last executing test programs: 4.711221439s ago: executing program 3 (id=1449): r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000080)=0x80, 0x4) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0) 4.516580072s ago: executing program 3 (id=1451): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x38d, &(0x7f0000000040)={0x0, 0xcec4, 0x4000, 0x1, 0x176}, &(0x7f0000000100), &(0x7f0000000140), 0x0) 4.34648631s ago: executing program 3 (id=1454): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x1, 0x1, 0xfb, 0xbe3b, 0x1, "c74192f3b7e8720700000000000010ee0800", 0x0, 0x8}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x8) 4.302558708s ago: executing program 0 (id=1455): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0xfffffec1) read$FUSE(r0, &(0x7f0000006540)={0x2020}, 0xfffffce2) 4.11177906s ago: executing program 3 (id=1456): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x304) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="080000000100000005"], 0x300) 2.906398502s ago: executing program 0 (id=1469): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 2.716326804s ago: executing program 0 (id=1463): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.916145488s ago: executing program 3 (id=1466): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0xe9db8df3, @local, 0x3}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3e, &(0x7f0000000180)={0x200000000000001}, 0x8) 1.24638583s ago: executing program 1 (id=1472): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={0x28, 0x5a, 0x1, 0x70bd28, 0x0, {}, [@typed={0x14, 0x5, 0x0, 0x0, @ipv6=@local}]}, 0x28}}, 0x0) 1.162120495s ago: executing program 1 (id=1473): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 1.076717049s ago: executing program 2 (id=1474): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x707, 0x70bd2b, 0xfffffffe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, 0x1c}, 0x1, 0x0, 0x0, 0x20080080}, 0x0) 1.014589079s ago: executing program 2 (id=1476): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x17, 0x56, 0xd23}, 0x18}}, 0x0) 824.621121ms ago: executing program 0 (id=1477): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) 813.825493ms ago: executing program 3 (id=1478): bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000009640)='./file0\x00', 0x1008080, &(0x7f0000000280)={[{@lazytime}, {@nodiscard}, {@filestreams}, {@uqnoenforce}, {@prjquota}, {@pqnoenforce}]}, 0x4, 0x9647, &(0x7f0000012cc0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 781.319028ms ago: executing program 2 (id=1479): prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) r0 = gettid() tkill(r0, 0x11) 662.712098ms ago: executing program 1 (id=1480): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000640)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r1, 0x5, 0x30}, 0xc) 567.570924ms ago: executing program 2 (id=1481): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, r1, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}}, 0x0) 566.839934ms ago: executing program 0 (id=1482): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x481, @none, 0x0, 0x2}, 0xe) 465.951371ms ago: executing program 1 (id=1483): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 380.562235ms ago: executing program 2 (id=1484): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 328.274084ms ago: executing program 0 (id=1485): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{&(0x7f0000000780)=[{0xffffffffffff0001, 0xfffffffffffffff8, 0x400, {0x7, 0x550}, 0x7ff, 0xbd9c, 0x200}], 0x1, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x2, 0xffffffffffffff2d}, {0x0, 0x7, 0x8, 0x98f, 0xffff}}) 286.664002ms ago: executing program 1 (id=1486): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2d5, &(0x7f0000025dc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x2) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 196.721647ms ago: executing program 2 (id=1487): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@local=@item_012={0x2, 0x2, 0x0, "47f7"}, @main=@item_4={0x3, 0x0, 0x8, "d640cf5d"}, @global=@item_4={0x3, 0x1, 0x8, '\f\x00'}, @main=@item_012={0x2, 0x0, 0x8, "baff"}, @local=@item_4={0x3, 0x2, 0x3, "2be5a1f2"}, @main=@item_4={0x3, 0x0, 0x9}, @local=@item_4={0x3, 0x2, 0xd, "06d86efe"}, @local=@item_012={0x2, 0x2, 0x0, "5e0f"}]}}, 0x0}, 0x0) 0s ago: executing program 1 (id=1488): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa02, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x8, 0x3, 0x8, 0x2800, 0x6, 0x2, 0x1000ba2, 0x5, 0x30, {0x1, 0xffffffff}, 0xd0, 0x9}}) kernel console output (not intermixed with test programs): 8, idProduct=5014, bcdDevice= 0.00 [ 161.342221][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.383237][ T23] usb 4-1: config 0 descriptor?? [ 161.489552][ T7292] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 161.496945][ T7292] hfsplus: xattr searching failed [ 161.529278][ T28] audit: type=1804 audit(1776212402.073:6): pid=7295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.573" name="/newroot/149/file0/file1" dev="loop0" ino=20 res=1 errno=0 [ 161.588179][ T7295] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 161.661135][ T7299] loop1: detected capacity change from 0 to 64 [ 161.668388][ T7295] hfsplus: xattr searching failed [ 161.686485][ T7295] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 161.706605][ T7295] hfsplus: xattr searching failed [ 161.725455][ T7295] syz.0.573: attempt to access beyond end of device [ 161.725455][ T7295] loop0: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 161.764868][ T7295] Buffer I/O error on dev loop0, logical block 458752, async page read [ 161.769331][ T28] audit: type=1800 audit(1776212402.323:7): pid=7299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.576" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 161.786952][ T7295] hfsplus: unable to mark blocks free: error -5 [ 161.808907][ T7295] hfsplus: can't free extent [ 161.870072][ T23] input: HID 0458:5014 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5014.0006/input/input9 [ 162.005503][ T23] kye 0003:0458:5014.0006: input,hiddev0,hidraw0: USB HID v7f.fc Device [HID 0458:5014] on usb-dummy_hcd.3-1/input0 [ 162.099885][ T23] usb 4-1: USB disconnect, device number 5 [ 162.285343][ T7306] fido_id[7306]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 162.657414][ T7321] loop2: detected capacity change from 0 to 4096 [ 162.707470][ T7323] loop0: detected capacity change from 0 to 64 [ 162.758254][ T7323] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 162.927242][ T7327] netlink: 'syz.3.589': attribute type 29 has an invalid length. [ 163.009791][ T7327] netlink: 'syz.3.589': attribute type 29 has an invalid length. [ 163.036761][ T7328] netlink: 'syz.3.589': attribute type 29 has an invalid length. [ 163.368433][ T5816] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 163.568316][ T5816] usb 1-1: Using ep0 maxpacket: 16 [ 163.585678][ T5816] usb 1-1: too many endpoints for config 0 interface 0 altsetting 64: 129, using maximum allowed: 30 [ 163.618117][ T5816] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.648195][ T5816] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.678202][ T5816] usb 1-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 163.698187][ T5816] usb 1-1: config 0 interface 0 has no altsetting 0 [ 163.722298][ T5816] usb 1-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 163.748220][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.792766][ T5816] usb 1-1: config 0 descriptor?? [ 163.838450][ T7353] netlink: 'syz.2.601': attribute type 1 has an invalid length. [ 163.846759][ T7353] netlink: 244 bytes leftover after parsing attributes in process `syz.2.601'. [ 163.971753][ T7355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.602'. [ 164.063659][ T7357] loop2: detected capacity change from 0 to 256 [ 164.131269][ T7357] FAT-fs (loop2): Directory bread(block 64) failed [ 164.166528][ T7357] FAT-fs (loop2): Directory bread(block 65) failed [ 164.189990][ T7357] FAT-fs (loop2): Directory bread(block 66) failed [ 164.196771][ T7357] FAT-fs (loop2): Directory bread(block 67) failed [ 164.208553][ T7357] FAT-fs (loop2): Directory bread(block 68) failed [ 164.215311][ T7357] FAT-fs (loop2): Directory bread(block 69) failed [ 164.227169][ T7357] FAT-fs (loop2): Directory bread(block 70) failed [ 164.240045][ T7357] FAT-fs (loop2): Directory bread(block 71) failed [ 164.247700][ T7357] FAT-fs (loop2): Directory bread(block 72) failed [ 164.264962][ T7357] FAT-fs (loop2): Directory bread(block 73) failed [ 164.392784][ T28] audit: type=1800 audit(1776212404.953:8): pid=7357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.603" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=1048677 res=0 errno=0 [ 164.435453][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.466996][ T7347] loop1: detected capacity change from 0 to 32768 [ 164.510960][ T5816] usb 1-1: USB disconnect, device number 6 [ 164.582343][ T7347] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 164.622557][ T7347] JBD2: Ignoring recovery information on journal [ 164.739279][ T7347] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 165.080586][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 165.732235][ T7389] loop1: detected capacity change from 0 to 4096 [ 165.958327][ T7401] loop0: detected capacity change from 0 to 1024 [ 166.260816][ T7407] loop2: detected capacity change from 0 to 64 [ 166.484700][ T7409] loop3: detected capacity change from 0 to 4096 [ 166.542536][ T7409] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 166.639134][ T7409] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 166.748412][ T5816] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 166.959416][ T5816] usb 2-1: Using ep0 maxpacket: 8 [ 166.985120][ T5816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 166.988432][ T969] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 167.011478][ T5816] usb 2-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 167.031354][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.052555][ T5816] usb 2-1: config 0 descriptor?? [ 167.249483][ T969] usb 3-1: Using ep0 maxpacket: 16 [ 167.263458][ T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.306569][ T969] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.336895][ T969] usb 3-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 167.374501][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.416494][ T969] usb 3-1: config 0 descriptor?? [ 167.525670][ T5816] input: HID 0458:5014 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5014.0008/input/input10 [ 167.578648][ T7429] loop0: detected capacity change from 0 to 4096 [ 167.681357][ T7421] loop3: detected capacity change from 0 to 32768 [ 167.725988][ T5816] kye 0003:0458:5014.0008: input,hiddev0,hidraw0: USB HID v7f.fc Device [HID 0458:5014] on usb-dummy_hcd.1-1/input0 [ 167.754470][ T7421] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 167.790946][ T7421] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 167.845671][ T5816] usb 2-1: USB disconnect, device number 6 [ 167.924256][ T969] elecom 0003:056E:00FE.0009: unknown main item tag 0x6 [ 167.937913][ T7438] fido_id[7438]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 167.970737][ T969] elecom 0003:056E:00FE.0009: report_id 1915 is invalid [ 167.980988][ T969] elecom 0003:056E:00FE.0009: item 0 2 1 8 parsing failed [ 168.017836][ T969] elecom: probe of 0003:056E:00FE.0009 failed with error -22 [ 168.207559][ T969] usb 3-1: USB disconnect, device number 3 [ 168.269248][ T7421] XFS (loop3): Ending clean mount [ 168.287305][ T7421] XFS (loop3): Quotacheck needed: Please wait. [ 168.344546][ T7421] XFS (loop3): Quotacheck: Done. [ 169.080420][ T5772] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 169.303440][ T7447] loop1: detected capacity change from 0 to 32768 [ 169.370865][ T7447] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.641 (7447) [ 169.405607][ T7447] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 169.445353][ T7447] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 169.464687][ T7447] BTRFS info (device loop1): using free space tree [ 169.630500][ T7466] loop0: detected capacity change from 0 to 4096 [ 169.683140][ T7447] BTRFS info (device loop1): enabling ssd optimizations [ 169.741764][ T7485] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.755098][ T7447] BTRFS info (device loop1): auto enabling async discard [ 169.929212][ T7466] NILFS (loop0): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 169.978693][ T7466] NILFS (loop0): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 170.022646][ T7466] NILFS (loop0): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 170.044822][ T5770] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 170.058603][ T7466] NILFS (loop0): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 170.073744][ T7488] loop3: detected capacity change from 0 to 4096 [ 170.083811][ T7466] NILFS (loop0): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 170.137067][ T7466] NILFS (loop0): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 170.198487][ T7466] NILFS (loop0): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 170.221316][ T7466] NILFS (loop0): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 170.221835][ T7491] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.264686][ T7466] NILFS (loop0): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 170.329175][ T7466] NILFS (loop0): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 170.352585][ T7466] NILFS (loop0): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 170.374660][ T7466] NILFS (loop0): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 170.383474][ T7466] NILFS (loop0): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 170.392489][ T7466] NILFS (loop0): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 170.401161][ T7466] NILFS (loop0): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 170.409994][ T7466] NILFS (loop0): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 170.438184][ T7466] NILFS (loop0): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 170.446828][ T7466] NILFS (loop0): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 170.512651][ T7466] NILFS (loop0): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 170.568233][ T7466] NILFS (loop0): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 170.577022][ T7466] NILFS (loop0): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 170.626286][ T7466] NILFS (loop0): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 171.083967][ T28] audit: type=1800 