last executing test programs: 14.849534168s ago: executing program 1 (id=4199): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f0000000000)) 14.31243761s ago: executing program 1 (id=4202): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fadvise64(r0, 0x400000006, 0x0, 0x0) 13.144790203s ago: executing program 1 (id=4206): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000004000)={0xf, {"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", 0x1000}}, 0x1006) 10.160897312s ago: executing program 1 (id=4216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x101800a, &(0x7f0000000000)=ANY=[], 0x21, 0x551f, &(0x7f0000005ac0)="$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") 7.514623833s ago: executing program 1 (id=4227): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x4) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="766572626f73656a6f75726e616c5f7472616e736163735d60b65f6e616d65732c6e6f7265636f766572792c636f6d7072657373696f6c7a342c657261737572655f636f64652c636f6de512657373696f6e3d7a7374642c696e6c696e655f646174612c7265636f6e7374727563745f617072657373696f6e3d677a69702c6e6f636f772c72772c736d61636b5e5b402d6673636f6e746578743d756e636f6e66e9fe0a645f752c6170707261690200626a5f726f6c653d2c6f626a5f757365723d2c00cceb994f8efdbbc6ae4181a26bbff460c1c8ed816462d332da99e1c9d501b2f84401795039cbed6e6bdb8b98cafc2fc66729648fd8244e38a8ad980cdef833014e304f756960f2584bf7275e4b37d13a426e4e2a2d93218f5e4a81f5baf87c4fab66d374902a56a667b4922816529ad484fab6ab007b93cdced73d03040000000000000000000000000000000000000000000000000019c4277c4d2e96d1dcd16563a14b130bda5d889bd58ba50b97f065cce24e6dc61254f44888e00ae531c6c4358c0be3cd09d5cc920b7dedc2a86e8b70dc9df9ba790bace81fa504d9d3a4840fe2f17a400afea4266379fcfdf8292027f4780275e2cc5517bcd09f30a39e45349a89e4219573ef", @ANYRES8, @ANYRES64, @ANYBLOB="4479552b03e3f9c0852239d8f8b52c160cb3ea29c7ff841385732d0faba9870499bc8b31e4333c3fc46b2c108f35117d2e93655fffc7301c306c45643e01befddb1c69ac364efd96cb64d5be5e29eaebfc3c81020391757a7404e6c717cc1bf819db199786fc3f6979b0ecabc16e7d3065fef15ba027344cab65686536560ff42c0f7b198e0bc6f731a79592a3f32c9227a70cfdfd24f09b486ad6a37c6910fd30e1dda0160597ecb862473905122fade4167aaba719a80186fb3bb44b2aba836613e7c1e1d1", @ANYRESOCT], 0xff, 0x5a82, &(0x7f0000006380)="$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") 6.016152842s ago: executing program 3 (id=4233): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x16) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000016c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x548, 0x3a8, 0x8, 0x7f02ae, 0x3a8, 0x200, 0x478, 0x2e8, 0x2e8, 0x478, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x3a8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv4=@remote, @ipv4=@empty, 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1f, 0xfffa, 0xab, 0xfffffff9, '\x00', 'syz0\x00', {0x6}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x38}, [0xffffff00, 0xffffff00, 0xffffffff, 0xff], [0xffffffff, 0xffffffff, 0xff], 'batadv_slave_0\x00', 'nicvf0\x00', {}, {0xff}, 0x3c, 0x4, 0x5, 0x3e}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x1, 0x4}, {0x3, 0x4, 0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) 5.331477224s ago: executing program 3 (id=4237): r0 = syz_io_uring_setup(0x39, &(0x7f00000000c0)={0x0, 0xe7b7, 0x3501}, &(0x7f0000000240), &(0x7f0000001880)) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) 5.100567214s ago: executing program 4 (id=4238): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000680)={0x4, [[0x6, 0x40, 0x0, 0x81, 0x8000, 0x0, 0x5, 0x9], [0x80000000, 0x2f044bca, 0x3ff, 0xfffffffa, 0xafb00000, 0x2, 0x5, 0x2], [0x0, 0xc00000, 0x5, 0x5, 0xe1, 0x7fffffff, 0x3, 0x5]], '\x00', [{0x0, 0x8, 0x1, 0x0, 0x0, 0x1}, {0x8, 0xc750}, {0xff, 0x5, 0x0, 0x0, 0x1}, {0x7fff, 0x10000, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x6}, {0x8, 0x9, 0x1, 0x1}, {0x0, 0x7, 0x0, 0x0, 0x1}, {0x800, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x0, 0x8000, 0x0, 0x1}, {0x7fffffff, 0x400, 0x0, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x0, 0x1}, {0x5, 0x800, 0x0, 0x1}], '\x00', 0x6}) 4.824470064s ago: executing program 2 (id=4239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x300}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 4.567820572s ago: executing program 3 (id=4241): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@random={'user.', 'user.incfs.metadata\x00'}) 4.381712829s ago: executing program 4 (id=4242): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfd, 0x6c1, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) 3.963743825s ago: executing program 2 (id=4243): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r0, &(0x7f0000000080)=""/1, 0x1) close(r0) 3.843276878s ago: executing program 0 (id=4244): syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaff0200000000000000000000000000108600901b"], 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x104000, 0x800, 0x9, 0x5}, 0x20) 3.47569345s ago: executing program 3 (id=4245): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3c, 0x0) 3.397816653s ago: executing program 2 (id=4246): syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x8000, &(0x7f00000006c0)=ANY=[], 0xfd, 0x152, &(0x7f0000000200)="$eJzsj09LImEcxz+z45/dVVcXXHAXdlnYw4phjiN266CRJGQDhZeuOVHgpCiEx+zcoRfgoQg6iYfo2KHsZCmEvQ5vgcficSYjkF7B87nM/D7f3/PleZYXB1FCoGKzVLGqNbNeN0t/141CbuPi8uqb8F7g82TDqtbEcsnev87Ajvi6YNS09W3gE1A257cqZTGPMhAFsj7Y3nWjiaomfBUuLFzZTGKfj/6D7g/b6TNcynG/XJAN2k4Dnk/hv+j7/tb3BDRabudl8dj5bzXjDDRac5323Vq/l4/H/phHeu7nmT+iUjQ9gCLyx0Qv/pDotIeDfmHVKBiDlK4vpLSkpqWHxn0/nz44xrXi34dN5X2fR3QU4VCBlgLtST66UQKAj7FhBb3hL8BeCJRp0j0ZG5bi3M9OVCLuV8P0Z8YkkUgkEolEIpFIJBLJh7wEAAD//yj6WvA=") execve(&(0x7f00000003c0)='./file2\x00', 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, 0x0, 0x1400) 2.923668454s ago: executing program 4 (id=4247): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004800010928bd700018dcdf250a000100", @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0) 2.865060904s ago: executing program 0 (id=4248): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x14, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.444463163s ago: executing program 1 (id=4249): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x3) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) 1.959669428s ago: executing program 3 (id=4250): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf25090000003c000380080001000200000014000200"], 0x50}}, 0x48040) 1.844055441s ago: executing program 0 (id=4251): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) 1.778927027s ago: executing program 2 (id=4252): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000280)) 1.689814123s ago: executing program 4 (id=4253): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private2}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_OIF={0x8, 0x5, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0) 1.160719364s ago: executing program 0 (id=4254): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0) setreuid(0x0, 0xee01) fchmod(r0, 0x20049549e2a2d659) 1.142278193s ago: executing program 4 (id=4255): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x100) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000000)={"34e17141", 0x200, 0x5, 0x8, 0x85, 0x6d, "8a86ccfd751b15dac5ddb6f309fe93", "2f2c30e1", "39ad577c", "f119ab00", ["5d086e6b8476dc731c55f35c", "749e9fffef9ad43460f115b1", "681218fcfcdc175ade9e1fc0", "f6c7fdde06da7e3140431a04"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f00000000c0)={0x1, 0xc, 0x7, 0x8, 0x8000, 0x3fe, "a2a0069f416ef72504d1690ea4e7e0ef", 0x3, 0xf, 0x2, 0x9, 0x6, 0xf4, 0x8}) 1.02515993s ago: executing program 2 (id=4256): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee844", 0x46}], 0x1}, 0x11) 920.544081ms ago: executing program 3 (id=4257): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x24000000) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x891c, &(0x7f0000000100)) 627.936643ms ago: executing program 0 (id=4258): unshare(0x2c020400) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r0, 0x0, 0xffffffa5, 0x800000000, 0x0) 348.120962ms ago: executing program 2 (id=4259): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x4020010) 240.163234ms ago: executing program 4 (id=4260): r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0xfff1, 0x2, 0x0, 0x100}, {0x1, 0x0, 0x0, 0x80009, 0x7eee}, {0x0, 0x9, 0x7}, 0x801, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x6c}, 0xa, @in=@empty, 0x0, 0x1, 0x3, 0x0, 0x9077}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 0s ago: executing program 0 (id=4261): socket(0x1, 0x800, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x3e, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffff94d7ffff00005403cb0086dd6003136c00088700fe8000000000000000000000000000aaff0200000000000000000000000000012e04"], 0x0) kernel console output (not intermixed with test programs): 0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 904.587437][T12692] netlink: 'syz.4.2915': attribute type 16 has an invalid length. [ 904.692750][T12693] can0: slcan on ptm0. [ 904.718760][T12695] tipc: Enabling not permitted [ 904.724842][T12695] tipc: Enabling of bearer rejected, failed to enable media [ 904.761786][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.916306][T12691] can0 (unregistered): slcan off ptm0. [ 906.079003][T12712] loop1: detected capacity change from 0 to 1024 [ 906.703666][ T7131] hfsplus: b-tree write err: -5, ino 4 [ 907.027055][T12726] loop0: detected capacity change from 0 to 256 [ 908.089756][T12739] loop2: detected capacity change from 0 to 1024 [ 908.183540][T12739] EXT4-fs: inline encryption not supported [ 908.192750][T12739] EXT4-fs: Ignoring removed i_version option [ 908.248923][T12739] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 908.310382][T12743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2939'. [ 908.420449][T12739] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 2: comm syz.2.2938: lblock 2 mapped to illegal pblock 2 (length 1) [ 908.497479][T12739] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 908.505969][T12739] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 48: comm syz.2.2938: lblock 0 mapped to illegal pblock 48 (length 1) [ 908.543695][T12739] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 908.553473][T12739] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.2938: Failed to acquire dquot type 0 [ 908.580470][T12739] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 908.603792][T12739] EXT4-fs error (device loop2): ext4_evict_inode:259: inode #11: comm syz.2.2938: mark_inode_dirty error [ 908.670181][T12739] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 908.681956][T12739] EXT4-fs (loop2): 1 orphan inode deleted [ 908.693033][T12739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 908.726607][ T3622] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 908.768613][ T3622] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 908.780883][ T3622] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:11: Failed to release dquot type 0 [ 909.350841][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 909.485293][ T5792] EXT4-fs error (device loop2): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 909.548964][ T5792] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 909.657747][ T5792] EXT4-fs error (device loop2): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 909.962806][ T30] audit: type=1800 audit(1745457029.654:129): pid=12750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.2942" name="/" dev="sockfs" ino=29266 res=0 errno=0 [ 910.520038][T12753] loop0: detected capacity change from 0 to 4096 [ 910.612584][T12762] loop4: detected capacity change from 0 to 128 [ 910.695852][T12762] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 910.696941][T12764] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2948'. [ 910.957937][T12762] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 911.374619][T12753] ntfs3(loop0): ino=22, The size of extended attributes must not exceed 64KiB [ 911.947770][T12768] loop3: detected capacity change from 0 to 4096 [ 912.104679][T12768] NILFS (loop3): invalid segment: Checksum error in segment payload [ 912.116476][T12768] NILFS (loop3): trying rollback from an earlier position [ 912.191883][T12776] program syz.1.2955 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 912.220306][T12768] NILFS (loop3): recovery complete [ 912.315956][T12778] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 913.962983][T12793] loop1: detected capacity change from 0 to 1024 [ 914.171603][T12793] hfsplus: bad catalog entry type [ 914.233363][ T9641] Process accounting resumed [ 914.495890][T12801] Process accounting resumed [ 914.571330][ T4331] hfsplus: b-tree write err: -5, ino 4 [ 915.417610][T12813] sock: sock_timestamping_bind_phc: sock not bind to device [ 917.372093][T12836] loop4: detected capacity change from 0 to 1024 [ 917.450572][T12842] loop0: detected capacity change from 0 to 64 [ 918.233101][T12847] loop2: detected capacity change from 0 to 256 [ 918.289065][T12847] exfat: Deprecated parameter 'namecase' [ 918.363752][T12848] loop3: detected capacity change from 0 to 1024 [ 918.491535][T12844] loop1: detected capacity change from 0 to 4096 [ 918.516561][T12847] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 918.638698][T12852] loop4: detected capacity change from 0 to 1024 [ 918.649674][T12847] (unnamed net_device) (uninitialized): option mode: invalid value (48) [ 918.719384][T12853] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 918.792662][T12852] hfsplus: xattr exists yet [ 918.870044][ T7131] hfsplus: b-tree write err: -5, ino 4 [ 919.799005][T12862] tipc: Enabled bearer , priority 10 [ 920.919602][ T9641] tipc: Node number set to 7967745 [ 920.960095][T12863] loop0: detected capacity change from 0 to 4096 [ 921.073151][T12863] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 921.244254][T12872] loop2: detected capacity change from 0 to 2048 [ 921.487976][T12872] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 921.681447][T12863] ntfs3(loop0): ino=19, mi_enum_attr [ 921.725364][T12878] loop3: detected capacity change from 0 to 256 [ 922.288985][T12878] FAT-fs (loop3): Directory bread(block 64) failed [ 922.295957][T12878] FAT-fs (loop3): Directory bread(block 65) failed [ 922.303431][T12878] FAT-fs (loop3): Directory bread(block 66) failed [ 922.317667][T12878] FAT-fs (loop3): Directory bread(block 67) failed [ 922.324781][T12878] FAT-fs (loop3): Directory bread(block 68) failed [ 922.333835][T12878] FAT-fs (loop3): Directory bread(block 69) failed [ 922.346533][T12878] FAT-fs (loop3): Directory bread(block 70) failed [ 922.353337][T12878] FAT-fs (loop3): Directory bread(block 71) failed [ 922.360566][T12878] FAT-fs (loop3): Directory bread(block 72) failed [ 922.370468][T12878] FAT-fs (loop3): Directory bread(block 73) failed [ 923.603405][T12891] netlink: 'syz.0.3004': attribute type 5 has an invalid length. [ 923.703989][T12887] loop2: detected capacity change from 0 to 32768 [ 923.716557][T12887] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3003 (12887) [ 923.764872][T12887] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 923.775679][T12887] BTRFS info (device loop2): using sha256 (sha256-generic) checksum algorithm [ 923.790759][T12887] BTRFS info (device loop2): using free-space-tree [ 924.122511][ T1891] BTRFS warning (device