last executing test programs: 5.594356204s ago: executing program 0 (id=2064): landlock_create_ruleset(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x69a90eab3db9c902, 0xa6, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x5, 0xa0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff7, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x300, 0x3, 0x3, 0xb}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x82, 0x4, 0x9, 0x10, "", "ca"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x4, 0x7, 0x6, "f7e04239"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xff, 0xc8, 0x3, {0x7, 0x25, 0x1, 0x0, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x1, 0x8, 0x1, "3a3882"}, @as_header={0x7, 0x24, 0x1, 0x1, 0xc0, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x50, 0x5, 0x8, 0x41, {0x7, 0x25, 0x1, 0x82, 0xfe, 0x7}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 4.850122397s ago: executing program 3 (id=2079): syz_usb_connect(0x5, 0x27, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203110902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x6, 0x11, 0x0, 0x0}, {0x5, 0x4e01, 0x36, &(0x7f00000017c0)="166e2a32055dbea94d2028f1d68b71716589b27cd2b4eb72634a3e2356e600ea1eb98c2b876db8d684337b0caa6625e6bd6712cec64f"}, {0xf, 0x810, 0x0, 0x0}], 0x3}) 3.674297305s ago: executing program 0 (id=2098): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) 2.837703064s ago: executing program 0 (id=2108): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd0, 0xff, 0xec, 0x20, 0x789, 0x160, 0x2cd1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbf, 0x0, 0x2, 0xe6, 0xfb, 0x6a, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x18}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="201506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.664865344s ago: executing program 3 (id=2112): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/if_inet6\x00') lseek(r0, 0xa3d2, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/197, 0xc5}], 0x1, 0x36, 0x0) 2.499848594s ago: executing program 3 (id=2116): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000340)={0xb, 0x10, 0xfa00, {0x0, r1, 0x4}}, 0x18) 2.464201116s ago: executing program 3 (id=2118): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000008, 0x6c033, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x6, 0x0, 0x0) 2.306327625s ago: executing program 3 (id=2120): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000083, &(0x7f0000000080)={[{@nouuid}, {@swalloc}, {@lazytime}, {@nogrpid}, {@gquota}, {@nouuid}, {@pquota}, {@usrquota}, {@nogrpid}]}, 0x1, 0x97b0, &(0x7f0000012f40)="$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") chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) 1.803174994s ago: executing program 4 (id=2129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 1.738500918s ago: executing program 1 (id=2130): capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000000c0)={0x0, 0x0, 0x91e1, 0x81, 0xffffffff, 0x2}) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/ipc\x00') setns(r0, 0x0) 1.662220863s ago: executing program 4 (id=2131): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) 1.642299084s ago: executing program 1 (id=2132): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='Y', 0x1, 0xffffffffffffffff) keyctl$revoke(0x3, r0) keyctl$read(0xb, r0, &(0x7f0000002a80)=""/110, 0x6e) 1.556013259s ago: executing program 4 (id=2134): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1) 1.52501483s ago: executing program 4 (id=2135): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x1}) 1.501138222s ago: executing program 1 (id=2136): r0 = memfd_create(&(0x7f00000005c0)='--z\x03\x00\xb7\x80R\xca\x00\x00=\x94Z}\xfaW~\xae\x87\x88\xea\xde\xd9=-\x01\x00\x00\x80=\x1d\x8bl\xd5\xc3DE\xbb\x00\x00\x00\x00\x00\x00\x00\x10>\xfb\xdf\xc1\xd4\xd1\xee\x88\xebI\xab\xf6\xab}\x85\x18 \x8a\x8aG:\x00D-\x99JD)~\xd6\xa5\xff^\f\x15\x1c\xe9\xe5<\xfcP)E\xc1\x8e\xeb\xc9\x158Mq\x01\xe1\xf6-\xc3\xaa\x9e\x9be\xcd\xf2\xde\xccx\x1f\x0fne\xe4Y\xc9\vR2fY\x8e\x9d\x97 \x00\x00\x00\x00\xe8W\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\xe6JV\x80\xdd\x96F\xc90}SH\xe8\xd4R\t\xb6\xc9h\xfb\xf3#\xcb\x14)\xab\b\x05\x7f\xaa\x92\x87#Yg\xef\xfb\x1fn.