last executing test programs: 2.322303956s ago: executing program 3 (id=1424): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000100)={&(0x7f00000000c0)=""/40, 0x28}) 2.179745269s ago: executing program 0 (id=1425): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa0d81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x100000]}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000600)={0x0, 0x7a120, 0x60, {0x3, 0x103}, 0x0, 0x9}) 2.07602994s ago: executing program 3 (id=1428): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.958630543s ago: executing program 0 (id=1429): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6e5, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000340)=ANY=[], 0x700, 0x0) write$P9_RSTATu(r0, &(0x7f0000000180)={0x77, 0x7d, 0x2, {{0x0, 0x55, 0x2, 0x7, {0x10, 0x0, 0x6}, 0x8000000, 0x495299a0, 0xff, 0x2, 0x5, '].[&^', 0x3, '-&$', 0xd, 'security.ima\x00', 0xd, 'security.ima\x00'}, 0xd, 'security.ima\x00'}}, 0x77) 1.896963014s ago: executing program 1 (id=1430): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@delchain={0x188, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xd}, {0x0, 0xfff3}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x144, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x18, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1ff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]}, @TCA_BPF_ACT={0x120, 0x1, [@m_connmark={0x7c, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x49, 0x6, "4eebdf2408e8952792009f587075f394796b87f5e6c0508e4deec5a86d24a64dacafd73234200ce6fe5d4aea9687c8c641b998a1c77c0f725ce22b72f10b8a2d3a770951c3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0xa0, 0x1d, 0x0, 0x0, {{0xf}, {0x4}, {0x6e, 0x6, "309e7046678cfa85254c612d61e3d2c3e3b6590ca2f3e70c7fcdf5868b95845dfa60edad38b3b8c47659e35d235cfa416f9d81db4b5bb82e527e794cf9c32a539860aa592d929cecb48c76df399b49231fc0de0b4c4b5e510bd82e77a2a017326f355f49b6d04814facf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x188}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.743925247s ago: executing program 2 (id=1431): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79ae, 0x3180, 0x8000, 0xd7}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000000c0)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x5}) io_uring_enter(r0, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) 1.414367483s ago: executing program 2 (id=1432): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0x98, &(0x7f0000000100)=""/152, 0x41000, 0xa}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa1000000000000070100000700ffff9702000008000000b703000000000028850000009500000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x2b}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x94) 1.333505955s ago: executing program 0 (id=1433): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.144010968s ago: executing program 2 (id=1434): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x8e, 0x0, 0x3ff}]}) 1.105279189s ago: executing program 1 (id=1435): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 947.191202ms ago: executing program 3 (id=1436): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1, 0x2, 0xe37ffffffffffe}) fcntl$lock(r0, 0x26, &(0x7f0000000580)={0x0, 0x1, 0x5, 0xc2ce8f01}) fcntl$lock(r0, 0x5, &(0x7f0000000440)={0x0, 0x0, 0xa, 0x0, 0xffffffffffffffff}) 863.429194ms ago: executing program 3 (id=1437): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xe8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xfa7}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x88, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x74, 0x1, [@m_mirred={0x70, 0x5, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xcdf, 0x1, 0x10000000, 0x2, 0xfffff001}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x6, 0x5, 0x4, 0x9}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x211}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 799.964015ms ago: executing program 2 (id=1438): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x5, 0xd1, &(0x7f00000002c0)=""/209}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r0, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000002b00)=""/171, 0xab}}, 0x10) 799.712595ms ago: executing program 1 (id=1439): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000f00)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0x1e) 711.672916ms ago: executing program 1 (id=1440): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$eJzs3c1rXFUbAPDnTpImTfu+zQsv2LppVloonbQ1tgqCERciWCjo2jZMpiFmkimZSWlCFhYRBBG0uBB049qPunMruvZvcCMiLVXTYsWFjNz5SKb5mHw0k2mb3w9ucs6dc+ecZ+7cc8/MPcwNYM8aTP9kIo5ExIdJxKH6+iQieqqp7oiRWrl7iwu5dEmiUnn996Ra5u7iQi6atkkdqGcOR8T370Ycz6yutzQ3PzlaKORn6vmh8tTlodLc/ImJqdHx/Hh++syp4eHTZ589e2bnYv3zx/mDtz565emvR/5+54kbH/yQxEgcrD/WHMdOGYzB+mvSk76E93l5pyvrsKTTDWBb0kOzq3aUx5E4FF3VFADwOEvP/xUAYI9JnP8BYI9pfA9wd3Eh11g6+43E7rr9UkT01eJvXN+sPdJdv2bXV70O2n83ie76FdHYwetdgxHx2bdvfpku0abrkABreftaRFwcGFzd/yer5ixs1clNlBlckdf/we75Lh3/PLfW+C+zNP6JpfHPst41jt3tGIzY15xfffxnbq654Ys7UHl9/PdCbW5bGmjT+G9p0tpAVz33nzRzNCImCvm0b/tvRByLnt5LE4X8qRZ1HLvzz531Hmse//1x/a0v0vrT/8slMje7e+/fZmy0PPogMTe7fS3iye7luX33VvX/fdWx7sr9n6473+qJjy4nX33+vU/XK5bGn8bbWFbH316VzyOeirXjb0hazk8cSnf/ydrftev45udP+terv3n/p0taf+OzwG5I939/6/gHkub5mqWdrX/j+Nd+/+9L3qimG53H1dFyeeZUxL7ktdXrTy9v28g3yqfx1yJdGX+m5fs//SR4cZMxdt/67avtx7+kLVMs0/jHtrT/t564cW+ya/vxp/t/uJo6Vl+zmf5vsw18kNcOAAAAAAAAAAAAAAAAAAAAAAAAADYrExEHI8lkl9KZTDZbu4f3/6M/UyiWyscvFWenx6J6r+yB6Mk0furyUC2fNH7/dKApf3pF/pmI+F9EfNy7v5rP5oqFsU4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1B9a5/3/q195Otw4AaJu+DUvcyd+XrVQqlTa2BwBov43P/wDA46bF+X//brYDANg9Pv8DwN7j/A8Ae4/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG12/ty5dKn8tbiQS/NjV+ZmJ4tXTozlS5PZqdlcNlecuZwdLxbHC/lsrji10fMVisXLwzE9e3WonC+Vh0pz8xemirPT5QsTU6Pj+Qv5nl2JCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2pjQ3PzlaKORnHovE+xHxEDSjHYkkHopmdCTxy4mfDrcqc32Dt/HIQxHFI5bodM8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj4NwAA//8PbSWm") r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) 646.414378ms ago: executing program 3 (id=1441): r0 = syz_open_procfs(0x0, &(0x7f0000000800)='fd\x00') getdents64(r0, &(0x7f0000000240)=""/44, 0x2c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getdents(r0, &(0x7f0000000040)=""/120, 0x78) 625.388298ms ago: executing program 2 (id=1442): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xbbcd, 0x10100, 0x10000000, 0x13b}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(r0, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) 594.454049ms ago: executing program 0 (id=1443): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000280)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x68, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0xe7f5, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 511.51118ms ago: executing program 1 (id=1444): syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) fadvise64(r0, 0xe0ffff, 0x9, 0x3) 472.761141ms ago: executing program 2 (id=1445): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x25000400, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x0, 0x0, 0x81}) 361.979663ms ago: executing program 3 (id=1446): syz_mount_image$xfs(&(0x7f00000003c0), &(0x7f0000000000)='./file0\x00', 0x4008, &(0x7f0000000540), 0x1, 0x9825, &(0x7f000001c900)="$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") mmap(&(0x7f0000054000/0x3000)=nil, 0x3000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x6a72c000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 272.079975ms ago: executing program 0 (id=1447): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f00000051c0)=[{{&(0x7f0000000240)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000280)="0e12071d29a0d50a", 0x8}], 0x1}}, {{&(0x7f00000004c0)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffff6}}], 0x18}}], 0x2, 0x4040) 142.751697ms ago: executing program 0 (id=1448): write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000180), 0xf) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000001c0)=@unlock_all, 0xb) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04000b20"], 0x7) chown(0x0, 0xee01, 0x0) 0s ago: executing program 1 (id=1449): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r1 = dup(r0) fallocate(r1, 0x10, 0x0, 0x72000) kernel console output (not intermixed with test programs): x0 [ 165.436650][ T5776] hkems 0003:2006:0118.0007: unknown main item tag 0x0 [ 165.461142][ T5776] hkems 0003:2006:0118.0007: unknown main item tag 0x0 [ 165.479095][ T5776] hkems 0003:2006:0118.0007: unknown main item tag 0x0 [ 165.496567][ T5776] hkems 0003:2006:0118.0007: unknown main item tag 0x0 [ 165.513547][ T5871] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0008/input/input22 [ 165.534839][ T5776] hkems 0003:2006:0118.0007: unknown main item tag 0x0 [ 165.547396][ T5776] hkems 0003:2006:0118.0007: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.3-1/input0 [ 165.566273][ T5871] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0008/input/input23 [ 165.578298][ T5776] hkems 0003:2006:0118.0007: no inputs found [ 165.585940][ T5776] hkems 0003:2006:0118.0007: force feedback init failed [ 165.600342][ T5871] kye 0003:0458:5011.0008: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 165.619447][ T5776] usb 4-1: USB disconnect, device number 11 [ 165.925964][ T5776] usb 3-1: USB disconnect, device number 11 [ 166.284506][ T7445] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.622'. [ 166.379274][ T787] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 166.609040][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 166.625940][ T787] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 166.669126][ T787] usb 2-1: config 0 has no interface number 0 [ 166.685450][ T787] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 166.722949][ T787] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 166.760527][ T787] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 166.777974][ T787] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 166.797758][ T787] usb 2-1: Product: syz [ 166.802201][ T787] usb 2-1: SerialNumber: syz [ 166.815897][ T787] usb 2-1: config 0 descriptor?? [ 166.852029][ T787] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 166.880885][ T787] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input24 [ 167.192782][ C1] cm109_urb_ctl_callback: 1 callbacks suppressed [ 167.192811][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.208152][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.215917][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.223597][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.231220][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.238452][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.245753][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.253158][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.260478][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.268122][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.279617][ T787] usb 2-1: USB disconnect, device number 12 [ 167.285764][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 167.308522][ T787] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 167.990556][ T7477] loop2: detected capacity change from 0 to 2048 [ 168.010020][ T7477] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.203071][ T7472] loop3: detected capacity change from 0 to 32768 [ 168.230725][ T7472] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.634 (7472) [ 168.278331][ T7472] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 168.309073][ T7472] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 168.321971][ T7472] BTRFS info (device loop3): enabling disk space caching [ 168.349122][ T7472] BTRFS info (device loop3): turning on flush-on-commit [ 168.358953][ T7472] BTRFS info (device loop3): disabling tree log [ 168.365388][ T7472] BTRFS info (device loop3): use no compression [ 168.389195][ T7472] BTRFS info (device loop3): force clearing of disk cache [ 168.404830][ T7472] BTRFS info (device loop3): turning on sync discard [ 168.417451][ T7472] BTRFS info (device loop3): disabling disk space caching [ 168.600876][ T7472] BTRFS info (device loop3): enabling ssd optimizations [ 168.627054][ T7472] BTRFS info (device loop3): rebuilding free space tree [ 168.711994][ T7472] BTRFS info (device loop3): disabling free space tree [ 168.732604][ T7472] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 168.745245][ T7472] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 168.919471][ T5785] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 169.188287][ T7509] gfs2: gfs2 mount does not exist [ 169.744434][ T7529] loop2: detected capacity change from 0 to 7 [ 169.758438][ T7529] Dev loop2: unable to read RDB block 7 [ 169.766080][ T7529] loop2: unable to read partition table [ 169.772722][ T7529] loop2: partition table beyond EOD, truncated [ 169.779546][ T7529] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 169.799119][ T5871] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 169.999105][ T5871] usb 3-1: Using ep0 maxpacket: 16 [ 170.017150][ T5871] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 170.039183][ T5871] usb 3-1: config 0 has no interface number 0 [ 170.045488][ T5871] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 170.079065][ T5871] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 170.107305][ T5871] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 170.129020][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 170.137427][ T5871] usb 3-1: Product: syz [ 170.159262][ T5871] usb 3-1: SerialNumber: syz [ 170.180304][ T5871] usb 3-1: config 0 descriptor?? [ 170.191521][ T5871] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 170.210637][ T5871] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input25 [ 170.492965][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 170.502309][ T5871] usb 3-1: USB disconnect, device number 12 [ 170.521526][ T5871] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 170.561447][ T7543] loop1: detected capacity change from 0 to 4096 [ 170.579123][ T7543] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 170.665067][ T7543] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 170.696584][ T7543] ntfs3: loop1: Failed to load $Extend (-22). [ 170.705500][ T7543] ntfs3: loop1: Failed to initialize $Extend. [ 170.892825][ T7549] loop1: detected capacity change from 0 to 1024 [ 170.940397][ T7549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.959365][ T7549] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.046754][ T7549] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: block 3: comm syz.1.663: lblock 3 mapped to illegal pblock 3 (length 13) [ 171.122508][ T7549] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 171.159136][ T7549] EXT4-fs (loop1): This should not happen!! Data will be lost [ 171.159136][ T7549] [ 171.173243][ T7560] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #15: block 3: comm syz.1.663: lblock 3 mapped to illegal pblock 3 (length 1) [ 171.218606][ T28] audit: type=1800 audit(1759256864.888:175): pid=7560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.663" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 171.314759][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.329411][ T7566] can0: slcan on ttyS3. [ 171.440500][ T7566] can0 (unregistered): slcan off ttyS3. [ 171.566708][ T7572] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 171.573904][ T7572] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 171.611330][ T7572] vhci_hcd vhci_hcd.0: Device attached [ 171.789245][ T1187] vhci_hcd: vhci_device speed not set [ 171.859046][ T1187] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 171.889329][ T27] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 171.935823][ T7564] loop0: detected capacity change from 0 to 40427 [ 171.950658][ T7564] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 171.968237][ T7564] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 171.985480][ T7564] F2FS-fs (loop0): invalid crc value [ 171.997198][ T7564] F2FS-fs (loop0): Found nat_bits in checkpoint [ 172.010944][ T7590] ip6t_rpfilter: unknown options [ 172.071787][ T7564] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 172.084986][ T7564] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 172.109471][ T27] usb 3-1: config 0 has no interfaces? [ 172.115256][ T27] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 172.138999][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.160027][ T27] usb 3-1: config 0 descriptor?? [ 172.242181][ T7595] loop1: detected capacity change from 0 to 256 [ 172.286310][ T7595] syz.1.680: attempt to access beyond end of device [ 172.286310][ T7595] loop1: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 172.398175][ T7573] usb 37-1: recv xbuf, 0 [ 172.407062][ T5776] usb 3-1: USB disconnect, device number 13 [ 172.427372][ T42] vhci_hcd: stop threads [ 172.451855][ T42] vhci_hcd: release socket [ 172.461753][ T42] vhci_hcd: disconnect device [ 172.499516][ T1187] vhci_hcd: vhci_device speed not set [ 172.585131][ T7599] loop0: detected capacity change from 0 to 1024 [ 172.616438][ T7599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.659268][ T7599] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.745358][ T7599] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: block 3: comm syz.0.679: lblock 3 mapped to illegal pblock 3 (length 13) [ 172.795591][ T7599] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 172.839927][ T7599] EXT4-fs (loop0): This should not happen!! Data will be lost [ 172.839927][ T7599] [ 172.859232][ T7608] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #15: block 3: comm syz.0.679: lblock 3 mapped to illegal pblock 3 (length 1) [ 172.905357][ T28] audit: type=1800 audit(1759256866.578:176): pid=7608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.679" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 173.024222][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.032541][ T7601] loop1: detected capacity change from 0 to 32768 [ 173.073950][ T7601] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.682 (7601) [ 173.110928][ T7601] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 173.121819][ T7612] loop3: detected capacity change from 0 to 4096 [ 173.147964][ T7612] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 173.149123][ T7601] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 173.161620][ T7612] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 173.185487][ T7601] BTRFS info (device loop1): enabling disk space caching [ 173.193969][ T7612] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 173.207159][ T7601] BTRFS info (device loop1): turning on flush-on-commit [ 173.229001][ T7612] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 173.249419][ T7601] BTRFS info (device loop1): disabling tree log [ 173.256315][ T7601] BTRFS info (device loop1): use no compression [ 173.269145][ T7612] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 173.283167][ T7601] BTRFS info (device loop1): force clearing of disk cache [ 173.293260][ T7601] BTRFS info (device loop1): turning on sync discard [ 173.300902][ T7601] BTRFS info (device loop1): disabling disk space caching [ 173.317217][ T7612] ntfs: volume version 3.1. [ 173.341456][ T7612] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 173.377690][ T7612] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 173.401315][ T7612] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 173.417088][ T7601] BTRFS info (device loop1): enabling ssd optimizations [ 173.436189][ T7601] BTRFS info (device loop1): rebuilding free space tree [ 173.501284][ T7601] BTRFS info (device loop1): disabling free space tree [ 173.508570][ T7601] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 173.569608][ T7601] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 173.599967][ T7636] loop2: detected capacity change from 0 to 1024 [ 173.658068][ T7636] hfsplus: bad catalog entry type [ 173.729084][ T48] hfsplus: b-tree write err: -5, ino 4 [ 173.774128][ T5784] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 173.894727][ T7616] loop0: detected capacity change from 0 to 32768 [ 173.997396][ T7616] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 174.207890][ T5793] ocfs2: Unmounting device (7,0) on (node local) [ 174.752008][ T7645] loop1: detected capacity change from 0 to 32768 [ 174.847910][ T7654] loop2: detected capacity change from 0 to 7 [ 174.864667][ T7654] Dev loop2: unable to read RDB block 7 [ 174.870707][ T7654] loop2: unable to read partition table [ 174.878410][ T7654] loop2: partition table beyond EOD, truncated [ 174.888823][ T7655] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.940818][ T7654] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 175.251938][ T7667] loop0: detected capacity change from 0 to 128 [ 175.279729][ T7667] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 175.304915][ T7667] hpfs: filesystem error: improperly stopped [ 175.319013][ T7667] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 175.347559][ T7667] hpfs: You really don't want any checks? You are crazy... [ 175.365742][ T7667] hpfs: hpfs_map_sector(): read error [ 175.379013][ T7667] hpfs: code page support is disabled [ 175.396617][ T7667] hpfs: hpfs_map_4sectors(): unaligned read [ 175.409019][ T7667] hpfs: hpfs_map_4sectors(): unaligned read [ 175.415094][ T7667] hpfs: filesystem error: unable to find root dir [ 175.721760][ T7665] loop1: detected capacity change from 0 to 32768 [ 175.742211][ T7665] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 175.777602][ T7665] XFS (loop1): Ending clean mount [ 175.785116][ T7669] loop2: detected capacity change from 0 to 32768 [ 175.806762][ T7669] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 175.847110][ T7669] XFS (loop2): Ending clean mount [ 175.865912][ T5784] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 175.879338][ T7669] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 175.994599][ T7669] syz.2.703 (7669) used greatest stack depth: 20232 bytes left [ 176.189583][ T5788] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 176.231698][ T7695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.708'. [ 176.241857][ T7695] netlink: 3 bytes leftover after parsing attributes in process `syz.3.708'. [ 176.924550][ T7712] loop3: detected capacity change from 0 to 2048 [ 176.961753][ T7712] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 177.003937][ T7712] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.245902][ T7716] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.702527][ T7730] loop3: detected capacity change from 0 to 128 [ 177.720355][ T7730] EXT4-fs: Ignoring removed nomblk_io_submit option [ 177.754590][ T7730] EXT4-fs (loop3): Test dummy encryption mode enabled [ 177.797335][ T7730] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 177.829358][ T7730] ext4 filesystem being mounted at /176/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 177.972895][ T5785] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.999539][ T7738] support for cryptoloop has been removed. Use dm-crypt instead. [ 178.108972][ T5872] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 178.126134][ T7746] can0: slcan on ttyS3. [ 178.189837][ T7746] can0 (unregistered): slcan off ttyS3. [ 178.198762][ T7745] loop2: detected capacity change from 0 to 4096 [ 178.219527][ T7745] __ntfs_error: 10 callbacks suppressed [ 178.219548][ T7745] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 178.243678][ T7745] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 178.265439][ T7745] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 178.283575][ T7745] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 178.297575][ T7745] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 178.323881][ T5872] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 178.337540][ T7745] ntfs: volume version 3.1. [ 178.349650][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.369153][ T5872] usb 1-1: Product: syz [ 178.378998][ T5872] usb 1-1: Manufacturer: syz [ 178.386354][ T7745] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 178.399566][ T5872] usb 1-1: SerialNumber: syz [ 178.408613][ T7745] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 178.423533][ T5872] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 178.432271][ T7752] loop3: detected capacity change from 0 to 256 [ 178.438320][ T7745] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 178.450573][ T7745] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 178.463949][ T7745] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 178.500888][ T5872] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 178.534394][ T7753] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 178.544570][ T7753] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 178.953070][ T7763] usb usb8: usbfs: process 7763 (syz.1.737) did not claim interface 6 before use [ 179.249177][ T7773] loop1: detected capacity change from 0 to 4096 [ 179.284272][ T7773] ntfs: volume version 3.1. [ 179.404031][ T7775] netlink: 'syz.3.744': attribute type 9 has an invalid length. [ 179.451728][ T27] usb 1-1: USB disconnect, device number 10 [ 179.464463][ T7775] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.744'. [ 179.771119][ T7780] loop3: detected capacity change from 0 to 4096 [ 179.780462][ T7780] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 179.835039][ T7780] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 179.845109][ T7780] ntfs3: loop3: Failed to load $Extend (-22). [ 179.856476][ T7780] ntfs3: loop3: Failed to initialize $Extend. [ 179.947175][ T7786] loop1: detected capacity change from 0 to 2048 [ 179.999836][ T7787] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 180.070931][ T7787] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 180.099458][ T5872] usb 1-1: Service connection timeout for: 257 [ 180.105927][ T5872] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 180.114890][ T7787] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 180.139410][ T7787] Remounting filesystem read-only [ 180.144817][ T5872] ath9k_htc: Failed to initialize the device [ 180.157571][ T7791] loop0: detected capacity change from 0 to 512 [ 180.164794][ T27] usb 1-1: ath9k_htc: USB layer deinitialized [ 180.172531][ T7791] EXT4-fs: Ignoring removed nobh option [ 180.221297][ T7791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.311248][ T5784] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 180.324969][ T5784] NILFS (loop1): discard dirty page: offset=0, ino=18 [ 180.339063][ T5784] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 180.352663][ T5784] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 180.367707][ T5784] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 180.378495][ T5784] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 180.400302][ T5784] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 180.412398][ T5784] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 180.433657][ T5784] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 180.448831][ T5784] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 180.458476][ T5784] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 180.473423][ T5784] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 180.482347][ T5784] NILFS (loop1): discard dirty block: blocknr=35, size=1024 [ 180.494855][ T5784] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 180.502885][ T5784] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 180.519412][ T5784] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 180.526839][ T5784] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 180.538467][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.565973][ T5784] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 180.573915][ T5784] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 180.588313][ T5784] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 180.597591][ T5784] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 180.610562][ T5784] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 180.617508][ T5784] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 180.625234][ T5784] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 180.642810][ T5784] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 180.657238][ T5784] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 180.673156][ T5784] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 180.680187][ T5784] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 180.688061][ T5784] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 180.699027][ T5872] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 180.717671][ T5784] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 180.721309][ T7798] netlink: 'syz.0.755': attribute type 9 has an invalid length. [ 180.729014][ T5784] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 180.746917][ T7798] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.755'. [ 180.752086][ T5784] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 180.770122][ T5784] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 180.777504][ T5784] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 180.790701][ T5784] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 180.798348][ T5784] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 180.824204][ T5784] NILFS (loop1): discard dirty page: offset=65536, ino=3 [ 180.835421][ T5784] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 180.849120][ T5784] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 180.866127][ T5784] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 180.881429][ T5784] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 180.901036][ T5784] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 180.915778][ T5872] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 180.917829][ T5784] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 180.926843][ T5872] usb 3-1: config 0 has no interface number 0 [ 180.954796][ T5784] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 180.965073][ T5872] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 180.974687][ T5784] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 180.990957][ T5872] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 180.994511][ T5784] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 181.009053][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.028961][ T5872] usb 3-1: Product: syz [ 181.033651][ T5872] usb 3-1: Manufacturer: syz [ 181.043499][ T5872] usb 3-1: SerialNumber: syz [ 181.062488][ T7800] loop0: detected capacity change from 0 to 4096 [ 181.073155][ T5872] usb 3-1: config 0 descriptor?? [ 181.108327][ T7800] ntfs: volume version 3.1. [ 181.404126][ T7812] loop3: detected capacity change from 0 to 47 [ 181.478566][ T7812] syz.3.761: attempt to access beyond end of device [ 181.478566][ T7812] loop3: rw=2049, sector=48, nr_sectors = 2 limit=47 [ 181.526676][ T7812] Buffer I/O error on dev loop3, logical block 24, lost async page write [ 181.563144][ T7813] syz.3.761: attempt to access beyond end of device [ 181.563144][ T7813] loop3: rw=2049, sector=50, nr_sectors = 2 limit=47 [ 181.609246][ T7813] Buffer I/O error on dev loop3, logical block 25, lost async page write [ 181.710153][ T5872] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.214/input/input26 [ 181.864633][ T7808] loop1: detected capacity change from 0 to 32768 [ 181.889750][ T7808] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 181.957273][ T5872] usb 3-1: USB disconnect, device number 14 [ 182.044111][ T5784] ocfs2: Unmounting device (7,1) on (node local) [ 182.055899][ T7820] loop3: detected capacity change from 0 to 512 [ 182.065352][ T7820] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 182.077884][ T7820] UDF-fs: Scanning with blocksize 512 failed [ 182.086223][ T7820] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 182.105252][ T7820] UDF-fs: Scanning with blocksize 1024 failed [ 182.113181][ T7820] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 182.124254][ T7820] UDF-fs: Scanning with blocksize 2048 failed [ 182.133474][ T7820] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 182.157096][ T7820] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.460061][ T7831] can0: slcan on ttyS3. [ 182.514451][ T7833] loop1: detected capacity change from 0 to 128 [ 182.541347][ T7831] can0 (unregistered): slcan off ttyS3. [ 182.554921][ T7833] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 182.673095][ T5784] sysv_free_block: trying to free block not in datazone [ 182.707847][ T5784] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 183.587720][ T7880] loop3: detected capacity change from 0 to 512 [ 183.610800][ T7880] EXT4-fs: Ignoring removed nobh option [ 183.646626][ T7880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.689023][ T1187] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 183.738271][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.869064][ T1187] usb 2-1: Using ep0 maxpacket: 32 [ 183.881826][ T1187] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 183.906750][ T1187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.936533][ T1187] usb 2-1: config 0 descriptor?? [ 183.936714][ T7897] loop3: detected capacity change from 0 to 128 [ 184.055236][ T7901] syz.3.797: attempt to access beyond end of device [ 184.055236][ T7901] loop3: rw=1, sector=145, nr_sectors = 592 limit=128 [ 184.153110][ T42] kworker/u4:2: attempt to access beyond end of device [ 184.153110][ T42] loop3: rw=1, sector=737, nr_sectors = 304 limit=128 [ 184.181546][ T7904] loop0: detected capacity change from 0 to 128 [ 184.183156][ T1187] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 184.209160][ T7904] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.210840][ T1187] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 184.232085][ T1187] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 184.241843][ T7904] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.259252][ T1187] usb 2-1: media controller created [ 184.326981][ T1187] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.350181][ T27] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 184.367654][ T5793] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.442786][ T1187] DVB: Unable to find symbol dib7000p_attach() [ 184.453871][ T1187] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 184.549379][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 184.558954][ T1187] rc_core: IR keymap rc-dib0700-rc5 not found [ 184.564643][ T7913] loop0: detected capacity change from 0 to 8192 [ 184.565668][ T1187] Registered IR keymap rc-empty [ 184.573269][ T27] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 184.588335][ T1187] dvb-usb: could not initialize remote control. [ 184.590262][ T27] usb 3-1: config 0 has no interface number 0 [ 184.595771][ T1187] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 184.604636][ T27] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 184.623786][ T27] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 184.624285][ T7913] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 184.628411][ T1187] usb 2-1: USB disconnect, device number 13 [ 184.635075][ T7913] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 184.666720][ T7913] REISERFS (device loop0): using ordered data mode [ 184.673900][ T7913] reiserfs: using flush barriers [ 184.680091][ T27] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 184.693294][ T27] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 184.702795][ T7913] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 184.719309][ T27] usb 3-1: Product: syz [ 184.723575][ T27] usb 3-1: SerialNumber: syz [ 184.731371][ T27] usb 3-1: config 0 descriptor?? [ 184.738020][ T7913] REISERFS (device loop0): checking transaction log (loop0) [ 184.747950][ T27] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 184.751686][ T1187] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 184.757114][ T27] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input28 [ 184.783380][ T7913] REISERFS (device loop0): Using r5 hash to sort names [ 184.799564][ T7913] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 185.025002][ C1] cm109_urb_ctl_callback: 35 callbacks suppressed [ 185.025026][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 185.025510][ T1187] usb 3-1: USB disconnect, device number 15 [ 185.031884][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 185.035304][ T7917] loop1: detected capacity change from 0 to 47 [ 185.062457][ T1187] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 185.084844][ T7917] syz.1.806: attempt to access beyond end of device [ 185.084844][ T7917] loop1: rw=2049, sector=48, nr_sectors = 2 limit=47 [ 185.107506][ T7917] Buffer I/O error on dev loop1, logical block 24, lost async page write [ 185.124365][ T7917] syz.1.806: attempt to access beyond end of device [ 185.124365][ T7917] loop1: rw=2049, sector=50, nr_sectors = 2 limit=47 [ 185.146833][ T7917] Buffer I/O error on dev loop1, logical block 25, lost async page write [ 185.899020][ T1187] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 186.118944][ T1187] usb 4-1: Using ep0 maxpacket: 16 [ 186.155871][ T1187] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.188327][ T1187] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 186.205302][ T1187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.216879][ T1187] usb 4-1: config 0 descriptor?? [ 186.457746][ T7950] loop2: detected capacity change from 0 to 32768 [ 186.475869][ T7950] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.821 (7950) [ 186.513203][ T7950] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 186.526503][ T7950] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 186.535893][ T7950] BTRFS info (device loop2): enabling auto defrag [ 186.544225][ T7950] BTRFS info (device loop2): doing ref verification [ 186.553645][ T7950] BTRFS info (device loop2): use no compression [ 186.560566][ T7950] BTRFS info (device loop2): force clearing of disk cache [ 186.578351][ T7950] BTRFS info (device loop2): setting nodatacow, compression disabled [ 186.606793][ T7950] BTRFS info (device loop2): disabling free space tree [ 186.654699][ T1187] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 186.845538][ T7950] BTRFS info (device loop2): enabling ssd optimizations [ 186.877881][ T7950] BTRFS info (device loop2): auto enabling async discard [ 186.922248][ T7950] BTRFS info (device loop2): rebuilding free space tree [ 186.984940][ T7950] BTRFS info (device loop2): disabling free space tree [ 187.005615][ T7950] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 187.026128][ T7950] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 187.075648][ T27] usb 4-1: USB disconnect, device number 12 [ 187.570007][ T7989] loop1: detected capacity change from 0 to 32768 [ 187.644691][ T7989] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 187.663506][ T5788] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 187.803343][ T7989] XFS (loop1): Ending clean mount [ 187.872334][ T7989] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 188.114413][ T5784] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 188.712763][ T8021] loop0: detected capacity change from 0 to 128 [ 188.812575][ T8025] loop1: detected capacity change from 0 to 128 [ 188.840455][ T8025] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 188.870348][ T8025] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.949190][ T5784] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.959637][ T8021] syz.0.842: attempt to access beyond end of device [ 188.959637][ T8021] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 189.727204][ T8031] loop3: detected capacity change from 0 to 40427 [ 189.740506][ T8031] F2FS-fs (loop3): Invalid log blocks per segment (83886089) [ 189.748397][ T8031] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 190.555432][ T5871] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 190.749070][ T5871] usb 3-1: Using ep0 maxpacket: 32 [ 190.764173][ T5871] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 190.776427][ T5871] usb 3-1: config 0 has no interface number 0 [ 190.789612][ T5871] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 190.802867][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.811445][ T5871] usb 3-1: Product: syz [ 190.816278][ T5871] usb 3-1: Manufacturer: syz [ 190.822000][ T5871] usb 3-1: SerialNumber: syz [ 190.833299][ T5871] usb 3-1: config 0 descriptor?? [ 190.938976][ T787] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 191.070230][ T5871] radio-si470x 3-1:0.35: this is not a si470x device. [ 191.080577][ T8047] loop2: detected capacity change from 0 to 64 [ 191.129093][ T787] usb 4-1: Using ep0 maxpacket: 32 [ 191.135530][ T5871] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 191.155482][ T8068] loop0: detected capacity change from 0 to 32768 [ 191.163909][ T787] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 191.165241][ T8068] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.863 (8068) [ 191.179199][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.203309][ T8068] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 191.214578][ T8068] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 191.220228][ T787] usb 4-1: config 0 descriptor?? [ 191.230340][ T8068] BTRFS info (device loop0): enabling auto defrag [ 191.237863][ T8068] BTRFS info (device loop0): doing ref verification [ 191.246328][ T8068] BTRFS info (device loop0): use no compression [ 191.253940][ T8068] BTRFS info (device loop0): force clearing of disk cache [ 191.263801][ T8068] BTRFS info (device loop0): setting nodatacow, compression disabled [ 191.273481][ T8068] BTRFS info (device loop0): disabling free space tree [ 191.329132][ T8068] BTRFS info (device loop0): enabling ssd optimizations [ 191.337476][ T8068] BTRFS info (device loop0): auto enabling async discard [ 191.350156][ T5871] radio-raremono 3-1:0.35: raremono_cmd_main failed (-71) [ 191.361521][ T8068] BTRFS info (device loop0): rebuilding free space tree [ 191.361904][ T5871] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 191.392856][ T8068] BTRFS info (device loop0): disabling free space tree [ 191.396235][ T5871] usb 3-1: USB disconnect, device number 16 [ 191.401338][ T8068] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 191.420283][ T5871] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 191.429102][ T8068] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 191.445820][ T787] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 191.476769][ T787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 191.506425][ T787] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 191.516104][ T787] usb 4-1: media controller created [ 191.537375][ T8085] program syz.1.864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.574319][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 191.652198][ T5793] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 191.657702][ T787] az6027: usb out operation failed. (-71) [ 191.673152][ T787] az6027: usb out operation failed. (-71) [ 191.680987][ T787] stb0899_attach: Driver disabled by Kconfig [ 191.687205][ T787] az6027: no front-end attached [ 191.687205][ T787] [ 191.697129][ T787] az6027: usb out operation failed. (-71) [ 191.704182][ T787] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 191.737132][ T787] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29 [ 191.825981][ T787] dvb-usb: schedule remote query interval to 400 msecs. [ 191.834246][ T787] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 191.885262][ T787] usb 4-1: USB disconnect, device number 13 [ 192.070563][ T787] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 192.157897][ T8091] loop2: detected capacity change from 0 to 4096 [ 192.179352][ T8094] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.198733][ T8091] NILFS error (device loop2): nilfs_readdir: zero-length directory entry [ 192.212840][ T8091] Remounting filesystem read-only [ 193.308862][ C0] sched: RT throttling activated [ 193.310337][ T5871] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 193.329557][ T8099] loop2: detected capacity change from 0 to 131072 [ 193.481044][ T8099] F2FS-fs (loop2): Test dummy encryption mode enabled [ 193.492876][ T8099] F2FS-fs (loop2): invalid crc value [ 193.500092][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 193.507766][ T5871] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 193.519747][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.532505][ T8099] F2FS-fs (loop2): Found nat_bits in checkpoint [ 193.581587][ T5871] usb 1-1: config 0 descriptor?? [ 193.593637][ T8099] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 193.612607][ T8099] F2FS-fs (loop2): access invalid blkaddr:1281 [ 193.619917][ T8099] CPU: 0 PID: 8099 Comm: syz.2.869 Not tainted syzkaller #0 [ 193.627393][ T8099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 193.637810][ T8099] Call Trace: [ 193.641136][ T8099] [ 193.644142][ T8099] dump_stack_lvl+0x16c/0x230 [ 193.648983][ T8099] ? show_regs_print_info+0x20/0x20 [ 193.654251][ T8099] ? f2fs_get_next_page_offset+0x690/0x690 [ 193.660915][ T8099] ? __asan_memset+0x22/0x40 [ 193.665599][ T8099] ? __lookup_extent_tree+0xba0/0xba0 [ 193.671062][ T8099] f2fs_is_valid_blkaddr+0xef8/0x1580 [ 193.676598][ T8099] f2fs_get_read_data_page+0x3a4/0x5c0 [ 193.682316][ T8099] ? f2fs_reserve_block+0x240/0x240 [ 193.687597][ T8099] ? __asan_memset+0x22/0x40 [ 193.692611][ T8099] f2fs_find_data_page+0x9f/0x3a0 [ 193.697984][ T8099] __f2fs_find_entry+0x64d/0xca0 [ 193.703300][ T8099] ? f2fs_find_target_dentry+0xbc0/0xbc0 [ 193.709023][ T8099] f2fs_lookup+0x220/0x7b0 [ 193.713777][ T8099] ? d_alloc+0x173/0x1b0 [ 193.718383][ T8099] ? f2fs_encrypted_symlink_getattr+0x50/0x50 [ 193.724619][ T8099] ? __rwlock_init+0x150/0x150 [ 193.729473][ T8099] ? _raw_spin_unlock+0x28/0x40 [ 193.734470][ T8099] ? d_alloc+0x173/0x1b0 [ 193.738965][ T8099] lookup_one_qstr_excl+0x112/0x250 [ 193.744329][ T8099] filename_create+0x222/0x460 [ 193.749443][ T8099] ? kern_path_create+0x50/0x50 [ 193.754366][ T8099] ? __virt_addr_valid+0x18c/0x540 [ 193.760236][ T8099] ? __virt_addr_valid+0x469/0x540 [ 193.766038][ T8099] do_mkdirat+0xa1/0x440 [ 193.770449][ T8099] ? vfs_mkdir+0x440/0x440 [ 193.775141][ T8099] __x64_sys_mkdirat+0x89/0xa0 [ 193.780170][ T8099] do_syscall_64+0x55/0xb0 [ 193.784864][ T8099] ? clear_bhb_loop+0x40/0x90 [ 193.789685][ T8099] ? clear_bhb_loop+0x40/0x90 [ 193.794438][ T8099] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.801120][ T8099] RIP: 0033:0x7fe6a338d617 [ 193.805807][ T8099] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.825655][ T8099] RSP: 002b:00007fe6a4237e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 193.834355][ T8099] RAX: ffffffffffffffda RBX: 00007fe6a4237ef0 RCX: 00007fe6a338d617 [ 193.842653][ T8099] RDX: 00000000000001ff RSI: 0000200000000040 RDI: 00000000ffffff9c [ 193.850778][ T8099] RBP: 00002000000002c0 R08: 00002000000000c0 R09: 0000000000000000 [ 193.859067][ T8099] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000200000000040 [ 193.867455][ T8099] R13: 00007fe6a4237eb0 R14: 0000000000000000 R15: 0000000000000000 [ 193.875603][ T8099] [ 193.905771][ T5871] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 193.916765][ T5871] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 193.929848][ T5871] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 193.937201][ T5871] usb 1-1: media controller created [ 193.979045][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.109018][ T5871] DVB: Unable to find symbol dib7000p_attach() [ 194.139077][ T5871] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 194.156981][ T8121] loop1: detected capacity change from 0 to 1024 [ 194.299155][ T5871] rc_core: IR keymap rc-dib0700-rc5 not found [ 194.307115][ T5871] Registered IR keymap rc-empty [ 194.322942][ T5871] dvb-usb: could not initialize remote control. [ 194.331090][ T8124] loop3: detected capacity change from 0 to 1024 [ 194.349139][ T5871] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 194.359673][ T8124] EXT4-fs: Ignoring removed oldalloc option [ 194.366303][ T8124] EXT4-fs: Ignoring removed bh option [ 194.378223][ T5871] usb 1-1: USB disconnect, device number 11 [ 194.388219][ T8124] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 194.428418][ T5871] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 194.470617][ T8124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.654633][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.709493][ T8129] loop1: detected capacity change from 0 to 4096 [ 194.742135][ T8129] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 194.894105][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.903843][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.369099][ T5853] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 195.457276][ T8151] program syz.0.889 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.570920][ T5853] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 195.580702][ T5853] usb 4-1: config 0 has no interface number 0 [ 195.590940][ T5853] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 195.605638][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.614265][ T5853] usb 4-1: Product: syz [ 195.618725][ T5853] usb 4-1: Manufacturer: syz [ 195.623715][ T5853] usb 4-1: SerialNumber: syz [ 195.634326][ T5853] usb 4-1: config 0 descriptor?? [ 195.642776][ T5853] hub 4-1:0.217: bad descriptor, ignoring hub [ 195.650854][ T5853] hub: probe of 4-1:0.217 failed with error -5 [ 195.728215][ T8158] loop0: detected capacity change from 0 to 4096 [ 195.737411][ T8158] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 195.849081][ T5872] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 195.864315][ T5853] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 195.890735][ T5853] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 195.911939][ T5853] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 195.932197][ T5853] usb 4-1: media controller created [ 195.976730][ T5853] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 196.049053][ T5872] usb 3-1: Using ep0 maxpacket: 32 [ 196.056687][ T5872] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 196.077181][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.114703][ T5872] usb 3-1: config 0 descriptor?? [ 196.120885][ T5853] DVB: Unable to find symbol dib7000p_attach() [ 196.134271][ T5853] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 196.249028][ T5853] rc_core: IR keymap rc-dib0700-rc5 not found [ 196.256020][ T5853] Registered IR keymap rc-empty [ 196.267613][ T5853] dvb-usb: could not initialize remote control. [ 196.276411][ T5853] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 196.292325][ T5853] usb 4-1: USB disconnect, device number 14 [ 196.341193][ T5853] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 196.360203][ T5872] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 196.382941][ T5872] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 196.417657][ T5872] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 196.438976][ T5872] usb 3-1: media controller created [ 196.451645][ T8178] program syz.1.901 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.470994][ T8176] loop0: detected capacity change from 0 to 1024 [ 196.489966][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 196.598653][ T5872] DVB: Unable to find symbol dib7000p_attach() [ 196.617047][ T5872] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 196.749847][ T5872] rc_core: IR keymap rc-dib0700-rc5 not found [ 196.759015][ T5872] Registered IR keymap rc-empty [ 196.764450][ T5872] dvb-usb: could not initialize remote control. [ 196.777269][ T5872] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 196.808374][ T5872] usb 3-1: USB disconnect, device number 17 [ 196.912666][ T5872] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 197.076135][ T8197] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 197.190972][ T8204] loop1: detected capacity change from 0 to 1024 [ 197.274616][ T142] hfsplus: b-tree write err: -5, ino 4 [ 197.406021][ T8212] netlink: 16 bytes leftover after parsing attributes in process `syz.3.916'. [ 197.518974][ T5871] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 197.553879][ T8218] netlink: 16 bytes leftover after parsing attributes in process `syz.1.918'. [ 197.708931][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 197.721634][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.753647][ T5871] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 197.785754][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.810857][ T5871] usb 1-1: config 0 descriptor?? [ 198.195542][ T8229] loop3: detected capacity change from 0 to 32768 [ 198.204673][ T8229] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.923 (8229) [ 198.224472][ T8229] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 198.235075][ T8229] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 198.244236][ T8229] BTRFS info (device loop3): using free space tree [ 198.245697][ T5871] mcp2221 0003:04D8:00DD.000A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 198.288189][ T8229] BTRFS info (device loop3): enabling ssd optimizations [ 198.295523][ T8229] BTRFS info (device loop3): auto enabling async discard [ 198.415308][ T5785] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 198.519947][ T8250] loop1: detected capacity change from 0 to 2048 [ 198.534519][ T8250] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 198.589485][ T8250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.721345][ T5872] usb 1-1: USB disconnect, device number 12 [ 198.752856][ T8250] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #12: block 9: comm syz.1.926: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 198.808605][ T8250] EXT4-fs (loop1): Remounting filesystem read-only [ 198.929467][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.039490][ T5853] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 199.176507][ T8265] loop1: detected capacity change from 0 to 256 [ 199.186421][ T8265] MINIX-fs: mounting file system with errors, running fsck is recommended [ 199.205121][ T8265] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 199.217480][ T8265] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 199.229094][ T5853] usb 4-1: Using ep0 maxpacket: 32 [ 199.245069][ T5853] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 199.256717][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.268798][ T5853] usb 4-1: config 0 descriptor?? [ 199.505578][ T5853] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 199.520058][ T5853] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 199.548652][ T5853] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 199.558286][ T5853] usb 4-1: media controller created [ 199.584797][ T5853] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 199.689580][ T5853] DVB: Unable to find symbol dib7000p_attach() [ 199.695934][ T5853] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 199.724588][ T8269] loop0: detected capacity change from 0 to 32768 [ 199.734152][ T8269] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.934 (8269) [ 199.761435][ T8269] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 199.773761][ T8269] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 199.784218][ T8269] BTRFS info (device loop0): using free space tree [ 199.798943][ T5853] rc_core: IR keymap rc-dib0700-rc5 not found [ 199.805435][ T5853] Registered IR keymap rc-empty [ 199.811127][ T5853] dvb-usb: could not initialize remote control. [ 199.817739][ T5853] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 199.825316][ T8269] BTRFS info (device loop0): enabling ssd optimizations [ 199.831898][ T5853] usb 4-1: USB disconnect, device number 15 [ 199.839486][ T8269] BTRFS info (device loop0): auto enabling async discard [ 199.879540][ T5853] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 199.978054][ T5793] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 200.246283][ T8295] misc userio: Begin command sent, but we're already running [ 200.420699][ T8298] program syz.1.940 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.746356][ T8312] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 200.789332][ T5792] Bluetooth: hci1: Dropping invalid advertising data [ 200.796989][ T5792] Bluetooth: hci1: Malformed LE Event: 0x02 [ 200.846404][ T8313] loop1: detected capacity change from 0 to 4096 [ 200.884996][ T8313] __ntfs_error: 64 callbacks suppressed [ 200.885014][ T8313] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 200.900104][ T8313] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 200.913580][ T8313] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 200.927296][ T8313] ntfs: volume version 3.1. [ 200.992090][ T8320] loop2: detected capacity change from 0 to 1024 [ 201.148072][ T1313] hfsplus: b-tree write err: -5, ino 4 [ 201.200548][ T5784] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 201.549077][ T5853] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 201.558260][ T8325] loop3: detected capacity change from 0 to 32768 [ 201.566338][ T8325] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.952 (8325) [ 201.582887][ T8325] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 201.594200][ T8325] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 201.605026][ T8325] BTRFS info (device loop3): using free space tree [ 201.638026][ T8325] BTRFS info (device loop3): enabling ssd optimizations [ 201.645529][ T8325] BTRFS info (device loop3): auto enabling async discard [ 201.731477][ T5785] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 201.738823][ T5872] kernel write not supported for file /input/mouse0 (pid: 5872 comm: kworker/1:6) [ 201.753976][ T5853] usb 3-1: Using ep0 maxpacket: 32 [ 201.764468][ T5853] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 201.774112][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.785277][ T5853] usb 3-1: config 0 descriptor?? [ 202.013409][ T5853] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 202.040436][ T5853] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 202.069690][ T5853] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 202.099287][ T5853] usb 3-1: media controller created [ 202.155555][ T5853] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 202.339239][ T5853] DVB: Unable to find symbol dib7000p_attach() [ 202.345980][ T5853] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 202.539713][ T5853] rc_core: IR keymap rc-dib0700-rc5 not found [ 202.546404][ T5853] Registered IR keymap rc-empty [ 202.556778][ T5853] dvb-usb: could not initialize remote control. [ 202.569763][ T5853] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 202.585714][ T5853] usb 3-1: USB disconnect, device number 18 [ 202.672479][ T5853] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 203.138805][ T8360] loop0: detected capacity change from 0 to 40427 [ 203.151491][ T8360] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 203.159817][ T8360] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 203.180118][ T8360] F2FS-fs (loop0): invalid crc value [ 203.221929][ T8360] F2FS-fs (loop0): Found nat_bits in checkpoint [ 203.258311][ T8383] loop3: detected capacity change from 0 to 2048 [ 203.274786][ T8383] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 203.305982][ T8383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.317056][ T8386] delete_channel: no stack [ 203.345781][ T8360] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 203.361029][ T8360] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 203.369488][ T8383] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 9: comm syz.3.965: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 203.427536][ T8383] EXT4-fs (loop3): Remounting filesystem read-only [ 203.438983][ T5776] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 203.533327][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.659192][ T5776] usb 3-1: config 0 has an invalid interface number: 217 but max is 0 [ 203.686325][ T5776] usb 3-1: config 0 has no interface number 0 [ 203.695914][ T8396] loop3: detected capacity change from 0 to 256 [ 203.709600][ T5776] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 203.711026][ T8396] MINIX-fs: mounting file system with errors, running fsck is recommended [ 203.733507][ T5776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.747758][ T8396] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 203.749186][ T5776] usb 3-1: Product: syz [ 203.765623][ T8396] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 203.774757][ T5776] usb 3-1: Manufacturer: syz [ 203.774780][ T5776] usb 3-1: SerialNumber: syz [ 203.799911][ T5776] usb 3-1: config 0 descriptor?? [ 203.821245][ T5776] hub 3-1:0.217: bad descriptor, ignoring hub [ 203.827516][ T5776] hub: probe of 3-1:0.217 failed with error -5 [ 204.069993][ T5776] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 204.092138][ T5776] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 204.109641][ T5776] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 204.118193][ T5776] usb 3-1: media controller created [ 204.136908][ T8404] loop0: detected capacity change from 0 to 1024 [ 204.145893][ T8404] EXT4-fs: Ignoring removed oldalloc option [ 204.151062][ T8406] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.157403][ T8404] EXT4-fs: Ignoring removed bh option [ 204.178388][ T5776] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 204.186691][ T8404] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 204.223387][ T8404] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.355006][ T5776] DVB: Unable to find symbol dib7000p_attach() [ 204.388944][ T5776] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 204.450472][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.568993][ T5776] rc_core: IR keymap rc-dib0700-rc5 not found [ 204.582493][ T5776] Registered IR keymap rc-empty [ 204.587740][ T5776] dvb-usb: could not initialize remote control. [ 204.597725][ T5776] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 204.626005][ T5776] usb 3-1: USB disconnect, device number 19 [ 204.700150][ T5776] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 204.825414][ T8422] loop0: detected capacity change from 0 to 2048 [ 204.852651][ T8422] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 204.882723][ T8422] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.932447][ T8422] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #12: block 9: comm syz.0.979: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 205.005889][ T8422] EXT4-fs (loop0): Remounting filesystem read-only [ 205.096752][ T8429] loop2: detected capacity change from 0 to 64 [ 205.121753][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.269165][ T27] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 205.337380][ T8437] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 205.350278][ T8437] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 205.357288][ T8437] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 205.364218][ T8437] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 205.371284][ T8437] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 205.378532][ T8437] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 205.385603][ T8437] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 205.392944][ T8437] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 205.400048][ T8437] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 205.545173][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 205.594280][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.605612][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 205.617480][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 205.638758][ T27] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 205.661649][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.718336][ T27] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 205.738972][ T27] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 205.747281][ T27] usb 4-1: Manufacturer: syz [ 205.765670][ T27] usb 4-1: config 0 descriptor?? [ 206.116221][ T27] rc_core: IR keymap rc-hauppauge not found [ 206.122611][ T27] Registered IR keymap rc-empty [ 206.128480][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 206.162772][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 206.377805][ T27] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 206.415525][ T27] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input37 [ 206.488570][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 206.534347][ C1] mceusb 4-1:0.0: long-range (0x8d) receiver active [ 206.543205][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 206.599068][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 206.645192][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 206.699871][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 206.739073][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 206.761045][ T5853] kernel write not supported for file /input/mouse0 (pid: 5853 comm: kworker/1:5) [ 206.779135][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 206.819133][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 206.869067][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 206.909094][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 206.944607][ T27] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 206.957397][ T27] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x8d active) [ 206.973858][ T27] usb 4-1: USB disconnect, device number 16 [ 207.204554][ T8467] loop2: detected capacity change from 0 to 1024 [ 207.215442][ T8467] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 207.228388][ T8467] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 207.241942][ T8467] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 207.275920][ T8467] EXT4-fs error (device loop2): ext4_get_journal_inode:5807: inode #5: comm syz.2.998: unexpected bad inode w/o EXT4_IGET_BAD [ 207.329025][ T8467] EXT4-fs (loop2): no journal found [ 207.334980][ T8467] EXT4-fs (loop2): can't get journal size [ 207.337045][ T8469] loop0: detected capacity change from 0 to 4096 [ 207.362429][ T8467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 207.394839][ T8469] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 207.427792][ T8469] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 207.447081][ T8469] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 207.484009][ T8467] EXT4-fs error (device loop2): __ext4_remount:6743: comm syz.2.998: Abort forced by user [ 207.505843][ T8467] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 207.516079][ T8469] ntfs: volume version 3.1. [ 207.567536][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.685428][ T5793] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 207.754389][ T8483] loop0: detected capacity change from 0 to 64 [ 207.763495][ T8483] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 207.958981][ T5776] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 208.163290][ T5776] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 208.177401][ T5776] usb 2-1: config 0 has no interface number 0 [ 208.193625][ T5776] usb 2-1: config 0 interface 132 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 208.216498][ T5776] usb 2-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 208.243894][ T5776] usb 2-1: New USB device found, idVendor=1b3d, idProduct=01fe, bcdDevice=d5.c8 [ 208.254934][ T5776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.272467][ T5776] usb 2-1: Product: syz [ 208.281392][ T5776] usb 2-1: Manufacturer: syz [ 208.291819][ T5776] usb 2-1: SerialNumber: syz [ 208.305618][ T5776] usb 2-1: config 0 descriptor?? [ 208.318074][ T8481] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 208.338002][ T8481] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 208.360332][ T5776] ftdi_sio 2-1:0.132: FTDI USB Serial Device converter detected [ 208.390052][ T5776] ftdi_sio ttyUSB0: unknown device type: 0xd5c8 [ 208.632710][ T5776] usb 2-1: USB disconnect, device number 14 [ 208.642190][ T5776] ftdi_sio 2-1:0.132: device disconnected [ 209.149059][ T5776] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 209.349084][ T5776] usb 1-1: Using ep0 maxpacket: 32 [ 209.366679][ T5776] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 209.388939][ T5776] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 209.418924][ T5776] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 209.439028][ T5776] usb 1-1: config 1 has no interface number 0 [ 209.446001][ T5776] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.478894][ T5776] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 209.518935][ T5776] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 209.544638][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.583659][ T5776] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 209.667254][ T8525] loop2: detected capacity change from 0 to 32768 [ 209.691540][ T8525] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1024 (8525) [ 209.714918][ T8525] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 209.730169][ T8525] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 209.740698][ T8525] BTRFS info (device loop2): using free space tree [ 209.821039][ T5776] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 209.848528][ T8527] loop3: detected capacity change from 0 to 40427 [ 209.859264][ T8525] BTRFS info (device loop2): enabling ssd optimizations [ 209.866304][ T8525] BTRFS info (device loop2): auto enabling async discard [ 209.875769][ T8550] netlink: 'syz.1.1030': attribute type 3 has an invalid length. [ 209.881290][ T8527] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 209.896512][ T8527] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 209.931021][ T8527] F2FS-fs (loop3): Found nat_bits in checkpoint [ 210.017583][ T5792] Bluetooth: hci3: command tx timeout [ 210.041294][ T8527] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 210.055940][ T8527] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 210.086967][ T5788] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 210.142039][ T28] audit: type=1804 audit(1759256903.818:197): pid=8527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1026" name="/newroot/248/file2/file0" dev="loop3" ino=10 res=1 errno=0 [ 210.329724][ T5776] usb 1-1: USB disconnect, device number 13 [ 210.374800][ T5776] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 210.379502][ T5785] syz-executor: attempt to access beyond end of device [ 210.379502][ T5785] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 210.399193][ T5785] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 211.226610][ T8573] loop1: detected capacity change from 0 to 2048 [ 211.269049][ T8573] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 211.319138][ T8573] NILFS (loop1): mounting unchecked fs [ 211.379016][ T8573] NILFS (loop1): recovery complete [ 211.426744][ T8580] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.018083][ T8585] loop3: detected capacity change from 0 to 32768 [ 212.089514][ T5796] Bluetooth: hci3: command tx timeout [ 212.150735][ T8589] loop1: detected capacity change from 0 to 32768 [ 212.159282][ T8589] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1045 (8589) [ 212.176137][ T8589] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 212.188773][ T8589] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 212.198780][ T8589] BTRFS info (device loop1): using free space tree [ 212.254640][ T8589] BTRFS info (device loop1): enabling ssd optimizations [ 212.272724][ T8589] BTRFS info (device loop1): auto enabling async discard [ 212.348392][ T5792] Bluetooth: hci2: command 0x0406 tx timeout [ 212.349249][ T5796] Bluetooth: hci1: command 0x0406 tx timeout [ 212.712189][ T5784] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 213.755384][ T8656] loop1: detected capacity change from 0 to 1024 [ 213.770682][ T8656] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 213.792236][ T8656] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 213.817617][ T8656] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 213.854887][ T8656] EXT4-fs error (device loop1): ext4_get_journal_inode:5807: inode #5: comm syz.1.1071: unexpected bad inode w/o EXT4_IGET_BAD [ 213.883766][ T8656] EXT4-fs (loop1): no journal found [ 213.898182][ T8656] EXT4-fs (loop1): can't get journal size [ 213.912984][ T8656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 214.020593][ T8656] EXT4-fs error (device loop1): __ext4_remount:6743: comm syz.1.1071: Abort forced by user [ 214.055314][ T8656] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 214.062637][ T8650] loop3: detected capacity change from 0 to 32768 [ 214.095093][ T8650] JBD2: Ignoring recovery information on journal [ 214.103782][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.164311][ T8650] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 214.173925][ T5801] Bluetooth: hci3: command tx timeout [ 214.322943][ T5785] ocfs2: Unmounting device (7,3) on (node local) [ 214.379268][ T8674] loop6: detected capacity change from 0 to 524288000 [ 215.072371][ T8694] loop1: detected capacity change from 0 to 256 [ 215.089190][ T5871] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 215.115815][ T8676] loop0: detected capacity change from 0 to 32768 [ 215.126960][ T8694] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 215.140966][ T8676] XFS: noikeep mount option is deprecated. [ 215.149482][ T8694] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 215.165836][ T8676] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 215.289006][ T5871] usb 4-1: Using ep0 maxpacket: 8 [ 215.303528][ T5871] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 215.329119][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.348787][ T5871] usb 4-1: Product: syz [ 215.353183][ T5871] usb 4-1: Manufacturer: syz [ 215.358236][ T8676] XFS (loop0): Ending clean mount [ 215.364250][ T5871] usb 4-1: SerialNumber: syz [ 215.403592][ T8690] loop2: detected capacity change from 0 to 32768 [ 215.405133][ T8676] XFS (loop0): Quotacheck needed: Please wait. [ 215.425081][ T5871] usb 4-1: config 0 descriptor?? [ 215.430728][ T8690] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.1084 (8690) [ 215.462450][ T8690] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 215.475827][ T8690] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 215.503485][ T8690] BTRFS info (device loop2): force zlib compression, level 3 [ 215.520345][ T8690] BTRFS info (device loop2): force clearing of disk cache [ 215.528541][ T8676] XFS (loop0): Quotacheck: Done. [ 215.549042][ T8690] BTRFS info (device loop2): setting nodatasum [ 215.555470][ T8690] BTRFS info (device loop2): allowing degraded mounts [ 215.556221][ T8704] loop1: detected capacity change from 0 to 8192 [ 215.572130][ T8690] BTRFS info (device loop2): enabling disk space caching [ 215.583389][ T8690] BTRFS info (device loop2): disk space caching is enabled [ 215.593510][ T8704] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 215.607812][ T8704] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 215.618592][ T8704] REISERFS (device loop1): using journaled data mode [ 215.629801][ T8704] reiserfs: using flush barriers [ 215.644828][ T8704] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 215.658743][ T5871] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 215.677651][ T8704] REISERFS (device loop1): checking transaction log (loop1) [ 215.691251][ T8704] REISERFS (device loop1): Using r5 hash to sort names [ 215.693547][ T5793] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 215.701058][ T8704] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 215.724863][ T8704] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 215.785826][ T8690] BTRFS info (device loop2): auto enabling async discard [ 215.808712][ T8690] BTRFS info (device loop2): rebuilding free space tree [ 215.903618][ T8690] BTRFS info (device loop2): disabling free space tree [ 215.913141][ T8690] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 215.929281][ T8690] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 216.065291][ T5871] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 216.109777][ T5871] usb 4-1: USB disconnect, device number 17 [ 216.123070][ T8690] BTRFS info (device loop2): balance: start -sdrange=128..234881024,vrange=18446744073709551614..18446744073709551613,limit=9223372036854775807,limit=4294967295..2147483647 [ 216.151092][ T8690] BTRFS info (device loop2): balance: ended with status: 0 [ 216.228255][ T5788] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 216.331778][ T8727] loop0: detected capacity change from 0 to 2048 [ 216.365396][ T8729] loop1: detected capacity change from 0 to 1024 [ 216.369916][ T8727] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 216.385073][ T8727] NILFS (loop0): mounting unchecked fs [ 216.412398][ T8727] NILFS (loop0): recovery complete [ 216.434222][ T8729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.463400][ T8733] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 216.541198][ T8729] EXT4-fs error (device loop1): __ext4_new_inode:1075: comm syz.1.1091: reserved inode found cleared - inode=1 [ 216.664379][ T8736] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 216.794527][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.455570][ T8738] loop2: detected capacity change from 0 to 40427 [ 217.475408][ T8738] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 217.490865][ T8738] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 217.530736][ T8738] F2FS-fs (loop2): Found nat_bits in checkpoint [ 217.643537][ T8738] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 217.655284][ T8738] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 217.787181][ T28] audit: type=1804 audit(1759256911.448:198): pid=8738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1092" name="/newroot/259/file2/file0" dev="loop2" ino=10 res=1 errno=0 [ 217.869036][ T5788] syz-executor: attempt to access beyond end of device [ 217.869036][ T5788] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 217.912926][ T5788] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 217.930884][ T8752] loop1: detected capacity change from 0 to 32768 [ 218.205903][ T8762] loop0: detected capacity change from 0 to 32768 [ 218.239281][ T8762] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1102 (8762) [ 218.281750][ T8762] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 218.302364][ T8762] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 218.326925][ T8762] BTRFS info (device loop0): using free space tree [ 218.362624][ T8771] loop3: detected capacity change from 0 to 2048 [ 218.378208][ T8771] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 218.388313][ T8771] NILFS (loop3): mounting unchecked fs [ 218.445462][ T8771] NILFS (loop3): recovery complete [ 218.456881][ T8762] BTRFS info (device loop0): enabling ssd optimizations [ 218.465294][ T8762] BTRFS info (device loop0): auto enabling async discard [ 218.474481][ T8787] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 218.812830][ T5793] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 218.816925][ T8794] loop3: detected capacity change from 0 to 1024 [ 218.830995][ T8794] EXT4-fs: Ignoring removed bh option [ 218.863044][ T8794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.943451][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.349074][ T5853] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 219.538987][ T5853] usb 2-1: Using ep0 maxpacket: 8 [ 219.550247][ T5853] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.572126][ T5853] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 219.602374][ T5853] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.622289][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.633027][ T5853] usb 2-1: Product: syz [ 219.643766][ T5853] usb 2-1: Manufacturer: syz [ 219.648457][ T5853] usb 2-1: SerialNumber: syz [ 219.873326][ T8820] loop3: detected capacity change from 0 to 1024 [ 219.892305][ T5853] cdc_ncm 2-1:1.0: bind() failure [ 219.920198][ T5853] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 219.935337][ T5853] cdc_ncm 2-1:1.1: bind() failure [ 219.969401][ T5853] usb 2-1: USB disconnect, device number 15 [ 219.999495][ T28] audit: type=1800 audit(1759256913.678:199): pid=8820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1119" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 220.106752][ T142] hfsplus: b-tree write err: -5, ino 4 [ 220.279931][ T8824] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1121'. [ 220.478568][ T8818] loop2: detected capacity change from 0 to 32768 [ 220.586738][ T8818] JBD2: Ignoring recovery information on journal [ 220.612374][ T8833] sctp: [Deprecated]: syz.0.1125 (pid 8833) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.612374][ T8833] Use struct sctp_sack_info instead [ 220.718977][ T8818] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 220.922929][ T8842] loop1: detected capacity change from 0 to 1024 [ 221.011004][ T28] audit: type=1800 audit(1759256914.678:200): pid=8842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1129" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 221.082887][ T5788] ocfs2: Unmounting device (7,2) on (node local) [ 221.150599][ T77] hfsplus: b-tree write err: -5, ino 4 [ 221.279283][ T8845] loop1: detected capacity change from 0 to 64 [ 221.355845][ T8845] hfs: request for non-existent node 1280 in B*Tree [ 221.374381][ T8845] hfs: request for non-existent node 1280 in B*Tree [ 221.442174][ T77] hfs: request for non-existent node 1280 in B*Tree [ 221.458995][ T77] hfs: request for non-existent node 1280 in B*Tree [ 221.471581][ T8849] loop2: detected capacity change from 0 to 1024 [ 221.534850][ T8849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.637419][ T8840] loop0: detected capacity change from 0 to 32768 [ 221.649054][ T8840] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1128 (8840) [ 221.663712][ T8849] EXT4-fs error (device loop2): __ext4_new_inode:1075: comm syz.2.1130: reserved inode found cleared - inode=1 [ 221.692950][ T8840] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 221.707712][ T8840] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 221.716766][ T8840] BTRFS info (device loop0): turning on async discard [ 221.726879][ T8840] BTRFS info (device loop0): using free space tree [ 221.790302][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.869933][ T8840] BTRFS info (device loop0): enabling ssd optimizations [ 221.942509][ T8840] BTRFS error (device loop0): balance: invalid convert metadata profile raid1c4 [ 222.072095][ T5793] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 222.073222][ T8887] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1149'. [ 222.203775][ T8885] loop3: detected capacity change from 0 to 8192 [ 222.242037][ T8885] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 222.289858][ T8885] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 222.300042][ T8885] REISERFS (device loop3): using journaled data mode [ 222.307203][ T8885] reiserfs: using flush barriers [ 222.379414][ T8885] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 222.405108][ T8885] REISERFS (device loop3): checking transaction log (loop3) [ 222.441390][ T8885] REISERFS (device loop3): Using r5 hash to sort names [ 222.461531][ T8885] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 222.497437][ T8885] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 222.656029][ T8894] loop0: detected capacity change from 0 to 1024 [ 222.745155][ T28] audit: type=1800 audit(1759256916.418:201): pid=8894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1141" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 222.889448][ T1313] hfsplus: b-tree write err: -5, ino 4 [ 223.074025][ T8883] loop2: detected capacity change from 0 to 40427 [ 223.096961][ T8883] F2FS-fs (loop2): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 223.119102][ T8883] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 223.151341][ T8883] F2FS-fs (loop2): invalid crc value [ 223.177812][ T8883] F2FS-fs (loop2): Found nat_bits in checkpoint [ 223.223686][ T8892] loop1: detected capacity change from 0 to 32768 [ 223.301683][ T8892] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 223.322717][ T8883] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 223.337847][ T8883] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 223.582196][ T8914] loop3: detected capacity change from 0 to 256 [ 223.674122][ T5788] syz-executor: attempt to access beyond end of device [ 223.674122][ T5788] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 223.692503][ T5788] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 223.727982][ T8914] FAT-fs (loop3): Directory bread(block 64) failed [ 223.728757][ T8912] loop0: detected capacity change from 0 to 32768 [ 223.744189][ T5784] ocfs2: Unmounting device (7,1) on (node local) [ 223.746293][ T8914] FAT-fs (loop3): Directory bread(block 65) failed [ 223.757924][ T8914] FAT-fs (loop3): Directory bread(block 66) failed [ 223.770024][ T8914] FAT-fs (loop3): Directory bread(block 67) failed [ 223.774145][ T8912] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.1152 (8912) [ 223.776755][ T8914] FAT-fs (loop3): Directory bread(block 68) failed [ 223.818009][ T8912] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 223.818061][ T8914] FAT-fs (loop3): Directory bread(block 69) failed [ 223.850373][ T8912] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 223.858634][ T8914] FAT-fs (loop3): Directory bread(block 70) failed [ 223.869137][ T8914] FAT-fs (loop3): Directory bread(block 71) failed [ 223.869434][ T8912] BTRFS info (device loop0): force zlib compression, level 3 [ 223.875901][ T8914] FAT-fs (loop3): Directory bread(block 72) failed [ 223.904090][ T8912] BTRFS info (device loop0): force clearing of disk cache [ 223.909053][ T8914] FAT-fs (loop3): Directory bread(block 73) failed [ 223.924507][ T8912] BTRFS info (device loop0): setting nodatasum [ 223.939120][ T8912] BTRFS info (device loop0): allowing degraded mounts [ 223.956296][ T8912] BTRFS info (device loop0): enabling disk space caching [ 223.966452][ T8912] BTRFS info (device loop0): disk space caching is enabled [ 224.110497][ T8912] BTRFS info (device loop0): auto enabling async discard [ 224.131405][ T8912] BTRFS info (device loop0): rebuilding free space tree [ 224.187881][ T8912] BTRFS info (device loop0): disabling free space tree [ 224.219049][ T8912] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 224.255890][ T8912] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 224.314533][ T8937] tap0: tun_chr_ioctl cmd 2147767521 [ 224.427168][ T8912] BTRFS info (device loop0): balance: start -sdrange=128..234881024,vrange=18446744073709551614..18446744073709551613,limit=9223372036854775807,limit=4294967295..2147483647 [ 224.454557][ T42] tipc: Subscription rejected, illegal request [ 224.469595][ T8912] BTRFS info (device loop0): balance: ended with status: 0 [ 224.681310][ T5793] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 224.708672][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1163'. [ 225.246121][ T8967] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1170'. [ 225.304287][ T8964] loop0: detected capacity change from 0 to 8192 [ 225.321575][ T8964] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 225.336069][ T8964] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 225.346694][ T8964] REISERFS (device loop0): using journaled data mode [ 225.353703][ T8964] reiserfs: using flush barriers [ 225.373170][ T8964] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 225.390498][ T8964] REISERFS (device loop0): checking transaction log (loop0) [ 225.401331][ T8964] REISERFS (device loop0): Using r5 hash to sort names [ 225.408777][ T8964] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 225.423298][ T8964] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 226.189493][ T8975] loop1: detected capacity change from 0 to 32768 [ 226.211339][ T8975] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1173 (8975) [ 226.234899][ T8975] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 226.265950][ T8975] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 226.289074][ T8975] BTRFS info (device loop1): force zlib compression, level 3 [ 226.309006][ T8975] BTRFS info (device loop1): force clearing of disk cache [ 226.316248][ T8975] BTRFS info (device loop1): setting nodatasum [ 226.354419][ T8975] BTRFS info (device loop1): allowing degraded mounts [ 226.369135][ T8975] BTRFS info (device loop1): enabling disk space caching [ 226.386737][ T8975] BTRFS info (device loop1): disk space caching is enabled [ 226.528975][ T8975] BTRFS info (device loop1): auto enabling async discard [ 226.537773][ T8975] BTRFS info (device loop1): rebuilding free space tree [ 226.568763][ T8975] BTRFS info (device loop1): disabling free space tree [ 226.576564][ T8975] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 226.587249][ T8975] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 226.603713][ T9007] loop0: detected capacity change from 0 to 128 [ 226.679161][ T8975] BTRFS info (device loop1): balance: start -sdrange=128..234881024,vrange=18446744073709551614..18446744073709551613,limit=9223372036854775807,limit=4294967295..2147483647 [ 226.716851][ T8975] BTRFS info (device loop1): balance: ended with status: 0 [ 226.743190][ T8984] loop3: detected capacity change from 0 to 32768 [ 226.767234][ T8984] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1175 (8984) [ 226.821862][ T8984] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 226.856058][ T8984] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 226.876405][ T9012] loop0: detected capacity change from 0 to 256 [ 226.888968][ T8984] BTRFS info (device loop3): using free space tree [ 226.927946][ T5784] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 226.937426][ T9012] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 227.071896][ T8984] BTRFS info (device loop3): enabling ssd optimizations [ 227.100142][ T8984] BTRFS info (device loop3): auto enabling async discard [ 227.268375][ T9010] loop2: detected capacity change from 0 to 32768 [ 227.293352][ T9010] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop2 scanned by syz.2.1180 (9010) [ 227.337299][ T9010] BTRFS info (device loop2): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 227.353704][ T9010] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 227.364455][ T9010] BTRFS info (device loop2): using free space tree [ 227.470177][ T5785] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 227.579455][ T9010] BTRFS info (device loop2): enabling ssd optimizations [ 227.586730][ T9010] BTRFS info (device loop2): auto enabling async discard [ 227.814463][ T5788] BTRFS info (device loop2): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 228.103104][ T9056] sctp: [Deprecated]: syz.3.1186 (pid 9056) Use of struct sctp_assoc_value in delayed_ack socket option. [ 228.103104][ T9056] Use struct sctp_sack_info instead [ 228.369078][ T9058] netlink: 884 bytes leftover after parsing attributes in process `syz.3.1189'. [ 228.745799][ T1131] tipc: Subscription rejected, illegal request [ 228.760141][ T9052] loop1: detected capacity change from 0 to 32768 [ 228.794650][ T9052] JBD2: Ignoring recovery information on journal [ 228.901656][ T9054] loop0: detected capacity change from 0 to 40427 [ 228.910961][ T9054] F2FS-fs (loop0): Mismatch start address, segment0(0) cp_blkaddr(512) [ 228.925625][ T9052] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 228.949141][ T9054] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 228.999111][ T9054] F2FS-fs (loop0): heap/no_heap options were deprecated [ 229.020602][ T9054] F2FS-fs (loop0): invalid crc value [ 229.052233][ T9054] F2FS-fs (loop0): Found nat_bits in checkpoint [ 229.128154][ T9060] loop2: detected capacity change from 0 to 32768 [ 229.164292][ T9054] F2FS-fs (loop0): Start checkpoint disabled! [ 229.197199][ T9054] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 229.212913][ T9054] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 229.235147][ T5784] ocfs2: Unmounting device (7,1) on (node local) [ 229.590718][ T1131] kworker/u4:6: attempt to access beyond end of device [ 229.590718][ T1131] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 229.628304][ T1131] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 229.642486][ T1131] kworker/u4:6: attempt to access beyond end of device [ 229.642486][ T1131] loop0: rw=2049, sector=40992, nr_sectors = 8 limit=40427 [ 229.664992][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1195'. [ 229.677084][ T1131] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 229.771638][ T9078] misc userio: Can't change port type on an already running userio instance [ 229.891980][ T9072] loop3: detected capacity change from 0 to 32768 [ 229.915754][ T9072] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1193 (9072) [ 229.933311][ T9072] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 229.968238][ T9072] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 229.999352][ T9072] BTRFS info (device loop3): force zlib compression, level 3 [ 230.024762][ T9072] BTRFS info (device loop3): force clearing of disk cache [ 230.062521][ T9072] BTRFS info (device loop3): setting nodatasum [ 230.098246][ T9072] BTRFS info (device loop3): allowing degraded mounts [ 230.117556][ T9072] BTRFS info (device loop3): enabling disk space caching [ 230.134079][ T9072] BTRFS info (device loop3): disk space caching is enabled [ 230.148578][ T9086] loop1: detected capacity change from 0 to 512 [ 230.239431][ T9072] BTRFS info (device loop3): auto enabling async discard [ 230.248467][ T9072] BTRFS info (device loop3): rebuilding free space tree [ 230.290492][ T9072] BTRFS info (device loop3): disabling free space tree [ 230.297510][ T9072] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 230.307760][ T9072] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 230.393627][ T9072] BTRFS info (device loop3): balance: start -sdrange=128..234881024,vrange=18446744073709551614..18446744073709551613,limit=9223372036854775807,limit=4294967295..2147483647 [ 230.418098][ T9072] BTRFS info (device loop3): balance: ended with status: 0 [ 230.524375][ T5785] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 230.661906][ T9110] loop0: detected capacity change from 0 to 4096 [ 231.164121][ T9116] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 231.168055][ T9118] loop0: detected capacity change from 0 to 256 [ 231.223923][ T9106] loop1: detected capacity change from 0 to 40427 [ 231.236977][ T9118] FAT-fs (loop0): Directory bread(block 64) failed [ 231.240682][ T9106] F2FS-fs (loop1): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 231.259302][ T9118] FAT-fs (loop0): Directory bread(block 65) failed [ 231.271375][ T9106] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 231.276475][ T9118] FAT-fs (loop0): Directory bread(block 66) failed [ 231.285462][ T9106] F2FS-fs (loop1): invalid crc value [ 231.296026][ T9118] FAT-fs (loop0): Directory bread(block 67) failed [ 231.317490][ T9118] FAT-fs (loop0): Directory bread(block 68) failed [ 231.330852][ T9106] F2FS-fs (loop1): Found nat_bits in checkpoint [ 231.358979][ T9118] FAT-fs (loop0): Directory bread(block 69) failed [ 231.365955][ T9118] FAT-fs (loop0): Directory bread(block 70) failed [ 231.391398][ T9118] FAT-fs (loop0): Directory bread(block 71) failed [ 231.415196][ T9118] FAT-fs (loop0): Directory bread(block 72) failed [ 231.424078][ T9118] FAT-fs (loop0): Directory bread(block 73) failed [ 231.436205][ T9106] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 231.465841][ T9106] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 231.595023][ T5784] syz-executor: attempt to access beyond end of device [ 231.595023][ T5784] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 231.629140][ T5784] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 231.689993][ T9125] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 231.707414][ T9125] syzkaller0: linktype set to 270 [ 232.342610][ T9137] process 'syz.3.1218' launched './file0' with NULL argv: empty string added [ 232.566194][ T9127] loop0: detected capacity change from 0 to 32768 [ 232.643144][ T9127] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 232.745352][ T9155] loop3: detected capacity change from 0 to 128 [ 232.873520][ T9127] XFS (loop0): Ending clean mount [ 232.893251][ T9127] XFS (loop0): Quotacheck needed: Please wait. [ 233.045560][ T9127] XFS (loop0): Quotacheck: Done. [ 233.109300][ T9127] XFS (loop0): User initiated shutdown received. [ 233.143190][ T9127] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 233.169077][ T9127] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 233.178656][ T9135] loop2: detected capacity change from 0 to 32768 [ 233.222828][ T9135] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 233.259119][ T9157] loop1: detected capacity change from 0 to 32768 [ 233.272543][ T9157] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1222 (9157) [ 233.289675][ T5793] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 233.296086][ T9157] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 233.310705][ T9157] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 233.323959][ T9157] BTRFS info (device loop1): turning on async discard [ 233.337684][ T9157] BTRFS info (device loop1): using free space tree [ 233.493519][ T5788] ocfs2: Unmounting device (7,2) on (node local) [ 233.558577][ T9157] BTRFS info (device loop1): enabling ssd optimizations [ 233.762154][ T9157] BTRFS error (device loop1): balance: invalid convert metadata profile raid1c4 [ 233.800550][ T9181] Falling back ldisc for ptm0. [ 233.901419][ T5784] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 234.255557][ T9176] loop3: detected capacity change from 0 to 40427 [ 234.292266][ T9176] F2FS-fs (loop3): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 234.329364][ T9176] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 234.388943][ T9176] F2FS-fs (loop3): invalid crc value [ 234.443822][ T9176] F2FS-fs (loop3): Found nat_bits in checkpoint [ 234.565968][ T9193] loop1: detected capacity change from 0 to 2048 [ 234.591378][ T9176] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 234.598703][ T9176] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 234.628397][ T9193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.649878][ T9183] loop2: detected capacity change from 0 to 32768 [ 234.666239][ T9183] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1224 (9183) [ 234.685582][ T9193] ext4 filesystem being mounted at /339/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.703670][ T9199] loop0: detected capacity change from 0 to 1024 [ 234.725191][ T9183] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 234.744333][ T5785] syz-executor: attempt to access beyond end of device [ 234.744333][ T5785] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 234.754938][ T9183] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 234.759748][ T5785] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 234.777769][ T9183] BTRFS info (device loop2): using free space tree [ 234.815619][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.909114][ T9183] BTRFS info (device loop2): enabling ssd optimizations [ 234.916318][ T9183] BTRFS info (device loop2): auto enabling async discard [ 234.989524][ T48] hfsplus: b-tree write err: -5, ino 8 [ 235.212406][ T5788] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 235.228145][ T9218] loop0: detected capacity change from 0 to 8192 [ 235.248721][ T9218] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 235.263269][ T9218] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 235.272770][ T9218] REISERFS (device loop0): using ordered data mode [ 235.279844][ T9218] reiserfs: using flush barriers [ 235.301235][ T9218] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 235.378667][ T9218] REISERFS (device loop0): checking transaction log (loop0) [ 235.585386][ T9224] input: syz1 as /devices/virtual/input/input39 [ 235.647581][ T9218] REISERFS (device loop0): Using tea hash to sort names [ 235.663978][ T9218] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 235.785439][ T9218] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 235.813876][ T9218] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 235.835690][ T9218] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 236.079875][ T9234] Falling back ldisc for ptm0. [ 236.504679][ T9228] loop1: detected capacity change from 0 to 32768 [ 236.534210][ T9228] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1238 (9228) [ 236.585762][ T9228] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 236.606724][ T9228] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 236.627095][ T9228] BTRFS info (device loop1): force zlib compression, level 3 [ 236.651455][ T9228] BTRFS info (device loop1): force clearing of disk cache [ 236.669189][ T9228] BTRFS info (device loop1): setting nodatasum [ 236.675724][ T9228] BTRFS info (device loop1): allowing degraded mounts [ 236.693301][ T9228] BTRFS info (device loop1): enabling disk space caching [ 236.709140][ T9228] BTRFS info (device loop1): disk space caching is enabled [ 236.817644][ T9252] loop2: detected capacity change from 0 to 4096 [ 236.845160][ T9228] BTRFS info (device loop1): auto enabling async discard [ 236.878069][ T9228] BTRFS info (device loop1): rebuilding free space tree [ 236.885160][ T9243] loop3: detected capacity change from 0 to 32768 [ 236.899121][ T9243] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop3 scanned by syz.3.1243 (9243) [ 236.914273][ T9228] BTRFS info (device loop1): disabling free space tree [ 236.921963][ T9243] BTRFS info (device loop3): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 236.944506][ T9228] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 236.949100][ T9243] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 236.967933][ T9228] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 236.975784][ T9243] BTRFS info (device loop3): using free space tree [ 237.067890][ T9228] BTRFS info (device loop1): balance: start -sdrange=128..234881024,vrange=18446744073709551614..18446744073709551613,limit=9223372036854775807,limit=4294967295..2147483647 [ 237.088350][ T9228] BTRFS info (device loop1): balance: ended with status: 0 [ 237.145503][ T9243] BTRFS info (device loop3): enabling ssd optimizations [ 237.158922][ T9243] BTRFS info (device loop3): auto enabling async discard [ 237.249919][ T5784] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 237.266696][ T9290] loop0: detected capacity change from 0 to 512 [ 237.295525][ T9290] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 237.323981][ T9290] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 237.385755][ T9290] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 237.398689][ T9290] System zones: 0-2, 18-18, 34-35 [ 237.413978][ T9290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 237.481685][ T9290] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 237.513701][ T9290] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 237.546722][ T9290] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 237.580114][ T5785] BTRFS info (device loop3): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 237.647635][ T28] audit: type=1800 audit(1893474661.323:202): pid=9290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1254" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 237.807591][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.994580][ T9305] input: syz1 as /devices/virtual/input/input40 [ 238.245322][ T9307] loop1: detected capacity change from 0 to 4096 [ 238.689758][ T9322] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1266'. [ 238.750363][ T28] audit: type=1326 audit(1893474662.433:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9325 comm="syz.3.1268" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f03d8eec9 code=0x0 [ 239.431988][ T9328] loop1: detected capacity change from 0 to 32768 [ 239.467341][ T9328] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 239.529211][ T9328] XFS (loop1): Ending clean mount [ 239.552486][ T9328] XFS (loop1): Quotacheck needed: Please wait. [ 239.654982][ T9328] XFS (loop1): Quotacheck: Done. [ 239.724065][ T9328] XFS (loop1): User initiated shutdown received. [ 239.739080][ T9328] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 239.769238][ T9328] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 239.866418][ T9350] loop3: detected capacity change from 0 to 1024 [ 239.879495][ T5784] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 239.900814][ T9334] loop2: detected capacity change from 0 to 32768 [ 240.004555][ T9334] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 240.130065][ T1131] hfsplus: b-tree write err: -5, ino 8 [ 240.267676][ T9334] XFS (loop2): Ending clean mount [ 240.297934][ T9334] XFS (loop2): Quotacheck needed: Please wait. [ 240.379290][ T9334] XFS (loop2): Quotacheck: Done. [ 240.423434][ T9334] XFS (loop2): User initiated shutdown received. [ 240.433289][ T9334] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 240.469140][ T9334] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 240.555357][ T5788] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 241.389004][ T5854] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 241.583763][ T5854] usb 1-1: Using ep0 maxpacket: 16 [ 241.596170][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.622173][ T5854] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 241.636579][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.649394][ T9414] loop2: detected capacity change from 0 to 128 [ 241.656904][ T5854] usb 1-1: config 0 descriptor?? [ 242.104320][ T5854] mcp2221 0003:04D8:00DD.000B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 242.177523][ T28] audit: type=1326 audit(1893474665.853:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9420 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f03d8eec9 code=0x7ffc0000 [ 242.239088][ T28] audit: type=1326 audit(1893474665.853:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9420 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f03d8eec9 code=0x7ffc0000 [ 242.270735][ T28] audit: type=1326 audit(1893474665.883:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9420 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f2f03d8eec9 code=0x7ffc0000 [ 242.330706][ T28] audit: type=1326 audit(1893474665.883:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9420 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f03d8eec9 code=0x7ffc0000 [ 242.610268][ T5776] usb 1-1: USB disconnect, device number 14 [ 242.756026][ T9419] loop2: detected capacity change from 0 to 40427 [ 242.771090][ T9419] F2FS-fs (loop2): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 242.784044][ T9419] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 242.798336][ T9419] F2FS-fs (loop2): invalid crc value [ 242.811757][ T9419] F2FS-fs (loop2): Found nat_bits in checkpoint [ 242.891940][ T9419] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 242.903817][ T9419] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 243.029492][ T5788] syz-executor: attempt to access beyond end of device [ 243.029492][ T5788] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 243.052415][ T5788] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 243.263914][ T9447] kvm: user requested TSC rate below hardware speed [ 243.549780][ T9456] sp0: Synchronizing with TNC [ 243.736284][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1321'. [ 243.904248][ T9469] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1324'. [ 244.030383][ T9475] loop3: detected capacity change from 0 to 128 [ 244.042187][ T28] audit: type=1326 audit(1893474667.713:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9476 comm="syz.2.