loop2): checksum verify failed on logical 5255168 mirror 1 wanted 0xa2bc52bf83e4351a511664158b2f7d69be610068f1b706d330a0e4f01c3ea6c4 found 0x48f66df4121ca6d703d55f84b0b79b8898d4c20e9bb6ee58344cc88f1f740e32 level 1 [ 924.158785][T12887] BTRFS warning (device loop2): failed to read fs tree: -5 [ 924.390634][T12887] BTRFS error (device loop2): open_ctree failed: -5 [ 924.980408][T12921] loop4: detected capacity change from 0 to 512 [ 925.203489][T12921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 925.217452][T12921] ext4 filesystem being mounted at /578/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 925.354078][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 926.715244][T12941] sg_write: data in/out 2031668/1 bytes for SCSI command 0x26-- guessing data in; [ 926.715244][T12941] program syz.4.3019 not setting count and/or reply_len properly [ 928.373952][T12956] loop3: detected capacity change from 0 to 64 [ 928.495072][T12952] loop4: detected capacity change from 0 to 32768 [ 928.511062][T12952] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3023 (12952) [ 928.595991][T12952] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 928.607267][T12952] BTRFS info (device loop4): using sha256 (sha256-generic) checksum algorithm [ 928.619068][T12952] BTRFS info (device loop4): using free-space-tree [ 929.038563][ T4331] BTRFS warning (device loop4): checksum verify failed on logical 5255168 mirror 1 wanted 0xa2bc52bf83e4351a511664158b2f7d69be610068f1b706d330a0e4f01c3ea6c4 found 0x48f66df4121ca6d703d55f84b0b79b8898d4c20e9bb6ee58344cc88f1f740e32 level 1 [ 929.061656][ C1] vkms_vblank_simulate: vblank timer overrun [ 929.073323][T12952] BTRFS warning (device loop4): failed to read fs tree: -5 [ 929.264430][T12952] BTRFS error (device loop4): open_ctree failed: -5 [ 932.223171][T13014] loop3: detected capacity change from 0 to 256 [ 932.618993][T13014] FAT-fs (loop3): Directory bread(block 64) failed [ 932.625866][T13014] FAT-fs (loop3): Directory bread(block 65) failed [ 932.633360][T13014] FAT-fs (loop3): Directory bread(block 66) failed [ 932.640451][T13014] FAT-fs (loop3): Directory bread(block 67) failed [ 932.647516][T13014] FAT-fs (loop3): Directory bread(block 68) failed [ 932.659663][T13014] FAT-fs (loop3): Directory bread(block 69) failed [ 932.668709][T13014] FAT-fs (loop3): Directory bread(block 70) failed [ 932.675555][T13014] FAT-fs (loop3): Directory bread(block 71) failed [ 932.683689][T13014] FAT-fs (loop3): Directory bread(block 72) failed [ 932.691102][T13014] FAT-fs (loop3): Directory bread(block 73) failed [ 933.973556][T13022] loop1: detected capacity change from 0 to 32768 [ 934.011533][T13022] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3047 (13022) [ 934.103655][T13022] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 934.104067][T13022] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm [ 934.264559][T13026] loop2: detected capacity change from 0 to 2048 [ 934.419433][T13026] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 934.839028][ T5788] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 936.552763][T13064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3060'. [ 937.398721][ T30] audit: type=1326 audit(1745457057.094:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13075 comm="syz.0.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13bb8e969 code=0x7ffc0000 [ 937.421923][ T30] audit: type=1326 audit(1745457057.094:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13075 comm="syz.0.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13bb8e969 code=0x7ffc0000 [ 937.697770][ T30] audit: type=1326 audit(1745457057.184:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13075 comm="syz.0.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc13bb8e969 code=0x7ffc0000 [ 937.720889][ T30] audit: type=1326 audit(1745457057.184:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13075 comm="syz.0.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13bb8e969 code=0x7ffc0000 [ 937.744364][ T30] audit: type=1326 audit(1745457057.184:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13075 comm="syz.0.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13bb8e969 code=0x7ffc0000 [ 937.767396][ T30] audit: type=1326 audit(1745457057.204:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13075 comm="syz.0.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7fc13bb8e969 code=0x7ffc0000 [ 937.794204][ T30] audit: type=1326 audit(1745457057.204:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13075 comm="syz.0.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13bb8e969 code=0x7ffc0000 [ 937.818548][ T30] audit: type=1326 audit(1745457057.204:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13075 comm="syz.0.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13bb8e969 code=0x7ffc0000 [ 938.069768][T13074] loop3: detected capacity change from 0 to 4096 [ 938.106859][T13074] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 939.553282][T13084] loop0: detected capacity change from 0 to 40427 [ 939.591349][T13084] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 768) [ 939.601072][T13084] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 939.633848][T13084] F2FS-fs (loop0): invalid crc value [ 939.651439][T13084] F2FS-fs (loop0): invalid crc value [ 939.657398][T13084] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 943.212472][T13130] loop4: detected capacity change from 0 to 1024 [ 943.281759][T13126] loop1: detected capacity change from 0 to 4096 [ 943.341098][T13130] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 943.352558][T13130] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 943.362949][T13130] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 943.379075][T13130] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 943.559992][T13135] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 945.527979][T13158] loop4: detected capacity change from 0 to 16 [ 947.461535][T13181] loop4: detected capacity change from 0 to 512 [ 947.627129][T13181] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 947.665221][T13186] loop3: detected capacity change from 0 to 8 [ 947.691629][T13181] EXT4-fs (loop4): 1 truncate cleaned up [ 947.700804][T13181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 947.847059][T13184] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 947.894893][T13184] EXT4-fs (loop4): Remounting filesystem read-only [ 948.316645][ T5858] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 948.416662][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.538281][ T5858] usb 2-1: Using ep0 maxpacket: 16 [ 948.554417][ T5858] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.565971][ T5858] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.576605][ T5858] usb 2-1: config 0 interface 0 has no altsetting 0 [ 948.583593][ T5858] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 948.593256][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.616702][ T5858] usb 2-1: config 0 descriptor?? [ 949.100613][ T5858] holtek_kbd 0003:04D9:A055.002A: hidraw0: USB HID v0.00 Device [HID 04d9:a055] on usb-dummy_hcd.1-1/input0 [ 949.202542][T13198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3120'. [ 949.293110][ T5858] usb 2-1: USB disconnect, device number 24 [ 949.494199][ T24] kernel write not supported for file /sg0 (pid: 24 comm: kworker/1:0) [ 949.630920][T13204] loop0: detected capacity change from 0 to 8 [ 950.341105][T13202] loop3: detected capacity change from 0 to 32768 [ 950.362726][T13202] (syz.3.3122,13202,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 950.383980][T13202] (syz.3.3122,13202,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 950.400889][T13202] (syz.3.3122,13202,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0xa425c40d. Applying ECC. [ 950.416805][T13202] (syz.3.3122,13202,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x656d756e, computed 0xb4571f25 [ 950.429871][T13202] (syz.3.3122,13202,1):ocfs2_validate_dir_block:452 ERROR: Checksum failed for dinode 288 [ 950.440376][T13202] (syz.3.3122,13202,1):ocfs2_read_virt_blocks:1029 ERROR: status = -5 [ 950.448955][T13202] (syz.3.3122,13202,1):ocfs2_read_dir_block:511 ERROR: status = -5 [ 950.457338][T13202] (syz.3.3122,13202,1):ocfs2_find_entry_el:728 ERROR: reading directory 18, offset 0 [ 950.467528][T13202] (syz.3.3122,13202,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22 [ 950.483069][T13202] (syz.3.3122,13202,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 950.483273][T13202] (syz.3.3122,13202,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22 [ 950.505323][T13202] (syz.3.3122,13202,1):ocfs2_initialize_super:2195 ERROR: status = -22 [ 950.514571][T13202] (syz.3.3122,13202,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 951.101363][T13206] loop4: detected capacity change from 0 to 2048 [ 951.356529][T13212] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 951.527518][T13206] NILFS (loop4): failed to count free inodes: err=-34 [ 951.592720][T13206] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 951.654285][T13206] Remounting filesystem read-only [ 951.661524][T13206] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 951.675700][T13206] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 951.687043][T13206] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 951.704916][T13206] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 951.716836][T13206] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 951.944883][ T30] audit: type=1800 audit(1745457071.634:138): pid=13206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3124" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 952.063437][T13222] loop2: detected capacity change from 0 to 256 [ 952.241085][T13222] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 952.408450][T13216] loop1: detected capacity change from 0 to 4096 [ 952.450288][T13224] proc: Bad value for 'gid' [ 952.650243][ T30] audit: type=1800 audit(1745457072.344:139): pid=13226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3134" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 952.976619][T13216] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 953.287496][T13234] netlink: 'syz.3.3136': attribute type 5 has an invalid length. [ 955.521149][T13260] loop0: detected capacity change from 0 to 256 [ 955.582394][T13260] exfat: Deprecated parameter 'namecase' [ 955.682507][T13264] loop1: detected capacity change from 0 to 512 [ 955.729614][T13264] EXT4-fs: Ignoring removed mblk_io_submit option [ 955.740253][T13264] EXT4-fs: Ignoring removed mblk_io_submit option [ 955.787641][T13264] EXT4-fs (loop1): Test dummy encryption mode enabled [ 955.799757][T13264] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 955.850323][T13260] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 955.969216][T13264] EXT4-fs (loop1): 1 truncate cleaned up [ 956.050492][T13264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 956.870327][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.575362][T13273] loop3: detected capacity change from 0 to 32768 [ 957.594586][T13273] bcachefs (/dev/loop3): error reading default superblock: Invalid superblock: too big (got 1577560 bytes, layout max 1048576) [ 957.862736][T13273] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=xxhash,data_checksum=xxhash,compression=lz4,str_hash=crc64,norecovery,reconstruct_alloc [ 957.862736][T13273] allowing incompatible features above 0.0: (unknown version) [ 957.902934][T13273] bcachefs (loop3): invalid bkey in superblock btree=lru level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:4108:0 gen 0 invalid [ 957.903084][T13273] pointer past last bucket (4108 > 128), deleting [ 957.934314][T13273] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 957.943281][T13273] bcachefs (loop3): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.25: extent_flags [ 957.943281][T13273] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 957.972961][T13273] bcachefs (loop3): dropping and reconstructing all alloc info [ 958.003149][T13273] bcachefs (loop3): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:536870913:U32_MAX len 0 ver 0: (unpack error) [ 958.003280][T13273] invalid variable length fields, deleting [ 958.123295][T13273] bcachefs (loop3): bcachefs (loop3): error validating btree node on loop3 at btree subvolumes level 0/0 [ 958.123434][T13273] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0 [ 958.123560][T13273] node offset 8/16 bset u64s 5: checksum error, type none: got should be , fixing [ 958.167512][T13273] bcachefs (loop3): btree_node_read_work: rewriting btree node at due to error [ 958.167512][T13273] btree=subvolumes level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0 [ 958.238231][T13273] bcachefs (loop3): accounting_read... done [ 958.261428][T13273] bcachefs (loop3): alloc_read... done [ 958.267617][T13273] bcachefs (loop3): snapshots_read... done [ 958.274125][T13273] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean [ 958.289197][T13273] bcachefs (loop3): done starting filesystem [ 958.482324][ T5797] bcachefs (loop3): shutting down [ 958.523260][T13282] loop4: detected capacity change from 0 to 4096 [ 958.626742][T13282] ntfs3(loop4): It is recommened to use chkdsk. [ 958.631170][ T5797] bcachefs (loop3): shutdown complete [ 958.645083][T13282] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 958.656863][T13282] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 958.668389][T13282] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 958.677860][T13282] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 958.689455][T13282] ntfs3(loop4): try to read out of volume at offset 0x3fffffc1c00 [ 958.698045][T13282] ntfs3(loop4): try to read out of volume at offset 0x3fffffc2c00 [ 958.706480][T13282] ntfs3(loop4): try to read out of volume at offset 0x3fffffc4c00 [ 958.714742][T13282] ntfs3(loop4): try to read out of volume at offset 0x3fffffc8c00 [ 958.726514][T13282] ntfs3(loop4): try to read out of volume at offset 0x3fffffd0c00 [ 960.627096][ T30] audit: type=1326 audit(1745457080.324:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13309 comm="syz.2.3169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50f58e969 code=0x7ffc0000 [ 960.653411][ T30] audit: type=1326 audit(1745457080.324:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13309 comm="syz.2.3169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50f58e969 code=0x7ffc0000 [ 960.679576][ T30] audit: type=1326 audit(1745457080.334:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13309 comm="syz.2.3169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe50f58e969 code=0x7ffc0000 [ 960.711432][T13310] loop1: detected capacity change from 0 to 128 [ 960.860116][ T30] audit: type=1326 audit(1745457080.464:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13309 comm="syz.2.3169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50f58e969 code=0x7ffc0000 [ 960.883570][ T30] audit: type=1326 audit(1745457080.464:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13309 comm="syz.2.3169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50f58e969 code=0x7ffc0000 [ 961.401452][ T5793] Bluetooth: hci0: unexpected event for opcode 0x0c7b [ 961.669307][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 961.676289][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 962.250101][T13324] tunl0: entered