\x7f\xb1\xe26~$\xa9\v\x9b|>\xf5G\xb5\xac/\xc3n\x16\xee\xdf\xd0a\x00\x00R\xfa\xab\x90\xaf\x96\xee\xc36\xdd\xb1\x94o\xb6&\xd4\xb4_\x9fn\xc5\xd8\x10VB\xab\x1e\xf7*8\xa4\x1a\x85\xa7\x04\tih\xd9V\xdb\xb0\x13\x86\v\xa3\xc4Ua\x90/\xf3\x17\x98\xe2\x11', 0x6) r1 = memfd_create(&(0x7f0000000040)='\\\\&\x0e\x00', 0x1) copy_file_range(r0, 0x0, r1, 0x0, 0x2, 0x0) 1.426303896s ago: executing program 1 (id=2137): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80402) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) write$binfmt_elf64(r0, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x40}, [{0x2, 0x60b, 0x5}]}, 0x78) 1.36427252s ago: executing program 4 (id=2139): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000002740)=ANY=[], 0x3, 0x5f89, &(0x7f0000002040)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000780)=ANY=[], 0xfe37, 0x0) lremovexattr(&(0x7f0000000800)='./file1\x00', &(0x7f0000000840)=@known='trusted.overlay.upper\x00') 1.354448841s ago: executing program 1 (id=2140): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1.170487571s ago: executing program 2 (id=2141): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYBLOB="15010000000000001c00128009000100766c616e000000000c00028006000100040000000800", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x280c1}, 0x8000002) 1.073969457s ago: executing program 2 (id=2142): syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000100)='./file7\x00', 0x21488b, &(0x7f0000020100)=ANY=[], 0x1, 0x65f, &(0x7f000001fa80)="$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") r0 = open$dir(&(0x7f0000000180)='.\x00', 0x141800, 0xc4) getdents64(r0, &(0x7f0000000080)=""/227, 0xe3) 659.749601ms ago: executing program 2 (id=2143): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000240)=""/21, &(0x7f0000000380)=0x15) 380.452637ms ago: executing program 3 (id=2144): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0xfdda, 0xb, 0x100}, {0x6}, {0x8, 0x15, 0xe}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x40488c4) 380.181908ms ago: executing program 4 (id=2145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c72fffffffffffffff5000007000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) 378.599398ms ago: executing program 2 (id=2146): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) 372.098538ms ago: executing program 0 (id=2147): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) close_range(r0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x40, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) 202.983828ms ago: executing program 0 (id=2148): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x17, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000238500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 118.361213ms ago: executing program 2 (id=2149): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001c00010429bd7000fddbdf2507000000", @ANYRES32=r1, @ANYBLOB="8200ee050a000200aa"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) 52.129486ms ago: executing program 2 (id=2150): setresuid(0xee01, 0xee00, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@add_del={0x2, 0x0}) 43.852617ms ago: executing program 1 (id=2151): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 0s ago: executing program 0 (id=2152): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00220500"], 0x0}, 0x0) kernel console output (not intermixed with test programs): up_contig: broken bmap (inode number=16) [ 125.148795][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.971'. [ 125.196700][ T6632] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 125.223946][ T6617] Remounting filesystem read-only [ 125.334524][ T6638] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 125.828439][ T6671] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.933525][ T6671] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 126.024377][ T6683] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: writeback. [ 126.042909][ T6684] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 126.086805][ T5795] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 126.468519][ T5795] usb 4-1: config 0 has an invalid interface number: 229 but max is 0 [ 126.501697][ T5795] usb 4-1: config 0 has no interface number 0 [ 126.508314][ T5795] usb 4-1: New USB device