audit(1776212411.623:9): pid=7505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.659" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 171.259140][ T7510] dccp_invalid_packet: P.Data Offset(4) too small [ 171.415115][ T7516] program syz.2.664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.536185][ T7521] loop0: detected capacity change from 0 to 256 [ 171.632269][ T7521] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 171.659697][ T28] audit: type=1326 audit(1776212412.223:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5379c819 code=0x7ffc0000 [ 171.728252][ T28] audit: type=1326 audit(1776212412.223:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5379c819 code=0x7ffc0000 [ 171.791808][ T28] audit: type=1326 audit(1776212412.223:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5379c819 code=0x7ffc0000 [ 171.823075][ T28] audit: type=1326 audit(1776212412.243:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5379c819 code=0x7ffc0000 [ 171.877951][ T28] audit: type=1326 audit(1776212412.243:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fab5379c819 code=0x7ffc0000 [ 171.909981][ T7526] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 171.996284][ T28] audit: type=1326 audit(1776212412.243:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5379c819 code=0x7ffc0000 [ 172.027527][ T28] audit: type=1326 audit(1776212412.243:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5379c819 code=0x7ffc0000 [ 172.044711][ T7528] loop1: detected capacity change from 0 to 4096 [ 172.086307][ T7528] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 172.130068][ T7528] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 172.200268][ T7528] ntfs: volume version 3.1. [ 172.240155][ T7538] netlink: 'syz.3.673': attribute type 13 has an invalid length. [ 172.284294][ T7538] netlink: 152 bytes leftover after parsing attributes in process `syz.3.673'. [ 172.305961][ T7538] : renamed from syz_tun (while UP) [ 172.335597][ T7538] : refused to change device tx_queue_len [ 172.362019][ T7538] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 172.706511][ T7552] loop2: detected capacity change from 0 to 64 [ 172.935390][ T5768] hfs: node 4:3 still has 1 user(s)! [ 173.213028][ T7569] macsec1: entered promiscuous mode [ 173.230189][ T7569] macsec1: entered allmulticast mode [ 173.901944][ T7567] loop2: detected capacity change from 0 to 32768 [ 173.911030][ T7587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.697'. [ 173.921340][ T7567] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.685 (7567) [ 173.982042][ T7567] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 174.002538][ T7567] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 174.025426][ T7567] BTRFS info (device loop2): setting nodatasum [ 174.046709][ T7567] BTRFS info (device loop2): force zlib compression, level 3 [ 174.082789][ T7567] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 174.108113][ T7567] BTRFS info (device loop2): use lzo compression, level 0 [ 174.108131][ T969] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 174.148196][ T7567] BTRFS info (device loop2): turning on flush-on-commit [ 174.155342][ T7567] BTRFS info (device loop2): enabling auto defrag [ 174.184688][ T7567] BTRFS info (device loop2): max_inline at 4096 [ 174.194962][ T7567] BTRFS info (device loop2): using free space tree [ 174.290682][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.309096][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.319843][ T969] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 174.329334][ T969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.340297][ T969] usb 1-1: config 0 descriptor?? [ 174.365497][ T7567] BTRFS info (device loop2): enabling ssd optimizations [ 174.448208][ T5816] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 174.471640][ T7583] loop3: detected capacity change from 0 to 32768 [ 174.557713][ T5768] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 174.618676][ T7583] ERROR: (device loop3): diWrite: ixpxd invalid [ 174.618676][ T7583] [ 174.658198][ T7583] ERROR: (device loop3): remounting filesystem as read-only [ 174.671354][ T5816] usb 2-1: Using ep0 maxpacket: 16 [ 174.690954][ T5816] usb 2-1: unable to get BOS descriptor or descriptor too short [ 174.693085][ T7583] ERROR: (device loop3): txCommit: [ 174.693085][ T7583] [ 174.713742][ T5816] usb 2-1: config 127 has an invalid interface number: 124 but max is 0 [ 174.746044][ T5816] usb 2-1: config 127 has no interface number 0 [ 174.766312][ T5816] usb 2-1: config 127 interface 124 has no altsetting 0 [ 174.777962][ T6247] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (6247) [ 174.801853][ T5816] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 174.819252][ T969] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 174.836390][ T969] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 174.838930][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.848224][ T969] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 174.860159][ T969] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 174.883912][ T969] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 174.896516][ T5816] usb 2-1: Product: syz [ 174.898453][ T969] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 174.917300][ T969] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 174.921159][ T5816] usb 2-1: Manufacturer: syz [ 174.951285][ T5816] usb 2-1: SerialNumber: syz [ 174.962857][ T969] arvo 0003:1E7D:30D4.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 175.045438][ T969] arvo 0003:1E7D:30D4.000A: couldn't init struct arvo_device [ 175.078373][ T969] arvo 0003:1E7D:30D4.000A: couldn't install keyboard [ 175.109834][ T969] arvo: probe of 0003:1E7D:30D4.000A failed with error -71 [ 175.168552][ T969] usb 1-1: USB disconnect, device number 7 [ 175.244956][ T7609] fido_id[7609]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 175.924561][ T7616] loop0: detected capacity change from 0 to 4096 [ 175.948108][ T7616] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 175.960536][ T5816] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 176.034605][ T7616] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 176.086140][ T7608] loop2: detected capacity change from 0 to 40427 [ 176.128363][ T7608] F2FS-fs (loop2): build fault injection attr: rate: 684, type: 0x7ffff [ 176.157293][ T7608] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 176.178392][ T7608] F2FS-fs (loop2): Image doesn't support compression [ 176.194204][ T5816] usb 2-1: device firmware changed [ 176.215229][ T7608] F2FS-fs (loop2): invalid crc value [ 176.224732][ T7608] F2FS-fs (loop2): Found nat_bits in checkpoint [ 176.253022][ T5816] usb 2-1: USB disconnect, device number 7 [ 176.328248][ T5769] ntfs3: loop0: ino=1a, ntfs_sync_fs failed, -22. [ 176.437702][ T7608] F2FS-fs (loop2): Start checkpoint disabled! [ 176.452372][ T5816] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 176.467663][ T7608] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 176.594252][ T7617] loop3: detected capacity change from 0 to 32768 [ 176.641753][ T5816] usb 2-1: Using ep0 maxpacket: 16 [ 176.659638][ T7617] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 176.683673][ T5816] usb 2-1: config 127 has an invalid interface number: 124 but max is 0 [ 176.707452][ T5816] usb 2-1: config 127 has no interface number 0 [ 176.735115][ T5816] usb 2-1: config 127 interface 124 has no altsetting 0 [ 176.768663][ T5816] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 176.825927][ T31] kworker/u4:2: attempt to access beyond end of device [ 176.825927][ T31] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 176.831605][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.850054][ T31] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 176.857971][ T31] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 176.892039][ T7617] XFS (loop3): Ending clean mount [ 176.912560][ T5816] usb 2-1: Product: syz [ 176.921969][ T5816] usb 2-1: Manufacturer: syz [ 176.926746][ T5816] usb 2-1: SerialNumber: syz [ 176.944293][ T7617] XFS (loop3): Quotacheck needed: Please wait. [ 177.087487][ T7617] XFS (loop3): Quotacheck: Done. [ 177.374947][ T5772] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 177.817363][ T7646] loop1: detected capacity change from 0 to 2048 [ 177.930643][ T7646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.015997][ T7646] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.084047][ T7659] loop2: detected capacity change from 0 to 8 [ 178.099591][ T5816] usb 2-1: USB disconnect, device number 8 [ 178.117056][ T7657] Bluetooth: MGMT ver 1.22 [ 178.454467][ T7666] comedi comedi0: pcl812: I/O port conflict (0x8001,16) [ 178.542551][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.982573][ T7683] loop1: detected capacity change from 0 to 64 [ 179.057153][ T7687] loop3: detected capacity change from 0 to 512 [ 179.099415][ T7683] Trying to free block not in datazone [ 179.111450][ T7687] EXT4-fs (loop3): orphan cleanup on readonly fs [ 179.159782][ T7687] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 179.171562][ T7687] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 179.194035][ T7687] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.730: attempt to clear invalid blocks 2 len 1 [ 179.213793][ T7687] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.730: invalid indirect mapped block 1819239214 (level 0) [ 179.236613][ T7687] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.730: invalid indirect mapped block 1819239214 (level 1) [ 179.293996][ T7687] EXT4-fs (loop3): 1 truncate cleaned up [ 179.306434][ T7687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 179.333319][ T7693] loop2: detected capacity change from 0 to 2048 [ 179.404547][ T7693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.481783][ T7693] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.532338][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.662306][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.011484][ T7713] loop2: detected capacity change from 0 to 512 [ 180.019088][ T7707] loop3: detected capacity change from 0 to 4096 [ 180.033386][ T7713] EXT4-fs: Ignoring removed nobh option [ 180.056340][ T7713] EXT4-fs: Ignoring removed mblk_io_submit option [ 180.087820][ T7707] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 180.128592][ T7707] ntfs3: loop3: Failed to load $Extend (-22). [ 180.148209][ T7707] ntfs3: loop3: Failed to initialize $Extend. [ 180.235805][ T7713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.268249][ T7713] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.284971][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 180.284987][ T28] audit: type=1800 audit(1776212420.833:24): pid=7707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.738" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 180.496807][ T7713] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz.2.741: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 180.516839][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.557668][ T7713] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz.2.741: directory missing '.' [ 180.756186][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.951438][ T7734] loop2: detected capacity change from 0 to 64 [ 181.466780][ T7722] loop1: detected capacity change from 0 to 40427 [ 181.509038][ T7722] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 181.517638][ T7722] F2FS-fs (loop1): Image doesn't support compression [ 181.534782][ T7722] F2FS-fs (loop1): Image doesn't support compression [ 181.589943][ T7722] F2FS-fs (loop1): invalid crc value [ 181.648126][ T7722] F2FS-fs (loop1): Found nat_bits in checkpoint [ 181.837217][ T7722] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 182.077333][ T5770] syz-executor: attempt to access beyond end of device [ 182.077333][ T5770] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 182.123188][ T5770] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 182.207767][ T7740] loop3: detected capacity change from 0 to 32768 [ 182.247134][ T7740] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 182.529879][ T6247] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 182.788890][ T7755] loop0: detected capacity change from 0 to 40427 [ 182.829017][ T7755] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 182.835449][ T7755] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 182.872616][ T7755] F2FS-fs (loop0): invalid crc value [ 183.188407][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 183.213166][ T7755] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 183.223428][ T7755] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 183.290720][ T7761] loop2: detected capacity change from 0 to 32768 [ 183.318299][ T7761] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.762 (7761) [ 183.398341][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 183.406412][ T7761] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 183.428755][ T27] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 183.439695][ T27] usb 4-1: config 0 has no interface number 0 [ 183.448500][ T7761] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 183.474697][ T7761] BTRFS info (device loop2): force zlib compression, level 3 [ 183.486553][ T27] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 183.499587][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.507855][ T7761] BTRFS info (device loop2): force clearing of disk cache [ 183.521005][ T27] usb 4-1: Product: syz [ 183.526374][ T7761] BTRFS info (device loop2): setting nodatasum [ 183.546674][ T27] usb 4-1: Manufacturer: syz [ 183.554515][ T7761] BTRFS info (device loop2): doing ref verification [ 183.563992][ T5769] syz-executor: attempt to access beyond end of device [ 183.563992][ T5769] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 183.578384][ T27] usb 4-1: SerialNumber: syz [ 183.590609][ T7761] BTRFS info (device loop2): allowing degraded mounts [ 183.597526][ T7761] BTRFS info (device loop2): using free space tree [ 183.604715][ T5769] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 183.613058][ T27] usb 4-1: config 0 descriptor?? [ 183.635291][ T27] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 183.782084][ T7761] BTRFS info (device loop2): enabling ssd optimizations [ 183.798222][ T7761] BTRFS info (device loop2): auto enabling async discard [ 183.832943][ T7761] BTRFS info (device loop2): rebuilding free space tree [ 183.890608][ T27] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 183.919679][ T27] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 184.089174][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 184.177730][ T5768] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 