last executing test programs: 3.708406419s ago: executing program 3 (id=1835): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 3.625337906s ago: executing program 3 (id=1836): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x21000e, &(0x7f0000000280), 0xfe, 0x504, &(0x7f0000000a40)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') 3.307902236s ago: executing program 3 (id=1839): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00') madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 3.163788999s ago: executing program 3 (id=1841): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001440)={{0x12, 0x1, 0x0, 0xab, 0xd1, 0xa0, 0x40, 0x77b, 0x2226, 0xca8b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3a, 0x92, 0xf8}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.759938466s ago: executing program 1 (id=1846): futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x20000003, 0x1, 0x2, 0x0, 0x0, 0x1) 2.38553611s ago: executing program 2 (id=1854): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x2, @pix_mp={0x0, 0x0, 0x47425247}}) 2.251393553s ago: executing program 2 (id=1858): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x32525942}}) 2.121083335s ago: executing program 2 (id=1870): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @empty, @empty}}}}) 2.031724033s ago: executing program 2 (id=1861): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="70010000100033060000000000000000ffffffff000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2001000000000000000000000000000200000000320000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006ca90000000000000000000000000000000000000000000000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0020000000000000000000ac1e00010000000000000000000000001c0004"], 0x170}}, 0x0) 1.908638964s ago: executing program 2 (id=1863): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000140)={[{@journal_async_commit}, {@heartbeat_none}, {@localflocks}, {@inode64}, {@localalloc={'localalloc', 0x3d, 0xfffffffffffffffa}}, {@noacl}]}, 0x5, 0x4712, &(0x7f0000008f40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, 0xee00, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0xf, 0x3, 0x4, 0x0, 0x3}) 1.814525173s ago: executing program 1 (id=1865): syz_mount_image$minix(&(0x7f0000000480), &(0x7f0000000000)='./file1\x00', 0x42, &(0x7f0000000540)=ANY=[], 0xd, 0x192, &(0x7f0000000700)="$eJzs281OGlEUwPEzDGWAftHSdtE0aZMu2o0MoJK400dBGAlxUCNuIC7QF/AZfD9ZGDeuxMyVGeLAQCDCHcL/t4DLPffjXMKFs0EAbKx9+SOGGJLwXvxK527yhu6UAKzIYPj8NACwecxH3RkA0KN/IKr2v7u/rImZCuoCv+XFe348YY3VD/0rkZ/JYdxISyZcX9yK/PPnG9nw9AevJxvE34fCKbX+/7/+/h/ko3ySz5KTL/JV8sP968H8H/OWP+MHAgBgAxhSmBWPGPBOPWbkqOk6RTUy5HBHjfLipcj1Uypenho3f0fnZ6n5hdqpW596DgDjEgvf/xdmcP8nS864/wD0aXe6x1XXdc5j0Ei/zmdgiSxxUysOR17fhiXhnuSbrJyJDF3LpJD3odH/bszb6IV7vGo6BomZozR0fzMBWDb7onVmtzvdrWar2nAazkm5WNyr7G6XKmVbVfb29PoewPoa/frrzgQAAAAAAAAAAAAAACzqm3zXnQIAAACAFVnF/4p0nxEAgNh5DgAA//8r8BcP") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 1.568540426s ago: executing program 1 (id=1869): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x20) 1.373323443s ago: executing program 1 (id=1873): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 1.362406815s ago: executing program 3 (id=1874): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x37, 0x2d, 0x4e, 0x3a, 0x30, 0x2f, 0x0]}}}, 0x4e}]}) 1.191895971s ago: executing program 1 (id=1878): r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0}) 1.09056961s ago: executing program 3 (id=1879): r0 = syz_mount_image$xfs(&(0x7f0000000340), &(0x7f0000000000)='./file0\x00', 0x2218a5d, &(0x7f0000000140), 0x0, 0x96d6, &(0x7f0000013100)="$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") ioctl$FS_IOC_GETFSMAP(r0, 0x8080583a, 0x0) 1.08450592s ago: executing program 0 (id=1880): syz_emit_ethernet(0x4a, &(0x7f0000000200)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000740)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4}, @sack_perm={0x4, 0x2}, @generic={0x0, 0xa, "8bfbd54ae56dd076"}, @generic={0x0, 0xc, "3836eb47eb1bad12f07e"}, @fastopen={0x22, 0x2}, @md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}, @eol, @exp_fastopen={0xfe, 0xc, 0xf989, "830db53e1a58e754"}]}}}}}}}}, 0x0) 1.009493307s ago: executing program 1 (id=1881): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x62, 0xa1, 0xb, 0x40, 0xc45, 0x1010, 0xe6fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x1, 0x97, 0x40, 0xa4, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x3ff, 0x0, 0x7e}}]}}]}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x28c, &(0x7f0000000200)=ANY=[]) 940.020564ms ago: executing program 0 (id=1883): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000044000000030a010100000000000000000100000008000b400000000014000480080002406106000000000000000000000900010073797a300000000008000540ffffffff"], 0x8c}}, 0x0) 833.335023ms ago: executing program 4 (id=1884): r0 = syz_open_dev$video(&(0x7f00000002c0), 0xa5, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x1, @pix={0x0, 0x0, 0x32314752}}) 698.941856ms ago: executing program 0 (id=1885): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x98f904, 0x2, @name="59f93bc3944c07d94540006bd700"}) 695.501096ms ago: executing program 4 (id=1886): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000780)={0xd, @capture={0x1000, 0x1, {0x5, 0x4}, 0x9, 0x4}}) 608.455704ms ago: executing program 0 (id=1887): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000200)=0x4, 0x4) 527.810141ms ago: executing program 4 (id=1888): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 363.966037ms ago: executing program 4 (id=1889): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f00000000c0)={0x2, "68033f0a1a1589188b0966e30230fc161f233f0a441043fd1327a1eb26eac356"}) 363.271127ms ago: executing program 0 (id=1890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x12000000, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) 259.100656ms ago: executing program 2 (id=1891): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x6, 0xb2cc575b459b5b33, 0x4, 0x2, 0x1]}}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xff9c) 176.096574ms ago: executing program 4 (id=1892): r0 = socket(0x2, 0x3, 0x67) sendto$unix(r0, 0x0, 0x0, 0x4008000, 0x0, 0x0) 18.349248ms ago: executing program 4 (id=1893): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0xd, 0x4, 0x3f0, 0x110, 0x1f8, 0x110, 0x110, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @multicast2, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x11, {@empty, @mac=@multicast, @multicast2, @dev}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 0s ago: executing program 0 (id=1894): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f00000006c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x0, [@null, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) kernel console output (not intermixed with test programs): 80.989134][ T3693] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 103ms [ 80.996051][ T3834] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 81.027835][ T3693] gfs2: fsid=syz:syz.0: jid=0: Done [ 81.032268][ T3834] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 81.033560][ T3824] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 81.043231][ T3834] BTRFS info (device loop3): using free space tree [ 81.127747][ T3655] XFS (loop0): Unmounting Filesystem [ 81.416778][ T3834] BTRFS info (device loop3): enabling ssd optimizations [ 81.482455][ T153] cfg80211: failed to load regulatory.db [ 81.526004][ T3878] loop1: detected capacity change from 0 to 64 [ 81.863011][ T27] audit: type=1326 audit(1728479306.417:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3880 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d297dff9 code=0x7ffc0000 [ 81.939971][ T27] audit: type=1326 audit(1728479306.467:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3880 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d297dff9 code=0x7ffc0000 [ 82.003163][ T3653] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 82.020759][ T27] audit: type=1326 audit(1728479306.467:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3880 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f34d297dff9 code=0x7ffc0000 [ 82.125041][ T27] audit: type=1326 audit(1728479306.467:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3880 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d297dff9 code=0x7ffc0000 [ 82.199409][ T3656] Bluetooth: hci4: command tx timeout [ 82.376459][ T27] audit: type=1326 audit(1728479306.467:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3880 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d297dff9 code=0x7ffc0000 [ 82.496922][ T27] audit: type=1326 audit(1728479306.967:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3889 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05657dff9 code=0x7ffc0000 [ 82.633339][ T27] audit: type=1326 audit(1728479306.967:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3889 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05657dff9 code=0x7ffc0000 [ 82.786845][ T27] audit: type=1326 audit(1728479306.967:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3889 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fa05657dff9 code=0x7ffc0000 [ 82.868067][ T27] audit: type=1326 audit(1728479306.967:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3889 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05657dff9 code=0x7ffc0000 [ 82.902935][ T27] audit: type=1326 audit(1728479306.997:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3889 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05657dff9 code=0x7ffc0000 [ 82.977195][ T3912] netlink: 'syz.3.67': attribute type 4 has an invalid length. [ 82.989378][ T3904] loop1: detected capacity change from 0 to 8192 [ 83.019181][ T3912] netlink: 152 bytes leftover after parsing attributes in process `syz.3.67'. [ 83.024946][ T3904] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 83.066529][ T3904] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 83.075970][ T3904] REISERFS (device loop1): using ordered data mode [ 83.083623][ T3904] reiserfs: using flush barriers [ 83.096867][ T3904] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.123302][ T3904] REISERFS (device loop1): checking transaction log (loop1) [ 83.140731][ T3904] REISERFS (device loop1): Using tea hash to sort names [ 83.203145][ T3904] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 83.358707][ T3922] netlink: 'syz.2.72': attribute type 64 has an invalid length. [ 83.472805][ T3924] loop3: detected capacity change from 0 to 128 [ 83.528300][ T3926] loop4: detected capacity change from 0 to 256 [ 83.610063][ T3926] FAT-fs (loop4): Directory bread(block 64) failed [ 83.669255][ T3926] FAT-fs (loop4): Directory bread(block 65) failed [ 83.692154][ T3926] FAT-fs (loop4): Directory bread(block 66) failed [ 83.725308][ T3926] FAT-fs (loop4): Directory bread(block 67) failed [ 83.756680][ T3926] FAT-fs (loop4): Directory bread(block 68) failed [ 83.763288][ T3926] FAT-fs (loop4): Directory bread(block 69) failed [ 83.816649][ T3926] FAT-fs (loop4): Directory bread(block 70) failed [ 83.846459][ T3926] FAT-fs (loop4): Directory bread(block 71) failed [ 83.853168][ T3926] FAT-fs (loop4): Directory bread(block 72) failed [ 83.915014][ T3926] FAT-fs (loop4): Directory bread(block 73) failed [ 84.143896][ T3918] loop0: detected capacity change from 0 to 32768 [ 84.149747][ T3942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'. [ 84.172716][ T3918] ======================================================= [ 84.172716][ T3918] WARNING: The mand mount option has been deprecated and [ 84.172716][ T3918] and is ignored by this kernel. Remove the mand [ 84.172716][ T3918] option from the mount to silence this warning. [ 84.172716][ T3918] ======================================================= [ 84.364167][ T3946] netlink: 80 bytes leftover after parsing attributes in process `syz.4.83'. [ 84.441419][ T3918] __jfs_setxattr: xattr_size = 74, new_size = 12820 [ 84.654479][ T3953] netlink: 28 bytes leftover after parsing attributes in process `syz.4.87'. [ 84.705157][ T3953] netlink: 28 bytes leftover after parsing attributes in process `syz.4.87'. [ 84.730469][ T3954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.88'. [ 84.799440][ T3956] loop1: detected capacity change from 0 to 512 [ 84.858396][ T3956] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 84.990586][ T3956] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.90: corrupted inode contents [ 85.023387][ T3956] EXT4-fs error (device loop1): ext4_dirty_inode:6086: inode #16: comm syz.1.90: mark_inode_dirty error [ 85.024765][ T3934] loop2: detected capacity change from 0 to 32768 [ 85.067177][ T3956] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.90: corrupted inode contents [ 85.089509][ T3956] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.90: mark_inode_dirty error [ 85.112440][ T3956] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.90: corrupted inode contents [ 85.118013][ T3967] sctp: [Deprecated]: syz.0.93 (pid 3967) Use of int in maxseg socket option. [ 85.118013][ T3967] Use struct sctp_assoc_value instead [ 85.156606][ T3887] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.181726][ T3956] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 85.206920][ T3956] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.90: corrupted inode contents [ 85.240022][ T3956] EXT4-fs error (device loop1): ext4_truncate:4311: inode #16: comm syz.1.90: mark_inode_dirty error [ 85.272511][ T3956] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 85.324581][ T3956] EXT4-fs (loop1): 1 truncate cleaned up [ 85.343257][ T3956] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 85.347476][ T46] EXT4-fs error (device loop1): ext4_release_dquot:6823: comm kworker/u4:3: Failed to release dquot type 1 [ 85.364942][ T3956] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038 (0x7fffffff) [ 85.446564][ T3890] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.461094][ T3974] loop2: detected capacity change from 0 to 1024 [ 85.500641][ T3974] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 85.532908][ T3974] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 85.535201][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 85.542240][ T3887] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 85.566891][ T3887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.578198][ T3887] usb 5-1: config 0 descriptor?? [ 85.618254][ T3887] cp210x 5-1:0.0: cp210x converter detected [ 85.702034][ T3646] EXT4-fs (loop2): unmounting filesystem. [ 85.706588][ T3890] usb 4-1: Using ep0 maxpacket: 8 [ 85.996004][ T3990] loop2: detected capacity change from 0 to 256 [ 86.006589][ T3890] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 86.015669][ T3890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.040961][ T3887] usb 5-1: cp210x converter now attached to ttyUSB0 [ 86.075395][ T3887] usb 5-1: USB disconnect, device number 2 [ 86.100588][ T3890] usb 4-1: Product: syz [ 86.104906][ T3890] usb 4-1: Manufacturer: syz [ 86.120256][ T3890] usb 4-1: SerialNumber: syz [ 86.125878][ T3990] FAT-fs (loop2): Directory bread(block 64) failed [ 86.140888][ T3887] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 