last executing test programs: 4.76175302s ago: executing program 1 (id=895): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f00000007c0)={{}, {0x1, 0x6}, [], {0x4, 0x6}, [], {0x10, 0x4}, {0x20, 0x4}}, 0x24, 0x2) 3.866863509s ago: executing program 1 (id=908): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000140)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x3c, 0x0, 0x0, 0x4de, 0x0, 0x1, 0x0, @dev, @local, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@multicast2}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast, 0x3}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x7, 0x20, 0xffffffff, 0x0]}]}}}}}}}, 0x0) 3.711741512s ago: executing program 1 (id=912): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000040)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 3.510307606s ago: executing program 1 (id=913): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x100000001, 0x3a, '+\'[', 0x3a, '*\\}\xa6{', 0x3a, './file1'}, 0x2f) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) 2.008767297s ago: executing program 1 (id=924): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x182) close(r0) r1 = socket$pptp(0x18, 0x1, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.637282015s ago: executing program 3 (id=927): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 1.507656768s ago: executing program 3 (id=928): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x7, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1.361101941s ago: executing program 3 (id=929): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000200000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000140085000000700000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) sendmsg$unix(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x448c0) 1.252737613s ago: executing program 3 (id=930): syz_open_dev$dvb_demux(&(0x7f0000004c80), 0x0, 0x0) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.055698937s ago: executing program 2 (id=932): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000138000/0x2000)=nil, 0x400000, 0x2, 0x2}) 951.57401ms ago: executing program 0 (id=933): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000680)={0xa, 0x4e22, 0xfffff2cd, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x5a, &(0x7f00000010c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x24, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x10, "369d42072f65c8e67eb8fc52e48a"}]}}}}}}}}, 0x0) 888.036861ms ago: executing program 0 (id=934): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 818.466373ms ago: executing program 2 (id=935): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000440)={[{@uid}, {@nls={'nls', 0x3d, 'cp862'}}, {@gid}, {@type={'type', 0x3d, "abe89a7a"}}, {@nobarrier}]}, 0x1, 0x5d9, &(0x7f0000000cc0)="$eJzs3U1rXNcdB+DfHY9lywVbSezELQGLGNqmovaMxk3dbuqWUrQIJVDoKgSEPY6Ex0qQJkUJpVXft/0I6UJfoLvsAukiq3bdlbah0L12LvfOHWlsKYoUK5pR/Txw5pxzzz3nnvu/LzN3hJgAz6yFuTQ3UmRh7vX1sr612eltbXYeDstJziVpJM1BlmIlKT5J7mSQ8vVyYT1c8XnbefWzSx9de+vTNwe1Zp2q9RsH9TucjTplNsmZOj+u8e4+9XjFY3t4fRg4GLdHe2wcpftTXrfAJCgG75t7zCQXkpyvPwekvjs0TnZ2x+9IdzkAAAA4pS5tZzvruTjueQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBpUv/+f1GnxrA8m2L4+/9T9bLU5VPt43FPAAAAAAAAAACOwbXtbGc9F4f1R0X1N/9Xqsrl6vVreS9r6WY1N7KexfTTz2raSWZGBppaX+z3V9uH6Dm/b8/5k9lfAAAAAAAAAPg/9fss7P79HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJkGRnBlkVbo8LM+k0UxyPslUud5G8q9h+TT7eNwTAAAAgBNwaTvbWc/FYf1RUT3zv1g995/Pe1lJP8vpp5du7lXfBQye+htbm53e1mbnYZn2jvvj/x5pGtWIGXz3sP+Wr1ZrTOd+lqslN3I376SXe2lUPUtXh/PZf16/K+dU/Kh2yJndq/Nyz/9a55NhporI2Z2ItOq5ldF47uBIHPHoPLmldho73/xc/gpifqHOy/3580THfH7k7Hvx4Egk3/vlv5eWeisPlu6vzU3OLn1JT0aiMxKJl56pSLSqSFzZqS/kZ/lF5jKbN7Ka5fwqi+mnm9n8tCot1udz+TpzcKTuPFZ744tmMlUfl8Fd9GhzeqXqezHL+Xneyb10czs/yK3czu3cynxaaY0c4SuHuOobR7vqr3+7Lkwn+UudT4Yyrs+NxHX0njtTtY0u2Y3S88d/b2x+oy6U2/hDnU+GJyPRHonECwdH4m+Pyte13sqD1aXFdw+5vW/VeXkd/Wmi3iXK8+X58mBVtcfPjrLthX3b2lXb5Z22xp62KzttX3SlTtWf4faONF+1vbRvW6dquzrStt/nLQAm3oXvXJia/s/0P6c/nP7j9NL06+d/cu72uZencvYfZ3/YbJ35ZuPl4u/5ML/Zff4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+vLX3P3iw2Ot1VxUUFJ7Jwm/3bRr3nQn4qt3sP3z35tr7H3x3+eHi2923uyudW+3Oa7far3W+f/P+cq/bGrzudpga52yB47T7pj/umQAAAAAAAAAAAACHdRL/YDDufQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOt4W5NDdSpN260SrrW5udXpmG5d01m0kaSYpfJ8UnyZ0MUmZGhis+bzuvfnbpo2tvffrm7ljN4fqNg/odzkadMpvkTJ0f13h3n3q8YmcPy4BdHwYOxu1/AQAA//96kwu1") syz_read_part_table(0x59d, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0xc0) 723.875835ms ago: executing program 0 (id=936): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000008c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="b0000000", @ANYRES64], 0xb0) 626.324966ms ago: executing program 0 (id=937): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000002c0)="80fd0200000510", 0x7}], 0x1, 0x0, 0x5) 523.557239ms ago: executing program 3 (id=938): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x4010, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 518.931559ms ago: executing program 2 (id=939): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x34, 0xec000000, 0x8}]}) 425.417341ms ago: executing program 1 (id=940): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0xfffffffa) futex(&(0x7f000000cffc), 0xa, 0x801, 0x0, 0x0, 0xfffffffc) 420.914441ms ago: executing program 0 (id=948): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x1000) fanotify_mark(r1, 0x505, 0x10000839, r0, 0x0) 268.148604ms ago: executing program 0 (id=941): r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x804010, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="ff", 0x1}], 0x1, 0x25412, 0x4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000140)={0x17c04, r0, 0xc000, 0x973f, 0x81, 0x4}) 252.093674ms ago: executing program 3 (id=942): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x802, &(0x7f0000000100)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@rodir}, {@fat=@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@shortname_mixed}, {@utf8no}, {@fat=@dmask={'dmask', 0x3d, 0x8}}, {@shortname_lower}, {@shortname_mixed}, {@shortname_winnt}, {@rodir}, {@utf8no}, {@utf8no}]}, 0x29, 0x33e, &(0x7f0000000480)="$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") r0 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) finit_module(r0, 0x0, 0x0) 201.317665ms ago: executing program 2 (id=943): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) close(0x3) 21.569679ms ago: executing program 2 (id=944): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)="c1e27b900c1c0c06d320a1", 0xb}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0xe88e164623c97862, 0x0) recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40, 0x0) 0s ago: executing program 2 (id=945): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000040)=0x200, 0x4) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x15}, 0x40013002) sendmmsg$unix(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c0}}], 0x1, 0x80) kernel console output (not intermixed with test programs): v: internal) [ 78.775821][ T5887] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 78.797281][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.814524][ T5887] BTRFS info (device loop0): turning off barriers [ 78.821031][ T5887] BTRFS info (device loop0): enabling auto defrag [ 78.857879][ T5887] BTRFS info (device loop0): force zlib compression, level 3 [ 78.881333][ T5887] BTRFS info (device loop0): enabling ssd optimizations [ 78.909366][ T5887] BTRFS info (device loop0): using spread ssd allocation scheme [ 78.919335][ T5808] usb 2-1: USB disconnect, device number 2 [ 78.929545][ T5887] BTRFS info (device loop0): using free space tree [ 78.971868][ T5776] XFS (loop3): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 79.089842][ T5916] loop2: detected capacity change from 0 to 256 [ 79.144573][ T5916] ======================================================= [ 79.144573][ T5916] WARNING: The mand mount option has been deprecated and [ 79.144573][ T5916] and is ignored by this kernel. Remove the mand [ 79.144573][ T5916] option from the mount to silence this warning. [ 79.144573][ T5916] ======================================================= [ 79.215714][ T5916] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.377634][ T5887] BTRFS info (device loop0: state M): not using ssd optimizations [ 79.407956][ T5887] BTRFS info (device loop0: state M): not using spread ssd allocation scheme [ 79.442261][ T5887] BTRFS info (device loop0: state M): enabling ssd optimizations [ 79.466564][ T5887] BTRFS info (device loop0: state M): using spread ssd allocation scheme [ 79.766226][ T5771] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 79.804108][ T5934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'. [ 80.379850][ T5950] input: syz1 as /devices/virtual/input/input5 [ 80.425590][ T5808] hid-generic 0005:4C4A:0007.0001: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 80.652474][ T5807] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.863255][ T5807] usb 4-1: Using ep0 maxpacket: 32 [ 80.874078][ T5807] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 80.892117][ T5807] usb 4-1: config 0 has no interface number 0 [ 80.912588][ T5807] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 80.921775][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.954090][ T5808] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.955201][ T5807] usb 4-1: Product: syz [ 80.967029][ T5807] usb 4-1: Manufacturer: syz [ 80.971713][ T5807] usb 4-1: SerialNumber: syz [ 80.998937][ T5807] usb 4-1: config 0 descriptor?? [ 81.017198][ T5807] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 81.178091][ T5808] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 81.194973][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.206032][ T5808] usb 3-1: config 0 descriptor?? [ 81.214901][ T5808] cp210x 3-1:0.0: cp210x converter detected [ 81.274406][ T5807] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 81.311942][ T5807] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 81.398344][ T5982] netlink: 'syz.1.50': attribute type 4 has an invalid length. [ 81.507445][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 170 [ 81.628648][ T5808] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 81.650513][ T5988] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.662722][ T5808] usb 3-1: cp210x converter now attached to ttyUSB2 [ 81.729187][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 81.745281][ T5807] usb 4-1: USB disconnect, device number 2 [ 81.791645][ T5807] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 81.829050][ T5807] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 81.855376][ T5807] quatech2 4-1:0.51: device disconnected [ 81.926687][ T5808] usb 3-1: USB disconnect, device number 2 [ 81.945143][ T5808] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 81.989974][ T5808] cp210x 3-1:0.0: device disconnected [ 82.757981][ T6006] loop3: detected capacity change from 0 to 512 [ 82.915293][ T6006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.334470][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.733618][ T6024] loop2: detected capacity change from 0 to 64 [ 83.820141][ T6024] hfs: get root inode failed [ 83.844326][ T6026] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 83.993234][ T6028] loop0: detected capacity change from 0 to 512 [ 84.013638][ T6028] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 84.036873][ T6028] EXT4-fs (loop0): 1 truncate cleaned up [ 84.060130][ T6028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.190090][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.287888][ T6002] loop1: detected capacity change from 0 to 262144 [ 84.320001][ T5909] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 84.345948][ T6002] F2FS-fs (loop1): Found nat_bits in checkpoint [ 84.400993][ T6002] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 84.551070][ T6035] loop0: detected capacity change from 0 to 4096 [ 84.612019][ T6035] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.661532][ T6037] loop3: detected capacity change from 0 to 8192 [ 84.698084][ T6037] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 84.747994][ T6037] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 84.797761][ T6037] REISERFS (device loop3): using ordered data mode [ 84.837285][ T6037] reiserfs: using flush barriers [ 84.882338][ T6037] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 84.966667][ T6037] REISERFS (device loop3): checking transaction log (loop3) [ 84.995081][ T6035] EXT4-fs (loop0): Test dummy encryption mode enabled [ 84.997225][ T6037] REISERFS (device loop3): Using rupasov hash to sort names [ 85.036296][ T6035] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.064694][ T6037] REISERFS (device loop3): using 3.5.x disk format [ 85.092742][ T6037] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 85.110134][ T6035] Quota error (device loop0): do_check_range: Getting block 1024 out of range 0-5 [ 85.127724][ T6037] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 85.139973][ T6037] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 85.151413][ T6037] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 85.210592][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.235329][ T6037] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 85.252564][ T6037] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 85.295005][ T5772] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 85.399273][ T6048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.75'. [ 85.482426][ T5772] usb 3-1: Using ep0 maxpacket: 8 [ 85.489543][ T5772] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 85.501575][ T5772] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 85.521869][ T5772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.532175][ T5772] usb 3-1: Product: syz [ 85.536405][ T5772] usb 3-1: Manufacturer: syz [ 85.551634][ T5772] usb 3-1: SerialNumber: syz [ 85.564047][ T5772] usb 3-1: config 0 descriptor?? [ 85.573786][ T5772] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 85.600071][ T5772] usb 3-1: setting power ON [ 85.611689][ T5772] dvb-usb: bulk message failed: -22 (2/0) [ 85.623908][ T6051] loop3: detected capacity change from 0 to 256 [ 85.643183][ T5772] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 85.654137][ T6051] exfat: Deprecated parameter 'utf8' [ 85.659525][ T6051] exfat: Deprecated parameter 'namecase' [ 85.668578][ T5772] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 85.684169][ T6051] exfat: Deprecated parameter 'namecase' [ 85.694216][ T6051] exfat: Deprecated parameter 'utf8' [ 85.704343][ T5772] usb 3-1: media controller created [ 85.782373][ T5772] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 85.793556][ T6046] dvb-usb: bulk message failed: -22 (3/0) [ 85.801732][ T6046] dvb-usb: bulk message failed: -22 (3/0) [ 85.812153][ T6051] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 85.830334][ T6046] dvb-usb: bulk message failed: -22 (3/0) [ 85.859264][ T5772] usb 3-1: selecting invalid altsetting 6 [ 85.877076][ T5772] usb 3-1: digital interface selection failed (-22) [ 85.892566][ T5772] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 