184.300301][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 184.312199][ T27] usb 4-1: USB disconnect, device number 6 [ 184.347657][ T27] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 184.413074][ T27] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 184.463542][ T27] quatech2 4-1:0.51: device disconnected [ 184.585005][ T7802] loop1: detected capacity change from 0 to 512 [ 184.638623][ T7802] EXT4-fs: Ignoring removed bh option [ 184.682273][ T7802] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 184.776166][ T7802] EXT4-fs (loop1): 1 truncate cleaned up [ 184.798455][ T969] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 184.833715][ T7802] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.973596][ T7808] loop0: detected capacity change from 0 to 256 [ 185.007262][ T7808] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 185.062968][ T7802] EXT4-fs warning (device loop1): ext4_group_add:1742: No reserved GDT blocks, can't resize [ 185.078188][ T969] usb 3-1: Using ep0 maxpacket: 16 [ 185.086857][ T7810] loop3: detected capacity change from 0 to 512 [ 185.102595][ T969] usb 3-1: unable to get BOS descriptor or descriptor too short [ 185.104535][ T7810] EXT4-fs: Ignoring removed nobh option [ 185.132897][ T7810] EXT4-fs: Ignoring removed mblk_io_submit option [ 185.139276][ T969] usb 3-1: config 127 has an invalid interface number: 124 but max is 0 [ 185.182268][ T969] usb 3-1: config 127 has no interface number 0 [ 185.205792][ T969] usb 3-1: config 127 interface 124 has no altsetting 0 [ 185.228964][ T969] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 185.231013][ T7810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.238507][ T969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.261629][ T969] usb 3-1: Product: syz [ 185.267603][ T969] usb 3-1: Manufacturer: syz [ 185.272493][ T969] usb 3-1: SerialNumber: syz [ 185.296239][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.305628][ T7810] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.450687][ T7810] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz.3.773: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 185.546969][ T7810] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz.3.773: directory missing '.' [ 185.630778][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.202034][ T7827] loop3: detected capacity change from 0 to 512 [ 186.218140][ T969] usb 3-1: reset high-speed USB device number 4 using dummy_hcd [ 186.271912][ T7818] loop1: detected capacity change from 0 to 32768 [ 186.283927][ T7816] loop0: detected capacity change from 0 to 32768 [ 186.300899][ T7816] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.775 (7816) [ 186.331200][ T7816] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 186.355576][ T7818] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 186.364664][ T7816] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 186.401388][ T7816] BTRFS info (device loop0): allowing degraded mounts [ 186.408578][ T7827] EXT4-fs (loop3): 1 orphan inode deleted [ 186.416407][ T7816] BTRFS info (device loop0): enabling auto defrag [ 186.426397][ T49] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 186.434539][ T969] usb 3-1: device firmware changed [ 186.441630][ T7827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.460983][ T969] usb 3-1: USB disconnect, device number 4 [ 186.469158][ T7816] BTRFS info (device loop0): using free space tree [ 186.480611][ T49] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:3: Failed to release dquot type 1 [ 186.484409][ T7827] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.583203][ T7818] XFS (loop1): Ending clean mount [ 186.640749][ T7818] XFS (loop1): Quotacheck needed: Please wait. [ 186.658175][ T7816] BTRFS info (device loop0): enabling ssd optimizations [ 186.668920][ T7816] BTRFS info (device loop0): auto enabling async discard [ 186.672248][ T969] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 186.770601][ T7818] XFS (loop1): Quotacheck: Done. [ 186.813328][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.890437][ T969] usb 3-1: Using ep0 maxpacket: 16 [ 186.931993][ T969] usb 3-1: config 127 has an invalid interface number: 124 but max is 0 [ 186.941896][ T969] usb 3-1: config 127 has no interface number 0 [ 186.948466][ T969] usb 3-1: config 127 interface 124 has no altsetting 0 [ 186.961461][ T969] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 186.977661][ T5770] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 186.992434][ T969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.042578][ T969] usb 3-1: Product: syz [ 187.046919][ T969] usb 3-1: Manufacturer: syz [ 187.068472][ T969] usb 3-1: SerialNumber: syz [ 187.071729][ T5769] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 187.710014][ T7867] netlink: 24 bytes leftover after parsing attributes in process `syz.0.783'. [ 187.727823][ T7866] netlink: 24 bytes leftover after parsing attributes in process `syz.0.783'. [ 187.970909][ T7863] loop3: detected capacity change from 0 to 40427 [ 188.009334][ T7863] F2FS-fs (loop3): invalid crc value [ 188.051412][ T7863] F2FS-fs (loop3): Found nat_bits in checkpoint [ 188.171044][ T7876] netlink: 'syz.2.789': attribute type 11 has an invalid length. [ 188.237405][ T7863] F2FS-fs (loop3): Start checkpoint disabled! [ 188.271774][ T969] usb 3-1: USB disconnect, device number 5 [ 188.293233][ T7863] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 189.166820][ T7892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.287688][ T7882] loop2: detected capacity change from 0 to 32768 [ 189.325523][ T7882] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 189.401138][ T7882] XFS (loop2): Ending clean mount [ 189.413186][ T7882] XFS (loop2): Quotacheck needed: Please wait. [ 189.481953][ T7882] XFS (loop2): Quotacheck: Done. [ 189.645464][ T7887] loop1: detected capacity change from 0 to 32768 [ 189.681530][ T7891] loop3: detected capacity change from 0 to 32768 [ 189.728137][ T28] audit: type=1800 audit(1776212430.283:25): pid=7887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.784" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 189.792277][ T5768] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 190.198137][ T5787] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 190.438109][ T5787] usb 1-1: Using ep0 maxpacket: 16 [ 190.470430][ T5787] usb 1-1: unable to get BOS descriptor or descriptor too short [ 190.511976][ T5787] usb 1-1: config 127 has an invalid interface number: 124 but max is 0 [ 190.537987][ T5787] usb 1-1: config 127 has no interface number 0 [ 190.560931][ T5787] usb 1-1: config 127 interface 124 has no altsetting 0 [ 190.609917][ T5787] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 190.635843][ T5787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.654453][ T5787] usb 1-1: Product: syz [ 190.668677][ T5787] usb 1-1: Manufacturer: syz [ 190.678509][ T5787] usb 1-1: SerialNumber: syz [ 191.183261][ T7928] netlink: 16 bytes leftover after parsing attributes in process `syz.2.809'. [ 191.536757][ T7934] netlink: 'syz.2.812': attribute type 3 has an invalid length. [ 191.619219][ T5787] usb 1-1: reset high-speed USB device number 8 using dummy_hcd [ 191.820921][ T5787] usb 1-1: device firmware changed [ 191.844212][ T5787] usb 1-1: USB disconnect, device number 8 [ 191.919408][ T7930] loop1: detected capacity change from 0 to 32768 [ 191.992596][ T7930] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 192.028567][ T5787] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 192.147594][ T7930] XFS (loop1): Ending clean mount [ 192.178466][ T7930] XFS (loop1): Quotacheck needed: Please wait. [ 192.223328][ T5787] usb 1-1: Using ep0 maxpacket: 16 [ 192.244628][ T5787] usb 1-1: config 127 has an invalid interface number: 124 but max is 0 [ 192.268153][ T5787] usb 1-1: config 127 has no interface number 0 [ 192.283323][ T5787] usb 1-1: config 127 interface 124 has no altsetting 0 [ 192.313879][ T5787] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 192.348928][ T7930] XFS (loop1): Quotacheck: Done. [ 192.351458][ T5787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.381460][ T5787] usb 1-1: Product: syz [ 192.396065][ T5787] usb 1-1: Manufacturer: syz [ 192.406447][ T5787] usb 1-1: SerialNumber: syz [ 192.536947][ T5770] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 192.808579][ T7960] loop2: detected capacity change from 0 to 256 [ 192.839334][ T7960] exfat: Deprecated parameter 'utf8' [ 192.918274][ T7960] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 192.936117][ T7943] loop3: detected capacity change from 0 to 32768 [ 193.003408][ T7943] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 193.109501][ T7943] XFS (loop3): Ending clean mount [ 193.157420][ T7943] XFS (loop3): Quotacheck needed: Please wait. [ 193.263512][ T7943] XFS (loop3): Quotacheck: Done. [ 193.448283][ T5816] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 193.499368][ T5772] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 193.614352][ T5787] usb 1-1: USB disconnect, device number 9 [ 193.672785][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.704069][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.714275][ T7977] loop0: detected capacity change from 0 to 4096 [ 193.733024][ T5816] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 193.744016][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.755458][ T5816] usb 3-1: config 0 descriptor?? [ 193.977445][ T7983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.829'. [ 194.242757][ T5816] playstation 0003:054C:0DF2.000B: item fetching failed at offset 1/5 [ 194.262733][ T5816] playstation 0003:054C:0DF2.000B: Parse failed [ 194.282263][ T5816] playstation: probe of 0003:054C:0DF2.000B failed with error -22 [ 194.505356][ T5816] usb 3-1: USB disconnect, device number 6 [ 194.711875][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.718405][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.057253][ T8007] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 195.158172][ T8007] CIFS: Unable to determine destination address [ 195.248387][ T8001] loop3: detected capacity change from 0 to 32768 [ 195.516850][ T7993] loop1: detected capacity change from 0 to 40427 [ 195.581170][ T7993] F2FS-fs (loop1): invalid crc value [ 195.612997][ T7993] F2FS-fs (loop1): Found nat_bits in checkpoint [ 195.783888][ T7993] F2FS-fs (loop1): Start checkpoint disabled! [ 195.818483][ T7993] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 195.924017][ T8027] loop0: detected capacity change from 0 to 512 [ 195.986498][ T8027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.097839][ T8027] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 196.148921][ T8027] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #12: block 32: comm syz.0.848: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 196.221619][ T8027] EXT4-fs (loop0): Remounting filesystem read-only [ 196.249488][ T8027] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz.0.848: directory missing '.' [ 196.325733][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.420254][ T31] kworker/u4:2: attempt to access beyond end of device [ 196.420254][ T31] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 196.457389][ T31] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 196.473296][ T31] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 196.576553][ T8039] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 196.787038][ T28] audit: type=1326 audit(1776212437.343:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8043 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28c059c819 code=0x7ffc0000 [ 196.878140][ T28] audit: type=1326 audit(1776212437.343:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8043 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28c059c819 code=0x7ffc0000 [ 196.878194][ T28] audit: type=1326 audit(1776212437.373:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8043 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f28c059c819 code=0x7ffc0000 [ 196.878239][ T28] audit: type=1326 audit(1776212437.383:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8043 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28c059c819 code=0x7ffc0000 [ 196.878287][ T28] audit: type=1326 audit(1776212437.383:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8043 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f28c059c819 code=0x7ffc0000 [ 196.923518][ C0] vkms_vblank_simulate: vblank timer overrun [ 197.177803][ T28] audit: type=1326 audit(1776212437.383:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8043 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28c059c819 code=0x7ffc0000 [ 197.238322][ T28] audit: type=1326 audit(1776212437.383:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8043 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28c059c819 code=0x7ffc0000 [ 197.260462][ C0] vkms_vblank_simulate: vblank timer overrun [ 197.430375][ T8061] loop3: detected capacity change from 0 to 256 [ 197.544023][ T8061] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 197.774116][ T8071] tmpfs: Cannot disable swap on remount [ 197.923413][ T8075] loop0: detected capacity change from 0 to 256 [ 198.233005][ T8081] loop0: detected capacity change from 0 to 512 [ 198.298896][ T8081] EXT4-fs (loop0): orphan cleanup on readonly fs [ 198.328217][ T8081] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 198.372005][ T8081] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 198.409022][ T8063] loop2: detected capacity change from 0 to 32768 [ 198.456319][ T8063] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.862 (8063) [ 198.479149][ T8081] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.872: attempt to clear invalid blocks 2 len 1 [ 198.506640][ T8081] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.872: invalid indirect mapped block 1819239214 (level 0) [ 198.514102][ T8063] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 198.539325][ T8081] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.872: invalid indirect mapped block 1819239214 (level 1) [ 198.562153][ T8081] EXT4-fs (loop0): 1 truncate cleaned up [ 198.572865][ T8081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.606544][ T8063] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 198.646140][ T8081] EXT4-fs: Ignoring sb option on remount [ 198.653001][ T8063] BTRFS info (device loop2): setting nodatasum [ 198.668307][ T8081] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 198.682203][ T8063] BTRFS info (device loop2): force zlib compression, level 3 [ 198.691264][ T8063] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 