found, idVendor=0403, idProduct=8348, bcdDevice= 0.1f [ 126.518637][ T5795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.536317][ T5795] usb 4-1: config 0 descriptor?? [ 126.583569][ T5795] hub 4-1:0.229: bad descriptor, ignoring hub [ 126.597038][ T5795] hub: probe of 4-1:0.229 failed with error -5 [ 126.610190][ T5795] ftdi_sio 4-1:0.229: FTDI USB Serial Device converter detected [ 126.622642][ T5795] usb 4-1: Detected SIO [ 126.633272][ T5795] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 126.701856][ T7] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 126.792189][ T6714] set_capacity_and_notify: 7 callbacks suppressed [ 126.792277][ T6714] loop1: detected capacity change from 0 to 2048 [ 126.861027][ T6706] loop0: detected capacity change from 0 to 40427 [ 126.921763][ T6706] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff [ 126.940391][ T6714] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.942799][ T6706] F2FS-fs (loop0): invalid crc value [ 126.971954][ T6706] F2FS-fs (loop0): Found nat_bits in checkpoint [ 127.086742][ T7] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 127.095542][ T7] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 127.106447][ T6706] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 127.114663][ T7] usb 5-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 127.142368][ T7] usb 5-1: config 220 has no interface number 2 [ 127.180942][ T7] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 127.227264][ T7] usb 5-1: config 220 interface 0 has no altsetting 0 [ 127.241663][ T7] usb 5-1: config 220 interface 76 has no altsetting 0 [ 127.259414][ T7] usb 5-1: config 220 interface 1 has no altsetting 0 [ 127.321227][ T4186] attempt to access beyond end of device [ 127.321227][ T4186] loop0: rw=2049, want=45104, limit=40427 [ 127.426870][ T7] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 127.436383][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.444550][ T7] usb 5-1: Product: syz [ 127.450425][ T7] usb 5-1: Manufacturer: syz [ 127.455121][ T7] usb 5-1: SerialNumber: syz [ 127.500844][ T6727] loop1: detected capacity change from 0 to 4096 [ 127.551268][ T6727] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 127.606657][ T5791] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 127.776690][ T4293] Bluetooth: hci4: command 0x0401 tx timeout [ 127.827866][ T7] usb 5-1: selecting invalid altsetting 0 [ 127.835288][ T7] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 127.852385][ T7] usb 5-1: No valid video chain found. [ 127.887788][ T5795] usb 4-1: USB disconnect, device number 9 [ 127.902905][ T5795] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 127.914065][ T5795] ftdi_sio 4-1:0.229: device disconnected [ 127.957853][ T7] usb 5-1: selecting invalid altsetting 0 [ 127.964704][ T7] usbtest: probe of 5-1:220.1 failed with error -22 [ 127.973725][ T7] usb 5-1: USB disconnect, device number 9 [ 127.983918][ T5791] usb 3-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 127.995286][ T5791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.010651][ T5791] usb 3-1: config 0 descriptor?? [ 128.376444][ T6748] loop1: detected capacity change from 0 to 1024 [ 128.390220][ T6749] loop3: detected capacity change from 0 to 2048 [ 128.471353][ T6749] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.500298][ T5791] wacom 0003:056A:00B1.000C: Unknown device_type for 'HID 056a:00b1'. Assuming pen. [ 128.561111][ T5791] wacom 0003:056A:00B1.000C: hidraw0: USB HID v1.01 Device [HID 056a:00b1] on usb-dummy_hcd.2-1/input0 [ 128.602258][ T5791] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00B1.000C/input/input14 [ 128.726166][ T5791] usb 3-1: USB disconnect, device number 4 [ 128.922511][ T6763] fido_id[6763]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 129.119283][ T6777] loop0: detected capacity change from 0 to 64 [ 129.178194][ T6781] netlink: 'syz.3.1034': attribute type 2 has an invalid length. [ 129.410263][ T6762] loop1: detected capacity change from 0 to 40427 [ 129.470946][ T6762] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 129.488562][ T6762] F2FS-fs (loop1): invalid crc value [ 129.526380][ T6762] F2FS-fs (loop1): Found nat_bits in checkpoint [ 129.692197][ T6762] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 129.892534][ T4191] attempt to access beyond end of device [ 129.892534][ T4191] loop1: rw=2049, want=45104, limit=40427 [ 129.911952][ T6815] loop2: detected capacity change from 0 to 256 [ 130.046718][ T6815] FAT-fs (loop2): Directory bread(block 64) failed [ 130.063355][ T6815] FAT-fs (loop2): Directory bread(block 65) failed [ 130.085920][ T6815] FAT-fs (loop2): Directory bread(block 66) failed [ 130.121093][ T6815] FAT-fs (loop2): Directory bread(block 67) failed [ 130.142193][ T6815] FAT-fs (loop2): Directory bread(block 68) failed [ 130.161829][ T6815] FAT-fs (loop2): Directory bread(block 69) failed [ 130.181901][ T6815] FAT-fs (loop2): Directory bread(block 70) failed [ 130.194719][ T6815] FAT-fs (loop2): Directory bread(block 71) failed [ 130.210437][ T6815] FAT-fs (loop2): Directory bread(block 72) failed [ 130.236569][ T6815] FAT-fs (loop2): Directory bread(block 73) failed [ 130.302273][ T6827] loop0: detected capacity change from 0 to 256 [ 130.612118][ T6838] loop2: detected capacity change from 0 to 24 [ 130.702213][ T6838] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 130.721991][ T6838] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 131.376681][ T5791] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 131.416750][ T4795] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 131.446744][ T7] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 131.506589][ T4796] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 131.639230][ T5791] usb 5-1: Using ep0 maxpacket: 8 [ 131.676769][ T4795] usb 3-1: Using ep0 maxpacket: 16 [ 131.796752][ T5791] usb 5-1: unable to get BOS descriptor or descriptor too short [ 131.816756][ T4795] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 131.816920][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.824864][ T4795] usb 3-1: config 0 has no interface number 0 [ 131.840535][ T7] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 131.852416][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.863745][ T7] usb 4-1: config 0 descriptor?? [ 131.878701][ T4796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 131.896693][ T5791] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 131.905078][ T4796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.915758][ T4796] usb 2-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 131.925392][ T4796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.940350][ T4796] usb 2-1: config 0 descriptor?? [ 131.944581][ T5791] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 131.956648][ T5791] usb 5-1: config 4 has no interface number 0 [ 132.036667][ T4795] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 132.046005][ T4795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.061131][ T4795] usb 3-1: Product: syz [ 132.065332][ T4795] usb 3-1: Manufacturer: syz [ 132.079808][ T4795] usb 3-1: SerialNumber: syz [ 132.086386][ T4795] usb 3-1: config 0 descriptor?? [ 132.095605][ T26] audit: type=1326 audit(1769865751.473:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.0.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc969e9eb9 code=0x7ffc0000 [ 132.123421][ T26] audit: type=1326 audit(1769865751.473:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.0.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc969e9eb9 code=0x7ffc0000 [ 132.152007][ T26] audit: type=1326 audit(1769865751.513:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.0.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fdc969e9eb9 code=0x7ffc0000 [ 132.188447][ T4795] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 132.194686][ T26] audit: type=1326 audit(1769865751.513:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.0.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc969e9eb9 code=0x7ffc0000 [ 132.194807][ T26] audit: type=1326 audit(1769865751.513:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.0.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc969e9eb9 code=0x7ffc0000 [ 132.194844][ T26] audit: type=1326 audit(1769865751.513:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.0.