last executing test programs: 2.231472338s ago: executing program 0 (id=3349): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 1.783921127s ago: executing program 3 (id=3355): unshare(0x2040400) r0 = creat(&(0x7f0000000200)='./file0\x00', 0x22) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) 1.61152489s ago: executing program 1 (id=3357): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x100, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xc4}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1.57817647s ago: executing program 0 (id=3358): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, r1, 0xe929e2fb672a46f1, 0x70bd2a, 0x25dfdc03}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1.511697312s ago: executing program 3 (id=3359): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000007fff010000000c0005006c000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRES32, @ANYBLOB='8'], 0x90}}, 0x0) 1.416575813s ago: executing program 0 (id=3361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2c, r1, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.243920086s ago: executing program 2 (id=3362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x24040851}, 0x0) 1.243568766s ago: executing program 1 (id=3363): socket$kcm(0x2c, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) 1.243315166s ago: executing program 3 (id=3364): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd70020500000006000000060001000500000008000b000400000008000c00ac0a0000080009"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.184166098s ago: executing program 0 (id=3365): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r1, 0x731, 0x0, 0x0, {0x38}}, 0x14}, 0x1, 0x2}, 0x0) 1.126030048s ago: executing program 1 (id=3366): sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x40080) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160003002600000000000000fe880000000000000000000000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000032"], 0xf8}}, 0x0) 1.06439444s ago: executing program 2 (id=3367): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 991.763541ms ago: executing program 3 (id=3368): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x3004000, &(0x7f00000001c0)={[{@errors_remount}, {@resuid}, {@block_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@nobarrier}, {@noblock_validity}, {@dioread_nolock}]}, 0x1, 0x790, &(0x7f0000001740)="$eJzs3c9rHFUcAPDvTHaT/k4qClZRAx5aEPPLgj9QaMGjiKCevDQkaSnd/qCJYEOEFrEnjwXBiwiCF2+KF0FKT4p46UX6H0ilSBBaxUNkprPJttlNds1upnU/H5jkvXm7+95k+c6bHy/zAuhbo9mPNOJARFxMIoaL9UlEVPNUJeLI3dfdWV6a+Wt5aSaJlZW3/0jy19xeXpqJhvdkdhdv2xER168l8cjA+nrnLyyemq7V5s4X+fGF0+fG5y8sPn/y9PSJuRNzZ6ampl6eOjz54sRU17b1o6d+/uafy29+/Om+G1d+v/7dviSOxJ6irHE7umU0Rlf/Jo0qEfF6tysryUCxPWnDuqRSYoPoSNrwHT4ewzEQa1/ecFz7ttTGAQA9sZItAECfSfT/ANBn6tcBbi8vzdSXcq9IANvl1tHIb9RncX+nWO6WVOJI/ntHPg5g159JNN7WTepjB7Yo+4yv36t+ni3Ro/vwQHMXL+U3/pv0/0ke/yP5KJ718T8QUewftub+fYj4h+2zlfh/qwv1i38AAAAAAADonqtHI+KlZvf/0tXxP9Hk/t9QREx0of7N7/+lN7tQDdDEraMRrxbP9rl3/N/qE11GBorc3oh4LKrJ8ZO1uSz290XEoagOZfnJ5h+f7zLevTz5Q6v6G8f/ZUtWf30sYNGOm5Whe98zO70wvdXtBiJuXYp4otIs/pPV/j9pMf73WJt1fL/01dOtyjaPf6BXVr6IONi0/197cl2y8fP5xvPjgfH6UcF6i8de+7BV/W3F/9q/KQFdlPX/uzaO/5Gk8Xmd853X8cntic9alf3X4//B5J38qaKDxboPphcWzk9GDCZvrF/fvUeIwkOtHg/1eMni/9Czzc//Nzr+r0bEuTbr/PLH6q+tykbzSHX8D2XI4n+2o/6/88TfvzzZclfRXv9/OO/TDxVrXP+DjbUboGW3EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuimNiD2RpGOr6TQdG4vYHRGPxq60dnZ+4bnjZ98/M5uVRYxENT1+sjY3ERHDd/NJlp/M02v5qfvyL0TE/oi4MrQzz4/NnK3Nlr3xAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDY3WL+/8xvQ2W3DgDomR1lNwAA2Hb6fwDoP/p/AOg/Hff/P+3tTUMAgG3j/B8A+o/+HwAAAAAAAAAAAAAAAAAAAAAAAAB6av8zV28kEXHxlZ35khksyqqltgzotbTsBgClGSi7AUBpKu28KElWzwmA/w/n+ECySXnrKUJcQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoH8cPNDu/P9tzRQKPETM3gf9y/z/0L8c1UP/Mv8/YP5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY3PyFxVPTtdrceYluJyoPRjMehMRQRDwAzZDoIFH2ngkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIfBvwEAAP//snoPXw==") chdir(&(0x7f0000000240)='./file0\x00') syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000002200)='./file0\x00', 0x1a4a438, &(0x7f0000002100)=ANY=[@ANYRES64=0x0, @ANYRES16=r0, @ANYRES32, @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) 991.384552ms ago: executing program 0 (id=3369): r0 = socket$nl_crypto(0x10, 0x3, 0x15) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="e0000000100009"], 0xe0}], 0x1}, 0x40040) 955.559372ms ago: executing program 1 (id=3370): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x3, 0x1000, 0x8, 0x1, 0x1, 0x4003}) 819.217195ms ago: executing program 0 (id=3371): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8441, 0x104) lseek(r0, 0x4, 0x0) 535.18099ms ago: executing program 2 (id=3372): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20143) 442.201032ms ago: executing program 1 (id=3373): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xc8d4022e7cecd54a, 0x0, 0x0) 440.290252ms ago: executing program 3 (id=3374): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000300000014000200fe8000000000000000000000000000002900070073797374656d5f753a6f626a6563745f723a69707461626c65735f636f6e665f743a733000000000140006"], 0x78}}, 0x0) 334.099904ms ago: executing program 2 (id=3375): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00'}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2000000, 0xd50, 0xd50, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 123.857787ms ago: executing program 3 (id=3376): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x4f27, 0x4, 0x10000, 0x4, 0x5, 0x5, 0x8, 0x7, 0xa, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e58, 0xb, 0xe66, 0x3, 0x8, 0x4085, 0x0, 0xfffffff8]}) 123.517827ms ago: executing program 2 (id=3377): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x4343}], 0x1, 0x0, 0x0, 0x0) 92.922628ms ago: executing program 1 (id=3378): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001280)={0x14, r1, 0x711, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8048045}, 0x40c0) 0s ago: executing program 2 (id=3379): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r0, &(0x7f0000000c40)=[{&(0x7f0000000700)="a6f377d90abe87cc0135c454052224ef3aea2a88a791f543e0d1a3df556307f12a9b9232a103efbd0f0a3125fcb7117e2c7d7914dda1e8ab58897781abf4e0e3259071d9fc7e7261569814268c8b971b0cb6", 0x52}], 0x1) kernel console output (not intermixed with test programs): o 1024 [ 338.770550][T11615] EXT4-fs: inline encryption not supported [ 338.784804][T11615] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 338.803140][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.842410][T11615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.087189][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.810555][T11627] loop3: detected capacity change from 0 to 40427 [ 339.867427][T11627] F2FS-fs (loop3): Found nat_bits in checkpoint [ 339.968083][T11627] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 340.051116][ T5784] syz-executor: attempt to access beyond end of device [ 340.051116][ T5784] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 340.060464][T11639] loop1: detected capacity change from 0 to 32768 [ 340.086578][T11639] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.2332 (11639) [ 340.108087][ T5784] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 340.156850][T11639] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 340.186347][T11639] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 340.203351][T11639] BTRFS info (device loop1): using free space tree [ 340.289309][T11639] BTRFS info (device loop1): enabling ssd optimizations [ 340.318436][T11639] BTRFS info (device loop1): auto enabling async discard [ 340.419498][ T5785] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 341.193129][T11677] netlink: 'syz.3.2341': attribute type 3 has an invalid length. [ 341.216208][T11677] netlink: 'syz.3.2341': attribute type 3 has an invalid length. [ 341.228066][T11677] netlink: 'syz.3.2341': attribute type 3 has an invalid length. [ 341.266322][T11677] netlink: 'syz.3.2341': attribute type 3 has an invalid length. [ 341.287590][T11677] netlink: 'syz.3.2341': attribute type 3 has an invalid length. [ 341.304038][T11677] netlink: 'syz.3.2341': attribute type 3 has an invalid length. [ 341.321508][T11677] netlink: 'syz.3.2341': attribute type 3 has an invalid length. [ 341.345001][T11677] netlink: 'syz.3.2341': attribute type 3 has an invalid length. [ 341.360835][T11677] netlink: 'syz.3.2341': attribute type 3 has an invalid length. [ 341.382026][T11677] netlink: 'syz.3.2341': attribute type 3 has an invalid length. [ 341.524483][T11685] loop0: detected capacity change from 0 to 2048 [ 341.569926][T11685] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 341.593636][T11685] NILFS (loop0): mounting unchecked fs [ 341.603205][T11689] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2346'. [ 341.653895][T11685] NILFS (loop0): recovery complete [ 341.674453][T11692] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 341.742563][ T28] audit: type=1800 audit(1753358662.265:100): pid=11685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2344" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 341.866287][ T5823] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 342.000106][T11698] loop1: detected capacity change from 0 to 2048 [ 342.034521][T11698] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 342.079753][ T5823] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 342.089667][ T5823] usb 3-1: config 0 has no interface number 0 [ 342.101729][T11703] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 342.117703][ T5823] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 342.136235][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.177239][ T5823] usb 3-1: config 0 descriptor?? [ 342.219698][ T5823] usb 3-1: selecting invalid altsetting 1 [ 342.239251][T11698] syz.1.2351 (11698) used greatest stack depth: 20144 bytes left [ 342.256343][ T5823] dvb_ttusb_budget: ttusb_init_controller: error [ 342.276388][ T5823] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 342.436575][ T5823] DVB: Unable to find symbol cx22700_attach() [ 342.541724][ T5823] DVB: Unable to find symbol tda10046_attach() [ 342.566379][ T5823] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 342.593406][ T5823] usb 3-1: USB disconnect, device number 28 [ 342.732522][T11716] loop1: detected capacity change from 0 to 256 [ 342.778461][T11716] exfat: Deprecated parameter 'namecase' [ 342.820058][T11716] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 342.893204][T11700] loop3: detected capacity change from 0 to 32768 [ 342.913083][T11700] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2352 (11700) [ 342.957892][T11700] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 342.986750][T11700] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 343.008238][T11700] BTRFS info (device loop3): using free space tree [ 343.071891][T11727] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2366'. [ 343.128031][T11700] BTRFS info (device loop3): enabling ssd optimizations [ 343.135130][T11700] BTRFS info (device loop3): auto enabling async discard [ 343.366248][ T28] audit: type=1800 audit(1753358663.885:101): pid=11700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2352" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 343.398919][ T788] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x4 [ 343.446268][ T788] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x2 [ 343.454029][ T788] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x0 [ 343.502197][ T788] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x0 [ 343.531703][ T788] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x0 [ 343.562587][ T788] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x0 [ 343.586042][T11747] program syz.1.2363 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.606138][ T788] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x0 [ 343.614814][ T788] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x0 [ 343.641840][ T788] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x0 [ 343.668545][ T788] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x0 [ 343.706590][ T788] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x0 [ 343.737268][ T788] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x0 [ 343.773112][ T788] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x0 [ 343.803212][ T788] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x0 [ 343.820709][ T788] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x0 [ 343.838981][ T788] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x0 [ 343.850552][ T5784] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 343.865807][ T788] hid-generic 0000:3000000:0000.0031: hidraw0: HID v0.00 Device [sy] on syz0 [ 344.066152][ T5819] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 344.112614][T11753] fido_id[11753]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 344.173447][T11757] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2368'. [ 344.315955][ T5819] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 344.325049][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.376164][ T5819] usb 3-1: Product: syz [ 344.399496][ T5819] usb 3-1: Manufacturer: syz [ 344.408663][ T5819] usb 3-1: SerialNumber: syz [ 344.433638][T11764] loop0: detected capacity change from 0 to 1024 [ 344.446303][ T5819] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 344.483603][ T5850] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 345.012372][ T788] usb 3-1: USB disconnect, device number 29 [ 345.111904][T11766] loop0: detected capacity change from 0 to 32768 [ 345.158192][T11766] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 345.249558][T11766] XFS (loop0): Ending clean mount [ 345.307252][T11766] XFS (loop0): Quotacheck needed: Please wait. [ 345.372915][T11766] XFS (loop0): Quotacheck: Done. [ 345.504141][ T5786] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 345.831407][ T5850] usb 3-1: Service connection timeout for: 256 [ 345.845258][ T5850] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 345.889161][ T5850] ath9k_htc: Failed to initialize the device [ 345.915985][ T788] usb 3-1: ath9k_htc: USB layer deinitialized [ 346.836958][T11795] loop1: detected capacity change from 0 to 32768 [ 346.897465][T11795] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 346.999128][T11804] loop2: detected capacity change from 0 to 32768 [ 347.076049][ T5785] (syz-executor,5785,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 347.124459][ T5785] ocfs2: Unmounting device (7,1) on (node local) [ 347.461925][T11817] loop0: detected capacity change from 0 to 512 [ 348.290111][T11837] loop2: detected capacity change from 0 to 1024 [ 348.543414][T11845] overlayfs: missing 'lowerdir' [ 348.932905][T11834] loop1: detected capacity change