allmulticast mode [ 962.294773][T13326] loop2: detected capacity change from 0 to 64 [ 962.647003][T13330] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3178'. [ 962.661668][T13330] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 962.974715][T13334] loop4: detected capacity change from 0 to 128 [ 963.452128][T13337] FAT-fs (loop4): error, corrupted directory (invalid i_start) [ 963.460369][T13337] FAT-fs (loop4): Filesystem has been set read-only [ 963.607427][T13341] loop0: detected capacity change from 0 to 512 [ 963.661918][T13341] EXT4-fs: Ignoring removed oldalloc option [ 963.697462][T13341] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 963.756511][T13343] loop3: detected capacity change from 0 to 1024 [ 963.853849][T13341] EXT4-fs (loop0): 1 truncate cleaned up [ 963.998892][T13341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 964.115246][T13341] EXT4-fs error (device loop0): ext4_get_verity_descriptor_location:298: inode #15: comm syz.0.3183: verity file has no extents [ 964.197850][T13341] EXT4-fs (loop0): Remounting filesystem read-only [ 964.204753][T13341] fs-verity (loop0, inode 15): Error -117 getting verity descriptor size [ 964.289067][T13341] fs-verity (loop0, inode 15): Error -117 getting verity descriptor size [ 964.321834][T13351] loop4: detected capacity change from 0 to 256 [ 964.554902][T13351] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 964.568555][T13351] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 964.821301][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 965.635202][T13353] loop3: detected capacity change from 0 to 32768 [ 965.666705][T13353] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3187 (13353) [ 965.697420][T13353] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 965.708484][T13353] BTRFS info (device loop3): using sha256 (sha256-generic) checksum algorithm [ 965.763017][T13348] loop2: detected capacity change from 0 to 8192 [ 966.312746][ T5797] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 966.885064][T13380] loop4: detected capacity change from 0 to 256 [ 966.949136][T13380] exfat: Deprecated parameter 'namecase' [ 967.209820][T13380] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 968.668814][T13401] tmpfs: Bad value for 'mpol' [ 969.037298][T13405] loop2: detected capacity change from 0 to 64 [ 969.172970][T13408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3205'. [ 970.819876][T13426] loop1: detected capacity change from 0 to 256 [ 970.892319][T13426] exfat: Deprecated parameter 'utf8' [ 970.898983][T13426] exfat: Deprecated parameter 'utf8' [ 971.166707][T13426] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d) [ 971.485848][T13421] loop3: detected capacity change from 0 to 32768 [ 971.503044][T13421] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3212 (13421) [ 971.504414][ T30] audit: type=1800 audit(1745457091.124:145): pid=13426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3214" name="bus" dev="loop1" ino=251 res=0 errno=0 [ 971.583670][T13430] loop4: detected capacity change from 0 to 256 [ 971.619571][T13421] BTRFS info (device loop3 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 971.631230][T13421] BTRFS info (device loop3 state S): using crc32c (crc32c-x86_64) checksum algorithm [ 971.644294][T13421] BTRFS error (device loop3 state S): ignoremetacsums must be used with ro mount option [ 971.654612][T13421] BTRFS info (device loop3 state S): using free-space-tree [ 971.668256][T13421] BTRFS error (device loop3 state S): open_ctree failed: -22 [ 971.912380][T13430] FAT-fs (loop4): Directory bread(block 64) failed [ 971.919589][T13430] FAT-fs (loop4): Directory bread(block 65) failed [ 971.926770][T13430] FAT-fs (loop4): Directory bread(block 66) failed [ 971.933570][T13430] FAT-fs (loop4): Directory bread(block 67) failed [ 971.940993][T13430] FAT-fs (loop4): Directory bread(block 68) failed [ 971.948038][T13430] FAT-fs (loop4): Directory bread(block 69) failed [ 971.955003][T13430] FAT-fs (loop4): Directory bread(block 70) failed [ 971.961955][T13430] FAT-fs (loop4): Directory bread(block 71) failed [ 971.969093][T13430] FAT-fs (loop4): Directory bread(block 72) failed [ 971.980716][T13430] FAT-fs (loop4): Directory bread(block 73) failed [ 975.286872][T13463] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3231'. [ 976.443997][T13467] loop0: detected capacity change from 0 to 32768 [ 976.634011][T13467] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,read_only,nocow [ 976.634011][T13467] allowing incompatible features above 0.0: (unknown version) [ 976.658032][T13467] bcachefs (loop0): initializing new filesystem [ 976.669589][T13467] bcachefs (loop0): going read-write [ 976.700130][T13467] bcachefs (loop0): marking superblocks [ 976.791685][T13467] bcachefs (loop0): initializing freespace [ 976.812004][T13467] bcachefs (loop0): done initializing freespace [ 976.846434][T13467] bcachefs (loop0): reading snapshots table [ 976.852957][T13467] bcachefs (loop0): reading snapshots done [ 976.928242][T13467] syz.0.3233: attempt to access beyond end of device [ 976.928242][T13467] loop0: rw=6144, sector=18446744073709551615, nr_sectors = 8 limit=32768 [ 976.944149][T13467] bcachefs (loop0): superblock read error: I/O [ 976.950794][T13467] bcachefs (loop0): bch2_write_super(): fatal error : Unable to write superblock to sufficient devices (from bch2_fs_initialize) [ 976.964735][T13467] bcachefs (loop0): fatal error - emergency read only [ 976.972115][T13467] bcachefs (loop0): going read-only [ 976.977679][T13467] bcachefs (loop0): finished waiting for writes to stop [ 976.984948][T13467] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2 [ 977.005073][ T35] kworker/u8:2: attempt to access beyond end of device [ 977.005073][ T35] loop0: rw=6144, sector=18446744073709551615, nr_sectors = 8 limit=32768 [ 977.024455][ T35] bcachefs (loop0): superblock read error: I/O [ 977.031246][ T35] bcachefs (loop0): bch2_write_super(): fatal error : Unable to write superblock to sufficient devices (from bch2_mark_replicas_slowpath) [ 977.053358][T13467] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 2 [ 977.063976][T13467] bcachefs (loop0): unclean shutdown complete, journal seq 2 [ 977.119601][T13467] bcachefs (loop0): done going read-only, filesystem not clean [ 977.127641][T13467] bcachefs (loop0): done starting filesystem [ 977.479855][ T5858] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 977.518522][ T5795] bcachefs (loop0): shutting down [ 977.693530][ T5795] bcachefs (loop0): shutdown complete [ 977.726943][ T5858] usb 3-1: Using ep0 maxpacket: 32 [ 977.789024][ T5858] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 977.799680][ T5858] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 977.813646][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.918574][ T5858] usb 3-1: config 0 descriptor?? [ 977.949381][ T5858] hub 3-1:0.0: bad descriptor, ignoring hub [ 977.956931][ T5858] hub 3-1:0.0: probe with driver hub failed with error -5 [ 978.024427][T13493] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3241'. [ 978.151489][T13496] loop4: detected capacity change from 0 to 1024 [ 978.163179][T13496] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 978.175876][T13496] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 978.187938][T13496] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 978.198098][T13496] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7003!=20869) [ 978.208066][T13496] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 978.230118][T13496] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #17: comm syz.4.3242: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 978.253914][T13496] EXT4-fs (loop4): no journal found [ 978.328248][T13497] loop3: detected capacity change from 0 to 64 [ 978.626782][ T9641] usb 3-1: USB disconnect, device number 18 [ 978.949000][T13501] loop1: detected capacity change from 0 to 2048 [ 979.018222][ T9641] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 979.078307][T13501] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 979.165258][T13501] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 979.192364][T13503] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3246'. [ 979.202049][T13503] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3246'. [ 979.257877][ T9641] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 979.268943][ T9641] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 979.281494][ T9641] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.389135][ T9641] usb 3-1: config 0 descriptor?? [ 979.431062][ T9641] hub 3-1:0.0: bad descriptor, ignoring hub [ 979.437594][ T9641] hub 3-1:0.0: probe with driver hub failed with error -5 [ 979.737449][ T9641] usb 3-1: USB disconnect, device number 19 [ 979.752962][ T5788] UDF-fs: warning (device loop1): udf_evict_inode: Inode 1367 (mode 120777) has inode size 28 different from extent length 512. Filesystem need not be standards compliant. [ 980.398846][T13512] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 981.744146][T13528] loop2: detected capacity change from 0 to 1024 [ 981.852571][T13528] EXT4-fs: Ignoring removed bh option [ 982.085851][T13528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 982.118090][T13525] loop1: detected capacity change from 0 to 32768 [ 982.446775][T13525] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,wide_macs,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,nocow [ 982.446775][T13525] allowing incompatible features above 0.0: (unknown version) [ 982.476654][T13525] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 982.486523][T13525] bcachefs (loop1): Version upgrade required: [ 982.486523][T13525] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 982.486523][T13525] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 982.486523][T13525] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 982.638500][T13525] bcachefs (loop1): bcachefs (loop1): error validating btree node at btree alloc level 0/0 [ 982.638617][T13525] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 982.638739][T13525] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 982.681807][T13525] bcachefs (loop1): btree_node_read_work: rewriting btree node at due to error [ 982.681807][T13525] btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 982.734572][T13525] bcachefs (loop1): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 982.746737][T13525] bcachefs (loop1): bcachefs (loop1): error validating btree node on loop1 at btree lru level 0/0 [ 982.746850][T13525] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0 [ 982.746966][T13525] node offset 0/16 bset u64s 0: incorrect max key U64_MAX:18374686480762142719:U32_MAX, btree topology error: [ 982.784742][T13525] bcachefs (loop1): flagging btree lru lost data [ 982.793928][T13525] bcachefs (loop1): error reading btree root btree=lru level=0: btree_node_read_error, fixing [ 982.824797][T13525] bcachefs (loop1): check_topology... done [ 982.839085][T13525] bcachefs (loop1): accounting_read... done [ 982.863842][T13525] bcachefs (loop1): alloc_read... done [ 982.871089][T13525] bcachefs (loop1): snapshots_read... done [ 982.877931][T13525] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean [ 982.889912][T13525] bcachefs (loop1): done starting filesystem [ 983.037132][ T5788] bcachefs (loop1): shutting down [ 983.129192][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 983.230213][ T5788] bcachefs (loop1): shutdown complete [ 983.331050][T13540] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 983.347135][T13540] CUSE: unknown device info "3ܟ,v" [ 983.353263][T13540] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 983.353263][T13540] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 983.375759][T13540] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 983.387597][T13540] CUSE: DEVNAME unspecified [ 983.871214][T13546] loop0: detected capacity change from 0 to 512 [ 984.109217][T13546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 984.127135][T13546] ext4 filesystem being mounted at /619/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 984.582735][T13555] loop2: detected capacity change from 0 to 512 [ 984.727436][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 984.742053][T13555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 984.997691][T13561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3266'. [ 985.299793][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.983532][T13572] loop0: detected capacity change from 0 to 256 [ 986.292010][T13572] FAT-fs (loop0): Directory bread(block 64) failed [ 986.299120][T13572] FAT-fs (loop0): Directory bread(block 65) failed [ 986.306304][T13572] FAT-fs (loop0): Directory bread(block 66) failed [ 986.318532][T13572] FAT-fs (loop0): Directory bread(block 67) failed [ 986.325514][T13572] FAT-fs (loop0): Directory bread(block 68) failed [ 986.334147][T13572] FAT-fs (loop0): Directory bread(block 69) failed [ 986.341421][T13572] FAT-fs (loop0): Directory bread(block 70) failed [ 986.346955][ T30] audit: type=1326 audit(1745457106.014:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13575 comm="syz.4.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853598e969 code=0x7ffc0000 [ 986.348343][T13572] FAT-fs (loop0): Directory bread(block 71) failed [ 986.374523][ T30] audit: type=1326 audit(1745457106.024:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13575 comm="syz.4.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853598e969 code=0x7ffc0000 [ 986.377684][T13572] FAT-fs (loop0): Directory bread(block 72) failed [ 986.408235][T13572] FAT-fs (loop0): Directory bread(block 73) failed [ 986.698608][ T30] audit: type=1326 audit(1745457106.114:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13575 comm="syz.4.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f853598e969 code=0x7ffc0000 [ 986.727797][ T30] audit: type=1326 audit(1745457106.114:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13575 comm="syz.4.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853598e969 code=0x7ffc0000 [ 986.754806][ T30] audit: type=1326 audit(1745457106.114:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13575 comm="syz.4.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853598e969 code=0x7ffc0000 [ 986.780909][ T30] audit: type=1326 audit(1745457106.134:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13575 comm="syz.4.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f853598e969 code=0x7ffc0000 [ 986.803951][ T30] audit: type=1326 audit(1745457106.134:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13575 comm="syz.4.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853598e969 code=0x7ffc0000 [ 986.832126][ T30] audit: type=1326 audit(1745457106.134:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13575 comm="syz.4.