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fdc969e9eb9 code=0x7ffc0000 [ 132.262072][ C0] vkms_vblank_simulate: vblank timer overrun [ 132.274223][ T5791] usb 5-1: string descriptor 0 read error: -22 [ 132.280333][ T26] audit: type=1326 audit(1769865751.513:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.0.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdc969e3cd7 code=0x7ffc0000 [ 132.283428][ T5791] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 132.304618][ T26] audit: type=1326 audit(1769865751.513:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.0.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc9698b2d9 code=0x7ffc0000 [ 132.326136][ T5791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.336376][ T26] audit: type=1326 audit(1769865751.513:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.0.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc969e9eb9 code=0x7ffc0000 [ 132.366720][ T26] audit: type=1326 audit(1769865751.513:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.0.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc969e9eb9 code=0x7ffc0000 [ 132.385201][ T7] pyra 0003:1E7D:2C24.000D: hidraw0: USB HID v0.01 Device [HID 1e7d:2c24] on usb-dummy_hcd.3-1/input0 [ 132.420700][ T6914] device wlan0 entered promiscuous mode [ 132.447385][ T5791] usb 5-1: Found UVC 0.02 device (04f2:b746) [ 132.454387][ T5791] usb 5-1: No valid video chain found. [ 132.473132][ T6913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.496787][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.503089][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.534836][ T4796] wacom 0003:056A:00ED.000E: hidraw1: USB HID v0.00 Device [HID 056a:00ed] on usb-dummy_hcd.1-1/input0 [ 132.564531][ T5791] usb 4-1: USB disconnect, device number 10 [ 132.663995][ T7] usb 5-1: USB disconnect, device number 10 [ 132.734033][ T5792] usb 2-1: USB disconnect, device number 4 [ 132.846604][ T4795] gspca_spca1528: reg_w err -71 [ 132.876652][ T4795] spca1528: probe of 3-1:0.1 failed with error -71 [ 132.889749][ T4795] usb 3-1: USB disconnect, device number 5 [ 133.381352][ T4795] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 133.392218][ T6926] netdevsim netdevsim1: Firmware load for '/../file0' refused, path contains '..' component [ 133.470342][ T6920] set_capacity_and_notify: 1 callbacks suppressed [ 133.470358][ T6920] loop3: detected capacity change from 0 to 32768 [ 133.623315][ T6920] XFS (loop3): Mounting V5 Filesystem [ 133.636685][ T4795] usb 1-1: Using ep0 maxpacket: 16 [ 133.737581][ T6920] XFS (loop3): Ending clean mount [ 133.756722][ T4795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.796556][ T4795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.819178][ T4795] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 133.852847][ T6942] loop1: detected capacity change from 0 to 4096 [ 133.866879][ T4795] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 133.883247][ T4795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.914808][ T4795] usb 1-1: config 0 descriptor?? [ 133.942807][ T4185] XFS (loop3): Unmounting Filesystem [ 133.991125][ T6942] ntfs: volume version 3.1. [ 134.011078][ T6930] loop2: detected capacity change from 0 to 32768 [ 134.020483][ T6924] loop4: detected capacity change from 0 to 40427 [ 134.055685][ T6924] F2FS-fs (loop4): Invalid log blocks per segment (4278190089) [ 134.063601][ T6924] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 134.078421][ T6930] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1108 (6930) [ 134.126093][ T6924] F2FS-fs (loop4): invalid crc value [ 134.154074][ T6930] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 134.172849][ T6930] BTRFS info (device loop2): using free space tree [ 134.180127][ T6930] BTRFS info (device loop2): has skinny extents [ 134.243794][ T6924] F2FS-fs (loop4): Found nat_bits in checkpoint [ 134.356032][ T6924] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 134.374672][ T6924] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 134.438857][ T4795] microsoft 0003:045E:07DA.000F: bogus close delimiter [ 134.455928][ T4795] microsoft 0003:045E:07DA.000F: item 0 4 2 10 parsing failed [ 134.500295][ T6930] BTRFS info (device loop2): enabling ssd optimizations [ 134.522868][ T4795] microsoft 0003:045E:07DA.000F: parse failed [ 134.550286][ T4795] microsoft: probe