from 0 to 32768 [ 348.940910][T11834] XFS: attr2 mount option is deprecated. [ 348.954108][T11834] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 349.000677][T11834] XFS (loop1): Ending clean mount [ 349.012207][T11834] XFS (loop1): Quotacheck needed: Please wait. [ 349.026056][ T5849] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 349.063174][T11834] XFS (loop1): Quotacheck: Done. [ 349.158225][ T5785] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 349.249366][ T5849] usb 3-1: config 0 has an invalid interface number: 23 but max is 0 [ 349.260101][ T5849] usb 3-1: config 0 has no interface number 0 [ 349.267268][ T5849] usb 3-1: config 0 interface 23 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 349.281570][ T5849] usb 3-1: config 0 interface 23 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 349.332177][ T28] audit: type=1326 audit(1753358669.855:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6aa18e9a9 code=0x7ffc0000 [ 349.354533][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.364179][ T28] audit: type=1326 audit(1753358669.855:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6aa18e9a9 code=0x7ffc0000 [ 349.376010][T11866] loop3: detected capacity change from 0 to 512 [ 349.386562][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.410841][ T5849] usb 3-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 349.430980][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.443805][ T5849] usb 3-1: Product: syz [ 349.448588][ T5849] usb 3-1: Manufacturer: syz [ 349.448965][T11866] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 349.453233][ T5849] usb 3-1: SerialNumber: syz [ 349.468942][ T28] audit: type=1326 audit(1753358669.855:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc6aa18e9a9 code=0x7ffc0000 [ 349.493519][ T28] audit: type=1326 audit(1753358669.855:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc6aa18e9e3 code=0x7ffc0000 [ 349.522691][ T5849] usb 3-1: config 0 descriptor?? [ 349.529678][T11851] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 349.538748][T11851] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 349.552275][ T28] audit: type=1326 audit(1753358669.855:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc6aa18d45f code=0x7ffc0000 [ 349.553218][ T5849] ums-usbat 3-1:0.23: USB Mass Storage device detected [ 349.576338][ T28] audit: type=1326 audit(1753358669.855:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc6aa18ea37 code=0x7ffc0000 [ 349.607319][ T28] audit: type=1326 audit(1753358669.885:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc6aa18d310 code=0x7ffc0000 [ 349.629767][T11866] EXT4-fs (loop3): 1 truncate cleaned up [ 349.631782][T11866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.635999][ T28] audit: type=1326 audit(1753358669.885:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc6aa18e5ab code=0x7ffc0000 [ 349.636048][ T28] audit: type=1326 audit(1753358669.965:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc6aa18d60a code=0x7ffc0000 [ 349.636090][ T28] audit: type=1326 audit(1753358669.965:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc6aa18d60a code=0x7ffc0000 [ 349.671978][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.819254][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.852043][ T5849] ums-usbat: probe of 3-1:0.23 failed with error -5 [ 349.880844][ T5849] usb 3-1: USB disconnect, device number 30 [ 350.002924][T11876] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2412'. [ 350.882968][ T5104] Bluetooth: hci0: command 0x0c20 tx timeout [ 351.369026][T11896] loop3: detected capacity change from 0 to 40427 [ 351.399577][T11896] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 351.413662][T11896] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 351.427667][ T5832] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 351.436730][T11896] F2FS-fs (loop3): invalid crc value [ 351.456964][T11896] F2FS-fs (loop3): Found nat_bits in checkpoint [ 351.584030][T11896] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 351.606067][T11896] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 351.633432][ T5832] usb 3-1: Using ep0 maxpacket: 32 [ 351.646224][ T5832] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 351.657503][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.669172][ T5832] usb 3-1: config 0 descriptor?? [ 351.678361][ T5832] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 351.804339][ T34] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 351.834192][ T34] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 352.106404][T11937] loop0: detected capacity change from 0 to 1024 [ 352.153438][T11937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.186276][T11937] ext4 filesystem being mounted at /609/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.293356][ T5832] gspca_nw80x: reg_w err -71 [ 352.316272][ T5832] nw80x: probe of 3-1:0.0 failed with error -71 [ 352.351244][T11933] loop1: detected capacity change from 0 to 32768 [ 352.353585][ T5832] usb 3-1: USB disconnect, device number 31 [ 352.380362][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.411171][T11933] find_entry called with index = 0 [ 352.437438][T11933] read_mapping_page failed! [ 352.452866][T11933] ERROR: (device loop1): txCommit: [ 352.452866][T11933] [ 352.496566][T11933] ERROR: (device loop1): remounting filesystem as read-only [ 352.961574][T11946] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.970979][T11946] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.981245][T11946] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.990597][T11946] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.020490][T11948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2451'. [ 353.179418][T11942] loop3: detected capacity change from 0 to 32768 [ 353.250049][T11942] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 353.334600][T11942] XFS (loop3): Ending clean mount [ 353.352589][T11958] sp0: Synchronizing with TNC [ 353.580789][ T5784] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 353.904770][T11972] loop0: detected capacity change from 0 to 764 [ 353.957011][T11972] rock: directory entry would overflow storage [ 353.963211][T11972] rock: sig=0x4654, size=5, remaining=4 [ 354.093944][T11947] loop2: detected capacity change from 0 to 32768 [ 354.247845][T11947] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 354.467652][T11968] loop1: detected capacity change from 0 to 32768 [ 354.472031][T11947] XFS (loop2): Ending clean mount [ 354.513734][T11947] XFS (loop2): Quotacheck needed: Please wait. [ 354.564749][T11968] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 354.618256][T11947] XFS (loop2): Quotacheck: Done. [ 354.962892][T11968] XFS (loop1): Starting recovery (logdev: internal) [ 355.014864][ T5791] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 355.035022][T11968] XFS (loop1): Ending recovery (logdev: internal) [ 355.216553][ T5849] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 355.256230][ T5785] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 355.435029][ T5849] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 355.450721][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.497149][ T5849] usb 4-1: config 0 descriptor?? [ 355.536592][ T5849] cp210x 4-1:0.0: cp210x converter detected [ 355.765327][ T5849] usb 4-1: cp210x converter now attached to ttyUSB0 [ 355.974219][ T5849] usb 4-1: USB disconnect, device number 26 [ 355.986925][ T5849] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 355.995286][ T5849] cp210x 4-1:0.0: device disconnected [ 356.026365][ T788] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 356.056221][ T5850] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 356.237802][ T788] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 356.252219][ T788] usb 2-1: config 0 has no interface number 0 [ 356.259993][ T5850] usb 3-1: Using ep0 maxpacket: 16 [ 356.267255][ T788] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 356.277450][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.289276][ T5850] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 356.301215][ T788] usb 2-1: config 0 descriptor?? [ 356.306707][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.315102][ T5850] usb 3-1: Product: syz [ 356.322790][ T788] usb 2-1: selecting invalid altsetting 1 [ 356.330056][ T5850] usb 3-1: Manufacturer: syz [ 356.334686][ T5850] usb 3-1: SerialNumber: syz [ 356.340494][ T788] dvb_ttusb_budget: ttusb_init_controller: error [ 356.349191][ T788] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 356.360531][ T5850] usb 3-1: config 0 descriptor?? [ 356.369952][ T5850] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 356.475743][ T788] DVB: Unable to find symbol cx22700_attach() [ 356.560117][ T788] DVB: Unable to find symbol tda10046_attach() [ 356.572273][ T788] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 356.609455][ T788] usb 2-1: USB disconnect, device number 23 [ 356.785296][T12020] loop0: detected capacity change from 0 to 32768 [ 356.803191][T12020] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2465 (12020) [ 356.823186][ T5850] usb 3-1: clie_3_5_startup: get interface number bad return length: 0 [ 356.833038][ T5850] visor: probe of 3-1:0.0 failed with error -5 [ 356.848524][T12020] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 356.861791][T12020] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 356.872699][T12020] BTRFS info (device loop0): using free space tree [ 356.930648][T12020] BTRFS info (device loop0): enabling ssd optimizations [ 356.938737][T12020] BTRFS info (device loop0): auto enabling async discard [ 356.999743][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 356.999758][ T28] audit: type=1800 audit(1753358677.525:124): pid=12020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2465" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 357.050890][ T5832] usb 3-1: USB disconnect, device number 32 [ 357.283938][ T5786] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 357.753978][T12052] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2471'. [ 357.769665][T12053] loop2: detected capacity change from 0 to 512 [ 357.812807][T12053] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 357.948812][T12053] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.2480: invalid indirect mapped block 4294967295 (level 0) [ 357.987305][T12053] EXT4-fs (loop2): Remounting filesystem read-only [ 357.994147][T12053] EXT4-fs (loop2): 1 orphan inode deleted [ 358.034955][T12053] EXT4-fs (loop2): 1 truncate cleaned up [ 358.051368][T12053] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.143923][T12053] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #2: comm syz.2.2480: directory missing '..' [ 358.226913][T12042] loop3: detected capacity change from 0 to 32768 [ 358.260865][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.276268][T12042] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 358.435108][T12069] loop1: detected capacity change from 0 to 2048 [ 358.474810][T12069] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 358.538942][T12042] XFS (loop3): Ending clean mount [ 358.564541][T12069] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 358.577891][T12042] XFS (loop3): Quotacheck needed: Please wait. [ 358.683902][T12042] XFS (loop3): Quotacheck: Done. [ 358.844666][ T5784] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 359.198168][T12068] loop0: detected capacity change from 0 to 32768 [ 359.236254][ T788] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 359.273625][T12068] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 359.301089][T12081] loop3: detected capacity change from 0 to 512 [ 359.324432][T12081] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 359.415033][T12081] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2479: invalid indirect mapped block 4294967295 (level 1) [ 359.441855][ T788] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 359.450660][ T788] usb 2-1: config 0 has no interface number 0 [ 359.465622][ T788] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 359.474989][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.486489][T12081] EXT4-fs (loop3): Remounting filesystem read-only [ 359.488390][ T788] usb 2-1: config 0 descriptor?? [ 359.502028][T12081] EXT4-fs (loop3): 2 truncates cleaned up [ 359.506769][ T788] usb 2-1: selecting invalid altsetting 1 [ 359.526348][ T788] dvb_ttusb_budget: ttusb_init_controller: error [ 359.535386][ T5786] ocfs2: Unmounting device (7,0) on (node local) [ 359.544785][T12081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.562169][ T788] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 359.772306][ T788] DVB: Unable to find symbol cx22700_attach() [ 359.779666][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.930348][ T788] DVB: Unable to find symbol tda10046_attach() [ 359.938008][ T788] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 359.966451][ T788] usb 2-1: USB disconnect, device number 24 [ 360.527445][T12106] loop1: detected capacity change from 0 to 256 [ 360.557665][T12106] exfat: Deprecated parameter 'utf8' [ 360.630449][T12106] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 360.660224][T12091] loop2: detected capacity change from 0 to 32768 [ 360.706182][T12091] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2493 (12091) [ 360.740744][T12091] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 360.756586][T12091] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 360.780570][T12091] BTRFS info (device loop2): using free space tree [ 360.996610][T12091] BTRFS info (device loop2): enabling ssd optimizations [ 361.004051][T12091] BTRFS info (device loop2): auto enabling async discard [ 361.266657][T12117] loop3: detected capacity change from 0 to 32768 [ 361.366426][T12102] loop0: detected capacity change from 0 to 32768 [ 361.374807][T12117] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 361.413292][T12133] loop1: detected capacity change from 0 to 512 [ 361.450179][T12133] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 361.493193][T12102] XFS (loop0): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 361.507915][ T5791] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 361.527203][T12133] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2494: invalid indirect mapped block 4294967295 (level 1) [ 361.554749][ T5784] ocfs2: Unmounting device (7,3) on (node local) [ 361.582029][T12133] EXT4-fs (loop1): Remounting filesystem read-only [ 361.629515][T12133] EXT4-fs (loop1): 2 truncates cleaned up [ 361.721973][T12133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.791577][T12102] XFS (loop0): Ending clean mount [ 361.970794][T12144] loop2: detected capacity change from 0 to 256 [ 362.076124][T12144] FAT-fs (loop2): Directory bread(block 64) failed [ 