last executing test programs: 2m16.451562697s ago: executing program 3 (id=128): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000480), 0x3, 0x44f, &(0x7f0000004500)="$eJzs3MtvG0UYAPBv10nfJaEqjz6AQEFEPJImLaUHLiCQOICEBIdyDElalboNaoJEqwoKQuWIKnFHHJH4CzjBBQEnJK5wR5Uq1EsL4mC09m5iO3Yap3YN8e8nbTKzO9bM592xZ3ayCWBgjWU/kohdEfFbRIzUso0Fxmq/bt24NPvXjUuzSVQqb/6ZVMvdvHFptihavG5nkRmKSD9N4kCLehcvXDwzUy7Pn8/zk0tn35tcvHDx2dNnZ07Nn5o/N338+NEjU88fm36uK3Fmcd3c/+HCwX2vvn319dkTV9/56ZukiL8pji4ZW+vgE5VKl6vrr9116WSojw2hI6VaN43hav8fiVKsnLyReOWTvjYO6KlKpVK5v/3hyxVgE0ui3y0A+qP4os/mv8VWjAtaDxh6MQrpn+sv1iZAWdy38q12ZCjSvMxw0/y2m8Yi4sTlv7/MtujNfQgAgAbfZeOfZ1aP/yLSqL8vdE++hjIaEfdGxJ6IOBYReyPivohq2Qci4sEO629eJFk9/kmvbSiwdcrGfy/ka1uN479i9BejpTy3uxr/cHLydHn+cP6ejMfw1iw/tUYd37/86+ftjtWP/7Itq78YC+btuDa0tfE1czNLM3cSc73rH0fsH2oVf7K8EpBExL6I2L/BOk4/9fXBdsduH39r1bekC+tMla8inqyd/8vRFH8hWXt9cnJblOcPTxZXxWo//3LljXb1bzT+bsnO/46W1/9y/KNJ/XrtYud1XPn9s7Zzmo1e/1uStxr2fTCztHR+KmJL8lqt0fX7p5vKTa+Uz+IfP9S6/++JlXfiQERkF/FDEfFwRDySt/3RiHgsIg6tEf+PLz3+bsOO8V0dxN9bWfxzHZ3/lcSWaN7TOlE688O3DZWORgfxZ+f/aDU1nu9Zz+ffetq1sasZAAAA/n/SiNgVSTqxnE7TiYna3/DvjR1peWFx6emTC++fm6s9IzAaw2lxp2uk7n7oVD6tL/LTTfkj+X3jL0rbq/mJ2YXyXL+DhwG3s03/z/xR6nfrgJ7zvBYMLv0fBpf+D4NL/4fB1aL/b1+965+mRwaBzaDV9/9HfWgHcPc19f91LPuZMcBmoTfD4NL/YXDp/zCQFrfH7R+Sl5BYlYj0P9GM3ie2rfPfXGyyxBofGuld/IACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4Q/8GAAD//8pI8yg=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0x6) 2m16.190361052s ago: executing program 3 (id=130): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af24, &(0x7f0000000040)={0x1}) 2m15.954863256s ago: executing program 3 (id=132): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x28, r1, 0xcd3a991b146aaff, 0x70b528, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x11}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008804}, 0xa4) 2m15.823651743s ago: executing program 3 (id=135): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x2000002, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x1, 0xc2d, &(0x7f00000001c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m15.305796224s ago: executing program 3 (id=138): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="ad56", 0x2) 2m14.66612696s ago: executing program 3 (id=143): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r0, 0x540b, 0x2) 2m14.084067745s ago: executing program 32 (id=143): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r0, 0x540b, 0x2) 2.816391846s ago: executing program 2 (id=1390): r0 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r0, r1, r0}, &(0x7f00000001c0)=""/241, 0xf1, &(0x7f0000000000)={&(0x7f0000000140)={'rmd160\x00'}}) 2.681548974s ago: executing program 1 (id=1393): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0xa) connect$bt_rfcomm(r0, &(0x7f0000001780)={0x1f, @none, 0xa}, 0xa) 2.395111861s ago: executing program 1 (id=1396): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pstore\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000000180)={[{@gid}]}) 2.269802908s ago: executing program 1 (id=1398): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) 2.096898348s ago: executing program 1 (id=1400): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f00000002c0)={[{@quota}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@usrquota}, {@nodiscard}, {@uid}, {@discard_size={'discard', 0x3d, 0x5b}}]}, 0x1, 0x61b6, &(0x7f00000075c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000640)=""/4098, 0x1002) 1.811974995s ago: executing program 4 (id=1403): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000003, &(0x7f0000000740)={[{@quota}, {@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@journal_dev={'journal_dev', 0x3d, 0xb}}, {@barrier_val={'barrier', 0x3d, 0x81}}, {@minixdf}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}]}, 0x1, 0x4e6, &(0x7f0000000240)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1.566251569s ago: executing program 0 (id=1404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a3100000000080003400000000109000100"], 0x34}}, 0x0) 1.235564628s ago: executing program 0 (id=1405): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x2007}) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10dfe000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003000601000004000200110000", 0x5b}, {&(0x7f0000000680)='\'', 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.055983028s ago: executing program 1 (id=1406): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="180000001600010a00000000000000000a0000000c"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x40000) 1.055478938s ago: executing program 2 (id=1407): r0 = syz_io_uring_setup(0x631a, &(0x7f0000000300)={0x0, 0x3, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x7fffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000140)="a1", 0x1}], 0x1}) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) 1.02052607s ago: executing program 4 (id=1408): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x40, r0, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.008296971s ago: executing program 0 (id=1409): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x5, 0x400, 0x0, 0x1ff}, 0x10) write(r0, &(0x7f00000002c0)="240000001e005f0214fffffffffffff80f0000000000000000000e0008000d40ff000000", 0x24) 859.18292ms ago: executing program 2 (id=1410): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 828.377882ms ago: executing program 0 (id=1411): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x5, 0xebb, &(0x7f0000001e40)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 766.575196ms ago: executing program 2 (id=1412): r0 = syz_clone(0x900000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x80000000, &(0x7f0000001c00)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) 699.799469ms ago: executing program 4 (id=1413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x773568b9b38b679a}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 600.843035ms ago: executing program 4 (id=1414): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4000) 464.650643ms ago: executing program 2 (id=1415): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000002cc0)=ANY=[], 0xff, 0x29c, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x114) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x275a, 0x0) 315.995681ms ago: executing program 4 (id=1416): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xbe, 0x1e7, &(0x7f0000000200)="$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") openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) truncate(&(0x7f0000000000)='./file1\x00', 0x100003) 289.910913ms ago: executing program 0 (id=1417): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCL_SETSEL(r0, 0x40087101, &(0x7f0000000180)={0x2, {0x2, 0x4, 0x800, 0x7, 0x5}}) 166.58591ms ago: executing program 1 (id=1418): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xc0002009}) 166.37066ms ago: executing program 4 (id=1419): r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000540)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xd15e, @private2, 0x6}, 0x1c) 23.802738ms ago: executing program 2 (id=1420): syz_io_uring_setup(0x23b6, &(0x7f0000000100)={0x0, 0x409a8a, 0x100, 0x1, 0x10f}, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='3', 0x1}], 0x1) 0s ago: executing program 0 (id=1421): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file4\x00', 0x0, &(0x7f00000002c0)={[{@noinline_xattr}, {@four_active_logs}, {@discard}, {@fault_injection={'fault_injection', 0x3d, 0x2}}, {@fault_type={'fault_type', 0x3d, 0x302}}, {@lfs_mode}, {@inline_data}, {}, {@fsync_mode_strict}, {@discard_unit_section}]}, 0x21, 0x5548, &(0x7f00000058c0)="$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") creat(&(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): errors [ 130.965011][ T7073] netlink: 'syz.2.408': attribute type 4 has an invalid length. [ 131.265401][ T7052] loop1: detected capacity change from 0 to 40427 [ 131.307478][ T7052] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 131.339445][ T7052] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 131.397051][ T7052] F2FS-fs (loop1): invalid crc value [ 131.458753][ T7052] F2FS-fs (loop1): Found nat_bits in checkpoint [ 131.685939][ T7052] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 131.716120][ T7052] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 131.877361][ T7107] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.419'. [ 131.915471][ T7107] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 132.008797][ T7111] usb usb2: usbfs: interface 0 claimed by hub while 'syz.0.422' resets device [ 132.200039][ T7118] loop2: detected capacity change from 0 to 128 [ 132.262323][ T7118] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 132.357123][ T7118] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.448749][ T27] audit: type=1326 audit(1771006434.315:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349f19bf79 code=0x50000 [ 132.527541][ T27] audit: type=1326 audit(1771006434.315:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349f19bf79 code=0x50000 [ 132.617868][ T27] audit: type=1326 audit(1771006434.315:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349f19bf79 code=0x50000 [ 132.693458][ T27] audit: type=1326 audit(1771006434.315:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349f19bf79 code=0x50000 [ 132.781824][ T27] audit: type=1326 audit(1771006434.315:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349f19bf79 code=0x50000 [ 132.858177][ T27] audit: type=1326 audit(1771006434.315:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349f19bf79 code=0x50000 [ 132.908738][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.915623][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.948265][ T27] audit: type=1326 audit(1771006434.315:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349f19bf79 code=0x50000 [ 133.050499][ T27] audit: type=1326 audit(1771006434.315:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349f19bf79 code=0x50000 [ 133.125735][ T27] audit: type=1326 audit(1771006434.315:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349f19bf79 code=0x50000 [ 133.208278][ T27] audit: type=1326 audit(1771006434.315:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349f19bf79 code=0x50000 [ 133.637942][ T7158] loop0: detected capacity change from 0 to 256 [ 133.713436][ T7158] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 133.863323][ T7158] exFAT-fs (loop0): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 133.914749][ T7158] exFAT-fs (loop0): Filesystem has been set read-only [ 134.361784][ T7178] loop0: detected capacity change from 0 to 4096 [ 134.418415][ T42] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 134.450272][ T7178] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 134.519360][ T7178] ntfs3: loop0: ino=5, "/" attr_set_size [ 134.605500][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 134.639410][ T42] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 134.676654][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.710618][ T42] usb 2-1: config 0 descriptor?? [ 134.730846][ T7176] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 135.200503][ T42] bigben 0003:146B:0902.0003: unexpected rdesc, please submit for review [ 135.239205][ T42] bigben 0003:146B:0902.0003: hidraw0: USB HID v1.01 Device [HID 146b:0902] on usb-dummy_hcd.1-1/input0 [ 135.254373][ T7212] loop2: detected capacity change from 0 to 256 [ 135.281662][ T42] bigben 0003:146B:0902.0003: missing HID_OUTPUT_REPORT 0 [ 135.308276][ T42] bigben 0003:146B:0902.0003: no output report found [ 135.316037][ T7212] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 135.500323][ T5799] usb 2-1: USB disconnect, device number 5 [ 135.557368][ T7218] fido_id[7218]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 135.952671][ T7234] loop2: detected capacity change from 0 to 64 [ 135.977871][ T7229] loop0: detected capacity change from 0 to 4096 [ 136.133949][ T7229] ntfs: volume version 3.1. [ 137.311082][ T7281] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.480'. [ 138.154391][ T7318] loop4: detected capacity change from 0 to 512 [ 138.187622][ T7316] loop1: detected capacity change from 0 to 2048 [ 138.227231][ T7318] EXT4-fs error (device loop4): mb_free_blocks:1954: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 138.259654][ T7316] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.288812][ T7318] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #11: comm syz.4.493: corrupted inode contents [ 138.373886][ T7318] EXT4-fs error (device loop4): ext4_dirty_inode:6124: inode #11: comm syz.4.493: mark_inode_dirty error [ 138.407338][ T7318] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.493: invalid indirect mapped block 1 (level 1) [ 138.480361][ T7318] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #11: comm syz.4.493: corrupted inode contents [ 138.530660][ T7318] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 138.595742][ T7318] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #11: comm syz.4.493: corrupted inode contents [ 138.636552][ T7318] EXT4-fs error (device loop4): ext4_truncate:4294: inode #11: comm syz.4.493: mark_inode_dirty error [ 138.673900][ T7318] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 138.690661][ T7318] EXT4-fs (loop4): 1 truncate cleaned up [ 138.707003][ T7318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.886919][ T6189] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.955172][ T7342] loop2: detected capacity change from 0 to 256 [ 138.993513][ T7342] exfat: Deprecated parameter 'utf8' [ 139.022321][ T7342] exfat: Deprecated parameter 'namecase' [ 139.103470][ T7347] netlink: 56 bytes leftover after parsing attributes in process `syz.1.503'. [ 139.118897][ T7342] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8b6193f0, utbl_chksum : 0xe619d30d) [ 139.141493][ T7347] netlink: 16 bytes leftover after parsing attributes in process `syz.1.503'. [ 139.692115][ T7364] netlink: 34 bytes leftover after parsing attributes in process `syz.2.509'. [ 139.706461][ T7364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.509'. [ 139.820966][ T7339] loop0: detected capacity change from 0 to 40427 [ 139.829877][ T7339] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 139.837657][ T7339] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 139.847387][ T7339] F2FS-fs (loop0): build fault injection attr: rate: 18446, type: 0x7ffff [ 139.879157][ T7339] F2FS-fs (loop0): invalid crc value [ 139.886803][ T7339] F2FS-fs (loop0): Found nat_bits in checkpoint [ 139.997914][ T7339] F2FS-fs (loop0): Start checkpoint disabled! [ 140.026044][ T7339] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 140.039923][ T7339] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 140.181531][ T7372] loop2: detected capacity change from 0 to 4096 [ 140.350307][ T7372] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 140.455350][ T7377] loop0: detected capacity change from 0 to 2048 [ 140.518093][ T7377] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 141.378535][ T5799] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 141.388332][ T7412] hugetlbfs: Bad value for 'uid' [ 141.551762][ T7418] netlink: 104 bytes leftover after parsing attributes in process `syz.0.533'. [ 141.581179][ T5799] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 141.620091][ T5799] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 141.643355][ T5799] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 141.676486][ T5799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.691552][ T7402] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 141.713496][ T5799] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 141.807739][ T7424] loop2: detected capacity change from 0 to 16 [ 141.899349][ T7424] erofs: (device loop2): mounted with root inode @ nid 36. [ 142.089564][ T5799] usb 2-1: USB disconnect, device number 6 [ 142.184073][ T7435] netlink: 20 bytes leftover after parsing attributes in process `syz.4.543'. [ 142.506569][ T7444] loop2: detected capacity change from 0 to 1024 [ 142.554331][ T7444] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=802c018, mo2=0002] [ 142.596994][ T7444] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.644557][ T27] kauditd_printk_skb: 79 callbacks suppressed [ 142.644571][ T27] audit: type=1800 audit(1771006444.505:101): pid=7444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.547" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 142.695515][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.848176][ T5848] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 143.031209][ T5848] usb 1-1: Using ep0 maxpacket: 16 [ 143.057627][ T5848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.078423][ T5848] usb 1-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 143.103175][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.130018][ T5848] usb 1-1: config 0 descriptor?? [ 143.365187][ T7472] loop2: detected capacity change from 0 to 2048 [ 143.394936][ T7472] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 143.458214][ T7475] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.493468][ T7476] loop4: detected capacity change from 0 to 512 [ 143.539091][ T7476] EXT4-fs: Ignoring removed i_version option [ 143.557315][ T7476] EXT4-fs: Ignoring removed bh option [ 143.566652][ T5848] kye 0003:0458:0087.0004: unknown main item tag 0xd [ 143.588717][ T7472] NILFS error (device loop2): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 143.600785][ T5848] kye 0003:0458:0087.0004: unexpected long global item [ 143.601750][ T5848] kye 0003:0458:0087.0004: parse failed [ 143.634346][ T5848] kye: probe of 0003:0458:0087.0004 failed with error -22 [ 143.688112][ T7472] Remounting filesystem read-only [ 143.724464][ T7476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.761463][ T7476] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.869802][ T7476] EXT4-fs error (device loop4): ext4_resize_begin:62: comm syz.4.560: resize_inode disabled but reserved GDT blocks non-zero [ 143.891944][ T42] usb 1-1: USB disconnect, device number 2 [ 144.045840][ T6189] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.392449][ T7492] team_slave_0: entered promiscuous mode [ 144.398627][ T7492] team_slave_1: entered promiscuous mode [ 144.414852][ T7492] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 144.663175][ T7484] loop1: detected capacity change from 0 to 32768 [ 144.776614][ T27] audit: type=1800 audit(1771006446.635:102): pid=7484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.562" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 144.807508][ T7484] ialloc: diAlloc returned -5! [ 144.909094][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.572'. [ 145.428906][ T7522] netlink: 36 bytes leftover after parsing attributes in process `syz.4.580'. [ 145.567156][ T7531] loop4: detected capacity change from 0 to 512 [ 145.582499][ T7531] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 145.606416][ T7531] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 145.624966][ T7531] System zones: 1-12 [ 145.643014][ T7531] EXT4-fs error (device loop4): ext4_iget_extra_inode:4732: inode #15: comm syz.4.584: corrupted in-inode xattr: e_value size too large [ 145.720398][ T7531] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.584: couldn't read orphan inode 15 (err -117) [ 145.764494][ T7531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.912098][ T7538] loop1: detected capacity change from 0 to 64 [ 145.933863][ T6189] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.993913][ T7540] Bluetooth: MGMT ver 1.22 [ 146.220253][ T7548] loop4: detected capacity change from 0 to 256 [ 146.306621][ T7548] FAT-fs (loop4): Directory bread(block 64) failed [ 146.327076][ T7548] FAT-fs (loop4): Directory bread(block 65) failed [ 146.344853][ T7548] FAT-fs (loop4): Directory bread(block 66) failed [ 146.352715][ T7548] FAT-fs (loop4): Directory bread(block 67) failed [ 146.371040][ T7548] FAT-fs (loop4): Directory bread(block 68) failed [ 146.377697][ T7548] FAT-fs (loop4): Directory bread(block 69) failed [ 146.388392][ T42] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 146.413034][ T7548] FAT-fs (loop4): Directory bread(block 70) failed [ 146.428216][ T7548] FAT-fs (loop4): Directory bread(block 71) failed [ 146.448594][ T7548] FAT-fs (loop4): Directory bread(block 72) failed [ 146.455175][ T7548] FAT-fs (loop4): Directory bread(block 73) failed [ 146.625043][ T42] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 146.650410][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.672317][ T42] usb 3-1: config 0 has no interface number 0 [ 146.679813][ T42] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 146.693331][ T42] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.741102][ T42] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 146.751198][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.774286][ T42] usb 3-1: Product: syz [ 146.782358][ T42] usb 3-1: Manufacturer: syz [ 146.786998][ T42] usb 3-1: SerialNumber: syz [ 146.804927][ T42] usb 3-1: config 0 descriptor?? [ 146.990317][ T7567] loop1: detected capacity change from 0 to 128 [ 147.003884][ T7567] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 147.491808][ T5847] usb 3-1: USB disconnect, device number 5 [ 147.492125][ T7582] loop0: detected capacity change from 0 to 2048 [ 147.532951][ T7582] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.564331][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'. [ 147.686518][ T7586] netlink: 16 bytes leftover after parsing attributes in process `syz.0.610'. [ 148.294453][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.622'. [ 148.472535][ T7618] loop4: detected capacity change from 0 to 512 [ 148.485844][ T7618] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 148.612604][ T7618] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 148.708248][ T7618] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.849215][ T7618] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 148.899342][ T7618] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 148.938682][ T7618] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.625: Failed to acquire dquot type 0 [ 149.021233][ T6189] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 149.196611][ T7643] loop0: detected capacity change from 0 to 512 [ 149.247059][ T7643] EXT4-fs: Ignoring removed nobh option [ 149.500923][ T7643] EXT4-fs (loop0): Test dummy encryption mode enabled [ 149.552528][ T7643] EXT4-fs error (device loop0): __ext4_iget:5071: inode #11: block 1: comm syz.0.637: invalid block [ 149.597598][ T7643] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.637: couldn't read orphan inode 11 (err -117) [ 149.617219][ T7661] netlink: 48 bytes leftover after parsing attributes in process `syz.1.643'. [ 149.642298][ T7643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.826810][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.138878][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.652'. [ 150.243736][ T7683] loop4: detected capacity change from 0 to 256 [ 150.308559][ T7683] FAT-fs (loop4): Directory bread(block 64) failed [ 150.329311][ T7683] FAT-fs (loop4): Directory bread(block 65) failed [ 150.336024][ T7683] FAT-fs (loop4): Directory bread(block 66) failed [ 150.367061][ T7683] FAT-fs (loop4): Directory bread(block 67) failed [ 150.388313][ T7683] FAT-fs (loop4): Directory bread(block 68) failed [ 150.413785][ T7683] FAT-fs (loop4): Directory bread(block 69) failed [ 150.428399][ T42] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 150.450071][ T7683] FAT-fs (loop4): Directory bread(block 70) failed [ 150.458752][ T7683] FAT-fs (loop4): Directory bread(block 71) failed [ 150.465481][ T7683] FAT-fs (loop4): Directory bread(block 72) failed [ 150.473219][ T7683] FAT-fs (loop4): Directory bread(block 73) failed [ 150.594595][ T7691] netlink: 18 bytes leftover after parsing attributes in process `syz.1.659'. [ 150.640243][ T42] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 150.668825][ T42] usb 3-1: config 0 interface 0 has no altsetting 0 [ 150.687973][ T42] usb 3-1: New USB device found, idVendor=056a, idProduct=00d4, bcdDevice= 0.00 [ 150.720576][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.741343][ T42] usb 3-1: config 0 descriptor?? [ 150.747379][ T7681] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 151.202456][ T42] wacom 0003:056A:00D4.0005: Unknown device_type for 'HID 056a:00d4'. Assuming pen. [ 151.259714][ T42] wacom 0003:056A:00D4.0005: hidraw0: USB HID v0.81 Device [HID 056a:00d4] on usb-dummy_hcd.2-1/input0 [ 151.305330][ T42] input: Wacom Bamboo Pen Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00D4.0005/input/input9 [ 151.409410][ T7709] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 151.409410][ T7709] The task syz.0.667 (7709) triggered the difference, watch for misbehavior. [ 151.448270][ T42] usb 3-1: USB disconnect, device number 6 [ 151.505356][ T7699] loop4: detected capacity change from 0 to 32768 [ 151.523691][ T7707] fido_id[7707]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 151.546646][ T7711] loop1: detected capacity change from 0 to 2048 [ 151.605003][ T7711] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.331359][ T42] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 152.463977][ T7719] loop2: detected capacity change from 0 to 32768 [ 152.486170][ T7719] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 152.546611][ T42] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 152.558566][ T7729] netlink: 104 bytes leftover after parsing attributes in process `syz.4.669'. [ 152.564473][ T7719] XFS (loop2): Ending clean mount [ 152.573954][ T42] usb 2-1: config 0 has no interface number 0 [ 152.586720][ T42] usb 2-1: config 0 interface 29 has no altsetting 0 [ 152.597981][ T42] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 152.600814][ T7719] XFS (loop2): Quotacheck needed: Please wait. [ 152.624978][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.665961][ T42] usb 2-1: Product: syz [ 152.670940][ T42] usb 2-1: Manufacturer: syz [ 152.675597][ T42] usb 2-1: SerialNumber: syz [ 152.722578][ T42] usb 2-1: config 0 descriptor?? [ 152.748687][ T7719] XFS (loop2): Quotacheck: Done. [ 152.854885][ T5768] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 152.984005][ T42] peak_usb 2-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 153.094768][ T7739] loop0: detected capacity change from 0 to 4096 [ 153.131938][ T7739] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.184893][ T42] peak_usb 2-1:0.29 can0: sending command failure: -8 [ 153.202882][ T42] peak_usb 2-1:0.29 can0: sending command failure: -8 [ 153.220919][ T42] peak_usb 2-1:0.29 can0: sending command failure: -8 [ 153.300098][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.326622][ T42] peak_usb: probe of 2-1:0.29 failed with error -8 [ 153.398410][ T787] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 153.433033][ T7746] loop0: detected capacity change from 0 to 256 [ 153.491740][ T7746] FAT-fs (loop0): Directory bread(block 64) failed [ 153.507323][ T5847] usb 2-1: USB disconnect, device number 7 [ 153.508900][ T7746] FAT-fs (loop0): Directory bread(block 65) failed [ 153.539953][ T7746] FAT-fs (loop0): Directory bread(block 66) failed [ 153.551727][ T7746] FAT-fs (loop0): Directory bread(block 67) failed [ 153.559029][ T7746] FAT-fs (loop0): Directory bread(block 68) failed [ 153.565574][ T7746] FAT-fs (loop0): Directory bread(block 69) failed [ 153.572734][ T7746] FAT-fs (loop0): Directory bread(block 70) failed [ 153.580798][ T7746] FAT-fs (loop0): Directory bread(block 71) failed [ 153.587521][ T7746] FAT-fs (loop0): Directory bread(block 72) failed [ 153.595187][ T7746] FAT-fs (loop0): Directory bread(block 73) failed [ 153.603334][ T787] usb 5-1: unable to get BOS descriptor or descriptor too short [ 153.625616][ T787] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 153.668074][ T787] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 153.677313][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.692530][ T787] usb 5-1: Product: syz [ 153.696971][ T787] usb 5-1: Manufacturer: syz [ 153.703134][ T787] usb 5-1: SerialNumber: syz [ 153.825762][ T7748] netlink: 'syz.0.681': attribute type 8 has an invalid length. [ 154.627039][ T787] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 154.834615][ T787] usb 5-1: unable to get BOS descriptor or descriptor too short [ 154.934949][ T7761] loop0: detected capacity change from 0 to 32768 [ 154.990100][ T7761] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 155.092756][ T7761] XFS (loop0): Ending clean mount [ 155.144595][ T7761] XFS (loop0): Quotacheck needed: Please wait. [ 155.155411][ T787] usb 5-1: USB disconnect, device number 2 [ 155.217816][ T7771] loop2: detected capacity change from 0 to 32768 [ 155.247455][ T7761] XFS (loop0): Quotacheck: Done. [ 155.254859][ T7771] (syz.2.691,7771,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 155.311507][ T7771] (syz.2.691,7771,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 155.434479][ T7771] JBD2: Ignoring recovery information on journal [ 155.539642][ T5765] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 155.614494][ T7771] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 155.776782][ T7787] loop1: detected capacity change from 0 to 32768 [ 155.858368][ T7787] (syz.1.695,7787,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 155.894049][ T7787] (syz.1.695,7787,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 155.972656][ T7787] debugfs: Directory '9357E9D751824C228242B9B0D0FB6750' with parent 'ocfs2' already present! [ 156.016521][ T7787] JBD2: Ignoring recovery information