86.143169][ T3990] FAT-fs (loop2): Directory bread(block 65) failed [ 86.161811][ T3990] FAT-fs (loop2): Directory bread(block 66) failed [ 86.168789][ T3890] r8152-cfgselector 4-1: config 0 descriptor?? [ 86.168862][ T3990] FAT-fs (loop2): Directory bread(block 67) failed [ 86.177477][ T3887] cp210x 5-1:0.0: device disconnected [ 86.230090][ T3990] FAT-fs (loop2): Directory bread(block 68) failed [ 86.256210][ T3990] FAT-fs (loop2): Directory bread(block 69) failed [ 86.289995][ T3990] FAT-fs (loop2): Directory bread(block 70) failed [ 86.323377][ T3990] FAT-fs (loop2): Directory bread(block 71) failed [ 86.365607][ T3990] FAT-fs (loop2): Directory bread(block 72) failed [ 86.372758][ T3990] FAT-fs (loop2): Directory bread(block 73) failed [ 86.441735][ T4002] netlink: 'syz.0.110': attribute type 10 has an invalid length. [ 86.511530][ T4004] loop1: detected capacity change from 0 to 2048 [ 86.516216][ T4002] team0: Device veth1_macvtap failed to register rx_handler [ 86.626643][ T3890] r8152-cfgselector 4-1: Unknown version 0x0000 [ 86.636165][ T3890] r8152-cfgselector 4-1: bad CDC descriptors [ 86.658628][ T4005] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.688577][ T3890] r8152-cfgselector 4-1: Unknown version 0x0000 [ 86.711711][ T3890] r8152-cfgselector 4-1: USB disconnect, device number 3 [ 86.741376][ T4002] syz.0.110 (4002) used greatest stack depth: 18904 bytes left [ 86.759937][ T4007] netlink: 32 bytes leftover after parsing attributes in process `syz.2.112'. [ 86.804254][ T4004] syz.1.111: attempt to access beyond end of device [ 86.804254][ T4004] loop1: rw=0, sector=19791209300034, nr_sectors = 2 limit=2048 [ 86.876103][ T4004] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 86.894528][ T4004] syz.1.111: attempt to access beyond end of device [ 86.894528][ T4004] loop1: rw=0, sector=19791209300034, nr_sectors = 2 limit=2048 [ 86.918695][ T4004] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 86.950692][ T4004] NILFS (loop1): error -5 truncating bmap (ino=16) [ 87.331396][ T4023] loop2: detected capacity change from 0 to 256 [ 87.367300][ T4023] exfat: Deprecated parameter 'utf8' [ 87.383048][ T4025] netlink: 40 bytes leftover after parsing attributes in process `syz.3.121'. [ 87.405655][ T4023] exfat: Deprecated parameter 'namecase' [ 87.464893][ T4023] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1806556a, utbl_chksum : 0xe619d30d) [ 87.694379][ T4031] loop3: detected capacity change from 0 to 1024 [ 87.834118][ T4035] loop0: detected capacity change from 0 to 16 [ 87.882427][ T4035] erofs: (device loop0): mounted with root inode @ nid 36. [ 87.938550][ T4035] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 87.994220][ T4035] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[46, 4050] out[1851] [ 88.036662][ T4035] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 88.335749][ T4050] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 88.490763][ T4018] loop4: detected capacity change from 0 to 32768 [ 88.657463][ T4018] XFS (loop4): Mounting V5 Filesystem [ 88.706105][ T4072] loop2: detected capacity change from 0 to 512 [ 88.825918][ T4072] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.828468][ T4018] XFS (loop4): Ending clean mount [ 88.868578][ T4072] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 88.952473][ T4072] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 89.001054][ T3645] XFS (loop4): Unmounting Filesystem [ 89.081290][ T4072] System zones: 1-12 [ 89.101656][ T4080] loop0: detected capacity change from 0 to 4096 [ 89.142466][ T4072] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.140: corrupted in-inode xattr [ 89.191296][ T4080] ntfs: volume version 3.1. [ 89.198980][ T4072] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.140: couldn't read orphan inode 15 (err -117) [ 89.257114][ T4072] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 89.512878][ T3646] EXT4-fs (loop2): unmounting filesystem. [ 89.644387][ T4087] loop2: detected capacity change from 0 to 16 [ 89.684571][ T4087] erofs: (device loop2): mounted with root inode @ nid 36. [ 89.687569][ T4088] loop1: detected capacity change from 0 to 256 [ 89.700858][ T4064] loop3: detected capacity change from 0 to 32768 [ 89.713739][ T4088] exfat: Deprecated parameter 'utf8' [ 89.747080][ T4087] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 89.756327][ T4087] erofs: (device loop2): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 89.764154][ T4088] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 89.787897][ T4087] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 89.832160][ T4064] ERROR: (device loop3): diAllocAG: nfreeinos = 0, but iag on freelist [ 89.832160][ T4064] [ 89.856464][ T4087] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 89.896646][ T4064] ERROR: (device loop3): remounting filesystem as read-only [ 89.904206][ T4087] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 89.922051][ T4064] ialloc: diAlloc returned -5! [ 89.934079][ T4092] loop4: detected capacity change from 0 to 64 [ 89.943695][ T4087] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 89.987893][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 89.987910][ T27] audit: type=1800 audit(1728479314.547:12): pid=4087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.148" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 90.604149][ T4106] loop4: detected capacity change from 0 to 1024 [ 90.649234][ T4106] hfsplus: inconsistency in B*Tree (1,0,2,1,0) [ 90.781448][ T4084] loop0: detected capacity change from 0 to 32768 [ 90.853046][ T4084] ea_get: invalid extended attribute [ 90.877369][ T4084] ffff88805a383ab0: 04 00 00 00 .... [ 90.898412][ T4112] kernel read not supported for file /!selinuxwk1ÐmÃ9Éž*T“ýâ‘ïª#j—¼ÞYÌÅmVËvm(pÉ-QZ#Ò{„¿ (pid: 4112 comm: syz.4.160) [ 90.911706][ T3884] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 91.098189][ T4116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.163'. [ 91.346578][ T4122] xt_bpf: check failed: parse error [ 91.436926][ T3884] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 91.456985][ T3884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.471053][ T3884] usb 4-1: Product: syz [ 91.475266][ T3884] usb 4-1: Manufacturer: syz [ 91.501284][ T3884] usb 4-1: SerialNumber: syz [ 91.511945][ T4101] loop2: detected capacity change from 0 to 40427 [ 91.578921][ T4101] F2FS-fs (loop2): Found nat_bits in checkpoint [ 91.588174][ T3884] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 91.603107][ T4133] loop0: detected capacity change from 0 to 512 [ 91.629024][ T4135] SET target dimension over the limit! [ 91.652386][ T4133] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 91.754177][ T4133] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 91.772237][ T4133] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038 (0x7fffffff) [ 91.783465][ T4101] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 91.790255][ T4133] EXT4-fs: Cannot specify journal on remount [ 91.824973][ T4128] loop1: detected capacity change from 0 to 4096 [ 91.844423][ T4128] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 91.876159][ T4128] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 91.902635][ T3655] EXT4-fs (loop0): unmounting filesystem. [ 91.981037][ T4128] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 92.004765][ T4128] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 92.035648][ T3646] syz-executor: attempt to access beyond end of device [ 92.035648][ T3646] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 92.081146][ T4128] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 92.111432][ T4128] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 92.127502][ T4128] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 92.149857][ T4128] ntfs: volume version 3.1. [ 92.176906][ T4128] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 92.214591][ T4128] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 92.236699][ T3884] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 92.670178][ T22] usb 4-1: USB disconnect, device number 4 [ 92.719060][ T4164] loop0: detected capacity change from 0 to 1024 [ 92.749759][ T4162] loop4: detected capacity change from 0 to 256 [ 92.783950][ T4162] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x21ebf3fa, utbl_chksum : 0xe619d30d) [ 93.316609][ T3884] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 93.324172][ T3884] ath9k_htc: Failed to initialize the device [ 93.360103][ T22] usb 4-1: ath9k_htc: USB layer deinitialized [ 93.474575][ T4185] loop3: detected capacity change from 0 to 2048 [ 93.538528][ T3765] udevd[3765]: incorrect nilfs2 checksum on /dev/loop3 [ 93.546773][ T4185] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 93.598569][ T4185] syz.3.192: attempt to access beyond end of device [ 93.598569][ T4185] loop3: rw=0, sector=1125899906842706, nr_sectors = 2 limit=2048 [ 93.652448][ T4185] NILFS (loop3): I/O error reading meta-data file (ino=5, block-offset=0) [ 93.677709][ T4185] NILFS (loop3): error -5 while loading super root [ 93.944195][ T4169] loop2: detected capacity change from 0 to 32768 [ 93.984529][ T4169] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.185 (4169) [ 93.999526][ T4185] loop3: detected capacity change from 0 to 2048 [ 94.065908][ T4169] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 94.109584][ T4169] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 94.151475][ T4185] NILFS (loop3): corrupt root inode [ 94.152555][ T4169] BTRFS info (device loop2): turning off barriers [ 94.167209][ T153] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.186679][ T4169] BTRFS info (device loop2): enabling auto defrag [ 94.204135][ T4169] BTRFS info (device loop2): ignoring data csums [ 94.218580][ T4169] BTRFS info (device loop2): enabling ssd optimizations [ 94.246093][ T4169] BTRFS info (device loop2): using spread ssd allocation scheme [ 94.291185][ T4169] BTRFS info (device loop2): using free space tree [ 94.311414][ T4169] workqueue: max_active 32767 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 94.364168][ T4169] workqueue: max_active 32767 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 94.426505][ T153] usb 1-1: Using ep0 maxpacket: 16 [ 94.460141][ T4169] workqueue: max_active 32767 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 94.512088][ T4213] loop3: detected capacity change from 0 to 64 [ 94.587329][ T4169] workqueue: max_active 32767 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 94.644970][ T4169] workqueue: max_active 32767 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 94.701236][ T4169] workqueue: max_active 32767 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 94.706953][ T153] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=36.00 [ 94.740037][ T153] usb 1-1: New USB device strings: Mfr=168, Product=81, SerialNumber=40 [ 94.750306][ T153] usb 1-1: Product: syz [ 94.755623][ T153] usb 1-1: Manufacturer: syz [ 94.761048][ T153] usb 1-1: SerialNumber: syz [ 94.770626][ T4169] workqueue: max_active 32767 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 94.784313][ T153] usb 1-1: config 0 descriptor?? [ 94.794933][ T4169] workqueue: max_active 32767 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 94.808517][ T4169] workqueue: max_active 32767 requested for btrfs-compressed-write is out of range, clamping between 1 and 512 [ 94.828047][ T153] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 94.838005][ T153] usb 1-1: Detected FT4232HA [ 95.017793][ T4169] BTRFS error (device loop2: state MC): ignoredatacsums must be used with ro mount option [ 95.056554][ T153] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 95.076989][ T153] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 95.115946][ T153] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 95.187264][ T153] usb 1-1: USB disconnect, device number 2 [ 95.205953][ T3646] BTRFS info (device loop2: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 95.237431][ T153] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 95.302670][ T153] ftdi_sio 1-1:0.0: device disconnected [ 95.450465][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 95.450482][ T27] audit: type=1326 audit(1728479320.007:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4253 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05657dff9 code=0x7ffc0000 [ 95.481413][ C0] vkms_vblank_simulate: vblank timer overrun [ 95.578714][ T27] audit: type=1326 audit(1728479320.047:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4253 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7fa05657dff9 code=0x7ffc0000 [ 95.608728][ T27] audit: type=1326 audit(1728479320.047:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4253 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05657dff9 code=0x7ffc0000 [ 95.696485][ T4262] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 95.716877][ T27] audit: type=1326 audit(1728479320.047:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4253 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05657dff9 code=0x7ffc0000 [ 95.801277][ T4265] loop4: detected capacity change from 0 to 512 [ 95.818700][ T4265] EXT4-fs: Ignoring removed nobh option [ 95.846988][ T4265] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 95.901402][ T4268] cgroup: none used incorrectly [ 95.976304][ T4265] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 96.022448][ T4265] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038 (0x7fffffff) [ 96.135965][ T4265] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.220: bg 0: block 224: padding at end of block bitmap is not set [ 96.205529][ T4281] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551614) [ 96.271851][ T4265] EXT4-fs (loop4): Remounting filesystem read-only [ 96.287843][ T4281] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 96.293325][ T4265] EXT4-fs error (device loop4) in ext4_evict_inode:254: Readonly filesystem [ 96.505355][ T3645] EXT4-fs (loop4): unmounting filesystem. [ 96.525447][ T3706] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 96.544744][ T4290] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.551896][ T3706] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 96.629436][ T4295] loop0: detected capacity change from 0 to 1024 [ 96.687544][ T4295] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.755518][ T4295] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 97.016610][ T3746] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.039687][ T3655] EXT4-fs (loop0): unmounting filesystem. [ 97.396754][ T4326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.249'. [ 97.420861][ T3746] usb 2-1: New USB device found, idVendor=0c45, idProduct=6025, bcdDevice=41.12 [ 97.458550][ T3746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.473330][ T3746] usb 2-1: config 0 descriptor?? [ 97.548332][ T3746] hub 2-1:0.0: bad descriptor, ignoring hub [ 97.554724][ T3746] hub: probe of 2-1:0.0 failed with error -5 [ 97.608156][ T3746] gspca_main: sonixb-2.14.0 probing 0c45:6025 [ 97.783739][ T4343] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.097686][ T3746] usb 2-1: USB disconnect, device number 2 [ 98.499383][ T4373] loop4: detected capacity change from 