last executing test programs: 1m45.736071434s ago: executing program 2 (id=2727): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m45.583809054s ago: executing program 2 (id=2729): unshare(0x2a020400) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) 1m45.456887102s ago: executing program 2 (id=2730): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x80000000, 0x4) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) 1m45.349588039s ago: executing program 2 (id=2731): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fusectl\x00', 0x8014, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x28, 0x0) 1m43.070256199s ago: executing program 2 (id=2746): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) 1m29.749753111s ago: executing program 2 (id=2833): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x315, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x51}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x8, "3cb442e2"}]}}, 0x0}, 0x0) 1m29.474660839s ago: executing program 32 (id=2833): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x315, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x51}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x8, "3cb442e2"}]}}, 0x0}, 0x0) 9.128174083s ago: executing program 1 (id=3402): syz_mount_image$jfs(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x62cd, &(0x7f00000042c0)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 6.088940482s ago: executing program 1 (id=3421): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 5.904339404s ago: executing program 5 (id=3424): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000001080)={0x5, 0xd, 0x2, 0x5, 0x5, 0x8, "96f865ac131bf78cd2fb00", 0x8, 0x3, 0x8, 0xfd, 0x9, 0x0, 0x6}) 5.790552602s ago: executing program 5 (id=3425): syz_mount_image$jfs(&(0x7f0000000380), &(0x7f0000000080)='./file1\x00', 0x10042, &(0x7f0000004240)=ANY=[@ANYBLOB='discard=0x00000000000000f2,errors=continue,errors=continue,iocharset=cp861,iocharset=euc-jp,integrity,usrquota,errors=remount-ro,uid=', @ANYRESHEX=0xee01, @ANYBLOB='\x00\x00'], 0x24, 0x6202, &(0x7f000000d780)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 4.74047034s ago: executing program 5 (id=3434): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x4e21, @empty=0xe0000000}}, {{0x2, 0x4e25, @broadcast}}}, 0x108) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)={@multicast1=0xe0000000, @loopback, 0x0, 0x1, [@multicast2]}, 0x14) 4.690117213s ago: executing program 0 (id=3436): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x34}}, 0x0) 4.588341891s ago: executing program 0 (id=3438): syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x208000, &(0x7f0000003f80)=ANY=[@ANYBLOB="6e6c733d63703935302c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030313030302c00d01280f532b0f4cf3b36fd5c6ef64269a533fc6b052f92ffcac08ca18519d5b3711b97ec291e41355fa65d9c0d15e7c10c63ab0bba736f92ab9d30478ae1452a017be98c2a0507febf295db17e98d0fffc0d349264ce2acdedc0a61ae132d4024d39e11de2dc8679fac7efcb6137aa2e361c5f6cb851e3a60ba05f834666694667f27f0d632cf9a85fe247e27251acbd739ff85088cb201010900132000000000000000000002593d600000000"], 0xfd, 0x691, &(0x7f00000002c0)="$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") mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa0) lsetxattr$security_capability(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 4.363465655s ago: executing program 0 (id=3439): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, r0, 0x2) getsockname$inet6(r0, 0x0, 0x0) 4.259678662s ago: executing program 0 (id=3441): io_setup(0x8, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x17b0, &(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000080)) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 3.027340433s ago: executing program 4 (id=3452): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r0, 0x8910, &(0x7f0000000100)={0xfffffffc, 0x0, 0x80, 0x7ff, 0x0, "5dee0000005940000000000f00"}) 2.285982871s ago: executing program 5 (id=3453): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@caif=@dgm={0x25, 0x10}, 0x80, 0x0}, 0x0) 2.189114197s ago: executing program 5 (id=3454): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x1000, 0x4) 2.025887468s ago: executing program 5 (id=3455): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000180), 0x1, 0x979b, &(0x7f0000009780)="$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") lsetxattr(&(0x7f0000000280)='./file1\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='trusted.p'], 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) 893.002322ms ago: executing program 4 (id=3463): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}]}}}]}, 0x4c}}, 0x0) 892.902522ms ago: executing program 3 (id=3464): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/unix\x00') sendfile(r0, r1, 0x0, 0x1) 801.529618ms ago: executing program 4 (id=3465): unshare(0x20000400) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x240500, 0x0) getdents64(r0, 0x0, 0x0) 739.555422ms ago: executing program 3 (id=3466): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, 0x0, &(0x7f00000023c0)) 687.254416ms ago: executing program 1 (id=3467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x80}}, 0x0) 623.74564ms ago: executing program 4 (id=3468): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x2, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0xfffffffb}) 555.454994ms ago: executing program 3 (id=3469): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, r1, 0x1, 0xfffffffe, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_SF_ORD={0x5}]}, 0x3c}}, 0x0) 531.797396ms ago: executing program 1 (id=3470): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) fsopen(&(0x7f0000000180)='ext4\x00', 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000180)=""/25) 464.4753ms ago: executing program 3 (id=3471): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2719, 0x0, &(0x7f0000000000)) 421.142993ms ago: executing program 0 (id=3472): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x7ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000500", 0x33fe0}], 0x1}, 0x0) 390.223245ms ago: executing program 4 (id=3473): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='binfmt_misc\x00', 0x10, 0x0) mount(0x0, &(0x7f00000007c0)='./file0\x00', 0x0, 0x20, 0x0) 344.678478ms ago: executing program 3 (id=3474): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x10000000) 268.311073ms ago: executing program 1 (id=3475): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) 189.205158ms ago: executing program 1 (id=3476): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000286dd6018232500088800fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000010100000008"], 0x0) 143.191191ms ago: executing program 4 (id=3477): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x20301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x10000) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x9) 29.068039ms ago: executing program 3 (id=3478): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x0, 0x4, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) 0s ago: executing program 0 (id=3479): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000040)="02000000", 0x4}, {&(0x7f0000000280)="f697079a16", 0x5}, {&(0x7f000000a380)='R', 0x1}], 0x3, 0x0, 0x0) kernel console output (not intermixed with test programs): 4: detected capacity change from 0 to 2048 [ 285.911772][ T9394] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 285.984313][ T9395] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 286.276482][ T9364] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 286.286993][ T9364] REISERFS (device loop1): using ordered data mode [ 286.293898][ T9364] reiserfs: using flush barriers [ 286.321017][ T9364] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 286.354855][ T9364] REISERFS (device loop1): checking transaction log (loop1) [ 286.469882][ T9364] REISERFS (device loop1): Using r5 hash to sort names [ 286.531069][ T9364] reiserfs: enabling write barrier flush mode [ 286.722166][ T9364] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 286.770248][ T9364] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 286.830132][ T9364] REISERFS (device loop1): Remounting filesystem read-only [ 286.861863][ T9364] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 286.889881][ T9364] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 286.946341][ T9364] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 286.987451][ T9364] REISERFS error (device loop1): zam-7001 reiserfs_find_entry: io error [ 287.020994][ T9364] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 287.072158][ T9364] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 287.150993][ T9364] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 287.208931][ T9364] REISERFS warning (device loop1): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 287.259639][ T9417] loop2: detected capacity change from 0 to 2048 [ 287.328509][ T9364] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 287.372588][ T9364] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 287.412946][ T9364] REISERFS (device loop1): Remounting filesystem read-only [ 287.440705][ T9419] loop3: detected capacity change from 0 to 4096 [ 287.455385][ T9364] REISERFS error (device loop1): zam-7001 reiserfs_find_entry: io error [ 287.603611][ T9419] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 287.644378][ T9419] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 287.677013][ T9419] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 287.685461][ T9419] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 287.708279][ T9419] ntfs3: loop3: try to read out of volume at offset 0x3fffffc1c00 [ 287.727889][ T9419] ntfs3: loop3: try to read out of volume at offset 0x3fffffc2c00 [ 287.741978][ T9419] ntfs3: loop3: try to read out of volume at offset 0x3fffffc4c00 [ 287.766113][ T9419] ntfs3: loop3: try to read out of volume at offset 0x3fffffc8c00 [ 287.786077][ T9419] ntfs3: loop3: try to read out of volume at offset 0x3fffffd0c00 [ 287.820367][ T9419] ntfs3: loop3: try to read out of volume at offset 0x3fffffe0c00 [ 288.725752][ T9417] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 288.829931][ T9434] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 289.116592][ T9442] loop4: detected capacity change from 0 to 512 [ 289.215453][ T9442] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 289.233582][ T9442] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 289.357034][ T9442] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.2198: Invalid block bitmap block 0 in block_group 0 [ 289.417476][ T9442] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 289.452118][ T9452] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 289.486597][ T9452] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 289.499031][ T9442] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.2198: attempt to clear invalid blocks 983261 len 1 [ 289.513482][ T9452] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 289.531663][ T9452] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 289.539199][ T9452] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 289.553453][ T9442] EXT4-fs error (device loop4): __ext4_get_inode_loc:4321: comm syz.4.2198: Invalid inode table block 0 in block_group 0 [ 289.589997][ T9452] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 289.602667][ T9442] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 289.612422][ T9452] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 289.620143][ T9452] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 289.641601][ T9452] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 289.656246][ T9452] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 289.681038][ T9442] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 289.702726][ T9452] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 289.714641][ T9442] EXT4-fs error (device loop4): __ext4_get_inode_loc:4321: comm syz.4.2198: Invalid inode table block 0 in block_group 0 [ 289.777788][ T9442] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 289.815069][ T9442] EXT4-fs error (device loop4): ext4_truncate:4273: inode #11: comm syz.4.2198: mark_inode_dirty error [ 289.846491][ T9442] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 289.884788][ T9442] EXT4-fs error (device loop4): __ext4_get_inode_loc:4321: comm syz.4.2198: Invalid inode table block 0 in block_group 0 [ 289.928635][ T9442] EXT4-fs (loop4): 1 truncate cleaned up [ 289.934566][ T9442] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,usrquota,noblock_validity,,errors=continue. Quota mode: writeback. [ 290.053487][ T9442] EXT4-fs error (device loop4): __ext4_get_inode_loc:4321: comm syz.4.2198: Invalid inode table block 0 in block_group 0 [ 290.134657][ T9442] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 290.200965][ T5219] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 290.602877][ T5219] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 4093, setting to 64 [ 290.633945][ T5219] usb 2-1: config 0 interface 0 has no altsetting 0 [ 290.860983][ T5219] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 290.892104][ T5219] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 290.900570][ T5219] usb 2-1: Product: syz [ 290.908182][ T9473] loop3: detected capacity change from 0 to 256 [ 290.925154][ T5219] usb 2-1: Manufacturer: syz [ 290.930047][ T5219] usb 2-1: SerialNumber: syz [ 290.943740][ T5219] usb 2-1: config 0 descriptor?? [ 291.014877][ T5219] usb 2-1: selecting invalid altsetting 0 [ 291.271401][ T9454] usb 2-1: selecting invalid altsetting 0 [ 291.287893][ T9454] usb 2-1: 0:0: usb_set_interface failed (-22) [ 291.318566][ T9454] usb 2-1: selecting invalid altsetting 0 [ 291.333197][ T9454] usb 2-1: 0:0: usb_set_interface failed (-22) [ 291.348205][ T9454] usb 2-1: selecting invalid altsetting 0 [ 291.369971][ T9454] usb 2-1: 0:0: usb_set_interface failed (-22) [ 291.445381][ T23] usb 2-1: USB disconnect, device number 17 [ 291.802565][ T9473] FAT-fs (loop3): Directory bread(block 64) failed [ 291.809176][ T9473] FAT-fs (loop3): Directory bread(block 65) failed [ 291.854699][ T9473] FAT-fs (loop3): Directory bread(block 66) failed [ 291.899977][ T9473] FAT-fs (loop3): Directory bread(block 67) failed [ 291.946695][ T9473] FAT-fs (loop3): Directory bread(block 68) failed [ 291.988935][ T9473] FAT-fs (loop3): Directory bread(block 69) failed [ 292.011111][ T9473] FAT-fs (loop3): Directory bread(block 70) failed [ 292.049914][ T9473] FAT-fs (loop3): Directory bread(block 71) failed [ 292.083364][ T9473] FAT-fs (loop3): Directory bread(block 72) failed [ 292.116644][ T9473] FAT-fs (loop3): Directory bread(block 73) failed [ 292.537286][ T3996] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 292.858829][ T3996] usb 2-1: Using ep0 maxpacket: 32 [ 293.007772][ T3996] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.030450][ T9524] loop2: detected capacity change from 0 to 256 [ 293.051496][ T3996] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 293.110036][ T3996] usb 2-1: config 0 interface 0 has no altsetting 0 [ 293.146735][ T3996] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 293.175643][ T3996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.212682][ T3996] usb 2-1: config 0 descriptor?? [ 293.567166][ T5229] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 293.712745][ T3996] aureal 0003:0755:2626.0014: item fetching failed at offset 3/5 [ 293.742010][ T3996] aureal: probe of 0003:0755:2626.0014 failed with error -22 [ 293.881197][ T9544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2243'. [ 293.921203][ T9544] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2243'. [ 294.001012][ T4572] usb 2-1: USB disconnect, device number 18 [ 294.040030][ T5229] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice=cc.97 [ 294.060738][ T5229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.106742][ T5229] usb 5-1: config 0 descriptor?? [ 294.157717][ T5229] sisusb 5-1:0.0: Invalid USB2VGA device [ 294.166012][ T5229] sisusb: probe of 5-1:0.0 failed with error -22 [ 294.391737][ T5229] usb 5-1: USB disconnect, device number 13 [ 294.695174][ T9558] loop3: detected capacity change from 0 to 64 [ 294.817406][ T9560] overlayfs: unrecognized mount option "\fsplus" or missing value [ 295.172193][ T9524] exfat: Deprecated parameter 'namecase' [ 295.622105][ T9524] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 296.596779][ T9568] loop1: detected capacity change from 0 to 40427 [ 296.774071][ T9568] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 296.835474][ T9568] F2FS-fs (loop1): invalid crc value [ 296.910975][ T9568] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 297.180059][ T9568] F2FS-fs (loop1): Start checkpoint disabled! [ 297.247355][ T9568] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 297.410981][ T9568] F2FS-fs (loop1): Skipping Checkpoint. Checkpoints currently disabled. [ 297.445348][ T9617] loop4: detected capacity change from 0 to 1024 [ 298.271380][ T9619] loop3: detected capacity change from 0 to 32768 [ 299.461072][ T9617] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 300.058242][ T9634] CUSE: unknown device info "€" [ 300.079649][ T9634] CUSE: unknown device info "" [ 300.098797][ T9634] CUSE: unknown device info "" [ 300.104001][ T9634] CUSE: unknown device info "" [ 300.151832][ T9634] CUSE: unknown device info "ðÿÿÿ" [ 300.192279][ T9634] CUSE: unknown device info "ì" [ 300.197287][ T9634] CUSE: unknown device info "" [ 300.231584][ T9634] CUSE: unknown device info "ï‰" [ 300.236594][ T9634] CUSE: unknown device info "" [ 300.247400][ T9634] CUSE: unknown device info "" [ 300.275896][ T9634] CUSE: unknown device info "#Û" [ 300.281389][ T9634] CUSE: unknown device info "ÿÿÿÿ" [ 300.304194][ T9634] CUSE: unknown device info "" [ 300.320360][ T9634] CUSE: unknown device info "ÿÿÿÿ" [ 300.441077][ T9634] CUSE: DEVNAME unspecified [ 300.514443][ T9646] loop1: detected capacity change from 0 to 256 [ 300.599280][ T9650] device gretap0 entered promiscuous mode [ 300.623717][ T9650] device vlan5 entered promiscuous mode [ 300.659669][ T9619] (syz.3.2274,9619,1):ocfs2_initialize_super:2313 ERROR: status = -12 [ 300.683356][ T9619] (syz.3.2274,9619,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 300.867655][ T26] audit: type=1326 audit(1759798158.177:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.0.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4486ec9 code=0x7fc00000 [ 300.951175][ T26] audit: type=1326 audit(1759798158.177:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.0.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f68e4486ec9 code=0x7fc00000 [ 300.993564][ T26] audit: type=1326 audit(1759798158.177:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.0.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4486ec9 code=0x7fc00000 [ 301.073945][ T26] audit: type=1326 audit(1759798158.177:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.0.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4486ec9 code=0x7fc00000 [ 301.080721][ T9656] loop2: detected capacity change from 0 to 1024 [ 301.133309][ T26] audit: type=1326 audit(1759798158.177:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.0.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4486ec9 code=0x7fc00000 [ 301.203372][ T26] audit: type=1326 audit(1759798158.177:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.0.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4486ec9 code=0x7fc00000 [ 301.252058][ T26] audit: type=1326 audit(1759798158.177:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.0.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4486ec9 code=0x7fc00000 [ 301.315411][ T26] audit: type=1326 audit(1759798158.177:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.0.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4486ec9 code=0x7fc00000 [ 301.378953][ T26] audit: type=1326 audit(1759798158.177:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.0.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4486ec9 code=0x7fc00000 [ 301.433860][ T26] audit: type=1326 audit(1759798158.177:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.0.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4486ec9 code=0x7fc00000 [ 302.827823][ T9656] EXT4-fs (loop2): Ignoring removed nobh option [ 302.840952][ T9656] EXT4-fs (loop2): Ignoring removed bh option [ 302.912015][ T9664] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 303.040025][ T9667] loop3: detected capacity change from 0 to 128 [ 303.125475][ T9656] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007bc,data_err=ignore,grpquota,nobh,data_err=ignore,bh,errors=continue,,errors=continue. Quota mode: writeback. [ 303.267487][ T9667] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 303.317109][ T9667] ext4 filesystem being mounted at /408/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 303.353327][ T9656] EXT4-fs (loop2): can't change dax mount option while remounting [ 303.612770][ T9646] FAT-fs (loop1): Directory bread(block 64) failed [ 303.620113][ T9646] FAT-fs (loop1): Directory bread(block 65) failed [ 303.646222][ T9646] FAT-fs (loop1): Directory bread(block 66) failed [ 303.659678][ T9646] FAT-fs (loop1): Directory bread(block 67) failed [ 303.689228][ T9646] FAT-fs (loop1): Directory bread(block 68) failed [ 303.702616][ T9646] FAT-fs (loop1): Directory bread(block 69) failed [ 303.709288][ T9646] FAT-fs (loop1): Directory bread(block 70) failed [ 303.764510][ T9646] FAT-fs (loop1): Directory bread(block 71) failed [ 303.781095][ T9646] FAT-fs (loop1): Directory bread(block 72) failed [ 303.840987][ T9646] FAT-fs (loop1): Directory bread(block 73) failed [ 304.387236][ T9672] loop4: detected capacity change from 0 to 32768 [ 304.653861][ T9674] loop2: detected capacity change from 0 to 32768 [ 304.725117][ T9672] XFS (loop4): Mounting V5 Filesystem [ 304.760512][ T9686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2300'. [ 305.800743][ T9692] loop3: detected capacity change from 0 to 1024 [ 306.585291][ T9672] XFS (loop4): Ending clean mount [ 306.715337][ T4196] XFS (loop4): Unmounting Filesystem [ 307.175427][ T9698] netlink: 'syz.2.2306': attribute type 1 has an invalid length. [ 307.204212][ T9698] netlink: 'syz.2.2306': attribute type 2 has an invalid length. [ 307.335092][ T9692] EXT4-fs (loop3): Ignoring removed bh option [ 307.557751][ T9692] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,noauto_da_alloc,jqfmt=vfsold,stripe=0x0000000000000003,noauto_da_alloc,auto_da_alloc=0x0000000000000005,dioread_lock,init_itable,jqfmt=vfsv1,bh,,errors=continue. Quota mode: none. [ 307.765176][ T9706] loop2: detected capacity change from 0 to 4096 [ 308.072529][ T9711] device syz_tun entered promiscuous mode [ 308.118418][ T9711] device syz_tun left promiscuous mode [ 308.437571][ T9708] loop1: detected capacity change from 0 to 32768 [ 309.041460][ T4572] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 309.411756][ T4572] usb 4-1: Using ep0 maxpacket: 8 [ 309.593296][ T4572] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 309.602308][ T4572] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.623401][ T4572] usb 4-1: config 0 has no interface number 0 [ 309.667324][ T9706] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 309.744037][ T9706] fs-verity: sha256 using implementation "sha256-avx2" [ 309.862514][ T4572] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 309.880987][ T4572] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.889038][ T4572] usb 4-1: Product: syz [ 309.920863][ T4572] usb 4-1: Manufacturer: syz [ 309.925839][ T4572] usb 4-1: SerialNumber: syz [ 309.958751][ T4572] usb 4-1: config 0 descriptor?? [ 310.022070][ T4572] usb 4-1: Found UVC 0.00 device syz (046d:08c3) [ 310.030976][ T4572] usb 4-1: No valid video chain found. [ 310.093967][ T9728] mmap: syz.0.2318 (9728) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 310.217808][ T9708] XFS (loop1): Mounting V5 Filesystem [ 310.288697][ T5229] usb 4-1: USB disconnect, device number 16 [ 311.105205][ T9746] loop3: detected capacity change from 0 to 1024 [ 311.111718][ T9708] XFS (loop1): Ending clean mount [ 311.176459][ T9708] XFS (loop1): Quotacheck needed: Please wait. [ 311.421050][ T9708] XFS (loop1): Quotacheck: Done. [ 311.547213][ T4187] XFS (loop1): Unmounting Filesystem [ 312.458271][ T9756] program syz.2.2327 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 313.172006][ T9760] netlink: 'syz.2.2328': attribute type 3 has an invalid length. [ 313.180853][ T9758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.298796][ T9764] ieee802154 phy0 wpan0: encryption failed: -22 [ 313.393082][ T9746] hfsplus: bad catalog entry type [ 313.501542][ T144] hfsplus: b-tree write err: -5, ino 4 [ 313.940873][ T9784] loop2: detected capacity change from 0 to 64 [ 314.060973][ T3996] Bluetooth: hci4: command 0x0406 tx timeout [ 314.174348][ T5229] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 314.676635][ T9779] loop3: detected capacity change from 0 to 128 [ 314.750743][ T5229] usb 2-1: unable to get BOS descriptor or descriptor too short [ 314.864551][ T5229] usb 2-1: not running at top speed; connect to a high speed hub [ 314.923391][ T9779] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 314.973253][ T9779] ext4 filesystem being mounted at /417/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 314.979830][ T5229] usb 2-1: config 8 has an invalid interface number: 185 but max is 1 [ 315.056690][ T5229] usb 2-1: config 8 has an invalid interface number: 135 but max is 1 [ 315.082277][ T5229] usb 2-1: config 8 has an invalid descriptor of length 125, skipping remainder of the config [ 315.135839][ T5229] usb 2-1: config 8 has no interface number 0 [ 315.170952][ T5229] usb 2-1: config 8 has no interface number 1 [ 315.200205][ T5229] usb 2-1: config 8 interface 135 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.227129][ T5229] usb 2-1: config 8 interface 185 has no altsetting 0 [ 315.241454][ T5229] usb 2-1: config 8 interface 135 has no altsetting 0 [ 315.441119][ T9799] xt_hashlimit: max too large, truncated to 1048576 [ 315.448482][ T9799] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 315.546432][ T5229] usb 2-1: string descriptor 0 read error: -22 [ 315.556702][ T5229] usb 2-1: New USB device found, idVendor=2040, idProduct=7270, bcdDevice=ae.97 [ 315.596510][ T5229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.713634][ T5229] usb 2-1: unknown interface protocol 0x4f, assuming v1 [ 315.720643][ T5229] usb 2-1: 135:2 : does not exist [ 315.963532][ T4898] udevd[4898]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 316.007689][ T5229] usb 2-1: USB disconnect, device number 19 [ 316.212911][ T9823] loop3: detected capacity change from 0 to 512 [ 316.385854][ T9823] EXT4-fs (loop3): Ignoring removed oldalloc option [ 316.425818][ T9825] loop4: detected capacity change from 0 to 2048 [ 316.432431][ T9823] EXT4-fs (loop3): Ignoring removed bh option [ 316.613613][ T9823] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.2355: corrupted in-inode xattr [ 316.668219][ T9823] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.2355: couldn't read orphan inode 15 (err -117) [ 316.749586][ T9823] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,abort,nombcache,noload,jqfmt=vfsv0,max_batch_time=0x0000000000000001,oldalloc,inode_readahead_blks=0x0000000002000000,bsdgroups,bh,,errors=continue. Quota mode: none. [ 316.846149][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 316.846167][ T26] audit: type=1800 audit(1759798174.147:150): pid=9823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2355" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 317.084940][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.091311][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.177460][ T9845] [U] ùÿ [ 317.291011][ T9850] ptrace attach of ""[9852] was attempted by "./syz-executor exec"[9850] [ 318.074812][ T9871] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 318.150504][ T4572] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 318.171021][ T9871] [U] J"—e:ÀÆ" [ 318.967415][ T4572] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 318.989618][ T4572] usb 2-1: config 0 interface 0 has no altsetting 0 [ 319.020942][ T4572] usb 2-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 319.074046][ T9880] loop3: detected capacity change from 0 to 16 [ 319.081091][ T4572] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.140769][ T4572] usb 2-1: config 0 descriptor?? [ 319.219454][ T9880] erofs: (device loop3): mounted with root inode @ nid 36. [ 319.875301][ T4572] ntrig 0003:1B96:0004.0015: hidraw0: USB HID v0.06 Device [HID 1b96:0004] on usb-dummy_hcd.1-1/input0 [ 320.108919][ T4572] usb 2-1: USB disconnect, device number 20 [ 320.451817][ T4454] udevd[4454]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.135/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 320.808797][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2393'. [ 320.845147][ T9900] fido_id[9900]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 321.411507][ T4575] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 321.810525][ T4575] usb 2-1: Using ep0 maxpacket: 16 [ 321.843735][ T23] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 