198.748266][ T8081] EXT4-fs error (device loop0): __ext4_remount:6756: comm syz.0.872: Abort forced by user [ 198.776241][ T8081] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 198.788199][ T8063] BTRFS info (device loop2): use lzo compression, level 0 [ 198.808195][ T8063] BTRFS info (device loop2): turning on flush-on-commit [ 198.815296][ T8063] BTRFS info (device loop2): enabling auto defrag [ 198.868288][ T8063] BTRFS info (device loop2): max_inline at 4096 [ 198.888365][ T8063] BTRFS info (device loop2): using free space tree [ 198.909836][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.161728][ T8063] BTRFS info (device loop2): enabling ssd optimizations [ 199.380875][ T5768] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 199.481122][ T8092] loop3: detected capacity change from 0 to 32768 [ 199.519655][ T8092] XFS: ikeep mount option is deprecated. [ 199.632903][ T8119] loop1: detected capacity change from 0 to 512 [ 199.680265][ T6247] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (6247) [ 199.687246][ T8119] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 199.731608][ T8092] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 199.802100][ T8119] EXT4-fs (loop1): 1 truncate cleaned up [ 199.811152][ T8119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.935501][ T8092] XFS (loop3): Ending clean mount [ 200.059414][ T8119] EXT4-fs: can't change dax mount option while remounting [ 200.079232][ T8137] block nbd0: not configured, cannot reconfigure [ 200.275396][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.281248][ T5772] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 201.436741][ T8145] loop0: detected capacity change from 0 to 32768 [ 201.478467][ T8145] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.891 (8145) [ 201.497825][ T8139] loop2: detected capacity change from 0 to 40427 [ 201.515498][ T8145] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 201.532432][ T8145] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 201.547405][ T8145] BTRFS info (device loop0): force zlib compression, level 3 [ 201.555148][ T8139] F2FS-fs (loop2): invalid crc value [ 201.562787][ T8145] BTRFS info (device loop0): force clearing of disk cache [ 201.572460][ T8145] BTRFS info (device loop0): setting nodatasum [ 201.579444][ T8145] BTRFS info (device loop0): doing ref verification [ 201.591679][ T8145] BTRFS info (device loop0): allowing degraded mounts [ 201.608259][ T969] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 201.608534][ T8139] F2FS-fs (loop2): Found nat_bits in checkpoint [ 201.630495][ T8145] BTRFS info (device loop0): using free space tree [ 201.719652][ T8139] F2FS-fs (loop2): Start checkpoint disabled! [ 201.771573][ T8139] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 201.792675][ T8145] BTRFS info (device loop0): enabling ssd optimizations [ 201.820347][ T969] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 201.832413][ T969] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 201.837842][ T8145] BTRFS info (device loop0): auto enabling async discard [ 201.868601][ T969] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 201.894757][ T969] usb 2-1: config 220 has no interface number 2 [ 201.911797][ T8145] BTRFS info (device loop0): rebuilding free space tree [ 201.938290][ T969] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 201.980585][ T969] usb 2-1: config 220 interface 0 has no altsetting 0 [ 201.992314][ T969] usb 2-1: config 220 interface 76 has no altsetting 0 [ 202.000276][ T969] usb 2-1: config 220 interface 1 has no altsetting 0 [ 202.011660][ T969] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 202.028099][ T969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.056660][ T969] usb 2-1: Product: syz [ 202.076335][ T969] usb 2-1: Manufacturer: syz [ 202.098278][ T969] usb 2-1: SerialNumber: syz [ 202.256780][ T8184] loop3: detected capacity change from 0 to 512 [ 202.280112][ T31] kworker/u4:2: attempt to access beyond end of device [ 202.280112][ T31] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 202.300329][ T31] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 202.309323][ T31] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 202.353996][ T5769] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 202.372651][ T969] uvcvideo 2-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 202.400593][ T8184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.419425][ T969] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 202.425996][ T969] usb 2-1: No valid video chain found. [ 202.451605][ T969] usb 2-1: selecting invalid altsetting 0 [ 202.526928][ T8184] fs-verity (loop3, inode 15): Unknown hash algorithm number: 3 [ 202.545635][ T969] usb 2-1: selecting invalid altsetting 0 [ 202.562344][ T969] usbtest: probe of 2-1:220.1 failed with error -22 [ 202.619512][ T969] usb 2-1: USB disconnect, device number 9 [ 202.767631][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.887211][ T8188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.903'. [ 203.463264][ T8206] loop0: detected capacity change from 0 to 256 [ 203.490819][ T8206] exfat: Deprecated parameter 'utf8' [ 203.540109][ T8206] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 203.836361][ T8208] loop0: detected capacity change from 0 to 4096 [ 203.999827][ T8208] ntfs3: loop0: failed to convert "0000" to iso8859-9 [ 204.050843][ T8208] ntfs3: loop0: failed to convert name for inode 1e. [ 204.169055][ T8205] loop1: detected capacity change from 0 to 32768 [ 204.199691][ T8205] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.910 (8205) [ 204.269880][ T8205] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 204.324185][ T8205] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 204.353684][ T8202] loop2: detected capacity change from 0 to 32768 [ 204.362796][ T8205] BTRFS info (device loop1): force zlib compression, level 3 [ 204.376903][ T8210] overlayfs: conflicting lowerdir path [ 204.424879][ T28] audit: type=1800 audit(1776212444.983:33): pid=8202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.909" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 204.443533][ T8205] BTRFS info (device loop1): force clearing of disk cache [ 204.528249][ T8205] BTRFS info (device loop1): setting nodatasum [ 204.538666][ T8205] BTRFS info (device loop1): doing ref verification [ 204.568525][ T8205] BTRFS info (device loop1): allowing degraded mounts [ 204.575415][ T8205] BTRFS info (device loop1): using free space tree [ 204.758204][ T8205] BTRFS info (device loop1): enabling ssd optimizations [ 204.802187][ T8205] BTRFS info (device loop1): auto enabling async discard [ 204.810541][ T8233] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 204.846567][ T8205] BTRFS info (device loop1): rebuilding free space tree [ 205.048638][ T8237] loop3: detected capacity change from 0 to 4096 [ 205.110961][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.918'. [ 205.138270][ T8240] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 205.198491][ T5770] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 205.232996][ T8237] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 205.596081][ T6247] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 10 /dev/loop1 scanned by udevd (6247) [ 205.882569][ T8253] loop2: detected capacity change from 0 to 256 [ 206.380377][ T8268] loop3: detected capacity change from 0 to 1024 [ 206.401766][ T8268] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 206.514091][ T8268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.781182][ T8279] loop0: detected capacity change from 0 to 64 [ 206.805901][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.010850][ T28] audit: type=1800 audit(1776212447.573:34): pid=8279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.935" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 207.336195][ T8294] netlink: 16 bytes leftover after parsing attributes in process `syz.0.941'. [ 207.683783][ T8302] loop3: detected capacity change from 0 to 4096 [ 207.730023][ T8305] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 207.890036][ T28] audit: type=1800 audit(1776212448.453:35): pid=8302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.946" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 208.113654][ T8312] loop0: detected capacity change from 0 to 256 [ 208.244534][ T8312] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 208.340519][ T28] audit: type=1800 audit(1776212448.903:36): pid=8312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.951" name="file1" dev="loop0" ino=1048685 res=0 errno=0 [ 208.371149][ T8298] loop2: detected capacity change from 0 to 32768 [ 208.416185][ T8298] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 208.416277][ T8298] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 208.416317][ T8298] BTRFS info (device loop2): setting nodatasum [ 208.416341][ T8298] BTRFS info (device loop2): force zlib compression, level 3 [ 208.416365][ T8298] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 208.416418][ T8298] BTRFS info (device loop2): use lzo compression, level 0 [ 208.416439][ T8298] BTRFS info (device loop2): turning on flush-on-commit [ 208.416461][ T8298] BTRFS info (device loop2): enabling auto defrag [ 208.416579][ T8298] BTRFS info (device loop2): max_inline at 4096 [ 208.531079][ T8298] BTRFS info (device loop2): using free space tree [ 208.668765][ T8298] BTRFS info (device loop2): enabling ssd optimizations [ 208.706475][ T8335] loop1: detected capacity change from 0 to 512 [ 208.754010][ T8335] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.954: inode #13: comm syz.1.954: iget: illegal inode # [ 208.755756][ T8335] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.954: couldn't read orphan inode 13 (err -117) [ 208.762780][ T8335] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.967761][ T5768] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 209.051928][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.247013][ T8343] loop1: detected capacity change from 0 to 512 [ 209.344423][ T8343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.344557][ T8343] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.407728][ T8343] EXT4-fs warning (device loop1): ext4_resize_fs:2025: can't read last block, resize aborted [ 209.570861][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.923054][ T8358] loop0: detected capacity change from 0 to 256 [ 209.949422][ T8358] exfat: Deprecated parameter 'namecase' [ 210.002306][ T8358] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 210.039272][ T8362] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 210.293443][ T8364] loop3: detected capacity change from 0 to 256 [ 210.356194][ T8364] exfat: Deprecated parameter 'utf8' [ 210.436870][ T8364] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 210.818371][ T8351] loop2: detected capacity change from 0 to 32768 [ 210.937047][ T8351] MetaData crosses page boundary!! [ 210.971850][ T8351] lblock = 6300000010, size = -820051968 [ 210.977709][ T8351] CPU: 1 PID: 8351 Comm: syz.2.961 Not tainted syzkaller #0 [ 210.985144][ T8351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 210.995285][ T8351] Call Trace: [ 210.998634][ T8351] [ 211.001630][ T8351] dump_stack_lvl+0x18c/0x250 [ 211.006399][ T8351] ? show_regs_print_info+0x20/0x20 [ 211.011690][ T8351] ? load_image+0x420/0x420 [ 211.016296][ T8351] ? folio_unlock+0x118/0x2e0 [ 211.021148][ T8351] __get_metapage+0xaac/0xfa0 [ 211.025905][ T8351] dtSearch+0x591/0x21b0 [ 211.030219][ T8351] ? security_inode_init_security+0x19f/0x380 [ 211.036408][ T8351] jfs_mkdir+0x30f/0xac0 [ 211.040952][ T8351] ? jfs_symlink+0xfa0/0xfa0 [ 211.045752][ T8351] ? make_vfsuid+0x51/0xb0 [ 211.050408][ T8351] ? generic_permission+0x1f3/0x590 [ 211.055687][ T8351] ? inode_permission+0xf3/0x480 [ 211.060777][ T8351] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 211.065868][ T8351] ? security_inode_mkdir+0xb7/0x100 [ 211.071239][ T8351] vfs_mkdir+0x296/0x440 [ 211.075559][ T8351] do_mkdirat+0x1dc/0x450 [ 211.079963][ T8351] ? vfs_mkdir+0x440/0x440 [ 211.084450][ T8351] __x64_sys_mkdirat+0x89/0xa0 [ 211.089472][ T8351] do_syscall_64+0x55/0xa0 [ 211.093987][ T8351] ? clear_bhb_loop+0x40/0x90 [ 211.098827][ T8351] ? clear_bhb_loop+0x40/0x90 [ 211.103779][ T8351] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.109830][ T8351] RIP: 0033:0x7f28c059b687 [ 211.114317][ T8351] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.134430][ T8351] RSP: 002b:00007f28c145de58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 211.139681][ T8376] loop1: detected capacity change from 0 to 1024 [ 211.142894][ T8351] RAX: ffffffffffffffda RBX: 00007f28c145dee0 RCX: 00007f28c059b687 [ 211.157353][ T8351] RDX: 00000000000001ff RSI: 0000200000000280 RDI: 00000000ffffff9c [ 211.165393][ T8351] RBP: 0000200000000300 R08: 00002000000000c0 R09: 0000000000000000 [ 211.173616][ T8351] R10: 0000200000000300 R11: 0000000000000246 R12: 0000200000000280 [ 211.181660][ T8351] R13: 00007f28c145dea0 R14: 0000000000000000 R15: 0000000000000000 [ 211.189712][ T8351] [ 211.242437][ T8351] bread failed! [ 211.246058][ T8351] jfs_mkdir: dtSearch returned -5 [ 211.323243][ T8376] hfsplus: bad catalog entry type [ 211.423003][ T8379] loop3: detected capacity change from 0 to 512 [ 211.495889][ T8379] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.514282][ T69] hfsplus: b-tree write err: -5, ino 25 [ 211.538368][ T8379] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.560540][ T69] hfsplus: b-tree write err: -5, ino 4 [ 211.615973][ T69] hfsplus: b-tree write err: -5, ino 2 [ 211.809435][ T8388] loop1: detected capacity change from 0 to 64 [ 211.846673][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.969517][ T27] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 212.021961][ T8388] block device autoloading is deprecated and will be removed. [ 212.061565][ T8392] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 212.154943][ T5776] Bluetooth: hci1: command 0x0406 tx timeout [ 212.160785][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 212.163190][ T5776] Bluetooth: hci3: command 0x0406 tx timeout [ 212.188375][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 212.217810][ T27] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 212.241479][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.253337][ T8397] loop1: detected capacity change from 0 to 256 [ 212.263822][ T27] usb 1-1: Product: syz [ 212.288443][ T27] usb 1-1: Manufacturer: syz [ 212.293207][ T27] usb 1-1: SerialNumber: syz [ 212.349451][ T27] usb 1-1: config 0 descriptor?? [ 212.361508][ T8397] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 