last executing test programs: 4.15939465s ago: executing program 4 (id=1491): r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380040, @empty}, 0x1c) 3.949804897s ago: executing program 4 (id=1495): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.683609569s ago: executing program 4 (id=1500): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) r0 = socket(0x2b, 0x1, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x11e, 0x1, 0x0, 0x20000000) 3.443158359s ago: executing program 4 (id=1504): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) 3.149856203s ago: executing program 4 (id=1511): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0xa, &(0x7f00001c9fff)="03", 0x19) 2.195130871s ago: executing program 1 (id=1523): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], &(0x7f00000015c0)=""/4096, 0x26, 0x1000, 0x1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r0, 0xffffffffffffff63, &(0x7f0000002600)}, 0x10) 1.979258829s ago: executing program 1 (id=1526): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) getsockopt$inet_opts(r0, 0x0, 0x4, 0xfffffffffffffffe, &(0x7f0000000200)) 1.747579177s ago: executing program 2 (id=1528): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x0) listen(r0, 0x0) 1.629976767s ago: executing program 1 (id=1529): syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='mnt\x00', 0x3a0c412, &(0x7f0000000b00)=ANY=[@ANYBLOB='unhide,norock,map=normal,block=0x0000000000000800,cruft,norock,check=strict,hide,unhide,sbsector=0x0000000000000001,sbsector=0x0000000000000\x00\x00\x00\x00\x00\x00\x00\x00arset=ascii,,'], 0xff, 0x9be, &(0x7f0000000e00)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000d80)={0x2020}, 0x2020) 1.428044823s ago: executing program 0 (id=1531): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) 1.379417687s ago: executing program 2 (id=1532): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/32, 0x20}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/179, 0xb3}], 0x1, 0x5, 0x0) 1.379165237s ago: executing program 3 (id=1533): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x34000}], 0x1}], 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000200)="b1", 0x1}], 0x1}}], 0x1, 0x0) 1.176733834s ago: executing program 2 (id=1534): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1, 0x1534, &(0x7f0000001f80)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x1451c2, 0x0) ftruncate(r0, 0x2007ffb) 1.159039396s ago: executing program 0 (id=1535): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x4, 0x3f, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000140), 0x1000, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000580)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x5, r0}, 0x38) 1.118209009s ago: executing program 3 (id=1536): r0 = eventfd2(0x0, 0x1) write$eventfd(r0, &(0x7f0000000140)=0xfffffffffffffffb, 0x8) read$eventfd(r0, &(0x7f0000000000), 0x8) 988.672749ms ago: executing program 1 (id=1537): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@dmask={'dmask', 0x3d, 0x9}}, {@gid={'gid', 0x3d, 0xee00}}, {@errors_remount}, {@errors_remount}, {@errors_remount}, {@gid}, {@errors_continue}]}, 0x5, 0x1510, &(0x7f00000037c0)="$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") r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 934.853214ms ago: executing program 3 (id=1538): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0xe8, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0xd4, 0xe, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0xb4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x7}}]}]}]}, 0xe8}}, 0x0) 891.324087ms ago: executing program 4 (id=1539): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000881dcb08c70b0500bbf4010203010902240001000000000904"], 0x0) 752.751759ms ago: executing program 2 (id=1540): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f043}) ppoll(&(0x7f0000000300)=[{r0, 0x2007}], 0x1, 0x0, 0x0, 0x0) 673.836505ms ago: executing program 3 (id=1541): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_setup(0x9, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000002540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 673.244575ms ago: executing program 0 (id=1542): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000180)={'icmp\x00'}, &(0x7f00000001c0)=0x1e) 560.826425ms ago: executing program 1 (id=1543): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x8, 0x4, 0x2}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f0000000200), 0x0}, 0x20) 536.813687ms ago: executing program 2 (id=1544): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f00000001c0)=""/200, 0xc8, 0x0) pread64(r0, &(0x7f0000000ac0)=""/4096, 0x1000, 0xb) 497.91955ms ago: executing program 0 (id=1545): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x5, 0x0, 0x0, 0xa}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 369.62115ms ago: executing program 3 (id=1546): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200400, &(0x7f0000000200)=ANY=[@ANYRES8=0x0], 0x3, 0xa73, &(0x7f0000003cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086e8b, 0x0) 339.451122ms ago: executing program 2 (id=1547): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080)=0x2d, 0x4) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @fixed}, 0xe) 335.842193ms ago: executing program 0 (id=1548): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000300)=ANY=[@ANYBLOB="696f636861727365743d63703737352c747970653d56a167c12c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653d9d4b95982c756d61736b3d30303030303030303030303030303030303030303031302c71756965742c747970653d66cd3f232c66696c655f756d61736b3d30303030303030303030303030303030303030303030332c00"], 0x4, 0x322, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000540)=""/239, 0xef) 38.235647ms ago: executing program 0 (id=1549): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x1, r0, 0x0, 0x4100000e, 0x0) 22.520868ms ago: executing program 1 (id=1550): r0 = fsopen(&(0x7f00000001c0)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='user\x00N\xac]\x86\x8a\xa3\x7f\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000040)='\xe5', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f00000000c0)='\x00', 0x0) 0s ago: executing program 3 (id=1551): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x20108c0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0xfe, 0x619d, &(0x7f00000012c0)="$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") r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000000c0)={0xf010004, 0x9, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f906}}) kernel console output (not intermixed with test programs): ectors = 8388600 limit=2048 [ 137.391873][ T3643] Bluetooth: hci6: command tx timeout [ 137.399844][ T5365] syz.4.580: attempt to access beyond end of device [ 137.399844][ T5365] loop4: rw=3, sector=3261076638608, nr_sectors = 8388600 limit=2048 [ 137.411536][ T5689] loop2: detected capacity change from 0 to 4096 [ 137.420935][ T3926] syz.1.81: attempt to access beyond end of device [ 137.420935][ T3926] loop1: rw=3, sector=10200260776208, nr_sectors = 8388600 limit=2048 [ 137.436021][ T3689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.437423][ T5689] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 137.470586][ T5365] syz.4.580: attempt to access beyond end of device [ 137.470586][ T5365] loop4: rw=3, sector=3261085027208, nr_sectors = 8388600 limit=2048 [ 137.471696][ T3926] syz.1.81: attempt to access beyond end of device [ 137.471696][ T3926] loop1: rw=3, sector=10200269164808, nr_sectors = 8388600 limit=2048 [ 137.495031][ T5365] syz.4.580: attempt to access beyond end of device [ 137.495031][ T5365] loop4: rw=3, sector=3261093415808, nr_sectors = 8388600 limit=2048 [ 137.502830][ T3926] syz.1.81: attempt to access beyond end of device [ 137.502830][ T3926] loop1: rw=3, sector=10200277553408, nr_sectors = 8388600 limit=2048 [ 137.533071][ T5365] syz.4.580: attempt to access beyond end of device [ 137.533071][ T5365] loop4: rw=3, sector=3261101804408, nr_sectors = 8388600 limit=2048 [ 137.569864][ T5689] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 137.611177][ T5689] ntfs3: loop2: Failed to load $Extend. [ 137.662021][ T3689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.008939][ T5695] xt_l2tp: v2 sid > 0xffff: 262144 [ 138.167549][ T5697] netlink: 'syz.2.681': attribute type 1 has an invalid length. [ 138.737511][ T3689] bond0 (unregistering): Released all slaves [ 138.945034][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.956065][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.066089][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.117571][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.139105][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.224948][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.232053][ T3643] Bluetooth: hci2: command tx timeout [ 139.319707][ T5594] device hsr_slave_0 entered promiscuous mode [ 139.339716][ T5594] device hsr_slave_1 entered promiscuous mode [ 139.361107][ T5594] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.379507][ T5594] Cannot create hsr debugfs directory [ 139.471797][ T3643] Bluetooth: hci6: command tx timeout [ 139.485825][ T5599] device hsr_slave_0 entered promiscuous mode [ 139.539486][ T5599] device hsr_slave_1 entered promiscuous mode [ 139.670734][ T5599] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.689752][ T5599] Cannot create hsr debugfs directory [ 140.041101][ T5729] loop3: detected capacity change from 0 to 512 [ 140.167022][ T5729] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 140.241702][ T5729] System zones: 0-2, 18-18, 34-35 [ 140.324154][ T5729] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 140.354670][ T5729] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038 (0x7fffffff) [ 140.461973][ T5729] EXT4-fs warning (device loop3): verify_group_input:169: Last group not full [ 140.608857][ T3634] EXT4-fs (loop3): unmounting filesystem. [ 141.153283][ T5748] netlink: 'syz.3.689': attribute type 10 has an invalid length. [ 141.161061][ T5748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.689'. [ 141.251390][ T5727] loop2: detected capacity change from 0 to 32768 [ 141.386674][ T5594] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 141.463128][ T5594] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 141.502614][ T5594] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 141.571053][ T5594] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 141.784898][ T5599] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.973746][ T5599] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.259276][ T5599] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.332136][ T5365] bio_check_eod: 185416 callbacks suppressed [ 142.332154][ T5365] syz.4.580: attempt to access beyond end of device [ 142.332154][ T5365] loop4: rw=3, sector=4147047016208, nr_sectors = 8388600 limit=2048 [ 142.355272][ T3926] syz.1.81: attempt to access beyond end of device [ 142.355272][ T3926] loop1: rw=3, sector=10928500308008, nr_sectors = 8388600 limit=2048 [ 142.414204][ T5365] syz.4.580: attempt to access beyond end of device [ 142.414204][ T5365] loop4: rw=3, sector=4147055404808, nr_sectors = 8388600 limit=2048 [ 142.443759][ T3926] syz.1.81: attempt to access beyond end of device [ 142.443759][ T3926] loop1: rw=3, sector=10928508696608, nr_sectors = 8388600 limit=2048 [ 142.458976][ T5365] syz.4.580: attempt to access beyond end of device [ 142.458976][ T5365] loop4: rw=3, sector=4147063793408, nr_sectors = 8388600 limit=2048 [ 142.482222][ T5365] syz.4.580: attempt to access beyond end of device [ 142.482222][ T5365] loop4: rw=3, sector=4147072182008, nr_sectors = 8388600 limit=2048 [ 142.499309][ T5599] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.541811][ T5365] syz.4.580: attempt to access beyond end of device [ 142.541811][ T5365] loop4: rw=3, sector=4147080570608, nr_sectors = 8388600 limit=2048 [ 142.584871][ T5365] syz.4.580: attempt to access beyond end of device [ 142.584871][ T5365] loop4: rw=3, sector=4147088959208, nr_sectors = 8388600 limit=2048 [ 142.603029][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.630926][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.641665][ T3926] syz.1.81: attempt to access beyond end of device [ 142.641665][ T3926] loop1: rw=3, sector=10928517085208, nr_sectors = 8388600 limit=2048 [ 142.676143][ T5365] syz.4.580: attempt to access beyond end of device [ 142.676143][ T5365] loop4: rw=3, sector=4147097347808, nr_sectors = 8388600 limit=2048 [ 142.680118][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.743551][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.772740][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.815327][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.857687][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.864873][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.929659][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.019972][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.050937][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.112237][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.119358][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.161961][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.212369][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.255489][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.296191][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.387275][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.412632][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.464106][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.496471][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.532680][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.575677][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.590790][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.607105][ T5594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.648909][ T5599] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 143.686319][ T5599] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 143.741971][ T5599] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 143.781686][ T5599] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 143.821841][ T4020] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 144.046113][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.072152][ T4020] usb 2-1: Using ep0 maxpacket: 32 [ 144.098080][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.113591][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.166710][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.191553][ T5598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.211976][ T4020] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 144.236103][ T5598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.262400][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.269557][ T5598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.293941][ T5598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.361181][ T5598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.371865][ T5598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.399076][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.406261][ T5598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.445860][ T5598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.458368][ T4020] usb 2-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 144.476507][ T4020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.491864][ T5598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.502094][ T4020] usb 2-1: Product: syz [ 144.506271][ T4020] usb 2-1: Manufacturer: syz [ 144.521284][ T5598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.529862][ T4020] usb 2-1: SerialNumber: syz [ 144.535750][ T5598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.563669][ T5598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.576228][ T5598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.592550][ T5598] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.624119][ T4020] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input17 [ 144.625312][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.652075][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.660735][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.691488][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.707899][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.753893][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.770456][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.788393][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.818833][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.842862][ T3076] bcm5974 2-1:1.0: could not read from device [ 144.868513][ T4020] usb 2-1: USB disconnect, device number 6 [ 144.891808][ T3076] bcm5974 2-1:1.0: could not read from device [ 144.903477][ T5599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 144.954743][ T5598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.979066][ T5598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 145.014287][ T5594] device veth0_vlan entered promiscuous mode [ 145.028106][ T5598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 145.055530][ T5598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 145.087898][ T5594] device veth1_vlan entered promiscuous mode [ 145.189328][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 145.198569][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 145.243691][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 145.273076][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.312363][ T5594] device veth0_macvtap entered promiscuous mode [ 145.352061][ T5594] device veth1_macvtap entered promiscuous mode [ 145.414416][ T5594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.451369][ T5594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.472879][ T5594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.503090][ T5594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.552341][ T5594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.570760][ T5594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.642915][ T5594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.684103][ T5594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.722313][ T5594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.768537][ T5594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.810553][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.819571][ T5835] loop3: detected capacity change from 0 to 4096 [ 145.839940][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 145.854158][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 145.891238][ T5835] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 145.907271][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 145.937274][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 145.965271][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.989382][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.000593][ T5835] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 146.021498][ T5594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.051704][ T5594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.078883][ T5594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.133496][ T5594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.171665][ T5594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.221641][ T5594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.281624][ T5594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.322866][ T5594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.352048][ T5594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.381638][ T5594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.392086][ T46] ntfs3: loop3: ntfs3_write_inode r=5 failed, -22. [ 146.408242][ T3634] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 146.418734][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.491192][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.514205][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 146.552311][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.595320][ T5594] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.631713][ T5594] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.660756][ T5594] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.712513][ T5594] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.012711][ T4286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.032328][ T4286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.113273][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 147.131311][ T5862] loop3: detected capacity change from 0 to 2048 [ 147.153251][ T5833] loop2: detected capacity change from 0 to 32768 [ 147.189043][ T5833] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 147.196417][ T4286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.219791][ T5833] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 147.234120][ T4286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.240286][ T5862] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 147.252002][ T5862] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038 (0x7fffffff) [ 147.296489][ T5833] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 147.342925][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 147.385875][ T4020] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 147.393509][ T4020] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 147.402069][ T5365] bio_check_eod: 152639 callbacks suppressed [ 147.402083][ T5365] syz.4.580: attempt to access beyond end of device [ 147.402083][ T5365] loop4: rw=3, sector=4863156632408, nr_sectors = 8388600 limit=2048 [ 147.402233][ T3926] syz.1.81: attempt to access beyond end of device [ 147.402233][ T3926] loop1: rw=3, sector=11513982645008, nr_sectors = 8388600 limit=2048 [ 147.408782][ T5365] syz.4.580: attempt to access beyond end of device [ 147.408782][ T5365] loop4: rw=3, sector=4863165021008, nr_sectors = 8388600 limit=2048 [ 147.462784][ T5598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 147.472707][ T5598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 147.491911][ T3926] syz.1.81: attempt to access beyond end of device [ 147.491911][ T3926] loop1: rw=3, sector=11513991033608, nr_sectors = 8388600 limit=2048 [ 147.533411][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 147.555230][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 147.577521][ T3926] syz.1.81: attempt to access beyond end of device [ 147.577521][ T3926] loop1: rw=3, sector=11513999422208, nr_sectors = 8388600 limit=2048 [ 147.584699][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 147.615704][ T5365] syz.4.580: attempt to access beyond end of device [ 147.615704][ T5365] loop4: rw=3, sector=4863173409608, nr_sectors = 8388600 limit=2048 [ 147.616489][ T3634] EXT4-fs (loop3): unmounting filesystem. [ 147.631997][ T4020] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 238ms [ 147.647305][ T4020] gfs2: fsid=syz:syz.0: jid=0: Done [ 147.653052][ T3926] syz.1.81: attempt to access beyond end of device [ 147.653052][ T3926] loop1: rw=3, sector=11514007810808, nr_sectors = 8388600 limit=2048 [ 147.657188][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 147.668169][ T5833] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 147.683410][ T5365] syz.4.580: attempt to access beyond end of device [ 147.683410][ T5365] loop4: rw=3, sector=4863181798208, nr_sectors = 8388600 limit=2048 [ 147.701208][ T5365] syz.4.580: attempt to access beyond end of device [ 147.701208][ T5365] loop4: rw=3, sector=4863190186808, nr_sectors = 8388600 limit=2048 [ 147.744835][ T5599] device veth0_vlan entered promiscuous mode [ 147.746836][ T3926] syz.1.81: attempt to access beyond end of device [ 147.746836][ T3926] loop1: rw=3, sector=11514016199408, nr_sectors = 8388600 limit=2048 [ 147.803942][ T5599] device veth1_vlan entered promiscuous mode [ 147.843471][ T4623] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 147.870985][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 147.908382][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 148.002460][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.022421][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.043718][ T5599] device veth0_macvtap entered promiscuous mode [ 148.090245][ T4623] usb 1-1: Using ep0 maxpacket: 16 [ 148.095675][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 148.126703][ T5599] device veth1_macvtap entered promiscuous mode [ 148.204940][ T5599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.241697][ T5599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.282484][ T5599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.321907][ T5599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.351822][ T5599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.371880][ T4623] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 148.380940][ T4623] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.392402][ T5599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.421625][ T5599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.429656][ T4623] usb 1-1: Product: syz [ 148.451714][ T5599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.454150][ T4623] usb 1-1: Manufacturer: syz [ 148.503171][ T5886] loop3: detected capacity change from 0 to 512 [ 148.519710][ T4623] usb 1-1: SerialNumber: syz [ 148.521636][ T5599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.551722][ T5599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.555913][ T4623] usb 1-1: config 0 descriptor?? [ 148.578946][ T5888] loop2: detected capacity change from 0 to 64 [ 148.595589][ T5886] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 148.632722][ T5599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.688477][ T5599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.706456][ T5886] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.725: corrupted in-inode xattr [ 148.727580][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.736622][ T5886] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 148.758375][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.770055][ T5886] EXT4-fs (loop3): 1 truncate cleaned up [ 148.790335][ T5886] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 148.808095][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.851747][ T4623] peak_usb 1-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 148.883523][ T5599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.914335][ T5599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.968404][ T5599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.986932][ T5599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.009318][ T5599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.061549][ T5599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.072901][ T4623] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 149.079709][ T4623] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 149.096758][ T4623] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 149.106812][ T5599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.126740][ T5599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.140165][ T5599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.171257][ T5599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.191239][ T5599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.211671][ T5599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.251115][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.261130][ T3634] EXT4-fs (loop3): unmounting filesystem. [ 149.427186][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.442505][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.462787][ T4623] peak_usb: probe of 1-1:0.0 failed with error -22 [ 149.488490][ T4623] usb 1-1: USB disconnect, device number 12 [ 149.497401][ T5599] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.551377][ T5599] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.596508][ T5599] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.620203][ T5599] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.643321][ T5905] netlink: 'syz.3.718': attribute type 3 has an invalid length. [ 149.655089][ T5906] loop2: detected capacity change from 0 to 4096 [ 149.799991][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.840163][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.901438][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 149.924868][ T4286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.943371][ T4286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.978335][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 151.036401][ T5945] netlink: 'syz.4.737': attribute type 3 has an invalid length. [ 151.415805][ T5921] loop2: detected capacity change from 0 to 32768 [ 151.547871][ T5921] XFS (loop2): Mounting V5 Filesystem [ 151.741346][ T5921] XFS (loop2): Ending clean mount [ 151.942949][ T3641] XFS (loop2): Unmounting Filesystem [ 152.330216][ T5943] loop0: detected capacity change from 0 to 32768 [ 152.371838][ T5943] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 152.411742][ T3926] bio_check_eod: 119373 callbacks suppressed [ 152.411758][ T3926] syz.1.81: attempt to access beyond end of device [ 152.411758][ T3926] loop1: rw=3, sector=11884624547408, nr_sectors = 8388600 limit=2048 [ 152.417574][ T5943] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 152.419875][ T5365] syz.4.580: attempt to access beyond end of device [ 152.419875][ T5365] loop4: rw=3, sector=5511679298408, nr_sectors = 8388600 limit=2048 [ 152.466225][ T3926] syz.1.81: attempt to access beyond end of device [ 152.466225][ T3926] loop1: rw=3, sector=11884632936008, nr_sectors = 8388600 limit=2048 [ 152.492458][ T5365] syz.4.580: attempt to access beyond end of device [ 152.492458][ T5365] loop4: rw=3, sector=5511687687008, nr_sectors = 8388600 limit=2048 [ 152.494172][ T3926] syz.1.81: attempt to access beyond end of device [ 152.494172][ T3926] loop1: rw=3, sector=11884641324608, nr_sectors = 8388600 limit=2048 [ 152.521711][ T5365] syz.4.580: attempt to access beyond end of device [ 152.521711][ T5365] loop4: rw=3, sector=5511696075608, nr_sectors = 8388600 limit=2048 [ 152.521753][ T5365] syz.4.580: attempt to access beyond end of device [ 152.521753][ T5365] loop4: rw=3, sector=5511704464208, nr_sectors = 8388600 limit=2048 [ 152.543157][ T3926] syz.1.81: attempt to access beyond end of device [ 152.543157][ T3926] loop1: rw=3, sector=11884649713208, nr_sectors = 8388600 limit=2048 [ 152.554194][ T5943] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 152.588702][ T3926] syz.1.81: attempt to access beyond end of device [ 152.588702][ T3926] loop1: rw=3, sector=11884658101808, nr_sectors = 8388600 limit=2048 [ 152.602279][ T5365] syz.4.580: attempt to access beyond end of device [ 152.602279][ T5365] loop4: rw=3, sector=5511712852808, nr_sectors = 8388600 limit=2048 [ 152.619295][ T3682] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 152.662350][ T3682] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 152.778314][ T3682] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 115ms [ 152.797926][ T3682] gfs2: fsid=syz:syz.0: jid=0: Done [ 152.818063][ T5943] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 152.958145][ T5966] loop3: detected capacity change from 0 to 32768 [ 153.118546][ T5966] XFS (loop3): Mounting V5 Filesystem [ 153.282187][ T5966] XFS (loop3): Ending clean mount [ 153.335188][ T5966] XFS (loop3): Quotacheck needed: Please wait. [ 153.375116][ T5966] XFS (loop3): Quotacheck: Done. [ 153.490794][ T5999] loop2: detected capacity change from 0 to 1024 [ 153.536179][ T5999] hfsplus: invalid uid specified [ 153.552395][ T3634] XFS (loop3): Unmounting Filesystem [ 153.570046][ T5999] hfsplus: unable to parse mount options [ 154.061670][ T5484] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 154.112070][ T3636] Bluetooth: hci6: command tx timeout [ 154.301743][ T5484] usb 3-1: Using ep0 maxpacket: 8 [ 154.421990][ T5484] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 154.430114][ T5484] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.468525][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.762'. [ 