362.130273][T12144] FAT-fs (loop2): Directory bread(block 65) failed [ 362.135904][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.138344][T12144] FAT-fs (loop2): Directory bread(block 66) failed [ 362.190853][ T5786] XFS (loop0): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 362.201685][T12144] FAT-fs (loop2): Directory bread(block 67) failed [ 362.226276][T12144] FAT-fs (loop2): Directory bread(block 68) failed [ 362.232870][T12144] FAT-fs (loop2): Directory bread(block 69) failed [ 362.237281][T12146] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2498'. [ 362.304424][T12144] FAT-fs (loop2): Directory bread(block 70) failed [ 362.336117][T12144] FAT-fs (loop2): Directory bread(block 71) failed [ 362.343260][T12144] FAT-fs (loop2): Directory bread(block 72) failed [ 362.371601][T12144] FAT-fs (loop2): Directory bread(block 73) failed [ 362.976877][T12155] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.623202][T12170] loop1: detected capacity change from 0 to 16 [ 363.670125][T12149] loop3: detected capacity change from 0 to 40427 [ 363.679063][T12170] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 142735) [ 363.719368][T12149] F2FS-fs (loop3): Found nat_bits in checkpoint [ 363.773302][T12172] loop0: detected capacity change from 0 to 4096 [ 363.932292][T12149] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 363.936643][ T28] audit: type=1800 audit(1753358684.455:125): pid=12172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2508" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 364.034825][T12182] loop2: detected capacity change from 0 to 512 [ 364.127973][T12182] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2511: invalid indirect mapped block 10 (level 1) [ 364.167434][T12182] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2511: invalid indirect mapped block 8 (level 1) [ 364.226503][ T5784] syz-executor: attempt to access beyond end of device [ 364.226503][ T5784] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 364.284696][T12182] EXT4-fs (loop2): 1 truncate cleaned up [ 364.296127][ T5784] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 364.305526][T12182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.514375][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.831877][T12201] loop2: detected capacity change from 0 to 16 [ 364.858924][T12201] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 142735) [ 365.121696][T12205] loop2: detected capacity change from 0 to 512 [ 365.153516][T12205] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2524: iget: bad extended attribute block 1 [ 365.208093][T12205] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2524: couldn't read orphan inode 15 (err -117) [ 365.231311][T12205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.415442][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.627980][T12218] loop1: detected capacity change from 0 to 8192 [ 365.665366][T12218] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 365.744643][T12218] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 365.783585][T12227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2533'. [ 365.816441][T12218] REISERFS (device loop1): using ordered data mode [ 365.823011][T12218] reiserfs: using flush barriers [ 365.885181][T12218] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 365.915022][T12229] loop2: detected capacity change from 0 to 1024 [ 365.932974][T12218] REISERFS (device loop1): checking transaction log (loop1) [ 365.949032][T12218] REISERFS (device loop1): Using r5 hash to sort names [ 365.960782][T12218] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 366.011583][T12218] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 366.269056][ T2949] hfsplus: b-tree write err: -5, ino 4 [ 366.324171][T12240] loop0: detected capacity change from 0 to 1024 [ 366.440880][T12240] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2539'. [ 366.744005][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2552'. [ 366.756249][ T28] audit: type=1326 audit(1753358687.275:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12251 comm="syz.2.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a5f8e9a9 code=0x7ffc0000 [ 366.795608][ T28] audit: type=1326 audit(1753358687.275:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12251 comm="syz.2.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a5f8e9a9 code=0x7ffc0000 [ 366.796549][T12252] sd 0:0:1:0: device reset [ 366.835651][ T28] audit: type=1326 audit(1753358687.315:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12251 comm="syz.2.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f09a5f8d310 code=0x7ffc0000 [ 366.888113][ T28] audit: type=1326 audit(1753358687.315:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12251 comm="syz.2.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a5f8e9a9 code=0x7ffc0000 [ 366.963476][ T28] audit: type=1326 audit(1753358687.325:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12251 comm="syz.2.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f09a5f8e9a9 code=0x7ffc0000 [ 367.035488][ T28] audit: type=1326 audit(1753358687.385:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12251 comm="syz.2.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a5f8e9a9 code=0x7ffc0000 [ 367.095947][ T28] audit: type=1326 audit(1753358687.385:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12251 comm="syz.2.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a5f8e9a9 code=0x7ffc0000 [ 367.236382][T12256] loop3: detected capacity change from 0 to 4096 [ 367.247445][T12260] loop0: detected capacity change from 0 to 1024 [ 367.326541][T12261] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 367.329031][T12256] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 367.421209][T12256] Remounting filesystem read-only [ 367.438828][T12246] loop1: detected capacity change from 0 to 32768 [ 367.500495][T12246] [ 367.500495][T12246] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 367.500495][T12246] [ 367.606802][T12246] ERROR: (device loop1): diWrite: ixpxd invalid [ 367.606802][T12246] [ 367.634261][T12246] ERROR: (device loop1): txCommit: [ 367.634261][T12246] [ 367.659347][T12246] ERROR: (device loop1): dtSearch: stack overrun! [ 367.659347][T12246] [ 367.684838][T12246] btstack dump: [ 367.702038][T12246] bn = 0, index = 0 [ 367.722162][T12246] bn = 0, index = 0 [ 367.735294][T12246] bn = 0, index = 0 [ 367.756513][T12246] bn = 0, index = 0 [ 367.786258][T12246] bn = 0, index = 0 [ 367.805372][T12246] bn = 0, index = 0 [ 367.816192][T12246] bn = 0, index = 0 [ 367.842097][T12246] bn = 0, index = 0 [ 367.847654][T12246] jfs_lookup: dtSearch returned -5 [ 367.931055][ T5785] [ 367.931055][ T5785] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 367.931055][ T5785] [ 367.955477][ T5785] [ 367.955477][ T5785] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 367.955477][ T5785] [ 368.129459][T12278] loop2: detected capacity change from 0 to 4096 [ 368.156053][T12278] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 368.221714][T12280] loop3: detected capacity change from 0 to 8 [ 368.383972][T12280] SQUASHFS error: xz decompression failed, data probably corrupt [ 368.394106][T12280] SQUASHFS error: Failed to read block 0x60: -5 [ 368.422197][T12280] SQUASHFS error: xz decompression failed, data probably corrupt [ 368.437856][T12280] SQUASHFS error: Failed to read block 0x60: -5 [ 368.456437][ T28] audit: type=1800 audit(1753358688.985:133): pid=12280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2558" name="file0" dev="loop3" ino=1 res=0 errno=0 [ 368.773022][T12291] loop3: detected capacity change from 0 to 1024 [ 368.827144][T12293] validate_nla: 44 callbacks suppressed [ 368.827159][T12293] netlink: 'syz.2.2563': attribute type 1 has an invalid length. [ 368.839029][T12296] loop1: detected capacity change from 0 to 1024 [ 368.866464][T12293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2563'. [ 369.133565][ T12] hfsplus: b-tree write err: -5, ino 4 [ 369.227573][T12304] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 369.295027][ T28] audit: type=1326 audit(1753358689.815:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.1.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ed58e9a9 code=0x7ffc0000 [ 369.369633][T12306] sd 0:0:1:0: device reset [ 369.377366][ T28] audit: type=1326 audit(1753358689.815:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.1.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ed58e9a9 code=0x7ffc0000 [ 369.431662][ T28] audit: type=1326 audit(1753358689.865:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.1.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe3ed58d310 code=0x7ffc0000 [ 369.460320][ T28] audit: type=1326 audit(1753358689.875:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.1.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ed58e9a9 code=0x7ffc0000 [ 369.593880][ T28] audit: type=1326 audit(1753358689.875:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.1.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ed58e9a9 code=0x7ffc0000 [ 369.677949][ T28] audit: type=1326 audit(1753358689.895:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.1.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe3ed58e9a9 code=0x7ffc0000 [ 369.766499][ T28] audit: type=1326 audit(1753358689.905:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.1.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ed58e9a9 code=0x7ffc0000 [ 369.816099][ T28] audit: type=1326 audit(1753358689.905:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.1.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ed58e9a9 code=0x7ffc0000 [ 369.817775][T12321] loop0: detected capacity change from 0 to 8 [ 369.866389][T12317] loop2: detected capacity change from 0 to 4096 [ 369.873970][T12317] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 369.927646][T12324] adf_ctl_ioctl: 15 callbacks suppressed [ 369.927658][T12324] QAT: Invalid ioctl 1075883590 [ 369.940239][T12324] QAT: Invalid ioctl 1075883590 [ 369.945220][T12324] QAT: Invalid ioctl 1075883590 [ 369.957897][T12317] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 369.986973][T12324] QAT: Invalid ioctl 1075883590 [ 369.996624][T12324] QAT: Invalid ioctl 1075883590 [ 370.010929][T12317] ntfs: volume version 3.1. [ 370.025325][T12324] QAT: Invalid ioctl 1075883590 [ 370.033093][T12324] QAT: Invalid ioctl 1075883590 [ 370.059324][T12321] SQUASHFS error: xz decompression failed, data probably corrupt [ 370.062323][T12324] QAT: Invalid ioctl 1075883590 [ 370.079884][T12321] SQUASHFS error: Failed to read block 0x60: -5 [ 370.103567][T12321] SQUASHFS error: xz decompression failed, data probably corrupt [ 370.119177][T12321] SQUASHFS error: Failed to read block 0x60: -5 [ 370.122406][T12324] QAT: Invalid ioctl 1075883590 [ 370.154692][T12324] QAT: Invalid ioctl 1075883590 [ 370.463931][T12333] loop0: detected capacity change from 0 to 1024 [ 370.819498][ T2949] hfsplus: b-tree write err: -5, ino 4 [ 370.973758][T12344] loop1: detected capacity change from 0 to 4096 [ 371.034195][T12344] ntfs: volume version 3.1. [ 371.733049][T12366] loop3: detected capacity change from 0 to 1024 [ 372.093482][ T12] hfsplus: b-tree write err: -5, ino 4 [ 372.233086][T12373] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2599'. [ 373.021877][T12369] loop0: detected capacity change from 0 to 32768 [ 373.062798][T12369] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2597 (12369) [ 373.104412][T12369] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 373.134531][T12369] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 373.150706][T12369] BTRFS info (device loop0): using free space tree [ 373.326120][T12369] BTRFS info (device loop0): enabling ssd optimizations [ 373.346615][T12369] BTRFS info (device loop0): auto enabling async discard [ 373.671861][ T5786] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 374.190387][T12415] loop1: detected capacity change from 0 to 1024 [ 374.206041][ T5823] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 374.387428][ T1005] hfsplus: b-tree write err: -5, ino 4 [ 374.436080][ T5823] usb 4-1: Using ep0 maxpacket: 32 [ 374.443678][ T5823] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 374.459289][ T5823] usb 4-1: config 0 has no interface number 0 [ 374.465430][ T5823] usb 4-1: config 0 interface 217 has no altsetting 0 [ 374.507460][T12417] loop1: detected capacity change from 0 to 1024 [ 374.509545][ T5823] usb 4-1: New USB device found, idVendor=5372, idProduct=2303, bcdDevice=a1.0d [ 374.536080][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.544107][ T5823] usb 4-1: Product: syz [ 374.549334][T12417] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 374.559150][ T5823] usb 4-1: Manufacturer: syz [ 374.559169][ T5823] usb 4-1: SerialNumber: syz [ 374.575170][ T5823] usb 4-1: config 0 descriptor?? [ 374.608746][ T5823] pl2303 4-1:0.217: required interrupt-in endpoint missing [ 374.630690][T12404] loop2: detected capacity change from 0 to 32768 [ 374.634326][T12417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 374.879868][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.108498][T12422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2621'. [ 375.233199][T12426] loop0: detected capacity change from 0 to 1024 [ 375.267478][T12426] EXT4-fs: Ignoring removed oldalloc option [ 375.340209][T12426] EXT4-fs: Ignoring removed orlov option [ 375.361492][T12426] EXT4-fs: Ignoring removed oldalloc option [ 375.400909][T12426] EXT4-fs: Ignoring removed nomblk_io_submit option [ 375.505486][T12426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.672265][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.062789][T12429] loop1: detected capacity change from 0 to 32768 [ 376.109507][T12429] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 376.174616][T12429] (syz.1.2615,12429,1):ocfs2_verify_group_and_input:420 ERROR: add a group which is in the current volume. [ 376.196338][T12429] (syz.1.2615,12429,0):ocfs2_group_add:503 ERROR: status = -22 [ 376.212967][T12444] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2620'. [ 376.302352][ T5785] ocfs2: Unmounting device (7,1) on (node local) [ 376.336356][ T5850] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 376.570970][ T5850] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 376.596188][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.613057][ T5850] usb 3-1: Product: syz [ 376.618696][ T5850] usb 3-1: Manufacturer: syz [ 376.623371][ T5850] usb 3-1: SerialNumber: syz [ 376.636185][ T5850] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 376.663688][ T788] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 376.692149][T12452] loop1: detected capacity change from 0 to 1024 [ 376.768161][T12450] loop0: detected capacity change from 0 to 8192 [ 