322.151495][ T4575] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.170945][ T4575] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 322.246813][ T4575] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.270309][ T9935] IPv6: syztnl0: Disabled Multicast RS [ 322.294128][ T4575] usb 2-1: config 0 descriptor?? [ 322.412644][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 322.722165][ T23] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.735141][ T23] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 322.830796][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 322.850946][ T23] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 322.868432][ T9944] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 322.908082][ T4575] kye 0003:0458:5011.0016: hidraw0: USB HID v0.0b Device [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 322.926931][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.980566][ T4575] kye 0003:0458:5011.0016: tablet-enabling feature report not found [ 322.989224][ T4575] kye 0003:0458:5011.0016: tablet enabling failed [ 323.001011][ T23] usb 5-1: config 0 descriptor?? [ 323.211560][ T4575] usb 2-1: USB disconnect, device number 21 [ 323.264347][ T9946] fido_id[9946]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 323.492419][ T9951] loop3: detected capacity change from 0 to 512 [ 323.600808][ T23] hid-thrustmaster 0003:044F:B65D.0017: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 323.613306][ T23] hid-thrustmaster 0003:044F:B65D.0017: Wrong number of endpoints? [ 323.833779][ T5237] usb 5-1: USB disconnect, device number 14 [ 323.841034][ C1] hid-thrustmaster 0003:044F:B65D.0017: URB to get model id failed with error -2 [ 324.278696][ T9966] loop1: detected capacity change from 0 to 256 [ 324.308127][ T5229] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 324.796636][ T5229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.807871][ T5229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.832331][ T5229] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 324.863512][ T5229] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 324.901714][ T5229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.947585][ T5229] usb 3-1: config 0 descriptor?? [ 325.525944][ T5229] logitech 0003:046D:C24F.0018: item fetching failed at offset 5/7 [ 325.554619][ T5229] logitech 0003:046D:C24F.0018: parse failed [ 325.591002][ T5229] logitech: probe of 0003:046D:C24F.0018 failed with error -22 [ 325.655819][ T9970] loop4: detected capacity change from 0 to 32768 [ 325.819480][ T23] usb 3-1: USB disconnect, device number 9 [ 325.834460][ T9987] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2431'. [ 325.904218][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2431'. [ 326.134916][ T9951] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 326.311412][ T9966] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 326.671347][T10002] loop2: detected capacity change from 0 to 22 [ 327.161368][T10012] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 327.627317][T10024] loop3: detected capacity change from 0 to 1024 [ 327.641989][T10025] 9pnet: p9_fd_create_unix (10025): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 328.954306][T10053] nbd: must specify an index to disconnect [ 329.081591][T10002] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 329.199271][T10055] loop4: detected capacity change from 0 to 4096 [ 329.266195][T10002] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 329.476603][T10061] loop1: detected capacity change from 0 to 1024 [ 329.545787][T10055] ntfs: (device loop4): parse_options(): NLS character set âÈÃü‚Ã=Õsh not found. Using previous one cp869. [ 329.637882][T10055] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 329.686340][T10055] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 329.696176][T10055] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 329.751013][T10055] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 330.258885][T10055] ntfs: volume version 3.1. [ 330.527261][T10055] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp869. You might want to try to use the mount option nls=utf8. [ 330.636572][T10055] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x45. [ 331.051952][T10077] tipc: Enabling of bearer <Ýth:h> rejected, media not registered [ 331.374915][T10083] loop3: detected capacity change from 0 to 512 [ 331.519352][T10083] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 331.641875][T10098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2484'. [ 331.708158][T10083] EXT4-fs (loop3): 1 truncate cleaned up [ 331.720501][T10083] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 332.427026][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 332.452665][ T5219] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 332.752450][ T5219] usb 2-1: Using ep0 maxpacket: 16 [ 332.907873][T10129] fido_id[10129]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 333.161794][ T5219] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 333.190933][ T5219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.233724][ T5219] usb 2-1: Product: syz [ 333.237957][ T5219] usb 2-1: Manufacturer: syz [ 333.258998][ T5219] usb 2-1: SerialNumber: syz [ 333.293571][ T5219] usb 2-1: config 0 descriptor?? [ 333.344844][ T5219] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 333.787917][ T5219] ssu100: probe of 2-1:0.0 failed with error -71 [ 333.834334][ T5219] usb 2-1: USB disconnect, device number 22 [ 333.971286][T10158] loop3: detected capacity change from 0 to 512 [ 334.087700][T10158] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 334.190393][T10158] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e11c, mo2=0002] [ 334.267907][T10158] System zones: 1-12 [ 334.331393][T10158] EXT4-fs (loop3): orphan cleanup on readonly fs [ 334.427072][T10158] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2510: bg 0: block 361: padding at end of block bitmap is not set [ 334.599912][T10158] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 334.677864][T10158] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2510: invalid indirect mapped block 12 (level 1) [ 334.796462][T10164] loop4: detected capacity change from 0 to 4096 [ 334.862410][T10158] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2510: invalid indirect mapped block 2 (level 2) [ 334.881702][T10167] loop1: detected capacity change from 0 to 8192 [ 334.958058][T10158] EXT4-fs (loop3): 1 truncate cleaned up [ 334.977399][T10158] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_batch_time=0x0000000000000007,inode_readahead_blks=0x0000000000080000,max_dir_size_kb=0x0000000000000001,jqfmt=vfsv0,errors=continue. Quota mode: none. [ 335.217412][T10176] netlink: 'syz.0.2518': attribute type 9 has an invalid length. [ 335.407454][T10182] loop2: detected capacity change from 0 to 1024 [ 336.023941][ T4196] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 336.031750][ T4196] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 337.127608][ T26] audit: type=1326 audit(1759798194.437:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.4.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd93dfec9 code=0x7fc00000 [ 337.216810][ T26] audit: type=1326 audit(1759798194.437:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.4.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd93dfec9 code=0x7fc00000 [ 337.291215][ T26] audit: type=1326 audit(1759798194.437:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.4.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd93dfec9 code=0x7fc00000 [ 337.313674][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.383490][ T26] audit: type=1326 audit(1759798194.437:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.4.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd93dfec9 code=0x7fc00000 [ 337.445089][ T26] audit: type=1326 audit(1759798194.437:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.4.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd93dfec9 code=0x7fc00000 [ 337.553822][ T26] audit: type=1326 audit(1759798194.437:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.4.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd93dfec9 code=0x7fc00000 [ 337.710984][ T26] audit: type=1326 audit(1759798194.437:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.4.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd93dfec9 code=0x7fc00000 [ 337.764281][T10182] attempt to access beyond end of device [ 337.764281][T10182] loop2: rw=34817, want=5780, limit=1024 [ 337.811565][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2541'. [ 337.855005][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2541'. [ 337.870238][ T26] audit: type=1326 audit(1759798194.437:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.4.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd93dfec9 code=0x7fc00000 [ 337.911060][T10223] netlink: 'syz.0.2541': attribute type 12 has an invalid length. [ 337.940305][T10223] netlink: 'syz.0.2541': attribute type 14 has an invalid length. [ 338.043723][ T26] audit: type=1326 audit(1759798194.437:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.4.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd93dfec9 code=0x7fc00000 [ 338.157182][ T26] audit: type=1326 audit(1759798194.437:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.4.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd93dfec9 code=0x7fc00000 [ 338.198478][T10211] loop3: detected capacity change from 0 to 40427 [ 338.454590][ T4575] kernel write not supported for file /media3 (pid: 4575 comm: kworker/1:15) [ 338.532113][T10211] F2FS-fs (loop3): invalid crc value [ 338.734851][T10211] F2FS-fs (loop3): Found nat_bits in checkpoint [ 338.787305][T10240] loop4: detected capacity change from 0 to 512 [ 338.943871][T10211] F2FS-fs (loop3): Start checkpoint disabled! [ 338.976202][ T5219] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 339.017905][T10211] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 339.268650][ T5219] usb 3-1: Using ep0 maxpacket: 8 [ 339.487473][ T5219] usb 3-1: unable to get BOS descriptor or descriptor too short [ 339.594084][ T5219] usb 3-1: config 4 interface 0 has no altsetting 0 [ 339.804970][T10248] loop1: detected capacity change from 0 to 32768 [ 339.916603][ T5219] usb 3-1: string descriptor 0 read error: -22 [ 339.923177][ T5219] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 339.943780][ T5219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.021806][ T5219] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 340.070756][ T5219] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 340.091884][ T5219] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 340.120401][ T5219] usb 3-1: media controller created [ 340.155567][ T5219] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 340.257842][ T5219] zl10353_read_register: readreg error (reg=127, ret==0) [ 340.370145][ T5219] usb 3-1: USB disconnect, device number 10 [ 340.529249][T10251] loop3: detected capacity change from 0 to 32768 [ 340.634871][T10251] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2553 (10251) [ 340.754021][T10251] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 340.799776][T10251] BTRFS info (device loop3): using free space tree [ 340.820190][T10251] BTRFS info (device loop3): has skinny extents [ 340.945524][T10259] loop2: detected capacity change from 0 to 1024 [ 341.011525][T10240] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 341.047443][T10240] EXT4-fs (loop4): invalid journal inode [ 341.053327][T10240] EXT4-fs (loop4): can't get journal size [ 341.133779][T10240] EXT4-fs (loop4): 1 truncate cleaned up [ 341.142402][T10240] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 341.210605][T10251] BTRFS info (device loop3): enabling ssd optimizations [ 341.225273][T10240] EXT4-fs warning (device loop4): verify_group_input:147: Cannot add at group 3 (only 1 groups) [ 341.600777][ T4175] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop3 scanned by udevd (4175) [ 342.246333][T10248] XFS (loop1): Mounting V5 Filesystem [ 342.306495][T10248] XFS (loop1): log mount failed [ 342.684725][ T4258] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 343.012005][T10306] ptrace attach of "./syz-executor exec"[4183] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ ÿÿÿÿ â÷%-ì‹5鎢Ÿ£D|VTyÊÞ\x22ýÍšK«à­N/)éõº/éÙH¯Mú&‚¡CsnVkת{Jv1±Á%­èÈ_)Þ$n»:…,þ\x5c¿]n¯+]±2yrŒrîLË•ß-6·^%D³\x5c~Õzèw'Mc\x22o§â–½‹ÄÙ«·`¿Ë¤=s N¾8|?Þ”Ò¡¿øÅBr›ô9šÎɳbõÝFøü…{iÄ$œ]ûë• [ 343.077026][ T4258] usb 5-1: Using ep0 maxpacket: 16 [ 343.496143][T10259] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000005,user_xattr,. Quota mode: none. [ 343.533687][T10259] ext4 filesystem being mounted at /506/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.692081][ T4258] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 343.701237][ T4258] usb 5-1: config 0 has no interface number 0 [ 343.932963][ T4258] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 343.953413][ T4258] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.970611][ T4258] usb 5-1: Product: syz [ 343.985110][ T4258] usb 5-1: Manufacturer: syz [ 343.989762][ T4258] usb 5-1: SerialNumber: syz [ 344.014558][ T4258] usb 5-1: config 0 descriptor?? [ 344.079978][ T4258] hub 5-1:0.132: bad descriptor, ignoring hub [ 344.097610][ T4258] hub: probe of 5-1:0.132 failed with error -5 [ 344.101720][T10308] loop3: detected capacity change from 0 to 32768 [ 344.130372][T10308] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.2568 (10308) [ 344.130762][ T4258] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input17 [ 344.257412][T10308] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 344.274152][T10308] BTRFS info (device loop3): enabling ssd optimizations [ 344.291194][T10308] BTRFS info (device loop3): not using ssd optimizations [ 344.298313][T10308] BTRFS info (device loop3): turning off barriers [ 344.347165][T10308] BTRFS info (device loop3): using free space tree [ 344.386658][T10308] BTRFS info (device loop3): has skinny extents [ 344.478606][T10287] loop4: detected capacity change from 0 to 1024 [ 345.308307][ T23] usb 5-1: USB disconnect, device number 15 [ 345.643291][T10336] loop2: detected capacity change from 0 to 4096 [ 345.711783][T10336] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 345.957466][T10338] loop4: detected capacity change from 0 to 512 [ 346.888256][T10356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2580'. [ 346.966748][ T4258] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 347.342572][ T4258] usb 4-1: Using ep0 maxpacket: 8 [ 347.578449][ T4258] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.606591][ T4258] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 347.619987][T10365] ntfs3: Couldn't remount rw because journal is not replayed. Please umount/remount instead [ 347.619987][T10365] [ 347.640932][ T4258] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.674028][ T4258] usb 4-1: config 0 descriptor?? [ 347.745274][T10338] EXT4-fs (loop4): Ignoring removed oldalloc option [ 347.753352][T10338] EXT4-fs (loop4): Ignoring removed nobh option [ 347.759664][T10338] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 347.783094][ T4258] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 348.086063][T10338] EXT4-fs (loop4): 1 truncate cleaned up [ 348.111427][T10338] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,nobh,nouid32,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 348.233509][T10375] loop1: detected capacity change from 0 to 256 [ 348.492629][ T4258] gspca_vc032x: reg_r err -71 [ 348.497422][ T4258] vc032x: probe of 4-1:0.0 failed with error -71 [ 348.524184][ T4258] usb 4-1: USB disconnect, device number 18 [ 348.711365][T10381] hpfs: Bad magic ... probably not HPFS [ 349.163916][ T5229] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 349.225073][ T5229] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz0 [ 349.436743][T10409] loop2: detected capacity change from 0 to 1024 [ 349.581885][T10409] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (37758!