154.493980][ T5484] usb 3-1: config 0 has no interface number 0 [ 154.514741][ T5484] usb 3-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 154.548422][ T5484] usb 3-1: config 0 interface 52 has no altsetting 0 [ 154.568683][ T5484] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 154.599045][ T5484] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.638107][ T5484] usb 3-1: config 0 descriptor?? [ 154.914991][ T5484] usb 3-1: Can not set alternate setting to 1, error: -71 [ 154.933505][ T5484] synaptics_usb: probe of 3-1:0.52 failed with error -71 [ 154.952532][ T5484] usb 3-1: USB disconnect, device number 13 [ 155.585149][ T6021] loop3: detected capacity change from 0 to 32768 [ 155.647287][ T6021] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 155.686142][ T6021] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 155.722200][ T6021] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 155.747043][ T5484] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 155.754019][ T5484] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 155.867026][ T5484] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 113ms [ 155.903568][ T5484] gfs2: fsid=syz:syz.0: jid=0: Done [ 155.908826][ T6021] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 156.402582][ T6028] loop0: detected capacity change from 0 to 32768 [ 156.775918][ T6034] loop2: detected capacity change from 0 to 32768 [ 157.168940][ T6048] loop3: detected capacity change from 0 to 4096 [ 157.205262][ T6048] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 157.423675][ T3926] bio_check_eod: 118966 callbacks suppressed [ 157.423696][ T3926] syz.1.81: attempt to access beyond end of device [ 157.423696][ T3926] loop1: rw=3, sector=12305707101608, nr_sectors = 8388600 limit=2048 [ 157.451718][ T5365] syz.4.580: attempt to access beyond end of device [ 157.451718][ T5365] loop4: rw=3, sector=6112680545408, nr_sectors = 8388600 limit=2048 [ 157.493945][ T3634] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 157.509686][ T3634] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 157.511699][ T3926] syz.1.81: attempt to access beyond end of device [ 157.511699][ T3926] loop1: rw=3, sector=12305715490208, nr_sectors = 8388600 limit=2048 [ 157.540651][ T3634] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 157.541336][ T5365] syz.4.580: attempt to access beyond end of device [ 157.541336][ T5365] loop4: rw=3, sector=6112688934008, nr_sectors = 8388600 limit=2048 [ 157.570367][ T3926] syz.1.81: attempt to access beyond end of device [ 157.570367][ T3926] loop1: rw=3, sector=12305723878808, nr_sectors = 8388600 limit=2048 [ 157.595548][ T5365] syz.4.580: attempt to access beyond end of device [ 157.595548][ T5365] loop4: rw=3, sector=6112697322608, nr_sectors = 8388600 limit=2048 [ 157.662273][ T5365] syz.4.580: attempt to access beyond end of device [ 157.662273][ T5365] loop4: rw=3, sector=6112705711208, nr_sectors = 8388600 limit=2048 [ 157.703114][ T3926] syz.1.81: attempt to access beyond end of device [ 157.703114][ T3926] loop1: rw=3, sector=12305732267408, nr_sectors = 8388600 limit=2048 [ 157.734847][ T6059] loop2: detected capacity change from 0 to 128 [ 157.792476][ T5365] syz.4.580: attempt to access beyond end of device [ 157.792476][ T5365] loop4: rw=3, sector=6112714099808, nr_sectors = 8388600 limit=2048 [ 157.800028][ T3926] syz.1.81: attempt to access beyond end of device [ 157.800028][ T3926] loop1: rw=3, sector=12305740656008, nr_sectors = 8388600 limit=2048 [ 157.863886][ T6042] loop0: detected capacity change from 0 to 32768 [ 158.025333][ T6042] XFS (loop0): Mounting V5 Filesystem [ 158.257989][ T6042] XFS (loop0): Ending clean mount [ 158.452745][ T5594] XFS (loop0): Unmounting Filesystem [ 158.547928][ T41] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 158.741298][ T6075] loop2: detected capacity change from 0 to 256 [ 158.811799][ T41] usb 2-1: Using ep0 maxpacket: 8 [ 158.818913][ T6058] loop3: detected capacity change from 0 to 32768 [ 158.909774][ T6058] XFS (loop3): Mounting V5 Filesystem [ 158.941898][ T41] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 158.960245][ T41] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.970583][ T41] usb 2-1: config 0 has no interface number 0 [ 158.976888][ T41] usb 2-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 158.990291][ T41] usb 2-1: config 0 interface 52 has no altsetting 0 [ 158.997775][ T41] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 159.151384][ T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.184084][ T41] usb 2-1: config 0 descriptor?? [ 159.221291][ T6058] XFS (loop3): Ending clean mount [ 159.308208][ T3634] XFS (loop3): Unmounting Filesystem [ 159.451479][ T6095] loop0: detected capacity change from 0 to 128 [ 159.461943][ T41] usb 2-1: Can not set alternate setting to 1, error: -71 [ 159.470454][ T41] synaptics_usb: probe of 2-1:0.52 failed with error -71 [ 159.491917][ T3682] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 159.506301][ T41] usb 2-1: USB disconnect, device number 7 [ 159.522097][ T6095] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 159.581458][ T6095] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.743090][ T3682] usb 3-1: Using ep0 maxpacket: 16 [ 159.881982][ T3682] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 159.900293][ T3682] usb 3-1: config 0 has no interface number 0 [ 159.931222][ T3682] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 159.961674][ T3682] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 160.021396][ T6101] loop3: detected capacity change from 0 to 4096 [ 160.077035][ T6101] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 160.147042][ T3682] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 160.173182][ T6101] ntfs3: loop3: mft corrupted [ 160.178021][ T3682] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 160.186634][ T6101] ntfs3: loop3: Failed to load $Extend. [ 160.201700][ T3682] usb 3-1: Product: syz [ 160.223447][ T3682] usb 3-1: SerialNumber: syz [ 160.240476][ T6101] ntfs3: loop3: ino=0, ntfs_iget5 [ 160.262632][ T3682] usb 3-1: config 0 descriptor?? [ 160.304673][ T3682] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 160.320628][ T3682] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input18 [ 160.350414][ T6109] loop0: detected capacity change from 0 to 16 [ 160.423632][ T6109] erofs: (device loop0): mounted with root inode @ nid 36. [ 160.524365][ T5485] usb 3-1: USB disconnect, device number 14 [ 160.541914][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 160.549636][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 160.582961][ T5485] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 160.762302][ T6117] netlink: 'syz.3.805': attribute type 1 has an invalid length. [ 160.781671][ T41] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 160.800492][ T6119] loop0: detected capacity change from 0 to 64 [ 161.161833][ T41] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.198277][ T41] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.233869][ T41] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 161.291634][ T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.312487][ T41] usb 2-1: config 0 descriptor?? [ 161.779634][ T6145] loop0: detected capacity change from 0 to 128 [ 161.832100][ T41] kye 0003:0458:5015.0019: hidraw0: USB HID v0.00 Device [HID 0458:5015] on usb-dummy_hcd.1-1/input0 [ 161.881887][ T41] kye 0003:0458:5015.0019: tablet-enabling feature report not found [ 161.918688][ T41] kye 0003:0458:5015.0019: tablet enabling failed [ 162.035911][ T5485] usb 2-1: USB disconnect, device number 8 [ 162.081706][ T41] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 162.244372][ T6151] loop0: detected capacity change from 0 to 128 [ 162.253303][ T6134] loop3: detected capacity change from 0 to 32768 [ 162.362691][ T41] usb 3-1: Using ep0 maxpacket: 8 [ 162.366427][ T6134] jfs: Unrecognized mount option "nodisc./file1" or missing value [ 162.449186][ T3926] bio_check_eod: 152327 callbacks suppressed [ 162.449204][ T3926] syz.1.81: attempt to access beyond end of device [ 162.449204][ T3926] loop1: rw=3, sector=13080864073208, nr_sectors = 8388600 limit=2048 [ 162.482064][ T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.498532][ T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.501557][ T5365] syz.4.580: attempt to access beyond end of device [ 162.501557][ T5365] loop4: rw=3, sector=6648955354808, nr_sectors = 8388600 limit=2048 [ 162.502834][ T3926] syz.1.81: attempt to access beyond end of device [ 162.502834][ T3926] loop1: rw=3, sector=13080872461808, nr_sectors = 8388600 limit=2048 [ 162.515340][ T41] usb 3-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00 [ 162.546582][ T5365] syz.4.580: attempt to access beyond end of device [ 162.546582][ T5365] loop4: rw=3, sector=6648963743408, nr_sectors = 8388600 limit=2048 [ 162.571686][ T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.590025][ T5365] syz.4.580: attempt to access beyond end of device [ 162.590025][ T5365] loop4: rw=3, sector=6648972132008, nr_sectors = 8388600 limit=2048 [ 162.605368][ T41] usb 3-1: config 0 descriptor?? [ 162.661705][ T3926] syz.1.81: attempt to access beyond end of device [ 162.661705][ T3926] loop1: rw=3, sector=13080880850408, nr_sectors = 8388600 limit=2048 [ 162.686464][ T5365] syz.4.580: attempt to access beyond end of device [ 162.686464][ T5365] loop4: rw=3, sector=6648980520608, nr_sectors = 8388600 limit=2048 [ 162.749115][ T3926] syz.1.81: attempt to access beyond end of device [ 162.749115][ T3926] loop1: rw=3, sector=13080889239008, nr_sectors = 8388600 limit=2048 [ 162.761642][ T5365] syz.4.580: attempt to access beyond end of device [ 162.761642][ T5365] loop4: rw=3, sector=6648988909208, nr_sectors = 8388600 limit=2048 [ 162.827053][ T3926] syz.1.81: attempt to access beyond end of device [ 162.827053][ T3926] loop1: rw=3, sector=13080897627608, nr_sectors = 8388600 limit=2048 [ 163.084400][ T41] asus 0003:0B05:19B6.001A: unknown main item tag 0x0 [ 163.122910][ T41] asus 0003:0B05:19B6.001A: hidraw0: USB HID v0.00 Device [HID 0b05:19b6] on usb-dummy_hcd.2-1/input0 [ 163.157118][ T41] asus 0003:0B05:19B6.001A: Asus input not registered [ 163.176277][ T41] asus: probe of 0003:0B05:19B6.001A failed with error -12 [ 163.326452][ T41] usb 3-1: USB disconnect, device number 15 [ 163.386674][ T6153] loop0: detected capacity change from 0 to 32768 [ 164.093927][ T6167] loop3: detected capacity change from 0 to 32768 [ 164.137214][ T6167] XFS: ikeep mount option is deprecated. [ 164.210351][ T6167] XFS (loop3): Mounting V5 Filesystem [ 164.286466][ T6167] XFS (loop3): Ending clean mount [ 164.303931][ T6167] XFS (loop3): Quotacheck needed: Please wait. [ 164.352234][ T6167] XFS (loop3): Quotacheck: Done. [ 164.498559][ T3634] XFS (loop3): Unmounting Filesystem [ 164.763084][ T6191] tipc: Started in network mode [ 164.767994][ T6191] tipc: Node identity 00000000000040000000000000000001, cluster identity 4711 [ 164.807865][ T6191] tipc: Enabling of bearer rejected, failed to enable media [ 165.017669][ T6194] loop0: detected capacity change from 0 to 512 [ 165.059067][ T6194] EXT4-fs: Ignoring removed oldalloc option [ 165.077339][ T6197] loop3: detected capacity change from 0 to 128 [ 165.182563][ T6194] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.837: Parent and EA inode have the same ino 15 [ 165.283854][ T6194] EXT4-fs (loop0): Remounting filesystem read-only [ 165.310750][ T6194] EXT4-fs error (device loop0): ext4_evict_inode:290: comm syz.0.837: couldn't truncate inode 15 (err -30) [ 165.379094][ T6194] EXT4-fs (loop0): 1 orphan inode deleted [ 165.394702][ T6194] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 165.520219][ T5594] EXT4-fs (loop0): unmounting filesystem. [ 165.781192][ T6188] loop2: detected capacity change from 0 to 32768 [ 165.850694][ T6188] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.834 (6188) [ 165.959808][ T6188] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 165.991778][ T6188] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 166.000472][ T6188] BTRFS info (device loop2): setting nodatacow, compression disabled [ 166.045835][ T6217] loop3: detected capacity change from 0 to 4096 [ 166.057396][ T6188] BTRFS info (device loop2): setting datacow [ 166.079639][ T6188] BTRFS info (device loop2): doing ref verification [ 166.141694][ T6188] BTRFS info (device loop2): force clearing of disk cache [ 166.168890][ T6188] BTRFS info (device loop2): turning off barriers [ 166.197272][ T6227] loop0: detected capacity change from 0 to 128 [ 166.217432][ T6188] BTRFS info (device loop2): enabling ssd optimizations [ 166.228309][ T6188] BTRFS info (device loop2): using spread ssd allocation scheme [ 166.259753][ T6188] BTRFS info (device loop2): not using ssd optimizations [ 166.317143][ T6188] BTRFS info (device loop2): not using spread ssd allocation scheme [ 166.346365][ T6188] BTRFS info (device loop2): using free space tree [ 166.788233][ T6188] BTRFS info (device loop2): rebuilding free space tree [ 166.891719][ T41] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 167.026943][ T6258] loop3: detected capacity change from 0 to 2048 [ 167.082883][ T6258] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.087833][ T3641] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 167.281837][ T41] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 167.321383][ T41] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 167.364878][ T41] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 167.396487][ T41] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 167.457348][ T5365] bio_check_eod: 140324 callbacks suppressed [ 167.457366][ T5365] syz.4.580: attempt to access beyond end of device [ 167.457366][ T5365] loop4: rw=3, sector=7235905696808, nr_sectors = 8388600 limit=2048 [ 167.478917][ T3926] syz.1.81: attempt to access beyond end of device [ 167.478917][ T3926] loop1: rw=3, sector=13695580681208, nr_sectors = 8388600 limit=2048 [ 167.511952][ T3926] syz.1.81: attempt to access beyond end of device [ 167.511952][ T3926] loop1: rw=3, sector=13695589069808, nr_sectors = 8388600 limit=2048 [ 167.533226][ T3926] syz.1.81: attempt to access beyond end of device [ 167.533226][ T3926] loop1: rw=3, sector=13695597458408, nr_sectors = 8388600 limit=2048 [ 167.561899][ T5365] syz.4.580: attempt to access beyond end of device [ 167.561899][ T5365] loop4: rw=3, sector=7235914085408, nr_sectors = 8388600 limit=2048 [ 167.581019][ T6275] loop2: detected capacity change from 0 to 256 [ 167.587918][ T3926] syz.1.81: attempt to access beyond end of device [ 167.587918][ T3926] loop1: rw=3, sector=13695605847008, nr_sectors = 8388600 limit=2048 [ 167.614884][ T3926] syz.1.81: attempt to access beyond end of device [ 167.614884][ T3926] loop1: rw=3, sector=13695614235608, nr_sectors = 8388600 limit=2048 [ 167.630727][ T5365] syz.4.580: attempt to access beyond end of device [ 167.630727][ T5365] loop4: rw=3, sector=7235922474008, nr_sectors = 8388600 limit=2048 [ 167.631790][ T5199] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 167.653329][ T3926] syz.1.81: attempt to access beyond end of device [ 167.653329][ T3926] loop1: rw=3, sector=13695622624208, nr_sectors = 8388600 limit=2048 [ 167.668779][ T41] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 167.681713][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.690372][ T5365] syz.4.580: attempt to access beyond end of device [ 167.690372][ T5365] loop4: rw=3, sector=7235930862608, nr_sectors = 8388600 limit=2048 [ 167.711723][ T41] usb 2-1: Product: syz [ 167.716578][ T41] usb 2-1: Manufacturer: syz [ 167.721402][ T41] usb 2-1: SerialNumber: syz [ 167.740760][ T41] usb 2-1: config 0 descriptor?? [ 167.759388][ T6275] FAT-fs (loop2): Directory bread(block 64) failed [ 167.781755][ T6275] FAT-fs (loop2): Directory bread(block 65) failed [ 167.796654][ T6275] FAT-fs (loop2): Directory bread(block 66) failed [ 167.812591][ T41] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 167.816896][ T6275] FAT-fs (loop2): Directory bread(block 67) failed [ 167.831179][ T6275] FAT-fs (loop2): Directory bread(block 68) failed [ 167.845908][ T6275] FAT-fs (loop2): Directory bread(block 69) failed [ 167.854748][ T6275] FAT-fs (loop2): Directory bread(block 70) failed [ 167.861389][ T6275] FAT-fs (loop2): Directory bread(block 71) failed [ 167.877791][ T6275] FAT-fs (loop2): Directory bread(block 72) failed [ 167.887550][ T6275] FAT-fs (loop2): Directory bread(block 73) failed [ 167.911774][ T3707] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 167.921743][ T5199] usb 1-1: Using ep0 maxpacket: 16 [ 168.033089][ T41] ums-isd200: probe of 2-1:0.0 failed with error -22 [ 168.042019][ T5199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.082619][ T5199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.101686][ T5199] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 168.120949][ T5199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.149114][ T5199] usb 1-1: config 0 descriptor?? [ 168.230753][ T6279] loop2: detected capacity change from 0 to 128 [ 168.232556][ T3682] usb 2-1: USB disconnect, device number 9 [ 168.291926][ T3707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.329971][ T3707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.359187][ T3707] usb 4-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 168.378736][ T3707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.401055][ T3707] usb 4-1: config 0 descriptor?? [ 168.659417][ T5199] elan 0003:04F3:0755.001B: failed to start in urb: -90 [ 168.684458][ T5199] elan 0003:04F3:0755.001B: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 168.831698][ T4624] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 168.865858][ T5199] usb 1-1: USB disconnect, device number 13 [ 168.891548][ T3707] lenovo 0003:17EF:6062.001C: unknown main item tag 0x4 [ 168.914600][ T3707] lenovo 0003:17EF:6062.001C: unknown main item tag 0x2 [ 168.950744][ T3707] lenovo 0003:17EF:6062.001C: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.3-1/input0 [ 169.091736][ T41] usb 4-1: USB disconnect, device number 8 [ 169.214146][ T4624] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.270048][ T4624] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.289583][ T4624] usb 3-1: New USB device found, idVendor=05cc, idProduct=0268, bcdDevice= 0.00 [ 169.309918][ T4624] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.339154][ T4624] usb 3-1: config 0 descriptor?? [ 169.836337][ T4624] hid-generic 0003:05CC:0268.001D: hidraw0: USB HID v0.00 Device [HID 05cc:0268] on usb-dummy_hcd.2-1/input0 [ 169.929991][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'. [ 170.079069][ T4624] usb 3-1: USB disconnect, device number 16 [ 170.217508][ T6311] netlink: 116 bytes leftover after parsing attributes in process `syz.1.882'. [ 170.341148][ C1] eth0: bad gso: type: 1, size: 1408 [ 170.391852][ T5199] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 170.752025][ T5199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.771731][ T5199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.821706][ T5199] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 170.858841][ T5199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.917920][ T5199] usb 1-1: config 0 descriptor?? [ 171.207199][ T26] audit: type=1326 audit(1724045950.980:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.3.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff5b79e79 code=0x7ffc0000 [ 171.259025][ T26] audit: type=1326 audit(1724045950.980:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.3.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8ff5b79e79 code=0x7ffc0000 [ 171.350961][ T26] audit: type=1326 audit(1724045950.980:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.3.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff5b79e79 code=0x7ffc0000 [ 171.426231][ T5199] pyra 0003:1E7D:2CF6.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 171.438917][ T26] audit: type=1326 audit(1724045950.980:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.3.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff5b79e79 code=0x7ffc0000 [ 171.465862][ T26] audit: type=1326 audit(1724045950.980:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.3.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f8ff5b79e79 code=0x7ffc0000 [ 171.576204][ T26] audit: type=1326 audit(1724045950.980:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.3.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff5b79e79 code=0x7ffc0000 [ 171.631838][ T5199] pyra 0003:1E7D:2CF6.001E: couldn't init struct pyra_device [ 171.639283][ T5199] pyra 0003:1E7D:2CF6.001E: couldn't install mouse [ 171.656143][ T26] audit: type=1326 audit(1724045950.980:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.3.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff5b79e79 code=0x7ffc0000 [ 171.692264][ T5199] pyra: probe of 0003:1E7D:2CF6.001E failed with error -71 [ 171.731851][ T5199] usb 1-1: USB disconnect, device number 14 [ 172.008682][ T6336] loop2: detected capacity change from 0 to 32768 [ 172.037466][ T6359] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 172.471879][ T5365] bio_check_eod: 161077 callbacks suppressed [ 172.471896][ T5365] syz.4.580: attempt to access beyond end of device [ 172.471896][ T5365] loop4: rw=3, sector=7860462132608, nr_sectors = 8388600 limit=2048 [ 172.501778][ T5199] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 172.527050][ T6372] netlink: 32 bytes leftover after parsing attributes in process `syz.0.910'. [ 172.536150][ T5365] syz.4.580: attempt to access beyond end of device [ 172.536150][ T5365] loop4: rw=3, sector=7860470521208, nr_sectors = 8388600 limit=2048 [ 172.551308][ T3926] syz.1.81: attempt to access beyond end of device [ 172.551308][ T3926] loop1: rw=3, sector=14443550200208, nr_sectors = 8388600 limit=2048 [ 172.581832][ T5365] syz.4.580: attempt to access beyond end of device [ 172.581832][ T5365] loop4: rw=3, sector=7860478909808, nr_sectors = 8388600 limit=2048 [ 172.630841][ T3926] syz.1.81: attempt to access beyond end of device [ 172.630841][ T3926] loop1: rw=3, sector=14443558588808, nr_sectors = 8388600 limit=2048 [ 172.635236][ T5365] syz.4.580: attempt to access beyond end of device [ 172.635236][ T5365] loop4: rw=3, sector=7860487298408, nr_sectors = 8388600 limit=2048 [ 172.721898][ T3926] syz.1.81: attempt to access beyond end of device [ 172.721898][ T3926] loop1: rw=3, sector=14443566977408, nr_sectors = 8388600 limit=2048 [ 172.731787][ T5365] syz.4.580: attempt to access beyond end of device [ 172.731787][ T5365] loop4: rw=3, sector=7860495687008, nr_sectors = 8388600 limit=2048 [ 172.811258][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.907'. [ 172.820596][ T3926] syz.1.81: attempt to access beyond end of device [ 172.820596][ T3926] loop1: rw=3, sector=14443575366008, nr_sectors = 8388600 limit=2048 [ 172.841898][ T5365] syz.4.580: attempt to access beyond end of device [ 172.841898][ T5365] loop4: rw=3, sector=7860504075608, nr_sectors = 8388600 limit=2048 [ 172.941858][ T5199] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.962452][ T5199] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 172.981927][ T5199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.029936][ T5199] usb 5-1: config 0 descriptor?? [ 173.155733][ T6396] loop3: detected capacity change from 0 to 128 [ 173.244587][ T6396] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 173.312265][ T6396] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038 (0x7fffffff) [ 173.391759][ T3643] Bluetooth: hci6: command tx timeout [ 173.419721][ T6409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.926'. [ 173.522207][ T5199] ath6kl: Unsupported hardware version: 0x0 [ 173.530024][ T5199] ath6kl: Failed to init ath6kl core: -22 [ 173.538335][ T3634] EXT4-fs (loop3): unmounting filesystem. [ 173.628626][ T5199] ath6kl_usb: probe of 5-1:0.0 failed with error -22 [ 173.699015][ T6419] tipc: Started in network mode [ 173.727773][ T6419] tipc: Node identity 1, cluster identity 4711 [ 173.782285][ T6419] tipc: Node number set to 1 [ 173.815282][ T5199] usb 5-1: USB disconnect, device number 6 [ 173.836241][ T6421] loop2: detected capacity change from 0 to 1024 [ 173.929864][ T6421] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 174.056759][ T3641] EXT4-fs (loop2): unmounting filesystem. [ 174.111499][ T6428] loop3: detected capacity change from 0 to 256 [ 174.131824][ T14] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 174.381687][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 174.458976][ T5199] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 174.501892][ T14] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 174.522645][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.570864][ T14] usb 1-1: config 0 descriptor?? [ 174.626556][ T14] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 174.717817][ T5199] usb 3-1: Using ep0 maxpacket: 8 [ 174.842338][ T5199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 174.869827][ T5199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.900644][ T5199] usb 3-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 174.937783][ T5199] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.958232][ T5199] usb 3-1: config 0 descriptor?? [ 174.992883][ T6434] loop3: detected capacity change from 0 to 32768 [ 175.052198][ T14] gspca_nw80x: reg_r err -71 [ 175.056879][ T14] nw80x: probe of 1-1:0.0 failed with error -71 [ 175.085386][ T14] usb 1-1: USB disconnect, device number 15 [ 175.252473][ T4625] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 175.622200][ T4625] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.661666][ T3682] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 175.669641][ T4625] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 175.682120][ T5199] usb 3-1: string descriptor 0 read error: -71 [ 175.701341][ T4625] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.709674][ T5199] uclogic 0003:256C:006E.001F: failed retrieving string descriptor #200: -71 [ 175.718616][ T3645] Bluetooth: hci1: command 0x0406 tx timeout [ 175.724732][ T3643] Bluetooth: hci0: command 0x0406 tx timeout [ 175.731229][ T5199] uclogic 0003:256C:006E.001F: failed retrieving pen parameters: -71 [ 175.762393][ T4625] usb 2-1: config 0 descriptor?? [ 175.789696][ T5199] uclogic 0003:256C:006E.001F: failed probing pen v2 parameters: -71 [ 175.838959][ T4625] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 175.868199][ T5199] uclogic 0003:256C:006E.001F: failed probing parameters: -71 [ 175.878258][ T4625] usb 2-1: No valid video chain found. [ 175.893696][ T5199] uclogic: probe of 0003:256C:006E.001F failed with error -71 [ 175.943795][ T5199] usb 3-1: USB disconnect, device number 17 [ 176.052006][ T3682] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 176.073141][ T3682] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 176.087319][ T4624] usb 2-1: USB disconnect, device number 10 [ 176.100437][ T3682] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 176.122240][ T3682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.172070][ T6444] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 176.645560][ T3682] usb 4-1: USB disconnect, device number 9 [ 176.695785][ T4624] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 176.961833][ T4624] usb 1-1: Using ep0 maxpacket: 8 [ 177.081853][ T4624] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.120194][ T4624] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.142248][ T4624] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.167221][ T4624] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 177.167253][ T4624] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.168963][ T4624] usb 1-1: config 0 descriptor?? [ 177.486520][ T5365] bio_check_eod: 158262 callbacks suppressed [ 177.486539][ T5365] syz.4.580: attempt to access beyond end of device [ 177.486539][ T5365] loop4: rw=3, sector=8517465673208, nr_sectors = 8388600 limit=2048 [ 177.508916][ T3926] syz.1.81: attempt to access beyond end of device [ 177.508916][ T3926] loop1: rw=3, sector=15157512334808, nr_sectors = 8388600 limit=2048 [ 177.547671][ T3926] syz.1.81: attempt to access beyond end of device [ 177.547671][ T3926] loop1: rw=3, sector=15157520723408, nr_sectors = 8388600 limit=2048 [ 177.587350][ T5365] syz.4.580: attempt to access beyond end of device [ 177.587350][ T5365] loop4: rw=3, sector=8517474061808, nr_sectors = 8388600 limit=2048 [ 177.605707][ T3926] syz.1.81: attempt to access beyond end of device [ 177.605707][ T3926] loop1: rw=3, sector=15157529112008, nr_sectors = 8388600 limit=2048 [ 177.650641][ T5365] syz.4.580: attempt to access beyond end of device [ 177.650641][ T5365] loop4: rw=3, sector=8517482450408, nr_sectors = 8388600 limit=2048 [ 177.658779][ T4624] hid-picolcd 0003:04D8:C002.0020: unknown main item tag 0x0 [ 177.722895][ T6497] netlink: ct family unspecified [ 177.731706][ T5365] syz.4.580: attempt to access beyond end of device [ 177.731706][ T5365] loop4: rw=3, sector=8517490839008, nr_sectors = 8388600 limit=2048 [ 177.735530][ T3926] syz.1.81: attempt to access beyond end of device [ 177.735530][ T3926] loop1: rw=3, sector=15157537500608, nr_sectors = 8388600 limit=2048 [ 177.752833][ T6497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.772172][ T4624] hid-picolcd 0003:04D8:C002.0020: unknown main item tag 0x0 [ 177.828806][ T3926] syz.1.81: attempt to access beyond end of device [ 177.828806][ T3926] loop1: rw=3, sector=15157545889208, nr_sectors = 8388600 limit=2048 [ 177.841762][ T5365] syz.4.580: attempt to access beyond end of device [ 177.841762][ T5365] loop4: rw=3, sector=8517499227608, nr_sectors = 8388600 limit=2048 [ 177.856520][ T4624] hid-picolcd 0003:04D8:C002.0020: No report with id 0x11 found [ 177.883675][ T4624] usb 1-1: USB disconnect, device number 16 [ 177.999037][ T6503] loop2: detected capacity change from 0 to 1024 [ 178.050481][ T6505] netlink: 'syz.3.972': attribute type 30 has an invalid length. [ 178.486077][ T6515] loop2: detected capacity change from 0 to 2048 [ 178.516721][ T6517] loop0: detected capacity change from 0 to 512 [ 178.544089][ T6517] EXT4-fs: Ignoring removed nobh option [ 178.550268][ T6515] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 178.606412][ T6513] loop3: detected capacity change from 0 to 4096 [ 178.624793][ T6517] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 178.634586][ T6515] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 178.652526][ T6513] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 178.675660][ T6517] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 178.716888][ T6515] EXT4-fs error (device loop2): ext4_read_inline_dir:1593: inode #12: block 9: comm syz.2.977: path /218/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 178.749042][ T6517] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #13: comm syz.0.978: casefold flag without casefold feature [ 178.783340][ T6517] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #13: comm syz.0.978: unexpected EA_INODE flag [ 178.784031][ T6519] xt_connbytes: Forcing CT accounting to be enabled [ 178.800042][ T6513] ntfs: volume version 3.1. [ 178.816566][ T6517] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.978: couldn't read orphan inode 13 (err -117) [ 178.837492][ T6515] EXT4-fs (loop2): Remounting filesystem read-only [ 178.855076][ T6519] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 178.856688][ T6517] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 178.923869][ T6519] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 178.937711][ T3641] EXT4-fs (loop2): unmounting filesystem. [ 179.049866][ T5594] EXT4-fs (loop0): unmounting filesystem. [ 179.118674][ T6525] autofs4:pid:6525:autofs_fill_super: pipe file descriptor does not contain proper ops [ 179.435897][ T6528] loop3: detected capacity change from 0 to 4096 [ 179.481654][ T6528] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 179.581501][ T6528] ntfs3: loop3: failed to convert "076c" to cp437 [ 180.254167][ T6529] loop0: detected capacity change from 0 to 32768 [ 180.513726][ T3707] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 