0 to 8 [ 99.065600][ T4396] netlink: 'syz.4.283': attribute type 10 has an invalid length. [ 99.120108][ T4399] loop1: detected capacity change from 0 to 256 [ 99.142330][ T4396] netlink: 40 bytes leftover after parsing attributes in process `syz.4.283'. [ 99.261907][ T4396] device caif0 entered promiscuous mode [ 99.300384][ T4396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.572294][ T4413] loop0: detected capacity change from 0 to 1764 [ 99.746464][ T3746] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 99.988935][ T4431] netlink: 'syz.1.300': attribute type 10 has an invalid length. [ 100.136737][ T3746] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 100.171036][ T3746] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 100.206439][ T3746] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 100.246820][ T3746] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 100.280342][ T3746] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 100.303208][ T3746] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.313406][ T4446] netlink: 120 bytes leftover after parsing attributes in process `syz.1.307'. [ 100.350249][ T3746] usb 4-1: config 0 descriptor?? [ 100.526789][ T3886] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.636732][ T3746] hdpvr 4-1:0.0: firmware version 0x8 dated ¥)†íËŸâè=ÛJå¦+nÍoKÜo5Éüf¦oŠÉ °ÐôçO¬übL [ 100.665673][ T4460] loop0: detected capacity change from 0 to 256 [ 100.771311][ T4460] FAT-fs (loop0): Directory bread(block 64) failed [ 100.779591][ T4460] FAT-fs (loop0): Directory bread(block 65) failed [ 100.799344][ T4460] FAT-fs (loop0): Directory bread(block 66) failed [ 100.806035][ T4460] FAT-fs (loop0): Directory bread(block 67) failed [ 100.853690][ T3746] hdpvr 4-1:0.0: device init failed [ 100.859972][ T3746] hdpvr: probe of 4-1:0.0 failed with error -12 [ 100.869950][ T4468] xt_TPROXY: Can be used only with -p tcp or -p udp [ 100.874761][ T4460] FAT-fs (loop0): Directory bread(block 68) failed [ 100.892203][ T4460] FAT-fs (loop0): Directory bread(block 69) failed [ 100.914134][ T3746] usb 4-1: USB disconnect, device number 5 [ 100.920968][ T4460] FAT-fs (loop0): Directory bread(block 70) failed [ 100.928949][ T3886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.952680][ T3886] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 100.963047][ T4460] FAT-fs (loop0): Directory bread(block 71) failed [ 100.970764][ T3886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.979432][ T4460] FAT-fs (loop0): Directory bread(block 72) failed [ 100.986025][ T4460] FAT-fs (loop0): Directory bread(block 73) failed [ 100.995862][ T3886] usb 3-1: config 0 descriptor?? [ 101.068998][ T27] audit: type=1800 audit(1728479325.627:17): pid=4460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.314" name="file2" dev="loop0" ino=1048602 res=0 errno=0 [ 101.470313][ T3746] usb 3-1: USB disconnect, device number 2 [ 101.553187][ T4487] libceph: resolve '0..' (ret=-3): failed [ 101.765861][ T4498] loop1: detected capacity change from 0 to 512 [ 101.802736][ T4498] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.822750][ T4498] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 101.860094][ T4498] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 101.877200][ T4498] System zones: 1-12 [ 101.902453][ T4498] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.331: corrupted in-inode xattr [ 101.931640][ T4498] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.331: couldn't read orphan inode 15 (err -117) [ 101.966497][ T4498] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 102.113234][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 102.204873][ T4512] loop4: detected capacity change from 0 to 512 [ 102.232264][ T4516] netlink: 'syz.2.339': attribute type 2 has an invalid length. [ 102.243988][ T4512] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 102.272822][ T4514] loop3: detected capacity change from 0 to 1764 [ 102.376826][ T4512] EXT4-fs (loop4): 1 truncate cleaned up [ 102.382543][ T4512] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 102.648532][ T4537] loop0: detected capacity change from 0 to 8 [ 102.655514][ T4537] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 102.690069][ T3645] EXT4-fs (loop4): unmounting filesystem. [ 102.690154][ T4539] loop2: detected capacity change from 0 to 64 [ 102.801254][ T4537] cramfs: bad data blocksize 4294966936 [ 102.825014][ T4537] cramfs: bad data blocksize 524460 [ 102.858981][ T4537] cramfs: bad data blocksize 4294966936 [ 102.875050][ T27] audit: type=1800 audit(1728479327.427:18): pid=4537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.351" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 102.995922][ T4541] loop3: detected capacity change from 0 to 4096 [ 103.072463][ T4541] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 103.701095][ T4573] dlm: no locking on control device [ 103.811524][ T4577] netlink: 132 bytes leftover after parsing attributes in process `syz.1.369'. [ 103.843072][ T4576] loop4: detected capacity change from 0 to 1024 [ 104.394295][ T27] audit: type=1400 audit(1728479328.947:19): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=4597 comm="syz.2.379" [ 104.396764][ T3746] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.445219][ T4603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 104.484655][ T4603] netlink: 32 bytes leftover after parsing attributes in process `syz.0.382'. [ 104.617698][ T4604] loop3: detected capacity change from 0 to 4096 [ 104.637962][ T4604] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 104.778993][ T4604] ntfs3: loop3: failed to convert "c46c" to macceltic [ 104.862488][ T4616] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 104.900420][ T52] block nbd4: Attempted send on invalid socket [ 104.906791][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.006728][ T3746] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 105.015957][ T3746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.063225][ T3746] usb 2-1: Product: syz [ 105.078050][ T3746] usb 2-1: Manufacturer: syz [ 105.082702][ T3746] usb 2-1: SerialNumber: syz [ 105.101876][ T3746] r8152-cfgselector 2-1: config 0 descriptor?? [ 105.221621][ T4624] netlink: 'syz.4.392': attribute type 7 has an invalid length. [ 105.234078][ T4608] loop2: detected capacity change from 0 to 32768 [ 105.276162][ T4608] read_mapping_page failed! [ 105.396684][ T3649] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.586580][ T3746] r8152-cfgselector 2-1: Unknown version 0x0000 [ 105.612243][ T3746] r8152-cfgselector 2-1: USB disconnect, device number 3 [ 105.659673][ T4632] capability: warning: `syz.4.396' uses 32-bit capabilities (legacy support in use) [ 105.763100][ T4631] loop2: detected capacity change from 0 to 4096 [ 105.781673][ T4631] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 105.806517][ T3649] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 105.815607][ T3649] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.825173][ T4631] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 105.850565][ T3649] usb 1-1: config 0 descriptor?? [ 105.871000][ T4631] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 105.887590][ T3649] cp210x 1-1:0.0: cp210x converter detected [ 105.896668][ T4631] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 105.966204][ T4631] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 106.002859][ T4631] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 106.016523][ T4631] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 106.038192][ T4622] loop3: detected capacity change from 0 to 32768 [ 106.057482][ T4631] ntfs: volume version 3.1. [ 106.064698][ T4622] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 106.078058][ T4622] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 106.086838][ T4631] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 106.116176][ T4631] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 106.146698][ T4622] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 106.178534][ T4631] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 106.193128][ T3690] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 106.206650][ T3690] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 106.216416][ T4631] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 106.246386][ T4631] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 106.287092][ T4631] ntfs: (device loop2): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute name is placed after the attribute value. [ 106.331801][ T3649] usb 1-1: cp210x converter now attached to ttyUSB0 [ 106.349675][ T3649] usb 1-1: USB disconnect, device number 3 [ 106.353834][ T3690] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 147ms [ 106.373565][ T4631] ntfs: (device loop2): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 106.384067][ T3649] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 106.387993][ T3690] gfs2: fsid=syz:syz.0: jid=0: Done [ 106.401718][ T4631] ntfs: (device loop2): load_and_init_quota(): Failed to load $Quota/$Q index. [ 106.422746][ T4622] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 106.433972][ T4631] ntfs: (device loop2): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 106.440275][ T3649] cp210x 1-1:0.0: device disconnected [ 106.517975][ T4631] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 106.717538][ T4651] loop4: detected capacity change from 0 to 4096 [ 106.750475][ T4651] ntfs: volume version 3.1. [ 107.252288][ T4669] capability: warning: `syz.0.414' uses deprecated v2 capabilities in a way that may be insecure [ 107.278469][ T4665] loop1: detected capacity change from 0 to 1024 [ 107.363724][ T4665] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 107.581051][ T4688] vhci_hcd: vhci_device speed not set [ 107.610404][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 107.792004][ T4686] loop4: detected capacity change from 0 to 4096 [ 107.833627][ T4686] ntfs: volume version 3.1. [ 107.951352][ T4703] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.347261][ T4707] loop2: detected capacity change from 0 to 8192 [ 108.412170][ T4707] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 108.466776][ T4707] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 108.476044][ T4707] REISERFS (device loop2): using ordered data mode [ 108.576455][ T4707] reiserfs: using flush barriers [ 108.634122][ T4707] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 108.686855][ T4707] REISERFS (device loop2): checking transaction log (loop2) [ 108.931925][ T4745] ieee802154 phy0 wpan0: encryption failed: -22 [ 108.937484][ T4707] REISERFS (device loop2): Using tea hash to sort names [ 108.957451][ T4707] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 109.841319][ T4783] netlink: 'syz.3.466': attribute type 1 has an invalid length. [ 109.875414][ T4786] loop1: detected capacity change from 0 to 64 [ 109.886521][ T4783] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.466'. [ 110.636475][ T3649] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 110.876442][ T3649] usb 5-1: Using ep0 maxpacket: 16 [ 111.016874][ T3649] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 111.116730][ T3649] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.156528][ T3649] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 111.185745][ T3649] usb 5-1: SerialNumber: syz [ 111.276188][ T4847] loop3: detected capacity change from 0 to 512 [ 111.352968][ T4847] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 111.372350][ T4847] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038 (0x7fffffff) [ 111.418368][ T4855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'. [ 111.454655][ T3649] usb 5-1: USB disconnect, device number 3 [ 111.552018][ T3653] EXT4-fs (loop3): unmounting filesystem. [ 111.939728][ T3886] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 112.216417][ T3886] usb 4-1: Using ep0 maxpacket: 32 [ 112.336878][ T3886] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.370008][ T3886] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.404730][ T3886] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.538964][ T4887] loop2: detected capacity change from 0 to 2048 [ 112.587859][ T4887] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 112.607245][ T4893] usb usb8: usbfs: process 4893 (syz.4.518) did not claim interface 0 before use [ 112.616960][ T3886] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 112.632626][ T3886] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 112.642499][ T4887] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 112.661746][ T3886] usb 4-1: Product: syz [ 112.675407][ T3886] usb 4-1: Manufacturer: syz [ 112.686414][ T4887] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.694144][ T4891] loop0: detected capacity change from 0 to 4096 [ 112.704829][ T3886] usb 4-1: SerialNumber: syz [ 112.750254][ T3886] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input5 [ 112.980784][ T3746] usb 4-1: USB disconnect, device number 6 [ 113.098853][ T3746] appletouch 4-1:1.0: input: appletouch disconnected [ 113.107210][ T4903] overlayfs: unrecognized mount option "y^\@\+\" or missing value [ 113.239979][ T4909] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551615) [ 113.254065][ T4909] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 113.596541][ T3690] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.976643][ T3690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 114.021706][ T3690] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 114.057454][ T3690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 114.083239][ T3690] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 114.110381][ T4946] loop4: detected capacity change from 0 to 512 [ 114.131526][ T3690] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 114.145088][ T3690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.167850][ T3690] usb 3-1: config 0 descriptor?? [ 114.215280][ T4946] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 114.267879][ T4946] ext4 filesystem being mounted at /119/bus supports timestamps until 2038 (0x7fffffff) [ 114.404781][ T3645] EXT4-fs (loop4): unmounting filesystem. [ 114.426529][ T3690] hdpvr 3-1:0.0: firmware version 0x15 dated mÂÒR( ry|ŸÉA3j×Æe{¸£)”7}-SŠ¥8N¾¾¸¤¼† [ 114.591611][ T4961] loop3: detected capacity change from 0 to 4096 [ 114.662018][ T3690] hdpvr 3-1:0.0: device init failed [ 114.673140][ T3690] hdpvr: probe of 3-1:0.0 failed with error -12 [ 114.719031][ T3690] usb 3-1: USB disconnect, device number 3 [ 114.771029][ T4961] Cannot load nls cp8 [ 114.988044][ T4975] netlink: 40 bytes leftover after parsing attributes in process `syz.0.555'. [ 115.007909][ T4975] netlink: 40 bytes leftover after parsing attributes in process `syz.0.555'. [ 115.007925][ T4961] 9pnet: Could not find request transport: xen [ 115.202360][ T4983] netlink: 'syz.4.559': attribute type 21 has an invalid length. [ 115.236631][ T4983] netlink: 132 bytes leftover after parsing attributes in process `syz.4.559'. [ 115.355650][ T4955] loop1: detected capacity change from 0 to 32768 [ 115.403377][ T4955] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.547 (4955) [ 115.502115][ T4955] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.563338][ T4955] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 115.602976][ T4955] BTRFS info (device loop1): using free space tree [ 115.709516][ T5002] tmpfs: Bad value for 'size' [ 115.747292][ T5001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.006641][ T155] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.056574][ T4955] BTRFS info (device loop1): enabling ssd optimizations [ 116.071905][ T4981] loop0: detected capacity change from 0 to 32768 [ 116.185144][ T4981] JBD2: Ignoring recovery information on journal [ 116.207157][ T3644] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.384747][ T4981] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 116.416779][ T155] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 116.425524][ T155] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.487160][ T155] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 116.508449][ T4981] OCFS2: ERROR (device loop0): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 17 has empty extent list at depth 312 [ 116.547298][ T155] usb 3-1: config 1 has no interface number 1 [ 116.561131][ T5036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.575'. [ 116.562052][ T4981] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 116.580620][ T4981] OCFS2: Returning error to the calling process. [ 116.612580][ T4981] (syz.0.558,4981,0):ocfs2_find_leaf:1933 ERROR: status = -30 [ 116.623217][ T4981] (syz.0.558,4981,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 116.631814][ T4981] (syz.0.558,4981,0):ocfs2_get_clusters:624 ERROR: status = -30 [ 116.640047][ T4981] (syz.0.558,4981,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 116.648637][ T4981] (syz.0.558,4981,0):ocfs2_read_virt_blocks:981 ERROR: status = -30 [ 116.658959][ T4981] (syz.0.558,4981,0):ocfs2_read_dir_block:511 ERROR: status = -30 [ 116.670735][ T4981] (syz.0.558,4981,0):ocfs2_find_dir_space_el:3487 ERROR: status = -5 [ 116.679742][ T4981] (syz.0.558,4981,0):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -5 [ 116.688725][ T4981] (syz.0.558,4981,0):ocfs2_mknod:296 ERROR: status = -5 [ 116.697632][ T4981] (syz.0.558,4981,0):ocfs2_mknod:500 ERROR: status = -5 [ 116.704710][ T4981] (syz.0.558,4981,0):ocfs2_mkdir:657 ERROR: status = -5 [ 116.796873][ T155] usb 3-1: string descriptor 0 read error: -22 [ 116.803178][ T155] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.825946][ T3655] ocfs2: Unmounting device (7,0) on (node local) [ 116.833704][ T155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.196518][ T5055] netlink: 164 bytes leftover after parsing attributes in process `syz.1.583'. [ 117.326773][ T5061] No such timeout policy "syz0" [ 117.368894][ T3886] usb 3-1: USB disconnect, device number 4 [ 117.530494][ T5067] netlink: 76 bytes leftover after parsing attributes in process `syz.3.588'. [ 117.578858][ T5067] netlink: 76 bytes leftover after parsing attributes in process `syz.3.588'. [ 118.213208][ T5099] netlink: 16 bytes leftover after parsing attributes in process `syz.3.604'. [ 118.553918][ T5115] netlink: 'syz.0.612': attribute type 1 has an invalid length. [ 118.591947][ T5115] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.612'. [ 118.641022][ T5115] netlink: 1 bytes leftover after parsing attributes in process `syz.0.612'. [ 118.899099][ T5129] netlink: 'syz.3.617': attribute type 2 has an invalid length. [ 118.933956][ T5129] netlink: 'syz.3.617': attribute type 8 has an invalid length. [ 119.232980][ T5147] tmpfs: Bad value for 'mpol' [ 119.619097][ T5161] loop2: detected capacity change from 0 to 512 [ 119.711190][ T5161] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 119.726808][ T5161] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 119.734895][ T5161] System zones: 0-1, 15-15, 18-18, 34-34 [ 119.788619][ T5161] EXT4-fs (loop2): orphan cleanup on readonly fs [ 119.831384][ T5161] __quota_error: 19 callbacks suppressed [ 119.831400][ T5161] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 119.892964][ T5161] EXT4-fs warning (device loop2): ext4_enable_quotas:7035: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 119.983556][ T5161] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 120.004541][ T5161] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz.2.635: bad orphan inode 16 [ 120.075714][ T5161] ext4_test_bit(bit=15, block=18) = 1 [ 120.112765][ T5161] is_bad_inode(inode)=0 [ 120.142514][ T5161] NEXT_ORPHAN(inode)=0 [ 120.147664][ T5161] max_ino=32 [ 120.162278][ T5161] i_nlink=2 [ 120.165579][ T5161] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 120.236448][ T5161] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 120.333446][ T5193] __nla_validate_parse: 1 callbacks suppressed [ 120.333465][ T5193] netlink: 16 bytes leftover after parsing attributes in process `syz.1.649'. [ 120.358957][ T3646] EXT4-fs (loop2): unmounting filesystem. [ 120.387260][ T5193] netlink: 16 bytes leftover after parsing attributes in process `syz.1.649'. [ 120.425282][ T5193] netlink: 5 bytes leftover after parsing attributes in process `syz.1.649'. [ 120.895774][ T5221] netlink: 'syz.4.663': attribute type 1 has an invalid length. [ 121.124206][ T5226] loop1: detected capacity change from 0 to 2048 [ 121.241652][ T5235] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.261556][ T5234] loop2: detected capacity change from 0 to 512 [ 121.290874][ T5226] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 121.345955][ T5226] Remounting filesystem read-only [ 121.351521][ T5226] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 121.371292][ T5226] NILFS (loop1): error -5 truncating bmap (ino=16) [ 121.488274][ T3644] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 121.515969][ T3644] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 121.546301][ T3644] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 121.590544][ T3644] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 121.623984][ T5241] loop4: detected capacity change from 0 to 8192 [ 121.630780][ T3644] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 121.660904][ T3644] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 121.675266][ T5241] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 121.745733][ T5241] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 121.753022][ T5249] loop0: detected capacity change from 0 to 1764 [ 121.755784][ T5241] REISERFS (device loop4): using ordered data mode [ 121.768026][ T5241] reiserfs: using flush barriers [ 121.769687][ T5234] EXT4-fs (loop2): Test dummy encryption mode enabled [ 121.780563][ T5241] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 121.799510][ T5241] REISERFS (device loop4): checking transaction log (loop4) [ 121.829926][ T5241] REISERFS (device loop4): Using r5 hash to sort names [ 121.853708][ T5241] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 121.888238][ T5234] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.670: inline data xattr refers to an external xattr inode [ 121.888270][ T5241] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 121.974536][ T5234] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.670: couldn't read orphan inode 12 (err -117) [ 122.051797][ T5234] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 122.177424][ T3646] EXT4-fs (loop2): unmounting filesystem. [ 122.400049][ T5267] loop1: detected capacity change from 0 to 1024 [ 122.443498][ T5267] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.540280][ T5267] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 122.677114][ T5267] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.684: corrupted in-inode xattr [ 122.885993][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 123.044822][ T5302] vivid-002: disconnect [ 123.063079][ T5301] vivid-002: reconnect [ 123.186788][ T5040] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 123.375939][ T5320] netlink: 36 bytes leftover after parsing attributes in process `syz.1.706'. [ 123.525815][ T5326] cgroup: Need name or subsystem set [ 123.561632][ T5040] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 123.577374][ T27] audit: type=1326 audit(1728479348.137:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5327 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de2f7dff9 code=0x7ffc0000 [ 123.605047][ T5040] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.630671][ T5040] usb 3-1: config 0 descriptor?? [ 123.648629][ T27] audit: type=1326 audit(1728479348.137:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5327 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f8de2f7dff9 code=0x7ffc0000 [ 123.715590][ T27] audit: type=1326 audit(1728479348.137:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5327 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de2f7dff9 code=0x7ffc0000 [ 123.822689][ T27] audit: type=1326 audit(1728479348.137:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5327 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de2f7dff9 code=0x7ffc0000 [ 124.118808][ T5040] ath6kl: Failed to submit usb control message: -71 [ 124.135921][ T5040] ath6kl: unable to send the bmi data to the device: -71 [ 124.166190][ T5040] ath6kl: Unable to send get target info: -71 [ 124.184619][ T5040] ath6kl: Failed to init ath6kl core: -71 [ 124.261593][ T5348] loop3: detected capacity change from 0 to 4096 [ 124.272552][ T5040] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 124.302381][ T5348] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 124.303957][ T5040] usb 3-1: USB disconnect, device number 5 [ 124.723333][ T5369] loop4: detected capacity change from 0 to 136 [ 124.902018][ T5375] netlink: 144 bytes leftover after parsing attributes in process `syz.3.732'. [ 125.432784][ T5397] afs: Unexpected value for 'dyn' [ 125.948366][ T5425] loop3: detected capacity change from 0 to 16 [ 125.972337][ T5425] erofs: (device loop3): mounted with root inode @ nid 36. [ 125.983882][ T5417] loop1: detected capacity change from 0 to 4096 [ 126.003500][ T5425] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 126.068244][ T5425] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 126.110432][ T5417] ntfs: volume version 3.1. [ 126.120861][ T5425] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 126.137101][ T5431] loop0: detected capacity change from 0 to 512 [ 126.145032][ T5431] EXT4-fs: Invalid want_extra_isize 220 [ 126.309082][ T41] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 126.355857][ T5435] netlink: 'syz.3.764': attribute type 3 has an invalid length. [ 126.431127][ T5437] x_tables: unsorted entry at hook 1 [ 126.846386][ T5453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.772'. [ 126.916488][ T5453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.772'. [ 127.239629][ T5427] loop4: detected capacity change from 0 to 32768 [ 127.272335][ T5427] (syz.4.760,5427,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 127.273008][ T5427] (syz.4.760,5427,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 127.299439][ T5427] (syz.4.760,5427,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xd5db68cb, computed 0x5d5ae73b. Applying ECC. [ 127.311754][ T5427] JBD2: Ignoring recovery information on journal [ 127.476852][ T5427] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 127.595351][ T5427] (syz.4.760,5427,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x6db03cd7, computed 0xf4525ad6. Applying ECC. [ 127.634209][ T5483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.785'. [ 127.675219][ T5483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.785'. [ 127.696624][ T5427] (syz.4.760,5427,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x6db03cd7, computed 0xe42081fe [ 127.741939][ T5427] (syz.4.760,5427,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 127.773842][ T5427] (syz.4.760,5427,1):ocfs2_quota_read:201 ERROR: status = -5 [ 127.789491][ T5427] Quota error (device loop4): find_tree_dqentry: Can't read quota tree block 1 [ 127.805831][ T5427] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 60928 [ 127.833520][ T5427] (syz.4.760,5427,1):ocfs2_acquire_dquot:873 ERROR: status = -5 [ 127.944523][ T3645] ocfs2: Unmounting device (7,4) on (node local) [ 127.966704][ T5040] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 127.996463][ T3886] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 128.196916][ T155] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 128.216463][ T5040] usb 4-1: Using ep0 maxpacket: 32 [ 128.236594][ T3886] usb 2-1: Using ep0 maxpacket: 16 [ 128.336800][ T5040] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 128.344977][ T5040] usb 4-1: config 0 has no interface number 0 [ 128.376766][ T3886] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 128.398739][ T3886] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 128.521227][ T5040] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 128.549070][ T5040] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.568672][ T5040] usb 4-1: Product: syz [ 128.573507][ T5040] usb 4-1: Manufacturer: syz [ 128.579817][ T5040] usb 4-1: SerialNumber: syz [ 128.595911][ T5517] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 128.597015][ T5040] usb 4-1: config 0 descriptor?? [ 128.621353][ T3886] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=f4.95 [ 128.630891][ T155] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 128.654550][ T3886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.675366][ T3886] usb 2-1: Product: syz [ 128.685506][ T3886] usb 2-1: Manufacturer: syz [ 128.695640][ T3886] usb 2-1: SerialNumber: syz [ 128.707172][ T3886] usb 2-1: config 0 descriptor?? [ 128.726755][ T5489] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 128.734558][ T5489] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 128.798924][ T5521] netlink: 20 bytes leftover after parsing attributes in process `syz.0.805'. [ 128.827210][ T155] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.843443][ T155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.862548][ T155] usb 3-1: Product: syz [ 128.870328][ T155] usb 3-1: Manufacturer: syz [ 128.879927][ T155] usb 3-1: SerialNumber: syz [ 128.887082][ T5040] radio-si470x 4-1:0.35: this is not a si470x device. [ 128.922885][ T5511] loop4: detected capacity change from 0 to 32768 [ 128.940576][ T155] usb 3-1: bad CDC descriptors [ 128.971106][ T5489] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 128.993942][ T27] audit: type=1326 audit(1728479353.547:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5524 comm="syz.0.807" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff64a97dff9 code=0x0 [ 129.023169][ T5489] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 129.106681][ T5040] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 129.144878][ T155] usb 3-1: USB disconnect, device number 6 [ 129.169266][ T5040] usb 4-1: USB disconnect, device number 7 [ 129.266606][ T3886] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 129.277082][ T3886] asix: probe of 2-1:0.0 failed with error -71 [ 129.289471][ T3886] usb 2-1: USB disconnect, device number 4 [ 129.506707][ T3649] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 129.772396][ T5535] netlink: 'syz.2.814': attribute type 12 has an invalid length. [ 129.807490][ T5535] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 129.829445][ T5538] netlink: 16 bytes leftover after parsing attributes in process `syz.3.813'. [ 129.870216][ T5539] loop4: detected capacity change from 0 to 512 [ 129.910342][ T3649] usb 1-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 129.926390][ T3649] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.947219][ T3649] usb 1-1: config 0 descriptor?? [ 129.953967][ T5539] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 129.980330][ T5543] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 129.996560][ T5539] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 130.071669][ T5539] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 130.120700][ T5550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.820'. [ 130.159737][ T5539] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 130.176683][ T5539] System zones: 0-2, 18-18, 34-34 [ 130.218486][ T5539] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 130.269352][ T5539] EXT4-fs (loop4): 1 truncate cleaned up [ 130.275312][ T5539] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 130.295926][ T5539] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 130.324858][ T5539] CIFS mount error: No usable UNC path provided in device string! [ 130.324858][ T5539] [ 130.356826][ T5539] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 130.436556][ T3649] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 130.456554][ T3649] asix: probe of 1-1:0.0 failed with error -71 [ 130.481601][ T3649] usb 1-1: USB disconnect, device number 4 [ 130.534719][ T3645] EXT4-fs (loop4): unmounting filesystem. [ 130.690176][ T5569] loop4: detected capacity change from 0 to 256 [ 130.744462][ T5571] netlink: 20 bytes leftover after parsing attributes in process `syz.1.829'. [ 130.763642][ T5571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.829'. [ 130.770280][ T5569] FAT-fs (loop4): Directory bread(block 64) failed [ 130.798057][ T5569] FAT-fs (loop4): Directory bread(block 65) failed [ 130.804837][ T5569] FAT-fs (loop4): Directory bread(block 66) failed [ 130.816080][ T5569] FAT-fs (loop4): Directory bread(block 67) failed [ 130.832826][ T5569] FAT-fs (loop4): Directory bread(block 68) failed [ 130.841225][ T5569] FAT-fs (loop4): Directory bread(block 69) failed [ 130.848393][ T5569] FAT-fs (loop4): Directory bread(block 70) failed [ 130.855071][ T5569] FAT-fs (loop4): Directory bread(block 71) failed [ 130.862792][ T5569] FAT-fs (loop4): Directory bread(block 72) failed [ 130.869629][ T5569] FAT-fs (loop4): Directory bread(block 73) failed [ 131.464414][ T5595] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 131.524977][ T5597] tmpfs: Bad value for 'mpol' [ 131.529988][ T3746] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 131.653739][ T5602] netlink: 'syz.4.844': attribute type 32 has an invalid length. [ 131.744532][ T5606] xt_CT: You must specify a L4 protocol and not use inversions on it [ 131.885872][ T5613] netlink: 32 bytes leftover after parsing attributes in process `syz.0.849'. [ 131.926085][ T5613] netlink: 32 bytes leftover after parsing attributes in process `syz.0.849'. [ 131.936664][ T3746] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 131.973866][ T3746] usb 4-1: config 0 has no interface number 0 [ 131.986510][ T3746] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 132.077576][ T5040] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 132.102991][ T5623] loop4: detected capacity change from 0 to 47 [ 132.186728][ T3746] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 132.195848][ T3746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.221445][ T3746] usb 4-1: Product: syz [ 132.226294][ T3746] usb 4-1: Manufacturer: syz [ 132.231307][ T3746] usb 4-1: SerialNumber: syz [ 132.248180][ T3746] usb 4-1: config 0 descriptor?? [ 132.325250][ T3746] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 132.392985][ T5629] IPv6: sit1: Disabled Multicast RS [ 132.409962][ T5040] usb 2-1: not running at top speed; connect to a high speed hub [ 132.506643][ T5040] usb 2-1: config 95 has an invalid interface number: 1 but max is 0 [ 132.526518][ C1] yurex 4-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 132.537091][ T5040] usb 2-1: config 95 has no interface number 0 [ 132.543299][ T5040] usb 2-1: config 95 interface 1 has no altsetting 0 [ 132.679403][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.685766][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.722947][ T5617] loop2: detected capacity change from 0 to 32768 [ 132.757927][ T3690] usb 4-1: USB disconnect, device number 8 [ 132.794964][ T3690] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 132.806804][ T5040] usb 2-1: string descriptor 0 read error: -22 [ 132.813088][ T5040] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 132.874462][ T5040] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.890600][ T5649] tmpfs: Bad value for 'mpol' [ 132.916906][ T5617] XFS (loop2): Mounting V5 Filesystem [ 133.049997][ T5657] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 133.066288][ T5617] XFS (loop2): Ending clean mount [ 133.208585][ T3646] XFS (loop2): Unmounting Filesystem [ 133.407023][ T3886] usb 2-1: USB disconnect, device number 5 [ 133.993883][ T5687] x_tables: duplicate entry at hook 2 [ 134.440682][ T5699] loop1: detected capacity change from 0 to 4096 [ 134.467919][ T5699] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 134.533966][ T5699] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 134.570504][ T5699] ntfs3: loop1: Failed to load $Extend. [ 134.663020][ T5677] loop4: detected capacity change from 0 to 32768 [ 134.782312][ T5677] XFS (loop4): Mounting V5 Filesystem [ 134.974088][ T5677] XFS (loop4): Ending clean mount [ 135.067318][ T3645] XFS (loop4): Unmounting Filesystem [ 135.265445][ T5735] loop0: detected capacity change from 0 to 1764 [ 135.290308][ T5711] loop3: detected capacity change from 0 to 32768 [ 135.413472][ T5711] JBD2: Ignoring recovery information on journal [ 135.522423][ T5711] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 135.632773][ T5744] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 135.782878][ T3653] ocfs2: Unmounting device (7,3) on (node local) [ 136.134323][ T5758] loop2: detected capacity change from 0 to 4096 [ 136.168330][ T5758] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 136.270750][ T5764] loop1: detected capacity change from 0 to 2048 [ 136.317506][ T5758] ntfs: volume version 3.1. [ 136.320310][ T5764] loop1: p1 < > p3 p4 < > [ 136.405202][ T5764] loop1: p3 start 4284289 is beyond EOD, truncated [ 136.741509][ T3636] udevd[3636]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 136.850590][ T3765] udevd[3765]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 136.875106][ T3636] udevd[3636]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 136.936232][ T5796] netlink: 156 bytes leftover after parsing attributes in process `syz.0.925'. [ 136.971822][ T5797] loop1: detected capacity change from 0 to 128 [ 136.993035][ T5795] loop4: detected capacity change from 0 to 1024 [ 137.001773][ T5797] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.025634][ T5795] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 137.125911][ T5795] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 137.509770][ T5816] netlink: 20 bytes leftover after parsing attributes in process `syz.1.935'. [ 137.570149][ T5816] netlink: 'syz.1.935': attribute type 1 has an invalid length. [ 138.256431][ T153] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 138.567966][ T5853] loop2: detected capacity change from 0 to 256 [ 138.616612][ T153] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 138.639188][ T153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.650190][ T5853] FAT-fs (loop2): Directory bread(block 64) failed [ 138.666443][ T5853] FAT-fs (loop2): Directory bread(block 65) failed [ 138.687183][ T153] usb 1-1: config 0 descriptor?? [ 138.702161][ T5853] FAT-fs (loop2): Directory bread(block 66) failed [ 138.745965][ T5853] FAT-fs (loop2): Directory bread(block 67) failed [ 138.764241][ T5853] FAT-fs (loop2): Directory bread(block 68) failed [ 138.786375][ T5853] FAT-fs (loop2): Directory bread(block 69) failed [ 138.793793][ T5859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.956'. [ 138.814235][ T5853] FAT-fs (loop2): Directory bread(block 70) failed [ 138.821202][ T5859] netlink: 28 bytes leftover after parsing attributes in process `syz.4.956'. [ 138.836626][ T5853] FAT-fs (loop2): Directory bread(block 71) failed [ 138.847081][ T5853] FAT-fs (loop2): Directory bread(block 72) failed [ 138.874144][ T5853] FAT-fs (loop2): Directory bread(block 73) failed [ 139.174959][ T5835] loop3: detected capacity change from 0 to 32768 [ 139.181618][ T153] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0f [ 139.191599][ T153] hackrf 1-1:0.0: Could not detect board [ 139.234573][ T153] hackrf: probe of 1-1:0.0 failed with error -71 [ 139.249049][ T153] usb 1-1: USB disconnect, device number 5 [ 139.299722][ T5835] XFS (loop3): Mounting V5 Filesystem [ 139.334296][ T5871] loop4: detected capacity change from 0 to 2048 [ 139.403227][ T5856] loop1: detected capacity change from 0 to 32768 [ 139.414600][ T5856] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.955 (5856) [ 139.442415][ T5871] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.459935][ T5835] XFS (loop3): Ending clean mount [ 139.500833][ T5856] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 139.511261][ T27] audit: type=1800 audit(1728479364.057:25): pid=5871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.960" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 139.547341][ T5856] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 139.621593][ T5856] BTRFS info (device loop1): using free space tree [ 139.691160][ T3653] XFS (loop3): Unmounting Filesystem [ 139.787348][ T5892] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 140.132857][ T5856] BTRFS info (device loop1): enabling ssd optimizations [ 140.217426][ T5909] loop0: detected capacity change from 0 to 2048 [ 140.278199][ T5909] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 140.336031][ T5909] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.520289][ T3644] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 140.533426][ T5924] loop3: detected capacity change from 0 to 1024 [ 140.622555][ T5924] hfsplus: Filesystem is marked locked, mounting read-only. [ 140.680282][ T5924] hfsplus: filesystem is marked locked, leaving read-only. [ 141.081573][ T5942] tmpfs: Bad value for 'mpol' [ 141.109705][ T5944] xt_CT: You must specify a L4 protocol and not use inversions on it [ 141.246334][ T5948] netlink: 'syz.3.985': attribute type 13 has an invalid length. [ 141.435197][ T5956] loop4: detected capacity change from 0 to 1024 [ 141.552887][ T5956] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 141.627318][ T5956] EXT4-fs error (device loop4): ext4_get_first_dir_block:3603: inode #11: comm syz.4.989: directory missing '..' [ 141.765741][ T3645] EXT4-fs (loop4): unmounting filesystem. [ 141.776481][ T3884] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 141.982130][ T5983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1001'. [ 142.011805][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1001'. [ 142.136666][ T3884] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 142.155077][ T3884] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.185580][ T3884] usb 4-1: config 0 has no interface number 0 [ 142.203294][ T5993] loop4: detected capacity change from 0 to 256 [ 142.232220][ T3884] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 142.271127][ T3884] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.392334][ T6001] loop1: detected capacity change from 0 to 512 [ 142.451519][ T6001] nfs4: Unexpected value for 'rdma' [ 142.471947][ T3884] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 142.496395][ T3884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.531237][ T3884] usb 4-1: Product: syz [ 142.535509][ T3884] usb 4-1: Manufacturer: syz [ 142.539023][ T6006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1012'. [ 142.545632][ T3884] usb 4-1: SerialNumber: syz [ 142.574315][ T6006] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1012'. [ 142.591432][ T3884] usb 4-1: config 0 descriptor?? [ 142.601881][ T6006] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1012'. [ 142.893704][ T6019] loop1: detected capacity change from 0 to 256 [ 142.976750][ T6019] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 143.009375][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1020'. [ 143.071191][ T5040] usb 4-1: USB disconnect, device number 9 [ 143.544769][ T6047] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1033'. [ 143.573622][ T6047] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 143.969962][ T6068] loop1: detected capacity change from 0 to 512 [ 144.017756][ T6068] EXT4-fs (loop1): 1 truncate cleaned up [ 144.023620][ T6068] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 144.074976][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 144.224226][ T6080] loop1: detected capacity change from 0 to 64 [ 144.549152][ T6089] loop0: detected capacity change from 0 to 1024 [ 144.592467][ T6094] netlink: 'syz.3.1054': attribute type 10 has an invalid length. [ 144.629714][ T6096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1055'. [ 144.675058][ T6096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1055'. [ 144.691834][ T6100] Illegal XDP return value 2054757824 on prog (id 49) dev N/A, expect packet loss! [ 144.712537][ T6098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1057'. [ 146.293463][ T6118] loop0: detected capacity change from 0 to 32768 [ 146.297337][ T6163] random: crng reseeded on system resumption [ 146.333544][ T6118] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1064 (6118) [ 146.413114][ T6118] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.443772][ T6118] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 146.475265][ T6118] BTRFS info (device loop0): using free space tree [ 146.667522][ T6118] BTRFS info (device loop0): enabling ssd optimizations [ 146.842931][ T3655] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 147.234752][ T6215] IPv6: Can't replace route, no match found [ 147.683401][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1110'. [ 147.966607][ T6249] loop0: detected capacity change from 0 to 64 [ 148.532025][ T6269] syz.1.1128 uses obsolete (PF_INET,SOCK_PACKET) [ 148.851956][ T6241] loop3: detected capacity change from 0 to 32768 [ 148.933315][ T6241] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 148.933315][ T6241] [ 148.990844][ T6241] ERROR: (device loop3): remounting filesystem as read-only [ 149.007125][ T6241] xtLookup: xtSearch returned -5 [ 149.020612][ T6241] add_index: get/read_metapage failed! [ 149.026232][ T6241] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 149.026232][ T6241] [ 149.050470][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1138'. [ 149.068503][ T6241] xtLookup: xtSearch returned -5 [ 149.079827][ T6241] free_index: error reading directory table [ 149.096115][ T6241] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 149.096115][ T6241] [ 149.117708][ T6241] xtLookup: xtSearch returned -5 [ 149.156221][ T6241] free_index: error reading directory table [ 149.178778][ T6241] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 149.178778][ T6241] [ 149.199447][ T6241] xtLookup: xtSearch returned -5 [ 149.204416][ T6241] free_index: error reading directory table [ 149.241413][ T6241] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 149.241413][ T6241] [ 149.272003][ T6241] xtLookup: xtSearch returned -5 [ 149.282122][ T6241] free_index: error reading directory table [ 149.296846][ T6241] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 149.296846][ T6241] [ 149.326569][ T6241] xtLookup: xtSearch returned -5 [ 149.331591][ T6241] free_index: error reading directory table [ 149.511130][ T6272] loop4: detected capacity change from 0 to 32768 [ 149.516440][ T3884] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 149.531225][ T6272] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1130 (6272) [ 149.556464][ T3651] Bluetooth: hci0: command 0x0406 tx timeout [ 149.618942][ T6272] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 149.629906][ T6272] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 149.641028][ T6272] BTRFS info (device loop4): using free space tree [ 149.886867][ T3884] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 149.912953][ T3884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.931646][ T6272] BTRFS info (device loop4): enabling ssd optimizations [ 149.975097][ T3884] usb 3-1: config 0 descriptor?? [ 150.061776][ T3645] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.180855][ T6338] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1145'. [ 150.260228][ T3884] ath6kl: Failed to submit usb control message: -71 [ 150.269134][ T3884] ath6kl: unable to send the bmi data to the device: -71 [ 150.276200][ T3884] ath6kl: Unable to send get target info: -71 [ 150.306245][ T3884] ath6kl: Failed to init ath6kl core: -71 [ 150.427993][ T3884] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 150.438861][ T3884] usb 3-1: USB disconnect, device number 7 [ 150.687397][ T6351] loop3: detected capacity change from 0 to 2048 [ 150.739175][ T6351] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.180553][ T6363] loop3: detected capacity change from 0 to 8192 [ 151.222791][ T6363] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 151.464791][ T6385] loop4: detected capacity change from 0 to 256 [ 151.493661][ T6385] FAT-fs (loop4): Directory bread(block 64) failed [ 151.500544][ T6385] FAT-fs (loop4): Directory bread(block 65) failed [ 151.538714][ T6385] FAT-fs (loop4): Directory bread(block 66) failed [ 151.554870][ T6385] FAT-fs (loop4): Directory bread(block 67) failed [ 151.578297][ T6388] loop2: detected capacity change from 0 to 128 [ 151.588787][ T6385] FAT-fs (loop4): Directory bread(block 68) failed [ 151.610497][ T6385] FAT-fs (loop4): Directory bread(block 69) failed [ 151.635549][ T6385] FAT-fs (loop4): Directory bread(block 70) failed [ 151.659860][ T6385] FAT-fs (loop4): Directory bread(block 71) failed [ 151.688984][ T6385] FAT-fs (loop4): Directory bread(block 72) failed [ 151.709132][ T6385] FAT-fs (loop4): Directory bread(block 73) failed [ 151.907993][ T6398] loop0: detected capacity change from 0 to 1024 [ 152.791576][ T6207] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 153.050934][ T6445] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1205'. [ 153.156694][ T6207] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.200410][ T6449] loop4: detected capacity change from 0 to 2048 [ 153.201693][ T6207] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 153.222277][ T6207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.242893][ T6207] usb 3-1: config 0 descriptor?? [ 153.298118][ T6449] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.316942][ T6207] usb 3-1: bad CDC descriptors [ 153.331517][ T6207] usb 3-1: bad CDC descriptors [ 153.442122][ T6429] loop0: detected capacity change from 0 to 32768 [ 153.509787][ T6207] usb 3-1: USB disconnect, device number 8 [ 153.512222][ T6429] JBD2: Ignoring recovery information on journal [ 153.657133][ T6429] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 153.779485][ T6468] loop1: detected capacity change from 0 to 2048 [ 153.823447][ T6468] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 153.848766][ T3655] ocfs2: Unmounting device (7,0) on (node local) [ 153.857949][ T6468] syz.1.1215: attempt to access beyond end of device [ 153.857949][ T6468] loop1: rw=0, sector=1125899906842706, nr_sectors = 2 limit=2048 [ 153.859739][ T3765] udevd[3765]: incorrect nilfs2 checksum on /dev/loop1 [ 153.874828][ T6468] NILFS (loop1): I/O error reading meta-data file (ino=5, block-offset=0) [ 153.912519][ T6468] NILFS (loop1): error -5 while loading super root [ 154.005881][ T6468] loop1: detected capacity change from 0 to 2048 [ 154.072916][ T6468] NILFS (loop1): corrupt root inode [ 154.213444][ T6480] loop4: detected capacity change from 0 to 64 [ 154.610428][ T14] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 154.686998][ T27] audit: type=1326 audit(1728479379.247:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6499 comm="syz.0.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64a97dff9 code=0x7ffc0000 [ 154.744584][ T27] audit: type=1326 audit(1728479379.247:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6499 comm="syz.0.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7ff64a97dff9 code=0x7ffc0000 [ 154.866255][ T27] audit: type=1326 audit(1728479379.247:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6499 comm="syz.0.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64a97dff9 code=0x7ffc0000 [ 154.889184][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 154.904766][ T6511] loop3: detected capacity change from 0 to 512 [ 154.936986][ T6511] EXT4-fs: Ignoring removed nobh option [ 154.958180][ T6514] cgroup: none used incorrectly [ 154.968709][ T6511] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 155.048263][ T6511] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 155.061564][ T6511] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038 (0x7fffffff) [ 155.085921][ T6511] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1246: bg 0: block 224: padding at end of block bitmap is not set [ 155.111989][ T6511] EXT4-fs (loop3): Remounting filesystem read-only [ 155.149207][ T6511] EXT4-fs error (device loop3) in ext4_evict_inode:254: Readonly filesystem [ 155.166717][ T14] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=36.00 [ 155.191317][ T14] usb 2-1: New USB device strings: Mfr=168, Product=81, SerialNumber=40 [ 155.241214][ T14] usb 2-1: Product: syz [ 155.275134][ T3653] EXT4-fs (loop3): unmounting filesystem. [ 155.287166][ T14] usb 2-1: Manufacturer: syz [ 155.291812][ T14] usb 2-1: SerialNumber: syz [ 155.324545][ T3706] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 155.343950][ T14] usb 2-1: config 0 descriptor?? [ 155.361651][ T3706] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 155.398335][ T14] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 155.417086][ T14] usb 2-1: Detected FT4232HA [ 155.529462][ T6540] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 155.636534][ T14] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 155.656848][ T14] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 155.670346][ T14] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 155.698788][ T14] usb 2-1: USB disconnect, device number 6 [ 155.733056][ T14] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 155.786100][ T14] ftdi_sio 2-1:0.0: device disconnected [ 156.074141][ T6562] loop2: detected capacity change from 0 to 1024 [ 156.090860][ T6562] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 156.151849][ T6562] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 156.329866][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1266'. [ 156.377033][ T3646] EXT4-fs (loop2): unmounting filesystem. [ 156.716128][ T6592] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.375487][ T6624] loop3: detected capacity change from 0 to 8 [ 157.486416][ T6209] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 157.832120][ T6646] loop0: detected capacity change from 0 to 256 [ 157.886901][ T6209] usb 5-1: New USB device found, idVendor=0c45, idProduct=6025, bcdDevice=41.12 [ 157.899070][ T6209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.938266][ T6209] usb 5-1: config 0 descriptor?? [ 157.977205][ T6209] hub 5-1:0.0: bad descriptor, ignoring hub [ 157.999393][ T6209] hub: probe of 5-1:0.0 failed with error -5 [ 158.013794][ T6652] netlink: 'syz.1.1303': attribute type 10 has an invalid length. [ 158.023600][ T6209] gspca_main: sonixb-2.14.0 probing 0c45:6025 [ 158.029819][ T6652] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1303'. [ 158.042442][ T6652] device caif0 entered promiscuous mode [ 158.048147][ T6652] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.275444][ T6662] loop3: detected capacity change from 0 to 1764 [ 158.524961][ T6208] usb 5-1: USB disconnect, device number 4 [ 158.654923][ T6678] netlink: 'syz.0.1315': attribute type 10 has an invalid length. [ 158.972516][ T6694] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1321'. [ 159.301037][ T6708] xt_TPROXY: Can be used only with -p tcp or -p udp [ 159.453447][ T6716] loop2: detected capacity change from 0 to 64 [ 159.687778][ T27] audit: type=1326 audit(1728479384.247:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.3.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de2f7dff9 code=0x7ffc0000 [ 159.772737][ T27] audit: type=1326 audit(1728479384.277:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.3.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f8de2f7dff9 code=0x7ffc0000 [ 159.856398][ T27] audit: type=1326 audit(1728479384.277:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.3.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de2f7dff9 code=0x7ffc0000 [ 159.920292][ T6734] loop4: detected capacity change from 0 to 256 [ 159.952307][ T27] audit: type=1326 audit(1728479384.277:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.3.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de2f7dff9 code=0x7ffc0000 [ 160.066199][ T6734] FAT-fs (loop4): Directory bread(block 64) failed [ 160.087872][ T6734] FAT-fs (loop4): Directory bread(block 65) failed [ 160.094516][ T6734] FAT-fs (loop4): Directory bread(block 66) failed [ 160.157406][ T6734] FAT-fs (loop4): Directory bread(block 67) failed [ 160.169148][ T6734] FAT-fs (loop4): Directory bread(block 68) failed [ 160.175709][ T6734] FAT-fs (loop4): Directory bread(block 69) failed [ 160.206712][ T6734] FAT-fs (loop4): Directory bread(block 70) failed [ 160.225292][ T6734] FAT-fs (loop4): Directory bread(block 71) failed [ 160.254874][ T6734] FAT-fs (loop4): Directory bread(block 72) failed [ 160.273831][ T6734] FAT-fs (loop4): Directory bread(block 73) failed [ 160.355026][ T27] audit: type=1800 audit(1728479384.907:33): pid=6734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1344" name="file2" dev="loop4" ino=1048612 res=0 errno=0 [ 160.372337][ T6756] libceph: resolve '0..' (ret=-3): failed [ 160.377161][ T3697] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 160.527001][ T6762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1357'. [ 160.776787][ T3697] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 160.807270][ T3697] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 160.836877][ T3697] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 160.867232][ T3697] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 160.931545][ T3697] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 160.967569][ T3697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.978507][ T6782] netlink: 'syz.3.1365': attribute type 2 has an invalid length. [ 161.024052][ T3697] usb 1-1: config 0 descriptor?? [ 161.290936][ T6798] loop3: detected capacity change from 0 to 512 [ 161.300877][ T6797] loop2: detected capacity change from 0 to 1764 [ 161.326513][ T3697] hdpvr 1-1:0.0: firmware version 0x8 dated ¥)†íËŸâè=ÛJå¦+nÍoKÜo5Éüf¦oŠÉ °ÐôçO¬übL [ 161.331688][ T6798] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 161.336921][ T14] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 161.451210][ T6798] EXT4-fs (loop3): 1 truncate cleaned up [ 161.485805][ T6798] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 161.552178][ T3697] hdpvr 1-1:0.0: device init failed [ 161.558368][ T3697] hdpvr: probe of 1-1:0.0 failed with error -12 [ 161.594237][ T3697] usb 1-1: USB disconnect, device number 6 [ 161.602405][ T6812] loop4: detected capacity change from 0 to 8 [ 161.633165][ T6812] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 161.664622][ T6812] cramfs: bad data blocksize 4294966936 [ 161.683210][ T6812] cramfs: bad data blocksize 524460 [ 161.693013][ T6812] cramfs: bad data blocksize 4294966936 [ 161.705284][ T27] audit: type=1800 audit(1728479386.257:34): pid=6812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1380" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 161.729665][ T3653] EXT4-fs (loop3): unmounting filesystem. [ 161.766754][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.796800][ T14] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 161.805979][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.861909][ T6818] loop2: detected capacity change from 0 to 256 [ 161.877561][ T14] usb 2-1: config 0 descriptor?? [ 161.906928][ T6818] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x21ebf3fa, utbl_chksum : 0xe619d30d) [ 162.242840][ T6824] loop4: detected capacity change from 0 to 4096 [ 162.266263][ T6824] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 162.327905][ T6834] dlm: no locking on control device [ 162.374907][ T6207] usb 2-1: USB disconnect, device number 7 [ 163.063991][ T6866] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1409'. [ 163.121393][ T6870] loop3: detected capacity change from 0 to 1024 [ 163.318401][ T6869] loop1: detected capacity change from 0 to 4096 [ 163.356025][ T6869] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 163.409428][ T27] audit: type=1400 audit(1728479387.967:35): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=6877 comm="syz.3.1414" [ 163.467206][ T6869] ntfs3: loop1: failed to convert "c46c" to macceltic [ 163.528067][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1416'. [ 163.578342][ T6882] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1416'. [ 163.738070][ T6891] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 163.790648][ T120] block nbd1: Attempted send on invalid socket [ 163.798225][ T120] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.855534][ T6898] netlink: 'syz.0.1423': attribute type 7 has an invalid length. [ 164.406390][ T6207] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 164.561670][ T6894] loop4: detected capacity change from 0 to 32768 [ 164.624157][ T6894] read_mapping_page failed! [ 164.671334][ T6923] loop1: detected capacity change from 0 to 4096 [ 164.780106][ T6923] ntfs: volume version 3.1. [ 164.992386][ T6207] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 