on journal [ 156.185997][ T7787] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 156.211514][ T7796] netlink: 32 bytes leftover after parsing attributes in process `syz.0.700'. [ 156.274249][ T7799] loop4: detected capacity change from 0 to 2048 [ 156.309767][ T5768] ocfs2: Unmounting device (7,2) on (node local) [ 156.354071][ T7799] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 156.426022][ T7799] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.482422][ T7799] UDF-fs: unknown compression code (0) [ 156.488494][ T5773] ocfs2: Unmounting device (7,1) on (node local) [ 156.777922][ T7805] netlink: 16 bytes leftover after parsing attributes in process `syz.0.704'. [ 156.914447][ T7807] loop4: detected capacity change from 0 to 4096 [ 156.944002][ T7812] loop1: detected capacity change from 0 to 128 [ 157.019038][ T7812] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.094714][ T7812] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.298802][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.455075][ T7827] bridge_slave_0: default FDB implementation only supports local addresses [ 157.464313][ T7828] loop1: detected capacity change from 0 to 16 [ 157.481858][ T7828] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 157.665284][ T7832] loop0: detected capacity change from 0 to 736 [ 157.812912][ T7832] rock: directory entry would overflow storage [ 157.838325][ T7832] rock: sig=0x3b10, size=4, remaining=3 [ 158.013740][ T7838] loop2: detected capacity change from 0 to 4096 [ 158.145554][ T7843] loop1: detected capacity change from 0 to 1024 [ 158.169367][ T5775] Bluetooth: to_multiplier 0 < 10 [ 158.225881][ T7843] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 158.265598][ T7843] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c801e018, mo2=0000] [ 158.378738][ T7843] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 2: comm syz.1.719: lblock 2 mapped to illegal pblock 2 (length 1) [ 158.401759][ T7851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.724'. [ 158.424923][ T7843] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 158.443567][ T7843] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 48: comm syz.1.719: lblock 0 mapped to illegal pblock 48 (length 1) [ 158.464207][ T7843] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 158.475477][ T7843] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.719: Failed to acquire dquot type 0 [ 158.492541][ T7843] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 158.527607][ T7843] EXT4-fs error (device loop1): ext4_evict_inode:252: inode #11: comm syz.1.719: mark_inode_dirty error [ 158.547338][ T7843] EXT4-fs warning (device loop1): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 158.561632][ T7843] EXT4-fs (loop1): 1 orphan inode deleted [ 158.574178][ T7843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.592817][ T33] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 158.632137][ T33] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 158.673389][ T33] EXT4-fs error (device loop1): ext4_release_dquot:6985: comm kworker/u4:2: Failed to release dquot type 0 [ 158.823959][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.844932][ T7861] loop0: detected capacity change from 0 to 1024 [ 158.858979][ T994] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 158.884270][ T994] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 158.911787][ T994] EXT4-fs error (device loop1): ext4_release_dquot:6985: comm kworker/u4:6: Failed to release dquot type 0 [ 158.944006][ T7865] overlayfs: missing 'lowerdir' [ 158.955694][ T5773] EXT4-fs error (device loop1): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 158.980113][ T5773] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 159.017594][ T5773] EXT4-fs error (device loop1): ext4_quota_off:7233: inode #3: comm syz-executor: mark_inode_dirty error [ 159.042520][ T7861] hfsplus: bad catalog entry type [ 159.139807][ T27] audit: type=1326 audit(1771006461.005:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349f19bf79 code=0x7ffc0000 [ 159.216359][ T989] hfsplus: b-tree write err: -5, ino 4 [ 159.220164][ T27] audit: type=1326 audit(1771006461.005:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349f19bf79 code=0x7ffc0000 [ 159.302229][ T27] audit: type=1326 audit(1771006461.045:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349f19bf79 code=0x7ffc0000 [ 159.380237][ T27] audit: type=1326 audit(1771006461.045:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349f19bf79 code=0x7ffc0000 [ 159.442249][ T27] audit: type=1326 audit(1771006461.045:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f349f19bf79 code=0x7ffc0000 [ 159.495695][ T27] audit: type=1326 audit(1771006461.045:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349f19bf79 code=0x7ffc0000 [ 159.551899][ T7881] loop1: detected capacity change from 0 to 1024 [ 159.584037][ T7881] EXT4-fs: Ignoring removed orlov option [ 159.590222][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 159.631597][ T7881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.686918][ T7881] EXT4-fs error (device loop1): ext4_free_inode:356: comm syz.1.736: bit already cleared for inode 13 [ 159.714342][ T7881] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 159.778412][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 159.789454][ T8] usb 3-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=e8.cf [ 159.798766][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.804617][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.806770][ T8] usb 3-1: Product: syz [ 159.821324][ T8] usb 3-1: Manufacturer: syz [ 159.825967][ T8] usb 3-1: SerialNumber: syz [ 159.849601][ T8] usb 3-1: config 0 descriptor?? [ 159.857875][ T8] cypress_cy7c63 3-1:0.0: Cypress CY7C63xxx device now attached [ 160.066014][ T8] usb 3-1: USB disconnect, device number 7 [ 160.074351][ T8] cypress_cy7c63 3-1:0.0: Cypress CY7C63xxx device now disconnected [ 160.178480][ T5775] Bluetooth: hci2: command tx timeout [ 160.526689][ T7911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.547735][ T7911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.562662][ T7911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.573527][ T7911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.589299][ T7911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.602740][ T7911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.613089][ T7911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.616338][ T7913] CUSE: unknown device info "€" [ 160.624569][ T7911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.638953][ T7913] CUSE: unknown device info "" [ 160.643866][ T7913] CUSE: unknown device info "" [ 160.651813][ T7913] CUSE: unknown device info "" [ 160.656703][ T7913] CUSE: zero length info key specified [ 160.662634][ T7911] batadv_slave_1: entered promiscuous mode [ 160.908970][ T7921] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 161.022125][ T7925] loop0: detected capacity change from 0 to 1764 [ 161.099989][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.758'. [ 161.148163][ T8] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 161.350752][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 161.372633][ T8] usb 5-1: not running at top speed; connect to a high speed hub [ 161.382370][ T8] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 161.392227][ T8] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 161.424792][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.447080][ T8] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.456550][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.476810][ T8] usb 5-1: Product: syz [ 161.486941][ T8] usb 5-1: Manufacturer: syz [ 161.499963][ T8] usb 5-1: SerialNumber: syz [ 161.834988][ T7931] loop0: detected capacity change from 0 to 32768 [ 161.895225][ T7931] XFS (loop0): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 161.935218][ T8] usb 5-1: 0:2 : does not exist [ 161.979364][ T8] usb 5-1: USB disconnect, device number 3 [ 162.082988][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.123285][ T7931] XFS (loop0): Ending clean mount [ 162.158517][ T5847] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x20 [ 162.197073][ T7937] loop1: detected capacity change from 0 to 32768 [ 162.212737][ T5847] XFS (loop0): Unmount and run xfs_repair [ 162.223430][ T5847] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 162.239584][ T5847] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 162.255935][ T5847] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 162.276776][ T7937] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 162.279862][ T5847] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 162.301984][ T5847] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 162.358138][ T5847] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 162.367070][ T5847] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 162.400572][ T5847] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 162.417064][ T5847] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 162.426933][ T7931] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x20 len 8 error 74 [ 162.445413][ T7931] XFS (loop0): Failed to initialize disk quotas. [ 162.504974][ T5765] XFS (loop0): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 162.518586][ T7937] XFS (loop1): Ending clean mount [ 162.600053][ T7937] XFS (loop1): Quotacheck needed: Please wait. [ 162.697080][ T7968] loop4: detected capacity change from 0 to 256 [ 162.727126][ T7937] XFS (loop1): Quotacheck: Done. [ 162.754176][ T7968] exfat: Deprecated parameter 'namecase' [ 162.821581][ T7968] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 162.923195][ T7968] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 163.007477][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 163.418152][ T787] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 163.533527][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 163.599034][ T787] usb 1-1: Using ep0 maxpacket: 16 [ 163.607829][ T787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.631492][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.642660][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.655543][ T787] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.675370][ T787] usb 1-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 163.684551][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.705092][ T787] usb 1-1: config 0 descriptor?? [ 163.739719][ T7992] loop2: detected capacity change from 0 to 8 [ 164.149107][ T787] sony 0003:054C:0374.0006: unbalanced delimiter at end of report description [ 164.159029][ T787] sony 0003:054C:0374.0006: parse failed [ 164.164786][ T787] sony: probe of 0003:054C:0374.0006 failed with error -22 [ 164.412145][ T5799] usb 1-1: USB disconnect, device number 3 [ 164.554119][ T8009] loop1: detected capacity change from 0 to 1024 [ 164.654709][ T3482] hfsplus: b-tree write err: -5, ino 4 [ 164.834520][ T8017] loop1: detected capacity change from 0 to 256 [ 164.903972][ T8017] FAT-fs (loop1): Directory bread(block 64) failed [ 164.928109][ T8017] FAT-fs (loop1): Directory bread(block 65) failed [ 164.934804][ T8017] FAT-fs (loop1): Directory bread(block 66) failed [ 164.978623][ T8017] FAT-fs (loop1): Directory bread(block 67) failed [ 164.985321][ T8017] FAT-fs (loop1): Directory bread(block 68) failed [ 165.018293][ T8017] FAT-fs (loop1): Directory bread(block 69) failed [ 165.052354][ T8017] FAT-fs (loop1): Directory bread(block 70) failed [ 165.060533][ T8017] FAT-fs (loop1): Directory bread(block 71) failed [ 165.067224][ T8017] FAT-fs (loop1): Directory bread(block 72) failed [ 165.078724][ T8017] FAT-fs (loop1): Directory bread(block 73) failed [ 165.879525][ T8034] deleting an unspecified loop device is not supported. [ 166.518385][ T8054] netlink: 36 bytes leftover after parsing attributes in process `syz.4.809'. [ 166.575944][ T8056] loop2: detected capacity change from 0 to 128 [ 166.575985][ T8032] loop1: detected capacity change from 0 to 40427 [ 166.623496][ T8032] F2FS-fs (loop1): Invalid log blocks per segment (4278190089) [ 166.647794][ T8032] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 166.687197][ T8032] F2FS-fs (loop1): invalid crc value [ 166.717874][ T8032] F2FS-fs (loop1): Found nat_bits in checkpoint [ 166.828409][ T8032] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 166.850728][ T8032] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 166.960483][ T8032] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 167.131951][ T8068] loop0: detected capacity change from 0 to 8192 [ 167.186543][ T8068] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 167.231752][ T8068] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 167.285235][ T8068] REISERFS (device loop0): using ordered data mode [ 167.319682][ T8068] reiserfs: using flush barriers [ 167.365374][ T8068] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 167.407590][ T8068] REISERFS (device loop0): checking transaction log (loop0) [ 167.455498][ T8068] REISERFS (device loop0): Using rupasov hash to sort names [ 167.502951][ T8068] REISERFS (device loop0): using 3.5.x disk format [ 167.522768][ T8068] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 167.564727][ T8068] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 167.595380][ T8068] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 167.607742][ T8068] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 167.728091][ T5799] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 167.904964][ T8070] loop4: detected capacity change from 0 to 32768 [ 167.929526][ T5799] usb 2-1: Using ep0 maxpacket: 16 [ 167.954686][ T5799] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.982893][ T8070] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 167.989822][ T5799] usb 2-1: config 0 interface 0 has no altsetting 0 [ 168.003460][ T5799] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 168.013490][ T5799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.027250][ T5799] usb 2-1: config 0 descriptor?? [ 168.138388][ T8070] XFS (loop4): Ending clean mount [ 168.176702][ T8070] XFS (loop4): Quotacheck needed: Please wait. [ 168.290304][ T8070] XFS (loop4): Quotacheck: Done. [ 168.321162][ T8094] loop0: detected capacity change from 0 to 1024 [ 168.407837][ T8094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.491631][ T5799] nzxt-smart2 0003:1E71:2009.0007: unbalanced delimiter at end of report description [ 168.519685][ T5799] nzxt-smart2: probe of 0003:1E71:2009.0007 failed with error -22 [ 168.583834][ T6189] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 168.587199][ T8094] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #11: comm syz.0.822: directory missing '..' [ 168.746344][ T42] usb 2-1: USB disconnect, device number 8 [ 168.782799][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.057620][ T8108] mkiss: ax0: crc mode is auto. [ 169.138548][ T8104] loop2: detected capacity change from 0 to 32768 [ 169.437090][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.833'. [ 169.678315][ T8119] loop1: detected capacity change from 0 to 4096 [ 169.722257][ T8119] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 170.048724][ T8135] loop4: detected capacity change from 0 to 128 [ 170.057899][ T8135] ufs: You didn't specify the type of your ufs filesystem [ 170.057899][ T8135] [ 170.057899][ T8135] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 170.057899][ T8135] [ 170.057899][ T8135] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 170.089250][ C0] vkms_vblank_simulate: vblank timer overrun [ 170.181117][ T8139] ptrace attach of "./syz-executor exec"[5765] was attempted by ""[8139] [ 170.233855][ T8135] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 170.394008][ T8144] loop0: detected capacity change from 0 to 16 [ 170.425017][ T8144] erofs: (device loop0): mounted with root inode @ nid 36. [ 170.494034][ T8144] overlayfs: failed to get redirect (-117) [ 170.521296][ T8144] overlayfs: failed to resolve './file0/file0': -117 [ 170.644343][ T8153] netlink: 76 bytes leftover after parsing attributes in process `syz.2.849'. [ 170.655977][ T8153] nbd: illegal input index 1638463 [ 170.818240][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 171.017422][ T8169] loop1: detected capacity change from 0 to 512 [ 171.026610][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.047095][ T8] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 171.068135][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.095757][ T8] usb 5-1: config 0 descriptor?? [ 171.153617][ T8169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.202172][ T8173] netlink: 136 bytes leftover after parsing attributes in process `syz.0.857'. [ 171.220228][ T8169] ext4 filesystem being mounted at /213/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 171.292128][ T8173] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 171.374173][ T8169] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.856: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 171.432648][ T8169] EXT4-fs (loop1): Remounting filesystem read-only [ 171.522956][ T8] lenovo 0003:17EF:6047.0008: item fetching failed at offset 2/5 [ 171.538984][ T8] lenovo 0003:17EF:6047.0008: hid_parse failed [ 171.560766][ T8] lenovo: probe of 0003:17EF:6047.0008 failed with error -22 [ 171.582433][ T8175] loop0: detected capacity change from 0 to 256 [ 171.598649][ T8166] loop2: detected capacity change from 0 to 32768 [ 171.603800][ T8175] exfat: Deprecated parameter 'utf8' [ 171.642526][ T8166] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 171.657967][ T8175] exfat: Deprecated parameter 'utf8' [ 171.670546][ T8175] exfat: Deprecated parameter 'utf8' [ 171.705907][ T8175] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 171.764426][ T8] usb 5-1: USB disconnect, device number 4 [ 171.832232][ T8166] XFS (loop2): Ending clean mount [ 171.867581][ T787] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x20 [ 171.906436][ T787] XFS (loop2): Unmount and run xfs_repair [ 171.926698][ T787] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 171.948805][ T787] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 171.988190][ T787] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 172.007303][ T787] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 172.026422][ T787] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 172.045619][ T787] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 172.069377][ T787] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 172.102191][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.103008][ T787] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 172.144736][ T787] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 172.178872][ T8166] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x20 len 8 error 74 [ 172.205692][ T8166] XFS (loop2): Failed to initialize disk quotas. [ 172.415455][ T5768] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 172.619408][ T8197] loop1: detected capacity change from 0 to 128 [ 172.637107][ T8197] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 172.654182][ T8197] ext4 filesystem being mounted at /216/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 172.658735][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 172.750334][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 172.881428][ T8] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 172.891818][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.908276][ T8] usb 5-1: config 0 descriptor?? [ 172.921469][ T8] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 172.930736][ T8203] loop1: detected capacity change from 0 to 1024 [ 172.991643][ T8203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.108752][ T8203] EXT4-fs: Ignoring sb option on remount [ 173.114557][ T8203] EXT4-fs: Ignoring removed orlov option [ 173.144874][ T8203] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.166152][ T8] gp8psk: usb in 128 operation failed. [ 173.175292][ T8203] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 173.233735][ T8203] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 173.264434][ T8203] EXT4-fs: can't change dax mount option while remounting [ 173.345663][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.390514][ T8] gp8psk: usb in 146 operation failed. [ 173.402252][ T8] gp8psk: failed to get FW version [ 173.416957][ T8] gp8psk: usb in 149 operation failed. [ 173.437634][ T8] gp8psk: failed to get FPGA version [ 173.449386][ T8] gp8psk: usb in 138 operation failed. [ 173.476674][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 173.495300][ T8] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 173.519688][ T8] usb 5-1: media controller created [ 173.584614][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 173.667378][ T8] gp8psk_fe: Frontend attached [ 173.685680][ T8] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 173.697494][ T8218] loop2: detected capacity change from 0 to 4096 [ 173.706251][ T8] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 173.737413][ T8218] ntfs: volume version 3.1. [ 173.895777][ T8] gp8psk: usb in 138 operation failed. [ 173.915349][ T8] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 173.954649][ T8] gp8psk: found Genpix USB device pID = 203 (hex) [ 174.012312][ T8] usb 5-1: USB disconnect, device number 5 [ 174.239876][ T8212] loop0: detected capacity change from 0 to 32768 [ 174.302523][ T8] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 174.319535][ T8231] loop4: detected capacity change from 0 to 128 [ 174.334235][ T8212] add_index: next_index = 0. Resetting! [ 174.365000][ T8212] non-latin1 character 0x3ff found in JFS file name [ 174.373946][ T8212] mount with iocharset=utf8 to access [ 174.397579][ T8231] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 174.453491][ T8231] hpfs: filesystem error: improperly stopped [ 174.482059][ T8231] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 174.498427][ T8231] hpfs: You really don't want any checks? You are crazy... [ 174.529228][ T8231] hpfs: hpfs_map_sector(): read error [ 174.550853][ T8231] hpfs: code page support is disabled [ 174.556508][ T8231] hpfs: hpfs_map_4sectors(): unaligned read [ 174.588715][ T8231] hpfs: hpfs_map_4sectors(): unaligned read [ 174.594678][ T8231] hpfs: filesystem error: unable to find root dir [ 175.538740][ T787] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 175.770449][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 175.798710][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.816309][ T787] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 175.853196][ T787] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 175.871078][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.904843][ T787] usb 1-1: config 0 descriptor?? [ 175.972261][ T8280] kAFS: unable to lookup cell '(0.Â|dÒùyx²LTrwˆž0 Æâœí\Ø[È ó¬]V' [ 176.006700][ T8278] loop4: detected capacity change from 0 to 4096 [ 176.055423][ T8278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.194667][ T8278] fs-verity: sha256 using implementation "sha256-avx2" [ 176.216318][ T8273] loop1: detected capacity change from 0 to 32768 [ 176.233398][ T8278] fs-verity (loop4, inode 16): Unsupported log_blocksize: 13 [ 176.243333][ T8273] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.900 (8273) [ 176.302076][ T8273] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 176.333217][ T8273] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 176.361011][ T8273] BTRFS info (device loop1): setting nodatacow, compression disabled [ 176.380224][ T6189] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.393621][ T787] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 176.399031][ T8273] BTRFS info (device loop1): force clearing of disk cache [ 176.429170][ T8273] BTRFS info (device loop1): enabling ssd optimizations [ 176.458604][ T8273] BTRFS info (device loop1): using spread ssd allocation scheme [ 176.466891][ T8273] BTRFS info (device loop1): turning off barriers [ 176.481120][ T787] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 176.495108][ T8273] BTRFS info (device loop1): disabling free space tree [ 176.524068][ T8273] BTRFS info (device loop1): not using ssd optimizations [ 176.551634][ T8273] BTRFS info (device loop1): not using spread ssd allocation scheme [ 176.578137][ T42] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 176.677733][ T8] usb 1-1: USB disconnect, device number 4 [ 176.755480][ T8273] BTRFS info (device loop1): rebuilding free space tree [ 176.768104][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 176.780029][ T42] usb 3-1: too many endpoints for config 0 interface 0 altsetting 3: 63, using maximum allowed: 30 [ 176.814075][ T42] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.830051][ T8273] BTRFS info (device loop1): disabling free space tree [ 176.849675][ T8273] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 176.859464][ T42] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 63 [ 176.884948][ T8273] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 176.914154][ T42] usb 3-1: config 0 interface 0 has no altsetting 0 [ 176.925141][ T42] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 176.934901][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.959647][ T42] usb 3-1: config 0 descriptor?? [ 177.139195][ T5773] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 177.435760][ T42] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 177.443948][ T8316] loop0: detected capacity change from 0 to 256 [ 177.470016][ T8316] exfat: Deprecated parameter 'utf8' [ 177.487425][ T42] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 177.501204][ T8316] exfat: Deprecated parameter 'namecase' [ 177.513664][ T42] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 177.537680][ T8316] exfat: Deprecated parameter 'namecase' [ 177.544195][ T42] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 177.568466][ T8316] exfat: Deprecated parameter 'utf8' [ 177.578080][ T42] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 177.600552][ T8316] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xf17e4aaa, utbl_chksum : 0xe619d30d) [ 177.604544][ T42] lua 0003:1E7D:2C2E.000A: hidraw0: USB HID v0.0b Device [HID 1e7d:2c2e] on usb-dummy_hcd.2-1/input0 [ 177.699160][ T42] usb 3-1: USB disconnect, device number 8 [ 177.861452][ T8322] fido_id[8322]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 178.687056][ T8345] loop4: detected capacity change from 0 to 512 [ 178.694027][ T8329] loop1: detected capacity change from 0 to 32768 [ 178.736496][ T8345] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.765653][ T8345] ext4 filesystem being mounted at /156/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 178.906700][ T8345] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.925: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 178.968331][ T8345] EXT4-fs (loop4): Remounting filesystem read-only [ 179.056274][ T8351] netlink: 'syz.1.927': attribute type 4 has an invalid length. [ 179.088077][ T8351] netlink: 17 bytes leftover after parsing attributes in process `syz.1.927'. [ 179.454807][ T8337] loop0: detected capacity change from 0 to 32768 [ 179.475954][ T8337] XFS: attr2 mount option is deprecated. [ 179.533604][ T8337] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 179.558265][ T8337] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 179.812706][ T6189] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.879511][ T8349] loop2: detected capacity change from 0 to 40427 [ 179.903964][ T8337] XFS (loop0): Ending clean mount [ 179.933695][ T8349] F2FS-fs (loop2): invalid crc value [ 179.995194][ T8349] F2FS-fs (loop2): Found nat_bits in checkpoint [ 180.064738][ T8337] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 180.167682][ T8349] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 180.247669][ T8372] loop4: detected capacity change from 0 to 4096 [ 180.360515][ T8372] ntfs: volume version 3.1. [ 180.476355][ T8355] loop1: detected capacity change from 0 to 40427 [ 180.540557][ T8355] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 180.570957][ T8355] F2FS-fs (loop1): Image doesn't support compression [ 180.577747][ T8355] F2FS-fs (loop1): Image doesn't support compression [ 180.653332][ T8355] F2FS-fs (loop1): invalid crc value [ 180.731012][ T8355] F2FS-fs (loop1): Found nat_bits in checkpoint [ 180.902448][ T8380] netlink: 296 bytes leftover after parsing attributes in process `syz.0.932'. [ 180.948522][ T8355] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 181.154623][ T5773] syz-executor: attempt to access beyond end of device [ 181.154623][ T5773] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 181.189700][ T5773] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 181.693012][ T8382] loop4: detected capacity change from 0 to 32768 [ 181.739021][ T8382] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 181.986285][ T6189] ocfs2: Unmounting device (7,4) on (node local) [ 182.466172][ T8421] loop4: detected capacity change from 0 to 64 [ 182.985483][ T8435] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 183.060958][ T8411] loop0: detected capacity change from 0 to 32768 [ 183.177976][ T8411] read_mapping_page failed! [ 183.203871][ T8411] ERROR: (device loop0): txCommit: [ 183.203871][ T8411] [ 183.347563][ T8445] loop1: detected capacity change from 0 to 256 [ 183.643311][ T8451] loop0: detected capacity change from 0 to 512 [ 183.755251][ T8455] netlink: 56 bytes leftover after parsing attributes in process `syz.1.962'. [ 183.787247][ T8451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.807205][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.962'. [ 183.818410][ T8451] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.903192][ T8429] loop2: detected capacity change from 0 to 40427 [ 183.926047][ T8429] F2FS-fs (loop2): invalid crc value [ 183.944898][ T8429] F2FS-fs (loop2): Found nat_bits in checkpoint [ 184.136070][ T8429] F2FS-fs (loop2): Start checkpoint disabled! [ 184.197482][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.222022][ T8429] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 184.368556][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 184.396050][ T8470] loop0: detected capacity change from 0 to 256 [ 184.419711][ T8470] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 184.541039][ T994] kworker/u4:6: attempt to access beyond end of device [ 184.541039][ T994] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 184.584109][ T994] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 184.585347][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.601696][ T994] kworker/u4:6: attempt to access beyond end of device [ 184.601696][ T994] loop2: rw=2049, sector=40984, nr_sectors = 8 limit=40427 [ 184.616186][ T994] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 184.632871][ T8474] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 184.632871][ T8474] program syz.0.971 not setting count and/or reply_len properly [ 184.655706][ T8] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 184.681105][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.709380][ T8] usb 2-1: config 0 descriptor?? [ 185.155777][ T8] elecom 0003:056E:00FE.000B: unknown main item tag 0x0 [ 185.183920][ T8] elecom 0003:056E:00FE.000B: unknown main item tag 0x0 [ 185.200022][ T8] elecom 0003:056E:00FE.000B: unknown main item tag 0x0 [ 185.216787][ T8] elecom 0003:056E:00FE.000B: unknown main item tag 0x0 [ 185.236038][ T8] elecom 0003:056E:00FE.000B: unknown main item tag 0x0 [ 185.257453][ T8] elecom 0003:056E:00FE.000B: unknown main item tag 0x0 [ 185.264939][ T8] elecom 0003:056E:00FE.000B: unknown main item tag 0x0 [ 185.295587][ T8] elecom 0003:056E:00FE.000B: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.1-1/input0 [ 185.368975][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.977'. [ 185.396264][ T787] usb 2-1: USB disconnect, device number 9 [ 185.469152][ T8488] fido_id[8488]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 185.509483][ T5799] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 185.583751][ T8492] loop4: detected capacity change from 0 to 2048 [ 185.639656][ T8493] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.709735][ T5799] usb 3-1: Using ep0 maxpacket: 32 [ 185.724222][ T5799] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.738221][ T5799] usb 3-1: config 0 interface 0 has no altsetting 0 [ 185.744878][ T5799] usb 3-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 185.755150][ T5799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.767469][ T5799] usb 3-1: config 0 descriptor?? [ 185.819580][ T8494] NILFS (loop4): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 4) [ 185.851682][ T8494] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=16) [ 185.873138][ T8494] Remounting filesystem read-only [ 185.879374][ T8494] NILFS (loop4): error -5 truncating bmap (ino=16) [ 185.916590][ T8494] syz.4.978 (8494) used greatest stack depth: 19856 bytes left [ 186.026814][ T6189] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 186.038217][ T6189] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 186.045600][ T6189] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 186.060780][ T6189] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 186.072698][ T6189] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 186.087271][ T6189] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 186.126205][ T6189] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 186.161641][ T6189] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 186.172536][ T6189] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 186.189929][ T6189] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 186.197702][ T6189] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 186.249634][ T5799] elecom 0003:056E:00E6.000C: unknown main item tag 0x7 [ 186.286974][ T5799] elecom 0003:056E:00E6.000C: hidraw0: USB HID v10.00 Device [HID 056e:00e6] on usb-dummy_hcd.2-1/input0 [ 186.511257][ T5847] usb 3-1: USB disconnect, device number 9 [ 186.561142][ T8510] fido_id[8510]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 186.584914][ T8517] sctp: [Deprecated]: syz.4.986 (pid 8517) Use of int in maxseg socket option. [ 186.584914][ T8517] Use struct sctp_assoc_value instead [ 186.802215][ T8524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.991'. [ 187.010475][ T8531] sp0: Synchronizing with TNC [ 187.360586][ T8547] netlink: 'syz.4.1001': attribute type 1 has an invalid length. [ 187.606105][ T787] IPVS: starting estimator thread 0... [ 187.705356][ T8557] IPVS: using max 22 ests per chain, 52800 per kthread [ 187.869432][ T42] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 188.040413][ T8563] loop2: detected capacity change from 0 to 64 [ 188.049764][ T8554] loop1: detected capacity change from 0 to 32768 [ 188.080243][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.105083][ T42] usb 5-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 188.137687][ T8554] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 188.147575][ T8563] hfs: small file entry [ 188.175087][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.194094][ T8553] loop0: detected capacity change from 0 to 32768 [ 188.233388][ T42] usb 5-1: config 0 descriptor?? [ 188.252873][ T8553] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1003 (8553) [ 188.302170][ T8553] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 188.334495][ T8553] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 188.348706][ T8553] BTRFS info (device loop0): setting nodatacow, compression disabled [ 188.358266][ T8553] BTRFS info (device loop0): force clearing of disk cache [ 188.365432][ T8553] BTRFS info (device loop0): enabling ssd optimizations [ 188.374955][ T8553] BTRFS info (device loop0): using spread ssd allocation scheme [ 188.398161][ T8553] BTRFS info (device loop0): turning off barriers [ 188.404671][ T8553] BTRFS info (device loop0): disabling free space tree [ 188.435966][ T8567] pim6reg: entered allmulticast mode [ 188.438328][ T8553] BTRFS info (device loop0): not using ssd optimizations [ 188.456230][ T5773] ocfs2: Unmounting device (7,1) on (node local) [ 188.486114][ T8567] pim6reg: left allmulticast mode [ 188.526041][ T8553] BTRFS info (device loop0): not using spread ssd allocation scheme [ 188.681404][ T42] uclogic 0003:28BD:0055.000D: interface is invalid, ignoring [ 188.771480][ T8585] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 188.785598][ T8553] BTRFS info (device loop0): rebuilding free space tree [ 188.851694][ T8553] BTRFS info (device loop0): disabling free space tree [ 188.883070][ T8] usb 5-1: USB disconnect, device number 6 [ 188.883601][ T8553] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 188.923183][ T8553] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 189.130678][ T5765] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 189.330246][ T8598] loop1: detected capacity change from 0 to 2048 [ 189.392829][ T8598] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.893995][ T8602] loop1: detected capacity change from 0 to 4096 [ 189.907002][ T8602] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 189.962242][ T8602] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 189.982066][ T8602] ntfs3: loop1: Failed to load $Extend (-22). [ 189.993235][ T8602] ntfs3: loop1: Failed to initialize $Extend. [ 190.094159][ T8597] loop0: detected capacity change from 0 to 32768 [ 190.192462][ T8597] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 190.192462][ T8597] [ 190.248132][ T8597] ERROR: (device loop0): remounting filesystem as read-only [ 190.255487][ T8597] non-latin1 character 0x3ff found in JFS file name [ 190.294536][ T8597] mount with iocharset=utf8 to access [ 191.185861][ T8615] loop4: detected capacity change from 0 to 32768 [ 191.203899][ T8615] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1024 (8615) [ 191.251625][ T8642] sp0: Synchronizing with TNC [ 191.282193][ T8615] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 191.345371][ T8615] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 191.383614][ T8615] BTRFS info (device loop4): setting nodatacow, compression disabled [ 191.406152][ T8615] BTRFS info (device loop4): force clearing of disk cache [ 191.429496][ T8615] BTRFS info (device loop4): enabling ssd optimizations [ 191.436514][ T8615] BTRFS info (device loop4): using spread ssd allocation scheme [ 191.478300][ T8615] BTRFS info (device loop4): turning off barriers [ 191.490661][ T8615] BTRFS info (device loop4): disabling free space tree [ 191.497675][ T8615] BTRFS info (device loop4): not using ssd optimizations [ 191.513915][ T8615] BTRFS info (device loop4): not using spread ssd allocation scheme [ 191.857070][ T8615] BTRFS info (device loop4): rebuilding free space tree [ 191.951129][ T8615] BTRFS info (device loop4): disabling free space tree [ 191.971303][ T8615] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 191.998461][ T8615] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 192.480720][ T6189] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 192.883001][ T8702] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 192.908467][ T8702] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 193.205856][ T8681] loop2: detected capacity change from 0 to 32768 [ 193.265790][ T8681] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 193.273759][ T8711] loop1: detected capacity change from 0 to 4096 [ 193.307894][ T8711] __ntfs_error: 8 callbacks suppressed [ 193.307910][ T8711] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 193.326698][ T8711] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 193.353581][ T8681] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 193.368767][ T8711] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 193.380614][ T8711] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 193.394224][ T8711] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 193.427065][ T8711] ntfs: volume version 3.1. [ 193.433883][ T8711] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 193.476798][ T8711] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 193.527799][ T8711] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 193.599291][ T8711] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 193.643649][ T8711] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 193.682903][ T8681] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 193.897850][ T8681] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 193.955045][ T8725] loop0: detected capacity change from 0 to 164 [ 194.008749][ T5799] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 194.060039][ T8725] rock: directory entry would overflow storage [ 194.069939][ T8725] rock: sig=0x66, size=4, remaining=3 [ 194.104241][ T8725] rock: directory entry would overflow storage [ 194.125124][ T8725] rock: sig=0x66, size=4, remaining=3 [ 194.220544][ T5799] usb 5-1: config 24 interface 0 has no altsetting 0 [ 194.266583][ T5799] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=70.25 [ 194.295841][ T5799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.335068][ T5799] usb 5-1: Product: syz [ 194.355095][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.361977][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.382632][ T5799] usb 5-1: Manufacturer: syz [ 194.407933][ T5799] usb 5-1: SerialNumber: syz [ 194.854635][ T5799] usb 5-1: USB disconnect, device number 7 [ 194.915689][ T8747] loop2: detected capacity change from 0 to 1024 [ 194.939411][ T8747] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 194.952103][ T8747] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (49802!=20869) [ 194.972621][ T8747] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 195.022508][ T8747] EXT4-fs error (device loop2): ext4_get_journal_inode:5816: inode #5: comm syz.2.1065: unexpected bad inode w/o EXT4_IGET_BAD [ 195.075544][ T8747] EXT4-fs (loop2): no journal found [ 195.081871][ T8747] EXT4-fs (loop2): can't get journal size [ 195.102282][ T8747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.285505][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.577205][ T8765] loop1: detected capacity change from 0 to 256 [ 195.607953][ T8765] exfat: Deprecated parameter 'namecase' [ 195.626950][ T8765] exfat: Deprecated parameter 'namecase' [ 195.643278][ T8765] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 195.684728][ T8767] loop4: detected capacity change from 0 to 2048 [ 195.691244][ T8765] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 195.754118][ T8770] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 196.007410][ T8759] loop0: detected capacity change from 0 to 32768 [ 196.142433][ T8759] ERROR: (device loop0): diWrite: ixpxd invalid [ 196.142433][ T8759] [ 196.188615][ T8759] ERROR: (device loop0): remounting filesystem as read-only [ 196.221732][ T8759] ERROR: (device loop0): txCommit: [ 196.221732][ T8759] [ 196.549905][ T8789] vcan1: entered promiscuous mode [ 196.564652][ T8789] team0: Device vcan1 is up. Set it down before adding it as a team port [ 196.932949][ T8801] loop0: detected capacity change from 0 to 1764 [ 196.996057][ T8801] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 197.064570][ T8803] loop2: detected capacity change from 0 to 4096 [ 197.075003][ T8803] EXT4-fs: Ignoring removed mblk_io_submit option [ 197.109836][ T8803] EXT4-fs (loop2): Test dummy encryption mode enabled [ 197.151444][ T8803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.428688][ T8803] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 197.445708][ T8819] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1097'. [ 197.768223][ T8803] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 197.809361][ T8825] loop0: detected capacity change from 0 to 4096 [ 197.912892][ T8825] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 197.972979][ T8814] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 198.007971][ T8814] F2FS-fs (loop4): Image doesn't support compression [ 198.022635][ T8825] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 198.047014][ T8814] F2FS-fs (loop4): Image doesn't support compression [ 198.054220][ T8814] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4 [ 198.065824][ T8814] F2FS-fs (loop4): invalid crc value [ 198.076162][ T8814] F2FS-fs (loop4): Found nat_bits in checkpoint [ 198.168879][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.228916][ T8814] F2FS-fs (loop4): Start checkpoint disabled! [ 198.298599][ T8814] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 198.338551][ T5775] Bluetooth: hci2: command tx timeout [ 198.614904][ T8838] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.1104'. [ 198.638972][ T8840] hsr0: entered promiscuous mode [ 198.652162][ T8840] macsec2: entered promiscuous mode [ 198.728653][ T994] kworker/u4:6: attempt to access beyond end of device [ 198.728653][ T994] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 198.766550][ T994] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 198.775904][ T994] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 199.033099][ T8847] set_capacity_and_notify: 1 callbacks suppressed [ 199.033115][ T8847] loop2: detected capacity change from 0 to 1024 [ 199.125184][ T8849] loop0: detected capacity change from 0 to 1024 [ 199.136140][ T8849] EXT4-fs: Ignoring removed nobh option [ 199.148463][ T8849] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.187659][ T8849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.337311][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.735215][ T8868] loop0: detected capacity change from 0 to 47 [ 200.057982][ T8876] loop4: detected capacity change from 0 to 1024 [ 200.120305][ T8876] hfsplus: bad catalog entry type [ 200.210812][ T11] hfsplus: b-tree write err: -5, ino 4 [ 200.237087][ T8886] tipc: Enabling of bearer rejected, failed to enable media [ 200.341216][ T8890] loop0: detected capacity change from 0 to 512 [ 200.363964][ T8890] EXT4-fs: Ignoring removed oldalloc option [ 200.432989][ T8890] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.1128: Parent and EA inode have the same ino 15 [ 200.464372][ T8894] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.535532][ T8890] EXT4-fs (loop0): 1 orphan inode deleted [ 200.580364][ T8890] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.595285][ T8898] vlan2: entered promiscuous mode [ 200.600653][ T8898] macvtap0: entered promiscuous mode [ 200.767138][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.815741][ T8904] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 200.823373][ T8904] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 200.838913][ T8904] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 200.845598][ T8904] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 201.390585][ T8926] loop1: detected capacity change from 0 to 128 [ 201.411427][ T8926] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 201.434723][ T8926] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.528366][ T5799] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 201.540729][ T51] Bluetooth: hci0: command 0x0c20 tx timeout [ 201.546916][ T5767] Bluetooth: hci1: command 0x0406 tx timeout [ 201.628112][ T42] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 201.768302][ T5799] usb 3-1: Using ep0 maxpacket: 32 [ 201.792767][ T5799] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 201.799129][ T8939] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1151'. [ 201.819351][ T5799] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 201.830392][ T42] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 201.841601][ T5799] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 201.855754][ T5799] usb 3-1: config 1 has no interface number 0 [ 201.858507][ T42] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 201.867241][ T5799] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 201.889901][ T5799] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 201.892566][ T42] usb 5-1: Product: syz [ 201.910030][ T5799] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 201.921232][ T5799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.925711][ T42] usb 5-1: Manufacturer: syz [ 201.938376][ T42] usb 5-1: SerialNumber: syz [ 201.959001][ T42] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 201.986475][ T5799] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 202.211665][ T5799] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 202.309632][ T8951] tipc: Started in network mode [ 202.314578][ T8951] tipc: Node identity fc, cluster identity 4711 [ 202.322457][ T8951] tipc: Enabling of bearer rejected, failed to enable media [ 202.372705][ T42] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 202.403743][ T42] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 202.612115][ T5799] usb 5-1: USB disconnect, device number 8 [ 202.731970][ T787] usb 3-1: USB disconnect, device number 10 [ 202.754403][ T787] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 202.844764][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1165'. [ 203.718306][ T23] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 203.729088][ T8992] loop1: detected capacity change from 0 to 1024 [ 203.925007][ T3482] hfsplus: b-tree write err: -5, ino 4 [ 203.940088][ T23] usb 3-1: config 0 has an invalid interface number: 90 but max is 0 [ 203.953569][ T23] usb 3-1: config 0 has no interface number 0 [ 203.960589][ T23] usb 3-1: config 0 interface 90 altsetting 0 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 203.965048][ T8998] vlan3: entered promiscuous mode [ 203.978598][ T8998] macvtap0: entered promiscuous mode [ 203.988403][ T23] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=3a.fa [ 204.008470][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.030538][ T23] usb 3-1: Product: syz [ 204.041064][ T23] usb 3-1: Manufacturer: syz [ 204.052452][ T23] usb 3-1: SerialNumber: syz [ 204.068433][ T23] usb 3-1: config 0 descriptor?? [ 204.081973][ T8983] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 204.337948][ T23] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 204.361922][ T23] input: Griffin PowerMate as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.90/input/input13 [ 204.865628][ T9016] loop4: detected capacity change from 0 to 4096 [ 204.882011][ T9016] __ntfs_warning: 7 callbacks suppressed [ 204.882026][ T9016] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 204.935185][ T9016] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 205.003562][ T9016] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 205.042533][ T9016] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 205.067235][ T9016] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 205.076548][ T9016] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 205.158260][ T9016] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 205.165891][ T5847] usb 3-1: USB disconnect, device number 11 [ 205.167175][ C1] powermate: config urb returned -71 [ 205.178211][ C1] powermate: usb_submit_urb(config) failed [ 205.178311][ C1] powermate 3-1:0.90: powermate_irq - usb_submit_urb failed with result: -19 [ 205.194095][ T9021] loop0: detected capacity change from 0 to 512 [ 205.225260][ T9021] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 205.266361][ T9016] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 205.301347][ T9021] EXT4-fs error (device loop0): ext4_orphan_get:1424: comm syz.0.1190: bad orphan inode 131083 [ 205.340222][ T9021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.392868][ T9016] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 205.405088][ T9016] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 205.473981][ T9016] ntfs: volume version 3.1. [ 205.590536][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.986120][ T9034] loop0: detected capacity change from 0 to 256 [ 206.047963][ T9034] exfat: Deprecated parameter 'utf8' [ 206.125491][ T9034] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011d93, chksum : 0x4501cc6b, utbl_chksum : 0xe619d30d) [ 206.665909][ T9059] loop4: detected capacity change from 0 to 256 [ 206.730334][ T9061] loop1: detected capacity change from 0 to 4096 [ 206.783731][ T9059] FAT-fs (loop4): Directory bread(block 64) failed [ 206.804231][ T9059] FAT-fs (loop4): Directory bread(block 65) failed [ 206.818663][ T42] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 206.829931][ T9064] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 206.839579][ T9059] FAT-fs (loop4): Directory bread(block 66) failed [ 206.866305][ T9059] FAT-fs (loop4): Directory bread(block 67) failed [ 206.891141][ T9059] FAT-fs (loop4): Directory bread(block 68) failed [ 206.919451][ T9059] FAT-fs (loop4): Directory bread(block 69) failed [ 206.926227][ T9059] FAT-fs (loop4): Directory bread(block 70) failed [ 206.948550][ T9059] FAT-fs (loop4): Directory bread(block 71) failed [ 206.958950][ T9059] FAT-fs (loop4): Directory bread(block 72) failed [ 206.965606][ T9059] FAT-fs (loop4): Directory bread(block 73) failed [ 207.048312][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 207.074462][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.127739][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.147907][ T42] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 207.167289][ T42] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 207.195173][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.217855][ T42] usb 3-1: config 0 descriptor?? [ 207.897248][ T9072] loop1: detected capacity change from 0 to 65536 [ 207.936855][ T9072] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 207.953174][ T42] microsoft 0003:045E:07DA.000E: No inputs registered, leaving [ 207.964647][ T42] microsoft 0003:045E:07DA.000E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 207.979595][ T42] microsoft 0003:045E:07DA.000E: no inputs found [ 207.986824][ T42] microsoft 0003:045E:07DA.000E: could not initialize ff, continuing anyway [ 208.007685][ T9087] loop4: detected capacity change from 0 to 128 [ 208.017785][ T9087] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 208.087247][ T9072] XFS (loop1): Internal error !xlog_verify_bno(log, 0, nbblks) at line 81 of file fs/xfs/xfs_log_recover.c. Caller xlog_alloc_buffer+0x118/0x200 [ 208.102847][ T9072] CPU: 1 PID: 9072 Comm: syz.1.1214 Not tainted syzkaller #0 [ 208.110265][ T9072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 208.120370][ T9072] Call Trace: [ 208.123708][ T9072] [ 208.126676][ T9072] dump_stack_lvl+0x18c/0x250 [ 208.131418][ T9072] ? show_regs_print_info+0x20/0x20 [ 208.136672][ T9072] ? __phys_addr+0xba/0x170 [ 208.141231][ T9072] ? __kasan_kmalloc_large+0x8b/0xa0 [ 208.146562][ T9072] xfs_corruption_error+0x122/0x170 [ 208.151813][ T9072] ? xlog_alloc_buffer+0x118/0x200 [ 208.156977][ T9072] xlog_alloc_buffer+0x159/0x200 [ 208.162020][ T9072] ? xlog_alloc_buffer+0x118/0x200 [ 208.167161][ T9072] xlog_do_recovery_pass+0x1de/0xdb0 [ 208.172475][ T9072] ? lock_chain_count+0x20/0x20 [ 208.177346][ T9072] ? xlog_do_io+0x360/0x360 [ 208.181887][ T9072] ? xlog_verify_head+0xea/0x430 [ 208.186893][ T9072] ? __kmem_cache_free+0xba/0x1e0 [ 208.191956][ T9072] xlog_verify_head+0x137/0x430 [ 208.196929][ T9072] xlog_find_tail+0x6c4/0xa00 [ 208.201645][ T9072] xlog_recover+0x4c/0x440 [ 208.206093][ T9072] xfs_log_mount+0x2c2/0x470 [ 208.210712][ T9072] xfs_mountfs+0xc58/0x1d40 [ 208.215236][ T9072] ? lockdep_softirqs_off+0x430/0x430 [ 208.220641][ T9072] ? xfs_default_resblks+0x70/0x70 [ 208.225783][ T9072] ? init_timer_key+0x161/0x2a0 [ 208.230670][ T9072] ? rcu_is_watching+0x15/0xb0 [ 208.235456][ T9072] ? trace_xfs_inode_timestamp_range+0x84/0x1d0 [ 208.241718][ T9072] xfs_fs_fill_super+0x112f/0x13a0 [ 208.246862][ T9072] get_tree_bdev+0x3f3/0x520 [ 208.251516][ T9072] ? vfs_parse_fs_string+0x170/0x170 [ 208.256828][ T9072] ? xfs_mount_set_dax_mode+0x100/0x100 [ 208.262394][ T9072] ? setup_bdev_super+0x660/0x660 [ 208.267445][ T9072] ? apparmor_capable+0x137/0x1a0 [ 208.272491][ T9072] ? bpf_lsm_capable+0x9/0x10 [ 208.277193][ T9072] ? security_capable+0x89/0xb0 [ 208.282066][ T9072] vfs_get_tree+0x8c/0x280 [ 208.286509][ T9072] do_new_mount+0x24b/0xa40 [ 208.291037][ T9072] __se_sys_mount+0x2e7/0x3d0 [ 208.295735][ T9072] ? __x64_sys_mount+0xc0/0xc0 [ 208.300527][ T9072] ? lockdep_hardirqs_on+0x98/0x150 [ 208.305747][ T9072] ? __x64_sys_mount+0x20/0xc0 [ 208.310535][ T9072] do_syscall_64+0x55/0xa0 [ 208.315013][ T9072] ? clear_bhb_loop+0x40/0x90 [ 208.319719][ T9072] ? clear_bhb_loop+0x40/0x90 [ 208.324765][ T9072] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.330681][ T9072] RIP: 0033:0x7f40b559d20a [ 208.335212][ T9072] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.354934][ T9072] RSP: 002b:00007f40b64d8e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 208.363364][ T9072] RAX: ffffffffffffffda RBX: 00007f40b64d8ee0 RCX: 00007f40b559d20a [ 208.371398][ T9072] RDX: 0000200000000800 RSI: 0000200000000000 RDI: 00007f40b64d8ea0 [ 208.379389][ T9072] RBP: 0000200000000800 R08: 00007f40b64d8ee0 R09: 0000000003000010 [ 208.387375][ T9072] R10: 0000000003000010 R11: 0000000000000246 R12: 0000200000000000 [ 208.395367][ T9072] R13: 00007f40b64d8ea0 R14: 000000000000b9aa R15: 0000200000000040 [ 208.403374][ T9072] [ 208.408571][ T9072] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 208.418344][ T9072] XFS (loop1): Invalid block length (0x20040) for buffer [ 208.426146][ T9072] XFS (loop1): failed to locate log tail [ 208.432174][ T9072] XFS (loop1): log mount/recovery failed: error -12 [ 208.490124][ T9072] XFS (loop1): log mount failed [ 208.568258][ T42] usb 3-1: USB disconnect, device number 12 [ 208.692861][ T9096] fido_id[9096]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 209.546822][ T9120] program syz.2.1233 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.753315][ T9100] loop1: detected capacity change from 0 to 40427 [ 209.771150][ T9100] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 209.780334][ T9100] F2FS-fs (loop1): Image doesn't support compression [ 209.789280][ T9100] F2FS-fs (loop1): Image doesn't support compression [ 209.810338][ T9100] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 209.847456][ T9100] F2FS-fs (loop1): invalid crc value [ 209.872801][ T9100] F2FS-fs (loop1): Found nat_bits in checkpoint [ 209.908274][ T5799] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 209.937503][ T9129] loop4: detected capacity change from 0 to 4096 [ 209.996163][ T9130] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.033083][ T9100] F2FS-fs (loop1): Start checkpoint disabled! [ 210.051759][ T9129] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 210.070778][ T9100] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 210.110188][ T5799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.141884][ T9129] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 210.163630][ T5799] usb 1-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 210.194128][ T5799] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.223792][ T5799] usb 1-1: config 0 descriptor?? [ 210.465768][ T49] kworker/u4:3: attempt to access beyond end of device [ 210.465768][ T49] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 210.480092][ T49] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 210.487782][ T49] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 210.693763][ T5799] input: HID 28bd:0909 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0909.000F/input/input15 [ 210.778258][ T9139] ax25_connect(): syz.4.1242 uses autobind, please contact jreuter@yaina.de [ 210.822237][ T5799] uclogic 0003:28BD:0909.000F: input,hidraw0: USB HID v0.01 Mouse [HID 28bd:0909] on usb-dummy_hcd.0-1/input0 [ 210.838808][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1243'. [ 210.889940][ T5799] usb 1-1: USB disconnect, device number 5 [ 210.897929][ T9141] syz_tun: entered promiscuous mode [ 210.917195][ T9141] macsec1: entered promiscuous mode [ 210.997116][ T9141] syz_tun: left promiscuous mode [ 211.043259][ T9142] fido_id[9142]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 211.085907][ T9144] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.095254][ T9144] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.233651][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1238'. [ 211.531258][ T9156] loop4: detected capacity change from 0 to 1024 [ 211.597952][ T9153] loop1: detected capacity change from 0 to 8192 [ 211.669688][ T9153] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 211.698738][ T9153] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 211.753062][ T9153] REISERFS (device loop1): using ordered data mode [ 211.767582][ T49] hfsplus: b-tree write err: -5, ino 4 [ 211.770891][ T9153] reiserfs: using flush barriers [ 211.798918][ T9153] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 211.835109][ T9153] REISERFS (device loop1): checking transaction log (loop1) [ 211.845811][ T9153] REISERFS (device loop1): Using r5 hash to sort names [ 211.860179][ T9153] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 212.493573][ T9155] loop2: detected capacity change from 0 to 40427 [ 212.506766][ T9155] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 212.533804][ T9155] F2FS-fs (loop2): Image doesn't support compression [ 212.542050][ T9155] F2FS-fs (loop2): Image doesn't support compression [ 212.549387][ T9155] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 212.558654][ T9155] F2FS-fs (loop2): invalid crc value [ 212.587830][ T9155] F2FS-fs (loop2): Found nat_bits in checkpoint [ 212.669159][ T9155] F2FS-fs (loop2): Start checkpoint disabled! [ 212.701753][ T9155] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 212.703605][ T9176] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 212.741114][ T9176] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 212.861006][ T9176] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 212.867190][ T9176] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 212.915553][ T9176] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 212.935145][ T9176] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 212.964121][ T9176] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 213.001618][ T9176] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 213.032427][ T9176] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 213.072809][ T9176] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 213.133722][ T9176] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 213.140998][ T9196] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 213.231927][ T989] kworker/u4:5: attempt to access beyond end of device [ 213.231927][ T989] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 213.268307][ T989] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 213.286054][ T989] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 213.508235][ T23] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 213.734757][ T5081] Bluetooth: hci0: Unknown advertising packet type: 0x70 [ 213.734852][ T5081] Bluetooth: hci0: adv larger than maximum supported [ 213.745900][ T5081] Bluetooth: hci0: Malformed LE Event: 0x0d [ 213.772853][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 213.780859][ T23] usb 1-1: too many configurations: 151, using maximum allowed: 8 [ 213.790506][ T23] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 213.798270][ T23] usb 1-1: can't read configurations, error -71 [ 213.936330][ T9204] loop1: detected capacity change from 0 to 32768 [ 213.951155][ T9213] loop2: detected capacity change from 0 to 1024 [ 213.967450][ T9204] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1270 (9204) [ 213.995662][ T9204] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 214.007962][ T9204] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 214.022261][ T9204] BTRFS info (device loop1): force zlib compression, level 3 [ 214.031578][ T9204] BTRFS info (device loop1): enabling disk space caching [ 214.040595][ T9204] BTRFS info (device loop1): setting nodatasum [ 214.047185][ T9204] BTRFS info (device loop1): turning off barriers [ 214.066767][ T9204] BTRFS info (device loop1): turning on flush-on-commit [ 214.074204][ T9204] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 214.083628][ T9204] BTRFS info (device loop1): force lzo compression, level 0 [ 214.091134][ T9204] BTRFS info (device loop1): max_inline at 0 [ 214.097235][ T9204] BTRFS info (device loop1): force clearing of disk cache [ 214.104578][ T9204] BTRFS info (device loop1): enabling ssd optimizations [ 214.115700][ T9204] BTRFS info (device loop1): max_inline at 0 [ 214.121800][ T9204] BTRFS info (device loop1): disk space caching is enabled [ 214.160784][ T11] hfsplus: b-tree write err: -5, ino 4 [ 214.208698][ T9204] BTRFS info (device loop1): auto enabling async discard [ 214.244044][ T9204] BTRFS info (device loop1): rebuilding free space tree [ 214.292693][ T9204] BTRFS info (device loop1): disabling free space tree [ 214.308168][ T9204] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 214.338319][ T9204] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 214.577293][ T5773] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 214.743259][ T5081] Bluetooth: hci0: command 0x0c20 tx timeout [ 214.800062][ T9246] loop2: detected capacity change from 0 to 1024 [ 214.807751][ T9246] EXT4-fs: Ignoring removed nobh option [ 214.813439][ T9246] EXT4-fs: Ignoring removed bh option [ 214.824240][ T9246] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 214.898188][ T5081] Bluetooth: hci1: command 0x0406 tx timeout [ 214.988211][ T5775] Bluetooth: hci3: command 0x0c1a tx timeout [ 215.004859][ T9246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.070968][ T5775] Bluetooth: hci2: command 0x0c1a tx timeout [ 215.283374][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.451399][ T9241] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 215.457488][ T9241] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 215.481852][ T9241] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 215.498149][ T9241] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 215.504294][ T9241] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 215.716288][ T9262] team0: Device ip6tnl1 is of different type [ 215.991384][ T9270] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1290'. [ 216.050058][ T9270] erspan0: entered promiscuous mode [ 216.064037][ T9270] erspan0: left promiscuous mode [ 216.107309][ T9253] loop4: detected capacity change from 0 to 32768 [ 216.171069][ T9253] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 216.320184][ T9253] XFS (loop4): Ending clean mount [ 216.339414][ T9253] XFS (loop4): Quotacheck needed: Please wait. [ 216.425627][ T9266] loop1: detected capacity change from 0 to 32768 [ 216.461660][ T9253] XFS (loop4): Quotacheck: Done. [ 216.600792][ T9266] JFS: metapage_get_blocks failed [ 216.651898][ T9266] ERROR: (device loop1): release_metapage: metapage_write_one() failed [ 216.651898][ T9266] [ 216.714574][ T6189] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 216.755175][ T9266] ERROR: (device loop1): remounting filesystem as read-only [ 216.819232][ T5775] Bluetooth: hci0: command 0x0c20 tx timeout [ 216.928272][ T9290] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1297'. [ 216.945156][ T9290] 0: renamed from hsr_slave_1 (while UP) [ 216.961169][ T9290] 0: entered allmulticast mode [ 216.966424][ T9290] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 217.365422][ T9286] loop0: detected capacity change from 0 to 32768 [ 217.400502][ T9286] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop0 scanned by syz.0.1294 (9286) [ 217.457738][ T9286] BTRFS info (device loop0): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 217.473889][ T9286] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 217.487298][ T9286] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 217.515833][ T9286] BTRFS info (device loop0): use lzo compression, level 0 [ 217.533531][ T9297] loop4: detected capacity change from 0 to 4096 [ 217.539094][ T5775] Bluetooth: hci2: command 0x0c1a tx timeout [ 217.545996][ T5775] Bluetooth: hci3: command 0x0c1a tx timeout [ 217.554552][ T5775] Bluetooth: hci1: command 0x0406 tx timeout [ 217.562858][ T9286] BTRFS info (device loop0): using free space tree [ 217.656338][ T9308] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 217.759570][ T9286] BTRFS info (device loop0): enabling ssd optimizations [ 217.766590][ T9286] BTRFS info (device loop0): auto enabling async discard [ 217.818782][ T9317] bridge0: entered promiscuous mode [ 217.824716][ T9317] vlan2: entered promiscuous mode [ 217.856691][ T9317] bridge0: port 3(vlan2) entered blocking state [ 217.885880][ T9317] bridge0: port 3(vlan2) entered disabled state [ 217.906179][ T9317] vlan2: entered allmulticast mode [ 217.918903][ T9317] bridge0: entered allmulticast mode [ 217.945609][ T9317] vlan2: left allmulticast mode [ 217.971188][ T9317] bridge0: left allmulticast mode [ 218.080467][ T5765] BTRFS info (device loop0): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 218.433072][ T5760] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 9 /dev/loop0 scanned by udevd (5760) [ 218.810610][ T9339] netlink: 'syz.4.1311': attribute type 280 has an invalid length. [ 218.898224][ T5775] Bluetooth: hci0: command 0x0c20 tx timeout [ 218.961226][ T9343] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 218.968209][ T9343] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 219.044221][ T9343] vhci_hcd vhci_hcd.0: Device attached [ 219.148628][ T9344] usbip_core: unknown command [ 219.153395][ T9344] vhci_hcd: unknown pdu 0 [ 219.177436][ T9344] usbip_core: unknown command [ 219.228223][ T3482] vhci_hcd: stop threads [ 219.232542][ T3482] vhci_hcd: release socket [ 219.248342][ T3482] vhci_hcd: disconnect device [ 219.309399][ T9328] loop0: detected capacity change from 0 to 32768 [ 219.389423][ T9328] JBD2: Ignoring recovery information on journal [ 219.505100][ T9328] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 219.521637][ T9365] loop2: detected capacity change from 0 to 512 [ 219.529160][ T9365] EXT4-fs: Ignoring removed mblk_io_submit option [ 219.555410][ T9365] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 219.581642][ T9365] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1321: attempt to clear invalid blocks 2 len 1 [ 219.616811][ T9365] EXT4-fs (loop2): Remounting filesystem read-only [ 219.628311][ T5775] Bluetooth: hci3: command 0x0c1a tx timeout [ 219.634515][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 219.646323][ T9365] EXT4-fs (loop2): 1 truncate cleaned up [ 219.654524][ T9365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.701960][ T9365] EXT4-fs: Ignoring removed orlov option [ 219.707759][ T9365] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 219.724353][ T9365] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 219.808433][ T23] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 219.830071][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.919929][ T5765] ocfs2: Unmounting device (7,0) on (node local) [ 220.028943][ T23] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 220.050222][ T23] usb 5-1: config 0 has no interface number 0 [ 220.056496][ T23] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 220.088363][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.109647][ T23] usb 5-1: config 0 descriptor?? [ 220.139637][ T23] usb 5-1: selecting invalid altsetting 1 [ 220.146987][ T23] dvb_ttusb_budget: ttusb_init_controller: error [ 220.181925][ T23] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 220.360301][ T23] DVB: Unable to find symbol cx22700_attach() [ 220.409467][ T9376] loop0: detected capacity change from 0 to 2048 [ 220.443568][ T23] DVB: Unable to find symbol tda10046_attach() [ 220.458433][ T23] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 220.486921][ T23] usb 5-1: USB disconnect, device number 9 [ 220.524915][ T9376] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 220.731125][ T9369] loop1: detected capacity change from 0 to 40427 [ 220.744677][ T9369] F2FS-fs (loop1): invalid crc value [ 220.777465][ T9369] F2FS-fs (loop1): Found nat_bits in checkpoint [ 220.826040][ T9388] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1329'. [ 220.871193][ T9369] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 220.978528][ T5775] Bluetooth: hci0: command 0x0c20 tx timeout [ 221.018159][ T5847] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 221.208139][ T5847] usb 1-1: Using ep0 maxpacket: 16 [ 221.230081][ T5847] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 221.265382][ T5847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.286798][ T5847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.310271][ T5847] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 221.324500][ T5847] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 221.335522][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.367151][ T5847] usb 1-1: config 0 descriptor?? [ 221.698381][ T5775] Bluetooth: hci2: command 0x0c1a tx timeout [ 221.795335][ T5847] samsung 0003:0419:0001.0010: unknown global tag 0xd [ 221.804569][ T5847] samsung 0003:0419:0001.0010: item 0 0 1 13 parsing failed [ 221.828834][ T5847] samsung 0003:0419:0001.0010: parse failed [ 221.844185][ T5847] samsung: probe of 0003:0419:0001.0010 failed with error -22 [ 221.995735][ T9416] loop1: detected capacity change from 0 to 512 [ 222.008075][ T5847] usb 1-1: USB disconnect, device number 8 [ 222.020912][ T9416] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #15: comm syz.1.1342: iget: bad i_size value: 38620345925642 [ 222.039846][ T9416] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.1342: couldn't read orphan inode 15 (err -117) [ 222.064736][ T9416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.112511][ T9416] EXT4-fs error (device loop1): ext4_check_all_de:666: inode #12: block 7: comm syz.1.1342: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=124 fake=0 [ 222.274593][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.928309][ T23] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 223.101956][ T9446] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 223.117762][ T9446] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 