=35945) [ 349.597056][T10409] EXT4-fs (loop2): group descriptors corrupted! [ 349.636431][ T4258] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 349.727884][T10416] mmap: syz.3.2607 (10416): VmData 54235136 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 349.999931][ T4258] usb 5-1: Using ep0 maxpacket: 8 [ 350.439926][ T4258] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 350.450157][ T4258] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.479590][ T4258] usb 5-1: Product: syz [ 350.483865][ T4258] usb 5-1: Manufacturer: syz [ 350.488496][ T4258] usb 5-1: SerialNumber: syz [ 350.568236][ T4258] usb 5-1: config 0 descriptor?? [ 350.655281][ T23] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 350.672109][T10438] loop2: detected capacity change from 0 to 4096 [ 350.683494][T10375] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x10e00a98, utbl_chksum : 0xe619d30d) [ 350.843759][ T4258] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 351.035768][T10442] loop1: detected capacity change from 0 to 256 [ 351.290945][ T4258] gspca_sunplus: reg_w_riv err -71 [ 351.296203][ T4258] sunplus: probe of 5-1:0.0 failed with error -71 [ 351.344317][ T23] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 351.355663][ T23] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.382112][ T4258] usb 5-1: USB disconnect, device number 16 [ 351.432626][ T23] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 351.461629][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 351.468298][ T23] usb 4-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 351.500813][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.565677][ T23] usb 4-1: config 0 descriptor?? [ 351.575215][T10438] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 352.083925][ T23] hid-alps 0003:044E:120C.001A: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.3-1/input0 [ 352.150052][T10451] loop4: detected capacity change from 0 to 64 [ 352.378016][ T23] usb 4-1: USB disconnect, device number 19 [ 354.367941][T10475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2637'. [ 354.545655][T10471] loop3: detected capacity change from 0 to 40427 [ 354.622899][T10477] loop1: detected capacity change from 0 to 64 [ 354.740076][T10471] F2FS-fs (loop3): invalid crc value [ 354.802767][T10471] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 354.820666][T10485] loop2: detected capacity change from 0 to 128 [ 354.973498][T10485] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,discard,,errors=continue. Quota mode: none. [ 354.981510][T10471] F2FS-fs (loop3): Start checkpoint disabled! [ 355.001224][T10485] ext4 filesystem being mounted at /525/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 355.087988][T10471] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 355.486591][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 355.529105][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 355.580929][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 355.604197][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 355.630917][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 355.638373][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 355.654435][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 355.676086][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 355.698059][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 355.725577][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 355.733095][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 355.767570][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 355.793285][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 355.827381][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 355.843816][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 355.868228][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 355.875818][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 355.893529][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 355.909754][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 355.938923][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 355.946460][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 355.963156][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 355.987700][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.012133][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.033791][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.071700][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.079318][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.113228][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.129897][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.156895][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.189117][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.211701][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.219574][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.260075][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.276618][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.295339][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.318618][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.349727][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.359865][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.378689][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.399758][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.418004][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.435678][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.473423][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.483171][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.514974][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.522594][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.530081][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.556435][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.563943][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.595876][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.617928][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.649244][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.656770][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.685689][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.702383][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.719013][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.735389][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.772427][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.779988][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.814031][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.844854][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.858726][T10518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2654'. [ 356.877295][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.930068][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.948296][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.982578][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.990037][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 357.041551][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 357.077682][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 357.106346][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 357.140985][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 357.209585][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 357.268577][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 357.280338][T10521] fido_id[10521]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 357.329272][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 357.389443][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 357.408805][T10528] loop3: detected capacity change from 0 to 8 [ 357.423174][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 357.443704][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 357.487019][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 357.503863][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 357.527658][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 357.543795][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 357.581199][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 357.588747][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 357.616697][ T23] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.03 Device [syz1] on syz1 [ 357.792228][T10532] loop2: detected capacity change from 0 to 256 [ 357.917389][T10534] vivid-004: disconnect [ 357.941003][T10533] vivid-004: reconnect [ 358.326221][T10528] SQUASHFS error: Failed to read block 0x2d7: -5 [ 358.352341][T10528] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 358.725408][T10557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2673'. [ 359.328668][ T5224] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 359.559357][T10567] fido_id[10567]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 359.703544][T10570] loop2: detected capacity change from 0 to 1024 [ 359.755762][T10570] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 359.826391][ T5224] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 359.835774][ T5224] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 359.852398][ T5224] usb 2-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 359.886524][ T5224] usb 2-1: config 220 has no interface number 2 [ 359.917572][ T5224] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 359.952610][ T5224] usb 2-1: config 220 interface 0 has no altsetting 0 [ 359.959538][ T5224] usb 2-1: config 220 interface 76 has no altsetting 0 [ 360.050926][ T5224] usb 2-1: config 220 interface 1 has no altsetting 0 [ 360.059358][T10570] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,i_version,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 360.391017][T10570] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 360.406633][ T5224] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 360.426633][ T5224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.452586][T10570] EXT4-fs (loop2): changing journal_checksum during remount not supported; ignoring [ 360.474970][T10581] fido_id[10581]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 360.515678][ T5224] usb 2-1: Product: syz [ 360.519905][ T5224] usb 2-1: Manufacturer: syz [ 360.627515][ T5224] usb 2-1: SerialNumber: syz [ 360.656463][T10570] EXT4-fs (loop2): re-mounted. Opts: usrjquota=,journal_ioprio=0x0000000000000006,journal_checksum,minixdf,grpjquota=,noinit_itable,. Quota mode: none. [ 361.165814][ T5224] usb 2-1: selecting invalid altsetting 0 [ 361.173294][ T5224] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 361.179693][ T5224] usb 2-1: No valid video chain found. [ 361.297290][ T5224] usb 2-1: selecting invalid altsetting 0 [ 361.303383][ T5224] usbtest: probe of 2-1:220.1 failed with error -22 [ 361.362671][ T5224] usb 2-1: USB disconnect, device number 23 [ 361.596577][T10577] loop3: detected capacity change from 0 to 32768 [ 361.740304][T10580] loop4: detected capacity change from 0 to 32768 [ 361.845869][T10591] netlink: 'syz.0.2685': attribute type 46 has an invalid length. [ 362.117130][T10577] blk_update_request: I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 362.174226][T10577] lbmIODone: I/O error in JFS log [ 362.183097][T10577] *** Log Format Error ! *** [ 362.188559][T10577] lmLogInit: exit(-22) [ 362.210978][T10577] lmLogOpen: exit(-22) [ 362.550550][ T5224] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 362.856367][ T5224] usb 2-1: Using ep0 maxpacket: 8 [ 363.039027][ T5224] usb 2-1: config 0 interface 0 altsetting 42 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 363.060942][ T5224] usb 2-1: config 0 interface 0 has no altsetting 0 [ 363.093799][ T5224] usb 2-1: New USB device found, idVendor=056a, idProduct=00d6, bcdDevice= 0.00 [ 363.118274][ T5224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.140554][ T5224] usb 2-1: config 0 descriptor?? [ 363.508416][T10627] loop3: detected capacity change from 0 to 512 [ 363.693747][ T5224] wacom 0003:056A:00D6.001C: Unknown device_type for 'HID 056a:00d6'. Assuming pen. [ 363.729288][ T5224] wacom 0003:056A:00D6.001C: hidraw0: USB HID v0.07 Device [HID 056a:00d6] on usb-dummy_hcd.1-1/input0 [ 363.786895][ T5224] input: Wacom BambooPT 2FG 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00D6.001C/input/input18 [ 363.936581][ T5224] usb 2-1: USB disconnect, device number 24 [ 364.761038][T10652] loop1: detected capacity change from 0 to 2048 [ 364.797279][T10654] program syz.0.2717 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 365.527227][T10627] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2703: invalid indirect mapped block 10 (level 1) [ 365.640151][T10627] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2703: invalid indirect mapped block 8 (level 1) [ 365.698461][T10627] EXT4-fs (loop3): 1 truncate cleaned up [ 365.704294][T10627] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 366.184805][T10685] loop4: detected capacity change from 0 to 256 [ 366.225880][T10683] loop2: detected capacity change from 0 to 2048 [ 366.609780][T10685] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7c732dc0, utbl_chksum : 0xe619d30d) [ 366.807395][T10687] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 