212.390675][ T8399] loop3: detected capacity change from 0 to 64 [ 212.406799][ T27] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 212.425322][ T27] dvb-usb: bulk message failed: -22 (2/0) [ 212.472599][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 212.484389][ T27] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 212.516624][ T27] usb 1-1: media controller created [ 212.634083][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 212.659255][ T8386] dvb-usb: bulk message failed: -22 (3/0) [ 212.732946][ T27] usb 1-1: selecting invalid altsetting 7 [ 212.743600][ T27] cxusb: set interface failed [ 212.758948][ T27] dvb-usb: bulk message failed: -22 (1/0) [ 212.909606][ T27] DVB: Unable to find symbol lgdt330x_attach() [ 212.917280][ T27] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 213.010022][ T8411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.987'. [ 213.138228][ T27] rc_core: IR keymap rc-dvico-portable not found [ 213.156566][ T27] Registered IR keymap rc-empty [ 213.174137][ T27] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 213.220267][ T27] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input11 [ 213.269748][ T27] dvb-usb: schedule remote query interval to 100 msecs. [ 213.298122][ T27] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 213.368731][ T27] usb 1-1: USB disconnect, device number 10 [ 213.610657][ T27] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 213.975242][ T5777] Bluetooth: hci3: unexpected event for opcode 0x203d [ 214.505805][ T8446] devtmpfs: Too few inodes for current use [ 214.686313][ T8429] loop0: detected capacity change from 0 to 40427 [ 214.708190][ T8437] loop1: detected capacity change from 0 to 32768 [ 214.723612][ T8429] F2FS-fs (loop0): build fault injection attr: rate: 684, type: 0x7ffff [ 214.741903][ T8429] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 214.759614][ T8429] F2FS-fs (loop0): Image doesn't support compression [ 214.794628][ T8437] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 214.818813][ T8444] loop3: detected capacity change from 0 to 32768 [ 214.840394][ T8429] F2FS-fs (loop0): invalid crc value [ 214.890594][ T8429] F2FS-fs (loop0): Found nat_bits in checkpoint [ 214.938429][ T8444] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 215.012625][ T8437] XFS (loop1): Ending clean mount [ 215.022668][ T8448] ntfs: volume version 3.1. [ 215.128645][ T5770] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 215.139878][ T8444] XFS (loop3): Ending clean mount [ 215.221576][ T8444] XFS (loop3): Quotacheck needed: Please wait. [ 215.235472][ T8429] F2FS-fs (loop0): Start checkpoint disabled! [ 215.278841][ T8429] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 215.558279][ T8444] XFS (loop3): Quotacheck: Done. [ 215.719380][ T28] audit: type=1800 audit(1776212456.283:37): pid=8444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1003" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 215.943784][ T963] kworker/u4:6: attempt to access beyond end of device [ 215.943784][ T963] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 215.968151][ T963] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 215.975598][ T963] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 216.018936][ T5772] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 216.405300][ T8475] set_capacity_and_notify: 1 callbacks suppressed [ 216.405313][ T8475] loop2: detected capacity change from 0 to 32768 [ 216.648153][ T27] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 216.858173][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 216.875755][ T27] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 216.898705][ T27] usb 1-1: config 0 has no interface number 0 [ 216.917307][ T27] usb 1-1: config 0 interface 12 has no altsetting 0 [ 216.936859][ T27] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 216.958983][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.967094][ T27] usb 1-1: Product: syz [ 216.988267][ T27] usb 1-1: Manufacturer: syz [ 216.992978][ T27] usb 1-1: SerialNumber: syz [ 217.010529][ T27] usb 1-1: config 0 descriptor?? [ 217.023129][ T8481] loop2: detected capacity change from 0 to 8192 [ 217.057319][ T8481] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 217.097152][ T8481] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 217.153406][ T8481] REISERFS (device loop2): using ordered data mode [ 217.168323][ T8481] reiserfs: using flush barriers [ 217.208891][ T8481] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 217.280973][ T8481] REISERFS (device loop2): checking transaction log (loop2) [ 217.352901][ T8481] REISERFS (device loop2): Using r5 hash to sort names [ 217.375167][ T8481] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 217.395896][ T8481] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 217.586000][ T8481] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 217.642854][ T8481] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 217.662068][ T27] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: 28 failed: -71 [ 217.691609][ T27] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 217.719389][ T27] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 217.722529][ T8481] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 217.771389][ T27] f81534: probe of 1-1:0.12 failed with error -71 [ 217.795511][ T27] usb 1-1: USB disconnect, device number 11 [ 218.005553][ T8497] fuse: Unknown parameter '01777777777777777777777' [ 218.195673][ T8501] syz.1.1021 uses obsolete (PF_INET,SOCK_PACKET) [ 218.292147][ T8505] loop3: detected capacity change from 0 to 256 [ 218.331830][ T8505] exfat: Deprecated parameter 'namecase' [ 218.340724][ T8505] exfat: Deprecated parameter 'namecase' [ 218.359391][ T8501] loop1: detected capacity change from 0 to 4096 [ 218.367172][ T8501] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 218.403753][ T8505] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 218.458318][ T8501] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 218.506095][ T8505] exFAT-fs (loop3): hint_cluster is invalid (4278190089), rewind to the first cluster [ 218.527352][ T8501] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 218.561399][ T8501] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 218.599170][ T8505] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805dde2860 iblock : 8, err : -5) [ 218.639694][ T8501] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 218.659835][ T8505] exFAT-fs (loop3): error, invalid access to FAT (entry 0xff000008) [ 218.688231][ T8505] syz.3.1022: attempt to access beyond end of device [ 218.688231][ T8505] loop3: rw=2049, sector=34225520825, nr_sectors = 1 limit=256 [ 218.713179][ T8505] Buffer I/O error on dev loop3, logical block 34225520825, lost async page write [ 218.723755][ T8501] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 218.757897][ T8505] syz.3.1022: attempt to access beyond end of device [ 218.757897][ T8505] loop3: rw=2049, sector=34225520826, nr_sectors = 1 limit=256 [ 218.780112][ T8505] Buffer I/O error on dev loop3, logical block 34225520826, lost async page write [ 218.796648][ T8505] syz.3.1022: attempt to access beyond end of device [ 218.796648][ T8505] loop3: rw=2049, sector=34225520827, nr_sectors = 1 limit=256 [ 218.807087][ T8501] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 218.822709][ T8505] Buffer I/O error on dev loop3, logical block 34225520827, lost async page write [ 218.837764][ T8501] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 218.883028][ T8505] syz.3.1022: attempt to access beyond end of device [ 218.883028][ T8505] loop3: rw=2049, sector=34225520828, nr_sectors = 1 limit=256 [ 218.888933][ T8501] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 218.921230][ T8505] Buffer I/O error on dev loop3, logical block 34225520828, lost async page write [ 218.944951][ T8501] ntfs: volume version 3.1. [ 218.978192][ T8505] syz.3.1022: attempt to access beyond end of device [ 218.978192][ T8505] loop3: rw=2049, sector=34225520829, nr_sectors = 1 limit=256 [ 219.026959][ T8505] Buffer I/O error on dev loop3, logical block 34225520829, lost async page write [ 219.072870][ T8505] syz.3.1022: attempt to access beyond end of device [ 219.072870][ T8505] loop3: rw=2049, sector=34225520830, nr_sectors = 1 limit=256 [ 219.088550][ T8505] Buffer I/O error on dev loop3, logical block 34225520830, lost async page write [ 219.098478][ T8505] syz.3.1022: attempt to access beyond end of device [ 219.098478][ T8505] loop3: rw=2049, sector=34225520831, nr_sectors = 1 limit=256 [ 219.113606][ T8505] Buffer I/O error on dev loop3, logical block 34225520831, lost async page write [ 219.726825][ T8534] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1037'. [ 219.858764][ T8541] loop3: detected capacity change from 0 to 128 [ 219.871821][ T8541] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 219.927751][ T8541] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 220.201441][ T8545] loop3: detected capacity change from 0 to 256 [ 220.235435][ T8545] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 220.501143][ T8551] loop0: detected capacity change from 0 to 4096 [ 220.592449][ T8551] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 220.607205][ T8557] tipc: New replicast peer: 255.255.255.255 [ 220.652834][ T8557] tipc: Enabled bearer , priority 10 [ 220.685043][ T8551] ntfs3: loop0: Failed to load $Extend (-22). [ 220.706578][ T8551] ntfs3: loop0: Failed to initialize $Extend. [ 220.803228][ T8560] loop2: detected capacity change from 0 to 512 [ 220.874069][ T8560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.970081][ T8560] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.303160][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.582779][ T8554] loop1: detected capacity change from 0 to 32768 [ 221.681049][ T8554] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 221.864511][ T8565] loop3: detected capacity change from 0 to 40427 [ 221.883667][ T8554] XFS (loop1): Ending clean mount [ 221.933038][ T8554] XFS (loop1): Quotacheck needed: Please wait. [ 221.951952][ T8565] F2FS-fs (loop3): invalid crc value [ 221.976327][ T8565] F2FS-fs (loop3): Found nat_bits in checkpoint [ 222.062283][ T8554] XFS (loop1): Quotacheck: Done. [ 222.133535][ T8565] F2FS-fs (loop3): Start checkpoint disabled! [ 222.173722][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 222.173737][ T28] audit: type=1800 audit(1776212462.733:38): pid=8554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1045" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 222.229275][ T8565] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 222.328608][ T8565] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1049'. [ 222.350381][ T8565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1049'. [ 222.362841][ T5770] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 222.993619][ T8582] loop2: detected capacity change from 0 to 32768 [ 223.117618][ T8582] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 223.557186][ T5768] ocfs2: Unmounting device (7,2) on (node local) [ 224.132593][ T8604] loop3: detected capacity change from 0 to 32768 [ 224.285863][ T8604] MetaData crosses page boundary!! [ 224.308500][ T8604] lblock = 6300000010, size = -820051968 [ 224.314420][ T8604] CPU: 1 PID: 8604 Comm: syz.3.1062 Not tainted syzkaller #0 [ 224.321974][ T8604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 224.332273][ T8604] Call Trace: [ 224.335597][ T8604] [ 224.338606][ T8604] dump_stack_lvl+0x18c/0x250 [ 224.343342][ T8604] ? show_regs_print_info+0x20/0x20 [ 224.348601][ T8604] ? load_image+0x420/0x420 [ 224.353163][ T8604] ? folio_unlock+0x118/0x2e0 [ 224.358145][ T8604] __get_metapage+0xaac/0xfa0 [ 224.362890][ T8604] dtSearch+0x591/0x21b0 [ 224.367288][ T8604] ? security_inode_init_security+0x19f/0x380 [ 224.373440][ T8604] jfs_mkdir+0x30f/0xac0 [ 224.377736][ T8604] ? jfs_symlink+0xfa0/0xfa0 [ 224.382417][ T8604] ? make_vfsuid+0x51/0xb0 [ 224.386910][ T8604] ? generic_permission+0x1f3/0x590 [ 224.392186][ T8604] ? inode_permission+0xf3/0x480 [ 224.397174][ T8604] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 224.402257][ T8604] ? security_inode_mkdir+0xb7/0x100 [ 224.407621][ T8604] vfs_mkdir+0x296/0x440 [ 224.411963][ T8604] do_mkdirat+0x1dc/0x450 [ 224.416346][ T8604] ? vfs_mkdir+0x440/0x440 [ 224.420840][ T8604] __x64_sys_mkdirat+0x89/0xa0 [ 224.425667][ T8604] do_syscall_64+0x55/0xa0 [ 224.430162][ T8604] ? clear_bhb_loop+0x40/0x90 [ 224.434915][ T8604] ? clear_bhb_loop+0x40/0x90 [ 224.439663][ T8604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.445683][ T8604] RIP: 0033:0x7fab5379b687 [ 224.450139][ T8604] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.469788][ T8604] RSP: 002b:00007fab54741e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 224.478426][ T8604] RAX: ffffffffffffffda RBX: 00007fab54741ee0 RCX: 00007fab5379b687 [ 224.486443][ T8604] RDX: 00000000000001ff RSI: 0000200000000280 RDI: 00000000ffffff9c [ 224.494466][ T8604] RBP: 0000200000000300 R08: 00002000000000c0 R09: 0000000000000000 [ 224.502482][ T8604] R10: 0000200000000300 R11: 0000000000000246 R12: 0000200000000280 [ 224.510489][ T8604] R13: 00007fab54741ea0 R14: 0000000000000000 R15: 0000000000000000 [ 224.518514][ T8604] [ 224.539812][ T8604] bread failed! [ 224.543519][ T8604] jfs_mkdir: dtSearch returned -5 [ 224.763710][ T8611] loop1: detected capacity change from 0 to 32768 [ 224.823352][ T8611] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 224.997337][ T8635] loop3: detected capacity change from 0 to 8192 [ 225.073921][ T8635] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 225.103756][ T8640] tipc: Started in network mode [ 225.107675][ T8635] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 225.109018][ T8640] tipc: Node identity ac14140f, cluster identity 4711 [ 225.125660][ T8640] tipc: New replicast peer: 255.255.255.255 [ 225.134463][ T8640] tipc: Enabled bearer , priority 10 [ 225.213642][ T8611] XFS (loop1): Starting recovery (logdev: internal) [ 225.221649][ T8635] REISERFS (device loop3): using ordered data mode [ 225.248085][ T8635] reiserfs: using flush barriers [ 225.307815][ T8635] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 225.336028][ T8611] XFS (loop1): Ending recovery (logdev: internal) [ 225.370497][ T8635] REISERFS (device loop3): checking transaction log (loop3) [ 225.426278][ T8635] REISERFS (device loop3): Using r5 hash to sort names [ 225.489753][ T8635] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 225.546257][ T8635] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 225.682008][ T8635] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 