85.910792][ T5772] usb 3-1: setting power OFF [ 85.922342][ T5772] dvb-usb: bulk message failed: -22 (2/0) [ 85.940205][ T5772] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 85.970724][ T5772] (NULL device *): no alternate interface [ 86.089444][ T5772] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 86.145356][ T5772] usb 3-1: USB disconnect, device number 3 [ 86.602473][ T5808] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.822225][ T5808] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 86.830825][ T5808] usb 4-1: config 0 has no interface number 0 [ 86.851313][ T5808] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 86.882554][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.904951][ T5808] usb 4-1: config 0 descriptor?? [ 86.923442][ T5808] ums-realtek 4-1:0.6: USB Mass Storage device detected [ 87.106647][ T5772] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 87.117417][ T1561] cfg80211: failed to load regulatory.db [ 87.164902][ T6087] loop0: detected capacity change from 0 to 256 [ 87.184109][ T6087] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.200077][ T6087] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 87.221030][ T6087] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 87.236774][ T1561] usb 4-1: USB disconnect, device number 3 [ 87.312616][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 87.321238][ T5772] usb 3-1: Using ep0 maxpacket: 16 [ 87.332965][ T5772] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 87.341659][ T5772] usb 3-1: config 0 has no interface number 0 [ 87.349200][ T5772] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.363401][ T5772] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.373590][ T5772] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 87.382864][ T5772] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.404662][ T5772] usb 3-1: config 0 descriptor?? [ 87.517294][ T27] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 87.528656][ T27] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 87.539017][ T27] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 87.548197][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.559611][ T6083] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 87.577152][ T27] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 87.900104][ T27] usb 2-1: USB disconnect, device number 3 [ 87.949832][ T6102] capability: warning: `syz.0.98' uses 32-bit capabilities (legacy support in use) [ 88.062506][ T5772] uclogic 0003:28BD:0071.0002: pen parameters not found [ 88.076249][ T5772] uclogic 0003:28BD:0071.0002: interface is invalid, ignoring [ 88.103450][ T5772] usb 3-1: USB disconnect, device number 4 [ 88.133388][ T6108] loop3: detected capacity change from 0 to 256 [ 88.147215][ T6108] exfat: Deprecated parameter 'utf8' [ 88.155100][ T6108] exfat: Deprecated parameter 'utf8' [ 88.171036][ T6108] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 88.281649][ T6110] loop0: detected capacity change from 0 to 2048 [ 88.409222][ T6113] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.521587][ T6113] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 88.537580][ T6113] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 88.551687][ T6113] Remounting filesystem read-only [ 88.583473][ T5771] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 88.597167][ T5771] NILFS (loop0): discard dirty page: offset=0, ino=18 [ 88.604694][ T5771] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 88.611932][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 88.626169][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 88.636053][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 88.646422][ T5771] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 88.654297][ T5771] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 88.663307][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 88.673056][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 88.681989][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 88.739972][ T5771] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 88.754042][ T5771] NILFS (loop0): discard dirty block: blocknr=35, size=1024 [ 88.771673][ T5771] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 88.779412][ T5771] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 88.812637][ T5771] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 88.820427][ T5771] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 88.856222][ T5771] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 88.872661][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 88.881680][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 88.899812][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 88.938820][ T5771] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 88.945730][ T5771] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 88.957227][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 88.966510][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 88.976812][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 88.986286][ T5771] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 89.001693][ T5771] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 89.012169][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 89.021090][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 89.056827][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 89.083308][ T5771] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 89.100734][ T5771] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 89.119342][ T5771] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 89.137242][ T5771] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 89.156070][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 89.175475][ T5771] NILFS (loop0): discard dirty page: offset=65536, ino=3 [ 89.197212][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 89.217622][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 89.236898][ T5771] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 89.249300][ T6126] loop2: detected capacity change from 0 to 4096 [ 89.255960][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 89.270125][ T5771] NILFS (loop0): discard dirty page: offset=196608, ino=3 [ 89.280850][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 89.304854][ T6126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.349509][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 89.395024][ T6136] program syz.3.114 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.400625][ T5771] NILFS (loop0): discard dirty block: blocknr=49, size=1024 [ 89.472244][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 89.533662][ T6140] loop3: detected capacity change from 0 to 128 [ 89.551742][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.581230][ T6140] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 89.620982][ T6140] hpfs: filesystem error: improperly stopped [ 89.633789][ T6140] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 89.641591][ T6140] hpfs: You really don't want any checks? You are crazy... [ 89.697294][ T6140] hpfs: hpfs_map_sector(): read error [ 89.714796][ T6140] hpfs: code page support is disabled [ 89.740282][ T6144] loop1: detected capacity change from 0 to 1024 [ 89.753156][ T6140] hpfs: hpfs_map_4sectors(): unaligned read [ 89.761031][ T6140] hpfs: hpfs_map_4sectors(): unaligned read [ 89.807250][ T6140] hpfs: filesystem error: unable to find root dir [ 89.933974][ T1073] hfsplus: b-tree write err: -5, ino 25 [ 89.942754][ T1073] hfsplus: b-tree write err: -5, ino 4 [ 89.958363][ T1073] hfsplus: b-tree write err: -5, ino 2 [ 89.970297][ T1073] hfsplus: b-tree write err: -5, ino 17 [ 90.092191][ T9] IPVS: starting estimator thread 0... [ 90.099210][ T6150] IPVS: nq: FWM 3 0x00000003 - no destination available [ 90.192250][ T6151] IPVS: using max 18 ests per chain, 43200 per kthread [ 90.477094][ T6171] loop3: detected capacity change from 0 to 1024 [ 90.504286][ T6171] hfsplus: unable to parse mount options [ 90.782425][ T5772] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 90.986871][ T5772] usb 3-1: Using ep0 maxpacket: 8 [ 90.998815][ T5772] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 91.024668][ T5772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.048275][ T5772] usb 3-1: Product: syz [ 91.060114][ T5772] usb 3-1: Manufacturer: syz [ 91.070018][ T5772] usb 3-1: SerialNumber: syz [ 91.087911][ T5772] usb 3-1: config 0 descriptor?? [ 91.288088][ T6194] loop1: detected capacity change from 0 to 256 [ 91.307586][ T5772] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 91.320659][ T6194] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 91.337846][ T5772] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 91.348408][ T5772] usb 3-1: USB disconnect, device number 5 [ 91.627437][ T6202] loop3: detected capacity change from 0 to 1024 [ 91.668534][ T6202] EXT4-fs (loop3): filesystem is read-only [ 91.682129][ T6202] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 91.706819][ T6202] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 91.740037][ T6202] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 91.771407][ T6202] EXT4-fs error (device loop3): ext4_get_journal_inode:5820: comm syz.3.139: inode #1: comm syz.3.139: iget: illegal inode # [ 91.819410][ T6202] EXT4-fs (loop3): no journal found [ 91.849342][ T6202] EXT4-fs (loop3): can't get journal size [ 91.880643][ T6202] EXT4-fs error (device loop3): __ext4_fill_super:5517: inode #2: comm syz.3.139: iget: special inode unallocated [ 91.914046][ T6202] EXT4-fs (loop3): get root inode failed [ 91.919751][ T6202] EXT4-fs (loop3): mount failed [ 92.483841][ T6224] loop3: detected capacity change from 0 to 4096 [ 93.347250][ T6242] netlink: 80 bytes leftover after parsing attributes in process `syz.0.156'. [ 93.591460][ T6256] Zero length message leads to an empty skb [ 93.924700][ T6268] netlink: 104 bytes leftover after parsing attributes in process `syz.1.169'. [ 94.310467][ T6288] netlink: 16 bytes leftover after parsing attributes in process `syz.1.179'. [ 94.382298][ T5808] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 94.388110][ T6292] capability: warning: `syz.1.182' uses deprecated v2 capabilities in a way that may be insecure [ 94.502143][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.592142][ T5808] usb 4-1: Using ep0 maxpacket: 32 [ 94.599539][ T5808] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 70, changing to 10 [ 94.614700][ T5808] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.642392][ T5808] usb 4-1: config 0 interface 0 has no altsetting 0 [ 94.650160][ T5808] usb 4-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00 [ 94.666425][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.675414][ T6304] loop1: detected capacity change from 0 to 256 [ 94.683819][ T6304] exfat: Deprecated parameter 'namecase' [ 94.689539][ T6304] exfat: Deprecated parameter 'utf8' [ 94.696170][ T5808] usb 4-1: config 0 descriptor?? [ 94.713216][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.733030][ T9] usb 1-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 94.749739][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.767009][ T9] usb 1-1: config 0 descriptor?? [ 94.786629][ T6304] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 94.991680][ T6309] loop1: detected capacity change from 0 to 2048 [ 95.028495][ T6309] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 95.049229][ T6309] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 95.068877][ T6309] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.141974][ T5808] wacom 0003:056A:0018.0003: Unknown device_type for 'HID 056a:0018'. Assuming pen. [ 95.171432][ T5808] wacom 0003:056A:0018.0003: hidraw0: USB HID v0.81 Device [HID 056a:0018] on usb-dummy_hcd.3-1/input0 [ 95.189388][ T5808] input: Wacom BambooFun 6x8 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0018.0003/input/input8 [ 95.225741][ T9] waltop 0003:172F:0032.0004: unknown main item tag 0x0 [ 95.258146][ T9] waltop 0003:172F:0032.0004: item fetching failed at offset 6/41 [ 95.287899][ T9] waltop: probe of 0003:172F:0032.0004 failed with error -22 [ 95.412413][ T1561] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 95.443600][ T27] usb 4-1: USB disconnect, device number 4 [ 95.450465][ T9] usb 1-1: USB disconnect, device number 2 [ 95.471163][ T6316] netlink: 'syz.1.192': attribute type 32 has an invalid length. [ 95.483801][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'. [ 95.497350][ T6316] (unnamed net_device) (uninitialized): option coupled_control: invalid value (7) [ 95.615508][ T1561] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.627215][ T1561] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.638040][ T1561] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 95.647732][ T1561] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.663127][ T1561] usb 3-1: config 0 descriptor?? [ 96.093442][ T1561] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 96.109849][ T1561] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 96.118235][ T1561] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 96.127588][ T1561] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 96.153223][ T1561] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 96.168098][ T1561] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 96.179257][ T1561] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 96.202906][ T1561] hid-thrustmaster 0003:044F:B65D.0005: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 96.234517][ T1561] hid-thrustmaster 0003:044F:B65D.0005: Wrong number of endpoints? [ 96.312353][ T5772] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 96.359855][ T6330] loop3: detected capacity change from 0 to 4096 [ 96.398379][ C1] hid-thrustmaster 0003:044F:B65D.0005: Unknown wheel's model id 0x0, unable to proceed further with wheel init [ 96.545274][ T5772] usb 2-1: Using ep0 maxpacket: 32 [ 96.565033][ T5772] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 96.592150][ T5772] usb 2-1: config 0 has no interface number 0 [ 96.604615][ T5772] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 96.619326][ T5808] usb 3-1: USB disconnect, device number 6 [ 96.622651][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.641938][ T5772] usb 2-1: Product: syz [ 96.652176][ T5772] usb 2-1: Manufacturer: syz [ 96.663125][ T5772] usb 2-1: SerialNumber: syz [ 96.695436][ T5772] usb 2-1: config 0 descriptor?? [ 96.726367][ T5772] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 96.934469][ T5772] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 96.972863][ T5772] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 97.364754][ T6359] loop0: detected capacity change from 0 to 512 [ 97.377385][ T6359] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.411128][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 97.421555][ T9] usb 2-1: USB disconnect, device number 4 [ 97.426716][ T6359] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.212: invalid block [ 97.433915][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 97.463410][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 