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853598e969 code=0x7ffc0000 [ 988.021608][T13590] loop0: detected capacity change from 0 to 16 [ 988.172857][T13590] erofs (device loop0): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 988.187552][T13590] erofs (device loop0): mounted with root inode @ nid 36. [ 988.390263][T13590] erofs (device loop0): invalid de[0].nameoff 0 @ nid 36 [ 988.570788][T13596] loop4: detected capacity change from 0 to 128 [ 988.590557][T13595] tipc: Started in network mode [ 988.595797][T13595] tipc: Node identity aaaaaaaaaa4, cluster identity 4711 [ 988.605765][T13595] tipc: Enabled bearer , priority 10 [ 988.701671][T13596] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 988.804233][T13596] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 989.716777][ T5858] tipc: Node number set to 15379114 [ 989.848857][T13604] loop3: detected capacity change from 0 to 256 [ 990.009592][T13608] loop4: detected capacity change from 0 to 64 [ 991.405369][T13617] loop4: detected capacity change from 0 to 512 [ 991.523770][T13617] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 991.644045][T13617] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 991.764690][T13617] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.3291: corrupted in-inode xattr: e_value size too large [ 991.805659][T13617] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.3291: couldn't read orphan inode 15 (err -117) [ 991.970928][T13617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 992.105476][T13621] loop0: detected capacity change from 0 to 2048 [ 992.274289][T13621] EXT4-fs: test_dummy_encryption requires encrypt feature [ 992.495579][T13629] loop1: detected capacity change from 0 to 1024 [ 992.549956][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.105556][T13633] loop3: detected capacity change from 0 to 1024 [ 993.148233][ T1891] hfsplus: b-tree write err: -5, ino 4 [ 993.857145][ T1891] hfsplus: b-tree write err: -5, ino 4 [ 993.952975][T13643] [U]  [ 993.956335][T13643] [U] K{ [ 993.959927][T13643] [U] T 1ŠFFˊ`GJǘGO/MC [ 993.969239][T13643] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 993.989033][T13643] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 994.005829][T13643] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 994.050177][T13643] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 994.075192][T13643] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 994.090494][T13643] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 994.108350][T13643] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 994.310265][T13643] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 994.321610][T13643] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 994.335769][T13643] [U] 22Ʃ۩X?0;3U [ 994.342044][T13643] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 994.368335][T13643] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 994.378536][T13643] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 994.387904][T13643] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 994.395077][T13643] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 994.411891][T13643] [U] EC [ 994.417756][T13643] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 994.508913][T13642] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 995.928091][T13660] loop2: detected capacity change from 0 to 4096 [ 996.080311][T13669] loop4: detected capacity change from 0 to 512 [ 996.164773][T13669] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 996.169273][T13671] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 996.225450][T13669] EXT4-fs (loop4): orphan cleanup on readonly fs [ 996.334455][T13669] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3314: bg 0: block 248: padding at end of block bitmap is not set [ 996.437234][T13669] Quota error (device loop4): write_blk: dquota write failed [ 996.448301][T13669] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 996.465448][T13669] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.3314: Failed to acquire dquot type 1 [ 996.577990][T13669] EXT4-fs (loop4): 1 truncate cleaned up [ 996.620640][T13669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 996.763912][T13675] loop1: detected capacity change from 0 to 4096 [ 997.078758][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 998.286499][T13695] loop3: detected capacity change from 0 to 1024 [ 998.444798][T13695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 998.461218][T13695] ext4 filesystem being mounted at /681/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 998.584436][T13695] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 998.632273][T13705] IPVS: ip_vs_edit_dest(): server weight less than zero [ 999.221613][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.831994][T13698] loop0: detected capacity change from 0 to 8192 [ 1000.008830][T13716] loop4: detected capacity change from 0 to 64 [ 1001.487278][T13718] loop2: detected capacity change from 0 to 32768 [ 1001.497828][T13718] gfs2: quota_quantum mount option requires a positive numeric argument [ 1003.734692][T13747] sock: sock_timestamping_bind_phc: sock not bind to device [ 1004.174747][T13754] loop0: detected capacity change from 0 to 256 [ 1004.618504][T13754] FAT-fs (loop0): Directory bread(block 64) failed [ 1004.625695][T13754] FAT-fs (loop0): Directory bread(block 65) failed [ 1004.632977][T13754] FAT-fs (loop0): Directory bread(block 66) failed [ 1004.647288][T13754] FAT-fs (loop0): Directory bread(block 67) failed [ 1004.661629][T13754] FAT-fs (loop0): Directory bread(block 68) failed [ 1004.671691][T13754] FAT-fs (loop0): Directory bread(block 69) failed [ 1004.678927][T13754] FAT-fs (loop0): Directory bread(block 70) failed [ 1004.685738][T13754] FAT-fs (loop0): Directory bread(block 71) failed [ 1004.693222][T13754] FAT-fs (loop0): Directory bread(block 72) failed [ 1004.703137][T13754] FAT-fs (loop0): Directory bread(block 73) failed [ 1005.014264][T13762] loop4: detected capacity change from 0 to 512 [ 1005.251491][T13762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1005.270032][T13762] ext4 filesystem being mounted at /657/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1006.034545][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.283830][T13776] netlink: 'syz.3.3363': attribute type 18 has an invalid length. [ 1006.311013][T13776] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1006.320319][T13776] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1006.329633][T13776] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1006.339329][T13776] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1007.337183][ T5858] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1007.527109][ T5858] usb 3-1: config 0 has an invalid interface number: 144 but max is 0 [ 1007.536669][ T5858] usb 3-1: config 0 has no interface number 0 [ 1007.543077][ T5858] usb 3-1: too many endpoints for config 0 interface 144 altsetting 138: 68, using maximum allowed: 30 [ 1007.554840][ T5858] usb 3-1: config 0 interface 144 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 68 [ 1007.567620][ T9641] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1007.568707][ T5858] usb 3-1: config 0 interface 144 has no altsetting 0 [ 1007.583412][ T5858] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1007.593215][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.794876][ T30] audit: type=1326 audit(1745457127.494:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13793 comm="syz.0.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13bb8e969 code=0x7ffc0000 [ 1007.879507][ T9641] usb 5-1: Using ep0 maxpacket: 32 [ 1007.924894][ T9641] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1007.932250][ T5858] usb 3-1: config 0 descriptor?? [ 1007.933628][ T9641] usb 5-1: config 0 has no interface number 0 [ 1007.948032][ T9641] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1007.977536][ T30] audit: type=1326 audit(1745457127.544:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13793 comm="syz.0.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc13bb8e969 code=0x7ffc0000 [ 1008.000845][ T30] audit: type=1326 audit(1745457127.574:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13793 comm="syz.0.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13bb8e969 code=0x7ffc0000 [ 1008.028103][ T30] audit: type=1326 audit(1745457127.574:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13793 comm="syz.0.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13bb8e969 code=0x7ffc0000 [ 1008.052898][ T30] audit: type=1326 audit(1745457127.574:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13793 comm="syz.0.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fc13bb8e969 code=0x7ffc0000 [ 1008.075742][ T30] audit: type=1326 audit(1745457127.574:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13793 comm="syz.0.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13bb8e969 code=0x7ffc0000 [ 1008.098971][ T30] audit: type=1326 audit(1745457127.574:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13793 comm="syz.0.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13bb8e969 code=0x7ffc0000 [ 1008.113888][ T9641] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1008.138137][ T9641] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.149743][ T9641] usb 5-1: Product: syz [ 1008.154168][ T9641] usb 5-1: Manufacturer: syz [ 1008.159178][ T9641] usb 5-1: SerialNumber: syz [ 1008.163980][ T5858] cp210x 3-1:0.144: cp210x converter detected [ 1008.285630][T13798] loop1: detected capacity change from 0 to 1024 [ 1008.413194][ T5858] cp210x 3-1:0.144: failed to get vendor val 0x000e size 3: -71 [ 1008.437172][ T5858] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1008.443277][ T9641] usb 5-1: config 0 descriptor?? [ 1008.462816][ T5858] usb 3-1: USB disconnect, device number 20 [ 1008.513446][T13798] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 1008.520659][T13798] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 1008.580345][ T5858] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1008.652083][ T5858] cp210x 3-1:0.144: device disconnected [ 1008.973044][T13803] loop3: detected capacity change from 0 to 512 [ 1009.186759][ T9641] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 1009.195762][ T9641] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 1009.206993][ T9641] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1009.215090][ T9641] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 1009.274793][T13803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1009.288245][T13803] ext4 filesystem being mounted at /692/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1009.293501][ T9641] usb 5-1: USB disconnect, device number 19 [ 1009.481927][T13809] loop0: detected capacity change from 0 to 256 [ 1009.798646][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.799907][ T5858] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1013.000884][T13858] loop1: detected capacity change from 0 to 64 [ 1013.051253][ T5858] usb 5-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1013.061058][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.120785][ T5858] usb 5-1: config 0 descriptor?? [ 1013.167263][ T5858] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1013.207296][ T5858] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1013.361645][ T5858] usb 5-1: USB disconnect, device number 20 [ 1014.380878][T13862] loop3: detected capacity change from 0 to 32768 [ 1014.391327][T13862] btrfs: Deprecated parameter 'usebackuproot' [ 1014.398009][T13862] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1014.412846][T13862] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3401 (13862) [ 1014.506542][T13862] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1014.518888][T13862] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm [ 1014.531385][T13862] BTRFS info (device loop3): using free-space-tree [ 1014.753653][ T3622] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6fb6650 level 0 [ 1014.771832][T13862] BTRFS warning (device loop3): couldn't read tree root [ 1014.784064][T13862] BTRFS warning (device loop3): try to load backup roots slot 1 [ 1014.830045][ T3622] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x7a216cc0 level 0 [ 1014.844196][T13862] BTRFS warning (device loop3): couldn't read tree root [ 1014.851642][T13862] BTRFS warning (device loop3): try to load backup roots slot 2 [ 1014.889446][T13884] loop4: detected capacity change from 0 to 256 [ 1014.889469][ T3622] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1014.889866][T13862] BTRFS warning (device loop3): couldn't read tree root [ 1014.914422][T13862] BTRFS warning (device loop3): try to load backup roots slot 3 [ 1014.969089][T13884] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1014.986315][T13884] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1015.081002][T13862] BTRFS info (device loop3): rebuilding free space tree [ 1015.124939][T13862] BTRFS info (device loop3): checking UUID tree [ 1015.159641][T13884] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 1015.440765][ T5797] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1015.584392][ T5985] udevd[5985]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1015.615505][T13893] loop2: detected capacity change from 0 to 512 [ 1015.789515][T13893] EXT4-fs error (device loop2): ext4_orphan_get:1416: comm syz.2.3407: bad orphan inode 15 [ 1015.840216][T13893] ext4_test_bit(bit=14, block=5) = 0 [ 1015.848549][T13893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1016.063646][ T5985] udevd[5985]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1016.484080][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1016.565604][ T9756] udevd[9756]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1016.819991][ T9756] udevd[9756]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1017.067531][ T9756] udevd[9756]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1017.334178][ T5985] udevd[5985]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1017.762114][ T5985] udevd[5985]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1017.960077][ T5985] udevd[5985]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1018.203079][ T5985] udevd[5985]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1018.388818][ T5985] udevd[5985]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1019.170461][T13930] loop2: detected capacity change from 0 to 128 [ 1019.318738][T13930] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1019.521320][T13930] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1022.483928][T13967] loop1: detected capacity change from 0 to 1024 [ 1022.816568][T13977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3442'. [ 1022.855435][ T30] audit: type=1326 audit(1745457142.554:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13971 comm="syz.3.3443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20cbd8e969 code=0x7ffc0000 [ 1022.882961][ T30] audit: type=1326 audit(1745457142.554:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13971 comm="syz.3.3443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20cbd8e969 code=0x7ffc0000 [ 1022.907347][ T30] audit: type=1326 audit(1745457142.564:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13971 comm="syz.3.3443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f20cbd8e969 code=0x7ffc0000 [ 1022.931673][ T30] audit: type=1326 audit(1745457142.564:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13971 comm="syz.3.3443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20cbd8e969 code=0x7ffc0000 [ 1022.950485][T13975] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1023.139896][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1023.147067][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1023.410879][ T193] hfsplus: b-tree write err: -5, ino 4 [ 1023.618482][T13982] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3445'. [ 