180.629548][ T6558] loop3: detected capacity change from 0 to 4096 [ 180.666007][ T6558] ntfs3: Invalid value for fmask. [ 180.761702][ T3707] usb 2-1: Using ep0 maxpacket: 16 [ 180.891908][ T3707] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.921799][ T3707] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.971645][ T3707] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 181.015156][ T3707] usb 2-1: config 0 interface 0 has no altsetting 0 [ 181.051702][ T3707] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 181.091185][ T3707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.120310][ T6565] netlink: 148 bytes leftover after parsing attributes in process `syz.3.999'. [ 181.132475][ T3707] usb 2-1: config 0 descriptor?? [ 181.368452][ T6545] loop2: detected capacity change from 0 to 40427 [ 181.421361][ T6545] F2FS-fs (loop2): Invalid log sectorsize (2) [ 181.431474][ T6545] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 181.504978][ T6545] F2FS-fs (loop2): Found nat_bits in checkpoint [ 181.614632][ T3707] hid-generic 0003:045E:05DA.0021: unknown main item tag 0x0 [ 181.632401][ T3707] hid-generic 0003:045E:05DA.0021: unbalanced collection at end of report description [ 181.677663][ T3707] hid-generic: probe of 0003:045E:05DA.0021 failed with error -22 [ 181.686237][ T6545] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 181.695530][ T6545] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 181.818608][ T4625] usb 2-1: USB disconnect, device number 11 [ 182.491698][ T3926] bio_check_eod: 120158 callbacks suppressed [ 182.491713][ T3926] syz.1.81: attempt to access beyond end of device [ 182.491713][ T3926] loop1: rw=3, sector=15775508885408, nr_sectors = 8388600 limit=2048 [ 182.543882][ T5365] syz.4.580: attempt to access beyond end of device [ 182.543882][ T5365] loop4: rw=3, sector=8927148120008, nr_sectors = 8388600 limit=2048 [ 182.559960][ T3926] syz.1.81: attempt to access beyond end of device [ 182.559960][ T3926] loop1: rw=3, sector=15775517274008, nr_sectors = 8388600 limit=2048 [ 182.581664][ T3926] syz.1.81: attempt to access beyond end of device [ 182.581664][ T3926] loop1: rw=3, sector=15775525662608, nr_sectors = 8388600 limit=2048 [ 182.612745][ T5365] syz.4.580: attempt to access beyond end of device [ 182.612745][ T5365] loop4: rw=3, sector=8927156508608, nr_sectors = 8388600 limit=2048 [ 182.651762][ T41] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 182.671710][ T5365] syz.4.580: attempt to access beyond end of device [ 182.671710][ T5365] loop4: rw=3, sector=8927164897208, nr_sectors = 8388600 limit=2048 [ 182.695267][ T3926] syz.1.81: attempt to access beyond end of device [ 182.695267][ T3926] loop1: rw=3, sector=15775534051208, nr_sectors = 8388600 limit=2048 [ 182.735208][ T3926] syz.1.81: attempt to access beyond end of device [ 182.735208][ T3926] loop1: rw=3, sector=15775542439808, nr_sectors = 8388600 limit=2048 [ 182.752191][ T3926] syz.1.81: attempt to access beyond end of device [ 182.752191][ T3926] loop1: rw=3, sector=15775550828408, nr_sectors = 8388600 limit=2048 [ 182.765068][ T5365] syz.4.580: attempt to access beyond end of device [ 182.765068][ T5365] loop4: rw=3, sector=8927173285808, nr_sectors = 8388600 limit=2048 [ 182.941672][ T41] usb 3-1: Using ep0 maxpacket: 16 [ 183.061879][ T41] usb 3-1: config 0 has no interfaces? [ 183.172020][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1014'. [ 183.242242][ T41] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 183.251360][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.291678][ T41] usb 3-1: Product: syz [ 183.295876][ T41] usb 3-1: Manufacturer: syz [ 183.331923][ T41] usb 3-1: SerialNumber: syz [ 183.351733][ T41] r8152-cfgselector 3-1: config 0 descriptor?? [ 183.622683][ T41] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 183.834228][ T41] usb 3-1: USB disconnect, device number 18 [ 184.013275][ T6599] loop0: detected capacity change from 0 to 40427 [ 184.045142][ T6599] F2FS-fs (loop0): invalid crc value [ 184.070743][ T6599] F2FS-fs (loop0): Found nat_bits in checkpoint [ 184.171188][ T6599] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 184.188106][ T6599] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 184.539610][ T6611] loop3: detected capacity change from 0 to 32768 [ 184.779091][ T6611] XFS (loop3): Mounting V5 Filesystem [ 184.785450][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1028'. [ 184.950436][ T6611] XFS (loop3): Ending clean mount [ 184.967604][ T6611] XFS (loop3): Quotacheck needed: Please wait. [ 185.079202][ T6611] XFS (loop3): Quotacheck: Done. [ 185.176425][ T6652] loop0: detected capacity change from 0 to 1024 [ 185.241572][ T3634] XFS (loop3): Unmounting Filesystem [ 185.255776][ T6652] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 185.301180][ T6658] loop2: detected capacity change from 0 to 64 [ 185.563794][ T5594] EXT4-fs (loop0): unmounting filesystem. [ 185.951737][ T3645] Bluetooth: hci4: command 0x0406 tx timeout [ 186.011693][ T14] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 186.131873][ T4625] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 186.251658][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 186.391954][ T4625] usb 5-1: Using ep0 maxpacket: 16 [ 186.480508][ T6681] loop3: detected capacity change from 0 to 8192 [ 186.517204][ T6681] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 186.530577][ T4625] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.542119][ T14] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 186.551173][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.611659][ T4625] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.631953][ T6681] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 186.661886][ T14] usb 1-1: Product: syz [ 186.666156][ T14] usb 1-1: Manufacturer: syz [ 186.670756][ T14] usb 1-1: SerialNumber: syz [ 186.682439][ T6681] REISERFS (device loop3): using ordered data mode [ 186.687223][ T4625] usb 5-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 186.688950][ T6681] reiserfs: using flush barriers [ 186.703801][ T6681] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 186.735648][ T14] usb 1-1: config 0 descriptor?? [ 186.750746][ T6681] REISERFS (device loop3): checking transaction log (loop3) [ 186.759887][ T4625] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.774215][ T14] gspca_main: sq905-2.14.0 probing 2770:9120 [ 186.789273][ T6681] REISERFS (device loop3): Using r5 hash to sort names [ 186.801466][ T4625] usb 5-1: config 0 descriptor?? [ 186.811988][ T6681] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 186.857478][ T6681] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 186.927202][ T6681] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 186.972971][ T6681] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 187.009316][ T6681] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 187.121539][ T6683] loop2: detected capacity change from 0 to 32768 [ 187.246604][ T6683] XFS (loop2): Mounting V5 Filesystem [ 187.355017][ T4625] apple 0003:05AC:027D.0022: hidraw0: USB HID v0.00 Device [HID 05ac:027d] on usb-dummy_hcd.4-1/input0 [ 187.362766][ T6694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1045'. [ 187.422008][ T14] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 187.448016][ T14] sq905: probe of 1-1:0.0 failed with error -71 [ 187.482752][ T6683] XFS (loop2): Ending clean mount [ 187.492344][ T14] usb 1-1: USB disconnect, device number 17 [ 187.496721][ T6683] XFS (loop2): Quotacheck needed: Please wait. [ 187.508732][ T5365] bio_check_eod: 140765 callbacks suppressed [ 187.508747][ T5365] syz.4.580: attempt to access beyond end of device [ 187.508747][ T5365] loop4: rw=3, sector=9574890646208, nr_sectors = 8388600 limit=2048 [ 187.510103][ T3926] syz.1.81: attempt to access beyond end of device [ 187.510103][ T3926] loop1: rw=3, sector=16334525189408, nr_sectors = 8388600 limit=2048 [ 187.578305][ T6683] XFS (loop2): Quotacheck: Done. [ 187.588643][ T3926] syz.1.81: attempt to access beyond end of device [ 187.588643][ T3926] loop1: rw=3, sector=16334533578008, nr_sectors = 8388600 limit=2048 [ 187.599040][ T4624] usb 5-1: USB disconnect, device number 7 [ 187.603712][ T5365] syz.4.580: attempt to access beyond end of device [ 187.603712][ T5365] loop4: rw=3, sector=9574899034808, nr_sectors = 8388600 limit=2048 [ 187.631950][ T3926] syz.1.81: attempt to access beyond end of device [ 187.631950][ T3926] loop1: rw=3, sector=16334541966608, nr_sectors = 8388600 limit=2048 [ 187.668011][ T3926] syz.1.81: attempt to access beyond end of device [ 187.668011][ T3926] loop1: rw=3, sector=16334550355208, nr_sectors = 8388600 limit=2048 [ 187.675509][ T5365] syz.4.580: attempt to access beyond end of device [ 187.675509][ T5365] loop4: rw=3, sector=9574907423408, nr_sectors = 8388600 limit=2048 [ 187.695842][ T3926] syz.1.81: attempt to access beyond end of device [ 187.695842][ T3926] loop1: rw=3, sector=16334558743808, nr_sectors = 8388600 limit=2048 [ 187.715119][ T3926] syz.1.81: attempt to access beyond end of device [ 187.715119][ T3926] loop1: rw=3, sector=16334567132408, nr_sectors = 8388600 limit=2048 [ 187.727265][ T5365] syz.4.580: attempt to access beyond end of device [ 187.727265][ T5365] loop4: rw=3, sector=9574915812008, nr_sectors = 8388600 limit=2048 [ 187.779895][ T3641] XFS (loop2): Unmounting Filesystem [ 188.319278][ T6714] loop2: detected capacity change from 0 to 1024 [ 188.532542][ T6714] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 188.585060][ T6714] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1050: bg 0: block 92: padding at end of block bitmap is not set [ 188.613676][ T6716] loop3: detected capacity change from 0 to 4096 [ 188.620713][ T6716] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 188.659350][ T6716] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 188.691646][ T6716] ntfs: (device loop3): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 188.721744][ T6716] ntfs: (device loop3): ntfs_fill_super(): Not an NTFS volume. [ 188.728619][ T3641] EXT4-fs (loop2): unmounting filesystem. [ 189.146594][ T6708] loop0: detected capacity change from 0 to 32768 [ 189.234425][ T6708] add_index: next_index = 0. Resetting! [ 189.260573][ T6708] non-latin1 character 0x3ff found in JFS file name [ 189.291776][ T6708] mount with iocharset=utf8 to access [ 189.570241][ T26] audit: type=1326 audit(1724045969.340:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.1.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e18779e79 code=0x7ffc0000 [ 189.655074][ T26] audit: type=1326 audit(1724045969.340:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.1.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f7e18779e79 code=0x7ffc0000 [ 189.775376][ T26] audit: type=1326 audit(1724045969.550:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.1.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e18779e79 code=0x7ffc0000 [ 189.871780][ T26] audit: type=1326 audit(1724045969.550:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.1.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e18779e79 code=0x7ffc0000 [ 190.724621][ T6753] loop0: detected capacity change from 0 to 32768 [ 191.153644][ T4625] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 191.521912][ T4625] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.549511][ T4625] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 191.582058][ T4625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.621318][ T4625] usb 3-1: config 0 descriptor?? [ 191.664665][ T4625] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 191.701533][ T4625] usb 3-1: No valid video chain found. [ 191.761010][ T6779] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1082'. [ 191.790433][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1082'. [ 191.821686][ T6779] netlink: 'syz.3.1082': attribute type 5 has an invalid length. [ 191.891766][ T4624] usb 3-1: USB disconnect, device number 19 [ 192.513815][ T5365] bio_check_eod: 108685 callbacks suppressed [ 192.513833][ T5365] syz.4.580: attempt to access beyond end of device [ 192.513833][ T5365] loop4: rw=3, sector=10070422025408, nr_sectors = 8388600 limit=2048 [ 192.557308][ T3926] syz.1.81: attempt to access beyond end of device [ 192.557308][ T3926] loop1: rw=3, sector=16766932353608, nr_sectors = 8388600 limit=2048 [ 192.582008][ T5365] syz.4.580: attempt to access beyond end of device [ 192.582008][ T5365] loop4: rw=3, sector=10070430414008, nr_sectors = 8388600 limit=2048 [ 192.628073][ T3926] syz.1.81: attempt to access beyond end of device [ 192.628073][ T3926] loop1: rw=3, sector=16766940742208, nr_sectors = 8388600 limit=2048 [ 192.721676][ T5365] syz.4.580: attempt to access beyond end of device [ 192.721676][ T5365] loop4: rw=3, sector=10070438802608, nr_sectors = 8388600 limit=2048 [ 192.752452][ T3926] syz.1.81: attempt to access beyond end of device [ 192.752452][ T3926] loop1: rw=3, sector=16766949130808, nr_sectors = 8388600 limit=2048 [ 192.811680][ T3926] syz.1.81: attempt to access beyond end of device [ 192.811680][ T3926] loop1: rw=3, sector=16766957519408, nr_sectors = 8388600 limit=2048 [ 192.831672][ T5365] syz.4.580: attempt to access beyond end of device [ 192.831672][ T5365] loop4: rw=3, sector=10070447191208, nr_sectors = 8388600 limit=2048 [ 192.913164][ T3926] syz.1.81: attempt to access beyond end of device [ 192.913164][ T3926] loop1: rw=3, sector=16766965908008, nr_sectors = 8388600 limit=2048 [ 192.934757][ T5365] syz.4.580: attempt to access beyond end of device [ 192.934757][ T5365] loop4: rw=3, sector=10070455579808, nr_sectors = 8388600 limit=2048 [ 192.970684][ T6783] loop0: detected capacity change from 0 to 40427 [ 192.992091][ T6783] F2FS-fs (loop0): Invalid log sectorsize (2) [ 193.012110][ T6789] loop3: detected capacity change from 0 to 32768 [ 193.033110][ T6783] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 193.123314][ T6783] F2FS-fs (loop0): Found nat_bits in checkpoint [ 193.280333][ T6783] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 193.298691][ T6783] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 193.856885][ T6804] loop2: detected capacity change from 0 to 32768 [ 193.898210][ T6804] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.1093 (6804) [ 193.999160][ T6804] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 194.041767][ T6804] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 194.050498][ T6804] BTRFS info (device loop2): using free space tree [ 194.128334][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.137141][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.471777][ T6804] BTRFS info (device loop2): enabling ssd optimizations [ 194.713118][ T3641] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 195.664499][ T6862] netlink: 'syz.1.1109': attribute type 4 has an invalid length. [ 195.733730][ T6866] loop2: detected capacity change from 0 to 512 [ 195.811328][ T6866] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 195.831110][ T6866] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1111: invalid indirect mapped block 1 (level 1) [ 195.852216][ T6866] EXT4-fs (loop2): 1 truncate cleaned up [ 195.861705][ T6866] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 195.975201][ T3641] EXT4-fs (loop2): unmounting filesystem. [ 196.014668][ T6841] loop3: detected capacity change from 0 to 40427 [ 196.091471][ T6841] F2FS-fs (loop3): invalid crc value [ 196.132546][ T6841] F2FS-fs (loop3): Found nat_bits in checkpoint [ 196.258161][ T6841] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 196.351924][ T41] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 196.535646][ T6889] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1121'. [ 196.545133][ T6889] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1121'. [ 196.756999][ T6891] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 196.772079][ T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.802840][ T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.831991][ T41] usb 3-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 196.869957][ T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.892830][ T41] usb 3-1: config 0 descriptor?? [ 197.027733][ T6897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1119'. [ 197.217143][ T6903] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 197.354434][ T41] asus 0003:048D:CE50.0023: unknown main item tag 0xd [ 197.376637][ T41] asus 0003:048D:CE50.0023: hidraw0: USB HID v0.00 Device [HID 048d:ce50] on usb-dummy_hcd.2-1/input0 [ 197.408690][ T41] asus 0003:048D:CE50.0023: Asus input not registered [ 197.439251][ T41] asus: probe of 0003:048D:CE50.0023 failed with error -12 [ 197.524191][ T5365] bio_check_eod: 94118 callbacks suppressed [ 197.524207][ T5365] syz.4.580: attempt to access beyond end of device [ 197.524207][ T5365] loop4: rw=3, sector=10441021984808, nr_sectors = 8388600 limit=2048 [ 197.524253][ T5365] syz.4.580: attempt to access beyond end of device [ 197.524253][ T5365] loop4: rw=3, sector=10441030373408, nr_sectors = 8388600 limit=2048 [ 197.524288][ T5365] syz.4.580: attempt to access beyond end of device [ 197.524288][ T5365] loop4: rw=3, sector=10441038762008, nr_sectors = 8388600 limit=2048 [ 197.524322][ T5365] syz.4.580: attempt to access beyond end of device [ 197.524322][ T5365] loop4: rw=3, sector=10441047150608, nr_sectors = 8388600 limit=2048 [ 197.524355][ T5365] syz.4.580: attempt to access beyond end of device [ 197.524355][ T5365] loop4: rw=3, sector=10441055539208, nr_sectors = 8388600 limit=2048 [ 197.524389][ T5365] syz.4.580: attempt to access beyond end of device [ 197.524389][ T5365] loop4: rw=3, sector=10441063927808, nr_sectors = 8388600 limit=2048 [ 197.524421][ T5365] syz.4.580: attempt to access beyond end of device [ 197.524421][ T5365] loop4: rw=3, sector=10441072316408, nr_sectors = 8388600 limit=2048 [ 197.524455][ T5365] syz.4.580: attempt to access beyond end of device [ 197.524455][ T5365] loop4: rw=3, sector=10441080705008, nr_sectors = 8388600 limit=2048 [ 197.524488][ T5365] syz.4.580: attempt to access beyond end of device [ 197.524488][ T5365] loop4: rw=3, sector=10441089093608, nr_sectors = 8388600 limit=2048 [ 197.524521][ T5365] syz.4.580: attempt to access beyond end of device [ 197.524521][ T5365] loop4: rw=3, sector=10441097482208, nr_sectors = 8388600 limit=2048 [ 197.599301][ T41] usb 3-1: USB disconnect, device number 20 [ 197.698914][ T6917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1133'. [ 197.733661][ T6916] loop0: detected capacity change from 0 to 4096 [ 197.821979][ T6916] ntfs: volume version 3.1. [ 198.506171][ T6940] loop3: detected capacity change from 0 to 256 [ 198.538776][ T6940] exfat: Deprecated parameter 'namecase' [ 198.581383][ T6940] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb59a85fc, utbl_chksum : 0xe619d30d) [ 199.376290][ T6957] loop3: detected capacity change from 0 to 4096 [ 199.496241][ T6957] ntfs: volume version 3.1. [ 200.711763][ T14] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 200.823438][ T6970] loop3: detected capacity change from 0 to 32768 [ 200.962095][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 200.963035][ T3707] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 201.082174][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.114217][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.138622][ T14] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 201.175917][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.216266][ T14] usb 1-1: config 0 descriptor?? [ 201.241834][ T3707] usb 3-1: Using ep0 maxpacket: 16 [ 201.311988][ T3636] Bluetooth: hci5: command 0x0406 tx timeout [ 201.369246][ T3707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.397674][ T3707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.441668][ T3707] usb 3-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 201.467991][ T3707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.502036][ T3707] usb 3-1: config 0 descriptor?? [ 201.549190][ T7004] netlink: 'syz.3.1174': attribute type 2 has an invalid length. [ 201.661633][ T7006] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1175'. [ 201.693760][ T14] kovaplus 0003:1E7D:2D50.0024: unknown main item tag 0xe [ 201.718034][ T14] kovaplus 0003:1E7D:2D50.0024: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 201.813227][ T7010] tipc: Enabling of bearer rejected, failed to enable media [ 201.904545][ T14] usb 1-1: USB disconnect, device number 18 [ 202.024717][ T3707] apple 0003:05AC:026C.0025: unknown main item tag 0x0 [ 202.054782][ T26] audit: type=1326 audit(1724045981.830:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.3.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff5b79e79 code=0x7ffc0000 [ 202.071074][ T3707] apple 0003:05AC:026C.0025: unbalanced collection at end of report description [ 202.107806][ T26] audit: type=1326 audit(1724045981.830:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.3.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff5b79e79 code=0x7ffc0000 [ 202.114274][ T3707] apple 0003:05AC:026C.0025: parse failed [ 202.189154][ T3707] apple: probe of 0003:05AC:026C.0025 failed with error -22 [ 202.208016][ T26] audit: type=1326 audit(1724045981.860:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.3.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f8ff5b79e79 code=0x7ffc0000 [ 202.263436][ T26] audit: type=1326 audit(1724045981.860:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.3.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff5b79e79 code=0x7ffc0000 [ 202.270712][ T7018] loop3: detected capacity change from 0 to 2048 [ 202.325351][ T26] audit: type=1326 audit(1724045981.860:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.3.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff5b79e79 code=0x7ffc0000 [ 202.345936][ T3682] usb 3-1: USB disconnect, device number 21 [ 202.439967][ T7018] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 202.448743][ T7018] ext4 filesystem being mounted at /309/file0 supports timestamps until 2038 (0x7fffffff) [ 202.556012][ T5365] bio_check_eod: 117697 callbacks suppressed [ 202.556029][ T5365] syz.4.580: attempt to access beyond end of device [ 202.556029][ T5365] loop4: rw=3, sector=10948037357408, nr_sectors = 8388600 limit=2048 [ 202.570308][ T3926] syz.1.81: attempt to access beyond end of device [ 202.570308][ T3926] loop1: rw=3, sector=17685349836008, nr_sectors = 8388600 limit=2048 [ 202.578623][ T5365] syz.4.580: attempt to access beyond end of device [ 202.578623][ T5365] loop4: rw=3, sector=10948045746008, nr_sectors = 8388600 limit=2048 [ 202.606694][ T5365] syz.4.580: attempt to access beyond end of device [ 202.606694][ T5365] loop4: rw=3, sector=10948054134608, nr_sectors = 8388600 limit=2048 [ 202.621511][ T5365] syz.4.580: attempt to access beyond end of device [ 202.621511][ T5365] loop4: rw=3, sector=10948062523208, nr_sectors = 8388600 limit=2048 [ 202.648929][ T3634] EXT4-fs (loop3): unmounting filesystem. [ 202.674951][ T3926] syz.1.81: attempt to access beyond end of device [ 202.674951][ T3926] loop1: rw=3, sector=17685358224608, nr_sectors = 8388600 limit=2048 [ 202.705556][ T5365] syz.4.580: attempt to access beyond end of device [ 202.705556][ T5365] loop4: rw=3, sector=10948070911808, nr_sectors = 8388600 limit=2048 [ 202.780179][ T3926] syz.1.81: attempt to access beyond end of device [ 202.780179][ T3926] loop1: rw=3, sector=17685366613208, nr_sectors = 8388600 limit=2048 [ 202.801998][ T5365] syz.4.580: attempt to access beyond end of device [ 202.801998][ T5365] loop4: rw=3, sector=10948079300408, nr_sectors = 8388600 limit=2048 [ 202.819396][ T3926] syz.1.81: attempt to access beyond end of device [ 202.819396][ T3926] loop1: rw=3, sector=17685375001808, nr_sectors = 8388600 limit=2048 [ 204.005053][ T7070] program syz.0.1203 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.323156][ T7080] loop2: detected capacity change from 0 to 64 [ 204.324505][ T7038] loop3: detected capacity change from 0 to 40427 [ 204.443987][ T7038] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 204.454001][ T7038] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 204.470699][ T7085] program syz.0.1210 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.524916][ T7038] F2FS-fs (loop3): Found nat_bits in checkpoint [ 204.670211][ T7094] loop0: detected capacity change from 0 to 64 [ 204.688082][ T7038] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 204.688110][ T7038] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 205.635531][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1215'. [ 205.779268][ T7113] loop2: detected capacity change from 0 to 4096 [ 205.849568][ T7113] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 205.899574][ T7113] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 205.942850][ T7113] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 205.950729][ T7113] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 206.028785][ T7113] ntfs3: loop2: try to read out of volume at offset 0x3fffffc1c00 [ 206.051683][ T7113] ntfs3: loop2: try to read out of volume at offset 0x3fffffc2c00 [ 206.084622][ T7113] ntfs3: loop2: try to read out of volume at offset 0x3fffffc4c00 [ 206.108607][ T7113] ntfs3: loop2: try to read out of volume at offset 0x3fffffc8c00 [ 206.128801][ T7113] ntfs3: loop2: try to read out of volume at offset 0x3fffffd0c00 [ 206.174482][ T7113] ntfs3: loop2: try to read out of volume at offset 0x3fffffe0c00 [ 206.192459][ T7131] loop0: detected capacity change from 0 to 4096 [ 206.239003][ T7134] loop3: detected capacity change from 0 to 4096 [ 206.481971][ T7131] EXT4-fs: Ignoring removed oldalloc option [ 206.513985][ T7131] EXT4-fs (loop0): Test dummy encryption mode enabled [ 206.569622][ T7131] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 206.589797][ T7134] EXT4-fs (loop3): Test dummy encryption mode enabled [ 206.664083][ T7134] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 206.801232][ T7151] netlink: ct family unspecified [ 206.812712][ T7151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.944068][ T3634] EXT4-fs (loop3): unmounting filesystem. [ 206.951550][ T5594] EXT4-fs (loop0): unmounting filesystem. [ 207.070833][ T7153] loop2: detected capacity change from 0 to 4096 [ 207.168035][ T7153] ntfs3: loop2: ino=1b, "file0" The size of extended attributes must not exceed 64KiB [ 207.502359][ T26] audit: type=1326 audit(1724045987.280:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7169 comm="syz.0.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd3379e79 code=0x7ffc0000 [ 207.561718][ T3926] bio_check_eod: 102632 callbacks suppressed [ 207.561735][ T3926] syz.1.81: attempt to access beyond end of device [ 207.561735][ T3926] loop1: rw=3, sector=18054154635008, nr_sectors = 8388600 limit=2048 [ 207.582608][ T5365] syz.4.580: attempt to access beyond end of device [ 207.582608][ T5365] loop4: rw=3, sector=11450288005208, nr_sectors = 8388600 limit=2048 [ 207.582654][ T5365] syz.4.580: attempt to access beyond end of device [ 207.582654][ T5365] loop4: rw=3, sector=11450296393808, nr_sectors = 8388600 limit=2048 [ 207.582687][ T5365] syz.4.580: attempt to access beyond end of device [ 207.582687][ T5365] loop4: rw=3, sector=11450304782408, nr_sectors = 8388600 limit=2048 [ 207.582720][ T5365] syz.4.580: attempt to access beyond end of device [ 207.582720][ T5365] loop4: rw=3, sector=11450313171008, nr_sectors = 8388600 limit=2048 [ 207.582753][ T5365] syz.4.580: attempt to access beyond end of device [ 207.582753][ T5365] loop4: rw=3, sector=11450321559608, nr_sectors = 8388600 limit=2048 [ 207.582785][ T5365] syz.4.580: attempt to access beyond end of device [ 207.582785][ T5365] loop4: rw=3, sector=11450329948208, nr_sectors = 8388600 limit=2048 [ 207.656493][ T26] audit: type=1326 audit(1724045987.280:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7169 comm="syz.0.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f0bd3379e79 code=0x7ffc0000 [ 207.723655][ T26] audit: type=1326 audit(1724045987.290:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7169 comm="syz.0.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd3379e79 code=0x7ffc0000 [ 207.750679][ T3926] syz.1.81: attempt to access beyond end of device [ 207.750679][ T3926] loop1: rw=3, sector=18054163023608, nr_sectors = 8388600 limit=2048 [ 207.778447][ T26] audit: type=1326 audit(1724045987.290:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7169 comm="syz.0.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd3379e79 code=0x7ffc0000 [ 207.840744][ T3926] syz.1.81: attempt to access beyond end of device [ 207.840744][ T3926] loop1: rw=3, sector=18054171412208, nr_sectors = 8388600 limit=2048 [ 207.893749][ T26] audit: type=1326 audit(1724045987.290:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7169 comm="syz.0.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f0bd3379e79 code=0x7ffc0000 [ 207.973675][ T26] audit: type=1326 audit(1724045987.290:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7169 comm="syz.0.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd3379e79 code=0x7ffc0000 [ 208.021077][ T3926] syz.1.81: attempt to access beyond end of device [ 208.021077][ T3926] loop1: rw=3, sector=18054179800808, nr_sectors = 8388600 limit=2048 [ 208.054542][ T26] audit: type=1326 audit(1724045987.290:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7169 comm="syz.0.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd3379e79 code=0x7ffc0000 [ 208.188593][ T7197] loop2: detected capacity change from 0 to 64 [ 208.199926][ T7191] loop3: detected capacity change from 0 to 4096 [ 208.226850][ T7197] hfs: uid requires an argument [ 208.246425][ T7197] hfs: unable to parse mount options [ 208.320679][ T7191] ntfs3: loop3: ino=1b, "file0" The size of extended attributes must not exceed 64KiB [ 209.501711][ T4624] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 209.771224][ T7216] loop2: detected capacity change from 0 to 32768 [ 209.846111][ T7242] loop3: detected capacity change from 0 to 4096 [ 209.881886][ T4624] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.902932][ T7242] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 209.916269][ T4624] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.918704][ T3810] udevd[3810]: incorrect nilfs2 checksum on /dev/loop3 [ 209.931983][ T4624] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.974234][ T4624] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 209.981667][ T7242] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 209.991983][ T4624] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.052338][ T4624] usb 1-1: config 0 descriptor?? [ 210.059456][ T7245] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.459298][ T7251] loop2: detected capacity change from 0 to 4096 [ 210.533712][ T7251] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 210.549414][ T4624] koneplus 0003:1E7D:2D51.0026: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 210.581871][ T7251] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 210.611197][ T7251] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 210.666075][ T7251] ntfs: volume version 3.1. [ 210.747917][ T3682] usb 1-1: USB disconnect, device number 19 [ 211.005129][ T7263] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1289'. [ 211.045432][ T7265] loop3: detected capacity change from 0 to 1024 [ 211.164368][ T7265] hfsplus: xattr searching failed [ 211.506147][ T7280] loop0: detected capacity change from 0 to 512 [ 211.633580][ T7280] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 211.694523][ T7280] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 211.714937][ T7277] loop2: detected capacity change from 0 to 4096 [ 211.762261][ T7280] EXT4-fs (loop0): 1 truncate cleaned up [ 211.767953][ T7280] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 211.777959][ T7277] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 211.853330][ T7280] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 211.883449][ T7277] ntfs3: loop2: failed to convert "076c" to cp437 [ 212.052551][ T5594] EXT4-fs (loop0): unmounting filesystem. [ 212.607414][ T7308] netlink: 'syz.2.1310': attribute type 1 has an invalid length. [ 