165.027059][ T6207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.035600][ T6207] usb 3-1: Product: syz [ 165.060747][ T6207] usb 3-1: Manufacturer: syz [ 165.065374][ T6207] usb 3-1: SerialNumber: syz [ 165.083649][ T6207] r8152-cfgselector 3-1: config 0 descriptor?? [ 165.138294][ T6943] loop3: detected capacity change from 0 to 1024 [ 165.258266][ T6943] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 165.355433][ T6958] vhci_hcd: vhci_device speed not set [ 165.394310][ T3653] EXT4-fs (loop3): unmounting filesystem. [ 165.596637][ T6207] r8152-cfgselector 3-1: Unknown version 0x0000 [ 165.608079][ T6207] r8152-cfgselector 3-1: USB disconnect, device number 9 [ 165.665173][ T6971] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.313184][ T7001] ieee802154 phy0 wpan0: encryption failed: -22 [ 166.678895][ T7007] loop0: detected capacity change from 0 to 8192 [ 166.742025][ T7007] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 166.816093][ T7007] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 166.858554][ T7007] REISERFS (device loop0): using ordered data mode [ 166.865263][ T7007] reiserfs: using flush barriers [ 166.872598][ T7007] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 166.889344][ T7007] REISERFS (device loop0): checking transaction log (loop0) [ 167.061115][ T7007] REISERFS (device loop0): Using tea hash to sort names [ 167.068709][ T7007] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 167.431029][ T7049] netlink: 'syz.2.1497': attribute type 1 has an invalid length. [ 167.434447][ T7051] loop3: detected capacity change from 0 to 64 [ 167.465693][ T7049] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1497'. [ 168.610895][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1527'. [ 168.631115][ T7107] loop1: detected capacity change from 0 to 512 [ 168.768805][ T7107] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 168.777952][ T7107] ext4 filesystem being mounted at /316/file0 supports timestamps until 2038 (0x7fffffff) [ 168.956219][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 169.359386][ T3697] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 169.472607][ T7144] usb usb8: usbfs: process 7144 (syz.0.1542) did not claim interface 0 before use [ 169.651353][ T3697] usb 2-1: Using ep0 maxpacket: 16 [ 169.680482][ T7146] loop3: detected capacity change from 0 to 2048 [ 169.712952][ T7146] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 169.765673][ T7146] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 169.776666][ T3697] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 169.807900][ T7146] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.906631][ T3697] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.913899][ T7160] overlayfs: unrecognized mount option "y^\@\+\" or missing value [ 169.933975][ T3697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 169.953147][ T3697] usb 2-1: SerialNumber: syz [ 170.043126][ T7155] loop4: detected capacity change from 0 to 4096 [ 170.084955][ T7163] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551615) [ 170.123698][ T7163] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 170.266754][ T3697] usb 2-1: USB disconnect, device number 8 [ 170.677462][ T14] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 170.926609][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 170.944822][ T7201] loop2: detected capacity change from 0 to 512 [ 171.033887][ T7201] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 171.043689][ T7201] ext4 filesystem being mounted at /292/bus supports timestamps until 2038 (0x7fffffff) [ 171.057070][ T14] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.069126][ T14] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.079032][ T14] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.252594][ T14] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 171.271971][ T3646] EXT4-fs (loop2): unmounting filesystem. [ 171.282030][ T14] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 171.301048][ T14] usb 5-1: Product: syz [ 171.305362][ T14] usb 5-1: Manufacturer: syz [ 171.311564][ T14] usb 5-1: SerialNumber: syz [ 171.363925][ T7219] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1579'. [ 171.399401][ T14] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input7 [ 171.412048][ T7219] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1579'. [ 171.634144][ T7229] netlink: 'syz.3.1583': attribute type 21 has an invalid length. [ 171.642162][ T7223] loop2: detected capacity change from 0 to 4096 [ 171.667138][ T7229] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1583'. [ 171.694381][ T3884] usb 5-1: USB disconnect, device number 5 [ 171.723356][ T3884] appletouch 5-1:1.0: input: appletouch disconnected [ 171.796285][ T7223] Cannot load nls cp8 [ 171.806607][ T6207] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 171.959797][ T7223] 9pnet: Could not find request transport: xen [ 172.136597][ T7245] tmpfs: Bad value for 'size' [ 172.198266][ T7249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.210573][ T6207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 172.237484][ T6207] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 172.247865][ T6207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 172.266518][ T6207] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 172.297644][ T6207] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 172.307054][ T6207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.333826][ T6207] usb 1-1: config 0 descriptor?? [ 172.586480][ T6207] hdpvr 1-1:0.0: firmware version 0x15 dated mÂÒR( ry|ŸÉA3j×Æe{¸£)”7}-SŠ¥8N¾¾¸¤¼† [ 172.685246][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1600'. [ 172.806531][ T6207] hdpvr 1-1:0.0: device init failed [ 172.814404][ T6207] hdpvr: probe of 1-1:0.0 failed with error -12 [ 172.837064][ T6207] usb 1-1: USB disconnect, device number 7 [ 173.101636][ T7253] loop4: detected capacity change from 0 to 32768 [ 173.128905][ T7253] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1593 (7253) [ 173.177586][ T7253] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 173.209681][ T7253] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 173.240563][ T7253] BTRFS info (device loop4): using free space tree [ 173.475685][ T7293] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1607'. [ 173.493948][ T7253] BTRFS info (device loop4): enabling ssd optimizations [ 173.509548][ T7263] loop3: detected capacity change from 0 to 32768 [ 173.548755][ T7303] No such timeout policy "syz0" [ 173.596106][ T7263] JBD2: Ignoring recovery information on journal [ 173.649434][ T3645] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 173.760350][ T7263] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 173.954471][ T7317] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1615'. [ 173.976449][ T7317] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1615'. [ 174.003808][ T7263] OCFS2: ERROR (device loop3): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 17 has empty extent list at depth 312 [ 174.035738][ T7263] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 174.116470][ T7263] OCFS2: Returning error to the calling process. [ 174.122853][ T7263] (syz.3.1599,7263,1):ocfs2_find_leaf:1933 ERROR: status = -30 [ 174.178527][ T7263] (syz.3.1599,7263,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 174.191748][ T7263] (syz.3.1599,7263,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 174.203548][ T7263] (syz.3.1599,7263,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 174.212894][ T7263] (syz.3.1599,7263,1):ocfs2_read_virt_blocks:981 ERROR: status = -30 [ 174.221361][ T7263] (syz.3.1599,7263,1):ocfs2_read_dir_block:511 ERROR: status = -30 [ 174.287321][ T7263] (syz.3.1599,7263,1):ocfs2_find_dir_space_el:3487 ERROR: status = -5 [ 174.319919][ T7263] (syz.3.1599,7263,1):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -5 [ 174.336718][ T7263] (syz.3.1599,7263,1):ocfs2_mknod:296 ERROR: status = -5 [ 174.364188][ T7263] (syz.3.1599,7263,1):ocfs2_mknod:500 ERROR: status = -5 [ 174.395159][ T7263] (syz.3.1599,7263,1):ocfs2_mkdir:657 ERROR: status = -5 [ 174.482145][ T3653] ocfs2: Unmounting device (7,3) on (node local) [ 174.646386][ T6207] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 174.895614][ T7346] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1631'. [ 175.056784][ T6207] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 175.065565][ T6207] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.117004][ T6207] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 175.174782][ T6207] usb 2-1: config 1 has no interface number 1 [ 175.342574][ T7368] netlink: 'syz.4.1641': attribute type 1 has an invalid length. [ 175.357498][ T7368] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.1641'. [ 175.375273][ T7368] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1641'. [ 175.437277][ T6207] usb 2-1: string descriptor 0 read error: -22 [ 175.470009][ T6207] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.505743][ T6207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.640398][ T7379] netlink: 'syz.4.1646': attribute type 2 has an invalid length. [ 175.665206][ T7379] netlink: 'syz.4.1646': attribute type 8 has an invalid length. [ 175.675312][ T7379] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1646'. [ 176.029967][ T5931] usb 2-1: USB disconnect, device number 9 [ 176.109574][ T7400] tmpfs: Bad value for 'mpol' [ 176.394741][ T7411] loop0: detected capacity change from 0 to 512 [ 176.452709][ T7411] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 176.491396][ T7411] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 176.506596][ T7411] System zones: 0-1, 15-15, 18-18, 34-34 [ 176.513762][ T7411] EXT4-fs (loop0): orphan cleanup on readonly fs [ 176.520918][ T7411] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 176.530985][ T7411] EXT4-fs warning (device loop0): ext4_enable_quotas:7035: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 176.545784][ T7411] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 176.566144][ T7411] EXT4-fs error (device loop0): ext4_orphan_get:1422: comm syz.0.1673: bad orphan inode 16 [ 176.586449][ T7411] ext4_test_bit(bit=15, block=18) = 1 [ 176.596555][ T7411] is_bad_inode(inode)=0 [ 176.601381][ T7411] NEXT_ORPHAN(inode)=0 [ 176.605618][ T7411] max_ino=32 [ 176.650680][ T7411] i_nlink=2 [ 176.654017][ T7411] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 176.776846][ T7411] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 176.915500][ T3655] EXT4-fs (loop0): unmounting filesystem. [ 177.104726][ T7442] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1675'. [ 177.133462][ T7442] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1675'. [ 177.550411][ T7456] loop2: detected capacity change from 0 to 2048 [ 177.589759][ T7466] netlink: 'syz.3.1688': attribute type 1 has an invalid length. [ 177.657276][ T7470] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.721992][ T7456] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 177.793734][ T7456] Remounting filesystem read-only [ 177.807127][ T7456] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 177.827146][ T7456] NILFS (loop2): error -5 truncating bmap (ino=16) [ 177.948346][ T3646] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 177.959807][ T3646] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 178.001350][ T3646] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.048481][ T3646] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.090124][ T3646] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.115874][ T3646] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 178.315220][ T7497] loop4: detected capacity change from 0 to 512 [ 178.369230][ T7497] EXT4-fs (loop4): Test dummy encryption mode enabled [ 178.375966][ T7491] loop1: detected capacity change from 0 to 8192 [ 178.426176][ T7497] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.1702: inline data xattr refers to an external xattr inode [ 178.429492][ T7491] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 178.465545][ T7497] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.1702: couldn't read orphan inode 12 (err -117) [ 178.494842][ T7497] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 178.548763][ T7506] loop3: detected capacity change from 0 to 1764 [ 178.574348][ T7491] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 178.603520][ T7491] REISERFS (device loop1): using ordered data mode [ 178.611532][ T7491] reiserfs: using flush barriers [ 178.666140][ T7491] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 178.696814][ T7491] REISERFS (device loop1): checking transaction log (loop1) [ 178.705945][ T3645] EXT4-fs (loop4): unmounting filesystem. [ 178.765727][ T7491] REISERFS (device loop1): Using r5 hash to sort names [ 178.820718][ T7491] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 178.854955][ T7491] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 178.971684][ T7521] vivid-001: disconnect [ 179.007033][ T7520] vivid-001: reconnect [ 179.214989][ T7529] __nla_validate_parse: 1 callbacks suppressed [ 179.215010][ T7529] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1719'. [ 179.458893][ T7540] cgroup: Need name or subsystem set [ 179.483160][ T27] audit: type=1326 audit(1728479404.037:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7541 comm="syz.1.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d297dff9 code=0x7ffc0000 [ 179.561207][ T27] audit: type=1326 audit(1728479404.087:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7541 comm="syz.1.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f34d297dff9 code=0x7ffc0000 [ 179.675808][ T27] audit: type=1326 audit(1728479404.087:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7541 comm="syz.1.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d297dff9 code=0x7ffc0000 [ 179.753010][ T27] audit: type=1326 audit(1728479404.087:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7541 comm="syz.1.