1023.634047][T13979] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3445'. [ 1024.782130][T14002] loop4: detected capacity change from 0 to 256 [ 1025.203082][T14002] FAT-fs (loop4): Directory bread(block 64) failed [ 1025.213195][T14002] FAT-fs (loop4): Directory bread(block 65) failed [ 1025.221011][T14002] FAT-fs (loop4): Directory bread(block 66) failed [ 1025.231013][T14002] FAT-fs (loop4): Directory bread(block 67) failed [ 1025.242034][T14002] FAT-fs (loop4): Directory bread(block 68) failed [ 1025.249223][T14002] FAT-fs (loop4): Directory bread(block 69) failed [ 1025.256397][T14002] FAT-fs (loop4): Directory bread(block 70) failed [ 1025.263221][T14002] FAT-fs (loop4): Directory bread(block 71) failed [ 1025.273293][T14002] FAT-fs (loop4): Directory bread(block 72) failed [ 1025.280395][T14002] FAT-fs (loop4): Directory bread(block 73) failed [ 1025.438101][T14010] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3458'. [ 1026.530426][ T5858] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1026.766870][ T5858] usb 4-1: Using ep0 maxpacket: 16 [ 1026.792982][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1026.804702][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1026.815001][ T5858] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1026.828643][ T5858] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1026.838213][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.848909][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1026.877464][ T5858] usb 4-1: config 0 descriptor?? [ 1027.017386][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1027.036365][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.048359][ T24] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1027.059320][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.141526][ T24] usb 5-1: config 0 descriptor?? [ 1027.457691][ T5858] shield 0003:0955:7214.002B: unknown main item tag 0x0 [ 1027.465320][ T5858] shield 0003:0955:7214.002B: unknown main item tag 0x0 [ 1027.480648][ T5858] shield 0003:0955:7214.002B: unknown main item tag 0x0 [ 1027.492095][ T5858] shield 0003:0955:7214.002B: unknown main item tag 0x0 [ 1027.501195][ T5858] shield 0003:0955:7214.002B: unknown main item tag 0x0 [ 1027.599765][ T24] uclogic 0003:145F:0212.002C: interface is invalid, ignoring [ 1027.658519][ T5858] input: HID 0955:7214 Haptics as /devices/virtual/input/input20 [ 1027.729599][ T5858] shield 0003:0955:7214.002B: Registered Thunderstrike controller [ 1027.739052][ T5858] shield 0003:0955:7214.002B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 1027.812924][T11612] usb 5-1: USB disconnect, device number 21 [ 1027.963651][T14033] shield 0003:0955:7214.002B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1028.029402][ T5858] usb 4-1: USB disconnect, device number 11 [ 1028.052994][T14033] shield 0003:0955:7214.002B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1028.064909][T14033] shield 0003:0955:7214.002B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1028.076832][T14033] shield 0003:0955:7214.002B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1030.587394][T14065] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3485'. [ 1031.022181][T14073] loop4: detected capacity change from 0 to 1024 [ 1031.199677][T14073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1031.215440][T14073] ext4 filesystem being mounted at /680/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1031.516853][ T30] audit: type=1800 audit(1745457151.204:165): pid=14073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3487" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1031.745744][T14084] loop2: detected capacity change from 0 to 256 [ 1031.857085][T14083] loop1: detected capacity change from 0 to 1024 [ 1032.002628][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.267133][T14084] FAT-fs (loop2): IO charset cpush not found [ 1032.362276][T14084] smb3: Unexpected value for 'acl' [ 1032.512883][T14093] loop4: detected capacity change from 0 to 128 [ 1032.688586][T14093] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1032.784407][T14093] ext4 filesystem being mounted at /681/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1033.353471][ T5794] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1033.694667][T14107] loop2: detected capacity change from 0 to 256 [ 1035.040267][T14123] loop3: detected capacity change from 0 to 1024 [ 1035.092195][T14123] EXT4-fs: Ignoring removed nobh option [ 1035.102618][T14123] EXT4-fs: Ignoring removed bh option [ 1035.260785][T14123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1035.723330][ T5858] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1035.931340][ T5858] usb 3-1: Using ep0 maxpacket: 16 [ 1035.995166][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1036.006878][ T5858] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1036.017394][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.054737][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1036.115322][ T5858] usb 3-1: config 0 descriptor?? [ 1036.657073][ T5858] apple 0003:05AC:024B.002D: unknown main item tag 0x6 [ 1036.665861][ T5858] apple 0003:05AC:024B.002D: invalid report_size 24312 [ 1036.675025][ T5858] apple 0003:05AC:024B.002D: item 0 2 1 7 parsing failed [ 1036.747052][ T5858] apple 0003:05AC:024B.002D: parse failed [ 1036.754733][ T5858] apple 0003:05AC:024B.002D: probe with driver apple failed with error -22 [ 1036.910608][T14145] loop3: detected capacity change from 0 to 64 [ 1036.957787][ T5858] usb 3-1: USB disconnect, device number 21 [ 1037.492100][ T9641] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1037.668357][ T9641] usb 2-1: Using ep0 maxpacket: 8 [ 1037.729868][ T9641] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1037.741587][ T9641] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1037.755006][ T9641] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1037.762598][ T9641] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1037.772150][ T9641] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.939903][ T9641] usb 2-1: config 0 descriptor?? [ 1038.617144][ T9641] usb 2-1: string descriptor 0 read error: -71 [ 1038.643063][ T9641] uclogic 0003:5543:004D.002E: failed retrieving string descriptor #200: -71 [ 1038.652738][ T9641] uclogic 0003:5543:004D.002E: failed retrieving pen parameters: -71 [ 1038.664602][ T9641] uclogic 0003:5543:004D.002E: failed probing pen v2 parameters: -71 [ 1038.673504][ T9641] uclogic 0003:5543:004D.002E: failed probing parameters: -71 [ 1038.681903][ T9641] uclogic 0003:5543:004D.002E: probe with driver uclogic failed with error -71 [ 1038.916625][ T9641] usb 2-1: USB disconnect, device number 25 [ 1039.398294][T14167] netlink: 252 bytes leftover after parsing attributes in process `syz.2.3529'. [ 1039.880338][T14172] loop1: detected capacity change from 0 to 256 [ 1039.960994][T14172] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1039.974804][T14172] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 1040.037280][T14173] loop3: detected capacity change from 0 to 1024 [ 1040.121687][T14172] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1040.191740][T14175] loop2: detected capacity change from 0 to 512 [ 1040.200564][T14173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1040.314651][T14175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1040.328260][T14175] ext4 filesystem being mounted at /739/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1040.448254][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1040.822577][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.082390][T14191] loop1: detected capacity change from 0 to 256 [ 1041.136873][T14191] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1042.104206][T14195] loop4: detected capacity change from 0 to 2048 [ 1042.209389][T14195] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1042.314568][T14195] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1042.327374][ T5858] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1042.516782][ T5858] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1042.523947][ T5858] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1042.537941][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.716937][ T5858] usb 4-1: config 0 descriptor?? [ 1043.361006][ T5858] elo 0003:04E7:0030.002F: unknown main item tag 0x0 [ 1043.370754][ T5858] elo 0003:04E7:0030.002F: unknown main item tag 0x0 [ 1043.455508][ T5858] elo 0003:04E7:0030.002F: hidraw0: USB HID v80.00 Device [HID 04e7:0030] on usb-dummy_hcd.3-1/input0 [ 1043.579536][ T5858] usb 4-1: USB disconnect, device number 12 [ 1043.717194][T14210] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3546'. [ 1044.869156][T14220] loop3: detected capacity change from 0 to 256 [ 1044.929085][T14220] exfat: Deprecated parameter 'utf8' [ 1044.934836][T14220] exfat: Deprecated parameter 'utf8' [ 1044.940982][T14220] exfat: Deprecated parameter 'utf8' [ 1045.209616][T14220] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 1045.516383][T14228] loop2: detected capacity change from 0 to 512 [ 1045.617662][T14228] EXT4-fs: Ignoring removed mblk_io_submit option [ 1045.751206][T14228] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1045.854554][T14228] EXT4-fs error (device loop2): ext4_orphan_get:1390: comm syz.2.3555: inode #13: comm syz.2.3555: iget: illegal inode # [ 1046.074158][T14228] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.3555: couldn't read orphan inode 13 (err -117) [ 1046.199072][T14228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1046.272705][T14227] loop1: detected capacity change from 0 to 32768 [ 1046.332128][T14227] (syz.1.3554,14227,1):ocfs2_find_slot:468 ERROR: no free slots available! [ 1046.341253][T14227] (syz.1.3554,14227,1):ocfs2_mount_volume:1751 ERROR: status = -22 [ 1046.358588][T14227] (syz.1.3554,14227,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 1046.578077][T14238] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3558'. [ 1046.699331][T14237] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3558'. [ 1047.305798][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.015476][T14257] loop1: detected capacity change from 0 to 128 [ 1048.080899][T14257] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1048.208089][T14257] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1048.731893][T14262] mkiss: ax0: crc mode is auto. [ 1048.901725][T14265] loop3: detected capacity change from 0 to 164 [ 1048.926819][ T1891] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1049.736677][ T5858] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1049.967533][ T5858] usb 2-1: Using ep0 maxpacket: 16 [ 1049.983094][ T5858] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1049.994175][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.074578][ T5858] usb 2-1: config 0 descriptor?? [ 1050.601645][ T5858] prodikeys 0003:041E:2801.0030: unknown main item tag 0x0 [ 1050.609523][ T5858] prodikeys 0003:041E:2801.0030: item fetching failed at offset 3/5 [ 1050.761526][T14280] loop2: detected capacity change from 0 to 256 [ 1050.765192][ T5858] prodikeys 0003:041E:2801.0030: hid parse failed [ 1050.775401][ T5858] prodikeys 0003:041E:2801.0030: probe with driver prodikeys failed with error -22 [ 1050.973380][ T5858] usb 2-1: USB disconnect, device number 26 [ 1051.149365][T14280] FAT-fs (loop2): Directory bread(block 64) failed [ 1051.156634][T14280] FAT-fs (loop2): Directory bread(block 65) failed [ 1051.163724][T14280] FAT-fs (loop2): Directory bread(block 66) failed [ 1051.171022][T14280] FAT-fs (loop2): Directory bread(block 67) failed [ 1051.178338][T14280] FAT-fs (loop2): Directory bread(block 68) failed [ 1051.185163][T14280] FAT-fs (loop2): Directory bread(block 69) failed [ 1051.192503][T14280] FAT-fs (loop2): Directory bread(block 70) failed [ 1051.199458][T14280] FAT-fs (loop2): Directory bread(block 71) failed [ 1051.206651][T14280] FAT-fs (loop2): Directory bread(block 72) failed [ 1051.213473][T14280] FAT-fs (loop2): Directory bread(block 73) failed [ 1052.329356][T14296] loop3: detected capacity change from 0 to 256 [ 1052.418901][T14299] netlink: zone id is out of range [ 1052.424297][T14299] netlink: zone id is out of range [ 1052.434241][T14299] netlink: del zone limit has 4 unknown bytes [ 1052.913802][T14291] loop1: detected capacity change from 0 to 32768 [ 1052.924908][T14291] XFS (loop1): sunit and swidth options incompatible with the noalign option [ 1053.162937][T14296] FAT-fs (loop3): Directory bread(block 64) failed [ 1053.170103][T14296] FAT-fs (loop3): Directory bread(block 65) failed [ 1053.183716][T14296] FAT-fs (loop3): Directory bread(block 66) failed [ 1053.191967][T14296] FAT-fs (loop3): Directory bread(block 67) failed [ 1053.199142][T14296] FAT-fs (loop3): Directory bread(block 68) failed [ 1053.209060][T14296] FAT-fs (loop3): Directory bread(block 69) failed [ 1053.216468][T14296] FAT-fs (loop3): Directory bread(block 70) failed [ 1053.223287][T14296] FAT-fs (loop3): Directory bread(block 71) failed [ 1053.230510][T14296] FAT-fs (loop3): Directory bread(block 72) failed [ 1053.240409][T14296] FAT-fs (loop3): Directory bread(block 73) failed [ 1054.436816][T14311] loop4: detected capacity change from 0 to 1024 [ 1056.003624][T14327] loop1: detected capacity change from 0 to 2048 [ 1056.139668][T14327] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1056.233931][ T8107] udevd[8107]: incorrect nilfs2 checksum on /dev/loop1 [ 1056.296764][T14331] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1056.895284][T14338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3605'. [ 1059.121644][T14356] loop2: detected capacity change from 0 to 32768 [ 1059.140068][T14356] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 0 transid 8 /dev/loop2 (7:2) scanned by syz.2.3614 (14356) [ 1059.347483][ T9641] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1059.719692][ T9641] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1059.734339][ T9641] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1059.751805][ T9641] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 1059.761384][ T9641] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.200728][ T9641] usb 2-1: config 0 descriptor?? [ 1060.870606][ T9641] lenovo 0003:17EF:60EE.0031: item fetching failed at offset 3/7 [ 1061.030050][ T9641] lenovo 0003:17EF:60EE.0031: hid_parse failed [ 1061.037249][ T9641] lenovo 0003:17EF:60EE.0031: probe with driver lenovo failed with error -22 [ 1061.183612][ T9641] usb 2-1: USB disconnect, device number 27 [ 1061.508650][T14375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3622'. [ 1061.812275][T14378] loop3: detected capacity change from 0 to 2048 [ 1061.816361][ C0] hrtimer: interrupt took 553235 ns [ 1064.436422][ T5858] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1064.637023][ T5858] usb 2-1: Using ep0 maxpacket: 16 [ 1064.711681][ T5858] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.722450][ T5858] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1064.845350][ T5858] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1064.859272][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.869791][ T5858] usb 2-1: Product: syz [ 1064.874242][ T5858] usb 2-1: Manufacturer: syz [ 1064.879405][ T5858] usb 2-1: SerialNumber: syz [ 1064.929471][T14418] netlink: 'syz.0.3642': attribute type 1 has an invalid length. [ 