376.945150][T12450] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2195) [ 376.971927][T12450] FAT-fs (loop0): Filesystem has been set read-only [ 376.990025][T12450] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2195) [ 377.004173][ T34] hfsplus: b-tree write err: -5, ino 4 [ 377.014708][T12450] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2195) [ 377.022284][ T5832] usb 4-1: USB disconnect, device number 27 [ 377.033762][T12450] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2195) [ 377.085363][T12450] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2195) [ 377.177547][T12454] ptrace attach of "./syz-executor exec"[5784] was attempted by ""[12454] [ 377.371259][ T5832] usb 3-1: USB disconnect, device number 33 [ 377.675790][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 377.675804][ T28] audit: type=1326 audit(1753358698.205:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12466 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ed58e9a9 code=0x7ffc0000 [ 377.735234][ T28] audit: type=1326 audit(1753358698.225:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12466 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ed58e9a9 code=0x7ffc0000 [ 377.765714][ T788] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 377.772798][ T788] ath9k_htc: Failed to initialize the device [ 377.784383][ T28] audit: type=1326 audit(1753358698.235:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12466 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe3ed58e9a9 code=0x7ffc0000 [ 377.787058][ T5832] usb 3-1: ath9k_htc: USB layer deinitialized [ 377.807467][ T28] audit: type=1326 audit(1753358698.235:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12466 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ed58e9a9 code=0x7ffc0000 [ 377.885625][ T28] audit: type=1326 audit(1753358698.235:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12466 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ed58e9a9 code=0x7ffc0000 [ 377.958134][ T28] audit: type=1326 audit(1753358698.235:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12466 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fe3ed58e9a9 code=0x7ffc0000 [ 378.043401][ T28] audit: type=1326 audit(1753358698.235:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12466 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ed58e9a9 code=0x7ffc0000 [ 378.261691][T12478] loop0: detected capacity change from 0 to 1024 [ 378.287356][T12478] EXT4-fs: inline encryption not supported [ 378.301679][T12478] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 378.353269][T12480] loop2: detected capacity change from 0 to 1024 [ 378.396626][T12478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.405649][ T5832] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 378.599399][ T5832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.621001][ T5832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.635436][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.635487][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.683568][ T34] hfsplus: b-tree write err: -5, ino 4 [ 378.686418][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.698338][ T5832] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 378.726330][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.747979][ T5832] usb 2-1: config 0 descriptor?? [ 378.859269][T12489] loop2: detected capacity change from 0 to 512 [ 378.885295][T12487] loop3: detected capacity change from 0 to 8192 [ 378.892155][T12489] EXT4-fs: Ignoring removed nomblk_io_submit option [ 378.972993][T12489] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 378.983053][T12489] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 378.998671][T12489] EXT4-fs (loop2): 1 truncate cleaned up [ 379.012771][T12487] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2195) [ 379.021662][T12489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.059014][T12487] FAT-fs (loop3): Filesystem has been set read-only [ 379.081937][T12487] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2195) [ 379.129321][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.155138][T12487] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2195) [ 379.182428][ T5832] hid-picolcd 0003:04D8:C002.0032: unknown main item tag 0x0 [ 379.204695][ T5832] hid-picolcd 0003:04D8:C002.0032: unknown main item tag 0x0 [ 379.214941][ T5832] hid-picolcd 0003:04D8:C002.0032: unknown main item tag 0x0 [ 379.223702][ T5832] hid-picolcd 0003:04D8:C002.0032: unknown main item tag 0x0 [ 379.232563][ T5832] hid-picolcd 0003:04D8:C002.0032: unknown main item tag 0x0 [ 379.233468][T12487] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2195) [ 379.270497][T12487] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2195) [ 379.271488][ T5832] hid-picolcd 0003:04D8:C002.0032: unknown main item tag 0x0 [ 379.306797][ T5832] hid-picolcd 0003:04D8:C002.0032: unknown main item tag 0x0 [ 379.332713][T12496] loop2: detected capacity change from 0 to 512 [ 379.379315][T12496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.393103][ T5832] hid-picolcd 0003:04D8:C002.0032: No report with id 0x11 found [ 379.420782][T12496] ext4 filesystem being mounted at /646/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 379.497306][ T5832] usb 2-1: USB disconnect, device number 25 [ 379.603792][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.837008][T12503] loop2: detected capacity change from 0 to 4096 [ 379.852443][T12494] loop0: detected capacity change from 0 to 32768 [ 379.864625][T12494] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.2641 (12494) [ 379.905497][T12494] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 379.931608][T12494] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 379.944771][T12494] BTRFS info (device loop0): enabling disk space caching [ 379.953733][T12494] BTRFS info (device loop0): enabling auto defrag [ 379.964410][T12494] BTRFS info (device loop0): use zlib compression, level 3 [ 379.973771][T12494] BTRFS info (device loop0): force clearing of disk cache [ 379.995622][T12494] BTRFS info (device loop0): disabling disk space caching [ 380.056117][ T788] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 380.093669][T12494] BTRFS info (device loop0): enabling ssd optimizations [ 380.109245][T12494] BTRFS info (device loop0): auto enabling async discard [ 380.286020][ T788] usb 4-1: Using ep0 maxpacket: 8 [ 380.296437][ T788] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 380.332674][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.334735][ T5786] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 380.369912][ T788] usb 4-1: Product: syz [ 380.374158][ T788] usb 4-1: Manufacturer: syz [ 380.394933][ T788] usb 4-1: SerialNumber: syz [ 380.426479][ T788] usb 4-1: config 0 descriptor?? [ 380.500971][ T788] gspca_main: se401-2.14.0 probing 047d:5003 [ 380.873044][ T788] gspca_se401: Wrong descriptor type [ 381.074363][ T5849] usb 4-1: USB disconnect, device number 28 [ 381.079785][T12545] loop2: detected capacity change from 0 to 128 [ 381.164072][T12545] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 381.251451][T12545] ext4 filesystem being mounted at /651/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 381.447612][ T5791] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 381.532954][T12559] RDS: rds_bind could not find a transport for fe80::3e, load rds_tcp or rds_rdma? [ 381.556834][T12561] loop2: detected capacity change from 0 to 16 [ 381.567821][T12561] erofs: Unknown parameter '' [ 381.760426][T12563] loop0: detected capacity change from 0 to 1024 [ 382.456127][ T5832] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 382.659324][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.676822][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.694424][ T5832] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 382.707200][T12602] loop0: detected capacity change from 0 to 4096 [ 382.708657][ T5832] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 382.723535][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.748703][ T5832] usb 4-1: config 0 descriptor?? [ 382.755715][T12602] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 382.863270][T12602] ntfs3: loop0: failed to convert "c46c" to cp857 [ 382.907873][T12602] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 383.191859][ T5832] dragonrise 0003:0079:0011.0033: unknown main item tag 0x0 [ 383.219685][ T5159] udevd[5159]: worker [5794] terminated by signal 33 (Unknown signal 33) [ 383.229656][ T5832] dragonrise 0003:0079:0011.0033: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.3-1/input0 [ 383.246903][ T5159] udevd[5159]: worker [5794] failed while handling '/devices/virtual/block/loop0' [ 383.389520][ T5832] usb 4-1: USB disconnect, device number 29 [ 383.477455][T12615] fido_id[12615]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 383.665469][T12625] netlink: 'syz.2.2697': attribute type 1 has an invalid length. [ 383.779180][T12630] loop0: detected capacity change from 0 to 512 [ 383.829587][T12630] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.847071][T12630] ext4 filesystem being mounted at /683/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.885113][T12630] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #12: comm syz.0.2700: Directory hole found for htree leaf block 0 [ 384.039983][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.394209][T12650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2707'. [ 384.419084][T12650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2707'. [ 384.434240][T12650] netlink: 'syz.2.2707': attribute type 13 has an invalid length. [ 384.449374][T12650] netlink: 'syz.2.2707': attribute type 11 has an invalid length. [ 384.591917][T12656] loop2: detected capacity change from 0 to 256 [ 384.614331][T12654] loop1: detected capacity change from 0 to 1024 [ 385.506577][ T5104] Bluetooth: hci3: command 0x0406 tx timeout [ 386.342211][T12713] loop1: detected capacity change from 0 to 4096 [ 386.470400][T12717] loop3: detected capacity change from 0 to 4096 [ 386.549664][T12718] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 386.635234][T12717] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 386.674879][T12717] Remounting filesystem read-only [ 386.777061][ T5784] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 386.783829][ T5784] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 386.836143][ T5784] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 386.843162][ T5784] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 386.856066][ T5784] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 386.863253][ T5784] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 386.875030][ T5784] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 386.902733][ T5784] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 386.910110][ T5784] NILFS (loop3): discard dirty block: blocknr=28, size=4096 [ 386.918253][ T5784] NILFS (loop3): discard dirty page: offset=4096, ino=3 [ 386.926697][ T5784] NILFS (loop3): discard dirty block: blocknr=29, size=4096 [ 386.934022][ T5784] NILFS (loop3): discard dirty page: offset=270336, ino=3 [ 386.943242][ T5784] NILFS (loop3): discard dirty block: blocknr=0, size=4096 [ 387.156127][ T5832] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 387.175268][T12734] loop1: detected capacity change from 0 to 256 [ 387.362795][ T5832] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 387.386478][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.411092][ T5832] usb 3-1: Product: syz [ 387.423922][ T5832] usb 3-1: Manufacturer: syz [ 387.434062][ T5832] usb 3-1: SerialNumber: syz [ 387.452347][ T5832] usb 3-1: config 0 descriptor?? [ 387.479328][T12737] loop0: detected capacity change from 0 to 4096 [ 387.509329][T12737] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 387.696012][T12737] ntfs3: loop0: ino=1f, "file2" failed to open parent directory r=5 to update [ 387.732069][ T5850] usb 3-1: USB disconnect, device number 34 [ 387.808616][ T2949] ntfs3: loop0: ino=1f, failed to open parent directory r=5 to update [ 388.297649][T12760] loop3: detected capacity change from 0 to 512 [ 388.355266][T12760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.426402][T12760] ext4 filesystem being mounted at /706/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.559619][T12760] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz.3.2761: Directory hole found for htree leaf block 0 [ 388.642089][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.849593][T12783] loop1: detected capacity change from 0 to 64 [ 388.860345][T12784] loop3: detected capacity change from 0 to 1024 [ 388.895181][T12783] syz.1.2769: attempt to access beyond end of device [ 388.895181][T12783] loop1: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 388.916470][T12783] Buffer I/O error on dev loop1, logical block 512, async page read [ 388.958796][T12783] syz.1.2769: attempt to access beyond end of device [ 388.958796][T12783] loop1: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 389.014045][T12783] Buffer I/O error on dev loop1, logical block 56576, async page read [ 389.823115][T12805] team0: Device ip6tnl2 is of different type [ 390.754085][T12819] loop2: detected capacity change from 0 to 4096 [ 391.368767][T12830] loop1: detected capacity change from 0 to 32768 [ 391.430179][T12830] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 391.430179][T12830] [ 391.889680][T12843] loop3: detected capacity change from 0 to 4096 [ 392.771917][T12872] loop1: detected capacity change from 0 to 4096 [ 392.795980][T12872] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 392.894096][T12872] ntfs3: loop1: ino=1f, "file2" failed to open parent directory r=5 to update [ 393.036359][ T3002] ntfs3: loop1: ino=1f, failed to open parent directory r=5 to update [ 393.297210][T12869] loop3: detected capacity change from 0 to 32768 [ 393.305965][T12869] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2809 (12869) [ 393.339869][T12869] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 393.363031][T12869] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 393.374688][T12869] BTRFS info (device loop3): using free space tree [ 393.599828][T12869] BTRFS info (device loop3): enabling ssd optimizations [ 393.612062][T12869] BTRFS info (device loop3): auto enabling async discard [ 393.824077][ T5784] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 394.545370][T12888] loop2: detected capacity change from 0 to 40427 [ 394.609241][T12888] F2FS-fs (loop2): invalid crc value [ 394.651599][T12888] F2FS-fs (loop2): Found nat_bits in checkpoint [ 394.821402][T12888] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 395.049421][ T5791] syz-executor: attempt to access beyond end of device [ 395.049421][ T5791] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 