97.480236][ T9] quatech2 2-1:0.51: device disconnected [ 97.498412][ T6359] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.212: invalid indirect mapped block 10 (level 1) [ 97.517519][ T6359] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.212: invalid indirect mapped block 8 (level 1) [ 97.537330][ T6359] EXT4-fs (loop0): 1 truncate cleaned up [ 97.546915][ T6359] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.558435][ T6363] syz.3.213 (6363) used greatest stack depth: 20592 bytes left [ 97.684143][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.699391][ T6367] loop3: detected capacity change from 0 to 8 [ 97.858832][ T6371] warning: `syz.3.217' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.151423][ T6380] loop1: detected capacity change from 0 to 512 [ 98.152899][ T6381] loop3: detected capacity change from 0 to 2048 [ 98.187762][ T6381] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.239597][ T6380] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.301240][ T6380] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.480908][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.881841][ T6403] loop3: detected capacity change from 0 to 128 [ 99.198667][ T6395] loop1: detected capacity change from 0 to 40427 [ 99.222007][ T6395] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 99.230066][ T6395] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 99.280627][ T6395] F2FS-fs (loop1): Found nat_bits in checkpoint [ 99.335908][ T6414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.235'. [ 99.422828][ T6395] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 99.442206][ T6395] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 99.619128][ T28] audit: type=1800 audit(1784723250.840:2): pid=6395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.227" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 99.710761][ T5768] syz-executor: attempt to access beyond end of device [ 99.710761][ T5768] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 99.734358][ T5768] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 99.801366][ T6419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.455745][ T6439] loop2: detected capacity change from 0 to 512 [ 100.471529][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 100.485774][ T6439] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 100.520110][ T6439] EXT4-fs (loop2): 1 truncate cleaned up [ 100.533872][ T6439] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.573314][ T6431] loop3: detected capacity change from 0 to 32768 [ 100.621400][ T6431] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.244 (6431) [ 100.700972][ T6431] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 100.716822][ T6431] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 100.730537][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.745718][ T6431] BTRFS info (device loop3): use zlib compression, level 3 [ 100.792289][ T6431] BTRFS info (device loop3): using free space tree [ 100.998380][ T6472] netlink: 36 bytes leftover after parsing attributes in process `syz.2.254'. [ 101.012204][ T6431] BTRFS info (device loop3): enabling ssd optimizations [ 101.019266][ T6431] BTRFS info (device loop3): auto enabling async discard [ 101.177502][ T5776] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 101.269959][ T1561] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.494583][ T1561] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 101.512460][ T1561] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.542306][ T1561] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 101.566424][ T1561] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.610651][ T1561] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 101.643093][ T1561] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 101.667768][ T1561] usb 1-1: Product: syz [ 101.694889][ T1561] usb 1-1: Manufacturer: syz [ 101.728393][ T6489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.740349][ T1561] cdc_wdm 1-1:1.0: skipping garbage [ 101.742427][ T56] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 101.745774][ T1561] cdc_wdm 1-1:1.0: skipping garbage [ 101.777173][ T1561] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 101.788066][ T1561] cdc_wdm 1-1:1.0: Unknown control protocol [ 101.945360][ T56] usb 4-1: Using ep0 maxpacket: 32 [ 101.970751][ T56] usb 4-1: string descriptor 0 read error: -22 [ 101.982459][ T56] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 101.994756][ T56] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.029216][ T56] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 102.042943][ T1561] usb 1-1: USB disconnect, device number 3 [ 102.047724][ T56] usb 4-1: MIDIStreaming interface descriptor not found [ 102.053931][ T6492] loop2: detected capacity change from 0 to 40427 [ 102.071814][ T6492] F2FS-fs (loop2): invalid crc value [ 102.107871][ T6492] F2FS-fs (loop2): Found nat_bits in checkpoint [ 102.242288][ T6492] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 102.308044][ T8] usb 4-1: USB disconnect, device number 5 [ 102.454313][ T5775] syz-executor: attempt to access beyond end of device [ 102.454313][ T5775] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 102.479487][ T5775] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 102.852950][ T1561] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 103.062169][ T1561] usb 2-1: Using ep0 maxpacket: 16 [ 103.070313][ T1561] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 103.086347][ T6520] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 103.086347][ T6520] The task syz.3.274 (6520) triggered the difference, watch for misbehavior. [ 103.117033][ T1561] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 103.132115][ T1561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.150134][ T1561] usb 2-1: Product: syz [ 103.157474][ T1561] usb 2-1: Manufacturer: syz [ 103.168716][ T1561] usb 2-1: SerialNumber: syz [ 103.202472][ T1561] usb 2-1: config 0 descriptor?? [ 103.214905][ T1561] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 103.241101][ T1561] usb 2-1: Detected FT232R [ 103.442740][ T1561] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 103.681849][ T1561] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 103.946392][ T5808] usb 2-1: USB disconnect, device number 5 [ 103.997859][ T5808] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 104.018378][ T5808] ftdi_sio 2-1:0.0: device disconnected [ 104.996277][ T6565] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.003949][ T6565] IPv6: NLM_F_CREATE should be set when creating new route [ 105.011295][ T6565] IPv6: NLM_F_CREATE should be set when creating new route [ 105.018656][ T6565] IPv6: NLM_F_CREATE should be set when creating new route [ 105.109417][ T6565] netlink: 'syz.1.284': attribute type 20 has an invalid length. [ 105.115318][ T6568] process 'syz.2.286' launched './file0' with NULL argv: empty string added [ 105.821579][ T6591] loop1: detected capacity change from 0 to 4096 [ 106.038570][ T6579] loop2: detected capacity change from 0 to 32768 [ 106.091230][ T6579] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 106.116964][ T6591] ntfs3: loop1: ino=0, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 106.219704][ T6579] XFS (loop2): Ending clean mount [ 106.286456][ T6579] XFS (loop2): Quotacheck needed: Please wait. [ 106.429526][ T6579] XFS (loop2): Quotacheck: Done. [ 106.487924][ T6608] program syz.0.298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.697733][ T5775] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 106.717823][ T6614] erspan0: entered promiscuous mode [ 107.268782][ T6621] loop0: detected capacity change from 0 to 8192 [ 107.551340][ T6629] loop2: detected capacity change from 0 to 512 [ 107.659407][ T6629] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.306: bg 0: block 5: invalid block bitmap [ 107.762993][ T6629] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 107.782632][ T6629] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.306: invalid indirect mapped block 64000 (level 1) [ 107.821441][ T6629] EXT4-fs (loop2): 1 orphan inode deleted [ 107.832516][ T6629] EXT4-fs (loop2): 1 truncate cleaned up [ 107.853350][ T6629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.013973][ T6629] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #2: comm syz.2.306: directory missing '.' [ 108.146596][ T6646] loop1: detected capacity change from 0 to 128 [ 108.170620][ T28] audit: type=1326 audit(1784723259.400:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6647 comm="syz.0.313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dd19de99 code=0x7ffc0000 [ 108.202623][ T6646] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 108.220890][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.242269][ T28] audit: type=1326 audit(1784723259.400:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6647 comm="syz.0.313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dd19de99 code=0x7ffc0000 [ 108.278030][ T28] audit: type=1326 audit(1784723259.430:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6647 comm="syz.0.313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dd19de99 code=0x7ffc0000 [ 108.303088][ T28] audit: type=1326 audit(1784723259.440:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6647 comm="syz.0.313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fe4dd19de99 code=0x7ffc0000 [ 108.326986][ T28] audit: type=1326 audit(1784723259.440:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6647 comm="syz.0.313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dd19de99 code=0x7ffc0000 [ 108.351462][ T28] audit: type=1326 audit(1784723259.440:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6647 comm="syz.0.313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dd19de99 code=0x7ffc0000 [ 108.376718][ T28] audit: type=1326 audit(1784723259.440:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6647 comm="syz.0.313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dd19de99 code=0x7ffc0000 [ 108.401164][ T28] audit: type=1326 audit(1784723259.440:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6647 comm="syz.0.313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dd19de99 code=0x7ffc0000 [ 108.425564][ T28] audit: type=1326 audit(1784723259.440:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6647 comm="syz.0.313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dd19de99 code=0x7ffc0000 [ 108.450064][ T28] audit: type=1326 audit(1784723259.440:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6647 comm="syz.0.313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fe4dd19de99 code=0x7ffc0000 [ 108.653725][ T6657] loop0: detected capacity change from 0 to 512 [ 109.053511][ T6652] loop2: detected capacity change from 0 to 32768 [ 109.169530][ T6652] [ 109.169530][ T6652] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 109.169530][ T6652] [ 109.321230][ T6670] loop0: detected capacity change from 0 to 2048 [ 109.334935][ T6652] [ 109.334935][ T6652] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 109.334935][ T6652] [ 109.369689][ T6670] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.380837][ T6652] [ 109.380837][ T6652] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 109.380837][ T6652] [ 109.435137][ T6652] [ 109.435137][ T6652] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 109.435137][ T6652] [ 109.474180][ T6652] [ 109.474180][ T6652] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 109.474180][ T6652] [ 109.490231][ T6670] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24) [ 109.561462][ T114] ERROR: (device loop2): dbFree: error in block map [ 109.561462][ T114] [ 109.596322][ T6652] [ 109.596322][ T6652] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 109.596322][ T6652] [ 109.721311][ T5775] [ 109.721311][ T5775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 109.721311][ T5775] [ 109.761659][ T5775] [ 109.761659][ T5775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 109.761659][ T5775] [ 109.827386][ T6684] loop1: detected capacity change from 0 to 512 [ 109.930630][ T6686] loop3: detected capacity change from 0 to 2048 [ 109.958509][ T6686] EXT4-fs: Ignoring removed i_version option [ 109.959081][ T6684] FAT-fs (loop1): error, corrupted file size (i_pos 0, 8960) [ 110.006928][ T6684] FAT-fs (loop1): error, corrupted file size (i_pos 0, 8960) [ 110.009370][ T6686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.052358][ T6686] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.137185][ T6686] fs-verity: sha512 using implementation "sha512-avx2" [ 110.256710][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.410756][ T6697] Dev loop5: unable to read RDB block 6 [ 110.430488][ T6697] loop5: AHDI p1 p2 [ 110.442274][ T6697] loop5: partition table partially beyond EOD, truncated [ 110.466780][ T6697] loop5: p1 start 1702059890 is beyond EOD, truncated [ 110.645577][ T6700] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 110.696946][ T6700] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 110.732511][ T6700] REISERFS (device loop2): using ordered data mode [ 110.739176][ T6700] reiserfs: using flush barriers [ 110.746834][ T6700] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 110.764176][ T6700] REISERFS (device loop2): checking transaction log (loop2) [ 110.801226][ T6700] REISERFS (device loop2): Using r5 hash to sort names [ 110.824240][ T6688] set_capacity_and_notify: 2 callbacks suppressed [ 110.824253][ T6688] loop0: detected capacity change from 0 to 40427 [ 110.894302][ T6688] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 110.930502][ T6700] reiserfs: enabling write barrier flush mode [ 110.948638][ T6688] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 110.968145][ T6700] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 110.984269][ T6688] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 111.013551][ T6688] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 111.040758][ T6700] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 111.079785][ T6688] F2FS-fs (loop0): Image doesn't support compression [ 111.090308][ T6700] REISERFS (device loop2): Remounting filesystem read-only [ 111.106393][ T6700] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 111.125805][ T6688] F2FS-fs (loop0): invalid crc value [ 111.146494][ T6700] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 111.168996][ T6717] loop3: detected capacity change from 0 to 1024 [ 111.192841][ T6700] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 111.210827][ T6688] F2FS-fs (loop0): Found nat_bits in checkpoint [ 111.253405][ T6700] REISERFS error (device loop2): zam-7001 reiserfs_find_entry: io error [ 111.261828][ T6700] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 111.304650][ T6700] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 111.316146][ T6700] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 111.338919][ T6700] REISERFS warning (device loop2): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 111.452945][ T6688] F2FS-fs (loop0): Start checkpoint disabled! [ 111.471380][ T6700] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 111.495557][ T6700] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 111.508145][ T6700] REISERFS (device loop2): Remounting filesystem read-only [ 111.550542][ T6688] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 111.558290][ T6688] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 111.709293][ T6688] F2FS-fs (loop0): inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fe/0x5c0 [ 111.781623][ T6688] syz.0.332: attempt to access beyond end of device [ 111.781623][ T6688] loop0: rw=2049, sector=45096, nr_sectors = 88 limit=40427 [ 111.833957][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.346'. [ 111.849142][ T6727] netlink: 28 bytes leftover after parsing attributes in process `syz.3.346'. [ 111.868155][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.346'. [ 111.877328][ T6727] netlink: 28 bytes leftover after parsing attributes in process `syz.3.346'. [ 112.000143][ T6731] loop3: detected capacity change from 0 to 512 [ 112.009878][ T6729] mmap: syz.2.345 (6729) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 112.133666][ T6731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.252475][ T6731] ext4 filesystem being mounted at /95/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.300282][ T11] kworker/u4:0: attempt to access beyond end of device [ 112.300282][ T11] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 112.317470][ T6731] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 112.338567][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 112.346303][ T6741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.351'. [ 112.363980][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 112.400724][ T6739] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 112.418643][ T6739] overlayfs: overlapping lowerdir path [ 112.419203][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.758173][ T6748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.354'. [ 112.860110][ T6752] loop2: detected capacity change from 0 to 4096 [ 113.011827][ T6752] ntfs3: loop2: ino=0, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 113.184273][ T6758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.365'. [ 113.211068][ T6761] vxcan0: tx address claim with dest, not broadcast [ 113.355137][ T6767] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 114.282728][ T6789] loop2: detected capacity change from 0 to 1024 [ 114.345494][ T6789] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.378207][ T6803] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.931178][ T6799] loop2: detected capacity change from 0 to 40427 [ 115.989700][ T6799] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 116.001534][ T6799] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 116.051288][ T6799] F2FS-fs (loop2): invalid crc value [ 116.136201][ T6822] loop0: detected capacity change from 0 to 2048 [ 116.193419][ T6822] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 116.221033][ T5930] udevd[5930]: incorrect nilfs2 checksum on /dev/loop0 [ 116.267684][ T6823] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.316034][ T6799] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 116.339813][ T6799] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 116.475120][ T5775] syz-executor: attempt to access beyond end of device [ 116.475120][ T5775] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 116.510169][ T5775] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 116.521826][ T6823] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 116.522999][ T5775] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 116.550434][ T6823] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 116.578265][ T6823] Remounting filesystem read-only [ 116.671932][ T6822] syz.0.383 (6822) used greatest stack depth: 19832 bytes left [ 116.741426][ T5771] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 116.758581][ T5771] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 116.766176][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 116.786196][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 116.797037][ T5771] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 116.824079][ T5771] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 116.857336][ T5771] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 116.876465][ T5771] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 116.892856][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 116.901780][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 116.932113][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 116.941302][ T5771] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 116.972188][ T5771] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 116.979562][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 117.005349][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 117.044479][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 117.070155][ T5771] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 117.095934][ T5771] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 117.113874][ T5771] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 117.134111][ T5771] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 117.151739][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 117.170358][ T5771] NILFS (loop0): discard dirty page: offset=229376, ino=3 [ 117.187337][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 117.206893][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 117.222358][ T5771] NILFS (loop0): discard dirty block: blocknr=50, size=1024 [ 117.240231][ T5771] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 117.252124][ T5771] NILFS (loop0): discard dirty page: offset=233472, ino=3 [ 117.268102][ T5771] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 117.283897][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 117.302171][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 117.321707][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 118.743111][ T6849] loop0: detected capacity change from 0 to 1024 [ 119.278492][ T6858] loop0: detected capacity change from 0 to 512 [ 119.320430][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.398'. [ 119.352845][ T6858] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.402343][ T6858] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.490014][ T6870] ubi0: attaching mtd0 [ 119.496113][ T6870] ubi0 error: ubi_attach_mtd_dev: bad VID header (589826) or data offsets (589890) [ 119.505728][ T6858] syz.0.397 uses obsolete (PF_INET,SOCK_PACKET) [ 119.621237][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.857193][ T6873] loop3: detected capacity change from 0 to 40427 [ 119.867749][ T6873] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 119.880006][ T6873] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 119.888423][ T6873] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 119.896917][ T6873] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 119.905476][ T6873] F2FS-fs (loop3): Image doesn't support compression [ 119.915402][ T6873] F2FS-fs (loop3): invalid crc value [ 119.924108][ T6873] F2FS-fs (loop3): Found nat_bits in checkpoint [ 119.973078][ T6873] F2FS-fs (loop3): Start checkpoint disabled! [ 119.986798][ T6873] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 119.994004][ T6873] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 120.038911][ T6873] F2FS-fs (loop3): inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fe/0x5c0 [ 120.050678][ T6873] syz.3.403: attempt to access beyond end of device [ 120.050678][ T6873] loop3: rw=2049, sector=45096, nr_sectors = 88 limit=40427 [ 120.213830][ T11] kworker/u4:0: attempt to access beyond end of device [ 120.213830][ T11] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 120.231355][ T11] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 120.240199][ T11] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 120.365880][ T6878] syz.2.405[6878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.366131][ T6878] syz.2.405[6878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.655939][ T6888] loop0: detected capacity change from 0 to 64 [ 120.767695][ T6888] syz.0.410: attempt to access beyond end of device [ 120.767695][ T6888] loop0: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 120.811039][ T6888] Buffer I/O error on dev loop0, logical block 134217734, lost async page write [ 121.834345][ T6900] loop2: detected capacity change from 0 to 40427 [ 121.847743][ T6898] loop3: detected capacity change from 0 to 40427 [ 121.860446][ T6900] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 121.886428][ T6900] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 121.911033][ T6898] F2FS-fs (loop3): invalid crc value [ 121.937463][ T6900] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 121.948170][ T6900] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 121.959328][ T6900] F2FS-fs (loop2): Image doesn't support compression [ 121.973371][ T6898] F2FS-fs (loop3): Found nat_bits in checkpoint [ 121.987125][ T6900] F2FS-fs (loop2): invalid crc value [ 122.027529][ T6900] F2FS-fs (loop2): Found nat_bits in checkpoint [ 122.137538][ T6898] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 122.190563][ T6900] F2FS-fs (loop2): Start checkpoint disabled! [ 122.245229][ T6900] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 122.263304][ T6900] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 122.277389][ T6903] f2fs_ckpt-7:3: attempt to access beyond end of device [ 122.277389][ T6903] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 122.350503][ T6903] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 122.433935][ T6900] F2FS-fs (loop2): inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fe/0x5c0 [ 122.466454][ T6900] syz.2.412: attempt to access beyond end of device [ 122.466454][ T6900] loop2: rw=2049, sector=45096, nr_sectors = 88 limit=40427 [ 122.703193][ T6912] netlink: 44 bytes leftover after parsing attributes in process `syz.1.416'. [ 122.719853][ T6912] netlink: 43 bytes leftover after parsing attributes in process `syz.1.416'. [ 122.729300][ T6912] netlink: 'syz.1.416': attribute type 5 has an invalid length. [ 122.749071][ T6912] netlink: 43 bytes leftover after parsing attributes in process `syz.1.416'. [ 122.761647][ T42] kworker/u4:2: attempt to access beyond end of device [ 122.761647][ T42] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 122.793837][ T42] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 122.801031][ T42] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 123.262281][ T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 123.464366][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 123.477248][ T27] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 123.488043][ T27] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 123.509576][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 123.550749][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.576457][ T27] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.611295][ T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 123.627434][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.931373][ T27] usb 2-1: GET_CAPABILITIES returned 0 [ 123.954414][ T27] usbtmc 2-1:16.0: can't read capabilities [ 124.188141][ T27] usb 2-1: USB disconnect, device number 6 [ 124.220163][ T6945] loop3: detected capacity change from 0 to 4096 [ 124.318057][ T6948] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.363927][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 124.363940][ T28] audit: type=1800 audit(1784723275.600:23): pid=6945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.431" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 124.925177][ T6957] loop1: detected capacity change from 0 to 128 [ 124.971631][ T6957] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.040124][ T6957] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.100811][ T6957] EXT4-fs (loop1): Test dummy encryption mode enabled [ 125.154710][ T6957] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.232111][ T6957] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 125.409334][ T5768] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.839714][ T6955] loop2: detected capacity change from 0 to 131072 [ 125.918846][ T6955] F2FS-fs (loop2): Found nat_bits in checkpoint [ 125.987279][ T6955] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 126.045458][ T6955] F2FS-fs (loop2): list inode (7) has corrupted xattr [ 126.219923][ T6981] loop1: detected capacity change from 0 to 128 [ 126.260616][ T6981] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 126.312198][ T6981] hpfs: filesystem error: improperly stopped [ 126.318286][ T6981] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 126.392407][ T6981] hpfs: You really don't want any checks? You are crazy... [ 126.424449][ T6981] hpfs: hpfs_map_sector(): read error [ 126.430158][ T6981] hpfs: code page support is disabled [ 126.471508][ T6981] hpfs: hpfs_map_4sectors(): unaligned read [ 126.501440][ T6981] hpfs: hpfs_map_4sectors(): unaligned read [ 126.532240][ T6981] hpfs: filesystem error: unable to find root dir [ 126.600932][ T6971] loop3: detected capacity change from 0 to 32768 [ 126.744398][ T6973] loop0: detected capacity change from 0 to 32768 [ 126.939649][ T6971] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 126.953617][ T6973] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 127.039973][ T7002] loop1: detected capacity change from 0 to 2048 [ 127.107826][ T7002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.253280][ T6973] XFS (loop0): Ending clean mount [ 127.278389][ T7002] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 127.301416][ T6973] XFS (loop0): Quotacheck needed: Please wait. [ 127.340740][ T7002] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 127.397162][ T7002] EXT4-fs (loop1): This should not happen!! Data will be lost [ 127.397162][ T7002] [ 127.474867][ T7002] EXT4-fs (loop1): Total free blocks count 0 [ 127.480956][ T7002] EXT4-fs (loop1): Free/Dirty block details [ 127.508327][ T6973] XFS (loop0): Quotacheck: Done. [ 127.543629][ T7002] EXT4-fs (loop1): free_blocks=2415919504 [ 127.572284][ T7002] EXT4-fs (loop1): dirty_blocks=16 [ 127.577588][ T7002] EXT4-fs (loop1): Block reservation details [ 127.606308][ T7002] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 127.619164][ T6971] syz.3.442 (6971) used greatest stack depth: 17784 bytes left [ 127.664245][ T7011] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 127.801073][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 127.894987][ T5771] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 127.953904][ T7017] loop2: detected capacity change from 0 to 4096 [ 127.978475][ T7017] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 128.036255][ T7017] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 128.067108][ T7019] loop1: detected capacity change from 0 to 4096 [ 128.080248][ T7019] EXT4-fs (loop1): Test dummy encryption mode enabled [ 128.083277][ T7017] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 128.146649][ T7019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.165463][ T7017] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 128.186280][ T7017] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 128.196513][ T7017] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 128.219188][ T7017] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 128.228462][ T7017] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 128.248983][ T7017] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 128.271618][ T7017] ntfs: volume version 3.1. [ 128.373962][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.639455][ T7032] dccp_invalid_packet: P.Data Offset(4) too small [ 128.729728][ T7037] loop2: detected capacity change from 0 to 64 [ 128.776252][ T7037] syz.2.464: attempt to access beyond end of device [ 128.776252][ T7037] loop2: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 128.801162][ T7037] Buffer I/O error on dev loop2, logical block 134217734, lost async page write [ 129.255443][ T7039] loop1: detected capacity change from 0 to 32768 [ 129.323800][ T7039] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 129.407702][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 129.407716][ T28] audit: type=1804 audit(1784723280.630:24): pid=7039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.465" name="/newroot/110/file1/file0" dev="loop1" ino=17058 res=1 errno=0 [ 129.642581][ T7053] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 129.653569][ T5768] ocfs2: Unmounting device (7,1) on (node local) [ 129.971960][ T7061] netlink: 'syz.3.473': attribute type 12 has an invalid length. [ 129.994044][ T7050] loop0: detected capacity change from 0 to 32768 [ 130.002282][ T7061] netlink: 'syz.3.473': attribute type 29 has an invalid length. [ 130.010118][ T7061] netlink: 148 bytes leftover after parsing attributes in process `syz.3.473'. [ 130.046263][ T7050] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.458 (7050) [ 130.062438][ T7061] netlink: 'syz.3.473': attribute type 2 has an invalid length. [ 130.074268][ T7064] loop2: detected capacity change from 0 to 4096 [ 130.103574][ T7061] netlink: 'syz.3.473': attribute type 3 has an invalid length. [ 130.111287][ T7061] netlink: 19 bytes leftover after parsing attributes in process `syz.3.473'. [ 130.120799][ T7050] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 130.149002][ T7050] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 130.163968][ T7067] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.221546][ T7050] BTRFS info (device loop0): metadata ratio 0 [ 130.232144][ T28] audit: type=1800 audit(1784723281.460:25): pid=7064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.474" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 130.247756][ T7050] BTRFS info (device loop0): turning on sync discard [ 130.252440][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.332147][ T7050] BTRFS info (device loop0): using free space tree [ 130.345693][ T28] audit: type=1800 audit(1784723281.470:26): pid=7064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.474" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 130.599207][ T7050] BTRFS info (device loop0): enabling ssd optimizations [ 130.628538][ T7091] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.637960][ T7091] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.815703][ T28] audit: type=1800 audit(1784723282.050:27): pid=7050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.458" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 130.841164][ T7050] BTRFS error (device loop0): unable to set label with more than 255 bytes [ 131.038036][ T5771] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.157800][ T7102] batman_adv: batadv0: Adding interface: macvtap1 [ 131.186635][ T7102] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.225828][ T7102] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 131.491262][ T7108] loop3: detected capacity change from 0 to 2048 [ 131.602008][ T7108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.818721][ T7117] netem: incorrect ge model size [ 131.842623][ T7117] netem: change failed [ 131.863820][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.031497][ T7123] tmpfs: Bad value for 'uid' [ 132.275887][ T7097] loop2: detected capacity change from 0 to 40427 [ 132.293997][ T7097] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 132.303400][ T7097] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 132.319881][ T7097] F2FS-fs (loop2): invalid crc value [ 132.583927][ T7097] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 132.606429][ T7097] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 132.867605][ T5775] syz-executor: attempt to access beyond end of device [ 132.867605][ T5775] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 132.896284][ T5775] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 133.092605][ T7127] loop0: detected capacity change from 0 to 40427 [ 133.140310][ T7127] F2FS-fs (loop0): invalid crc value [ 133.188923][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.195500][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.204145][ T7127] F2FS-fs (loop0): Found nat_bits in checkpoint [ 133.352121][ T7127] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 133.538595][ T7150] f2fs_ckpt-7:0: attempt to access beyond end of device [ 133.538595][ T7150] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 133.604635][ T7150] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 133.660047][ T7162] loop2: detected capacity change from 0 to 256 [ 133.686407][ T7159] loop1: detected capacity change from 0 to 4096 [ 133.752482][ T7162] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.752525][ T7162] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 133.778203][ T7167] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.794245][ T7162] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 133.844957][ T28] audit: type=1800 audit(1784723285.070:28): pid=7159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.507" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 134.111017][ T7172] loop1: detected capacity change from 0 to 128 [ 134.622170][ T5808] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 134.826224][ T5808] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 134.842366][ T5808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.873127][ T5808] usb 2-1: config 0 descriptor?? [ 134.929546][ T7189] netlink: 40 bytes leftover after parsing attributes in process `syz.0.519'. [ 134.973299][ T7170] loop2: detected capacity change from 0 to 40427 [ 135.028560][ T7178] loop3: detected capacity change from 0 to 32768 [ 135.046747][ T7170] F2FS-fs (loop2): invalid crc value [ 135.092540][ T7170] F2FS-fs (loop2): Found nat_bits in checkpoint [ 135.123095][ T7178] find_entry called with index >= next_index [ 135.129915][ T7178] find_entry called with index >= next_index [ 135.159493][ T7178] find_entry called with index >= next_index [ 135.197480][ T7170] F2FS-fs (loop2): Start checkpoint disabled! [ 135.267387][ T7170] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 135.334795][ T7170] syz.2.512: attempt to access beyond end of device [ 135.334795][ T7170] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 135.373764][ T5808] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 135.402187][ T5808] [drm] Initialized udl on minor 2 [ 135.564164][ T1073] kworker/u4:6: attempt to access beyond end of device [ 135.564164][ T1073] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 135.582233][ T1073] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 135.589505][ T1073] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 135.725024][ T5808] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 135.764167][ T5808] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 135.804031][ T56] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 135.823991][ T5808] usb 2-1: USB disconnect, device number 7 [ 135.862950][ T56] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 136.010433][ T7204] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.011867][ T7202] loop0: detected capacity change from 0 to 4096 [ 136.018465][ T7204] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.056595][ T7202] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 136.108478][ T7202] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 136.162272][ T7202] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 136.166156][ T7206] loop2: detected capacity change from 0 to 256 [ 136.184602][ T7202] ntfs: volume version 3.1. [ 136.278594][ T7202] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 136.405701][ T5771] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 136.926854][ T7226] loop1: detected capacity change from 0 to 128 [ 137.270583][ T7222] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 137.315974][ T7222] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 137.387877][ T7222] F2FS-fs (loop3): Found nat_bits in checkpoint [ 137.413458][ T7224] set_capacity_and_notify: 1 callbacks suppressed [ 137.413495][ T7224] loop0: detected capacity change from 0 to 32768 [ 137.493213][ T7224] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.533 (7224) [ 137.573218][ T7222] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 137.580628][ T7222] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 137.582933][ T7224] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 137.598127][ T7235] loop2: detected capacity change from 0 to 64 [ 137.660482][ T7224] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 137.733940][ T7224] BTRFS info (device loop0): using free space tree [ 137.851665][ T5776] syz-executor: attempt to access beyond end of device [ 137.851665][ T5776] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 137.870313][ T5776] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 137.932235][ T7224] BTRFS info (device loop0): enabling ssd optimizations [ 137.939390][ T7224] BTRFS info (device loop0): auto enabling async discard [ 138.028255][ T7255] netlink: 'syz.1.540': attribute type 6 has an invalid length. [ 138.068798][ T7255] netlink: 'syz.1.540': attribute type 6 has an invalid length. [ 138.335442][ T5771] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 138.793943][ T7273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.848462][ T7278] loop1: detected capacity change from 0 to 512 [ 138.938456][ T7278] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.129195][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.376131][ T7291] loop0: detected capacity change from 0 to 256 [ 139.400308][ T7293] loop1: detected capacity change from 0 to 256 [ 139.408542][ T7291] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 139.790988][ T7301] loop0: detected capacity change from 0 to 512 [ 139.919671][ T7301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.008921][ T7301] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.225858][ T7289] loop3: detected capacity change from 0 to 40427 [ 140.254241][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.267174][ T7304] loop1: detected capacity change from 0 to 32768 [ 140.274236][ T7289] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 140.277449][ T7304] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.560 (7304) [ 140.316975][ T7289] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 140.346621][ T7304] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 140.362926][ T7289] F2FS-fs (loop3): invalid crc value [ 140.376261][ T7304] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 140.410763][ T7289] F2FS-fs (loop3): Found nat_bits in checkpoint [ 140.416964][ T7304] BTRFS info (device loop1): turning on sync discard [ 140.434858][ T7304] BTRFS info (device loop1): force zlib compression, level 3 [ 140.476309][ T7304] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 140.517527][ T7304] BTRFS info (device loop1): use lzo compression, level 0 [ 140.546442][ T7304] BTRFS info (device loop1): turning on flush-on-commit [ 140.562938][ T7304] BTRFS info (device loop1): enabling auto defrag [ 140.584240][ T7304] BTRFS info (device loop1): max_inline at 4096 [ 140.601246][ T7304] BTRFS info (device loop1): turning off discard [ 140.602665][ T7289] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 140.611239][ T7304] BTRFS info (device loop1): using free space tree [ 140.639194][ T7289] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 140.739106][ T7304] BTRFS info (device loop1): enabling ssd optimizations [ 140.747452][ T7289] syz.3.553: attempt to access beyond end of device [ 140.747452][ T7289] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 140.832836][ T5776] syz-executor: attempt to access beyond end of device [ 140.832836][ T5776] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 140.901055][ T5776] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 140.904962][ T5808] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 140.959624][ T5768] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 141.132118][ T5808] usb 1-1: Using ep0 maxpacket: 8 [ 141.155591][ T5808] usb 1-1: unable to get BOS descriptor or descriptor too short [ 141.176860][ T5808] usb 1-1: no configurations [ 141.181605][ T5808] usb 1-1: can't read configurations, error -22 [ 141.871539][ T7354] loop0: detected capacity change from 0 to 2048 [ 141.890134][ T7339] loop2: detected capacity change from 0 to 32768 [ 141.954852][ T28] audit: type=1800 audit(1784723293.190:29): pid=7339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.568" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 141.955336][ T7354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.004414][ T7354] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.108740][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.396784][ T7368] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 142.542663][ T5807] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 142.755031][ T5807] usb 4-1: Using ep0 maxpacket: 32 [ 142.766635][ T5807] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 142.792524][ T5807] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 142.832933][ T5807] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 142.863522][ T5807] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 142.887592][ T5807] usb 4-1: config 0 interface 0 has no altsetting 0 [ 142.897042][ T5807] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 142.931480][ T5807] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 142.940351][ T5807] usb 4-1: Product: syz [ 142.945402][ T5807] usb 4-1: Manufacturer: syz [ 142.951624][ T5807] usb 4-1: SerialNumber: syz [ 142.967034][ T5807] usb 4-1: config 0 descriptor?? [ 142.997213][ T5807] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 143.021857][ T5807] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 143.141481][ T7393] netlink: 136 bytes leftover after parsing attributes in process `syz.1.590'. [ 143.296207][ T5807] usb 4-1: USB disconnect, device number 6 [ 143.307252][ T5807] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 143.603551][ T7405] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 143.747280][ T7386] set_capacity_and_notify: 1 callbacks suppressed [ 143.747294][ T7386] loop0: detected capacity change from 0 to 40427 [ 143.787792][ T7386] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 143.811125][ T7386] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 143.832173][ T7386] F2FS-fs (loop0): Image doesn't support compression [ 143.838933][ T7386] F2FS-fs (loop0): Image doesn't support compression [ 143.866327][ T7386] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x216 [ 143.895681][ T7386] F2FS-fs (loop0): invalid crc value [ 144.049298][ T7410] tap0: tun_chr_ioctl cmd 2148553947 [ 144.129713][ T7386] F2FS-fs (loop0): Start checkpoint disabled! [ 144.207073][ T7386] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 144.231294][ T7386] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 144.378967][ T7413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.599'. [ 144.390256][ T7386] syz.0.587: attempt to access beyond end of device [ 144.390256][ T7386] loop0: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 144.442670][ T7386] syz.0.587: attempt to access beyond end of device [ 144.442670][ T7386] loop0: rw=2049, sector=53256, nr_sectors = 120 limit=40427 [ 144.493167][ T7386] syz.0.587: attempt to access beyond end of device [ 144.493167][ T7386] loop0: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 144.637911][ T7417] loop3: detected capacity change from 0 to 128 [ 144.680470][ T60] kworker/u4:4: attempt to access beyond end of device [ 144.680470][ T60] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 144.697190][ T60] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 144.785855][ T7407] loop1: detected capacity change from 0 to 32768 [ 144.851978][ T7407] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 145.049066][ T7407] XFS (loop1): Ending clean mount [ 145.134641][ T7428] loop3: detected capacity change from 0 to 4096 [ 145.172285][ T7428] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 145.298298][ T7433] loop0: detected capacity change from 0 to 136 [ 145.335084][ T7428] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 145.559497][ T5768] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 145.928858][ T5774] block nbd1: Receive control failed (result -32) [ 145.969117][ T7444] loop2: detected capacity change from 0 to 1024 [ 145.995735][ T7446] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 146.096962][ T7444] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 146.111889][ T7444] hfsplus: xattr search failed [ 146.177141][ T7452] program syz.3.613 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.198307][ T1111] hfsplus: b-tree write err: -5, ino 25 [ 146.224359][ T1111] hfsplus: b-tree write err: -5, ino 4 [ 146.229998][ T1111] hfsplus: b-tree write err: -5, ino 2 [ 146.282403][ T1111] hfsplus: b-tree write err: -5, ino 28 [ 146.439894][ T7460] loop3: detected capacity change from 0 to 128 [ 146.848274][ T28] audit: type=1326 audit(1784723298.070:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.0.619" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dd19de99 code=0x7ffc0000 [ 146.959718][ T28] audit: type=1326 audit(1784723298.070:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.0.619" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dd19de99 code=0x7ffc0000 [ 147.107314][ T28] audit: type=1326 audit(1784723298.110:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.0.619" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fe4dd19de99 code=0x7ffc0000 [ 147.191778][ T7468] loop3: detected capacity change from 0 to 4096 [ 147.250623][ T28] audit: type=1326 audit(1784723298.110:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.0.619" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dd19de99 code=0x7ffc0000 [ 147.299924][ T7468] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 147.301309][ T28] audit: type=1326 audit(1784723298.110:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.0.619" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fe4dd19de99 code=0x7ffc0000 [ 147.372485][ T7455] loop1: detected capacity change from 0 to 131072 [ 147.380573][ T7468] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 147.394009][ T7455] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 147.400809][ T7455] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 147.409984][ T28] audit: type=1326 audit(1784723298.400:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.0.619" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dd19de99 code=0x7ffc0000 [ 147.436616][ T7455] F2FS-fs (loop1): invalid crc value [ 147.445507][ T7468] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 147.459203][ T28] audit: type=1326 audit(1784723298.400:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.0.619" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dd19de99 code=0x7ffc0000 [ 147.486161][ T7468] ntfs: volume version 3.1. [ 147.500959][ T7455] F2FS-fs (loop1): Found nat_bits in checkpoint [ 147.513784][ T7477] loop0: detected capacity change from 0 to 1024 [ 147.565951][ T7455] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 147.574653][ T7455] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 147.648389][ T7468] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 147.650964][ T28] audit: type=1800 audit(1784723298.880:37): pid=7477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.622" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 147.723856][ T7455] F2FS-fs (loop1): dec_valid_node_count: inconsistent i_blocks, ino:7, iblocks:0 [ 148.010529][ T7484] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 148.078915][ T7484] EXT4-fs (loop3): 1 orphan inode deleted [ 148.097899][ T7484] EXT4-fs (loop3): 1 truncate cleaned up [ 148.109573][ T7484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.205844][ T7484] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #12: block 7: comm syz.3.625: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 148.318066][ T7484] EXT4-fs (loop3): Remounting filesystem read-only [ 148.386238][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.792631][ T7499] set_capacity_and_notify: 2 callbacks suppressed [ 148.792646][ T7499] loop3: detected capacity change from 0 to 8192 [ 149.365329][ T7517] loop2: detected capacity change from 0 to 128 [ 149.388079][ T7517] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.432773][ T7517] EXT4-fs (loop2): Test dummy encryption mode enabled [ 149.458784][ T7517] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.543527][ T7517] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.790527][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.303929][ T7545] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.471224][ T7545] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.541700][ T7555] loop3: detected capacity change from 0 to 8192 [ 150.600721][ T7545] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.632519][ T27] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 150.768445][ T7545] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.798061][ T7561] loop0: detected capacity change from 0 to 512 [ 150.829493][ T7561] EXT4-fs: Ignoring removed bh option [ 150.846535][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 150.855624][ T7561] EXT4-fs (loop0): Test dummy encryption mode enabled [ 150.858813][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.885200][ T7561] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 150.890946][ T27] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 150.921998][ T27] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 150.924626][ T7561] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.659: inode has both inline data and extents flags [ 150.933691][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 150.977327][ T7561] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.659: couldn't read orphan inode 15 (err -117) [ 150.993587][ T27] usb 3-1: SerialNumber: syz [ 151.001943][ T7561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.043026][ T27] hub 3-1:1.0: bad descriptor, ignoring hub [ 151.047166][ T7545] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.066077][ T27] hub: probe of 3-1:1.0 failed with error -5 [ 151.117327][ T7545] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.179034][ T7545] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.211168][ T7545] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.236785][ T7561] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 151.361893][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.446638][ T27] usb 3-1: USB disconnect, device number 7 [ 151.459653][ T7559] loop3: detected capacity change from 0 to 40427 [ 151.500347][ T7559] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 151.552676][ T7559] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 151.576847][ T7559] F2FS-fs (loop3): Image doesn't support compression [ 151.613170][ T7559] F2FS-fs (loop3): Image doesn't support compression [ 151.620665][ T7559] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x216 [ 151.709194][ T7559] F2FS-fs (loop3): invalid crc value [ 151.866444][ T7559] F2FS-fs (loop3): Start checkpoint disabled! [ 151.902430][ T7559] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 151.915185][ T7559] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 152.058588][ T7559] syz.3.658: attempt to access beyond end of device [ 152.058588][ T7559] loop3: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 152.116785][ T7559] syz.3.658: attempt to access beyond end of device [ 152.116785][ T7559] loop3: rw=2049, sector=53256, nr_sectors = 120 limit=40427 [ 152.151210][ T7559] syz.3.658: attempt to access beyond end of device [ 152.151210][ T7559] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 152.242192][ T5807] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 152.266887][ T1073] kworker/u4:6: attempt to access beyond end of device [ 152.266887][ T1073] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 152.291987][ T1073] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 152.298553][ T56] IPVS: starting estimator thread 0... [ 152.322378][ T7581] IPVS: fo: FWM 3 0x00000003 - no destination available [ 152.329657][ C0] IPVS: fo: FWM 3 0x00000003 - no destination available [ 152.422439][ T7582] IPVS: using max 20 ests per chain, 48000 per kthread [ 152.436940][ T5807] usb 3-1: Using ep0 maxpacket: 32 [ 152.456482][ T5807] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 152.480133][ T5807] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 152.510387][ T5807] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 152.550353][ T5807] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 152.572847][ T5807] usb 3-1: config 0 interface 0 has no altsetting 0 [ 152.584700][ T5807] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 152.594636][ T5807] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 152.610152][ T5807] usb 3-1: Product: syz [ 152.617428][ T5807] usb 3-1: Manufacturer: syz [ 152.625400][ T5807] usb 3-1: SerialNumber: syz [ 152.648787][ T5807] usb 3-1: config 0 descriptor?? [ 152.680106][ T5807] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 152.718249][ T5807] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 152.885581][ T56] usb 3-1: USB disconnect, device number 8 [ 152.895907][ T56] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 153.302697][ T7588] loop0: detected capacity change from 0 to 32768 [ 153.349561][ T7588] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 153.349561][ T7588] [ 153.369265][ T7588] ERROR: (device loop0): remounting filesystem as read-only [ 153.463156][ T7597] loop1: detected capacity change from 0 to 32768 [ 153.482204][ T5807] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 153.511089][ T7597] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.672 (7597) [ 153.543436][ T7597] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.555055][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.675'. [ 153.580644][ T7597] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 153.606578][ T7597] BTRFS warning (device loop1): excessive commit interval 3581 [ 153.622562][ T7597] BTRFS info (device loop1): force zlib compression, level 3 [ 153.635467][ T7597] BTRFS info (device loop1): metadata ratio 107050 [ 153.684538][ T7597] BTRFS info (device loop1): turning on flush-on-commit [ 153.692349][ T5807] usb 4-1: Using ep0 maxpacket: 8 [ 153.699575][ T5807] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 153.701552][ T7597] BTRFS info (device loop1): max_inline at 4096 [ 153.712065][ T5807] usb 4-1: config 179 has no interface number 0 [ 153.731234][ T5807] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 153.735594][ T7597] BTRFS info (device loop1): using free space tree [ 153.773882][ T5807] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 153.805608][ T5807] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 153.852213][ T5807] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 153.892243][ T5807] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 153.925915][ T5807] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 153.942251][ T7597] BTRFS info (device loop1): enabling ssd optimizations [ 153.952181][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.964369][ T7601] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 153.993740][ T7625] input: syz0 as /devices/virtual/input/input11 [ 154.439495][ T5807] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input12 [ 154.711306][ T5768] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 154.740521][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 154.748996][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 154.784788][ T5807] usb 4-1: USB disconnect, device number 7 [ 154.826597][ T5807] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 155.159341][ T7635] loop0: detected capacity change from 0 to 32768 [ 155.323321][ T7641] loop2: detected capacity change from 0 to 512 [ 155.362240][ T7641] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 155.425385][ T7641] EXT4-fs (loop2): 1 orphan inode deleted [ 155.435912][ T7644] loop3: detected capacity change from 0 to 256 [ 155.462325][ T7641] EXT4-fs (loop2): 1 truncate cleaned up [ 155.468690][ T7641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.593105][ T7641] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #12: block 7: comm syz.2.686: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 155.621351][ T7641] EXT4-fs (loop2): Remounting filesystem read-only [ 155.675404][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.816820][ T7647] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input13 [ 155.969902][ T7639] loop1: detected capacity change from 0 to 40427 [ 156.013261][ T7639] F2FS-fs (loop1): invalid crc value [ 156.073432][ T7639] F2FS-fs (loop1): Found nat_bits in checkpoint [ 156.187120][ T7660] loop2: detected capacity change from 0 to 256 [ 156.257947][ T7660] FAT-fs (loop2): Directory bread(block 64) failed [ 156.261274][ T7662] loop0: detected capacity change from 0 to 1024 [ 156.269731][ T7660] FAT-fs (loop2): Directory bread(block 65) failed [ 156.291382][ T7639] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 