1064.937793][T14418] netlink: 'syz.0.3642': attribute type 2 has an invalid length. [ 1065.287110][ T5858] usb 2-1: 0:2 : does not exist [ 1065.377146][ T5858] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1065.592328][T14424] loop2: detected capacity change from 0 to 8 [ 1065.612854][ T5858] usb 2-1: USB disconnect, device number 28 [ 1066.445746][T14430] loop3: detected capacity change from 0 to 1024 [ 1066.455758][ T8107] udevd[8107]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1068.710567][T14460] program syz.0.3662 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1072.293625][T14495] loop1: detected capacity change from 0 to 128 [ 1072.388544][T14495] hpfs: Bad value for 'umask' [ 1073.713336][T14502] loop1: detected capacity change from 0 to 164 [ 1074.442937][T14510] loop2: detected capacity change from 0 to 8 [ 1074.737460][T14514] loop1: detected capacity change from 0 to 64 [ 1078.155143][T14558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3709'. [ 1079.896506][T14569] loop4: detected capacity change from 0 to 32768 [ 1079.947352][T14576] smc: net device bond0 applied user defined pnetid SYZ0 [ 1080.180140][T14569] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names,allocator_stuck_timeout=3,read_only [ 1080.180140][T14569] allowing incompatible features above 0.0: (unknown version) [ 1080.213794][ C0] vkms_vblank_simulate: vblank timer overrun [ 1080.227643][T14569] bcachefs (loop4): initializing new filesystem [ 1080.239549][T14569] bcachefs (loop4): going read-write [ 1080.253804][T14578] loop1: detected capacity change from 0 to 1024 [ 1080.282124][T14569] bcachefs (loop4): marking superblocks [ 1080.357392][T14569] bcachefs (loop4): initializing freespace [ 1080.377358][T14569] bcachefs (loop4): done initializing freespace [ 1080.401865][T14569] bcachefs (loop4): reading snapshots table [ 1080.408503][T14569] bcachefs (loop4): reading snapshots done [ 1080.497786][T14569] bcachefs (loop4): going read-only [ 1080.509937][T14569] bcachefs (loop4): finished waiting for writes to stop [ 1080.524020][T14569] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2 [ 1080.895661][T14569] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 2 [ 1081.009465][ T4331] hfsplus: b-tree write err: -5, ino 4 [ 1081.025475][T14569] bcachefs (loop4): clean shutdown complete, journal seq 3 [ 1081.079086][T14569] bcachefs (loop4): marking filesystem clean [ 1081.107476][T14569] bcachefs (loop4): done starting filesystem [ 1081.441149][T14569] syz.4.3714 (14569) used greatest stack depth: 968 bytes left [ 1081.474650][ T5794] bcachefs (loop4): shutting down [ 1081.599847][T14598] loop3: detected capacity change from 0 to 64 [ 1081.623892][ T5794] bcachefs (loop4): shutdown complete [ 1082.336589][T14600] loop2: detected capacity change from 0 to 2048 [ 1082.458303][T14607] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1084.519541][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1084.526418][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1085.673603][T14628] loop1: detected capacity change from 0 to 40427 [ 1085.702224][T14628] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 1085.712777][T14628] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1085.724772][T14628] F2FS-fs (loop1): Invalid gid value -1 [ 1085.802695][ T9641] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1085.982990][ T9641] usb 4-1: Using ep0 maxpacket: 16 [ 1086.054698][ T9641] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 1086.069679][ T9641] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.080134][ T9641] usb 4-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1086.095511][ T9641] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1086.105810][ T9641] usb 4-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 1086.115637][ T9641] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.351788][ T9641] usb 4-1: config 0 descriptor?? [ 1086.476728][ T5858] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1086.710352][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.721992][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.732351][ T5858] usb 3-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 1086.742075][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.852998][ T5858] usb 3-1: config 0 descriptor?? [ 1086.863302][ T9641] hid-alps 0003:044E:120B.0032: hidraw0: USB HID v0.00 Device [HID 044e:120b] on usb-dummy_hcd.3-1/input0 [ 1087.014632][ T9641] usb 4-1: USB disconnect, device number 13 [ 1087.366686][ T5858] hid (null): usage index exceeded [ 1087.440318][ T5858] wacom 0003:056A:00F4.0033: ignoring exceeding usage max [ 1087.465662][ T5858] wacom 0003:056A:00F4.0033: ignoring exceeding usage max [ 1087.473281][ T5858] wacom 0003:056A:00F4.0033: usage index exceeded [ 1087.487258][ T5858] wacom 0003:056A:00F4.0033: item 0 1 2 2 parsing failed [ 1087.572493][ T5858] wacom 0003:056A:00F4.0033: parse failed [ 1087.579632][ T5858] wacom 0003:056A:00F4.0033: probe with driver wacom failed with error -22 [ 1087.697805][ T5858] usb 3-1: USB disconnect, device number 22 [ 1087.795219][T14644] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3747'. [ 1089.163605][T14657] loop2: detected capacity change from 0 to 1024 [ 1089.373649][T14657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1089.758520][T14670] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3756'. [ 1089.978831][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1090.370824][T14676] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 1091.107450][T14688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3766'. [ 1091.132397][T14687] loop4: detected capacity change from 0 to 256 [ 1091.198483][T14687] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1091.294470][T14687] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1091.308180][T14687] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1091.316392][T14687] UDF-fs: Scanning with blocksize 512 failed [ 1091.342199][T14687] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1091.470323][T14687] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1093.127190][T14710] loop1: detected capacity change from 0 to 24 [ 1093.158880][T14710] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1093.199919][T14701] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1093.207154][T14701] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1093.920018][T14713] loop2: detected capacity change from 0 to 4096 [ 1094.416865][T10740] Bluetooth: hci1: command 0x0c1a tx timeout [ 1094.846325][ T30] audit: type=1400 audit(1745457214.534:166): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=263A20310A666C6167733A203078300A6864725F6C656E3A2032340A747970655F6F66663A20300A747970655F6C656E3A20300A7374725F6F66663A20300A7374725F6C656E3A20320A6274665F746F74616C5F73697A653A2032360A4E6F207479706520666F756E64 pid=14724 comm="syz.3.3784" [ 1095.226654][T10740] Bluetooth: hci4: command 0x0405 tx timeout [ 1097.622417][T14751] loop2: detected capacity change from 0 to 32768 [ 1097.707603][T14751] bcachefs (/dev/loop2): error validating superblock: Bad number of member devices 0 (max 64) [ 1097.725345][T14751] bcachefs: bch2_fs_get_tree() error: invalid_sb_too_many_members [ 1098.985778][T14759] loop1: detected capacity change from 0 to 32768 [ 1099.086677][T14759] gfs2: fsid=loccookie: Trying to join cluster "lock_nolock", "loccookie" [ 1099.095634][T14759] gfs2: fsid=loccookie: Now mounting FS (format 0)... [ 1099.137335][T14759] gfs2: fsid=loccookie.s: journal 0 mapped with 5 extents in 1ms [ 1099.491108][T14759] gfs2: fsid=loccookie.s: first mount done, others may mount [ 1101.413967][T14783] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3806'. [ 1101.473049][T14777] loop3: detected capacity change from 0 to 32768 [ 1102.001250][T14782] loop4: detected capacity change from 0 to 32768 [ 1102.117192][T14777] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1102.128827][T14777] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1102.181022][T14777] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 1102.194229][ T9641] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1102.204933][ T9641] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1103.112318][ T9641] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 907ms [ 1103.121678][ T9641] gfs2: fsid=syz:syz.0: jid=0: Done [ 1103.128065][T14777] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1103.155565][T14777] syz.3.3804: attempt to access beyond end of device [ 1103.155565][T14777] loop3: rw=12288, sector=9007199254757616, nr_sectors = 8 limit=32768 [ 1103.174105][T14777] gfs2: fsid=syz:syz.0: can't lock local "qc" file: -5 [ 1104.716534][ T30] audit: type=1400 audit(1745457224.404:167): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=14807 comm="syz.2.3818" [ 1105.438243][T14818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3822'. [ 1106.538657][T14033] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1106.790588][T14033] usb 2-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 1106.800399][T14033] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.879169][T14033] usb 2-1: config 0 descriptor?? [ 1106.933348][T14835] tmpfs: Bad value for 'mpol' [ 1107.013567][T14833] loop3: detected capacity change from 0 to 1764 [ 1107.457125][T14033] uclogic 0003:5543:0005.0034: unbalanced collection at end of report description [ 1107.512319][T14033] uclogic 0003:5543:0005.0034: parse failed [ 1107.522194][T14033] uclogic 0003:5543:0005.0034: probe with driver uclogic failed with error -22 [ 1107.637640][T14033] usb 2-1: USB disconnect, device number 29 [ 1108.813025][T14855] loop4: detected capacity change from 0 to 256 [ 1109.220124][T14859] loop3: detected capacity change from 0 to 1024 [ 1109.930070][ T7131] hfsplus: b-tree write err: -5, ino 4 [ 1110.794793][T14878] syz.1.3848: attempt to access beyond end of device [ 1110.794793][T14878] loop1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1110.809177][T14878] XFS (loop1): SB validate failed with error -5. [ 1110.990395][ T98] I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 1111.467274][T14896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3855'. [ 1111.970707][T14903] loop4: detected capacity change from 0 to 512 [ 1112.095897][T14905] loop2: detected capacity change from 0 to 512 [ 1112.182894][T14903] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3858: invalid indirect mapped block 256 (level 2) [ 1112.255511][T14905] EXT4-fs (loop2): 1 orphan inode deleted [ 1112.285221][T14903] EXT4-fs (loop4): Remounting filesystem read-only [ 1112.304332][T14903] EXT4-fs (loop4): 2 truncates cleaned up [ 1112.314876][T14903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1112.360975][T14905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1112.859677][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1112.918964][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1115.676217][T14949] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3878'. [ 1116.741138][T14969] netlink: 'syz.4.3888': attribute type 3 has an invalid length. [ 1118.599163][ T9641] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1118.843413][T14997] loop1: detected capacity change from 0 to 512 [ 1118.851592][ T9641] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 1118.860349][ T9641] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.874364][ T9641] usb 3-1: config 0 has no interface number 0 [ 1118.881200][ T9641] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1118.901373][ T9641] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1118.985137][ T9641] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1118.998645][ T9641] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.007468][ T9641] usb 3-1: Product: syz [ 1119.012044][ T9641] usb 3-1: Manufacturer: syz [ 1119.017244][ T9641] usb 3-1: SerialNumber: syz [ 1119.040887][T14997] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1119.109491][ T9641] usb 3-1: config 0 descriptor?? [ 1119.174256][T14997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1119.188318][T14997] ext4 filesystem being mounted at /774/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1119.335115][T14997] EXT4-fs error (device loop1): ext4_get_verity_descriptor_location:335: inode #15: comm syz.1.3900: verity file corrupted; can't find descriptor [ 1119.376758][T14997] EXT4-fs (loop1): Remounting filesystem read-only [ 1119.383718][T14997] fs-verity (loop1, inode 15): Error -117 getting verity descriptor size [ 1119.437861][T15005] loop3: detected capacity change from 0 to 256 [ 1119.480910][T15005] exfat: Deprecated parameter 'namecase' [ 1119.582198][T15005] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 1119.825613][ T9641] usb 3-1: USB disconnect, device number 23 [ 1119.859080][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1121.054798][ T30] audit: type=1326 audit(1745457240.754:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15018 comm="syz.2.3909" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe50f58e969 code=0x0 [ 1122.386989][T15034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3917'. [ 1122.396609][T15034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3917'. [ 1122.410989][T15034] netlink: 'syz.2.3917': attribute type 20 has an invalid length. [ 1124.369396][T15059] team_slave_0: entered promiscuous mode [ 1124.375490][T15059] team_slave_1: entered promiscuous mode [ 1124.669348][T15063] nbd: socks must be embedded in a SOCK_ITEM attr [ 1125.444070][T15074] loop4: detected capacity change from 0 to 256 [ 1125.938567][T15081] tc_dump_action: action bad kind [ 1126.047024][T15082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3937'. [ 1126.921624][T15092] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1127.255298][T15099] tipc: Enabled bearer , priority 10 [ 1127.999331][T15104] loop2: detected capacity change from 0 to 256 [ 1128.356300][T14033] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 1128.525596][ T30] audit: type=1326 audit(1745457248.204:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15109 comm="syz.1.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615978e969 code=0x7ffc0000 [ 1128.637401][T14033] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1128.653356][T14033] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1128.665086][T14033] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1128.674792][T14033] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.691855][T14033] usb 4-1: config 0 descriptor?? [ 1128.735278][ T30] audit: type=1326 audit(1745457248.274:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15109 comm="syz.1.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615978e969 code=0x7ffc0000 [ 1128.764252][ T30] audit: type=1326 audit(1745457248.274:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15109 comm="syz.1.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f615978e969 code=0x7ffc0000 [ 1128.787553][ T30] audit: type=1326 audit(1745457248.284:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15109 comm="syz.1.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615978e969 code=0x7ffc0000 [ 1128.811145][ T30] audit: type=1326 audit(1745457248.304:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15109 comm="syz.1.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f615978e969 code=0x7ffc0000 [ 1128.835069][ T30] audit: type=1326 audit(1745457248.304:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15109 comm="syz.1.