395.101439][ T5791] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 395.846955][T12958] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2841'. [ 395.867021][T12958] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2841'. [ 395.898129][T12955] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2841'. [ 396.326736][ T788] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 396.330524][T12949] loop1: detected capacity change from 0 to 32768 [ 396.387141][T12949] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 396.465238][T12949] XFS (loop1): Ending clean mount [ 396.537683][ T788] usb 4-1: Using ep0 maxpacket: 16 [ 396.570852][ T788] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 396.598977][ T788] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 396.666384][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.695264][ T788] usb 4-1: Product: syz [ 396.700224][ T788] usb 4-1: Manufacturer: syz [ 396.730937][ T788] usb 4-1: SerialNumber: syz [ 396.743178][ T788] usb 4-1: config 0 descriptor?? [ 396.763480][ T788] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 396.786818][ T5785] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 396.803165][ T788] usb 4-1: Detected FT232R [ 396.995164][ T788] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 397.005253][ T788] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 397.026395][ T788] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 397.036603][ T788] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 397.070125][ T788] usb 4-1: USB disconnect, device number 30 [ 397.084543][ T788] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 397.097327][ T788] ftdi_sio 4-1:0.0: device disconnected [ 397.284124][T12998] loop2: detected capacity change from 0 to 256 [ 397.328550][T12998] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 397.344102][T12996] loop1: detected capacity change from 0 to 4096 [ 397.353986][T12996] ntfs3: loop1: ino=3, Correct links count -> 2. [ 398.298199][T13026] loop1: detected capacity change from 0 to 256 [ 398.322309][T13026] MINIX-fs: mounting file system with errors, running fsck is recommended [ 398.358087][T13026] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 400.196419][T13073] Bluetooth: MGMT ver 1.22 [ 400.376759][ T8] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 400.578109][ T8] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 400.597732][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.616467][ T8] usb 2-1: config 0 descriptor?? [ 400.623962][ T8] cp210x 2-1:0.0: cp210x converter detected [ 400.982582][T13075] loop2: detected capacity change from 0 to 40427 [ 401.006131][T13075] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 401.026464][T13075] F2FS-fs (loop2): Image doesn't support compression [ 401.033277][T13075] F2FS-fs (loop2): Image doesn't support compression [ 401.069954][T13075] F2FS-fs (loop2): invalid crc value [ 401.121969][T13075] F2FS-fs (loop2): Found nat_bits in checkpoint [ 401.178833][T13094] loop0: detected capacity change from 0 to 1024 [ 401.241686][ T8] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 401.264591][ T8] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 401.283883][T13075] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 401.305347][ T8] usb 2-1: cp210x converter now attached to ttyUSB0 [ 401.335400][ T8] usb 2-1: USB disconnect, device number 26 [ 401.400542][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 401.421355][ T8] cp210x 2-1:0.0: device disconnected [ 401.486919][ T2949] hfsplus: b-tree write err: -5, ino 4 [ 401.494644][ T5791] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x5b4/0x19c0 [ 401.514306][ T5791] F2FS-fs (loop2): invalid blkaddr: 1535, type: 10, run fsck to fix. [ 401.518528][T13087] loop3: detected capacity change from 0 to 32768 [ 401.556504][T13087] XFS: attr2 mount option is deprecated. [ 401.610381][T13087] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 401.747411][T13087] XFS (loop3): Ending clean mount [ 401.792865][T13087] XFS (loop3): Quotacheck needed: Please wait. [ 401.950208][T13087] XFS (loop3): Quotacheck: Done. [ 402.049012][ T5784] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 402.077289][T13111] netlink: 71 bytes leftover after parsing attributes in process `syz.2.2903'. [ 402.361180][T13116] loop2: detected capacity change from 0 to 256 [ 402.380722][T13116] exfat: Deprecated parameter 'namecase' [ 402.438610][T13116] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 402.886099][ T8] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 403.158314][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.186086][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.211469][ T8] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 403.239105][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.290200][ T8] usb 2-1: config 0 descriptor?? [ 403.420161][T13131] loop2: detected capacity change from 0 to 32768 [ 403.428868][T13131] XFS: ikeep mount option is deprecated. [ 403.482080][T13131] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 403.636243][T13131] XFS (loop2): Ending clean mount [ 403.645943][T13131] XFS (loop2): Quotacheck needed: Please wait. [ 403.691577][T13131] XFS (loop2): Quotacheck: Done. [ 403.744437][ T8] pyra 0003:1E7D:2CF6.0034: item fetching failed at offset 5/7 [ 403.771911][ T8] pyra 0003:1E7D:2CF6.0034: parse failed [ 403.778762][ T8] pyra: probe of 0003:1E7D:2CF6.0034 failed with error -22 [ 403.789122][ T5791] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 403.885625][ T27] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 403.963707][ T8] usb 2-1: USB disconnect, device number 27 [ 404.091801][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.102855][ T27] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 404.117588][ T27] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 404.118497][T13155] loop2: detected capacity change from 0 to 64 [ 404.129395][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.149682][ T27] usb 4-1: config 0 descriptor?? [ 404.159662][ T27] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 404.170548][ T27] dvb-usb: bulk message failed: -22 (3/0) [ 404.182760][ T27] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 404.224851][ T27] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 404.237141][ T27] usb 4-1: media controller created [ 404.256618][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 404.273948][ T27] dvb-usb: bulk message failed: -22 (6/0) [ 404.283532][ T27] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 404.316267][ T27] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input26 [ 404.368908][ T27] dvb-usb: schedule remote query interval to 150 msecs. [ 404.374991][T13151] dvb-usb: bulk message failed: -22 (2/0) [ 404.379766][ T27] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 404.415034][ T27] usb 4-1: USB disconnect, device number 31 [ 404.445252][ T27] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 405.102500][T13173] loop1: detected capacity change from 0 to 1024 [ 405.212699][ T34] hfsplus: b-tree write err: -5, ino 4 [ 405.458731][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2937'. [ 405.468595][T13185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2937'. [ 405.478055][T13185] netlink: 'syz.3.2937': attribute type 14 has an invalid length. [ 405.486829][T13185] netlink: 'syz.3.2937': attribute type 13 has an invalid length. [ 405.583727][T13187] loop3: detected capacity change from 0 to 64 [ 406.029904][T13201] loop0: detected capacity change from 0 to 256 [ 406.066849][T13201] FAT-fs (loop0): "posix" option is obsolete, not supported now [ 406.288220][T13210] loop3: detected capacity change from 0 to 8 [ 406.301111][T13210] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 406.351076][ T5932] udevd[5932]: incorrect cramfs checksum on /dev/loop3 [ 406.456837][ T5932] udevd[5932]: incorrect cramfs checksum on /dev/loop3 [ 406.540302][T13215] loop1: detected capacity change from 0 to 2048 [ 406.590347][T13215] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 406.656425][T13218] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 406.886439][T13209] loop0: detected capacity change from 0 to 32768 [ 406.954119][T13209] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 407.022312][T13209] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 407.159624][ T5786] ocfs2: Unmounting device (7,0) on (node local) [ 407.730053][T13246] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 407.756159][ C1] vkms_vblank_simulate: vblank timer overrun [ 407.825792][T13246] CIFS mount error: No usable UNC path provided in device string! [ 407.825792][T13246] [ 407.845407][T13246] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 408.604269][T13252] loop1: detected capacity change from 0 to 32768 [ 408.628012][T13252] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2969 (13252) [ 408.687326][T13252] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 408.708663][T13252] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 408.718260][T13252] BTRFS info (device loop1): max_inline at 0 [ 408.730755][T13252] BTRFS info (device loop1): enabling disk space caching [ 408.740802][T13252] BTRFS info (device loop1): setting nodatasum [ 408.758029][T13252] BTRFS info (device loop1): turning off barriers [ 408.787411][T13252] BTRFS info (device loop1): turning on flush-on-commit [ 408.794441][T13252] BTRFS info (device loop1): doing ref verification [ 408.806001][ T8] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 408.815641][T13252] BTRFS info (device loop1): force clearing of disk cache [ 408.844476][T13252] BTRFS warning (device loop1): excessive commit interval 2147483647 [ 408.876395][T13252] BTRFS info (device loop1): enabling ssd optimizations [ 408.883444][T13252] BTRFS info (device loop1): max_inline at 4096 [ 408.909078][T13252] BTRFS info (device loop1): disk space caching is enabled [ 409.009322][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 409.031280][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.058619][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.085354][T13252] BTRFS info (device loop1): auto enabling async discard [ 409.104122][T13252] BTRFS info (device loop1): rebuilding free space tree [ 409.108594][ T8] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 409.146911][T13252] BTRFS info (device loop1): disabling free space tree [ 409.156073][T13252] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 409.166079][T13252] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 409.176254][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.187186][ T8] usb 4-1: config 0 descriptor?? [ 409.354838][ T5785] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 409.513061][ T8039] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 12 /dev/loop1 scanned by udevd (8039) [ 409.636939][T13302] loop2: detected capacity change from 0 to 1024 [ 409.661310][T13302] EXT4-fs: Ignoring removed i_version option [ 409.795353][T13302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.851267][ T8] usb 4-1: string descriptor 0 read error: -71 [ 409.922264][ T8] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 409.956270][ T8] letsketch: probe of 0003:6161:4D15.0035 failed with error -32 [ 409.992405][ T8] usb 4-1: USB disconnect, device number 32 [ 410.081623][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.278334][T13315] loop2: detected capacity change from 0 to 1024 [ 410.318580][T13315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.512339][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.005461][T13331] loop1: detected capacity change from 0 to 1024 [ 411.156868][ T2940] hfsplus: b-tree write err: -5, ino 4 [ 411.661720][T13346] program syz.1.3003 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 412.303852][T13341] loop2: detected capacity change from 0 to 32768 [ 412.381330][T13341] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 412.717776][T13341] XFS (loop2): Ending clean mount [ 412.926395][ T5791] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 413.197784][T13386] loop3: detected capacity change from 0 to 1764 [ 413.514689][T13390] loop2: detected capacity change from 0 to 2048 [ 413.529576][T13390] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 413.571730][T13390] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 414.791299][T13418] loop0: detected capacity change from 0 to 4096 [ 414.872466][T13420] loop3: detected capacity change from 0 to 2048 [ 414.912978][T13404] loop1: detected capacity change from 0 to 32768 [ 414.920443][T13420] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 414.929053][T13421] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 414.956899][T13404] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.3025 (13404) [ 415.012325][T13420] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 415.022662][T13404] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 415.040977][T13404] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 415.074414][T13404] BTRFS info (device loop1): enabling disk space caching [ 415.092419][T13404] BTRFS info (device loop1): enabling auto defrag [ 415.116024][T13404] BTRFS info (device loop1): use zlib compression, level 3 [ 415.139693][T13404] BTRFS info (device loop1): force clearing of disk cache [ 415.157824][T13402] loop2: detected capacity change from 0 to 40427 [ 415.166158][T13418] overlayfs: upper fs does not support tmpfile. [ 415.188622][T13404] BTRFS info (device loop1): disabling disk space caching [ 415.239072][T13402] F2FS-fs (loop2): build fault injection attr: rate: 693, type: 0x7ffff [ 415.249713][T13418] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 415.290222][T13402] F2FS-fs (loop2): Image doesn't support compression [ 415.307710][T13418] overlayfs: failed to set xattr on upper [ 415.313597][T13418] overlayfs: ...falling back to redirect_dir=nofollow. [ 415.326441][T13418] overlayfs: ...falling back to metacopy=off. [ 415.363028][T13402] F2FS-fs (loop2): invalid crc value [ 415.440555][T13418] overlayfs: ...falling back to index=off. [ 415.454940][T13404] BTRFS info (device loop1): enabling ssd optimizations [ 415.489102][T13404] BTRFS info (device loop1): auto enabling async discard [ 415.496411][T13402] F2FS-fs (loop2): Found nat_bits in checkpoint [ 415.558624][T13418] overlayfs: ...falling back to uuid=null. [ 415.725706][T13402] F2FS-fs (loop2): Start checkpoint disabled! [ 415.778580][T13402] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 415.787656][ T5785] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 415.912802][ T28] audit: type=1800 audit(1753358736.435:150): pid=13402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3024" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 415.933382][T13402] F2FS-fs (loop2): inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fb/0x5b0 [ 415.979514][T13402] syz.2.3024: attempt to access beyond end of device [ 415.979514][T13402] loop2: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 416.111720][ T5832] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 416.156093][ T5832] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=12) [ 416.210739][ T5832] Remounting filesystem read-only [ 416.245612][ T5832] NILFS (loop0): error -5 truncating bmap (ino=12) [ 416.296533][ T5786] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 416.303271][ T5786] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 416.339875][ T5786] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 416.366022][ T5786] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 416.373365][ T5786] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 416.390311][ T3002] kworker/u4:12: attempt to access beyond end of device [ 416.390311][ T3002] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 416.415733][ T5786] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 416.445598][ T3002] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 416.479792][ T3002] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 416.617301][T13450] loop0: detected capacity change from 0 to 256 [ 416.708101][T13450] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ca973fa, utbl_chksum : 0xe619d30d) [ 416.896073][ T8] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 416.955393][T13453] loop0: detected capacity change from 0 to 1024 [ 417.098298][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.126067][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 417.135022][ T8] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 417.170527][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.187972][ T8] usb 2-1: config 0 descriptor?? [ 417.208457][ T8] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 417.215123][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 417.267771][ T8] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 417.296877][ T8] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 417.304021][ T8] usb 2-1: media controller created [ 417.334980][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 417.366497][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 417.382193][ T8] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 417.412377][T13451] dvb-usb: bulk message failed: -22 (2/0) [ 417.423818][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input27 [ 417.469856][ T8] dvb-usb: schedule remote query interval to 150 msecs. [ 417.486910][ T8] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 417.510495][ T8] usb 2-1: USB disconnect, device number 28 [ 417.579681][ T8] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 417.992746][T13468] loop2: detected capacity change from 0 to 2048 [ 418.026210][T13468] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 418.064941][T13469] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 419.226021][ T8] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 419.348847][T13492] loop3: detected capacity change from 0 to 2048 [ 419.372707][T13492] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 419.419475][T13495] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 419.439416][ T8] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 419.462815][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 419.479498][ T8] usb 3-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 419.491111][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.512422][ T8] usb 3-1: config 0 descriptor?? [ 419.527041][T13490] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 419.800022][T13506] loop1: detected capacity change from 0 to 256 [ 419.830517][T13506] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 419.988926][ T8] lenovo 0003:17EF:60B5.0036: hidraw0: USB HID vff.ff Device [HID 17ef:60b5] on usb-dummy_hcd.2-1/input0 [ 420.190626][ T5849] usb 3-1: USB disconnect, device number 35 [ 420.226893][ T5832] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 420.416938][ T5832] usb 4-1: Using ep0 maxpacket: 16 [ 420.424416][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.438435][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.448588][ T5832] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 420.463174][ T5832] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 420.472575][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.493756][ T5832] usb 4-1: config 0 descriptor?? [ 420.947409][ T5832] magicmouse 0003:05AC:0265.0037: unknown main item tag 0x0 [ 420.991564][ T5832] magicmouse 0003:05AC:0265.0037: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0 [ 421.103653][T13534] loop0: detected capacity change from 0 to 1024 [ 421.192417][ T5832] usb 4-1: USB disconnect, device number 33 [ 421.702564][T13530] loop2: detected capacity change from 0 to 40427 [ 421.726390][T13530] F2FS-fs (loop2): Invalid log sectorsize (131081) [ 421.732954][T13530] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 421.788198][T13530] F2FS-fs (loop2): invalid crc value [ 422.011946][T13530] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 422.026001][T13530] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 422.379298][T13565] dvmrp1: entered allmulticast mode [ 422.420981][T13565] dvmrp1: left allmulticast mode [ 422.910099][T13580] loop2: detected capacity change from 0 to 2048 [ 422.955063][T13580] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 423.187492][T13586] loop1: detected capacity change from 0 to 512 [ 423.232238][T13586] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 423.332059][T13586] EXT4-fs (loop1): 1 truncate cleaned up [ 423.347510][T13586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.607758][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.667485][T13584] loop0: detected capacity change from 0 to 40427 [ 423.712849][T13584] F2FS-fs (loop0): invalid crc value [ 423.750801][T13584] F2FS-fs (loop0): Found nat_bits in checkpoint [ 423.850282][T13575] loop3: detected capacity change from 0 to 40427 [ 423.890616][T13584] F2FS-fs (loop0): Start checkpoint disabled! [ 423.909740][T13575] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 423.930579][T13584] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 423.983997][T13575] F2FS-fs (loop3): invalid crc value [ 424.020715][T13575] F2FS-fs (loop3): Found nat_bits in checkpoint [ 424.169348][T13575] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 424.277646][ T5784] syz-executor: attempt to access beyond end of device [ 424.277646][ T5784] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 424.337819][ T5784] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 424.421453][ T1005] kworker/u4:6: attempt to access beyond end of device [ 424.421453][ T1005] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 424.455045][ T1005] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 424.476078][ T1005] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 425.413842][T13611] loop2: detected capacity change from 0 to 32768 [ 425.480827][T13627] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3115'. [ 425.483932][T13611] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 425.548891][T13630] loop1: detected capacity change from 0 to 512 [ 425.582440][T13630] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.3117: bad orphan inode 11 [ 425.600870][T13630] ext4_test_bit(bit=10, block=4) = 1 [ 425.606821][T13630] is_bad_inode(inode)=0 [ 425.611183][T13630] NEXT_ORPHAN(inode)=2080374784 [ 425.616211][T13630] max_ino=32 [ 425.619663][T13630] i_nlink=0 [ 425.623072][T13630] EXT4-fs (loop1): 1 truncate cleaned up [ 425.633424][T13630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.719153][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.744938][ T5791] ocfs2: Unmounting device (7,2) on (node local) [ 425.902984][T13640] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.3118'. [ 426.471986][T13638] loop2: detected capacity change from 0 to 32768 [ 426.520670][T13638] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 426.584699][T13638] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 426.719740][T13636] loop3: detected capacity change from 0 to 32768 [ 426.744286][T13636] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 426.759512][T13636] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 426.860471][T13636] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 426.943719][T13636] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 427.006812][ T5791] ocfs2: Unmounting device (7,2) on (node local) [ 427.204224][T13653] loop1: detected capacity change from 0 to 16 [ 427.276694][T13653] erofs: (device loop1): mounted with root inode @ nid 36. [ 427.359416][ T5104] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000] [ 427.394817][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3125'. [ 427.395307][T13653] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 427.418957][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3125'. [ 427.432582][ T28] audit: type=1800 audit(1753358747.955:151): pid=13653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3126" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 427.547814][T13653] syz.1.3126 (13653) used greatest stack depth: 19376 bytes left [ 427.839486][T13665] loop2: detected capacity change from 0 to 4096 [ 427.979611][T13665] ntfs3: loop2: failed to convert "0080" to cp861 [ 428.002659][T13665] ntfs3: loop2: failed to convert name for inode 1e. [ 428.299551][T13675] loop2: detected capacity change from 0 to 4096 [ 428.372534][T13675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.409488][T13675] EXT4-fs error (device loop2): ext4_empty_dir:3154: inode #12: block 80: comm syz.2.3135: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 428.444972][T13675] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #12: comm syz.2.3135: directory missing '..' [ 428.569474][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.775932][T13683] netlink: 'syz.2.3139': attribute type 1 has an invalid length. [ 428.816148][T13683] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3139'. [ 428.900827][T13673] loop1: detected capacity change from 0 to 32768 [ 428.910315][T13671] loop3: detected capacity change from 0 to 32768 [ 428.934879][T13673] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 428.978511][T13673] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 428.979251][T13671] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.3133 (13671) [ 429.040981][T13671] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 429.146358][T13671] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 429.163108][T13671] BTRFS info (device loop3): using free space tree [ 429.288321][ T5785] ocfs2: Unmounting device (7,1) on (node local) [ 429.344312][T13699] loop2: detected capacity change from 0 to 4096 [ 429.365769][T13671] BTRFS info (device loop3): enabling ssd optimizations [ 429.426824][T13671] BTRFS info (device loop3): auto enabling async discard [ 429.440515][T13699] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 429.473676][T13699] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 429.517067][T13671] BTRFS info (device loop3): device stats zeroed by syz.3.3133 (13671) [ 429.538680][T13713] loop6: detected capacity change from 0 to 524287999 [ 429.606980][T13714] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 429.633899][T13716] loop0: detected capacity change from 0 to 512 [ 429.636772][ T5932] udevd[5932]: incorrect nilfs2 checksum on /dev/loop2 [ 429.646422][ T5784] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 429.774634][T13716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.810009][T13716] ext4 filesystem being mounted at /771/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.132905][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.376341][ T8] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 430.588606][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 430.601703][ T8] usb 3-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 430.611706][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.622887][ T8] usb 3-1: config 0 descriptor?? [ 430.674758][T13720] loop1: detected capacity change from 0 to 32768 [ 430.712172][T13720] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 430.734769][ T28] audit: type=1800 audit(1753358751.255:152): pid=13720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3148" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 430.758254][ T5850] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 430.773602][ T5785] (syz-executor,5785,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 430.793390][ T5785] ocfs2: Unmounting device (7,1) on (node local) [ 430.967365][ T5850] usb 4-1: Using ep0 maxpacket: 16 [ 430.977151][ T5850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.994210][ T5850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.022971][ T5850] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 431.048759][ T5850] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 431.058755][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.072626][ T8] glorious 0003:258A:0036.0038: unknown main item tag 0x0 [ 431.084756][ T5850] usb 4-1: config 0 descriptor?? [ 431.091265][ T8] glorious 0003:258A:0036.0038: unknown main item tag 0x0 [ 431.108353][ T8] glorious 0003:258A:0036.0038: unknown main item tag 0x0 [ 431.131965][ T8] glorious 0003:258A:0036.0038: unknown main item tag 0x0 [ 431.142030][ T8] glorious 0003:258A:0036.0038: unknown main item tag 0x0 [ 431.160806][ T8] glorious 0003:258A:0036.0038: hidraw0: USB HID v0.01 Device [Glorious Model O] on usb-dummy_hcd.2-1/input0 [ 431.288839][ T8] usb 3-1: USB disconnect, device number 36 [ 431.523230][ T5850] microsoft 0003:045E:07DA.0039: No inputs registered, leaving [ 431.546777][ T5850] microsoft 0003:045E:07DA.0039: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 431.566561][ T5850] microsoft 0003:045E:07DA.0039: no inputs found [ 431.583207][ T5850] microsoft 0003:045E:07DA.0039: could not initialize ff, continuing anyway [ 431.741306][ T5832] usb 4-1: USB disconnect, device number 34 [ 432.233276][T13743] loop2: detected capacity change from 0 to 256 [ 432.293692][T13743] FAT-fs (loop2): Directory bread(block 64) failed [ 432.303978][T13743] FAT-fs (loop2): Directory bread(block 65) failed [ 432.318071][T13743] FAT-fs (loop2): Directory bread(block 66) failed [ 432.324666][T13743] FAT-fs (loop2): Directory bread(block 67) failed [ 432.332314][T13743] FAT-fs (loop2): Directory bread(block 68) failed [ 432.341918][T13743] FAT-fs (loop2): Directory bread(block 69) failed [ 432.364356][T13743] FAT-fs (loop2): Directory bread(block 70) failed [ 432.373151][T13743] FAT-fs (loop2): Directory bread(block 71) failed [ 432.380565][T13743] FAT-fs (loop2): Directory bread(block 72) failed [ 