 [ 212.288599][ T79] ? _raw_spin_unlock_irq+0x23/0x50 [ 212.293785][ T79] ? process_scheduled_works+0x957/0x15b0 [ 212.299498][ T79] ? process_scheduled_works+0x957/0x15b0 [ 212.305203][ T79] process_scheduled_works+0xa45/0x15b0 [ 212.310744][ T79] ? assign_work+0x400/0x400 [ 212.315321][ T79] ? assign_work+0x39e/0x400 [ 212.319898][ T79] worker_thread+0xa55/0xfc0 [ 212.324473][ T79] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 212.330351][ T79] ? _raw_spin_unlock+0x40/0x40 [ 212.335289][ T79] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 212.341192][ T79] kthread+0x2fa/0x390 [ 212.345257][ T79] ? pr_cont_work+0x560/0x560 [ 212.349927][ T79] ? kthread_blkcg+0xd0/0xd0 [ 212.354505][ T79] ret_from_fork+0x48/0x80 [ 212.358920][ T79] ? kthread_blkcg+0xd0/0xd0 [ 212.363494][ T79] ret_from_fork_asm+0x11/0x20 [ 212.368255][ T79] [ 212.371266][ T79] Modules linked in: [ 212.385547][ T79] ---[ end trace 0000000000000000 ]--- [ 212.391060][ T79] RIP: 0010:hfs_write_inode+0x7c4/0x7d0 [ 212.420146][ T79] Code: c7 c1 00 23 ef 96 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 00 23 ef 96 e8 86 c2 85 ff e9 6c fe ff ff e8 4c 67 2e ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 41 57 41 56 41 [ 212.429774][ T9369] loop0: detected capacity change from 0 to 32768 [ 212.441582][ T79] RSP: 0018:ffffc900020cf360 EFLAGS: 00010293 [ 212.453483][ T79] RAX: ffffffff82572844 RBX: ffff88807809a8a8 RCX: ffff88801eaeda00 [ 212.460343][ T9369] (syz.0.1420,9369,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 212.463725][ T79] RDX: 0000000000000000 RSI: ffffffff8cf36e80 RDI: 0000000000000000 [ 212.486122][ T79] RBP: ffffc900020cf4f0 R08: ffff88801eaeda00 R09: 0000000000000003 [ 212.494741][ T9369] (syz.0.1420,9369,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 212.508684][ T79] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 212.517083][ T79] R13: 1ffff92000419e70 R14: ffff88807809a858 R15: 0000000000000000 [ 212.525271][ T79] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 212.537732][ T79] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.544597][ T79] CR2: 00007f5a93d729e0 CR3: 000000002e46e000 CR4: 00000000003506e0 [ 212.552772][ T79] Kernel panic - not syncing: Fatal exception [ 212.558953][ T79] Kernel Offset: disabled [ 212.563267][ T79] Rebooting in 86400 seconds..