212.615649][ T3926] bio_check_eod: 95803 callbacks suppressed [ 212.615664][ T3926] syz.1.81: attempt to access beyond end of device [ 212.615664][ T3926] loop1: rw=3, sector=18409168575608, nr_sectors = 8388600 limit=2048 [ 212.637415][ T5365] syz.4.580: attempt to access beyond end of device [ 212.637415][ T5365] loop4: rw=3, sector=11910016839608, nr_sectors = 8388600 limit=2048 [ 212.690562][ T7273] loop3: detected capacity change from 0 to 40427 [ 212.704800][ T5365] syz.4.580: attempt to access beyond end of device [ 212.704800][ T5365] loop4: rw=3, sector=11910025228208, nr_sectors = 8388600 limit=2048 [ 212.728370][ T3926] syz.1.81: attempt to access beyond end of device [ 212.728370][ T3926] loop1: rw=3, sector=18409176964208, nr_sectors = 8388600 limit=2048 [ 212.746558][ T7273] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 212.781022][ T7273] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 212.804450][ T3926] syz.1.81: attempt to access beyond end of device [ 212.804450][ T3926] loop1: rw=3, sector=18409185352808, nr_sectors = 8388600 limit=2048 [ 212.827066][ T7313] loop2: detected capacity change from 0 to 1024 [ 212.872918][ T7273] F2FS-fs (loop3): Found nat_bits in checkpoint [ 212.884604][ T7316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1312'. [ 212.921769][ T5365] syz.4.580: attempt to access beyond end of device [ 212.921769][ T5365] loop4: rw=3, sector=11910033616808, nr_sectors = 8388600 limit=2048 [ 212.939298][ T3926] syz.1.81: attempt to access beyond end of device [ 212.939298][ T3926] loop1: rw=3, sector=18409193741408, nr_sectors = 8388600 limit=2048 [ 212.993194][ T7313] hfsplus: bad catalog entry type [ 212.995656][ T3926] syz.1.81: attempt to access beyond end of device [ 212.995656][ T3926] loop1: rw=3, sector=18409202130008, nr_sectors = 8388600 limit=2048 [ 213.031757][ T5365] syz.4.580: attempt to access beyond end of device [ 213.031757][ T5365] loop4: rw=3, sector=11910042005408, nr_sectors = 8388600 limit=2048 [ 213.054605][ T7273] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 213.081859][ T7273] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 213.101731][ T3926] syz.1.81: attempt to access beyond end of device [ 213.101731][ T3926] loop1: rw=3, sector=18409210518608, nr_sectors = 8388600 limit=2048 [ 213.141095][ T3689] hfsplus: b-tree write err: -5, ino 4 [ 213.277425][ T7330] loop0: detected capacity change from 0 to 512 [ 213.343105][ T7330] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 213.352235][ T7330] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 213.380623][ T7330] System zones: 0-1, 15-15, 18-18, 34-34 [ 213.391057][ T7330] EXT4-fs (loop0): orphan cleanup on readonly fs [ 213.430210][ T7330] __quota_error: 3 callbacks suppressed [ 213.430233][ T7330] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 213.498681][ T7330] EXT4-fs warning (device loop0): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 213.523020][ T41] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 213.541117][ T7330] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 213.573218][ T7330] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1320: bg 0: block 40: padding at end of block bitmap is not set [ 213.602445][ T7330] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 213.622828][ T7330] EXT4-fs (loop0): 1 truncate cleaned up [ 213.628519][ T7330] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 213.731997][ T7330] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.1320: corrupted xattr block 19 [ 213.792281][ T41] usb 3-1: Using ep0 maxpacket: 16 [ 214.082031][ T41] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 214.097493][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.121699][ T41] usb 3-1: Product: syz [ 214.125898][ T41] usb 3-1: Manufacturer: syz [ 214.171899][ T41] usb 3-1: SerialNumber: syz [ 214.187309][ T26] audit: type=1800 audit(1724045993.960:30): pid=7330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1320" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 214.194940][ T41] usb 3-1: config 0 descriptor?? [ 214.332208][ T5594] EXT4-fs (loop0): unmounting filesystem. [ 214.457058][ T7352] loop3: detected capacity change from 0 to 8192 [ 214.497294][ T7352] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 214.526846][ T41] usb 3-1: USB disconnect, device number 22 [ 214.891178][ T7360] loop3: detected capacity change from 0 to 64 [ 214.951524][ T7362] autofs4:pid:7362:autofs_fill_super: called with bogus options [ 215.665218][ T7356] loop0: detected capacity change from 0 to 40427 [ 215.698568][ T7356] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 215.746157][ T7356] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 215.816237][ T7356] F2FS-fs (loop0): Found nat_bits in checkpoint [ 216.013706][ T7356] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 216.020873][ T7356] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 216.112899][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1348'. [ 216.155248][ T7356] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 216.210250][ T7356] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 216.433223][ T7404] IPVS: Unknown mcast interface: pim6reg [ 216.521696][ T4629] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 216.695315][ T7409] netlink: 'syz.4.1356': attribute type 2 has an invalid length. [ 216.771992][ T4629] usb 4-1: Using ep0 maxpacket: 8 [ 216.891960][ T4629] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.918654][ T4629] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.948486][ T4629] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 216.978787][ T4629] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.014493][ T4629] usb 4-1: config 0 descriptor?? [ 217.571722][ T4629] hid-picolcd 0003:04D8:F002.0027: No report with id 0xf3 found [ 217.580695][ T4629] hid-picolcd 0003:04D8:F002.0027: No report with id 0xf4 found [ 217.623268][ T3926] bio_check_eod: 98633 callbacks suppressed [ 217.623286][ T3926] syz.1.81: attempt to access beyond end of device [ 217.623286][ T3926] loop1: rw=3, sector=18825100529408, nr_sectors = 8388600 limit=2048 [ 217.625154][ T5365] syz.4.580: attempt to access beyond end of device [ 217.625154][ T5365] loop4: rw=3, sector=12332517067208, nr_sectors = 8388600 limit=2048 [ 217.629224][ T3926] syz.1.81: attempt to access beyond end of device [ 217.629224][ T3926] loop1: rw=3, sector=18825108918008, nr_sectors = 8388600 limit=2048 [ 217.706703][ T41] usb 4-1: USB disconnect, device number 10 [ 217.726504][ T5365] syz.4.580: attempt to access beyond end of device [ 217.726504][ T5365] loop4: rw=3, sector=12332525455808, nr_sectors = 8388600 limit=2048 [ 217.729466][ T7433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1367'. [ 217.788479][ T5365] syz.4.580: attempt to access beyond end of device [ 217.788479][ T5365] loop4: rw=3, sector=12332533844408, nr_sectors = 8388600 limit=2048 [ 217.804126][ T3926] syz.1.81: attempt to access beyond end of device [ 217.804126][ T3926] loop1: rw=3, sector=18825117306608, nr_sectors = 8388600 limit=2048 [ 217.831998][ T5365] syz.4.580: attempt to access beyond end of device [ 217.831998][ T5365] loop4: rw=3, sector=12332542233008, nr_sectors = 8388600 limit=2048 [ 217.852889][ T3926] syz.1.81: attempt to access beyond end of device [ 217.852889][ T3926] loop1: rw=3, sector=18825125695208, nr_sectors = 8388600 limit=2048 [ 217.895463][ T5365] syz.4.580: attempt to access beyond end of device [ 217.895463][ T5365] loop4: rw=3, sector=12332550621608, nr_sectors = 8388600 limit=2048 [ 217.931905][ T3926] syz.1.81: attempt to access beyond end of device [ 217.931905][ T3926] loop1: rw=3, sector=18825134083808, nr_sectors = 8388600 limit=2048 [ 218.135197][ T7446] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1371'. [ 218.769538][ T7468] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1382'. [ 218.891863][ T4629] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 219.162403][ T4629] usb 4-1: Using ep0 maxpacket: 8 [ 219.185610][ T7481] loop0: detected capacity change from 0 to 512 [ 219.203065][ T7481] EXT4-fs: Ignoring removed bh option [ 219.228724][ T7481] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 219.281729][ T7481] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=880fc018, mo2=0002] [ 219.290981][ T7481] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 219.377495][ T7481] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 219.441748][ T7486] binder: BINDER_SET_CONTEXT_MGR already set [ 219.442090][ T4629] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 219.448273][ T7486] binder: 7485:7486 ioctl 40046207 0 returned -16 [ 219.449491][ T7481] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 219.489484][ T4629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.519873][ T4629] usb 4-1: Product: syz [ 219.533984][ T4629] usb 4-1: Manufacturer: syz [ 219.538621][ T4629] usb 4-1: SerialNumber: syz [ 219.554215][ T7481] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.1389: dx entry: limit 65535 != root limit 120 [ 219.579439][ T4629] usb 4-1: config 0 descriptor?? [ 219.606792][ T7481] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1389: Corrupt directory, running e2fsck is recommended [ 219.657177][ T7481] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz.0.1389: path /146/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 219.852039][ T5594] EXT4-fs (loop0): unmounting filesystem. [ 219.897758][ T4629] msi2500 4-1:0.0: Registered as swradio16 [ 219.915198][ T4629] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 219.970823][ T4629] usb 4-1: USB disconnect, device number 11 [ 220.194212][ T7508] loop2: detected capacity change from 0 to 16 [ 220.230190][ T7508] erofs: (device loop2): mounted with root inode @ nid 36. [ 220.442426][ T7515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1403'. [ 221.602006][ T5199] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 221.659080][ T7516] loop0: detected capacity change from 0 to 32768 [ 221.696138][ T7526] loop2: detected capacity change from 0 to 32768 [ 221.703832][ T7516] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 221.721744][ T7516] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 221.749433][ T7516] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 221.805812][ T41] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 221.831061][ T41] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 221.939852][ T41] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 108ms [ 221.954921][ T7532] loop3: detected capacity change from 0 to 32768 [ 221.982583][ T41] gfs2: fsid=syz:syz.0: jid=0: Done [ 221.988538][ T7516] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 222.145724][ T7532] XFS (loop3): Mounting V5 Filesystem [ 222.201970][ T5199] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 222.221298][ T5199] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.229417][ T5199] usb 5-1: Product: syz [ 222.234304][ T5199] usb 5-1: Manufacturer: syz [ 222.238924][ T5199] usb 5-1: SerialNumber: syz [ 222.267697][ T5199] usb 5-1: config 0 descriptor?? [ 222.323491][ T5199] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 008 [ 222.379215][ T7532] XFS (loop3): Ending clean mount [ 222.419172][ T7546] loop0: detected capacity change from 0 to 16 [ 222.482998][ T7546] erofs: (device loop0): mounted with root inode @ nid 36. [ 222.540390][ T3634] XFS (loop3): Unmounting Filesystem [ 222.561935][ T5199] (null): failure setting delay to 10us [ 222.567741][ T5199] i2c-tiny-usb: probe of 5-1:0.0 failed with error -5 [ 222.632844][ T5365] bio_check_eod: 112713 callbacks suppressed [ 222.632861][ T5365] syz.4.580: attempt to access beyond end of device [ 222.632861][ T5365] loop4: rw=3, sector=12826597218608, nr_sectors = 8388600 limit=2048 [ 222.634557][ T5199] usb 5-1: USB disconnect, device number 8 [ 222.638935][ T3926] syz.1.81: attempt to access beyond end of device [ 222.638935][ T3926] loop1: rw=3, sector=19284451876808, nr_sectors = 8388600 limit=2048 [ 222.668904][ T5365] syz.4.580: attempt to access beyond end of device [ 222.668904][ T5365] loop4: rw=3, sector=12826605607208, nr_sectors = 8388600 limit=2048 [ 222.685059][ T3926] syz.1.81: attempt to access beyond end of device [ 222.685059][ T3926] loop1: rw=3, sector=19284460265408, nr_sectors = 8388600 limit=2048 [ 222.791898][ T5365] syz.4.580: attempt to access beyond end of device [ 222.791898][ T5365] loop4: rw=3, sector=12826613995808, nr_sectors = 8388600 limit=2048 [ 222.808862][ T3926] syz.1.81: attempt to access beyond end of device [ 222.808862][ T3926] loop1: rw=3, sector=19284468654008, nr_sectors = 8388600 limit=2048 [ 222.838313][ T5365] syz.4.580: attempt to access beyond end of device [ 222.838313][ T5365] loop4: rw=3, sector=12826622384408, nr_sectors = 8388600 limit=2048 [ 222.869757][ T3926] syz.1.81: attempt to access beyond end of device [ 222.869757][ T3926] loop1: rw=3, sector=19284477042608, nr_sectors = 8388600 limit=2048 [ 222.881674][ T5365] syz.4.580: attempt to access beyond end of device [ 222.881674][ T5365] loop4: rw=3, sector=12826630773008, nr_sectors = 8388600 limit=2048 [ 222.891315][ T3926] syz.1.81: attempt to access beyond end of device [ 222.891315][ T3926] loop1: rw=3, sector=19284485431208, nr_sectors = 8388600 limit=2048 [ 223.029272][ T7554] loop2: detected capacity change from 0 to 1024 [ 223.131879][ T41] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 223.219938][ T7556] loop3: detected capacity change from 0 to 764 [ 223.342840][ T7556] Symlink component flag not implemented [ 223.370593][ T7556] Symlink component flag not implemented (101) [ 223.376944][ T41] usb 1-1: Using ep0 maxpacket: 8 [ 223.671893][ T41] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 223.699950][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.728823][ T41] usb 1-1: Product: syz [ 223.741669][ T41] usb 1-1: Manufacturer: syz [ 223.746294][ T41] usb 1-1: SerialNumber: syz [ 223.780088][ T41] usb 1-1: config 0 descriptor?? [ 224.003812][ T41] msi2500 1-1:0.0: Registered as swradio16 [ 224.009663][ T41] msi2500 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 224.073682][ T41] usb 1-1: USB disconnect, device number 20 [ 224.465116][ T7561] loop2: detected capacity change from 0 to 32768 [ 224.490083][ T7561] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1422 (7561) [ 224.557047][ T7561] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 224.607964][ T7561] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 224.641761][ T7561] BTRFS info (device loop2): setting nodatasum [ 224.647963][ T7561] BTRFS info (device loop2): enabling auto defrag [ 224.703177][ T7561] BTRFS info (device loop2): disabling tree log [ 224.709764][ T7561] BTRFS info (device loop2): using free space tree [ 224.773844][ T7594] smb3: Unexpected value for 'acl' [ 225.056266][ T7623] autofs4:pid:7623:autofs_fill_super: called with bogus options [ 225.108753][ T7561] BTRFS info (device loop2): enabling ssd optimizations [ 225.397078][ T3641] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 225.811872][ T41] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 226.214881][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.242437][ T7662] netlink: 'syz.2.1459': attribute type 1 has an invalid length. [ 226.251655][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.261438][ T41] usb 1-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 226.344744][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.369028][ T41] usb 1-1: config 0 descriptor?? [ 226.861181][ T41] wacom 0003:056A:00FA.0028: hidraw0: USB HID v0.00 Device [HID 056a:00fa] on usb-dummy_hcd.0-1/input0 [ 227.092591][ T14] usb 1-1: USB disconnect, device number 21 [ 227.359445][ T7661] loop3: detected capacity change from 0 to 40427 [ 227.392527][ T41] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 227.421964][ T7661] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 227.437078][ T7661] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 227.489598][ T7661] F2FS-fs (loop3): Found nat_bits in checkpoint [ 227.525218][ T7697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1474'. [ 