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615978e969 code=0x7ffc0000 [ 1129.008854][T15112] loop4: detected capacity change from 0 to 256 [ 1129.061773][T15112] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1129.073139][T15112] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1129.191008][T14033] hid-thrustmaster 0003:044F:B65D.0035: collection stack underflow [ 1129.199464][T14033] hid-thrustmaster 0003:044F:B65D.0035: item 0 4 0 12 parsing failed [ 1129.276974][T14033] hid-thrustmaster 0003:044F:B65D.0035: parse failed with error -22 [ 1129.285559][T14033] hid-thrustmaster 0003:044F:B65D.0035: probe with driver hid-thrustmaster failed with error -22 [ 1129.440823][ T5852] usb 4-1: USB disconnect, device number 14 [ 1129.620044][T15120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3956'. [ 1129.813560][T15112] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001043e, chksum : 0x6f9a2936, utbl_chksum : 0xe619d30d) [ 1131.017394][T15124] loop1: detected capacity change from 0 to 32768 [ 1131.037111][T15124] BTRFS error: device /dev/loop1 has incomplete metadata_uuid change, please use btrfstune to complete [ 1131.290159][ T8107] BTRFS error: device /dev/loop1 has incomplete metadata_uuid change, please use btrfstune to complete [ 1131.323985][T15130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3960'. [ 1131.722404][T15134] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3963'. [ 1131.732333][T15134] tipc: Enabling of bearer rejected, failed to enable media [ 1132.778494][T15147] loop3: detected capacity change from 0 to 256 [ 1133.303743][T15147] FAT-fs (loop3): Directory bread(block 64) failed [ 1133.311606][T15147] FAT-fs (loop3): Directory bread(block 65) failed [ 1133.321792][T15147] FAT-fs (loop3): Directory bread(block 66) failed [ 1133.328994][T15147] FAT-fs (loop3): Directory bread(block 67) failed [ 1133.336300][T15147] FAT-fs (loop3): Directory bread(block 68) failed [ 1133.343133][T15147] FAT-fs (loop3): Directory bread(block 69) failed [ 1133.353078][T15147] FAT-fs (loop3): Directory bread(block 70) failed [ 1133.363297][T15147] FAT-fs (loop3): Directory bread(block 71) failed [ 1133.371398][T15147] FAT-fs (loop3): Directory bread(block 72) failed [ 1133.383256][T15147] FAT-fs (loop3): Directory bread(block 73) failed [ 1133.422131][T15154] tipc: Started in network mode [ 1133.427820][T15154] tipc: Node identity , cluster identity 1 [ 1133.433859][T15154] tipc: Failed to set node id, please configure manually [ 1133.441521][T15154] tipc: Enabling of bearer rejected, failed to enable media [ 1133.573244][T15157] syz.3.3970: attempt to access beyond end of device [ 1133.573244][T15157] loop3: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 1133.587773][T15157] syz.3.3970: attempt to access beyond end of device [ 1133.587773][T15157] loop3: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 1133.618906][ T30] audit: type=1800 audit(1745457253.304:175): pid=15157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3970" name="file0" dev="loop3" ino=377 res=0 errno=0 [ 1134.356876][T15162] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3975'. [ 1135.074979][T15168] loop4: detected capacity change from 0 to 256 [ 1135.196522][T15168] exfat: Deprecated parameter 'utf8' [ 1135.356918][T14033] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1135.482889][T15168] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d) [ 1135.567408][T14033] usb 2-1: Using ep0 maxpacket: 16 [ 1135.611023][T15168] ptrace attach of "./syz-executor exec"[5794] was attempted by "9b9fN9iNS9cΙ?/9m.{my5lA\x1bo\x0bV|6bc-nKؒu-coM\x5cVm{j~ױغ^[gkۻ׷6mK>bGm3ܶ-m{`\x09i>x]lصv]oؽ=ko9e{Ae;ؾbWmx}ӎoٱvo'&f;δYvoTk<;.\x0bf?KG6.+Jʮ.\x1b&mvaw]N^~j3g_؃ʹ_g=jq{~oOԥcd/Xo$)\x0a(rP,\x5ct妫)]C:KS>O S!*L\x0cY\x22\x0a(@WJTnt3[%RZFiUZZGimMVFi\x07]1Oh})eg>/)C5o}{wt\x09NtN:KG:O?!\x22\x0a0&Ɔ9\x5cUa0OxM\x09\x0d¼a0X ,Ƈ¡MhC\x0aðHX47\x1badX*taLxSX69,o\x0d+J#U\x09o [ 1135.618325][T14033] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1135.727751][T14033] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1135.741127][T14033] usb 2-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 1135.750579][T14033] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.843336][T14033] usb 2-1: config 0 descriptor?? [ 1136.349060][T14033] input: HID 28bd:0934 Mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0934.0036/input/input24 [ 1136.589131][T14033] uclogic 0003:28BD:0934.0036: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0934] on usb-dummy_hcd.1-1/input0 [ 1136.690880][T14033] usb 2-1: USB disconnect, device number 30 [ 1137.258574][T15192] loop4: detected capacity change from 0 to 8 [ 1137.326348][T15191] rdma_op ffff8880601f3d80 conn xmit_rdma 0000000000000000 [ 1137.433964][T15192] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1137.443316][T15192] SQUASHFS error: Failed to read block 0x91: -5 [ 1137.450345][T15192] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1137.463925][T15192] SQUASHFS error: Unable to read inode 0x11f [ 1138.108072][T15201] Option ' ' to dns_resolver key: bad/missing value [ 1140.315782][T15234] loop3: detected capacity change from 0 to 256 [ 1140.712582][T15234] FAT-fs (loop3): Directory bread(block 64) failed [ 1140.719807][T15234] FAT-fs (loop3): Directory bread(block 65) failed [ 1140.727989][T15234] FAT-fs (loop3): Directory bread(block 66) failed [ 1140.734817][T15234] FAT-fs (loop3): Directory bread(block 67) failed [ 1140.747237][T15234] FAT-fs (loop3): Directory bread(block 68) failed [ 1140.754162][T15234] FAT-fs (loop3): Directory bread(block 69) failed [ 1140.764271][T15234] FAT-fs (loop3): Directory bread(block 70) failed [ 1140.771904][T15234] FAT-fs (loop3): Directory bread(block 71) failed [ 1140.779161][T15234] FAT-fs (loop3): Directory bread(block 72) failed [ 1140.786297][T15234] FAT-fs (loop3): Directory bread(block 73) failed [ 1143.637949][T15272] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4028'. [ 1144.033054][T15276] loop2: detected capacity change from 0 to 512 [ 1144.079786][T15276] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1144.203326][T15276] EXT4-fs (loop2): 1 truncate cleaned up [ 1144.340251][T15276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1144.940386][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1145.148548][T14033] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1145.355804][T14033] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.366849][T14033] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1145.469666][T14033] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1145.479485][T14033] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1145.488074][T14033] usb 5-1: SerialNumber: syz [ 1145.801672][T15296] program syz.1.4039 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1145.970238][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1145.977282][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1146.022528][T14033] usb 5-1: 0:2 : does not exist [ 1146.025069][ T5852] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1146.233351][T14033] usb 5-1: USB disconnect, device number 22 [ 1146.332999][ T5852] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1146.343216][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.354611][ T5852] usb 4-1: Product: syz [ 1146.362080][ T5852] usb 4-1: Manufacturer: syz [ 1146.368235][ T5852] usb 4-1: SerialNumber: syz [ 1146.449118][ T5852] usb 4-1: config 0 descriptor?? [ 1146.700375][ T8107] udevd[8107]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1146.850595][ T5852] usb 4-1: USB disconnect, device number 15 [ 1146.907515][T15305] netlink: 'syz.0.4043': attribute type 61 has an invalid length. [ 1147.225047][ T9756] udevd[9756]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1148.303484][T15320] loop1: detected capacity change from 0 to 256 [ 1149.191925][T15331] loop1: detected capacity change from 0 to 16 [ 1149.289837][T15331] erofs (device loop1): mounted with root inode @ nid 36. [ 1149.760112][T15335] loop4: detected capacity change from 0 to 1024 [ 1150.140708][T15335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1150.497942][T15335] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 1150.506339][T15335] EXT4-fs (loop4): stripe (248) is not aligned with cluster size (16), stripe is disabled [ 1150.539432][T15347] loop3: detected capacity change from 0 to 64 [ 1150.611378][T15347] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1150.708849][T15335] EXT4-fs (loop4): changing journal_checksum during remount not supported; ignoring [ 1150.826993][T15349] sctp: [Deprecated]: syz.2.4063 (pid 15349) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1150.826993][T15349] Use struct sctp_sack_info instead [ 1150.888029][T15335] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1151.578889][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1151.998101][T14033] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1152.245218][T14033] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1152.256933][T14033] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1152.267250][T14033] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1152.277337][T14033] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.492344][T14033] usb 2-1: config 0 descriptor?? [ 1153.063686][T14033] razer 0003:1532:010E.0037: unknown main item tag 0x1 [ 1153.071295][T14033] razer 0003:1532:010E.0037: ignoring exceeding usage max [ 1153.179670][T14033] razer 0003:1532:010E.0037: failed to enable macro keys: -71 [ 1153.217176][T14033] razer 0003:1532:010E.0037: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.1-1/input0 [ 1153.308576][T14033] usb 2-1: USB disconnect, device number 31 [ 1157.902839][T15420] loop2: detected capacity change from 0 to 256 [ 1157.936484][T15420] exfat: Deprecated parameter 'namecase' [ 1157.942624][T15420] exfat: Deprecated parameter 'utf8' [ 1158.133401][T15420] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d) [ 1158.297390][ T30] audit: type=1800 audit(1745457277.994:176): pid=15420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4099" name="file1" dev="loop2" ino=382 res=0 errno=0 [ 1159.941408][T14587] Bluetooth: hci4: command 0x0405 tx timeout [ 1160.097359][T15435] loop3: detected capacity change from 0 to 32768 [ 1160.247166][T15435] JBD2: Ignoring recovery information on journal [ 1160.389323][T15435] (syz.3.4105,15435,0):ocfs2_get_truncate_log_info:6193 ERROR: status = -117 [ 1160.402595][T15435] (syz.3.4105,15435,0):ocfs2_truncate_log_init:6363 ERROR: status = -117 [ 1160.411853][T15435] (syz.3.4105,15435,0):ocfs2_mount_volume:1770 ERROR: status = -117 [ 1160.474688][T15435] (syz.3.4105,15435,0):ocfs2_fill_super:1177 ERROR: status = -117 [ 1161.228626][T15451] loop2: detected capacity change from 0 to 512 [ 1161.496600][T15448] loop1: detected capacity change from 0 to 4096 [ 1161.530390][T15448] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1161.625084][T15451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1161.641923][T15451] ext4 filesystem being mounted at /865/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1162.378687][T15448] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 1162.474277][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1163.909265][T12517] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 1163.946690][T15466] loop4: detected capacity change from 0 to 40427 [ 1163.959609][T15466] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 512) [ 1163.967836][T15466] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1163.984660][T15466] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x3fffff [ 1163.987563][ T5788] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 1164.000701][ T5788] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1164.004539][T15466] F2FS-fs (loop4): invalid crc value [ 1164.011106][ T5788] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 1164.252122][ T3622] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 1164.522564][T15466] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1164.530169][T15466] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1165.650024][T15479] loop1: detected capacity change from 0 to 512 [ 1165.669328][T15479] EXT4-fs: Ignoring removed oldalloc option [ 1165.810960][T15479] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.4119: Parent and EA inode have the same ino 15 [ 1165.990646][T15479] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.4119: Parent and EA inode have the same ino 15 [ 1166.051671][T15479] EXT4-fs (loop1): 1 orphan inode deleted [ 1166.060727][T15479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1166.083308][T15485] loop2: detected capacity change from 0 to 256 [ 1166.966810][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1167.741631][T15487] loop3: detected capacity change from 0 to 40427 [ 1167.789159][T15487] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 1167.798805][T15487] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1171.047868][T15514] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4135'. [ 1171.057375][T15514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1171.459793][ T5852] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1171.695632][ T5852] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1171.708968][ T5852] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1171.777749][ T5852] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1171.787884][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.799397][ T5852] usb 3-1: Product: syz [ 1171.803860][ T5852] usb 3-1: Manufacturer: syz [ 1171.809073][ T5852] usb 3-1: SerialNumber: syz [ 1171.848186][ T5852] usb 3-1: config 0 descriptor?? [ 1172.352162][ T5852] mos7840 3-1:0.0: required endpoints missing [ 1172.447135][ T5852] usb 3-1: USB disconnect, device number 24 [ 1172.483054][ T5985] udevd[5985]: setting owner of /dev/bus/usb/003/024 to uid=0, gid=0 failed: No such file or directory [ 1172.566680][T15527] loop1: detected capacity change from 0 to 512 [ 1172.726446][T15527] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 1172.833816][T15527] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4142: invalid indirect mapped block 2683928664 (level 1) [ 1172.851702][T15535] loop4: detected capacity change from 0 to 256 [ 1172.871315][T15527] EXT4-fs (loop1): Remounting filesystem read-only [ 1172.906324][T15527] EXT4-fs (loop1): 1 truncate cleaned up [ 1172.914837][T15527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1173.539220][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1173.765204][T15535] FAT-fs (loop4): Directory bread(block 64) failed [ 1173.765354][T15535] FAT-fs (loop4): Directory bread(block 65) failed [ 1173.765622][T15535] FAT-fs (loop4): Directory bread(block 66) failed [ 1173.765747][T15535] FAT-fs (loop4): Directory bread(block 67) failed [ 1173.766334][T15535] FAT-fs (loop4): Directory bread(block 68) failed [ 1173.766459][T15535] FAT-fs (loop4): Directory bread(block 69) failed [ 1173.766720][T15535] FAT-fs (loop4): Directory bread(block 70) failed [ 1173.766840][T15535] FAT-fs (loop4): Directory bread(block 71) failed [ 1173.767101][T15535] FAT-fs (loop4): Directory bread(block 72) failed [ 1173.767235][T15535] FAT-fs (loop4): Directory bread(block 73) failed [ 1175.828775][T15563] sp0: Synchronizing with TNC [ 1176.294139][T15566] x_tables: ip_tables: udp match: only valid for protocol 17 [ 1176.585437][T15570] mkiss: ax0: crc mode is auto. [ 1177.249703][T15578] loop4: detected capacity change from 0 to 256 [ 1177.547662][T15578] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1177.558406][T15578] FAT-fs (loop4): Filesystem has been set read-only [ 1181.090468][ T30] audit: type=1326 audit(1745457300.774:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15623 comm="syz.2.