432.388139][T13743] FAT-fs (loop2): Directory bread(block 73) failed [ 432.395275][T13739] loop1: detected capacity change from 0 to 32768 [ 432.465091][T13739] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 432.588337][T13739] XFS (loop1): Ending clean mount [ 432.611976][T13739] XFS (loop1): Quotacheck needed: Please wait. [ 432.695249][T13739] XFS (loop1): Quotacheck: Done. [ 432.841331][ T5785] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 433.240752][T13774] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 433.705391][T13786] bridge0: entered promiscuous mode [ 433.722789][T13786] macsec1: entered promiscuous mode [ 433.792829][T13788] loop0: detected capacity change from 0 to 512 [ 433.850779][T13788] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 433.895771][T13788] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 433.903906][T13788] System zones: 0-1, 15-15, 18-18, 34-34 [ 433.960981][T13770] loop3: detected capacity change from 0 to 40427 [ 433.982127][T13788] EXT4-fs (loop0): orphan cleanup on readonly fs [ 433.999181][T13788] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 434.018366][T13770] F2FS-fs (loop3): invalid crc value [ 434.024623][T13788] EXT4-fs warning (device loop0): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 434.060743][T13788] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 434.070546][T13770] F2FS-fs (loop3): Found nat_bits in checkpoint [ 434.077766][T13788] EXT4-fs (loop0): 1 truncate cleaned up [ 434.100105][T13788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 434.150047][T13788] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 434.161969][T13792] loop2: detected capacity change from 0 to 4096 [ 434.172681][T13792] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 434.237492][T13788] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 434.257089][T13770] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 434.359625][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.464135][ T5784] syz-executor: attempt to access beyond end of device [ 434.464135][ T5784] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 434.509241][ T5784] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 434.615412][T13799] loop2: detected capacity change from 0 to 1024 [ 434.623592][T13800] vivid-000: disconnect [ 434.632560][T13780] loop1: detected capacity change from 0 to 32768 [ 434.643240][T13797] vivid-000: reconnect [ 434.665041][T13799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.702671][T13780] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 434.719273][T13780] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 434.851235][T13780] XFS (loop1): Ending clean mount [ 434.873477][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.879260][T13780] XFS (loop1): Quotacheck needed: Please wait. [ 435.009277][T13780] XFS (loop1): Quotacheck: Done. [ 435.199836][ T5785] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 435.403336][T13822] loop2: detected capacity change from 0 to 2048 [ 435.511890][T13822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.559188][T13828] loop3: detected capacity change from 0 to 128 [ 435.577309][T13822] ext4 filesystem being mounted at /785/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.669162][T13828] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 435.754111][T13828] ext4 filesystem being mounted at /805/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 435.897079][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.954566][ T5784] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 436.535766][ T5849] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 436.742692][T13853] loop3: detected capacity change from 0 to 4096 [ 436.745644][ T5849] usb 3-1: Using ep0 maxpacket: 16 [ 436.765201][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.797941][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.813726][T13856] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 436.834847][ T5849] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 436.849136][ T5849] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 436.858320][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.878049][ T5849] usb 3-1: config 0 descriptor?? [ 437.247512][T13868] loop0: detected capacity change from 0 to 256 [ 437.286994][T13868] FAT-fs (loop0): Directory bread(block 64) failed [ 437.293753][T13868] FAT-fs (loop0): Directory bread(block 65) failed [ 437.304197][ T5849] microsoft 0003:045E:07DA.003A: unbalanced collection at end of report description [ 437.322967][T13868] FAT-fs (loop0): Directory bread(block 66) failed [ 437.330509][ T5849] microsoft 0003:045E:07DA.003A: parse failed [ 437.341422][T13868] FAT-fs (loop0): Directory bread(block 67) failed [ 437.349115][ T5849] microsoft: probe of 0003:045E:07DA.003A failed with error -22 [ 437.363187][T13868] FAT-fs (loop0): Directory bread(block 68) failed [ 437.373679][T13868] FAT-fs (loop0): Directory bread(block 69) failed [ 437.385336][T13868] FAT-fs (loop0): Directory bread(block 70) failed [ 437.393239][T13868] FAT-fs (loop0): Directory bread(block 71) failed [ 437.404510][T13868] FAT-fs (loop0): Directory bread(block 72) failed [ 437.411255][T13868] FAT-fs (loop0): Directory bread(block 73) failed [ 437.509239][ T5849] usb 3-1: USB disconnect, device number 37 [ 437.702382][T13874] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3200'. [ 437.706664][T13862] loop3: detected capacity change from 0 to 32768 [ 437.738926][T13862] XFS: noikeep mount option is deprecated. [ 437.780671][T13862] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 437.979344][T13862] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 438.135391][T13862] XFS (loop3): Starting recovery (logdev: internal) [ 438.207841][T13862] XFS (loop3): Ending recovery (logdev: internal) [ 438.380686][ T8] XFS (loop3): Metadata corruption detected at xfs_inobt_verify+0xc5/0x230, xfs_finobt block 0x8 [ 438.431760][ T8] XFS (loop3): Unmount and run xfs_repair [ 438.458653][ T8] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 438.491781][ T8] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 438.515974][ T8] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 438.545242][ T8] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 438.564723][ T8] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 438.592241][ T8] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 438.610095][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 438.629691][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 438.656287][T13898] loop2: detected capacity change from 0 to 4096 [ 438.662811][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 438.688942][T13896] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x8 len 8 error 117 [ 438.730904][T13900] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 438.762657][T13898] NILFS (loop2): error -2 reading inode: ino=17293822569102704642 [ 438.816289][ T5784] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 438.904870][T13888] loop1: detected capacity change from 0 to 32768 [ 439.001042][T13903] loop0: detected capacity change from 0 to 512 [ 439.009415][T13903] EXT4-fs: Ignoring removed bh option [ 439.031353][T13903] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 439.084851][T13888] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 439.163526][T13903] EXT4-fs (loop0): invalid journal inode [ 439.173304][T13903] EXT4-fs (loop0): can't get journal size [ 439.201418][T13907] loop2: detected capacity change from 0 to 2364 [ 439.327185][ T5785] ocfs2: Unmounting device (7,1) on (node local) [ 439.358746][T13903] EXT4-fs (loop0): 1 truncate cleaned up [ 439.407214][T13903] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.480100][T13913] loop1: detected capacity change from 0 to 256 [ 439.519751][T13903] EXT4-fs warning (device loop0): verify_group_input:169: Last group not full [ 439.546976][T13913] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001047b, chksum : 0x3ced02ab, utbl_chksum : 0xe619d30d) [ 439.607375][T13915] loop2: detected capacity change from 0 to 4096 [ 439.644715][T13915] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 439.667870][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.735678][ T5849] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 439.854338][T13915] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 439.926445][T13919] netlink: 'syz.1.3214': attribute type 21 has an invalid length. [ 439.934418][ T5849] usb 4-1: Using ep0 maxpacket: 8 [ 439.951122][ T5849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 439.989953][ T5849] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 440.055772][ T5849] usb 4-1: New USB device found, idVendor=056a, idProduct=0301, bcdDevice= 0.00 [ 440.069531][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.076216][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.097636][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.150797][ T5849] usb 4-1: config 0 descriptor?? [ 440.602011][ T5849] wacom 0003:056A:0301.003B: unbalanced collection at end of report description [ 440.646412][ T5849] wacom 0003:056A:0301.003B: parse failed [ 440.652356][ T5849] wacom: probe of 0003:056A:0301.003B failed with error -22 [ 440.687869][ T28] audit: type=1326 audit(1753358761.215:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13930 comm="syz.0.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244b78e9a9 code=0x50000 [ 440.736527][ T28] audit: type=1326 audit(1753358761.215:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13930 comm="syz.0.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244b78e9a9 code=0x50000 [ 440.763379][ T28] audit: type=1326 audit(1753358761.215:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13930 comm="syz.0.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244b78e9a9 code=0x50000 [ 440.810420][ T5849] usb 4-1: USB disconnect, device number 35 [ 440.812701][ T28] audit: type=1326 audit(1753358761.215:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13930 comm="syz.0.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244b78e9a9 code=0x50000 [ 440.848556][ T28] audit: type=1326 audit(1753358761.215:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13930 comm="syz.0.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244b78e9a9 code=0x50000 [ 440.879524][ T28] audit: type=1326 audit(1753358761.215:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13930 comm="syz.0.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244b78e9a9 code=0x50000 [ 440.907753][ T28] audit: type=1326 audit(1753358761.215:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13930 comm="syz.0.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244b78e9a9 code=0x50000 [ 440.937993][ T28] audit: type=1326 audit(1753358761.215:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13930 comm="syz.0.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244b78e9a9 code=0x50000 [ 440.970829][ T28] audit: type=1326 audit(1753358761.215:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13930 comm="syz.0.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244b78e9a9 code=0x50000 [ 440.998579][ T28] audit: type=1326 audit(1753358761.215:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13930 comm="syz.0.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244b78e9a9 code=0x50000 [ 441.253366][T13927] loop1: detected capacity change from 0 to 40427 [ 441.262111][T13927] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 441.289085][T13927] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 441.326984][T13927] F2FS-fs (loop1): invalid crc value [ 441.342914][T13927] F2FS-fs (loop1): Found nat_bits in checkpoint [ 441.484335][T13927] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 441.502190][T13927] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 441.658349][T13933] loop2: detected capacity change from 0 to 32768 [ 441.707654][T13933] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 441.857639][T13935] loop0: detected capacity change from 0 to 32768 [ 441.963021][T13935] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 442.006237][T13933] XFS (loop2): Ending clean mount [ 442.029339][T13933] XFS (loop2): Quotacheck needed: Please wait. [ 442.219754][T13933] XFS (loop2): Quotacheck: Done. [ 442.386043][T13935] XFS (loop0): Ending clean mount [ 442.411590][T13935] XFS (loop0): Quotacheck needed: Please wait. [ 442.445370][ T5791] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 442.532300][T13935] XFS (loop0): Quotacheck: Done. [ 442.842660][ T5786] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 443.277430][T13965] loop1: detected capacity change from 0 to 40427 [ 443.355658][T13965] F2FS-fs (loop1): invalid crc value [ 443.379167][T13965] F2FS-fs (loop1): Found nat_bits in checkpoint [ 443.557285][T13965] F2FS-fs (loop1): Start checkpoint disabled! [ 443.594911][T13965] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 443.952330][ T3002] kworker/u4:12: attempt to access beyond end of device [ 443.952330][ T3002] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 443.978875][ T3002] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 443.990399][ T3002] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 444.443460][T13992] loop1: detected capacity change from 0 to 128 [ 444.621583][T13985] loop3: detected capacity change from 0 to 32768 [ 444.721436][T13985] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 444.769651][T14004] loop2: detected capacity change from 0 to 4096 [ 444.790578][T14004] EXT4-fs (loop2): Test dummy encryption mode enabled [ 444.847427][T14004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.896047][ T5784] ocfs2: Unmounting device (7,3) on (node local) [ 445.140092][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.247803][T14016] loop3: detected capacity change from 0 to 128 [ 445.368327][T14016] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 445.451852][T14003] loop0: detected capacity change from 0 to 32768 [ 445.463604][T14016] ext4 filesystem being mounted at /820/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 445.512610][T14003] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.3243 (14003) [ 445.526130][ T8] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 445.623548][T14003] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 445.644403][ T5784] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 445.664496][T14003] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 445.680864][T14003] BTRFS info (device loop0): using free space tree [ 445.731526][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 445.731554][ T8] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 445.731576][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 445.734696][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 445.734724][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.734746][ T8] usb 3-1: Product: syz [ 445.734760][ T8] usb 3-1: Manufacturer: syz [ 445.734783][ T8] usb 3-1: SerialNumber: syz [ 445.782593][ T8] hub 3-1:1.0: bad descriptor, ignoring hub [ 445.782623][ T8] hub: probe of 3-1:1.0 failed with error -5 [ 445.963139][T14003] BTRFS info (device loop0): enabling ssd optimizations [ 445.975786][T14003] BTRFS info (device loop0): auto enabling async discard [ 445.991488][ T8] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 446.240260][ T5786] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 446.378677][ T8] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 446.390248][ T788] usb 3-1: USB disconnect, device number 38 [ 446.429772][ T788] usblp0: removed [ 446.586195][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 446.597023][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 446.621000][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.645953][ T8] usb 2-1: Product: syz [ 446.659967][ T8] usb 2-1: Manufacturer: syz [ 446.664609][ T8] usb 2-1: SerialNumber: syz [ 446.772725][T14056] loop3: detected capacity change from 0 to 4096 [ 446.789735][T14056] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 446.946428][ T8] cdc_ncm 2-1:1.0: bind() failure [ 446.978679][ T8] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 446.994775][ T8] cdc_ncm 2-1:1.1: bind() failure [ 447.076263][ T8] usb 2-1: USB disconnect, device number 29 [ 447.152021][T14064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3261'. [ 447.665183][T14078] loop1: detected capacity change from 0 to 512 [ 447.708561][T14078] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 447.739142][T14078] System zones: 1-12 [ 447.743790][T14081] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3270'. [ 447.765882][T14078] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.3268: Directory hole found for htree index block 0 [ 447.819925][T14078] EXT4-fs (loop1): Remounting filesystem read-only [ 447.854030][T14078] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 447.886583][T14078] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 447.913802][T14078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.969826][T14088] loop0: detected capacity change from 0 to 64 [ 448.054165][T14078] EXT4-fs: Ignoring sb option on remount [ 448.102780][T14078] EXT4-fs: Ignoring removed orlov option [ 448.126909][T14078] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 448.192877][T14078] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 448.283490][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.533148][T14101] loop3: detected capacity change from 0 to 512 [ 448.542722][T14105] loop0: detected capacity change from 0 to 64 [ 448.580216][T14101] EXT4-fs (loop3): orphan cleanup on readonly fs [ 448.679528][T14110] loop2: detected capacity change from 0 to 64 [ 448.781014][T14101] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.3278: bg 0: block 248: padding at end of block bitmap is not set [ 448.839634][T14101] __quota_error: 58 callbacks suppressed [ 448.839662][T14101] Quota error (device loop3): write_blk: dquota write failed [ 448.874028][T14101] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 448.890588][T14101] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.3278: Failed to acquire dquot type 1 [ 448.914265][T14101] EXT4-fs (loop3): 1 truncate cleaned up [ 448.923018][T14101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 449.033072][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.543729][T14126] netlink: 'syz.1.3290': attribute type 1 has an invalid length. [ 449.785631][ T8] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 449.977059][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 450.007317][ T8] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 450.026273][ T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 450.061460][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 450.092114][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 450.117699][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 450.131650][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.164686][ T8] usbtmc 4-1:16.0: bulk endpoints not found [ 450.266849][ T28] audit: type=1326 audit(1753358770.795:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14151 comm="syz.2.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a5f8e9a9 code=0x7ffc0000 [ 450.357308][ T28] audit: type=1326 audit(1753358770.795:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14151 comm="syz.2.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a5f8e9a9 code=0x7ffc0000 [ 450.418205][ T8] usb 4-1: USB disconnect, device number 36 [ 450.444522][ T28] audit: type=1326 audit(1753358770.825:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14151 comm="syz.2.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f09a5f8e9a9 code=0x7ffc0000 [ 450.526732][ T28] audit: type=1326 audit(1753358770.825:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14151 comm="syz.2.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a5f8e9a9 code=0x7ffc0000 [ 450.617841][ T28] audit: type=1326 audit(1753358770.825:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14151 comm="syz.2.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a5f8e9a9 code=0x7ffc0000 [ 450.691806][ T28] audit: type=1326 audit(1753358770.825:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14151 comm="syz.2.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f09a5f8e9a9 code=0x7ffc0000 [ 450.732755][ T28] audit: type=1326 audit(1753358770.825:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14151 comm="syz.2.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a5f8e9a9 code=0x7ffc0000 [ 450.912097][T14163] loop1: detected capacity change from 0 to 256 [ 450.933697][T14163] exfat: Deprecated parameter 'utf8' [ 450.940971][T14164] loop0: detected capacity change from 0 to 512 [ 450.953816][T14163] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 450.967925][T14164] EXT4-fs: Ignoring removed bh option [ 451.014519][T14164] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 451.110685][T14164] EXT4-fs (loop0): 1 truncate cleaned up [ 451.121786][T14164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.325586][T14164] EXT4-fs error (device loop0): __ext4_remount:6741: comm syz.0.3309: Abort forced by user [ 451.372995][T14164] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 451.488431][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.506255][ T8] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 451.728163][ T8] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 451.751702][ T8] usb 4-1: config 0 has no interface number 0 [ 451.751782][ T8] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 451.751806][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.764786][ T8] usb 4-1: config 0 descriptor?? [ 451.776578][ T8] usb 4-1: selecting invalid altsetting 1 [ 451.776725][ T8] dvb_ttusb_budget: ttusb_init_controller: error [ 451.776738][ T8] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 451.913529][ T8] DVB: Unable to find symbol cx22700_attach() [ 452.125365][ T8] DVB: Unable to find symbol tda10046_attach() [ 452.139871][ T8] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 452.154021][ T8] usb 4-1: USB disconnect, device number 37 [ 453.075699][T14223] loop3: detected capacity change from 0 to 256 [ 453.099736][T14223] exfat: Deprecated parameter 'utf8' [ 453.105111][T14223] exfat: Deprecated parameter 'namecase' [ 453.142489][T14221] loop2: detected capacity change from 0 to 2048 [ 453.149124][T14223] exfat: Deprecated parameter 'utf8' [ 453.154458][T14223] exfat: Deprecated parameter 'utf8' [ 453.173657][T14221] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051 [ 453.224076][T14221] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 453.243258][T14223] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e8072e, utbl_chksum : 0xe619d30d) [ 453.560435][T14230] loop3: detected capacity change from 0 to 128 [ 453.771701][T14237] loop1: detected capacity change from 0 to 256 [ 453.863981][T14237] FAT-fs (loop1): Directory bread(block 64) failed [ 453.902052][T14237] FAT-fs (loop1): Directory bread(block 65) failed [ 453.924601][T14237] FAT-fs (loop1): Directory bread(block 66) failed [ 453.966083][T14237] FAT-fs (loop1): Directory bread(block 67) failed [ 453.984788][T14237] FAT-fs (loop1): Directory bread(block 68) failed [ 454.028347][T14237] FAT-fs (loop1): Directory bread(block 69) failed [ 454.035046][T14237] FAT-fs (loop1): Directory bread(block 70) failed [ 454.077443][T14237] FAT-fs (loop1): Directory bread(block 71) failed [ 454.097353][T14237] FAT-fs (loop1): Directory bread(block 72) failed [ 454.119763][T14237] FAT-fs (loop1): Directory bread(block 73) failed [ 454.134942][T14248] loop2: detected capacity change from 0 to 256 [ 454.220397][T14248] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x0ede1155, utbl_chksum : 0xe619d30d) [ 454.596761][T14257] loop3: detected capacity change from 0 to 1764 [ 455.067251][T14271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3357'. [ 455.106191][T14271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3357'. [ 455.115120][T14271] netlink: 'syz.1.3357': attribute type 14 has an invalid length. [ 455.157873][T14274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3359'. [ 455.173244][T14271] netlink: 'syz.1.3357': attribute type 11 has an invalid length. [ 455.186148][T14274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3359'. [ 455.200201][T14276] syz.2.3360 uses old SIOCAX25GETINFO [ 455.213320][T14274] nbd: socks must be embedded in a SOCK_ITEM attr [ 455.442891][T14284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3364'. [ 455.703306][T14292] loop3: detected capacity change from 0 to 2048 [ 455.715751][T14296] loop1: detected capacity change from 0 to 128 [ 455.733437][T14292] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 455.780286][T14296] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 455.814984][T14292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.906629][T14296] ext4 filesystem being mounted at /847/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 455.938034][T14292] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #12: block 9: comm syz.3.3368: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 455.965746][T14296] EXT4-fs warning (device loop1): ext4_group_add:1742: No reserved GDT blocks, can't resize [ 456.046580][T14292] EXT4-fs (loop3): Remounting filesystem read-only [ 456.117729][ T5785] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 456.131531][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.366754][T14309] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3374'. [ 456.542800][T14312] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 456.554593][T14312] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 456.563090][T14312] CPU: 0 PID: 14312 Comm: syz.3.3376 Not tainted 6.6.100-syzkaller #0 [ 456.571349][T14312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 456.581437][T14312] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 456.587022][T14312] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 89 c4 e0 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 68 c4 e0 f9 4d 8b 24 24 48 83 c3 [ 456.606694][T14312] RSP: 0018:ffffc90003337a78 EFLAGS: 00010206 [ 456.612800][T14312] RAX: 0000000000000005 RBX: ffff888077927780 RCX: 0000000000080000 [ 456.620794][T14312] RDX: ffffc9000d6ac000 RSI: 00000000000007d4 RDI: 00000000000007d5 [ 456.628794][T14312] RBP: 0000000000000001 R08: ffff88802c72612f R09: 1ffff110058e4c25 [ 456.636797][T14312] R10: dffffc0000000000 R11: ffffed10058e4c26 R12: 0000000000000028 [ 456.644797][T14312] R13: dffffc0000000000 R14: ffff88802c726000 R15: dffffc0000000000 [ 456.652810][T14312] FS: 00007fc6ab0836c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 456.661775][T14312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 456.668395][T14312] CR2: 0000555583354808 CR3: 000000002ed8f000 CR4: 00000000003506f0 [ 456.676420][T14312] Call Trace: [ 456.679731][T14312] [ 456.682692][T14312] pcl818_detach+0x66/0xd0 [ 456.687148][T14312] comedi_device_detach+0x131/0x6f0 [ 456.692396][T14312] comedi_unlocked_ioctl+0xbd0/0xf90 [ 456.697725][T14312] ? comedi_poll+0x8c0/0x8c0 [ 456.702371][T14312] ? __fget_files+0x28/0x4d0 [ 456.707000][T14312] ? bpf_lsm_file_ioctl+0x9/0x10 [ 456.711967][T14312] ? security_file_ioctl+0x80/0xa0 [ 456.717113][T14312] ? comedi_poll+0x8c0/0x8c0 [ 456.721748][T14312] __se_sys_ioctl+0xfd/0x170 [ 456.726369][T14312] do_syscall_64+0x55/0xb0 [ 456.730817][T14312] ? clear_bhb_loop+0x40/0x90 [ 456.735531][T14312] ? clear_bhb_loop+0x40/0x90 [ 456.740233][T14312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 456.746161][T14312] RIP: 0033:0x7fc6aa18e9a9 [ 456.750616][T14312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.770265][T14312] RSP: 002b:00007fc6ab083038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 456.778722][T14312] RAX: ffffffffffffffda RBX: 00007fc6aa3b5fa0 RCX: 00007fc6aa18e9a9 [ 456.786725][T14312] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 456.794721][T14312] RBP: 00007fc6aa210d69 R08: 0000000000000000 R09: 0000000000000000 [ 456.802716][T14312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.810698][T14312] R13: 0000000000000000 R14: 00007fc6aa3b5fa0 R15: 00007ffd64b7f6c8 [ 456.818686][T14312] [ 456.821722][T14312] Modules linked in: [ 456.829689][T14301] loop0: detected capacity change from 0 to 40427 [ 456.837253][T14312] ---[ end trace 0000000000000000 ]--- [ 456.842746][T14312] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 456.854683][T14312] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 89 c4 e0 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 68 c4 e0 f9 4d 8b 24 24 48 83 c3 [ 456.879387][T14312] RSP: 0018:ffffc90003337a78 EFLAGS: 00010206 [ 456.885810][T14301] F2FS-fs (loop0): invalid crc value [ 456.891392][T14312] RAX: 0000000000000005 RBX: ffff888077927780 RCX: 0000000000080000 [ 456.900384][T14312] RDX: ffffc9000d6ac000 RSI: 00000000000007d4 RDI: 00000000000007d5 [ 456.908590][ T5849] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 456.918584][T14312] RBP: 0000000000000001 R08: ffff88802c72612f R09: 1ffff110058e4c25 [ 456.927920][T14312] R10: dffffc0000000000 R11: ffffed10058e4c26 R12: 0000000000000028 [ 456.935394][T14301] F2FS-fs (loop0): Found nat_bits in checkpoint [ 456.936302][T14312] R13: dffffc0000000000 R14: ffff88802c726000 R15: dffffc0000000000 [ 456.936322][T14312] FS: 00007fc6ab0836c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 456.936342][T14312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 456.936356][T14312] CR2: 00007f244b771de0 CR3: 000000002ed8f000 CR4: 00000000003506e0 [ 456.936377][T14312] Kernel panic - not syncing: Fatal exception [ 456.936685][T14312] Kernel Offset: disabled