227.581757][ T7697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1474'. [ 227.629846][ T7661] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 227.648989][ T3926] bio_check_eod: 108593 callbacks suppressed [ 227.649007][ T3926] syz.1.81: attempt to access beyond end of device [ 227.649007][ T3926] loop1: rw=3, sector=19691156370608, nr_sectors = 8388600 limit=2048 [ 227.668532][ T7661] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 227.677293][ T3926] syz.1.81: attempt to access beyond end of device [ 227.677293][ T3926] loop1: rw=3, sector=19691164759208, nr_sectors = 8388600 limit=2048 [ 227.677334][ T3926] syz.1.81: attempt to access beyond end of device [ 227.677334][ T3926] loop1: rw=3, sector=19691173147808, nr_sectors = 8388600 limit=2048 [ 227.677366][ T3926] syz.1.81: attempt to access beyond end of device [ 227.677366][ T3926] loop1: rw=3, sector=19691181536408, nr_sectors = 8388600 limit=2048 [ 227.677399][ T3926] syz.1.81: attempt to access beyond end of device [ 227.677399][ T3926] loop1: rw=3, sector=19691189925008, nr_sectors = 8388600 limit=2048 [ 227.701120][ T5365] syz.4.580: attempt to access beyond end of device [ 227.701120][ T5365] loop4: rw=3, sector=13349894863808, nr_sectors = 8388600 limit=2048 [ 227.763191][ T3926] syz.1.81: attempt to access beyond end of device [ 227.763191][ T3926] loop1: rw=3, sector=19691198313608, nr_sectors = 8388600 limit=2048 [ 227.812088][ T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.821379][ T3926] syz.1.81: attempt to access beyond end of device [ 227.821379][ T3926] loop1: rw=3, sector=19691206702208, nr_sectors = 8388600 limit=2048 [ 227.832497][ T7700] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1476'. [ 227.867451][ T5365] syz.4.580: attempt to access beyond end of device [ 227.867451][ T5365] loop4: rw=3, sector=13349903252408, nr_sectors = 8388600 limit=2048 [ 227.867791][ T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.901385][ T5365] syz.4.580: attempt to access beyond end of device [ 227.901385][ T5365] loop4: rw=3, sector=13349911641008, nr_sectors = 8388600 limit=2048 [ 227.933440][ T41] usb 3-1: New USB device found, idVendor=0eef, idProduct=c002, bcdDevice= 0.00 [ 227.963149][ T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.019173][ T41] usb 3-1: config 0 descriptor?? [ 228.089938][ T7706] loop0: detected capacity change from 0 to 16 [ 228.182354][ T7706] erofs: (device loop0): mounted with root inode @ nid 36. [ 228.517681][ T41] hid-generic 0003:0EEF:C002.0029: hidraw0: USB HID v0.00 Device [HID 0eef:c002] on usb-dummy_hcd.2-1/input0 [ 228.714548][ T26] audit: type=1400 audit(1724046008.490:31): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=3AA7F8EC696C7F728D9CBCE7CC29B047B7865D1CD970ED3359DB6D8EE9D63E983A pid=7717 comm="syz.4.1485" [ 228.799131][ T41] usb 3-1: USB disconnect, device number 23 [ 228.926285][ T7728] netlink: 822 bytes leftover after parsing attributes in process `syz.0.1490'. [ 229.992758][ T7771] loop3: detected capacity change from 0 to 64 [ 230.065815][ T7771] hfs: unable to locate alternate MDB [ 230.065860][ T7771] hfs: continuing without an alternate MDB [ 230.555429][ T7788] loop2: detected capacity change from 0 to 256 [ 230.710290][ T7788] FAT-fs (loop2): Directory bread(block 64) failed [ 230.748951][ T7788] FAT-fs (loop2): Directory bread(block 65) failed [ 230.791756][ T7788] FAT-fs (loop2): Directory bread(block 66) failed [ 230.798316][ T7788] FAT-fs (loop2): Directory bread(block 67) failed [ 230.849991][ T7788] FAT-fs (loop2): Directory bread(block 68) failed [ 230.877279][ T7788] FAT-fs (loop2): Directory bread(block 69) failed [ 230.931915][ T7788] FAT-fs (loop2): Directory bread(block 70) failed [ 230.938514][ T7788] FAT-fs (loop2): Directory bread(block 71) failed [ 230.981721][ T7788] FAT-fs (loop2): Directory bread(block 72) failed [ 231.055393][ T7788] FAT-fs (loop2): Directory bread(block 73) failed [ 231.330819][ T7808] loop0: detected capacity change from 0 to 4096 [ 231.392261][ T7808] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 231.472588][ T7808] ntfs3: loop0: Failed to load $Extend. [ 231.995331][ T7839] loop2: detected capacity change from 0 to 256 [ 232.029280][ T7839] exfat: Deprecated parameter 'utf8' [ 232.046853][ T7839] exfat: Deprecated parameter 'utf8' [ 232.112492][ T7839] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 232.238576][ T26] audit: type=1800 audit(1724046012.010:32): pid=7839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1534" name="bus" dev="loop2" ino=1048726 res=0 errno=0 [ 232.651784][ T14] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 232.654657][ T3926] bio_check_eod: 87420 callbacks suppressed [ 232.654673][ T3926] syz.1.81: attempt to access beyond end of device [ 232.654673][ T3926] loop1: rw=3, sector=20071478717408, nr_sectors = 8388600 limit=2048 [ 232.696756][ T5365] syz.4.580: attempt to access beyond end of device [ 232.696756][ T5365] loop4: rw=3, sector=13718749994408, nr_sectors = 8388600 limit=2048 [ 232.743610][ T5365] syz.4.580: attempt to access beyond end of device [ 232.743610][ T5365] loop4: rw=3, sector=13718758383008, nr_sectors = 8388600 limit=2048 [ 232.781964][ T5365] syz.4.580: attempt to access beyond end of device [ 232.781964][ T5365] loop4: rw=3, sector=13718766771608, nr_sectors = 8388600 limit=2048 [ 232.810884][ T3926] syz.1.81: attempt to access beyond end of device [ 232.810884][ T3926] loop1: rw=3, sector=20071487106008, nr_sectors = 8388600 limit=2048 [ 232.839889][ T5365] syz.4.580: attempt to access beyond end of device [ 232.839889][ T5365] loop4: rw=3, sector=13718775160208, nr_sectors = 8388600 limit=2048 [ 232.850284][ T7869] loop3: detected capacity change from 0 to 2048 [ 232.865560][ T7874] loop0: detected capacity change from 0 to 64 [ 232.895631][ T5365] syz.4.580: attempt to access beyond end of device [ 232.895631][ T5365] loop4: rw=3, sector=13718783548808, nr_sectors = 8388600 limit=2048 [ 232.909022][ T3926] syz.1.81: attempt to access beyond end of device [ 232.909022][ T3926] loop1: rw=3, sector=20071495494608, nr_sectors = 8388600 limit=2048 [ 232.931992][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 232.952372][ T7876] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 233.022414][ T3926] syz.1.81: attempt to access beyond end of device [ 233.022414][ T3926] loop1: rw=3, sector=20071503883208, nr_sectors = 8388600 limit=2048 [ 233.032887][ T5365] syz.4.580: attempt to access beyond end of device [ 233.032887][ T5365] loop4: rw=3, sector=13718791937408, nr_sectors = 8388600 limit=2048 [ 233.151968][ T27] INFO: task segctord:3931 blocked for more than 143 seconds. [ 233.159489][ T27] Not tainted 6.1.106-syzkaller #0 [ 233.172103][ T14] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.201664][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 233.238095][ T27] task:segctord state:D stack:28248 pid:3931 ppid:2 flags:0x00004000 [ 233.271805][ T27] Call Trace: [ 233.275136][ T27] [ 233.288311][ T27] __schedule+0x143f/0x4570 [ 233.297636][ T27] ? release_firmware_map_entry+0x186/0x186 [ 233.349809][ T27] ? print_irqtrace_events+0x210/0x210 [ 233.352137][ T14] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0005, bcdDevice=f4.bb [ 233.356642][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 233.385594][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.389915][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 233.413673][ T14] usb 5-1: Product: syz [ 233.421778][ T14] usb 5-1: Manufacturer: syz [ 233.423336][ T27] schedule+0xbf/0x180 [ 233.430464][ T27] rwsem_down_write_slowpath+0xea1/0x14b0 [ 233.432116][ T14] usb 5-1: SerialNumber: syz [ 233.456592][ T14] usb 5-1: config 0 descriptor?? [ 233.478522][ T27] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 233.491726][ T27] ? down_write_killable_nested+0x90/0x90 [ 233.497483][ T27] ? read_lock_is_recursive+0x10/0x10 [ 233.504019][ T14] ati_remote 5-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 233.521731][ T27] ? rcu_is_watching+0x11/0xb0 [ 233.541695][ T27] nilfs_transaction_lock+0x25c/0x4f0 [ 233.547127][ T27] nilfs_segctor_thread+0x547/0x11a0 [ 233.583004][ T27] ? print_irqtrace_events+0x210/0x210 [ 233.588530][ T27] ? nilfs_iput_work_func+0x70/0x70 [ 233.611657][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 233.617604][ T27] ? release_firmware_map_entry+0x186/0x186 [ 233.632235][ T27] ? wake_bit_function+0x210/0x210 [ 233.641910][ T27] ? _raw_spin_unlock+0x40/0x40 [ 233.646798][ T27] ? __kthread_parkme+0x168/0x1c0 [ 233.661692][ T27] kthread+0x28d/0x320 [ 233.665809][ T27] ? nilfs_iput_work_func+0x70/0x70 [ 233.671033][ T27] ? kthread_blkcg+0xd0/0xd0 [ 233.726566][ T27] ret_from_fork+0x1f/0x30 [ 233.731061][ T27] [ 233.751707][ T27] [ 233.751707][ T27] Showing all locks held in the system: [ 233.780097][ T27] 1 lock held by rcu_tasks_kthre/12: [ 233.787616][ T27] #0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 233.807005][ T5199] usb 5-1: USB disconnect, device number 9 [ 233.818581][ T27] 1 lock held by rcu_tasks_trace/13: [ 233.841658][ T27] #0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 233.873048][ T27] 2 locks held by kworker/0:1/14: [ 233.878110][ T27] #0: ffff888012872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 233.919152][ T27] #1: ffffc90000137d20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 233.949985][ T7883] loop3: detected capacity change from 0 to 32768 [ 233.951194][ T27] 1 lock held by khungtaskd/27: [ 233.998137][ T27] #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 234.048131][ T27] 2 locks held by getty/3391: [ 234.057397][ T27] #0: ffff88814b25d098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 234.080359][ T27] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 234.101938][ T27] 1 lock held by syz-executor/3634: [ 234.111767][ T27] #0: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 234.136940][ T27] 3 locks held by syz.1.81/3926: [ 234.147497][ T27] 1 lock held by segctord/3931: [ 234.156867][ T27] #0: ffff88801b3602a0 (&nilfs->ns_segctor_sem){++++}-{3:3}, at: nilfs_transaction_lock+0x25c/0x4f0 [ 234.182272][ T27] 5 locks held by syz.4.580/5365: [ 234.193135][ T27] 1 lock held by syz.4.1539/7850: [ 234.203913][ T27] #0: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 234.227470][ T27] [ 234.233443][ T27] ============================================= [ 234.233443][ T27] [ 234.252045][ T27] NMI backtrace for cpu 0 [ 234.256497][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.106-syzkaller #0 [ 234.264397][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 234.274552][ T27] Call Trace: [ 234.277834][ T27] [ 234.280767][ T27] dump_stack_lvl+0x1e3/0x2cb [ 234.285466][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 234.290941][ T27] ? panic+0x764/0x764 [ 234.295098][ T27] ? vprintk_emit+0x622/0x740 [ 234.299785][ T27] ? printk_sprint+0x490/0x490 [ 234.304562][ T27] ? nmi_cpu_backtrace+0x252/0x560 [ 234.309711][ T27] nmi_cpu_backtrace+0x4e1/0x560 [ 234.314681][ T27] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 234.320866][ T27] ? _printk+0xd1/0x111 [ 234.325022][ T27] ? panic+0x764/0x764 [ 234.329090][ T27] ? __wake_up_klogd+0xcc/0x100 [ 234.333944][ T27] ? panic+0x764/0x764 [ 234.338018][ T27] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 234.344093][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 234.350169][ T27] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 234.356163][ T27] watchdog+0xf88/0xfd0 [ 234.360329][ T27] ? watchdog+0x1f8/0xfd0 [ 234.364669][ T27] kthread+0x28d/0x320 [ 234.368744][ T27] ? hungtask_pm_notify+0x50/0x50 [ 234.373775][ T27] ? kthread_blkcg+0xd0/0xd0 [ 234.378370][ T27] ret_from_fork+0x1f/0x30 [ 234.382808][ T27] [ 234.387026][ T27] Sending NMI from CPU 0 to CPUs 1: [ 234.392692][ C1] NMI backtrace for cpu 1 [ 234.392703][ C1] CPU: 1 PID: 41 Comm: kworker/1:1 Not tainted 6.1.106-syzkaller #0 [ 234.392719][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 234.392729][ C1] Workqueue: events nsim_dev_trap_report_work [ 234.392757][ C1] RIP: 0010:mark_lock+0x5e/0x340 [ 234.392780][ C1] Code: 84 c0 0f 85 83 02 00 00 31 ed f6 43 02 03 40 0f 94 c5 83 f5 09 eb 0b 89 d5 83 fa 20 0f 83 d2 02 00 00 41 be 01 00 00 00 89 e9 <41> d3 e6 49 8d 5f 20 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f [ 234.392793][ C1] RSP: 0018:ffffc90000b27938 EFLAGS: 00000087 [ 234.392805][ C1] RAX: 0000000000040746 RBX: ffff888016eea918 RCX: 0000000000000002 [ 234.392815][ C1] RDX: 0000000000000002 RSI: ffff888016eea918 RDI: ffff888016ee9dc0 [ 234.392825][ C1] RBP: 0000000000000002 R08: dffffc0000000000 R09: fffffbfff20e7662 [ 234.392835][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888016eea938 [ 234.392846][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888016eea918 [ 234.392856][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 234.392869][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 234.392879][ C1] CR2: 00007ffdd92ffff8 CR3: 000000005bc32000 CR4: 00000000003506e0 [ 234.392892][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 234.392900][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 234.392909][ C1] Call Trace: [ 234.392914][ C1] [ 234.392919][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 234.392940][ C1] ? read_lock_is_recursive+0x10/0x10 [ 234.392961][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 234.392989][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 234.393010][ C1] ? nmi_handle+0x12e/0x440 [ 234.393031][ C1] ? nmi_handle+0x25/0x440 [ 234.393051][ C1] ? mark_lock+0x5e/0x340 [ 234.393070][ C1] ? default_do_nmi+0x62/0x150 [ 234.393083][ C1] ? exc_nmi+0xa8/0x100 [ 234.393096][ C1] ? end_repeat_nmi+0x16/0x31 [ 234.393119][ C1] ? mark_lock+0x5e/0x340 [ 234.393138][ C1] ? mark_lock+0x5e/0x340 [ 234.393159][ C1] ? mark_lock+0x5e/0x340 [ 234.393185][ C1] [ 234.393189][ C1] [ 234.393195][ C1] lockdep_hardirqs_on_prepare+0x27d/0x7a0 [ 234.393217][ C1] ? print_irqtrace_events+0x210/0x210 [ 234.393238][ C1] ? kasan_quarantine_put+0x39/0x220 [ 234.393256][ C1] trace_hardirqs_on+0x34/0x40 [ 234.393276][ C1] kasan_quarantine_put+0xd4/0x220 [ 234.393293][ C1] __kmem_cache_free+0x25c/0x3c0 [ 234.393312][ C1] ? skb_release_data+0x5de/0x7a0 [ 234.393333][ C1] skb_release_data+0x5de/0x7a0 [ 234.393355][ C1] consume_skb+0xa3/0x140 [ 234.393374][ C1] nsim_dev_trap_report_work+0x75d/0xa90 [ 234.393399][ C1] ? process_one_work+0x7a9/0x11d0 [ 234.393415][ C1] process_one_work+0x8a9/0x11d0 [ 234.393436][ C1] ? worker_detach_from_pool+0x260/0x260 [ 234.393461][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 234.393477][ C1] ? kthread_data+0x4e/0xc0 [ 234.393498][ C1] ? wq_worker_running+0x97/0x190 [ 234.393520][ C1] worker_thread+0xa47/0x1200 [ 234.393539][ C1] ? _raw_spin_unlock+0x40/0x40 [ 234.393559][ C1] kthread+0x28d/0x320 [ 234.393571][ C1] ? worker_clr_flags+0x190/0x190 [ 234.393586][ C1] ? kthread_blkcg+0xd0/0xd0 [ 234.393599][ C1] ret_from_fork+0x1f/0x30 [ 234.393624][ C1] [ 234.580737][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 234.580754][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.106-syzkaller #0 [ 234.580771][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 234.580780][ T27] Call Trace: [ 234.580786][ T27] [ 234.580792][ T27] dump_stack_lvl+0x1e3/0x2cb [ 234.580821][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 234.580843][ T27] ? panic+0x764/0x764 [ 234.580864][ T27] ? vscnprintf+0x59/0x80 [ 234.580883][ T27] panic+0x318/0x764 [ 234.580900][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 234.580922][ T27] ? memcpy_page_flushcache+0xfc/0xfc [ 234.580947][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 234.580968][ T27] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 234.580991][ T27] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 234.581014][ T27] watchdog+0xfc7/0xfd0 [ 234.581038][ T27] ? watchdog+0x1f8/0xfd0 [ 234.581060][ T27] kthread+0x28d/0x320 [ 234.581074][ T27] ? hungtask_pm_notify+0x50/0x50 [ 234.581092][ T27] ? kthread_blkcg+0xd0/0xd0 [ 234.581108][ T27] ret_from_fork+0x1f/0x30 [ 234.581138][ T27] [ 234.584676][ T27] Kernel Offset: disabled [ 234.836762][ T27] Rebooting in 86400 seconds..