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50f58e969 code=0x7ffc0000 [ 1181.117158][ T30] audit: type=1326 audit(1745457300.774:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15623 comm="syz.2.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50f58e969 code=0x7ffc0000 [ 1181.140620][ T30] audit: type=1326 audit(1745457300.794:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15623 comm="syz.2.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fe50f58e969 code=0x7ffc0000 [ 1181.166586][ T30] audit: type=1326 audit(1745457300.794:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15623 comm="syz.2.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50f58e969 code=0x7ffc0000 [ 1181.193766][ T30] audit: type=1326 audit(1745457300.794:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15623 comm="syz.2.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50f58e969 code=0x7ffc0000 [ 1181.920109][T15636] loop6: detected capacity change from 0 to 524287999 [ 1181.957531][T15636] Buffer I/O error on dev loop6, logical block 0, async page read [ 1181.966115][T15636] Buffer I/O error on dev loop6, logical block 0, async page read [ 1181.974432][T15636] Buffer I/O error on dev loop6, logical block 0, async page read [ 1181.982974][T15636] Buffer I/O error on dev loop6, logical block 0, async page read [ 1181.991547][T15636] Buffer I/O error on dev loop6, logical block 0, async page read [ 1182.007560][T15636] Buffer I/O error on dev loop6, logical block 0, async page read [ 1182.015844][T15636] Buffer I/O error on dev loop6, logical block 0, async page read [ 1182.025554][T15636] Buffer I/O error on dev loop6, logical block 0, async page read [ 1182.034241][T15636] ldm_validate_partition_table(): Disk read failed. [ 1182.041528][T15636] Buffer I/O error on dev loop6, logical block 0, async page read [ 1182.049850][T15636] Buffer I/O error on dev loop6, logical block 0, async page read [ 1182.058325][T15636] Dev loop6: unable to read RDB block 0 [ 1182.064662][T15636] loop6: unable to read partition table [ 1182.175150][T15636] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 1187.485373][T15677] loop2: detected capacity change from 0 to 32768 [ 1187.552446][T15677] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1187.565067][T15677] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 1187.680415][T15677] gfs2: fsid=syz:syz.s: journal 0 mapped with 7 extents in 0ms [ 1187.744823][T15677] syz.2.4210: attempt to access beyond end of device [ 1187.744823][T15677] loop2: rw=0, sector=11258999068428752, nr_sectors = 8 limit=32768 [ 1188.891824][T15692] loop1: detected capacity change from 0 to 40427 [ 1188.903374][T15692] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(4) [ 1188.911583][T15692] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1188.950096][T15677] gfs2: fsid=syz:syz.s: Error parsing journal for spectator mount. [ 1189.631614][T15692] F2FS-fs (loop1): invalid crc value [ 1190.130086][T15692] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1190.137751][T15692] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1190.372215][T15714] loop4: detected capacity change from 0 to 128 [ 1192.160058][T15729] Cannot find add_set index 4 as target [ 1192.390736][T15733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4235'. [ 1192.400360][T15733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4235'. [ 1194.074076][T15749] loop4: detected capacity change from 0 to 1024 [ 1194.156057][T15745] loop1: detected capacity change from 0 to 32768 [ 1194.426445][T15745] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,norecovery,nojournal_transaction_names,nocow [ 1194.426445][T15745] allowing incompatible features above 0.0: (unknown version) [ 1194.457042][T15745] bcachefs (loop1): invalid bkey in superblock btree=extents level=0: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 1194.457179][T15745] size == 0, deleting [ 1194.486449][T15745] bcachefs (loop1): invalid bkey in superblock btree=dirents level=1: u64s 11 type extent SPOS_MAX len 0 ver 281474976710656: durability: 0 (invalid extent entry 0000000000000000) [ 1194.486584][T15745] invalid key type for btree internal btree node (extent), deleting [ 1194.522299][T15745] bcachefs (loop1): invalid bkey in superblock btree=snapshots level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 255 ver 18446462598732840960: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 1194.522436][T15745] size != 0, deleting [ 1194.552333][T15745] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 1194.562057][T15745] bcachefs (loop1): Version upgrade required: [ 1194.562057][T15745] Version upgrade from 0.12: snapshot to 1.7: mi_btree_bitmap incomplete [ 1194.562057][T15745] Doing incompatible version upgrade from 0.12: snapshot to 1.25: extent_flags [ 1194.562057][T15745] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 1194.681522][T15745] bcachefs (loop1): bcachefs (loop1): error validating btree node at btree inodes level 0/0 [ 1194.681639][T15745] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 1194.681772][T15745] node offset 16/24 bset u64s 110 bset byte offset 792: keys out of order: u64s 18 type inode_v3 7696581394432:536870913:U32_MAX len 0 ver 0 > u64s 18 type inode_v3 0:536870914:U32_MAX len 0 ver 0, fixing [ 1194.744258][T15745] bcachefs (loop1): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 7696581394432:536870913:U32_MAX len 0 ver 0: (unpack error) [ 1194.744404][T15745] nonzero k.p.inode, deleting [ 1194.769196][T15745] bcachefs (loop1): btree_node_read_work: rewriting btree node at due to error [ 1194.769196][T15745] btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 1194.823808][T15745] bcachefs (loop1): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 1194.838915][T15745] bcachefs (loop1): bcachefs (loop1): error validating btree node on loop1 at btree alloc level 0/0 [ 1194.839036][T15745] u64s 11 type btree_ptr_v2 18446744069414649855:U64_MAX:U32_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 1194.839159][T15745] node offset 0/24 bset u64s 0: incorrect max key SPOS_MAX, btree topology error: [ 1194.887624][T15745] bcachefs (loop1): flagging btree alloc lost data [ 1194.899359][T15745] bcachefs (loop1): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 1194.909326][T12517] hfsplus: b-tree write err: -5, ino 4 [ 1194.971976][T15745] bcachefs (loop1): bcachefs (loop1): error validating btree node on loop1 at btree freespace level 0/0 [ 1194.972110][T15745] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key 0:3703155162349568:0 durability: 1 ptr: 0:29:0 gen 0 [ 1194.972229][T15745] node offset 0/32 bset u64s 0: checksum error, type none: got should be , shutting down [ 1194.972320][T15745] inconsistency detected - emergency read only at journal seq 10 [ 1195.031652][T15745] bcachefs (loop1): flagging btree freespace lost data [ 1195.041184][T15745] bcachefs (loop1): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 1195.063330][T15745] bcachefs (loop1): bcachefs (loop1): error validating btree node at btree backpointers level 0/0 [ 1195.063441][T15745] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0 [ 1195.063545][T15745] node offset 8/24 bset u64s 42 bset byte offset 264: key extends past end of bset, shutting down [ 1195.106534][T15745] bcachefs (loop1): flagging btree backpointers lost data [ 1195.119110][T15745] bcachefs (loop1): error reading btree root btree=backpointers level=0: btree_node_read_error, fixing [ 1195.143108][T15745] bcachefs (loop1): check_topology... done [ 1195.153509][T15745] bcachefs (loop1): accounting_read... done [ 1195.164064][T15745] bcachefs (loop1): alloc_read... done [ 1195.170368][T15745] bcachefs (loop1): snapshots_read... done [ 1195.183339][T15745] bcachefs (loop1): done starting filesystem [ 1195.243826][T15762] loop2: detected capacity change from 0 to 8 [ 1195.330224][ T5788] bcachefs (loop1): shutting down [ 1195.398334][T15762] cramfs: Error -3 while decompressing! [ 1195.404158][T15762] cramfs: ffffffff94e485e8(26)->ffff888050493000(4096) [ 1195.415713][T15762] cramfs: Error -3 while decompressing! [ 1195.426471][T15762] cramfs: ffffffff94e48602(26)->ffff888050492000(4096) [ 1195.433692][T15762] cramfs: Error -3 while decompressing! [ 1195.440783][T15762] cramfs: ffffffff94e4861c(16)->ffff8880259d7000(4096) [ 1195.452358][T15762] cramfs: Error -3 while decompressing! [ 1195.459434][T15762] cramfs: ffffffff94e485e8(26)->ffff888050493000(4096) [ 1195.552436][ T5788] bcachefs (loop1): shutdown complete [ 1195.631844][T15769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4247'. [ 1197.947870][T15794] ===================================================== [ 1197.955279][T15794] BUG: KMSAN: uninit-value in xfrm_state_find+0x23e2/0xab10 [ 1197.963215][T15794] xfrm_state_find+0x23e2/0xab10 [ 1197.968519][T15794] xfrm_resolve_and_create_bundle+0x829/0x59e0 [ 1197.980185][T15794] xfrm_lookup_with_ifid+0x457/0x3790 [ 1197.985854][T15794] xfrm_lookup_route+0x63/0x2b0 [ 1197.992946][T15794] ip_route_output_flow+0x21d/0x2b0 [ 1197.998659][T15794] __ip4_datagram_connect+0xc2f/0x12c0 [ 1198.004370][T15794] __ip6_datagram_connect+0x200/0x1580 [ 1198.010271][T15794] ip6_datagram_connect_v6_only+0xa7/0x110 [ 1198.016520][T15794] inet_dgram_connect+0x2e9/0x6a0 [ 1198.021799][T15794] __sys_connect+0x581/0x690 [ 1198.026789][T15794] __x64_sys_connect+0x91/0xe0 [ 1198.031818][T15794] x64_sys_call+0x25b3/0x3c80 [ 1198.036915][T15794] do_syscall_64+0xcd/0x1b0 [ 1198.041644][T15794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.048438][T15794] [ 1198.050923][T15794] Local variable tmp.i.i created at: [ 1198.056519][T15794] xfrm_resolve_and_create_bundle+0x373/0x59e0 [ 1198.062913][T15794] xfrm_lookup_with_ifid+0x457/0x3790 [ 1198.068690][T15794] [ 1198.071175][T15794] CPU: 1 UID: 0 PID: 15794 Comm: syz.4.4260 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(undef) [ 1198.090622][T15794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1198.101025][T15794] ===================================================== [ 1198.108243][T15794] Disabling lock debugging due to kernel taint [ 1198.114533][T15794] Kernel panic - not syncing: kmsan.panic set ... [ 1198.121157][T15794] CPU: 1 UID: 0 PID: 15794 Comm: syz.4.4260 Tainted: G B 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(undef) [ 1198.135165][T15794] Tainted: [B]=BAD_PAGE [ 1198.139515][T15794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1198.149773][T15794] Call Trace: [ 1198.153211][T15794] [ 1198.156287][T15794] dump_stack_lvl+0x216/0x2d0 [ 1198.161215][T15794] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1198.167251][T15794] dump_stack+0x1e/0x24 [ 1198.171617][T15794] panic+0x4e5/0xcf0 [ 1198.175751][T15794] ? __pfx_kmsan_save_stack_with_flags+0x10/0x10 [ 1198.182388][T15794] kmsan_report+0x2ca/0x2d0 [ 1198.187109][T15794] ? __msan_warning+0x95/0x120 [ 1198.192110][T15794] ? xfrm_state_find+0x23e2/0xab10 [ 1198.197462][T15794] ? xfrm_resolve_and_create_bundle+0x829/0x59e0 [ 1198.204034][T15794] ? xfrm_lookup_with_ifid+0x457/0x3790 [ 1198.209789][T15794] ? xfrm_lookup_route+0x63/0x2b0 [ 1198.215018][T15794] ? ip_route_output_flow+0x21d/0x2b0 [ 1198.220611][T15794] ? __ip4_datagram_connect+0xc2f/0x12c0 [ 1198.226485][T15794] ? __ip6_datagram_connect+0x200/0x1580 [ 1198.232433][T15794] ? ip6_datagram_connect_v6_only+0xa7/0x110 [ 1198.238655][T15794] ? inet_dgram_connect+0x2e9/0x6a0 [ 1198.244081][T15794] ? __sys_connect+0x581/0x690 [ 1198.249081][T15794] ? __x64_sys_connect+0x91/0xe0 [ 1198.254282][T15794] ? x64_sys_call+0x25b3/0x3c80 [ 1198.259435][T15794] ? do_syscall_64+0xcd/0x1b0 [ 1198.264308][T15794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.270616][T15794] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1198.276652][T15794] ? kmsan_get_metadata+0x13e/0x1c0 [ 1198.282054][T15794] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1198.288068][T15794] ? xfrm_state_find+0x19a/0xab10 [ 1198.293475][T15794] ? filter_irq_stacks+0x60/0x1b0 [ 1198.298692][T15794] ? kmsan_get_metadata+0x13e/0x1c0 [ 1198.304112][T15794] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1198.310117][T15794] ? __xfrm_dst_hash+0x341/0x640 [ 1198.315349][T15794] __msan_warning+0x95/0x120 [ 1198.320180][T15794] xfrm_state_find+0x23e2/0xab10 [ 1198.325429][T15794] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1198.331473][T15794] ? kmsan_get_metadata+0x13e/0x1c0 [ 1198.336893][T15794] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1198.343258][T15794] xfrm_resolve_and_create_bundle+0x829/0x59e0 [ 1198.349661][T15794] ? filter_irq_stacks+0x60/0x1b0 [ 1198.354940][T15794] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1198.360953][T15794] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1198.366970][T15794] ? kmsan_get_metadata+0x13e/0x1c0 [ 1198.372362][T15794] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1198.378389][T15794] xfrm_lookup_with_ifid+0x457/0x3790 [ 1198.384016][T15794] ? ip_route_output_key_hash_rcu+0x3459/0x3810 [ 1198.390540][T15794] ? kmsan_get_metadata+0x13e/0x1c0 [ 1198.395994][T15794] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1198.402018][T15794] xfrm_lookup_route+0x63/0x2b0 [ 1198.407104][T15794] ip_route_output_flow+0x21d/0x2b0 [ 1198.412512][T15794] __ip4_datagram_connect+0xc2f/0x12c0 [ 1198.418258][T15794] __ip6_datagram_connect+0x200/0x1580 [ 1198.423994][T15794] ? lock_sock_nested+0x1de/0x200 [ 1198.429253][T15794] ip6_datagram_connect_v6_only+0xa7/0x110 [ 1198.435301][T15794] ? __pfx_ip6_datagram_connect_v6_only+0x10/0x10 [ 1198.441988][T15794] inet_dgram_connect+0x2e9/0x6a0 [ 1198.447257][T15794] ? kmsan_get_metadata+0x13e/0x1c0 [ 1198.452661][T15794] ? __pfx_inet_dgram_connect+0x10/0x10 [ 1198.458463][T15794] __sys_connect+0x581/0x690 [ 1198.463335][T15794] ? kmsan_get_metadata+0x13e/0x1c0 [ 1198.468796][T15794] ? kmsan_internal_set_shadow_origin+0x6c/0x100 [ 1198.475372][T15794] ? kmsan_get_metadata+0x13e/0x1c0 [ 1198.480776][T15794] __x64_sys_connect+0x91/0xe0 [ 1198.485825][T15794] x64_sys_call+0x25b3/0x3c80 [ 1198.490729][T15794] do_syscall_64+0xcd/0x1b0 [ 1198.495426][T15794] ? clear_bhb_loop+0x25/0x80 [ 1198.500309][T15794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.506409][T15794] RIP: 0033:0x7f853598e969 [ 1198.510983][T15794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1198.530811][T15794] RSP: 002b:00007f853680f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1198.539429][T15794] RAX: ffffffffffffffda RBX: 00007f8535bb5fa0 RCX: 00007f853598e969 [ 1198.547570][T15794] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 1198.555727][T15794] RBP: 00007f8535a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1198.563874][T15794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1198.572005][T15794] R13: 0000000000000000 R14: 00007f8535bb5fa0 R15: 00007ffdf81a7fd8 [ 1198.580199][T15794] [ 1198.583729][T15794] Kernel Offset: disabled [ 1198.588141][T15794] Rebooting in 86400 seconds..