225.739937][ T8635] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 225.777727][ T5770] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 225.786316][ T8635] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 226.229191][ T8643] loop2: detected capacity change from 0 to 32768 [ 226.255203][ T5816] tipc: Node number set to 2886997007 [ 226.263900][ T8652] loop0: detected capacity change from 0 to 256 [ 226.317149][ T8643] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 226.404972][ T8643] XFS (loop2): Ending clean mount [ 226.425427][ T8643] XFS (loop2): Quotacheck needed: Please wait. [ 226.553816][ T8643] XFS (loop2): Quotacheck: Done. [ 226.725267][ T5768] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 227.257404][ T8658] loop1: detected capacity change from 0 to 32768 [ 227.277129][ T8658] (syz.1.1079,8658,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 227.305296][ T8658] (syz.1.1079,8658,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 227.378922][ T8658] JBD2: Ignoring recovery information on journal [ 227.445125][ T8658] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 227.680857][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 228.031337][ T8679] loop0: detected capacity change from 0 to 32768 [ 228.074689][ T8679] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 228.381304][ T8679] XFS (loop0): Starting recovery (logdev: internal) [ 228.485852][ T8679] XFS (loop0): Ending recovery (logdev: internal) [ 228.761183][ T5769] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 228.953969][ T8717] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 229.127056][ T8719] Bluetooth: MGMT ver 1.22 [ 229.271443][ T8702] loop1: detected capacity change from 0 to 32768 [ 229.314593][ T8702] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.1095 (8702) [ 229.383219][ T8702] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 229.414620][ T8726] netlink: 'syz.0.1101': attribute type 3 has an invalid length. [ 229.442370][ T8702] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 229.468264][ T8702] BTRFS info (device loop1): enabling disk space caching [ 229.510128][ T8702] BTRFS info (device loop1): force clearing of disk cache [ 229.517446][ T8702] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 229.548523][ T8702] BTRFS info (device loop1): use zstd compression, level 3 [ 229.574957][ T8702] BTRFS info (device loop1): disk space caching is enabled [ 229.716413][ T8738] loop3: detected capacity change from 0 to 512 [ 229.745554][ T8738] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 229.832380][ T8738] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 229.868205][ T8702] BTRFS info (device loop1): enabling ssd optimizations [ 229.874811][ T8738] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 229.900752][ T8738] EXT4-fs (loop3): 1 truncate cleaned up [ 229.928650][ T8738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.956570][ T8755] loop2: detected capacity change from 0 to 1024 [ 229.965060][ T8702] BTRFS info (device loop1): auto enabling async discard [ 230.022591][ T8702] BTRFS info (device loop1): rebuilding free space tree [ 230.045616][ T8738] EXT4-fs error (device loop3) in ext4_setattr:5682: error 28 [ 230.111066][ T8702] BTRFS info (device loop1): disabling free space tree [ 230.150603][ T8702] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 230.197165][ T8702] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 230.286827][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.568824][ T5770] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 230.995217][ T8777] loop2: detected capacity change from 0 to 512 [ 231.049521][ T8777] FAT-fs (loop2): Directory bread(block 199916) failed [ 231.064651][ T8777] FAT-fs (loop2): Directory bread(block 199917) failed [ 231.075603][ T8777] FAT-fs (loop2): Directory bread(block 199918) failed [ 231.103868][ T8777] FAT-fs (loop2): Directory bread(block 199919) failed [ 231.145049][ T8777] FAT-fs (loop2): Directory bread(block 199920) failed [ 231.189317][ T5777] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 231.189602][ T5775] Bluetooth: hci2: command 0x0401 tx timeout [ 231.203563][ T8777] FAT-fs (loop2): Directory bread(block 199921) failed [ 231.258429][ T8777] FAT-fs (loop2): Directory bread(block 199922) failed [ 231.265513][ T8777] FAT-fs (loop2): Directory bread(block 199923) failed [ 232.033391][ T8802] tipc: Enabling of bearer rejected, media not registered [ 232.086140][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1134'. [ 232.529390][ T8817] loop0: detected capacity change from 0 to 256 [ 232.537303][ T8817] exfat: Deprecated parameter 'namecase' [ 232.558253][ T8817] exfat: Deprecated parameter 'utf8' [ 232.615409][ T8817] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 232.763584][ T8821] loop1: detected capacity change from 0 to 128 [ 232.793045][ T8821] UDF-fs: bad mount option "[CX.-F(?-ƃ+ [cn7 [ 232.793045][ T8821] + t+K3ʂ&sF" or missing value [ 233.324672][ T8836] loop1: detected capacity change from 0 to 16 [ 233.350201][ T8836] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 233.393167][ T8836] cramfs: Error -3 while decompressing! [ 233.406386][ T8836] cramfs: ffffffff973fe368(27)->ffff888073adb000(4096) [ 233.415345][ T6247] udevd[6247]: incorrect cramfs checksum on /dev/loop1 [ 233.429753][ T8836] cramfs: Error -3 while decompressing! [ 233.446969][ T8836] cramfs: ffffffff973fe368(27)->ffff888073adb000(4096) [ 233.478139][ T28] audit: type=1800 audit(1776212474.033:39): pid=8836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1149" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 233.514873][ T6247] udevd[6247]: incorrect cramfs checksum on /dev/loop1 [ 233.751474][ T8844] loop1: detected capacity change from 0 to 64 [ 234.329201][ T8856] loop3: detected capacity change from 0 to 8192 [ 234.395515][ T8864] tipc: Enabling of bearer rejected, failed to enable media [ 235.285942][ T8884] loop1: detected capacity change from 0 to 4096 [ 235.353367][ T8892] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.425296][ T8884] syz.1.1174: attempt to access beyond end of device [ 235.425296][ T8884] loop1: rw=0, sector=8589934592, nr_sectors = 2 limit=4096 [ 235.485427][ T8884] NILFS (loop1): I/O error reading data block for GC (ino=9, vblocknr=42075) [ 235.499210][ T8895] CIFS mount error: No usable UNC path provided in device string! [ 235.499210][ T8895] [ 235.518566][ T8884] NILFS (loop1): error -5 preparing GC: cannot read source blocks [ 235.536210][ T8895] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 235.805111][ T8901] netlink: 'syz.1.1181': attribute type 3 has an invalid length. [ 236.012048][ T8904] loop1: detected capacity change from 0 to 256 [ 236.037001][ T8904] exfat: Deprecated parameter 'utf8' [ 236.059245][ T8904] exfat: Deprecated parameter 'namecase' [ 236.078223][ T8904] exfat: Deprecated parameter 'namecase' [ 236.083981][ T8904] exfat: Deprecated parameter 'utf8' [ 236.124188][ T8904] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 236.215022][ T8904] process 'syz.1.1184' launched './file2' with NULL argv: empty string added [ 236.415828][ T8888] loop2: detected capacity change from 0 to 32768 [ 236.436041][ T8897] loop3: detected capacity change from 0 to 32768 [ 236.536089][ T8897] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 236.661838][ T8919] loop1: detected capacity change from 0 to 4096 [ 236.705998][ T8897] XFS (loop3): Ending clean mount [ 236.747574][ T8897] XFS (loop3): Quotacheck needed: Please wait. [ 236.777517][ T8919] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 236.816154][ T8919] ntfs3: loop1: Failed to load $Extend (-22). [ 236.848923][ T8919] ntfs3: loop1: Failed to initialize $Extend. [ 236.920454][ T8897] XFS (loop3): Quotacheck: Done. [ 237.156015][ T5772] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 237.198893][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1191'. [ 237.458806][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1195'. [ 237.498320][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1195'. [ 237.507317][ T8932] netlink: 'syz.1.1195': attribute type 13 has an invalid length. [ 237.546583][ T8932] netlink: 'syz.1.1195': attribute type 12 has an invalid length. [ 237.583273][ T8935] No buffer was provided with the request [ 237.720535][ T8938] loop0: detected capacity change from 0 to 128 [ 237.791472][ T8938] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 237.832281][ T8938] hpfs: filesystem error: improperly stopped [ 237.841780][ T8938] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 237.852369][ T8938] hpfs: You really don't want any checks? You are crazy... [ 237.873608][ T8938] hpfs: hpfs_map_sector(): read error [ 237.881637][ T8938] hpfs: code page support is disabled [ 237.897620][ T8938] hpfs: hpfs_map_4sectors(): unaligned read [ 237.916847][ T8938] hpfs: hpfs_map_4sectors(): unaligned read [ 237.928290][ T8938] hpfs: filesystem error: unable to find root dir [ 238.520145][ T8960] loop0: detected capacity change from 0 to 1024 [ 238.586601][ T8960] hfsplus: bad catalog entry type [ 238.975493][ T12] hfsplus: b-tree write err: -5, ino 25 [ 238.988443][ T12] hfsplus: b-tree write err: -5, ino 4 [ 238.994210][ T12] hfsplus: b-tree write err: -5, ino 2 [ 239.158268][ T969] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 239.271441][ T8972] loop1: detected capacity change from 0 to 64 [ 239.298236][ T8969] loop0: detected capacity change from 0 to 4096 [ 239.332984][ T8969] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 239.355867][ T8972] syz.1.1213: attempt to access beyond end of device [ 239.355867][ T8972] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 239.382983][ T8972] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 239.397139][ T8969] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 239.416237][ T969] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 239.438914][ T969] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 239.447288][ T969] usb 4-1: Product: syz [ 239.469475][ T8972] syz.1.1213: attempt to access beyond end of device [ 239.469475][ T8972] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 239.493433][ T8969] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 239.503056][ T969] usb 4-1: Manufacturer: syz [ 239.507724][ T969] usb 4-1: SerialNumber: syz [ 239.514362][ T8969] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 239.537873][ T8972] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 239.555221][ T8969] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 239.565315][ T969] usb 4-1: config 0 descriptor?? [ 239.579274][ T969] ch341 4-1:0.0: ch341-uart converter detected [ 239.598198][ T8969] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 239.645466][ T8969] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 239.672092][ T8969] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 239.750222][ T8969] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 239.771644][ T8969] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 239.830845][ T8969] ntfs: volume version 3.1. [ 240.031501][ T8982] loop1: detected capacity change from 0 to 64 [ 240.214377][ T969] usb 4-1: failed to send control message: -71 [ 240.224779][ T969] ch341-uart: probe of ttyUSB0 failed with error -71 [ 240.270820][ T969] usb 4-1: USB disconnect, device number 7 [ 240.277961][ T969] ch341 4-1:0.0: device disconnected [ 240.520424][ T8991] loop1: detected capacity change from 0 to 1024 [ 240.633636][ T49] hfsplus: b-tree write err: -5, ino 25 [ 240.649764][ T49] hfsplus: b-tree write err: -5, ino 4 [ 240.665509][ T49] hfsplus: b-tree write err: -5, ino 2 [ 240.789836][ T5787] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 240.876030][ T9002] loop3: detected capacity change from 0 to 512 [ 240.899200][ T9002] EXT4-fs: Invalid gid value -1 [ 240.991290][ T5787] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.022636][ T5787] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 241.048329][ T5787] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 241.068221][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.094799][ T5787] usb 3-1: config 0 descriptor?? [ 241.278277][ T9000] loop1: detected capacity change from 0 to 32768 [ 241.629737][ T5816] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 241.733278][ T5787] Bluetooth: Can't get version to change to load ram patch err [ 241.751221][ T5787] Bluetooth: Loading sysconfig file failed [ 241.767458][ T5787] ath3k: probe of 3-1:0.0 failed with error -71 [ 241.780884][ T5787] usb 3-1: USB disconnect, device number 7 [ 241.830620][ T5816] usb 4-1: Using ep0 maxpacket: 16 [ 241.854453][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.878200][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.898136][ T5816] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 241.917575][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.951351][ T5816] usb 4-1: config 0 descriptor?? [ 242.350347][ T9026] loop1: detected capacity change from 0 to 64 [ 242.400729][ T5816] bigben 0003:146B:0902.000C: unexpected rdesc, please submit for review [ 242.459245][ T5816] bigben 0003:146B:0902.000C: unknown main item tag 0x0 [ 242.466333][ T5816] bigben 0003:146B:0902.000C: unknown main item tag 0x0 [ 242.525037][ T5816] bigben 0003:146B:0902.000C: unknown main item tag 0x0 [ 242.546250][ T5816] bigben 0003:146B:0902.000C: unknown main item tag 0x0 [ 242.557893][ T5816] bigben 0003:146B:0902.000C: item fetching failed at offset 4/5 [ 242.577338][ T5816] bigben 0003:146B:0902.000C: parse failed [ 242.585770][ T5816] bigben: probe of 0003:146B:0902.000C failed with error -22 [ 242.642590][ T5816] usb 4-1: USB disconnect, device number 8 [ 243.505464][ T9058] loop0: detected capacity change from 0 to 64 [ 244.595249][ T9065] loop3: detected capacity change from 0 to 32768 [ 244.615018][ T9067] loop2: detected capacity change from 0 to 32768 [ 244.636044][ T9065] JBD2: Ignoring recovery information on journal [ 244.665421][ T9067] (syz.2.1258,9067,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 244.711199][ T9065] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 244.724979][ T9067] (syz.2.1258,9067,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 244.787615][ T9067] JBD2: Ignoring recovery information on journal [ 244.931622][ T9067] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 245.189956][ T5772] ocfs2: Unmounting device (7,3) on (node local) [ 245.415871][ T5768] ocfs2: Unmounting device (7,2) on (node local) [ 246.357051][ T9122] loop3: detected capacity change from 0 to 256 [ 246.433395][ T9122] FAT-fs (loop3): Directory bread(block 64) failed [ 246.453957][ T9122] FAT-fs (loop3): Directory bread(block 65) failed [ 246.473907][ T9122] FAT-fs (loop3): Directory bread(block 66) failed [ 246.510405][ T9122] FAT-fs (loop3): Directory bread(block 67) failed [ 246.538108][ T9122] FAT-fs (loop3): Directory bread(block 68) failed [ 246.544749][ T9122] FAT-fs (loop3): Directory bread(block 69) failed [ 246.574219][ T9122] FAT-fs (loop3): Directory bread(block 70) failed [ 246.588178][ T9122] FAT-fs (loop3): Directory bread(block 71) failed [ 246.606708][ T9122] FAT-fs (loop3): Directory bread(block 72) failed [ 246.634297][ T9124] mmap: syz.0.1284 (9124) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 246.638564][ T9122] FAT-fs (loop3): Directory bread(block 73) failed [ 247.055120][ T9114] loop2: detected capacity change from 0 to 32768 [ 247.141185][ T9114] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 247.300435][ T9140] loop3: detected capacity change from 0 to 1024 [ 247.337348][ T9114] XFS (loop2): Ending clean mount [ 247.346642][ T9114] XFS (loop2): Quotacheck needed: Please wait. [ 247.457253][ T9114] XFS (loop2): Quotacheck: Done. [ 247.484654][ T9140] hfsplus: walked past end of dir [ 247.628259][ T49] hfsplus: b-tree write err: -5, ino 25 [ 247.634141][ T49] hfsplus: b-tree write err: -5, ino 4 [ 247.739670][ T49] hfsplus: b-tree write err: -5, ino 2 [ 247.756924][ T5768] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 247.779788][ T49] hfsplus: b-tree write err: -5, ino 17 [ 248.536865][ T9175] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 248.544186][ T9175] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 248.634674][ T9184] UHID_CREATE from different security context by process 660 (syz.1.1300), this is not allowed. [ 248.720188][ T9175] vhci_hcd vhci_hcd.0: Device attached [ 248.938685][ T9176] vhci_hcd: connection closed [ 248.968284][ T5819] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 248.991064][ T963] vhci_hcd: stop threads [ 248.999874][ T963] vhci_hcd: release socket [ 249.017002][ T963] vhci_hcd: disconnect device [ 249.075115][ T9195] loop1: detected capacity change from 0 to 4096 [ 249.117322][ T9195] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 249.206720][ T9195] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 249.286705][ T9203] loop0: detected capacity change from 0 to 16 [ 249.336253][ T9203] erofs: (device loop0): mounted with root inode @ nid 36. [ 249.477618][ T9203] erofs: (device loop0): z_erofs_readahead: readahead error at folio 461 @ nid 36 [ 249.493469][ T5770] ntfs3: loop1: ino=1a, ntfs_sync_fs failed, -22. [ 249.528137][ T5770] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 249.537766][ T9203] erofs: (device loop0): z_erofs_readahead: readahead error at folio 460 @ nid 36 [ 249.585989][ T9203] erofs: (device loop0): z_erofs_readahead: readahead error at folio 340 @ nid 36 [ 249.619153][ T9203] syz.0.1305: attempt to access beyond end of device [ 249.619153][ T9203] loop0: rw=524288, sector=22873858832, nr_sectors = 16 limit=16 [ 249.665041][ T9203] syz.0.1305: attempt to access beyond end of device [ 249.665041][ T9203] loop0: rw=524288, sector=22873858840, nr_sectors = 16 limit=16 [ 249.716119][ T9203] syz.0.1305: attempt to access beyond end of device [ 249.716119][ T9203] loop0: rw=524288, sector=14519143264, nr_sectors = 16 limit=16 [ 249.788196][ T9203] syz.0.1305: attempt to access beyond end of device [ 249.788196][ T9203] loop0: rw=524288, sector=14519143272, nr_sectors = 16 limit=16 [ 249.851660][ T9203] syz.0.1305: attempt to access beyond end of device [ 249.851660][ T9203] loop0: rw=524288, sector=63675288, nr_sectors = 16 limit=16 [ 249.884144][ T9191] loop3: detected capacity change from 0 to 32768 [ 249.890889][ T9203] syz.0.1305: attempt to access beyond end of device [ 249.890889][ T9203] loop0: rw=524288, sector=63675296, nr_sectors = 16 limit=16 [ 249.931999][ T9203] syz.0.1305: attempt to access beyond end of device [ 249.931999][ T9203] loop0: rw=524288, sector=16240345096, nr_sectors = 16 limit=16 [ 249.949788][ T9203] syz.0.1305: attempt to access beyond end of device [ 249.949788][ T9203] loop0: rw=524288, sector=16240345104, nr_sectors = 16 limit=16 [ 249.967265][ T9203] syz.0.1305: attempt to access beyond end of device [ 249.967265][ T9203] loop0: rw=524288, sector=16438238104, nr_sectors = 16 limit=16 [ 249.989978][ T9203] syz.0.1305: attempt to access beyond end of device [ 249.989978][ T9203] loop0: rw=524288, sector=16438238112, nr_sectors = 16 limit=16 [ 250.017024][ T9191] JFS: metapage_get_blocks failed [ 250.036068][ T9191] ERROR: (device loop3): release_metapage: metapage_write_one() failed [ 250.036068][ T9191] [ 250.062611][ T9191] ERROR: (device loop3): remounting filesystem as read-only [ 250.230991][ T113] blkno = 5002c, nblocks = 1 [ 250.235685][ T113] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 250.235685][ T113] [ 251.137532][ T9209] loop1: detected capacity change from 0 to 40427 [ 251.165412][ T9209] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 251.206111][ T9209] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 251.276660][ T9209] F2FS-fs (loop1): invalid crc value [ 251.334536][ T9209] F2FS-fs (loop1): Found nat_bits in checkpoint [ 251.415762][ T9244] sctp: [Deprecated]: syz.0.1315 (pid 9244) Use of int in max_burst socket option. [ 251.415762][ T9244] Use struct sctp_assoc_value instead [ 251.571414][ T9209] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 251.628098][ T9209] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 251.842455][ T9229] loop2: detected capacity change from 0 to 32768 [ 251.912662][ T9229] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 251.961560][ T9229] JBD2: Ignoring recovery information on journal [ 252.076141][ T9229] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 252.235096][ T9235] loop3: detected capacity change from 0 to 32768 [ 252.300946][ T9235] (syz.3.1308,9235,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 252.369818][ T9235] (syz.3.1308,9235,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 252.521899][ T9235] JBD2: Ignoring recovery information on journal [ 252.631114][ T5768] ocfs2: Unmounting device (7,2) on (node local) [ 252.756453][ T9235] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 253.227653][ T5772] ocfs2: Unmounting device (7,3) on (node local) [ 253.252113][ T9282] loop2: detected capacity change from 0 to 16 [ 253.305092][ T9282] erofs: (device loop2): mounted with root inode @ nid 36. [ 253.377721][ T9282] erofs: (device loop2): z_erofs_readahead: readahead error at folio 461 @ nid 36 [ 253.436703][ T9282] erofs: (device loop2): z_erofs_readahead: readahead error at folio 460 @ nid 36 [ 253.473195][ T9282] erofs: (device loop2): z_erofs_readahead: readahead error at folio 340 @ nid 36 [ 253.496994][ T9286] loop1: detected capacity change from 0 to 256 [ 253.522343][ T9286] exfat: Deprecated parameter 'utf8' [ 253.584445][ T9286] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x114608e0, utbl_chksum : 0xe619d30d) [ 253.884552][ T9275] loop0: detected capacity change from 0 to 32768 [ 254.065835][ T9297] loop1: detected capacity change from 0 to 256 [ 254.148661][ T5819] vhci_hcd: vhci_device speed not set [ 254.234524][ T9297] FAT-fs (loop1): Directory bread(block 64) failed [ 254.263501][ T9297] FAT-fs (loop1): Directory bread(block 65) failed [ 254.310007][ T9297] FAT-fs (loop1): Directory bread(block 66) failed [ 254.316649][ T9297] FAT-fs (loop1): Directory bread(block 67) failed [ 254.368327][ T9297] FAT-fs (loop1): Directory bread(block 68) failed [ 254.375139][ T9297] FAT-fs (loop1): Directory bread(block 69) failed [ 254.418686][ T9297] FAT-fs (loop1): Directory bread(block 70) failed [ 254.425411][ T9297] FAT-fs (loop1): Directory bread(block 71) failed [ 254.468501][ T9297] FAT-fs (loop1): Directory bread(block 72) failed [ 254.475331][ T9297] FAT-fs (loop1): Directory bread(block 73) failed [ 255.403856][ T9332] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1341'. [ 255.928279][ T969] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 256.038244][ T5819] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 256.109219][ T9338] loop2: detected capacity change from 0 to 32768 [ 256.140470][ T969] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 256.149534][ T969] usb 4-1: config 0 has no interface number 0 [ 256.156514][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.163323][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.180334][ T969] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 256.210005][ T9338] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 256.218213][ T969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.229405][ T969] usb 4-1: Product: syz [ 256.233751][ T969] usb 4-1: Manufacturer: syz [ 256.239517][ T5819] usb 2-1: Using ep0 maxpacket: 16 [ 256.248497][ T969] usb 4-1: SerialNumber: syz [ 256.262313][ T969] usb 4-1: config 0 descriptor?? [ 256.275849][ T5819] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.275895][ T969] usb 4-1: selecting invalid altsetting 1 [ 256.296198][ T969] dvb_ttusb_budget: ttusb_init_controller: error [ 256.303288][ T969] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 256.338845][ T5819] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 256.382436][ T9338] XFS (loop2): Ending clean mount [ 256.388639][ T969] DVB: Unable to find symbol stv0299_attach() [ 256.393384][ T5819] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 256.436046][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.470779][ T5819] usb 2-1: Product: syz [ 256.475167][ T5819] usb 2-1: Manufacturer: syz [ 256.523632][ T5819] usb 2-1: SerialNumber: syz [ 256.535067][ T969] DVB: Unable to find symbol tda8083_attach() [ 256.554233][ T969] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 256.624537][ T969] usb 4-1: USB disconnect, device number 9 [ 256.780152][ T5768] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 256.800686][ T5819] usb 2-1: 0:2 : does not exist [ 256.826397][ T5819] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 256.961135][ T5819] usb 2-1: USB disconnect, device number 10 [ 257.052895][ T6247] udevd[6247]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 257.298544][ T9375] overlay: Unknown parameter '\yzkaller' [ 257.750321][ T9386] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1362'. [ 257.858529][ T9371] loop0: detected capacity change from 0 to 32768 [ 257.941570][ T9371] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 258.207632][ T9371] XFS (loop0): Ending clean mount [ 258.382423][ T5769] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 258.425849][ T9411] ip6tnl2: entered promiscuous mode [ 259.102493][ T9409] loop1: detected capacity change from 0 to 32768 [ 259.205896][ T9409] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 259.276506][ T9409] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 259.448187][ T9409] XFS (loop1): Ending clean mount [ 259.460971][ T9409] XFS (loop1): Quotacheck needed: Please wait. [ 259.586219][ T9409] XFS (loop1): Quotacheck: Done. [ 259.748251][ T5787] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 259.760135][ T5770] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 259.945919][ T5787] usb 4-1: Using ep0 maxpacket: 8 [ 259.967911][ T5787] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 259.981653][ T5787] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 260.008145][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.027177][ T5787] usb 4-1: Product: syz [ 260.050834][ T5787] usb 4-1: Manufacturer: syz [ 260.055575][ T5787] usb 4-1: SerialNumber: syz [ 260.076549][ T5787] usb 4-1: config 0 descriptor?? [ 260.114523][ T5787] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 260.133111][ T5787] usb 4-1: setting power ON [ 260.159165][ T5787] dvb-usb: bulk message failed: -22 (2/0) [ 260.220756][ T5787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 260.248968][ T5787] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 260.268465][ T5787] usb 4-1: media controller created [ 260.349057][ T9449] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1383'. [ 260.358168][ T9441] dvb-usb: bulk message failed: -22 (3/0) [ 260.358240][ T9441] dvb-usb: bulk message failed: -22 (4/0) [ 260.358255][ T9441] cxusb: i2c read failed [ 260.366484][ T9449] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1383'. [ 260.378831][ T5787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 260.399513][ T9445] loop2: detected capacity change from 0 to 32768 [ 260.476823][ T9445] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 260.488227][ T5787] usb 4-1: selecting invalid altsetting 6 [ 260.494661][ T5787] usb 4-1: digital interface selection failed (-22) [ 260.573997][ T5787] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 260.639931][ T5787] usb 4-1: setting power OFF [ 260.654238][ T9445] XFS (loop2): Ending clean mount [ 260.659636][ T5787] dvb-usb: bulk message failed: -22 (2/0) [ 260.666065][ T5787] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 260.707738][ T5787] (NULL device *): no alternate interface [ 260.790677][ T5787] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 260.802359][ T5768] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 260.881213][ T5787] usb 4-1: USB disconnect, device number 10 [ 261.600690][ T9471] loop3: detected capacity change from 0 to 4096 [ 261.613796][ T9475] loop2: detected capacity change from 0 to 1024 [ 261.639216][ T9475] EXT4-fs: Ignoring removed nobh option [ 261.678290][ T9457] loop0: detected capacity change from 0 to 40427 [ 261.678557][ T9471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.719907][ T9475] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 261.742655][ T9457] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x7ffff [ 261.802992][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 261.803017][ T28] audit: type=1800 audit(1776212502.363:41): pid=9471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1391" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 261.830383][ T9457] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0xe4 [ 261.861634][ T9457] F2FS-fs (loop0): invalid crc value [ 261.875680][ T9475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.925705][ T9457] F2FS-fs (loop0): Found nat_bits in checkpoint [ 261.933084][ T9475] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #12: block 7: comm syz.2.1392: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 262.000169][ T9475] EXT4-fs (loop2): Remounting filesystem read-only [ 262.047645][ T9457] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 262.075735][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.169655][ T9457] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 262.279794][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.677198][ T9474] loop1: detected capacity change from 0 to 32768 [ 262.762526][ T9474] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 262.924695][ T9474] XFS (loop1): Ending clean mount [ 262.965390][ T9474] XFS (loop1): Quotacheck needed: Please wait. [ 263.061987][ T9474] XFS (loop1): Quotacheck: Done. [ 263.257751][ T5770] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 263.441204][ T5777] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 263.643435][ T9525] loop2: detected capacity change from 0 to 2048 [ 263.671510][ T28] audit: type=1326 audit(1776212504.233:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9506 comm="syz.0.