223.128347][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 223.149902][ T9446] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 223.155969][ T9446] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 223.167615][ T23] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 223.186673][ T9457] loop0: detected capacity change from 0 to 1024 [ 223.197176][ T9446] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 223.213131][ T23] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 223.226307][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.250391][ T23] usb 5-1: Product: syz [ 223.254629][ T23] usb 5-1: Manufacturer: syz [ 223.264493][ T23] usb 5-1: SerialNumber: syz [ 223.275972][ T9457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 223.298682][ T23] usb 5-1: config 0 descriptor?? [ 223.312023][ T23] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 223.339240][ T9457] ext4 filesystem being mounted at /369/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.372381][ T23] usb 5-1: setting power ON [ 223.377289][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 223.469263][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 223.500175][ T23] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 223.514940][ T9435] dvb-usb: bulk message failed: -22 (3/0) [ 223.529475][ T23] usb 5-1: media controller created [ 223.534814][ T9435] cxusb: i2c wr: len=80 is too big! [ 223.534814][ T9435] [ 223.558780][ T9468] ptrace attach of "./syz-executor exec"[5768] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  "[9468] [ 223.592318][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 223.613455][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 223.656203][ T23] usb 5-1: selecting invalid altsetting 6 [ 223.663844][ T23] usb 5-1: digital interface selection failed (-22) [ 223.687602][ T23] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 223.715959][ T9470] loop1: detected capacity change from 0 to 1024 [ 223.723991][ T23] usb 5-1: setting power OFF [ 223.732186][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 223.754161][ T23] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 223.792501][ T9470] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 223.806397][ T23] (NULL device *): no alternate interface [ 223.832256][ T9470] hfsplus: xattr search failed [ 223.864946][ T9470] hfsplus: can't free extent [ 223.896158][ T23] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 223.936816][ T23] usb 5-1: USB disconnect, device number 10 [ 224.035436][ T9478] loop0: detected capacity change from 0 to 512 [ 224.107099][ T9478] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 224.142682][ T9478] EXT4-fs (loop0): orphan cleanup on readonly fs [ 224.260030][ T9478] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #16: comm syz.0.1371: corrupted inode contents [ 224.348505][ T9478] EXT4-fs (loop0): Remounting filesystem read-only [ 224.374014][ T9478] EXT4-fs (loop0): 1 truncate cleaned up [ 224.394958][ T3482] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 224.431928][ T3482] __quota_error: 9 callbacks suppressed [ 224.431942][ T3482] Quota error (device loop0): write_blk: dquota write failed [ 224.456002][ T9488] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 224.464428][ T9488] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 224.473894][ T3482] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 224.478512][ T9488] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 224.503393][ T3482] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 224.517460][ T9488] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 224.552478][ T9488] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 224.564459][ T3482] Quota error (device loop0): write_blk: dquota write failed [ 224.584874][ T3482] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 224.620573][ T3482] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 224.650597][ T3482] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 224.665293][ T3482] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 224.679839][ T9478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 224.870094][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.888253][ T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 225.013325][ T9487] loop4: detected capacity change from 0 to 32768 [ 225.046312][ T9487] [ 225.046312][ T9487] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.046312][ T9487] [ 225.054559][ T9503] Bluetooth: MGMT ver 1.22 [ 225.096050][ T23] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 225.105230][ T9487] ERROR: (device loop4): diWrite: ixpxd invalid [ 225.105230][ T9487] [ 225.106648][ T9487] ERROR: (device loop4): txCommit: [ 225.106648][ T9487] [ 225.158807][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.182459][ T23] usb 2-1: Product: syz [ 225.198058][ T23] usb 2-1: Manufacturer: syz [ 225.202706][ T23] usb 2-1: SerialNumber: syz [ 225.221117][ T23] usb 2-1: config 0 descriptor?? [ 225.241457][ T23] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 225.278353][ T6189] [ 225.278353][ T6189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.278353][ T6189] [ 225.279240][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 225.324741][ T23] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 225.325753][ T9505] loop0: detected capacity change from 0 to 1024 [ 225.334229][ T6189] [ 225.334229][ T6189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.334229][ T6189] [ 225.361440][ T23] usb 2-1: media controller created [ 225.369321][ T9505] EXT4-fs: Ignoring removed orlov option [ 225.423799][ T9505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.522944][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 225.545026][ T9512] syz.4.1383 uses obsolete (PF_INET,SOCK_PACKET) [ 225.626427][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.819966][ T23] DVB: Unable to find symbol mt352_attach() [ 225.910980][ T9501] loop2: detected capacity change from 0 to 32768 [ 225.929717][ T23] DVB: Unable to find symbol nxt6000_attach() [ 225.938433][ T23] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 225.969589][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 225.986144][ T9501] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 226.001116][ T23] dvb-usb: schedule remote query interval to 1000 msecs. [ 226.028214][ T23] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 226.048813][ T23] dvb-usb: bulk message failed: -22 (7/0) [ 226.054994][ T23] dvb-usb: bulk message failed: -22 (7/0) [ 226.097607][ T23] usb 2-1: USB disconnect, device number 10 [ 226.235777][ T9501] XFS (loop2): Ending clean mount [ 226.262594][ T23] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 226.322526][ T9501] XFS (loop2): Quotacheck needed: Please wait. [ 226.434127][ T5775] Bluetooth: hci0: command 0x0c20 tx timeout [ 226.493966][ T9501] XFS (loop2): Quotacheck: Done. [ 226.499160][ T5775] Bluetooth: hci1: command 0x0406 tx timeout [ 226.578289][ T5775] Bluetooth: hci2: command 0x0c1a tx timeout [ 226.579504][ T5081] Bluetooth: hci3: command 0x0c1a tx timeout [ 226.648000][ T9514] loop4: detected capacity change from 0 to 32768 [ 226.686224][ T9514] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 226.727562][ T9514] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 226.854730][ T5768] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 226.938670][ T6189] ocfs2: Unmounting device (7,4) on (node local) [ 227.039978][ T9545] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 227.121139][ T9533] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 227.127676][ T9533] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 227.142483][ T9533] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 227.149719][ T9533] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 227.162767][ T9533] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 227.424078][ T9550] loop4: detected capacity change from 0 to 4096 [ 227.453372][ T9550] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 227.472705][ T9550] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 227.517735][ T9550] ntfs3: loop4: ino=1e, "file1" The size of extended attributes must not exceed 64KiB [ 227.696219][ T9562] loop0: detected capacity change from 0 to 1024 [ 227.727427][ T9562] EXT4-fs: Ignoring removed bh option [ 227.804854][ T9562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.887002][ T9562] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 227.916849][ T9568] loop4: detected capacity change from 0 to 512 [ 228.006104][ T9568] EXT4-fs (loop4): orphan cleanup on readonly fs [ 228.042171][ T9568] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #4: comm syz.4.1403: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 228.070103][ T9568] EXT4-fs error (device loop4): ext4_quota_enable:7143: comm syz.4.1403: Bad quota inode: 4, type: 1 [ 228.122274][ T9568] EXT4-fs warning (device loop4): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 228.176893][ T9568] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 228.194874][ T9568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 228.211884][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.318634][ T9568] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 228.343498][ T9561] loop1: detected capacity change from 0 to 32768 [ 228.383811][ T9568] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #4: comm syz.4.1403: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 228.439847][ T9568] EXT4-fs error (device loop4): ext4_quota_enable:7143: comm syz.4.1403: Bad quota inode: 4, type: 1 [ 228.472904][ T9568] EXT4-fs warning (device loop4): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 228.498949][ T5775] Bluetooth: hci0: command 0x0c20 tx timeout [ 228.634063][ T6189] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.784559][ T9582] smc: net device wlan0 applied user defined pnetid SYZ0 [ 229.016144][ T9586] loop0: detected capacity change from 0 to 4096 [ 229.094671][ T9586] NILFS (loop0): invalid segment: Checksum error in segment payload [ 229.126877][ T9586] NILFS (loop0): trying rollback from an earlier position [ 229.157737][ T9586] NILFS (loop0): recovery complete [ 229.218635][ T5775] Bluetooth: hci2: command 0x0c1a tx timeout [ 229.221008][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 229.224790][ T5775] Bluetooth: hci1: command 0x0406 tx timeout [ 229.273311][ T9595] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 229.326200][ T9599] loop4: detected capacity change from 0 to 64 [ 229.350667][ T9601] loop2: detected capacity change from 0 to 64 [ 229.437605][ T9601] hfs: request for non-existent node 1280 in B*Tree [ 229.460601][ T9601] hfs: request for non-existent node 1280 in B*Tree [ 229.617438][ T49] ------------[ cut here ]------------ [ 229.623144][ T49] kernel BUG at fs/hfs/inode.c:449! [ 229.658218][ T49] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 229.664363][ T49] CPU: 1 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 229.671765][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 229.681851][ T49] Workqueue: writeback wb_workfn (flush-7:2) [ 229.687876][ T49] RIP: 0010:hfs_write_inode+0x87a/0x880 [ 229.693447][ T49] Code: c7 c1 00 93 30 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 93 30 97 e8 b0 0f 84 ff e9 62 fe ff ff e8 b6 e6 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 [ 229.713083][ T49] RSP: 0018:ffffc90000ba7340 EFLAGS: 00010293 [ 229.719205][ T49] RAX: ffffffff825b2cea RBX: ffff88802664a228 RCX: ffff88801b6f0000 [ 229.727209][ T49] RDX: 0000000000000000 RSI: ffffffff8d339760 RDI: 0000000000000000 [ 229.735226][ T49] RBP: ffffc90000ba74d0 R08: ffff88801b6f0000 R09: 0000000000000003 [ 229.743252][ T49] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 229.751292][ T49] R13: 1ffff92000174e6c R14: ffff88802664a1d8 R15: 0000000000000000 [ 229.759290][ T49] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 229.768249][ T49] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 229.774869][ T49] CR2: 00007fc3d65e7198 CR3: 0000000065ab2000 CR4: 00000000003506e0 [ 229.782880][ T49] Call Trace: [ 229.786176][ T49] [ 229.789128][ T49] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 229.794537][ T49] ? __rwlock_init+0x150/0x150 [ 229.799364][ T49] __writeback_single_inode+0x705/0xec0 [ 229.804950][ T49] writeback_sb_inodes+0x7cd/0xf50 [ 229.810125][ T49] ? queue_io+0x550/0x550 [ 229.814511][ T49] ? rcu_is_watching+0x15/0xb0 [ 229.819320][ T49] wb_writeback+0x46a/0xbf0 [ 229.823872][ T49] ? queue_io+0x351/0x550 [ 229.828238][ T49] ? percpu_ref_tryget+0x250/0x250 [ 229.833377][ T49] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 229.839388][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 229.844622][ T49] wb_workfn+0x400/0xe60 [ 229.848899][ T49] ? try_to_wake_up+0x70a/0x1190 [ 229.853869][ T49] ? inode_wait_for_writeback+0x230/0x230 [ 229.859632][ T49] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 229.865658][ T49] ? read_lock_is_recursive+0x20/0x20 [ 229.871094][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 229.876364][ T49] ? process_scheduled_works+0x96f/0x15d0 [ 229.882127][ T49] ? process_scheduled_works+0x96f/0x15d0 [ 229.887875][ T49] process_scheduled_works+0xa5d/0x15d0 [ 229.893464][ T49] ? assign_work+0x430/0x430 [ 229.898103][ T49] ? assign_work+0x3d0/0x430 [ 229.902747][ T49] worker_thread+0xa55/0xfc0 [ 229.907379][ T49] kthread+0x2fa/0x390 [ 229.911466][ T49] ? pr_cont_work+0x560/0x560 [ 229.916160][ T49] ? kthread_blkcg+0xd0/0xd0 [ 229.920865][ T49] ret_from_fork+0x48/0x80 [ 229.925354][ T49] ? kthread_blkcg+0xd0/0xd0 [ 229.929963][ T49] ret_from_fork_asm+0x11/0x20 [ 229.934768][ T49] [ 229.937796][ T49] Modules linked in: [ 229.941749][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.968067][ T49] ---[ end trace 0000000000000000 ]--- [ 229.973589][ T49] RIP: 0010:hfs_write_inode+0x87a/0x880 [ 229.981234][ T49] Code: c7 c1 00 93 30 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 93 30 97 e8 b0 0f 84 ff e9 62 fe ff ff e8 b6 e6 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 [ 230.001334][ T49] RSP: 0018:ffffc90000ba7340 EFLAGS: 00010293 [ 230.007741][ T49] RAX: ffffffff825b2cea RBX: ffff88802664a228 RCX: ffff88801b6f0000 [ 230.024180][ T49] RDX: 0000000000000000 RSI: ffffffff8d339760 RDI: 0000000000000000 [ 230.038133][ T49] RBP: ffffc90000ba74d0 R08: ffff88801b6f0000 R09: 0000000000000003 [ 230.046164][ T49] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 230.060757][ T49] R13: 1ffff92000174e6c R14: ffff88802664a1d8 R15: 0000000000000000 [ 230.070690][ T49] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 230.079840][ T49] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.086470][ T49] CR2: 0000000000000000 CR3: 0000000030dab000 CR4: 00000000003506e0 [ 230.094763][ T49] Kernel panic - not syncing: Fatal exception [ 230.101450][ T49] Kernel Offset: disabled [ 230.105778][ T49] Rebooting in 86400 seconds..