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a338eec9 code=0x7ffc0000 [ 244.085391][ T28] audit: type=1326 audit(1893474667.713:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9476 comm="syz.2.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a338eec9 code=0x7ffc0000 [ 244.111959][ T28] audit: type=1326 audit(1893474667.713:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9476 comm="syz.2.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fe6a338eec9 code=0x7ffc0000 [ 244.136427][ T28] audit: type=1326 audit(1893474667.713:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9476 comm="syz.2.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a338eec9 code=0x7ffc0000 [ 244.183121][ T28] audit: type=1326 audit(1893474667.713:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9476 comm="syz.2.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a338eec9 code=0x7ffc0000 [ 244.229017][ T5853] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 244.428946][ T5853] usb 2-1: Using ep0 maxpacket: 16 [ 244.436907][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.449263][ T5853] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 244.459417][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.470729][ T5853] usb 2-1: config 0 descriptor?? [ 244.734110][ T9488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1332'. [ 244.787769][ T9490] loop0: detected capacity change from 0 to 512 [ 244.813507][ T9490] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 244.831239][ T9490] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 244.842295][ T9490] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1333: Corrupt directory, running e2fsck is recommended [ 244.861804][ T9490] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 244.871989][ T9490] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.1333: corrupted in-inode xattr: invalid ea_ino [ 244.886542][ T9490] EXT4-fs (loop0): Remounting filesystem read-only [ 244.895563][ T9490] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.920940][ T5853] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 244.971183][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.321275][ T9509] loop0: detected capacity change from 0 to 128 [ 245.333656][ T9509] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 245.347030][ T9509] hpfs: filesystem error: improperly stopped [ 245.354321][ T9509] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 245.362993][ T9509] hpfs: You really don't want any checks? You are crazy... [ 245.373932][ T9509] hpfs: hpfs_map_sector(): read error [ 245.383939][ T5871] usb 2-1: USB disconnect, device number 16 [ 245.393329][ T9509] hpfs: code page support is disabled [ 245.407070][ T9509] hpfs: hpfs_map_4sectors(): unaligned read [ 245.418247][ T9509] hpfs: hpfs_map_4sectors(): unaligned read [ 245.427678][ T9509] hpfs: filesystem error: unable to find root dir [ 245.648955][ T5776] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 245.829041][ T5776] usb 3-1: Using ep0 maxpacket: 8 [ 245.838461][ T5776] usb 3-1: config 0 has no interfaces? [ 245.847352][ T5776] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 245.856908][ T5776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.864997][ T5776] usb 3-1: Product: syz [ 245.869409][ T5776] usb 3-1: Manufacturer: syz [ 245.874070][ T5776] usb 3-1: SerialNumber: syz [ 245.884163][ T5776] usb 3-1: config 0 descriptor?? [ 245.965531][ T9518] loop1: detected capacity change from 0 to 512 [ 245.977380][ T9518] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 245.995445][ T9518] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 246.008372][ T9518] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1345: Corrupt directory, running e2fsck is recommended [ 246.030393][ T9518] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 246.032263][ T28] audit: type=1326 audit(1893474669.703:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9520 comm="syz.0.1346" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f176ef8eec9 code=0x0 [ 246.046993][ T9518] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.1345: corrupted in-inode xattr: invalid ea_ino [ 246.079722][ T9518] EXT4-fs (loop1): Remounting filesystem read-only [ 246.087917][ T9518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.112589][ T5853] usb 3-1: USB disconnect, device number 20 [ 246.150624][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.507897][ T9534] kvm: user requested TSC rate below hardware speed [ 246.726216][ T9542] sp0: Synchronizing with TNC [ 247.140635][ T9562] loop1: detected capacity change from 0 to 128 [ 247.620895][ T9576] block device autoloading is deprecated and will be removed. [ 247.978488][ T9583] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1373'. [ 248.636194][ T9607] veth1_to_batadv: entered promiscuous mode [ 248.966074][ T9619] loop2: detected capacity change from 0 to 1024 [ 249.007246][ T9623] loop3: detected capacity change from 0 to 1024 [ 249.036468][ T9623] EXT4-fs: Ignoring removed nomblk_io_submit option [ 249.130418][ T9623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.381982][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.477299][ T9644] loop3: detected capacity change from 0 to 256 [ 249.501799][ T9644] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 249.548321][ T9644] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 249.568585][ T9644] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 249.581627][ T9644] UDF-fs: Scanning with blocksize 512 failed [ 249.598509][ T9644] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 249.653463][ T9644] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 249.745110][ T9652] loop2: detected capacity change from 0 to 128 [ 250.025203][ T9660] loop0: detected capacity change from 0 to 128 [ 251.257152][ T9667] loop1: detected capacity change from 0 to 32768 [ 251.290857][ T9667] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1409 (9667) [ 251.326390][ T9688] loop0: detected capacity change from 0 to 1024 [ 251.354265][ T9667] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 251.375640][ T9667] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 251.395396][ T9667] BTRFS info (device loop1): enabling auto defrag [ 251.402471][ T9667] BTRFS info (device loop1): doing ref verification [ 251.415804][ T9667] BTRFS info (device loop1): use no compression [ 251.423125][ T9667] BTRFS info (device loop1): force clearing of disk cache [ 251.438032][ T9667] BTRFS info (device loop1): max_inline at 4096 [ 251.461533][ T9667] BTRFS info (device loop1): disabling free space tree [ 251.582014][ T9667] BTRFS info (device loop1): enabling ssd optimizations [ 251.610286][ T9667] BTRFS info (device loop1): auto enabling async discard [ 251.642155][ T9667] BTRFS info (device loop1): rebuilding free space tree [ 251.744565][ T9667] BTRFS info (device loop1): disabling free space tree [ 251.778642][ T9667] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 251.806276][ T9667] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 252.012613][ T9724] loop2: detected capacity change from 0 to 256 [ 252.103797][ T9724] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x235fdaa5, utbl_chksum : 0xe619d30d) [ 252.131563][ T5784] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 252.187440][ T9729] loop0: detected capacity change from 0 to 1024 [ 253.054074][ T9744] 8021q: adding VLAN 0 to HW filter on device bond1 [ 253.064172][ T9744] bond0: (slave bond1): Enslaving as an active interface with an up link [ 253.366377][ T9758] loop1: detected capacity change from 0 to 2048 [ 253.432304][ T9758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.471664][ T9758] EXT4-fs (loop1): shut down requested (2) [ 253.530090][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.741299][ T9773] loop1: detected capacity change from 0 to 16 [ 253.764317][ T9773] erofs: (device loop1): mounted with root inode @ nid 36. [ 253.825557][ T9773] syz.1.1444: attempt to access beyond end of device [ 253.825557][ T9773] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 253.882169][ T9777] syz.1.1444: attempt to access beyond end of device [ 253.882169][ T9777] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 253.917162][ T9777] syz.1.1444: attempt to access beyond end of device [ 253.917162][ T9777] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 254.028705][ T5784] BUG: Bad page state in process syz-executor pfn:78a9a [ 254.037889][ T5784] page:ffffea0001e2a680 refcount:0 mapcount:0 mapping:ffff888056e207c8 index:0x2 pfn:0x78a9a [ 254.048278][ T5784] aops:z_erofs_cache_aops ino:0 [ 254.053472][ T5784] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 254.061624][ T5784] page_type: 0xffffffff() [ 254.066287][ T5784] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff888056e207c8 [ 254.075271][ T5784] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 254.084606][ T5784] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 254.092308][ T5784] page_owner tracks the page as allocated [ 254.099267][ T5784] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 9773, tgid 9770 (syz.1.1444), ts 253823698087, free_ts 246667602915 [ 254.121786][ T5784] post_alloc_hook+0x1cd/0x210 [ 254.126693][ T5784] get_page_from_freelist+0x195c/0x19f0 [ 254.133829][ T5784] __alloc_pages+0x1e3/0x460 [ 254.138493][ T5784] z_erofs_do_read_page+0x20c0/0x3680 [ 254.144097][ T5784] z_erofs_pcluster_readmore+0x2cf/0x450 [ 254.150045][ T5784] z_erofs_read_folio+0x208/0x540 [ 254.155135][ T5784] filemap_read_folio+0x167/0x760 [ 254.160433][ T5784] do_read_cache_folio+0x470/0x7e0 [ 254.166103][ T5784] erofs_bread+0x16f/0x630 [ 254.170961][ T5784] erofs_namei+0x28c/0xf00 [ 254.175708][ T5784] erofs_lookup+0x135/0x310 [ 254.180462][ T5784] __lookup_slow+0x281/0x3b0 [ 254.185379][ T5784] lookup_slow+0x53/0x70 [ 254.189820][ T5784] walk_component+0x2be/0x3f0 [ 254.194729][ T5784] path_lookupat+0x169/0x440 [ 254.199486][ T5784] filename_lookup+0x1f4/0x510 [ 254.204427][ T5784] page last free stack trace: [ 254.209345][ T5784] free_unref_page_prepare+0x7ce/0x8e0 [ 254.215102][ T5784] free_unref_page+0x32/0x2e0 [ 254.220050][ T5784] kasan_depopulate_vmalloc_pte+0x75/0x90 [ 254.226116][ T5784] __apply_to_page_range+0x878/0xdb0 [ 254.232310][ T5784] kasan_release_vmalloc+0x97/0xb0 [ 254.237588][ T5784] __purge_vmap_area_lazy+0x1640/0x1990 [ 254.243780][ T5784] drain_vmap_area_work+0x40/0xd0 [ 254.249230][ T5784] process_scheduled_works+0xa45/0x15b0 [ 254.254843][ T5784] worker_thread+0xa55/0xfc0 [ 254.259792][ T5784] kthread+0x2fa/0x390 [ 254.264030][ T5784] ret_from_fork+0x48/0x80 [ 254.268797][ T5784] ret_from_fork_asm+0x11/0x20 [ 254.274021][ T5784] Modules linked in: [ 254.278071][ T5784] CPU: 0 PID: 5784 Comm: syz-executor Not tainted syzkaller #0 [ 254.285669][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 254.295787][ T5784] Call Trace: [ 254.299257][ T5784] [ 254.302300][ T5784] dump_stack_lvl+0x16c/0x230 [ 254.307032][ T5784] ? show_regs_print_info+0x20/0x20 [ 254.312466][ T5784] ? swiotlb_print_info+0x70/0x70 [ 254.317542][ T5784] bad_page+0x14b/0x170 [ 254.321916][ T5784] free_unref_page_prepare+0x887/0x8e0 [ 254.327572][ T5784] free_unref_page+0x32/0x2e0 [ 254.332291][ T5784] ? __folio_put+0xef/0x210 [ 254.336837][ T5784] erofs_try_to_free_all_cached_pages+0x295/0x600 [ 254.343313][ T5784] erofs_shrink_workstation+0x118/0x290 [ 254.349105][ T5784] ? erofs_shrinker_unregister+0x170/0x170 [ 254.355230][ T5784] ? io_schedule+0xd0/0xd0 [ 254.360066][ T5784] ? kobject_put+0x43c/0x470 [ 254.364692][ T5784] erofs_shrinker_unregister+0x5d/0x170 [ 254.370275][ T5784] erofs_put_super+0x4e/0x150 [ 254.375268][ T5784] ? erofs_free_inode+0xb0/0xb0 [ 254.380179][ T5784] generic_shutdown_super+0x134/0x2b0 [ 254.385705][ T5784] kill_block_super+0x44/0x90 [ 254.390524][ T5784] erofs_kill_sb+0x4c/0x140 [ 254.395410][ T5784] deactivate_locked_super+0x97/0x100 [ 254.400930][ T5784] cleanup_mnt+0x429/0x4c0 [ 254.405393][ T5784] task_work_run+0x1ce/0x250 [ 254.410234][ T5784] ? task_work_cancel+0x240/0x240 [ 254.415554][ T5784] ? exit_to_user_mode_loop+0x3b/0x110 [ 254.421342][ T5784] exit_to_user_mode_loop+0xe6/0x110 [ 254.426759][ T5784] exit_to_user_mode_prepare+0xf6/0x180 [ 254.432458][ T5784] syscall_exit_to_user_mode+0x1a/0x50 [ 254.438086][ T5784] do_syscall_64+0x61/0xb0 [ 254.442675][ T5784] ? clear_bhb_loop+0x40/0x90 [ 254.447676][ T5784] ? clear_bhb_loop+0x40/0x90 [ 254.452513][ T5784] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.458481][ T5784] RIP: 0033:0x7fde491901f7 [ 254.463333][ T5784] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 254.483601][ T5784] RSP: 002b:00007ffc703cbe78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 254.492411][ T5784] RAX: 0000000000000000 RBX: 00007fde49211d7d RCX: 00007fde491901f7 [ 254.500603][ T5784] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc703cbf30 [ 254.508635][ T5784] RBP: 00007ffc703cbf30 R08: 0000000000000000 R09: 0000000000000000 [ 254.516651][ T5784] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc703ccfc0 [ 254.525026][ T5784] R13: 00007fde49211d7d R14: 000000000003dfd1 R15: 00007ffc703cd000 [ 254.533215][ T5784] [ 254.537556][ T5784] Disabling lock debugging due to kernel taint [ 254.754501][ T9775] loop3: detected capacity change from 0 to 32768 [ 254.784884][ T9775] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 254.812789][ T9775] XFS (loop3): Ending clean mount [ 254.906911][ T9789] capability: warning: `syz.2.1445' uses 32-bit capabilities (legacy support in use) [ 256.343087][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.349593][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.090915][ T5801] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 258.099640][ T5801] Bluetooth: hci3: Injecting HCI hardware error event [ 258.107149][ T5796] Bluetooth: hci3: hardware error 0x00