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74b79c819 code=0x7fc00000 [ 263.705503][ T9525] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 263.861392][ T9529] loop0: detected capacity change from 0 to 256 [ 264.491934][ T9546] loop1: detected capacity change from 0 to 1764 [ 264.540131][ T9546] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 264.938298][ T9550] loop0: detected capacity change from 0 to 4096 [ 265.019969][ T9550] ntfs: volume version 3.1. [ 265.162127][ T9550] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 265.208664][ T9550] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 265.275036][ T9550] ntfs: (device loop0): parse_options(): Option iocharset is deprecated. Please use option nls= in the future. [ 265.302131][ T9542] loop2: detected capacity change from 0 to 32768 [ 265.313661][ T9550] ntfs: (device loop0): parse_options(): Option iocharset is deprecated. Please use option nls= in the future. [ 265.368183][ T9550] ntfs: (device loop0): parse_options(): Unrecognized mount option discard. [ 265.376986][ T9550] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 265.458199][ T9550] ntfs: (device loop0): parse_options(): Unrecognized mount option allow_utime. [ 265.467550][ T9550] ntfs: (device loop0): parse_options(): Unrecognized mount option allow_utime. [ 265.486526][ T9542] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 265.643765][ T9542] XFS (loop2): Ending clean mount [ 265.693493][ T9542] XFS (loop2): Quotacheck needed: Please wait. [ 265.858041][ T9542] XFS (loop2): Quotacheck: Done. [ 265.893661][ T9549] loop1: detected capacity change from 0 to 40427 [ 265.920451][ T9549] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 265.927146][ T9549] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 266.011155][ T9549] F2FS-fs (loop1): Found nat_bits in checkpoint [ 266.101123][ T5768] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 266.142971][ T9569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1423'. [ 266.144968][ T9565] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 266.152844][ T9569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1423'. [ 266.223715][ T9549] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 266.231514][ T9549] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 266.334008][ T9565] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 266.509121][ T5770] bio_check_eod: 50 callbacks suppressed [ 266.509141][ T5770] syz-executor: attempt to access beyond end of device [ 266.509141][ T5770] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 266.588134][ T5770] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 266.633754][ T9571] set_capacity_and_notify: 1 callbacks suppressed [ 266.633772][ T9571] loop0: detected capacity change from 0 to 2048 [ 266.709043][ T9571] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 267.178295][ T5787] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 267.377911][ T9583] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1426'. [ 267.393987][ T5787] usb 3-1: Using ep0 maxpacket: 8 [ 267.399843][ T9583] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1426'. [ 267.415147][ T5787] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 267.426371][ T5787] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 267.438303][ T9583] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1426'. [ 267.447708][ T5787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.466069][ T5787] usb 3-1: Product: syz [ 267.479122][ T5787] usb 3-1: Manufacturer: syz [ 267.484075][ T5787] usb 3-1: SerialNumber: syz [ 267.501056][ T5787] usb 3-1: config 0 descriptor?? [ 267.550462][ T5787] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 267.588210][ T5787] usb 3-1: setting power ON [ 267.602267][ T5787] dvb-usb: bulk message failed: -22 (2/0) [ 267.614998][ T5787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 267.633229][ T5787] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 267.642035][ T5787] usb 3-1: media controller created [ 267.656981][ T9576] loop3: detected capacity change from 0 to 32768 [ 267.707714][ T5787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.754096][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 267.754114][ T28] audit: type=1800 audit(1776212508.303:43): pid=9576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1427" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 267.816217][ T5787] usb 3-1: selecting invalid altsetting 6 [ 267.868062][ T5787] usb 3-1: digital interface selection failed (-22) [ 267.876661][ T5787] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 267.886661][ T9577] dvb-usb: bulk message failed: -22 (3/0) [ 267.908660][ T9577] dvb-usb: bulk message failed: -22 (4/0) [ 267.934349][ T9577] cxusb: i2c read failed [ 267.938969][ T5787] usb 3-1: setting power OFF [ 267.945302][ T5787] dvb-usb: bulk message failed: -22 (2/0) [ 267.968954][ T5787] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 267.981695][ T5787] (NULL device *): no alternate interface [ 268.108232][ T5787] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 268.124272][ T9591] loop0: detected capacity change from 0 to 2048 [ 268.141682][ T5787] usb 3-1: USB disconnect, device number 8 [ 268.224681][ T9591] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 268.555915][ T9597] loop0: detected capacity change from 0 to 512 [ 268.596421][ T9597] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 268.661549][ T9597] EXT4-fs (loop0): orphan cleanup on readonly fs [ 268.677374][ T9597] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.1436: Block bitmap for bg 0 marked uninitialized [ 268.728998][ T9599] loop3: detected capacity change from 0 to 4096 [ 268.744956][ T9597] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 268.783218][ T9599] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 268.799069][ T9597] EXT4-fs (loop0): 1 orphan inode deleted [ 268.806682][ T9597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 268.858915][ T9597] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.1436: Block bitmap for bg 0 marked uninitialized [ 268.966074][ T9602] netlink: 'syz.2.1438': attribute type 2 has an invalid length. [ 268.975860][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.248392][ T9608] loop3: detected capacity change from 0 to 1024 [ 269.359613][ T69] hfsplus: b-tree write err: -5, ino 25 [ 269.377821][ T69] hfsplus: b-tree write err: -5, ino 4 [ 269.394210][ T69] hfsplus: b-tree write err: -5, ino 2 [ 270.159500][ T9632] loop2: detected capacity change from 0 to 4096 [ 270.207521][ T9632] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 270.370840][ T9632] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 270.702093][ T9621] loop1: detected capacity change from 0 to 32768 [ 271.116707][ T9645] loop2: detected capacity change from 0 to 1024 [ 271.166456][ T9645] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 271.638234][ T9653] loop2: detected capacity change from 0 to 2048 [ 271.680583][ T9653] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 271.767100][ T9639] loop3: detected capacity change from 0 to 40427 [ 271.820726][ T9639] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 271.856093][ T9639] F2FS-fs (loop3): invalid crc value [ 271.887015][ T9639] F2FS-fs (loop3): Found nat_bits in checkpoint [ 272.054503][ T9661] loop2: detected capacity change from 0 to 256 [ 272.061510][ T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 272.108487][ T9639] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 272.133676][ T9661] FAT-fs (loop2): Directory bread(block 64) failed [ 272.156257][ T9661] FAT-fs (loop2): Directory bread(block 65) failed [ 272.175726][ T9661] FAT-fs (loop2): Directory bread(block 66) failed [ 272.194469][ T9661] FAT-fs (loop2): Directory bread(block 67) failed [ 272.212796][ T9661] FAT-fs (loop2): Directory bread(block 68) failed [ 272.230082][ T9661] FAT-fs (loop2): Directory bread(block 69) failed [ 272.236822][ T9661] FAT-fs (loop2): Directory bread(block 70) failed [ 272.267887][ T9661] FAT-fs (loop2): Directory bread(block 71) failed [ 272.282754][ T23] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 272.296167][ T9661] FAT-fs (loop2): Directory bread(block 72) failed [ 272.306120][ T23] usb 1-1: config 0 has no interface number 0 [ 272.320189][ T23] usb 1-1: config 0 interface 4 has no altsetting 0 [ 272.327172][ T9661] FAT-fs (loop2): Directory bread(block 73) failed [ 272.336387][ T23] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 272.361252][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.406420][ T23] usb 1-1: config 0 descriptor?? [ 272.427031][ T23] cp210x 1-1:0.4: cp210x converter detected [ 272.863104][ T23] cp210x 1-1:0.4: failed to get vendor val 0x000e size 3: -71 [ 272.899387][ T23] usb 1-1: cp210x converter now attached to ttyUSB0 [ 272.927883][ T23] usb 1-1: USB disconnect, device number 12 [ 272.979158][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 273.003479][ T23] cp210x 1-1:0.4: device disconnected [ 273.376578][ T9678] loop1: detected capacity change from 0 to 4096 [ 273.413915][ T9678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.470059][ T28] audit: type=1800 audit(1776212514.033:44): pid=9678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1473" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 273.685727][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.161049][ T9704] loop1: detected capacity change from 0 to 64 [ 274.293029][ T9702] loop0: detected capacity change from 0 to 4096 [ 274.340301][ T49] ------------[ cut here ]------------ [ 274.345853][ T49] kernel BUG at fs/hfs/inode.c:449! [ 274.356812][ T49] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 274.363093][ T49] CPU: 0 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 274.370623][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 274.380736][ T49] Workqueue: writeback wb_workfn (flush-7:1) [ 274.386793][ T49] RIP: 0010:hfs_write_inode+0x87a/0x880 [ 274.392409][ T49] Code: c7 c1 00 f3 30 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 f3 30 97 e8 20 fa 83 ff e9 62 fe ff ff e8 96 c2 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 [ 274.412161][ T49] RSP: 0018:ffffc90000ba7340 EFLAGS: 00010293 [ 274.418281][ T49] RAX: ffffffff825b5f6a RBX: ffff888058a576a8 RCX: ffff88801ce79e00 [ 274.426310][ T49] RDX: 0000000000000000 RSI: ffffffff8d339b00 RDI: 0000000000000000 [ 274.434340][ T49] RBP: ffffc90000ba74d0 R08: ffff88801ce79e00 R09: 0000000000000003 [ 274.442456][ T49] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 274.450499][ T49] R13: 1ffff92000174e6c R14: ffff888058a57658 R15: 0000000000000000 [ 274.458572][ T49] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 274.467553][ T49] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.474287][ T49] CR2: 00007ffce705cf40 CR3: 0000000061676000 CR4: 00000000003506f0 [ 274.482322][ T49] Call Trace: [ 274.485666][ T49] [ 274.488740][ T49] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 274.494272][ T49] ? __rwlock_init+0x150/0x150 [ 274.499389][ T49] __writeback_single_inode+0x705/0xec0 [ 274.505011][ T49] writeback_sb_inodes+0x7cd/0xf50 [ 274.510199][ T49] ? queue_io+0x550/0x550 [ 274.514700][ T49] ? rcu_is_watching+0x15/0xb0 [ 274.519549][ T49] wb_writeback+0x46a/0xbf0 [ 274.524210][ T49] ? queue_io+0x341/0x550 [ 274.528734][ T49] ? percpu_ref_tryget+0x250/0x250 [ 274.533926][ T49] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 274.539979][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 274.545864][ T49] wb_workfn+0x400/0xe60 [ 274.550213][ T49] ? try_to_wake_up+0x70a/0x1190 [ 274.555350][ T49] ? inode_wait_for_writeback+0x230/0x230 [ 274.561168][ T49] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 274.567340][ T49] ? read_lock_is_recursive+0x20/0x20 [ 274.572867][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 274.578140][ T49] ? process_scheduled_works+0x96f/0x15d0 [ 274.583930][ T49] ? process_scheduled_works+0x96f/0x15d0 [ 274.589712][ T49] process_scheduled_works+0xa5d/0x15d0 [ 274.595332][ T49] ? worker_attach_to_pool+0x380/0x380 [ 274.600948][ T49] ? assign_work+0x3d2/0x5d0 [ 274.605596][ T49] worker_thread+0xa55/0xfc0 [ 274.610271][ T49] kthread+0x2fa/0x390 [ 274.614485][ T49] ? pr_cont_work+0x560/0x560 [ 274.619323][ T49] ? kthread_blkcg+0xd0/0xd0 [ 274.624314][ T49] ret_from_fork+0x48/0x80 [ 274.628819][ T49] ? kthread_blkcg+0xd0/0xd0 [ 274.633467][ T49] ret_from_fork_asm+0x11/0x20 [ 274.638300][ T49] [ 274.641378][ T49] Modules linked in: [ 274.647040][ T9707] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 274.658691][ T49] ---[ end trace 0000000000000000 ]--- [ 274.665394][ T49] RIP: 0010:hfs_write_inode+0x87a/0x880 [ 274.671610][ T49] Code: c7 c1 00 f3 30 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 f3 30 97 e8 20 fa 83 ff e9 62 fe ff ff e8 96 c2 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 [ 274.691399][ T49] RSP: 0018:ffffc90000ba7340 EFLAGS: 00010293 [ 274.697657][ T49] RAX: ffffffff825b5f6a RBX: ffff888058a576a8 RCX: ffff88801ce79e00 [ 274.715964][ T49] RDX: 0000000000000000 RSI: ffffffff8d339b00 RDI: 0000000000000000 [ 274.737393][ T49] RBP: ffffc90000ba74d0 R08: ffff88801ce79e00 R09: 0000000000000003 [ 274.756298][ T49] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 274.767501][ T9690] loop3: detected capacity change from 0 to 32768 [ 274.774362][ T49] R13: 1ffff92000174e6c R14: ffff888058a57658 R15: 0000000000000000 [ 274.798074][ T49] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 274.808104][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 274.827288][ T49] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.842522][ T9690] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 274.859252][ T49] CR2: 000055556bd9b4e8 CR3: 0000000075b76000 CR4: 00000000003506e0 [ 274.878770][ T49] Kernel panic - not syncing: Fatal exception [ 274.885646][ T49] Kernel Offset: disabled [ 274.890104][ T49] Rebooting in 86400 seconds..