156.292245][ T7660] FAT-fs (loop2): Directory bread(block 66) failed [ 156.336269][ T7660] FAT-fs (loop2): Directory bread(block 67) failed [ 156.346643][ T7660] FAT-fs (loop2): Directory bread(block 68) failed [ 156.365090][ T7660] FAT-fs (loop2): Directory bread(block 69) failed [ 156.370540][ T7662] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 156.380448][ T1151] kworker/u4:11: attempt to access beyond end of device [ 156.380448][ T1151] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 156.380834][ T7660] FAT-fs (loop2): Directory bread(block 70) failed [ 156.402090][ T7662] hfsplus: xattr search failed [ 156.414979][ T7660] FAT-fs (loop2): Directory bread(block 71) failed [ 156.415175][ T1151] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 156.429508][ T7660] FAT-fs (loop2): Directory bread(block 72) failed [ 156.447155][ T7660] FAT-fs (loop2): Directory bread(block 73) failed [ 156.477429][ T42] hfsplus: b-tree write err: -5, ino 25 [ 156.489294][ T42] hfsplus: b-tree write err: -5, ino 4 [ 156.494962][ T42] hfsplus: b-tree write err: -5, ino 2 [ 156.500530][ T42] hfsplus: b-tree write err: -5, ino 28 [ 156.820472][ T7672] loop2: detected capacity change from 0 to 512 [ 156.908533][ T7672] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.696: invalid indirect mapped block 256 (level 2) [ 157.017726][ T7672] EXT4-fs (loop2): 2 truncates cleaned up [ 157.028531][ T7677] netlink: 128 bytes leftover after parsing attributes in process `syz.1.695'. [ 157.040561][ T7672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.044996][ T7677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.695'. [ 157.135447][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 157.135463][ T28] audit: type=1800 audit(1784723308.370:39): pid=7672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.696" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 157.249110][ T7684] loop1: detected capacity change from 0 to 512 [ 157.264790][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.280911][ T7684] EXT4-fs (loop1): Test dummy encryption mode enabled [ 157.313124][ T7684] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 157.378200][ T7686] loop0: detected capacity change from 0 to 4096 [ 157.392138][ T7684] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #17: comm syz.1.701: corrupted in-inode xattr: invalid ea_ino [ 157.414749][ T7684] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.701: couldn't read orphan inode 17 (err -117) [ 157.430477][ T7684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.444306][ T7691] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.468089][ T7684] EXT4-fs (loop1): shut down requested (1) [ 157.484323][ T7684] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #2: comm syz.1.701: directory missing '..' [ 157.538504][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.731166][ T7696] loop2: detected capacity change from 0 to 128 [ 157.796269][ T7696] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.886056][ T7696] ext4 filesystem being mounted at /164/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 158.203338][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.565294][ T7699] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 158.630599][ T7694] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 158.638388][ T7694] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 158.647487][ T7694] F2FS-fs (loop3): invalid crc value [ 158.697689][ T7694] F2FS-fs (loop3): Found nat_bits in checkpoint [ 158.762650][ T7694] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 158.769806][ T7694] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 158.849931][ T7699] XFS (loop0): Ending clean mount [ 158.999156][ T7694] F2FS-fs (loop3): dec_valid_node_count: inconsistent i_blocks, ino:7, iblocks:0 [ 159.125645][ T7719] netem: change failed [ 159.172490][ T5771] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 159.692612][ T7725] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 159.843794][ T7717] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 159.867126][ T7717] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 159.889555][ T7717] F2FS-fs (loop1): invalid crc value [ 159.941821][ T7717] F2FS-fs (loop1): Found nat_bits in checkpoint [ 160.149708][ T7717] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 160.187407][ T7717] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 160.251407][ T28] audit: type=1800 audit(1784723311.480:40): pid=7717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.709" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 160.532168][ T7745] netlink: 'syz.2.719': attribute type 1 has an invalid length. [ 160.539877][ T7745] netlink: 'syz.2.719': attribute type 2 has an invalid length. [ 160.588714][ T7748] netlink: 'syz.2.719': attribute type 1 has an invalid length. [ 160.609391][ T7748] netlink: 'syz.2.719': attribute type 2 has an invalid length. [ 161.363133][ T7771] Bluetooth: MGMT ver 1.22 [ 161.487905][ T7774] netlink: 188 bytes leftover after parsing attributes in process `syz.3.727'. [ 161.566544][ T7754] set_capacity_and_notify: 5 callbacks suppressed [ 161.566567][ T7754] loop2: detected capacity change from 0 to 40427 [ 161.611983][ T7754] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 161.620461][ T7754] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 161.643283][ T7754] F2FS-fs (loop2): Image doesn't support compression [ 161.650054][ T7754] F2FS-fs (loop2): Image doesn't support compression [ 161.657381][ T7754] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x216 [ 161.714946][ T7754] F2FS-fs (loop2): invalid crc value [ 161.772384][ T5808] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 161.883828][ T7783] loop1: detected capacity change from 0 to 512 [ 161.897401][ T7754] F2FS-fs (loop2): Start checkpoint disabled! [ 161.926160][ T7754] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 161.938015][ T7783] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 161.942208][ T7754] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 161.960889][ T7783] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 161.991617][ T5808] usb 1-1: Using ep0 maxpacket: 16 [ 162.002458][ T7783] EXT4-fs (loop1): orphan cleanup on readonly fs [ 162.012702][ T5808] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.024320][ T5808] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.035751][ T5808] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 162.048993][ T5808] usb 1-1: config 0 interface 0 has no altsetting 0 [ 162.055722][ T5808] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 162.061376][ T7783] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4059: comm syz.1.732: Allocating blocks 41-42 which overlap fs metadata [ 162.064960][ T5808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.121393][ T5808] usb 1-1: config 0 descriptor?? [ 162.152612][ T7754] syz.2.721: attempt to access beyond end of device [ 162.152612][ T7754] loop2: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 162.172383][ T7783] EXT4-fs (loop1): Remounting filesystem read-only [ 162.189950][ T7783] Quota error (device loop1): write_blk: dquota write failed [ 162.205703][ T7754] syz.2.721: attempt to access beyond end of device [ 162.205703][ T7754] loop2: rw=2049, sector=53256, nr_sectors = 120 limit=40427 [ 162.212563][ T7783] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 162.246745][ T7754] syz.2.721: attempt to access beyond end of device [ 162.246745][ T7754] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 162.265134][ T7783] EXT4-fs (loop1): 1 truncate cleaned up [ 162.278362][ T7783] EXT4-fs (loop1): pa ffff888078120ae0: logic 1, phys. 41, len 23 [ 162.290925][ T7783] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.327677][ T48] kworker/u4:3: attempt to access beyond end of device [ 162.327677][ T48] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 162.344632][ T48] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 162.399448][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.534825][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 162.722223][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 162.755080][ T9] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 162.777441][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.789553][ T9] usb 4-1: Product: syz [ 162.794153][ T9] usb 4-1: Manufacturer: syz [ 162.798962][ T9] usb 4-1: SerialNumber: syz [ 162.800958][ T27] usb 1-1: USB disconnect, device number 6 [ 162.820274][ T9] usb 4-1: config 0 descriptor?? [ 163.151911][ T7811] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.350260][ T7821] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 163.456321][ T9] peak_usb 4-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 163.472243][ T9] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 163.484966][ T9] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 163.565022][ T9] peak_usb: probe of 4-1:0.0 failed with error -22 [ 163.592265][ T5807] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 163.626664][ T7830] loop0: detected capacity change from 0 to 512 [ 163.665085][ T7830] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.755: invalid indirect mapped block 256 (level 2) [ 163.737974][ T7830] EXT4-fs (loop0): 2 truncates cleaned up [ 163.767119][ T7830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.795369][ T27] usb 4-1: USB disconnect, device number 8 [ 163.807656][ T5807] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 163.819699][ T5807] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.830521][ T5807] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 163.839947][ T5807] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.862542][ T5807] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 163.875135][ T28] audit: type=1800 audit(1784723315.110:41): pid=7830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.755" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 163.895529][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 163.908225][ T5807] usb 2-1: Product: syz [ 163.913636][ T5807] usb 2-1: Manufacturer: syz [ 163.932705][ T5807] cdc_wdm 2-1:1.0: skipping garbage [ 163.937975][ T5807] cdc_wdm 2-1:1.0: skipping garbage [ 163.954256][ T5807] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 163.960744][ T5807] cdc_wdm 2-1:1.0: Unknown control protocol [ 163.981724][ T7829] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.755: bg 0: block 5: invalid block bitmap [ 164.008002][ T7829] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 164.026233][ T7829] EXT4-fs (loop0): This should not happen!! Data will be lost [ 164.026233][ T7829] [ 164.037699][ T7829] EXT4-fs (loop0): Total free blocks count 0 [ 164.049186][ T7829] EXT4-fs (loop0): Free/Dirty block details [ 164.051365][ T7841] loop2: detected capacity change from 0 to 2048 [ 164.055463][ T7829] EXT4-fs (loop0): free_blocks=0 [ 164.068177][ T7829] EXT4-fs (loop0): dirty_blocks=32 [ 164.077114][ T7829] EXT4-fs (loop0): Block reservation details [ 164.083669][ T7829] EXT4-fs (loop0): i_reserved_data_blocks=32 [ 164.097939][ T7841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.133187][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.286278][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.483312][ T7849] loop3: detected capacity change from 0 to 1764 [ 164.533984][ T7853] loop0: detected capacity change from 0 to 4096 [ 164.570344][ T7853] EXT4-fs: inline encryption not supported [ 164.583252][ T7853] EXT4-fs: Ignoring removed bh option [ 164.612655][ T7853] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 164.643287][ T7853] EXT4-fs (loop0): Test dummy encryption mode enabled [ 164.657150][ T7853] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec1a8, mo2=0003] [ 164.665612][ T7853] System zones: 0-5 [ 164.672729][ T7853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.724630][ T28] audit: type=1800 audit(1784723315.960:42): pid=7853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.764" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 164.788376][ T5807] usb 2-1: USB disconnect, device number 8 [ 164.916710][ T7857] loop1: detected capacity change from 0 to 256 [ 164.951753][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.959270][ T7857] FAT-fs (loop1): Directory bread(block 64) failed [ 164.975077][ T7857] FAT-fs (loop1): Directory bread(block 65) failed [ 164.993508][ T7857] FAT-fs (loop1): Directory bread(block 66) failed [ 165.015431][ T7857] FAT-fs (loop1): Directory bread(block 67) failed [ 165.032296][ T7857] FAT-fs (loop1): Directory bread(block 68) failed [ 165.049186][ T7857] FAT-fs (loop1): Directory bread(block 69) failed [ 165.096853][ T7857] FAT-fs (loop1): Directory bread(block 70) failed [ 165.118262][ T7857] FAT-fs (loop1): Directory bread(block 71) failed [ 165.148588][ T7857] FAT-fs (loop1): Directory bread(block 72) failed [ 165.186637][ T7857] FAT-fs (loop1): Directory bread(block 73) failed [ 165.586644][ T7873] program syz.2.773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.650931][ T7875] loop1: detected capacity change from 0 to 2048 [ 165.693743][ T7875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.907783][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.078938][ T7883] loop2: detected capacity change from 0 to 4096 [ 166.096623][ T7871] loop0: detected capacity change from 0 to 32768 [ 166.178204][ T7871] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 166.309833][ T7883] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 166.349807][ T7871] XFS (loop0): Ending clean mount [ 166.406724][ T7871] XFS (loop0): Quotacheck needed: Please wait. [ 166.449217][ T7898] ntfs3: loop2: ino=9, attr_set_size [ 166.590981][ T7871] XFS (loop0): Quotacheck: Done. [ 166.783728][ T5771] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 166.883943][ T7913] set_capacity_and_notify: 1 callbacks suppressed [ 166.883960][ T7913] loop3: detected capacity change from 0 to 128 [ 166.953866][ T7913] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 167.126808][ T1151] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 167.155439][ T7915] loop2: detected capacity change from 0 to 4096 [ 167.236162][ T7916] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.384076][ T7915] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean [ 167.703095][ T7928] loop0: detected capacity change from 0 to 4096 [ 167.906951][ T7928] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 167.971787][ T7928] ntfs3: loop0: ino=9, attr_set_size [ 168.377846][ T7936] program syz.3.797 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.629601][ T7943] loop2: detected capacity change from 0 to 1024 [ 168.645113][ T7943] EXT4-fs: inline encryption not supported [ 168.683516][ T7943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 168.707029][ T7943] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.794390][ T5774] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 168.907621][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 169.172334][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.807'. [ 169.212092][ T7964] netlink: 