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d297dff9 code=0x7ffc0000 [ 180.579285][ T7595] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1749'. [ 180.636606][ T5931] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 180.679257][ T7598] loop1: detected capacity change from 0 to 136 [ 180.996608][ T5931] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 181.032892][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.058474][ T5931] usb 1-1: config 0 descriptor?? [ 181.216802][ T7622] loop4: detected capacity change from 0 to 1024 [ 181.252291][ T7622] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 181.256118][ T7626] loop1: detected capacity change from 0 to 16 [ 181.322438][ T7622] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 181.337461][ T7626] erofs: (device loop1): mounted with root inode @ nid 36. [ 181.446548][ T7622] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.1764: corrupted in-inode xattr [ 181.466722][ T7626] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 181.497679][ T7626] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 181.517855][ T5931] ath6kl: Failed to submit usb control message: -71 [ 181.524766][ T5931] ath6kl: unable to send the bmi data to the device: -71 [ 181.542094][ T5931] ath6kl: Unable to send get target info: -71 [ 181.558713][ T5931] ath6kl: Failed to init ath6kl core: -71 [ 181.575083][ T7626] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 181.605348][ T3645] EXT4-fs (loop4): unmounting filesystem. [ 181.651415][ T5931] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 181.677609][ T5931] usb 1-1: USB disconnect, device number 8 [ 182.008667][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1787'. [ 182.045739][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1787'. [ 182.191133][ T7656] loop3: detected capacity change from 0 to 4096 [ 182.205107][ T7661] netlink: 'syz.0.1778': attribute type 3 has an invalid length. [ 182.308742][ T7663] x_tables: unsorted entry at hook 1 [ 182.323367][ T7656] ntfs: volume version 3.1. [ 182.530833][ T46] ntfs: (device loop3): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 183.226769][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1801'. [ 183.235718][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1801'. [ 183.400444][ T7712] afs: Unexpected value for 'dyn' [ 183.753080][ T7728] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 183.811622][ T7734] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1816'. [ 184.016450][ T6207] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 184.143654][ T7742] loop1: detected capacity change from 0 to 4096 [ 184.167194][ T7742] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 184.286556][ T6207] usb 1-1: Using ep0 maxpacket: 16 [ 184.423509][ T7752] netlink: 'syz.1.1826': attribute type 12 has an invalid length. [ 184.431973][ T7752] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 184.436751][ T6207] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 184.456364][ T6208] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 184.495217][ T6207] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 184.511897][ T7754] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1827'. [ 184.569134][ T7738] loop3: detected capacity change from 0 to 32768 [ 184.606478][ T153] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 184.663039][ T7756] loop1: detected capacity change from 0 to 512 [ 184.674565][ T7756] EXT4-fs: Invalid want_extra_isize 220 [ 184.687026][ T6207] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=f4.95 [ 184.704317][ T6207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.713801][ T6207] usb 1-1: Product: syz [ 184.718566][ T6207] usb 1-1: Manufacturer: syz [ 184.723273][ T6207] usb 1-1: SerialNumber: syz [ 184.732257][ T6207] usb 1-1: config 0 descriptor?? [ 184.737762][ T6208] usb 3-1: Using ep0 maxpacket: 32 [ 184.764533][ T7730] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 184.791982][ T7730] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 184.866568][ T6208] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 184.875353][ T6208] usb 3-1: config 0 has no interface number 0 [ 184.900160][ T7762] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 184.982424][ T7764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1832'. [ 184.995598][ T153] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 185.036840][ T7730] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 185.064010][ T7730] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 185.073074][ T6208] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 185.087156][ T6208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.105628][ T6208] usb 3-1: Product: syz [ 185.115800][ T6208] usb 3-1: Manufacturer: syz [ 185.125949][ T6208] usb 3-1: SerialNumber: syz [ 185.138170][ T6208] usb 3-1: config 0 descriptor?? [ 185.186740][ T153] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.195829][ T153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.222500][ T153] usb 5-1: Product: syz [ 185.231221][ T153] usb 5-1: Manufacturer: syz [ 185.238687][ T153] usb 5-1: SerialNumber: syz [ 185.298671][ T153] usb 5-1: bad CDC descriptors [ 185.318944][ T6207] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 185.356506][ T6207] asix: probe of 1-1:0.0 failed with error -71 [ 185.374487][ T6207] usb 1-1: USB disconnect, device number 9 [ 185.413748][ T7774] loop3: detected capacity change from 0 to 512 [ 185.433435][ T6208] radio-si470x 3-1:0.35: this is not a si470x device. [ 185.447409][ T7774] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 185.464547][ T7774] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 185.479321][ T7774] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 185.497172][ T7774] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 185.521947][ T7774] System zones: 0-2, 18-18, 34-34 [ 185.524883][ T153] usb 5-1: USB disconnect, device number 6 [ 185.542881][ T7774] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 185.567252][ T7774] EXT4-fs (loop3): 1 truncate cleaned up [ 185.573099][ T7774] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 185.603032][ T7774] CIFS mount error: No usable UNC path provided in device string! [ 185.603032][ T7774] [ 185.615397][ T7774] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 185.636566][ T6208] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 185.657474][ T3653] EXT4-fs (loop3): unmounting filesystem. [ 185.705902][ T6208] usb 3-1: USB disconnect, device number 10 [ 185.892902][ T27] audit: type=1326 audit(1728479410.447:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.1.1842" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34d297dff9 code=0x0 [ 185.940706][ T7790] loop0: detected capacity change from 0 to 256 [ 185.989717][ T7790] FAT-fs (loop0): Directory bread(block 64) failed [ 185.997135][ T7790] FAT-fs (loop0): Directory bread(block 65) failed [ 186.003959][ T7790] FAT-fs (loop0): Directory bread(block 66) failed [ 186.011264][ T7790] FAT-fs (loop0): Directory bread(block 67) failed [ 186.019515][ T7790] FAT-fs (loop0): Directory bread(block 68) failed [ 186.026213][ T7790] FAT-fs (loop0): Directory bread(block 69) failed [ 186.032900][ T7790] FAT-fs (loop0): Directory bread(block 70) failed [ 186.046462][ T7790] FAT-fs (loop0): Directory bread(block 71) failed [ 186.053205][ T7790] FAT-fs (loop0): Directory bread(block 72) failed [ 186.063935][ T7790] FAT-fs (loop0): Directory bread(block 73) failed [ 186.102515][ T153] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 186.142894][ T7794] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1844'. [ 186.152134][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1844'. [ 186.477748][ T153] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 186.496391][ T153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.527386][ T153] usb 4-1: config 0 descriptor?? [ 186.643105][ T7813] tmpfs: Bad value for 'mpol' [ 186.660436][ T7815] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 186.878711][ T7824] xt_CT: You must specify a L4 protocol and not use inversions on it [ 186.973589][ T7828] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1862'. [ 186.976179][ T7829] netlink: 'syz.2.1861': attribute type 32 has an invalid length. [ 186.986733][ T7828] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1862'. [ 186.996884][ T153] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 187.031167][ T153] asix: probe of 4-1:0.0 failed with error -71 [ 187.048781][ T153] usb 4-1: USB disconnect, device number 10 [ 187.242889][ T7835] loop1: detected capacity change from 0 to 47 [ 187.477235][ T7843] IPv6: sit2: Disabled Multicast RS [ 187.727171][ T7853] tmpfs: Bad value for 'mpol' [ 188.158772][ T7831] loop2: detected capacity change from 0 to 32768 [ 188.219192][ T7831] (syz.2.1863,7831,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 188.234982][ T7831] (syz.2.1863,7831,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 188.292089][ T7831] (syz.2.1863,7831,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xd5db68cb, computed 0x5d5ae73b. Applying ECC. [ 188.338663][ T5934] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 188.352763][ T7831] JBD2: Ignoring recovery information on journal [ 188.416229][ T7831] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 188.503577][ T7831] (syz.2.1863,7831,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x6db03cd7, computed 0xf4525ad6. Applying ECC. [ 188.525167][ T7831] (syz.2.1863,7831,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x6db03cd7, computed 0xe42081fe [ 188.545368][ T7831] (syz.2.1863,7831,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 188.554046][ T7831] (syz.2.1863,7831,1):ocfs2_quota_read:201 ERROR: status = -5 [ 188.567671][ T7831] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 1 [ 188.577604][ T7831] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 60928 [ 188.640825][ T7831] (syz.2.1863,7831,1):ocfs2_acquire_dquot:873 ERROR: status = -5 [ 188.703477][ T3646] ocfs2: Unmounting device (7,2) on (node local) [ 188.706614][ T5934] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 188.746468][ T5934] usb 2-1: config 0 has no interface number 0 [ 188.752619][ T5934] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 188.956587][ T5934] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 188.965778][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.996248][ T7863] loop3: detected capacity change from 0 to 32768 [ 189.016070][ T3651] ------------[ cut here ]------------ [ 189.021965][ T3651] WARNING: CPU: 0 PID: 3651 at net/bluetooth/hci_conn.c:617 hci_conn_timeout+0xf8/0x1e0 [ 189.031796][ T3651] Modules linked in: [ 189.035733][ T3651] CPU: 0 PID: 3651 Comm: kworker/u5:2 Not tainted 6.1.112-syzkaller #0 [ 189.044065][ T3651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 189.044552][ T7891] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 189.054216][ T3651] Workqueue: hci0 hci_conn_timeout [ 189.054286][ T3651] RIP: 0010:hci_conn_timeout+0xf8/0x1e0 [ 189.054315][ T3651] Code: 89 f7 e8 eb 3e 0a 00 eb 07 e8 a4 61 de f7 b0 13 0f b6 f0 4c 89 f7 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3d a3 ff ff e8 88 61 de f7 <0f> 0b eb 8f 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 38 ff ff ff 48 89 [ 189.054335][ T3651] RSP: 0018:ffffc9000417fc28 EFLAGS: 00010293 [ 189.054357][ T3651] RAX: ffffffff89ac4db8 RBX: ffff88807993c330 RCX: ffff88805fdd0000 [ 189.054375][ T3651] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 189.054392][ T3651] RBP: 00000000ffffffff R08: ffffffff89ac4d21 R09: ffffed100f327803 [ 189.113094][ T7893] x_tables: duplicate entry at hook 2 [ 189.116123][ T3651] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 189.116145][ T3651] R13: 1ffff11003ac9203 R14: ffff88807993c000 R15: ffffffff815ae9e9 [ 189.116164][ T3651] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 189.154599][ T3651] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.161263][ T3651] CR2: 0000555582e85808 CR3: 0000000075364000 CR4: 00000000003506f0 [ 189.169319][ T3651] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.173085][ T7863] XFS (loop3): Mounting V5 Filesystem [ 189.177332][ T3651] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.177354][ T3651] Call Trace: [ 189.177364][ T3651] [ 189.177375][ T3651] ? __warn+0x15a/0x520 [ 189.177414][ T3651] ? hci_conn_timeout+0xf8/0x1e0 [ 189.177444][ T3651] ? report_bug+0x2af/0x500 [ 189.177465][ T3651] ? hci_conn_timeout+0xf8/0x1e0 [ 189.215807][ T3651] ? handle_bug+0x3d/0x70 [ 189.220232][ T3651] ? exc_invalid_op+0x16/0x40 [ 189.224940][ T3651] ? asm_exc_invalid_op+0x16/0x20 [ 189.230077][ T3651] ? process_one_work+0x7a9/0x11d0 [ 189.235230][ T3651] ? hci_conn_timeout+0x61/0x1e0 [ 189.240261][ T3651] ? hci_conn_timeout+0xf8/0x1e0 [ 189.245250][ T3651] ? hci_conn_timeout+0xf8/0x1e0 [ 189.250283][ T3651] ? hci_conn_timeout+0xf8/0x1e0 [ 189.255249][ T3651] ? process_one_work+0x7a9/0x11d0 [ 189.260448][ T3651] process_one_work+0x8a9/0x11d0 [ 189.265438][ T3651] ? worker_detach_from_pool+0x260/0x260 [ 189.271195][ T3651] ? _raw_spin_lock_irqsave+0x120/0x120 [ 189.276820][ T3651] ? kthread_data+0x4e/0xc0 [ 189.281378][ T3651] ? wq_worker_running+0x97/0x190 [ 189.286503][ T3651] worker_thread+0xa47/0x1200 [ 189.291229][ T3651] ? release_firmware_map_entry+0x186/0x186 [ 189.297249][ T3651] kthread+0x28d/0x320 [ 189.301353][ T3651] ? worker_clr_flags+0x190/0x190 [ 189.306477][ T3651] ? kthread_blkcg+0xd0/0xd0 [ 189.311104][ T3651] ret_from_fork+0x1f/0x30 [ 189.315582][ T3651] [ 189.318727][ T3651] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 189.326035][ T3651] CPU: 0 PID: 3651 Comm: kworker/u5:2 Not tainted 6.1.112-syzkaller #0 [ 189.334294][ T3651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 189.344376][ T3651] Workqueue: hci0 hci_conn_timeout [ 189.349527][ T3651] Call Trace: [ 189.352826][ T3651] [ 189.353949][ T7863] XFS (loop3): Ending clean mount [ 189.360796][ T3651] dump_stack_lvl+0x1e3/0x2cb [ 189.365528][ T3651] ? nf_tcp_handle_invalid+0x642/0x642 [ 189.371025][ T3651] ? panic+0x764/0x764 [ 189.375122][ T3651] ? 0xffffffffa0003b40 [ 189.379305][ T3651] ? vscnprintf+0x59/0x80 [ 189.383670][ T3651] panic+0x318/0x764 [ 189.387606][ T3651] ? __warn+0x169/0x520 [ 189.391789][ T3651] ? memcpy_page_flushcache+0xfc/0xfc [ 189.397210][ T3651] ? ret_from_fork+0x1f/0x30 [ 189.401843][ T3651] __warn+0x348/0x520 [ 189.405874][ T3651] ? hci_conn_timeout+0xf8/0x1e0 [ 189.410857][ T3651] report_bug+0x2af/0x500 [ 189.415221][ T3651] ? hci_conn_timeout+0xf8/0x1e0 [ 189.420195][ T3651] handle_bug+0x3d/0x70 [ 189.424377][ T3651] exc_invalid_op+0x16/0x40 [ 189.428920][ T3651] asm_exc_invalid_op+0x16/0x20 [ 189.433813][ T3651] RIP: 0010:hci_conn_timeout+0xf8/0x1e0 [ 189.439476][ T3651] Code: 89 f7 e8 eb 3e 0a 00 eb 07 e8 a4 61 de f7 b0 13 0f b6 f0 4c 89 f7 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3d a3 ff ff e8 88 61 de f7 <0f> 0b eb 8f 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 38 ff ff ff 48 89 [ 189.459291][ T3651] RSP: 0018:ffffc9000417fc28 EFLAGS: 00010293 [ 189.465397][ T3651] RAX: ffffffff89ac4db8 RBX: ffff88807993c330 RCX: ffff88805fdd0000 [ 189.473398][ T3651] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 189.481403][ T3651] RBP: 00000000ffffffff R08: ffffffff89ac4d21 R09: ffffed100f327803 [ 189.489420][ T3651] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 189.497517][ T3651] R13: 1ffff11003ac9203 R14: ffff88807993c000 R15: ffffffff815ae9e9 [ 189.505523][ T3651] ? process_one_work+0x7a9/0x11d0 [ 189.510685][ T3651] ? hci_conn_timeout+0x61/0x1e0 [ 189.515654][ T3651] ? hci_conn_timeout+0xf8/0x1e0 [ 189.520623][ T3651] ? hci_conn_timeout+0xf8/0x1e0 [ 189.525681][ T3651] ? process_one_work+0x7a9/0x11d0 [ 189.530825][ T3651] process_one_work+0x8a9/0x11d0 [ 189.535810][ T3651] ? worker_detach_from_pool+0x260/0x260 [ 189.541504][ T3651] ? _raw_spin_lock_irqsave+0x120/0x120 [ 189.547074][ T3651] ? kthread_data+0x4e/0xc0 [ 189.551604][ T3651] ? wq_worker_running+0x97/0x190 [ 189.556639][ T3651] worker_thread+0xa47/0x1200 [ 189.561339][ T3651] ? release_firmware_map_entry+0x186/0x186 [ 189.567275][ T3651] kthread+0x28d/0x320 [ 189.571349][ T3651] ? worker_clr_flags+0x190/0x190 [ 189.576386][ T3651] ? kthread_blkcg+0xd0/0xd0 [ 189.580996][ T3651] ret_from_fork+0x1f/0x30 [ 189.585443][ T3651] [ 189.588958][ T3651] Kernel Offset: disabled [ 189.593369][ T3651] Rebooting in 86400 seconds..