367.623204][T10705] loop1: detected capacity change from 0 to 128 [ 367.863199][T10683] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 368.191991][T10683] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 368.392828][ T4188] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /537/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 368.469310][ T4272] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 368.499293][ T4188] EXT4-fs (loop2): Remounting filesystem read-only [ 368.513151][ T4188] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 368.576208][T10725] loop4: detected capacity change from 0 to 512 [ 368.659125][ T4188] EXT4-fs (loop2): Remounting filesystem read-only [ 368.686183][ T4188] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /537/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 368.896728][T10725] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.2747: bad orphan inode 11862016 [ 368.918114][ T4188] EXT4-fs (loop2): Remounting filesystem read-only [ 368.967835][ T4188] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 368.977684][ T4272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.025209][ T4272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.057589][T10725] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 369.066005][ T4272] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 369.068906][T10725] ext4 filesystem being mounted at /475/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.088516][ T4188] EXT4-fs (loop2): Remounting filesystem read-only [ 369.099318][ T4188] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /537/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 369.109528][T10729] fido_id[10729]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 369.209058][ T4272] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 369.248252][T10731] loop3: detected capacity change from 0 to 512 [ 369.263683][ T4188] EXT4-fs (loop2): Remounting filesystem read-only [ 369.270564][ T4188] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 369.298254][ T4272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.345923][ T4272] usb 2-1: config 0 descriptor?? [ 369.410932][ T4188] EXT4-fs (loop2): Remounting filesystem read-only [ 369.459021][ T4188] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /537/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 369.607176][ T4188] EXT4-fs (loop2): Remounting filesystem read-only [ 369.617626][ T4188] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 369.719623][T10731] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 369.766608][T10731] ext4 filesystem being mounted at /509/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.806753][ T4188] EXT4-fs (loop2): Remounting filesystem read-only [ 369.821453][ T4188] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /537/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 369.900449][ T4272] plantronics 0003:047F:FFFF.001D: item 0 0 0 9 parsing failed [ 369.931691][ T4272] plantronics 0003:047F:FFFF.001D: parse failed [ 369.945007][ T4188] EXT4-fs (loop2): Remounting filesystem read-only [ 369.953951][ T4188] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 370.007372][ T4272] plantronics: probe of 0003:047F:FFFF.001D failed with error -22 [ 370.078401][ T4188] EXT4-fs (loop2): Remounting filesystem read-only [ 370.207615][ T4272] usb 2-1: USB disconnect, device number 25 [ 370.944792][T10748] loop1: detected capacity change from 0 to 256 [ 372.350160][T10740] loop4: detected capacity change from 0 to 40427 [ 372.475110][T10740] F2FS-fs (loop4): invalid crc value [ 372.592974][T10740] F2FS-fs (loop4): Found nat_bits in checkpoint [ 372.842840][T10740] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 373.005160][T10807] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2776'. [ 373.070459][T10807] IPVS: Unknown mcast interface: [ 373.405212][ T4188] EXT4-fs error: 180 callbacks suppressed [ 373.405231][ T4188] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 373.566423][ T4188] EXT4-fs: 180 callbacks suppressed [ 373.566443][ T4188] EXT4-fs (loop2): Remounting filesystem read-only [ 373.621281][ T4188] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /537/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 373.760962][ T4188] EXT4-fs (loop2): Remounting filesystem read-only [ 373.767933][ T4188] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 373.853012][ T4188] EXT4-fs (loop2): Remounting filesystem read-only [ 373.860004][ T4188] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /537/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 373.984916][ T4188] EXT4-fs (loop2): Remounting filesystem read-only [ 374.010500][ T4188] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 374.102311][ T4188] EXT4-fs (loop2): Remounting filesystem read-only [ 374.109259][ T4188] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /537/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 374.234135][ T4188] EXT4-fs (loop2): Remounting filesystem read-only [ 374.268174][ T4188] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 374.349006][ T4188] EXT4-fs (loop2): Remounting filesystem read-only [ 374.369254][ T4188] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /537/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 374.423397][ T4188] EXT4-fs (loop2): Remounting filesystem read-only [ 374.435734][ T4188] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 374.540016][ T4188] EXT4-fs (loop2): Remounting filesystem read-only [ 374.550560][ T4188] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /537/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 374.639205][ T4188] EXT4-fs (loop2): Remounting filesystem read-only [ 374.675956][ T4272] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 375.147369][ T4272] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 375.160162][ T4272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.228847][ T4272] usb 4-1: config 0 descriptor?? [ 375.284049][ T4272] go7007: probe of 4-1:0.0 failed with error -12 [ 375.421128][T10866] hfs: can't find a HFS filesystem on dev nullb0 [ 375.530900][ T4459] usb 4-1: USB disconnect, device number 20 [ 375.924603][T10819] loop4: detected capacity change from 0 to 32768 [ 376.122053][T10881] tipc: Enabled bearer , priority 12 [ 376.145049][T10819] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2777 (10819) [ 376.417075][T10819] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 376.430725][T10819] BTRFS info (device loop4): setting nodatasum [ 376.465426][T10819] BTRFS info (device loop4): force zlib compression, level 3 [ 376.495221][T10819] BTRFS info (device loop4): enabling ssd optimizations [ 376.535939][T10819] BTRFS info (device loop4): allowing degraded mounts [ 376.570965][T10819] BTRFS info (device loop4): using free space tree [ 376.604958][T10819] BTRFS info (device loop4): has skinny extents [ 376.986344][T10894] loop1: detected capacity change from 0 to 4096 [ 377.338137][ T5219] tipc: Node number set to 2130706433 [ 377.348839][T10819] BTRFS error (device loop4): open_ctree failed: -12 [ 377.362378][ T4175] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4175) [ 377.448109][T10883] loop3: detected capacity change from 0 to 40427 [ 377.855268][ T4258] kernel write not supported for file /audio (pid: 4258 comm: kworker/1:7) [ 378.540107][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.551951][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.197708][T10894] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 379.956467][T10941] loop4: detected capacity change from 0 to 4096 [ 380.057520][T10894] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 381.770793][ T4270] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.453227][T11021] netlink: 'syz.1.2842': attribute type 7 has an invalid length. [ 382.454797][ T4581] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 382.480998][T11021] netlink: 'syz.1.2842': attribute type 1 has an invalid length. [ 382.509892][T11021] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.2842'. [ 383.045428][ T4581] usb 4-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 383.060468][ T4581] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.088558][ T4581] usb 4-1: config 0 descriptor?? [ 383.325659][T11022] chnl_net:caif_netlink_parms(): no params data found [ 383.415767][ T4581] snd-usb-hiface: probe of 4-1:0.0 failed with error -22 [ 383.708479][ T23] usb 4-1: USB disconnect, device number 21 [ 383.782401][T11022] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.805035][T11022] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.852774][T11022] device bridge_slave_0 entered promiscuous mode [ 383.885675][T11022] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.905344][T11022] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.940540][T11022] device bridge_slave_1 entered promiscuous mode [ 384.022893][ T4270] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.148575][T11022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.214887][T11022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.318439][T11048] loop3: detected capacity change from 0 to 256 [ 384.355759][T11022] team0: Port device team_slave_0 added [ 384.383699][T11022] team0: Port device team_slave_1 added [ 384.552324][T11022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.559318][T11022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.685597][T11048] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 384.709336][T11022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.746177][ T4459] Bluetooth: hci1: command 0x0409 tx timeout [ 384.761333][T11022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.768319][T11022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.771490][T11048] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 384.930906][T11022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.064238][T11022] device hsr_slave_0 entered promiscuous mode [ 385.089436][T11022] device hsr_slave_1 entered promiscuous mode [ 385.137368][T11022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.162638][T11022] Cannot create hsr debugfs directory [ 386.103502][T11076] loop3: detected capacity change from 0 to 164 [ 386.241721][T11072] loop1: detected capacity change from 0 to 8192 [ 386.321578][T11076] rock: directory entry would overflow storage [ 386.328024][T11076] rock: sig=0x4d4e, size=5, remaining=4 [ 386.827927][ T5219] Bluetooth: hci1: command 0x041b tx timeout [ 387.285704][ T4270] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.787710][T11072] overlayfs: filesystem on './file0' not supported [ 388.589426][ T4270] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.910900][ T4459] Bluetooth: hci1: command 0x040f tx timeout [ 390.988609][ T5219] Bluetooth: hci1: command 0x0419 tx timeout [ 391.956416][T11022] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 392.026872][T11022] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 392.092907][T11022] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 392.125480][T11022] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 392.654152][T11022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.685018][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 392.718789][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 392.743504][T11022] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.754737][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 392.781798][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 392.836361][ T4549] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.843500][ T4549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.918021][T11139] loop3: detected capacity change from 0 to 64 [ 392.935539][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 392.983194][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 393.022536][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 393.073777][ T4549] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.081256][ T4549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.121645][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 393.162370][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 393.182650][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 393.278568][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 393.335510][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 393.373813][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 393.439379][T11022] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 393.529379][T11022] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 393.582571][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 393.591605][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 393.641275][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 393.692298][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 393.739568][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 393.787877][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 394.113406][ T5219] kernel read not supported for file /dsp (pid: 5219 comm: kworker/0:10) [ 394.142711][T11184] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -107 0 [ 394.458090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 394.520764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 394.556628][T11022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.591796][T11197] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2908'. [ 395.561498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 395.565070][T11191] loop1: detected capacity change from 0 to 32768 [ 395.581925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 395.612155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 395.660074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 395.684860][T11234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2918'. [ 395.717964][T11022] device veth0_vlan entered promiscuous mode [ 395.733518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 395.781932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 395.802946][T11022] device veth1_vlan entered promiscuous mode [ 395.946199][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 395.980679][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 396.012324][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 396.048486][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 396.105189][T11022] device veth0_macvtap entered promiscuous mode [ 396.148790][T11248] loop3: detected capacity change from 0 to 64 [ 396.165840][T11022] device veth1_macvtap entered promiscuous mode [ 