'syz.1.807': attribute type 15 has an invalid length. [ 169.220262][ T7964] netlink: 'syz.1.807': attribute type 25 has an invalid length. [ 169.246751][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.807'. [ 169.986476][ T7994] netlink: 'syz.2.819': attribute type 8 has an invalid length. [ 170.003729][ T7994] netlink: 56 bytes leftover after parsing attributes in process `syz.2.819'. [ 170.025581][ T7994] netlink: 64 bytes leftover after parsing attributes in process `syz.2.819'. [ 170.117395][ T8001] program syz.0.822 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.246362][ T8007] loop1: detected capacity change from 0 to 256 [ 170.261793][ T8005] loop2: detected capacity change from 0 to 128 [ 170.534090][ T8017] netlink: 'syz.1.829': attribute type 1 has an invalid length. [ 170.745507][ T8027] 9p: Unknown access argument 18446744073709551615: -34 [ 170.865962][ T8033] netlink: 'syz.1.838': attribute type 11 has an invalid length. [ 171.178451][ T8043] netlink: 32 bytes leftover after parsing attributes in process `syz.2.842'. [ 171.417956][ T8050] loop1: detected capacity change from 0 to 1024 [ 171.427088][ T8050] EXT4-fs: Ignoring removed orlov option [ 171.494453][ T8050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.799774][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.220562][ T8071] Bluetooth: MGMT ver 1.22 [ 172.435348][ T8058] loop3: detected capacity change from 0 to 40427 [ 172.464122][ T8058] F2FS-fs (loop3): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 172.481817][ T8058] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 172.490956][ T8058] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x6 [ 172.509838][ T8058] F2FS-fs (loop3): invalid crc value [ 172.533619][ T8058] F2FS-fs (loop3): Found nat_bits in checkpoint [ 172.736073][ T8058] F2FS-fs (loop3): Start checkpoint disabled! [ 172.806771][ T8086] loop2: detected capacity change from 0 to 512 [ 172.856917][ T8086] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 172.871704][ T5774] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 172.882614][ T5774] Bluetooth: hci3: Injecting HCI hardware error event [ 172.893392][ T5774] Bluetooth: hci3: hardware error 0x00 [ 172.894809][ T8058] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 172.919376][ T8086] EXT4-fs (loop2): 1 truncate cleaned up [ 172.922164][ T8058] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 172.955045][ T8086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.005601][ T8092] netlink: 14 bytes leftover after parsing attributes in process `syz.1.862'. [ 173.205417][ T48] kworker/u4:3: attempt to access beyond end of device [ 173.205417][ T48] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 173.227464][ T48] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 173.241298][ T48] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 173.279860][ T48] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 173.327684][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.332586][ T8097] input: syz1 as /devices/virtual/input/input14 [ 173.572689][ T8101] loop2: detected capacity change from 0 to 2048 [ 173.644608][ T8101] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.759910][ T8103] loop1: detected capacity change from 0 to 4096 [ 173.956857][ T8103] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 174.039351][ T8103] ntfs3: loop1: failed to convert name for inode 1e. [ 174.124945][ T8113] netlink: 'syz.3.863': attribute type 3 has an invalid length. [ 174.236724][ T8116] loop2: detected capacity change from 0 to 2048 [ 174.327409][ T8116] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.369163][ T8121] loop1: detected capacity change from 0 to 512 [ 174.416894][ T8121] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 174.607011][ T8121] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00) [ 174.901410][ T8140] loop1: detected capacity change from 0 to 16 [ 174.940655][ T8140] erofs: (device loop1): mounted with root inode @ nid 36. [ 174.989905][ T8140] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 175.032928][ T5774] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 175.475039][ T8163] loop0: detected capacity change from 0 to 128 [ 175.551252][ T8163] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 176.568552][ T8203] loop3: detected capacity change from 0 to 512 [ 177.382475][ T8201] loop0: detected capacity change from 0 to 40427 [ 177.402565][ T8201] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 177.409319][ T8201] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 177.523509][ T8201] F2FS-fs (loop0): Found nat_bits in checkpoint [ 177.626022][ T8201] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 177.633226][ T8201] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 177.683474][ T5771] syz-executor: attempt to access beyond end of device [ 177.683474][ T5771] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 177.727099][ T5771] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 177.735048][ T8208] loop1: detected capacity change from 0 to 40427 [ 177.762353][ T8208] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 177.793131][ T8208] F2FS-fs (loop1): invalid crc value [ 177.825027][ T8208] F2FS-fs (loop1): Found nat_bits in checkpoint [ 177.856618][ T8229] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 177.893963][ T8229] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 177.983769][ T8208] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 178.063357][ T5807] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 178.130006][ T8233] syz.1.913: attempt to access beyond end of device [ 178.130006][ T8233] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 178.211595][ T5768] syz-executor: attempt to access beyond end of device [ 178.211595][ T5768] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 178.246710][ T5768] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 178.296450][ T5807] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 178.322421][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.330477][ T5807] usb 3-1: Product: syz [ 178.342545][ T5807] usb 3-1: Manufacturer: syz [ 178.350541][ T5807] usb 3-1: SerialNumber: syz [ 178.655331][ T5807] rtl8150 3-1:1.0: couldn't reset the device [ 178.661879][ T5807] rtl8150: probe of 3-1:1.0 failed with error -5 [ 178.692602][ T5807] usb 3-1: USB disconnect, device number 9 [ 179.524210][ T8262] loop2: detected capacity change from 0 to 1024 [ 179.607416][ T5807] kernel read not supported for file /dsp1 (pid: 5807 comm: kworker/1:4) [ 180.078878][ T8277] loop0: detected capacity change from 0 to 512 [ 180.090311][ T8279] loop3: detected capacity change from 0 to 256 [ 180.151265][ T8279] FAT-fs (loop3): Directory bread(block 64) failed [ 180.159247][ T8277] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.182203][ T8279] FAT-fs (loop3): Directory bread(block 65) failed [ 180.221945][ T8279] FAT-fs (loop3): Directory bread(block 66) failed [ 180.228949][ T1111] wlan1: Trigger new scan to find an IBSS to join [ 180.284067][ T8279] FAT-fs (loop3): Directory bread(block 67) failed [ 180.313165][ T8279] FAT-fs (loop3): Directory bread(block 68) failed [ 180.353418][ T1151] ------------[ cut here ]------------ [ 180.359359][ T1151] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x40 [ 180.370461][ T1151] WARNING: CPU: 1 PID: 1151 at net/mac80211/rate.c:385 __rate_control_send_low+0x632/0x880 [ 180.380522][ T1151] Modules linked in: [ 180.384503][ T1151] CPU: 1 PID: 1151 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 180.392196][ T1151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 180.402343][ T1151] Workqueue: events_unbound cfg80211_wiphy_work [ 180.408735][ T1151] RIP: 0010:__rate_control_send_low+0x632/0x880 [ 180.415064][ T1151] Code: 30 42 0f b6 04 28 84 c0 0f 85 e5 01 00 00 41 8b 0e 48 c7 c7 a0 a2 df 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 be 0a 4f f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 04 fa ff [ 180.434782][ T1151] RSP: 0018:ffffc90004a4f400 EFLAGS: 00010246 [ 180.440889][ T1151] RAX: b75fe85158188a00 RBX: 000000000000000c RCX: ffff888023f5da00 [ 180.448947][ T1151] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 180.456989][ T1151] RBP: 0000000000000084 R08: ffffc90004a4f007 R09: 1ffff92000949e00 [ 180.465063][ T1151] R10: dffffc0000000000 R11: fffff52000949e01 R12: 0000000000000040 [ 180.473103][ T1151] R13: dffffc0000000000 R14: ffff888020e3b3b8 R15: ffff88807673bb68 [ 180.481192][ T1151] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 180.490391][ T1151] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 180.497164][ T1151] CR2: 000000110c443589 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 180.505248][ T1151] Call Trace: [ 180.508849][ T1151] [ 180.511829][ T1151] rate_control_send_low+0x194/0x790 [ 180.517311][ T1151] rate_control_get_rate+0x20b/0x5c0 [ 180.522683][ T1151] ieee80211_tx_h_rate_ctrl+0xb21/0x1740 [ 180.528384][ T1151] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 180.534452][ T1151] ? __lock_acquire+0x1262/0x7d80 [ 180.539520][ T1151] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 180.545703][ T1151] invoke_tx_handlers_late+0xb1/0x17c0 [ 180.551219][ T1151] ? invoke_tx_handlers_early+0xa30/0x1c80 [ 180.557136][ T1151] ieee80211_tx+0x2d8/0x460 [ 180.561735][ T1151] ? ieee80211_skb_resize+0x610/0x610 [ 180.567257][ T1151] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 180.573260][ T1151] ? ieee80211_xmit+0x2e0/0x3c0 [ 180.578346][ T1151] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 180.584854][ T1151] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 180.591277][ T1151] ? ieee80211_scan_state_send_probe+0x4b2/0x930 [ 180.597698][ T1151] ieee80211_scan_state_send_probe+0x57f/0x930 [ 180.603971][ T1151] ieee80211_scan_work+0x42e/0x1b30 [ 180.609218][ T1151] ? _raw_spin_unlock_irq+0x23/0x50 [ 180.614506][ T1151] cfg80211_wiphy_work+0x228/0x260 [ 180.619660][ T1151] ? process_scheduled_works+0x975/0x1600 [ 180.625462][ T1151] process_scheduled_works+0xa60/0x1600 [ 180.631087][ T1151] ? worker_attach_to_pool+0x370/0x370 [ 180.636621][ T1151] ? assign_work+0x3cc/0x5d0 [ 180.641258][ T1151] worker_thread+0xa5e/0xfe0 [ 180.645995][ T1151] ? _raw_spin_unlock+0x40/0x40 [ 180.650934][ T1151] ? __kthread_parkme+0x71/0x1c0 [ 180.655964][ T1151] kthread+0x2fa/0x390 [ 180.660066][ T1151] ? pr_cont_work+0x550/0x550 [ 180.662269][ T8279] FAT-fs (loop3): Directory bread(block 69) failed [ 180.664815][ T1151] ? kthread_blkcg+0xd0/0xd0 [ 180.676069][ T1151] ret_from_fork+0x48/0x80 [ 180.679368][ T8279] FAT-fs (loop3): Directory bread(block 70) failed [ 180.680528][ T1151] ? kthread_blkcg+0xd0/0xd0 [ 180.680557][ T1151] ret_from_fork_asm+0x11/0x20 [ 180.696076][ T8279] FAT-fs (loop3): Directory bread(block 71) failed [ 180.696502][ T1151] [ 180.706107][ T1151] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 180.713401][ T1151] CPU: 1 PID: 1151 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 180.716096][ T8279] FAT-fs (loop3): Directory bread(block 72) failed [ 180.716125][ T8279] FAT-fs (loop3): Directory bread(block 73) failed [ 180.734417][ T1151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 180.744498][ T1151] Workqueue: events_unbound cfg80211_wiphy_work [ 180.750771][ T1151] Call Trace: [ 180.754066][ T1151] [ 180.757010][ T1151] dump_stack_lvl+0x18c/0x250 [ 180.761894][ T1151] ? show_regs_print_info+0x20/0x20 [ 180.767314][ T1151] ? load_image+0x420/0x420 [ 180.771870][ T1151] panic+0x2ca/0x720 [ 180.775843][ T1151] ? bpf_jit_dump+0xd0/0xd0 [ 180.780503][ T1151] ? ret_from_fork_asm+0x11/0x20 [ 180.785481][ T1151] __warn+0x2e0/0x470 [ 180.789502][ T1151] ? __rate_control_send_low+0x632/0x880 [ 180.795180][ T1151] ? __rate_control_send_low+0x632/0x880 [ 180.800858][ T1151] report_bug+0x2be/0x4f0 [ 180.805218][ T1151] ? __rate_control_send_low+0x632/0x880 [ 180.810887][ T1151] ? __rate_control_send_low+0x632/0x880 [ 180.816573][ T1151] ? __rate_control_send_low+0x634/0x880 [ 180.822257][ T1151] handle_bug+0xcf/0x120 [ 180.826544][ T1151] exc_invalid_op+0x1a/0x50 [ 180.831090][ T1151] asm_exc_invalid_op+0x1a/0x20 [ 180.835979][ T1151] RIP: 0010:__rate_control_send_low+0x632/0x880 [ 180.842267][ T1151] Code: 30 42 0f b6 04 28 84 c0 0f 85 e5 01 00 00 41 8b 0e 48 c7 c7 a0 a2 df 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 be 0a 4f f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 04 fa ff [ 180.859358][ T8279] syz.3.942: attempt to access beyond end of device [ 180.859358][ T8279] loop3: rw=2049, sector=1224, nr_sectors = 76 limit=256 [ 180.872244][ T28] audit: type=1800 audit(1784723332.070:43): pid=8279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.942" name="bus" dev="loop3" ino=1048629 res=0 errno=0 [ 180.896592][ T1151] RSP: 0018:ffffc90004a4f400 EFLAGS: 00010246 [ 180.902663][ T1151] RAX: b75fe85158188a00 RBX: 000000000000000c RCX: ffff888023f5da00 [ 180.910674][ T1151] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 180.918670][ T1151] RBP: 0000000000000084 R08: ffffc90004a4f007 R09: 1ffff92000949e00 [ 180.926679][ T1151] R10: dffffc0000000000 R11: fffff52000949e01 R12: 0000000000000040 [ 180.934856][ T1151] R13: dffffc0000000000 R14: ffff888020e3b3b8 R15: ffff88807673bb68 [ 180.942900][ T1151] rate_control_send_low+0x194/0x790 [ 180.948562][ T1151] rate_control_get_rate+0x20b/0x5c0 [ 180.953880][ T1151] ieee80211_tx_h_rate_ctrl+0xb21/0x1740 [ 180.959561][ T1151] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 180.965564][ T1151] ? __lock_acquire+0x1262/0x7d80 [ 180.970595][ T1151] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 180.976670][ T1151] invoke_tx_handlers_late+0xb1/0x17c0 [ 180.982151][ T1151] ? invoke_tx_handlers_early+0xa30/0x1c80 [ 180.988070][ T1151] ieee80211_tx+0x2d8/0x460 [ 180.992597][ T1151] ? ieee80211_skb_resize+0x610/0x610 [ 180.998010][ T1151] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 181.003489][ T1151] ? ieee80211_xmit+0x2e0/0x3c0 [ 181.008363][ T1151] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 181.014389][ T1151] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 181.020262][ T1151] ? ieee80211_scan_state_send_probe+0x4b2/0x930 [ 181.026634][ T1151] ieee80211_scan_state_send_probe+0x57f/0x930 [ 181.032842][ T1151] ieee80211_scan_work+0x42e/0x1b30 [ 181.038068][ T1151] ? _raw_spin_unlock_irq+0x23/0x50 [ 181.043307][ T1151] cfg80211_wiphy_work+0x228/0x260 [ 181.048457][ T1151] ? process_scheduled_works+0x975/0x1600 [ 181.054186][ T1151] process_scheduled_works+0xa60/0x1600 [ 181.059752][ T1151] ? worker_attach_to_pool+0x370/0x370 [ 181.065231][ T1151] ? assign_work+0x3cc/0x5d0 [ 181.069858][ T1151] worker_thread+0xa5e/0xfe0 [ 181.074451][ T1151] ? _raw_spin_unlock+0x40/0x40 [ 181.079305][ T1151] ? __kthread_parkme+0x71/0x1c0 [ 181.084336][ T1151] kthread+0x2fa/0x390 [ 181.088402][ T1151] ? pr_cont_work+0x550/0x550 [ 181.093097][ T1151] ? kthread_blkcg+0xd0/0xd0 [ 181.097695][ T1151] ret_from_fork+0x48/0x80 [ 181.102107][ T1151] ? kthread_blkcg+0xd0/0xd0 [ 181.106723][ T1151] ret_from_fork_asm+0x11/0x20 [ 181.111486][ T1151] [ 181.114755][ T1151] Kernel Offset: disabled [ 181.119168][ T1151] Rebooting in 86400 seconds..