396.263238][T11022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.329162][T11022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.384225][T11022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.446900][T11022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.487947][T11022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.529516][T11022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.588018][T11022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.641297][T11022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.694149][T11022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.726257][T11022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.785585][T11022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.793871][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 396.821738][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 396.851745][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 396.900934][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 396.936834][T11022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.992151][T11022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.019273][T11022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.045769][T11022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.067049][T11022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.119911][T11022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.156823][T11022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.189469][T11022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.228961][T11022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.267414][T11022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.313888][T11022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.350489][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 397.363178][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 397.426050][T11022] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.443424][T11022] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.470903][T11022] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.483621][ T5237] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 397.520905][T11022] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.773611][ T697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.831197][ T697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.863308][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 397.872216][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.911698][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.950368][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 398.024138][ T5237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 398.069407][ T5237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.103748][ T5237] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 398.143602][ T5237] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.176573][ T5237] usb 5-1: config 0 descriptor?? [ 398.478416][T11298] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2934'. [ 398.551006][T11298] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 398.767611][ T5237] bigben 0003:146B:0902.001E: unexpected rdesc, please submit for review [ 398.788967][ T5237] bigben 0003:146B:0902.001E: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.4-1/input0 [ 398.830426][ T5237] bigben 0003:146B:0902.001E: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 398.846074][ T5237] bigben 0003:146B:0902.001E: no output report found [ 399.014730][ T3996] usb 5-1: USB disconnect, device number 17 [ 399.460974][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 399.460991][ T26] audit: type=1800 audit(1759798256.767:219): pid=11248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2922" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 399.508318][T11318] fido_id[11318]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 399.880220][T11291] loop5: detected capacity change from 0 to 32768 [ 400.383096][T11291] XFS (loop5): Mounting V5 Filesystem [ 400.405481][ T23] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 400.750559][ T4244] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 400.943359][ T23] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 400.992476][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 401.171578][T11291] XFS (loop5): Ending clean mount [ 401.221848][T11291] XFS (loop5): Quotacheck needed: Please wait. [ 401.259676][ T23] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 401.293325][ T23] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 401.327361][ T23] usb 2-1: Product: syz [ 401.337989][ T23] usb 2-1: Manufacturer: syz [ 401.351835][ T23] usb 2-1: SerialNumber: syz [ 401.372330][ T23] usb 2-1: config 0 descriptor?? [ 401.397888][ T4244] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 401.411080][ T4244] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.432496][ T4244] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 401.470791][ T4244] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.515308][ T23] usb 2-1: selecting invalid altsetting 0 [ 401.546747][ T4244] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.603702][T11291] XFS (loop5): Quotacheck: Done. [ 401.699783][T11022] XFS (loop5): Unmounting Filesystem [ 401.783122][ T3996] usb 2-1: USB disconnect, device number 26 [ 401.800249][ T4244] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 401.846235][ T4244] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 401.854341][ T4244] usb 5-1: Product: syz [ 401.858539][ T4244] usb 5-1: Manufacturer: syz [ 401.944095][ T4244] cdc_wdm 5-1:1.0: skipping garbage [ 401.949363][ T4244] cdc_wdm 5-1:1.0: skipping garbage [ 402.001094][ T4244] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 402.007069][ T4244] cdc_wdm 5-1:1.0: Unknown control protocol [ 402.154450][T11373] loop3: detected capacity change from 0 to 64 [ 402.208690][T11344] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 402.302932][ T4296] usb 5-1: USB disconnect, device number 18 [ 403.121207][T11397] binder: 11396:11397 ioctl c0306201 2000000001c0 returned -22 [ 403.616887][T11381] loop1: detected capacity change from 0 to 32768 [ 403.802498][T11381] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.2953 (11381) [ 403.982811][T11381] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 403.996855][T11381] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 404.028973][T11381] BTRFS info (device loop1): use zstd compression, level 3 [ 404.090959][T11381] BTRFS info (device loop1): using free space tree [ 404.097530][T11381] BTRFS info (device loop1): has skinny extents [ 404.277183][T11407] loop4: detected capacity change from 0 to 32768 [ 404.310038][ T4296] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x4 [ 404.341698][ T4296] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x2 [ 404.396252][ T4296] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 404.426760][ T4296] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 404.473168][ T4296] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 404.489922][ T4296] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 404.525416][ T4296] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 404.565930][ T4296] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 404.600778][ T4296] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 404.621564][ T4296] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 404.648243][ T4296] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 404.676580][T11373] hfs: unable to locate alternate MDB [ 404.682071][T11373] hfs: continuing without an alternate MDB [ 404.690035][ T4296] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 404.715840][ T4296] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 404.719806][T11381] BTRFS info (device loop1): enabling ssd optimizations [ 404.734494][ T4296] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 404.759448][ T4296] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 404.789258][ T4296] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 404.822359][ T4296] hid-generic 0000:3000000:0000.001F: hidraw0: HID v0.00 Device [sy] on syz0 [ 405.019941][T11452] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2967'. [ 405.391922][T11454] loop3: detected capacity change from 0 to 4096 [ 405.753521][T11454] ntfs3: loop3: ino=3, Correct links count -> 2. [ 406.307802][T11477] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2975'. [ 407.030913][T11454] ntfs3: loop3: failed to convert "0080" to macgreek [ 407.068351][T11454] ntfs3: loop3: failed to convert name for inode 1e. [ 407.323310][T11499] loop5: detected capacity change from 0 to 1024 [ 407.622615][T11499] hfsplus: bad catalog entry type [ 408.059122][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 408.061413][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 408.068170][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 408.078578][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 408.086218][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 408.095548][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 408.104111][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 408.113468][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 408.121959][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 408.131368][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 408.139931][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 408.306093][T11522] ptrace attach of "./syz-executor exec"[4183] was attempted by ""[11522] [ 408.779020][T11511] loop1: detected capacity change from 0 to 32768 [ 409.086973][T11539] tipc: Started in network mode [ 409.135134][T11539] tipc: Node identity 2, cluster identity 4711 [ 409.150982][T11539] tipc: Node number set to 2 [ 409.746343][ T5224] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 410.205247][ T5224] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 410.225013][ T5224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.258063][ T5224] usb 5-1: config 0 descriptor?? [ 410.320682][ T5224] cp210x 5-1:0.0: cp210x converter detected [ 410.351738][ T4572] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 410.726742][T11511] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2988 (11511) [ 410.747843][ T4572] usb 6-1: Using ep0 maxpacket: 16 [ 410.796860][ T5224] usb 5-1: cp210x converter now attached to ttyUSB0 [ 410.955669][T11511] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 410.978622][T11511] BTRFS info (device loop1): using free space tree [ 411.002789][T11511] BTRFS info (device loop1): has skinny extents [ 411.042562][ T23] usb 5-1: USB disconnect, device number 19 [ 411.051099][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 411.274800][T11580] fido_id[11580]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 411.341075][ T23] cp210x 5-1:0.0: device disconnected [ 411.382123][ T4572] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 411.404450][ T4572] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.451068][ T4572] usb 6-1: Product: syz [ 411.455287][ T4572] usb 6-1: Manufacturer: syz [ 411.459901][ T4572] usb 6-1: SerialNumber: syz [ 411.541606][ T4572] usb 6-1: config 0 descriptor?? [ 411.617344][ T4572] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 411.662882][ T4572] usb 6-1: Detected FT-X [ 411.918154][T11511] BTRFS error (device loop1): open_ctree failed: -12 [ 412.074111][ T4572] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 412.107367][ T4572] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 412.108419][ T4572] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 412.134924][ T4572] usb 6-1: USB disconnect, device number 2 [ 412.141605][ T4452] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4452) [ 412.153863][ T4572] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 412.154851][ T4572] ftdi_sio 6-1:0.0: device disconnected [ 412.207092][T11605] loop3: detected capacity change from 0 to 2048 [ 412.362824][T11608] sp0: Synchronizing with TNC [ 412.471823][T11610] netlink: 'syz.4.3015': attribute type 1 has an invalid length. [ 412.471847][T11610] netlink: 'syz.4.3015': attribute type 2 has an invalid length. [ 412.471863][T11610] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3015'. [ 412.632904][T11612] tipc: Enabling of bearer rejected, failed to enable media [ 412.734240][T11614] loop5: detected capacity change from 0 to 256 [ 412.841957][T11619] usb usb8: usbfs: process 11619 (syz.0.3018) did not claim interface 0 before use [ 413.042184][T11623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3021'. [ 413.285957][T11629] loop4: detected capacity change from 0 to 128 [ 413.768177][T11629] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 413.817649][T11629] ext4 filesystem being mounted at /524/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 413.849570][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.604951][T11654] loop3: detected capacity change from 0 to 128 [ 414.817490][T11654] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 415.043990][ T4184] sysv_free_block: trying to free block not in datazone [ 415.064621][ T4184] sysv_free_block: trying to free block not in datazone [ 415.118693][ T4184] sysv_free_block: getblk() failed [ 415.150934][ T4184] sysv_free_block: getblk() failed [ 415.171149][ T4184] sysv_free_block: getblk() failed [ 415.176349][ T4184] sysv_free_block: getblk() failed [ 415.227346][ T4184] sysv_free_block: getblk() failed [ 415.258335][ T4184] sysv_free_block: getblk() failed [ 415.280917][ T4184] sysv_free_block: getblk() failed [ 415.319258][ T4184] sysv_free_block: getblk() failed [ 415.335493][ T4184] sysv_free_block: getblk() failed [ 415.351342][ T4184] sysv_free_block: getblk() failed [ 415.376866][ T4184] sysv_free_block: getblk() failed [ 415.393489][ T4184] sysv_free_block: getblk() failed [ 415.421123][ T4184] sysv_free_block: getblk() failed [ 415.431465][ T4184] sysv_free_block: getblk() failed [ 415.442387][ T4184] sysv_free_block: getblk() failed [ 415.468002][ T4184] sysv_free_block: getblk() failed [ 415.473620][ T4184] sysv_free_block: getblk() failed [ 415.487924][ T4184] sysv_free_block: getblk() failed [ 415.493319][ T4184] sysv_free_block: getblk() failed [ 415.498538][ T4184] sysv_free_block: getblk() failed [ 415.516776][ T4184] sysv_free_block: getblk() failed [ 415.556186][ T4184] sysv_free_block: getblk() failed [ 415.575990][ T4184] sysv_free_block: getblk() failed [ 415.595941][ T4184] sysv_free_block: getblk() failed [ 415.632124][ T4184] sysv_free_block: getblk() failed [ 415.637314][ T4184] sysv_free_block: getblk() failed [ 415.691905][ T4184] sysv_free_block: getblk() failed [ 415.697131][ T4184] sysv_free_block: getblk() failed [ 415.734975][ T4184] sysv_free_block: getblk() failed [ 415.740172][ T4184] sysv_free_block: getblk() failed [ 415.781627][ T4184] sysv_free_block: getblk() failed [ 415.786965][ T4184] sysv_free_block: getblk() failed [ 415.830925][ T4184] sysv_free_block: getblk() failed [ 415.846452][ T4184] sysv_free_block: getblk() failed [ 415.879591][ T4184] sysv_free_block: getblk() failed [ 415.899694][ T4184] sysv_free_block: getblk() failed [ 415.936083][ T4184] sysv_free_block: getblk() failed [ 415.952129][ T4184] sysv_free_block: getblk() failed [ 415.957323][ T4184] sysv_free_block: trying to free block not in datazone [ 416.012027][ T4184] sysv_free_block: trying to free block not in datazone [ 416.019227][ T4184] sysv_free_block: trying to free block not in datazone [ 416.104786][T11689] loop4: detected capacity change from 0 to 2048 [ 416.106785][ T4184] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 416.959076][T11715] loop5: detected capacity change from 0 to 1024 [ 417.276417][T11725] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 417.305659][T11725] hfsplus: cannot replace xattr [ 417.450926][ T6289] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 417.889812][ T6289] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 417.898258][ T6289] usb 2-1: config 0 has no interface number 0 [ 417.920894][ T6289] usb 2-1: config 0 interface 120 has no altsetting 0 [ 418.156080][ T6289] usb 2-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 418.169119][ T6289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.201211][T11689] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 418.226445][ T6289] usb 2-1: Product: syz [ 418.230669][ T6289] usb 2-1: Manufacturer: syz [ 418.243433][T11689] netlink: 'syz.4.3047': attribute type 32 has an invalid length. [ 418.259984][ T6289] usb 2-1: SerialNumber: syz [ 418.267415][T11689] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3047'. [ 418.272991][ T6289] usb 2-1: config 0 descriptor?? [ 418.719957][ T6289] comedi comedi5: could not switch to alternate setting 1 [ 418.754541][ T6289] usbduxfast 2-1:0.120: driver 'usbduxfast' failed to auto-configure device. [ 418.787492][T11769] program syz.0.3069 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 418.817842][ T6289] usb 2-1: USB disconnect, device number 27 [ 419.327877][T11780] loop3: detected capacity change from 0 to 1024 [ 419.583905][T11789] loop5: detected capacity change from 0 to 1024 [ 420.087879][ T9] hfsplus: b-tree write err: -5, ino 4 [ 420.427432][ T7] Bluetooth: hci1: command 0x0405 tx timeout [ 420.876243][ T4244] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 421.519385][ T4244] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.531711][ T4547] hfsplus: b-tree write err: -5, ino 4 [ 421.560886][ T4244] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.570673][ T4244] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 421.657350][ T4244] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 421.705047][T11856] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3092'. [ 421.709399][ T4244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.781820][ T4244] usb 5-1: config 0 descriptor?? [ 422.346875][ T4244] plantronics 0003:047F:FFFF.0020: unbalanced delimiter at end of report description [ 422.365404][ T4244] plantronics 0003:047F:FFFF.0020: parse failed [ 422.406427][ T4244] plantronics: probe of 0003:047F:FFFF.0020 failed with error -22 [ 422.605440][ T4244] usb 5-1: USB disconnect, device number 20 [ 422.786799][ T7] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 422.814745][T11896] loop5: detected capacity change from 0 to 512 [ 422.850553][T11898] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3104'. [ 422.943067][T11898] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3104'. [ 423.241175][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 423.392553][T11896] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,resgid=0x0000000000000000,barrier=0x000000000000000b,,errors=continue. Quota mode: writeback. [ 423.408578][ T7] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 423.430887][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.460603][ T7] usb 2-1: config 0 has no interface number 0 [ 423.501412][T11896] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.783998][ T7] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 423.838260][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.904707][ T7] usb 2-1: Product: syz [ 423.940894][ T7] usb 2-1: Manufacturer: syz [ 423.945558][ T7] usb 2-1: SerialNumber: syz [ 423.984210][ T7] usb 2-1: config 0 descriptor?? [ 424.118893][T11879] loop3: detected capacity change from 0 to 32768 [ 424.324485][ T7] snd-usb-audio: probe of 2-1:0.2 failed with error -2 [ 424.482736][T11940] device ip6gretap1 entered promiscuous mode [ 424.620787][ T23] usb 2-1: USB disconnect, device number 28 [ 425.219198][T11960] tmpfs: Bad value for 'mpol' [ 425.528471][T11964] loop1: detected capacity change from 0 to 4096 [ 425.765082][T11944] loop4: detected capacity change from 0 to 40427 [ 426.069234][T11971] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 426.206111][T11957] loop5: detected capacity change from 0 to 32768 [ 426.379336][T11957] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.3126 (11957) [ 426.514471][T11957] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 426.528166][T11957] BTRFS info (device loop5): enabling auto defrag [ 426.545575][T11957] BTRFS info (device loop5): use no compression [ 426.558148][T11957] BTRFS info (device loop5): force clearing of disk cache [ 426.591830][T11957] BTRFS info (device loop5): max_inline at 57 [ 426.608341][T11957] BTRFS info (device loop5): disabling free space tree [ 426.633168][T11957] BTRFS info (device loop5): has skinny extents [ 426.788554][T11992] team0: Cannot enslave team device to itself [ 427.109364][T12006] loop1: detected capacity change from 0 to 512 [ 427.140809][T11957] BTRFS info (device loop5): enabling ssd optimizations [ 427.186065][T11957] BTRFS info (device loop5): clearing free space tree [ 427.193677][T11957] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 427.219636][T11957] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 427.445793][T11957] BTRFS error (device loop5): target device is invalid! [ 427.944097][ T6289] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 428.393843][ T6289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 428.453730][ T6289] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 428.485509][ T6289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.524966][ T6289] usb 4-1: config 0 descriptor?? [ 429.032198][ T6289] asus 0003:0B05:17E0.0021: item fetching failed at offset 2/5 [ 429.040418][ T6289] asus 0003:0B05:17E0.0021: Asus hid parse failed: -22 [ 429.059504][ T6289] asus: probe of 0003:0B05:17E0.0021 failed with error -22 [ 429.095024][T12006] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 429.103562][T12006] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 429.141864][T12006] System zones: 1-12 [ 429.159225][T12006] EXT4-fs (loop1): orphan cleanup on readonly fs [ 429.186407][T12006] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.3141: Directory hole found for htree index block 0 [ 429.297362][T12006] EXT4-fs (loop1): Remounting filesystem read-only [ 429.319448][ T6289] usb 4-1: USB disconnect, device number 22 [ 429.330116][T12006] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 429.344851][T12006] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.3141: Directory hole found for htree index block 0 [ 429.436161][T12006] EXT4-fs (loop1): Remounting filesystem read-only [ 429.464063][T12006] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 429.493234][T12006] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 429.632370][T12033] loop5: detected capacity change from 0 to 256 [ 431.049747][ T4270] device hsr_slave_0 left promiscuous mode [ 431.087317][ T4270] device hsr_slave_1 left promiscuous mode [ 431.095909][ T4270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.120234][ T4270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.159078][T12069] loop4: detected capacity change from 0 to 512 [ 431.201344][ T4270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.208852][ T4270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.272508][ T4270] device bridge_slave_1 left promiscuous mode [ 431.281801][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.402916][ T4270] device bridge_slave_0 left promiscuous mode [ 431.442175][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.530484][ T4270] device veth1_macvtap left promiscuous mode [ 431.537496][ T4270] device veth0_macvtap left promiscuous mode [ 431.565681][ T4270] device veth1_vlan left promiscuous mode [ 431.583965][ T4270] device veth0_vlan left promiscuous mode [ 432.000766][T12085] loop1: detected capacity change from 0 to 1024 [ 432.291042][T12033] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x00949fb8, utbl_chksum : 0x7319d30d) [ 432.579369][ T4270] team0 (unregistering): Port device team_slave_1 removed [ 432.646443][ T4270] team0 (unregistering): Port device team_slave_0 removed [ 432.696791][ T4270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.819338][ T4270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.218298][ T4270] bond0 (unregistering): Released all slaves [ 433.712399][T12101] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3182'. [ 434.182331][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.525946][T12120] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3191'. [ 435.875871][T12129] loop5: detected capacity change from 0 to 512 [ 435.938735][T12129] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 435.951228][T12129] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 436.038777][T12129] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 436.054335][T12129] System zones: 1-12 [ 436.112856][T12129] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.3195: corrupted in-inode xattr [ 436.149456][T12129] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.3195: couldn't read orphan inode 15 (err -117) [ 436.239017][T12129] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x000000000000faca,nolazytime,debug,noload,mblk_io_submit,commit=0x0000000000000005,lazytime,acl,,errors=continue. Quota mode: none. [ 436.278214][T12139] loop4: detected capacity change from 0 to 128 [ 436.423422][ T21] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 436.801382][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 436.962815][ T21] usb 2-1: config 0 interface 0 has no altsetting 0 [ 436.969699][ T21] usb 2-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 436.989034][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.031307][ T21] usb 2-1: config 0 descriptor?? [ 437.511488][T12153] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3206'. [ 437.542136][ T21] elecom 0003:056E:00FF.0022: unknown main item tag 0x0 [ 437.561111][ T21] elecom 0003:056E:00FF.0022: hidraw0: USB HID v0.00 Device [HID 056e:00ff] on usb-dummy_hcd.1-1/input0 [ 437.826960][ T7] usb 2-1: USB disconnect, device number 29 [ 437.916992][T12139] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 437.972031][T12139] hpfs: filesystem error: improperly stopped [ 438.007796][T12139] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 438.059484][T12139] hpfs: You really don't want any checks? You are crazy... [ 438.076634][T12160] fido_id[12160]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 438.122098][T12139] hpfs: hpfs_map_sector(): read error [ 438.127532][T12139] hpfs: code page support is disabled [ 438.155725][T12139] hpfs: hpfs_map_4sectors(): unaligned read [ 438.188913][T12139] hpfs: hpfs_map_4sectors(): unaligned read [ 438.195065][T12164] netlink: 'syz.5.3211': attribute type 2 has an invalid length. [ 438.228633][T12139] hpfs: filesystem error: unable to find root dir [ 438.613265][T12172] loop1: detected capacity change from 0 to 128 [ 438.816684][ T2302] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 439.457621][ T2302] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.533743][ T2302] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.554778][ T2302] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 439.613279][ T2302] usb 6-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 439.636983][ T2302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.716068][ T2302] usb 6-1: config 0 descriptor?? [ 439.909463][ T4244] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 439.962091][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.968425][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.308221][ T2302] hid-udraw 0003:20D6:CB17.0023: unknown main item tag 0x2 [ 440.325269][ T2302] hid-udraw 0003:20D6:CB17.0023: item fetching failed at offset 2/7 [ 440.334277][ T2302] hid-udraw 0003:20D6:CB17.0023: parse failed [ 440.340403][ T2302] hid-udraw: probe of 0003:20D6:CB17.0023 failed with error -22 [ 440.554976][ T4244] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 440.563203][ T2302] usb 6-1: USB disconnect, device number 3 [ 440.576246][ T4244] usb 2-1: config 0 has no interface number 0 [ 440.592351][ T4244] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.612587][ T4244] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.651511][ T4244] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 440.660614][ T4244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.754653][ T4244] usb 2-1: config 0 descriptor?? [ 440.900853][ C0] sched: RT throttling activated [ 441.271505][ T4244] prodikeys 0003:041E:2801.0024: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input1 [ 441.309584][ T4244] hid_prodikeys: hid-prodikeys: failed to find output report [ 441.309584][ T4244] [ 441.423419][ T7] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 441.553687][ T6289] usb 2-1: USB disconnect, device number 30 [ 441.564832][T12218] fido_id[12218]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 441.796467][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 441.928952][ T7] usb 4-1: config index 0 descriptor too short (expected 69, got 36) [ 441.943793][ T5230] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 441.958087][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.156088][ T7] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 442.172881][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.206501][ T7] usb 4-1: Product: syz [ 442.210737][ T7] usb 4-1: Manufacturer: syz [ 442.215682][T12236] loop1: detected capacity change from 0 to 1764 [ 442.230693][ T7] usb 4-1: SerialNumber: syz [ 442.263567][ T7] usb 4-1: config 0 descriptor?? [ 442.324043][ T7] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 442.399976][ T5230] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 68, setting to 64 [ 442.404145][T12236] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 442.421927][ T5230] usb 6-1: config 0 interface 0 has no altsetting 0 [ 442.428597][ T5230] usb 6-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 442.457127][ T5230] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.501830][ T5230] usb 6-1: config 0 descriptor?? [ 442.541284][T12224] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 442.605726][T12241] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3256'. [ 442.993238][ T5230] cypress 0003:04B4:DE64.0025: hidraw0: USB HID v1.01 Device [HID 04b4:de64] on usb-dummy_hcd.5-1/input0 [ 443.023095][ T7] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 443.030135][ T7] gspca_pac7302: probe of 4-1:0.0 failed with error -71 [ 443.091225][ T7] usb 4-1: USB disconnect, device number 23 [ 443.196249][T12247] loop4: detected capacity change from 0 to 4096 [ 443.223999][ T5230] usb 6-1: USB disconnect, device number 4 [ 443.469275][T12251] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 443.748960][T12255] netlink: 'syz.4.3252': attribute type 3 has an invalid length. [ 444.998451][ T4226] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 445.576323][T12277] loop5: detected capacity change from 0 to 40427 [ 445.593584][ T4226] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.604003][ T4226] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.644837][ T4226] usb 2-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 445.694797][T12277] F2FS-fs (loop5): Invalid log blocks per segment (83886089) [ 445.702825][T12277] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 445.731945][ T4226] usb 2-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 445.751980][ T4226] usb 2-1: config 1 interface 1 has no altsetting 0 [ 445.770990][T12277] F2FS-fs (loop5): invalid crc value [ 445.892161][T12277] F2FS-fs (loop5): Found nat_bits in checkpoint [ 446.066546][T12277] F2FS-fs (loop5): Start checkpoint disabled! [ 446.070638][ T4226] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 446.082989][ T4226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.091093][ T4226] usb 2-1: Product: syz [ 446.095341][ T4226] usb 2-1: Manufacturer: syz [ 446.099961][ T4226] usb 2-1: SerialNumber: syz [ 446.229897][T12277] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 446.233430][ T4226] cdc_acm: probe of 2-1:1.0 failed with error -22 [ 446.244294][T12277] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 446.377493][T12277] ceph: Unexpected value for 'acl' [ 446.384124][T12312] loop3: detected capacity change from 0 to 256 [ 446.465728][ T4226] usb 2-1: USB disconnect, device number 31 [ 446.475381][T12316] 9pnet_rdma: rdma_create_trans (12316): problem binding to privport: 13 [ 446.716954][ T4547] attempt to access beyond end of device [ 446.716954][ T4547] loop5: rw=2049, want=40976, limit=40427 [ 447.019147][T12329] loop4: detected capacity change from 0 to 1024 [ 447.087417][T12328] loop3: detected capacity change from 0 to 256 [ 447.574762][ T4226] kernel write not supported for file /input/mouse0 (pid: 4226 comm: kworker/1:4) [ 447.716303][T12339] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3292'. [ 448.250974][T12347] netlink: 'syz.1.3296': attribute type 1 has an invalid length. [ 448.258770][T12347] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.3296'. [ 448.399395][T12349] loop1: detected capacity change from 0 to 64 [ 449.149450][T12329] hfsplus: trying to free free bnode 0(1) [ 449.179803][T12356] loop5: detected capacity change from 0 to 256 [ 449.276397][ T4547] hfsplus: b-tree write err: -5, ino 4 [ 449.764992][T12358] program syz.4.3300 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 449.881231][T12351] loop1: detected capacity change from 0 to 32768 [ 450.051345][T12328] FAT-fs (loop3): Directory bread(block 64) failed [ 450.059283][T12328] FAT-fs (loop3): Directory bread(block 65) failed [ 450.091988][T12328] FAT-fs (loop3): Directory bread(block 66) failed [ 450.107083][T12328] FAT-fs (loop3): Directory bread(block 67) failed [ 450.131092][T12351] XFS (loop1): Mounting V5 Filesystem [ 450.142105][T12328] FAT-fs (loop3): Directory bread(block 68) failed [ 450.176356][T12328] FAT-fs (loop3): Directory bread(block 69) failed [ 450.196871][T12328] FAT-fs (loop3): Directory bread(block 70) failed [ 450.238738][T12328] FAT-fs (loop3): Directory bread(block 71) failed [ 450.288387][T12328] FAT-fs (loop3): Directory bread(block 72) failed [ 450.313206][T12328] FAT-fs (loop3): Directory bread(block 73) failed [ 450.498590][T12378] loop4: detected capacity change from 0 to 1024 [ 451.642501][T12356] exfat: Deprecated parameter 'utf8' [ 451.903990][T12356] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 452.141251][T12351] XFS (loop1): Ending clean mount [ 452.202506][T12351] XFS (loop1): Quotacheck needed: Please wait. [ 452.367231][T12351] XFS (loop1): Quotacheck: Done. [ 452.473378][ T4187] XFS (loop1): Unmounting Filesystem [ 452.707620][T12378] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 452.740783][T12378] ext4 filesystem being mounted at /568/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.793062][T12378] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 454.457944][T12422] loop5: detected capacity change from 0 to 256 [ 454.480397][T12422] exfat: Deprecated parameter 'utf8' [ 454.504068][T12422] exfat: Deprecated parameter 'utf8' [ 454.509440][T12422] exfat: Deprecated parameter 'namecase' [ 454.875280][T12422] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 455.960486][ T7] kernel write not supported for file /1303/net/psched (pid: 7 comm: kworker/0:0) [ 456.626072][T12426] loop4: detected capacity change from 0 to 40427 [ 456.743035][T12426] F2FS-fs (loop4): invalid crc value [ 456.900923][T12426] F2FS-fs (loop4): Found nat_bits in checkpoint [ 457.071733][T12426] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 457.160704][T12476] loop5: detected capacity change from 0 to 512 [ 457.416121][T12476] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 457.427374][T12476] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 not in group (block 1)! [ 457.454462][ T4196] attempt to access beyond end of device [ 457.454462][ T4196] loop4: rw=2049, want=45104, limit=40427 [ 457.495866][T12476] EXT4-fs (loop5): group descriptors corrupted! [ 457.678701][T12491] loop3: detected capacity change from 0 to 1024 [ 458.086500][T12502] loop1: detected capacity change from 0 to 16 [ 459.922366][T12526] loop5: detected capacity change from 0 to 4096 [ 460.031472][T12502] erofs: (device loop1): mounted with root inode @ nid 36. [ 460.486648][T12538] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 460.527536][T12538] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 460.561018][T12538] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 460.641364][T12538] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 460.718762][T12538] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 460.740196][T12538] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 460.779564][T12538] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 460.786914][T12538] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 460.800255][T12538] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 460.819087][T12538] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 460.848823][T12538] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 460.858355][T12538] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 460.899295][T12538] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 460.935899][T12538] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 460.971000][T12538] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 461.025777][T12538] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 461.067793][T12538] comedi comedi3: 8255: I/O port conflict (0xffffffffffffcadb,4) [ 461.151920][T12538] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 461.402969][T12562] loop4: detected capacity change from 0 to 65 [ 461.724015][T12573] tipc: Enabling of bearer rejected, failed to enable media [ 461.774065][T12572] device vlan4 entered promiscuous mode [ 461.779665][T12572] device syz_tun entered promiscuous mode [ 462.334737][T12587] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3401'. [ 462.761187][T12596] netlink: 'syz.0.3406': attribute type 1 has an invalid length. [ 463.394574][T12588] loop1: detected capacity change from 0 to 32768 [ 463.695219][T12562] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 464.845541][T12622] loop4: detected capacity change from 0 to 8 [ 465.287406][T12622] SQUASHFS error: Unable to read directory block [1d0:0] [ 466.131027][T12640] hfs: can't find a HFS filesystem on dev nullb0 [ 466.304137][T12636] loop5: detected capacity change from 0 to 32768 [ 466.510478][T12646] sch_fq: defrate 4294967295 ignored. [ 466.953693][T12658] loop3: detected capacity change from 0 to 1024 [ 467.349667][T12670] loop3: detected capacity change from 0 to 2048 [ 467.560201][T12674] genirq: Flags mismatch irq 4. 00000000 (pcl818) vs. 00000000 (ttyS0) [ 467.640125][T12670] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 468.500118][ T21] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 468.858631][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 469.084311][ T21] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 469.104537][ T21] usb 2-1: config 0 has no interface number 0 [ 469.110690][ T21] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 469.153404][ T21] usb 2-1: config 0 interface 196 has no altsetting 0 [ 469.372238][ T21] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 469.407376][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.424551][ T21] usb 2-1: Product: syz [ 469.428774][ T21] usb 2-1: Manufacturer: syz [ 469.451697][ T21] usb 2-1: SerialNumber: syz [ 469.458969][ T21] usb 2-1: config 0 descriptor?? [ 469.504617][T12688] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 469.984514][ T21] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 4 bytes [ 470.003905][ T21] ipheth: probe of 2-1:0.196 failed with error -22 [ 470.276710][ T21] usb 2-1: USB disconnect, device number 32 [ 470.642037][T12702] loop5: detected capacity change from 0 to 32768 [ 471.163493][T12702] XFS (loop5): Mounting V5 Filesystem [ 471.173123][T12746] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3472'. [ 471.240978][T12746] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 471.438941][T12761] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 471.450709][T12761] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 471.459139][T12761] CPU: 0 PID: 12761 Comm: syz.3.3478 Not tainted syzkaller #0 [ 471.466682][T12761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 471.476767][T12761] RIP: 0010:pcl818_ai_cancel+0x65/0x3e0 [ 471.482347][T12761] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 3d dc 49 fa 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 1c dc 49 fa 4d 8b 24 24 48 83 c3 [ 471.501979][T12761] RSP: 0018:ffffc900034cfa80 EFLAGS: 00010206 [ 471.508085][T12761] RAX: 0000000000000005 RBX: ffff88805f787780 RCX: 0000000000080000 [ 471.516091][T12761] RDX: ffffc90005ac9000 RSI: 000000000000042f RDI: 0000000000000430 [ 471.524096][T12761] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed10298a2a26 [ 471.532092][T12761] R10: ffffed10298a2a26 R11: 1ffff110298a2a25 R12: 0000000000000028 [ 471.540188][T12761] R13: dffffc0000000000 R14: ffff88814c515000 R15: dffffc0000000000 [ 471.548185][T12761] FS: 00007fd8b30086c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 471.557146][T12761] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 471.563779][T12761] CR2: 0000001b32523ffc CR3: 000000006aaea000 CR4: 00000000003506f0 [ 471.571780][T12761] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 471.579782][T12761] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 471.587777][T12761] Call Trace: [ 471.591072][T12761] [ 471.594021][T12761] pcl818_detach+0x62/0xd0 [ 471.598477][T12761] comedi_device_detach_locked+0x16e/0x710 [ 471.604333][T12761] comedi_unlocked_ioctl+0xd0b/0x1050 [ 471.609741][T12761] ? comedi_poll+0x8b0/0x8b0 [ 471.614398][T12761] ? bpf_lsm_file_ioctl+0x5/0x10 [ 471.619364][T12761] ? security_file_ioctl+0x7c/0xa0 [ 471.624513][T12761] ? comedi_poll+0x8b0/0x8b0 [ 471.629130][T12761] __se_sys_ioctl+0xfa/0x170 [ 471.633758][T12761] do_syscall_64+0x4c/0xa0 [ 471.638198][T12761] ? clear_bhb_loop+0x30/0x80 [ 471.642902][T12761] ? clear_bhb_loop+0x30/0x80 [ 471.647608][T12761] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 471.653527][T12761] RIP: 0033:0x7fd8b4da0ec9 [ 471.657970][T12761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.677602][T12761] RSP: 002b:00007fd8b3008038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 471.686050][T12761] RAX: ffffffffffffffda RBX: 00007fd8b4ff7fa0 RCX: 00007fd8b4da0ec9 [ 471.694052][T12761] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 471.702095][T12761] RBP: 00007fd8b4e23f91 R08: 0000000000000000 R09: 0000000000000000 [ 471.710124][T12761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.718125][T12761] R13: 00007fd8b4ff8038 R14: 00007fd8b4ff7fa0 R15: 00007fffc5d83778 [ 471.726130][T12761] [ 471.729183][T12761] Modules linked in: [ 471.815566][T12761] ---[ end trace 3022fcb6401ea6e1 ]--- [ 471.826892][T12761] RIP: 0010:pcl818_ai_cancel+0x65/0x3e0 [ 471.832859][T12761] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 3d dc 49 fa 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 1c dc 49 fa 4d 8b 24 24 48 83 c3 [ 471.899464][T12761] RSP: 0018:ffffc900034cfa80 EFLAGS: 00010206 [ 471.919090][T12761] RAX: 0000000000000005 RBX: ffff88805f787780 RCX: 0000000000080000 [ 471.976404][T12761] RDX: ffffc90005ac9000 RSI: 000000000000042f RDI: 0000000000000430 [ 472.008414][T12761] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed10298a2a26 [ 472.029030][T12761] R10: ffffed10298a2a26 R11: 1ffff110298a2a25 R12: 0000000000000028 [ 472.070839][T12761] R13: dffffc0000000000 R14: ffff88814c515000 R15: dffffc0000000000 [ 472.098369][T12761] FS: 00007fd8b30086c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 472.151570][T12761] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 472.241379][T12702] XFS (loop5): Ending clean mount [ 472.406166][T11022] XFS (loop5): Unmounting Filesystem [ 472.602462][T12761] CR2: 00007f68e46abad8 CR3: 000000006aaea000 CR4: 00000000003506e0 [ 472.610721][T12761] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 472.631787][T12761] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 472.672748][T12761] Kernel panic - not syncing: Fatal exception [ 472.679150][T12761] Kernel Offset: disabled [ 472.683662][T12761] Rebooting in 86400 seconds..