of 0003:045E:07DA.000F failed with error -22 [ 134.660851][ T4794] usb 1-1: USB disconnect, device number 7 [ 134.786144][ T6975] loop1: detected capacity change from 0 to 512 [ 134.805972][ T6975] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 134.824167][ T6975] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 134.872647][ T4178] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (4178) [ 134.979743][ T6975] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3887: comm syz.1.1115: Allocating blocks 41-42 which overlap fs metadata [ 135.087799][ T6975] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3887: comm syz.1.1115: Allocating blocks 41-42 which overlap fs metadata [ 135.154617][ T6987] netlink: 'syz.2.1118': attribute type 2 has an invalid length. [ 135.189339][ T6975] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.1115: Failed to acquire dquot type 1 [ 135.275993][ T6975] EXT4-fs error (device loop1): mb_free_blocks:1876: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 135.305112][ T6975] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #12: comm syz.1.1115: corrupted inode contents [ 135.334147][ T6975] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #12: comm syz.1.1115: mark_inode_dirty error [ 135.356890][ T6975] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #12: comm syz.1.1115: corrupted inode contents [ 135.403966][ T6975] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #12: comm syz.1.1115: mark_inode_dirty error [ 135.421692][ T6975] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #12: comm syz.1.1115: corrupted inode contents [ 135.455438][ T6975] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 135.472060][ T6975] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #12: comm syz.1.1115: corrupted inode contents [ 135.491449][ T6975] EXT4-fs error (device loop1): ext4_truncate:4279: inode #12: comm syz.1.1115: mark_inode_dirty error [ 135.503715][ T6975] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 135.515802][ T6975] EXT4-fs (loop1): 1 truncate cleaned up [ 135.532284][ T6975] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,jqfmt=vfsold,noinit_itable,max_dir_size_kb=0x0000000000000e4a,noauto_da_alloc,sysvgroups,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 135.561812][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.583780][ T4794] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 135.649746][ T6975] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.1115: Failed to acquire dquot type 1 [ 135.736575][ T6980] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 135.765633][ T7004] loop4: detected capacity change from 0 to 64 [ 135.802506][ T7007] loop3: detected capacity change from 0 to 164 [ 135.966854][ T4794] usb 3-1: config 252 has an invalid interface number: 251 but max is 0 [ 135.997768][ T4794] usb 3-1: config 252 has no interface number 0 [ 136.004164][ T4794] usb 3-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 136.075830][ T7020] loop4: detected capacity change from 0 to 136 [ 136.086959][ T4794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.158768][ T4794] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 136.169747][ T7017] loop3: detected capacity change from 0 to 4096 [ 136.208898][ T6980] usb 1-1: unable to get BOS descriptor or descriptor too short [ 136.266908][ T6980] usb 1-1: not running at top speed; connect to a high speed hub [ 136.285978][ T7017] ntfs: volume version 3.1. [ 136.386653][ T4795] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 136.401874][ T6980] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.431618][ T6980] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 136.453384][ T6980] usb 1-1: too many endpoints for config 1 interface 1 altsetting 23: 170, using maximum allowed: 30 [ 136.470807][ T6980] usb 1-1: config 1 interface 1 altsetting 23 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 136.488187][ T7034] loop4: detected capacity change from 0 to 256 [ 136.494762][ T6980] usb 1-1: config 1 interface 1 has no altsetting 0 [ 136.596727][ T4794] gspca_sn9c20x: Write register 1001 failed -71 [ 136.613137][ T4794] gspca_sn9c20x: Device initialization failed [ 136.620528][ T4794] gspca_sn9c20x: probe of 3-1:252.251 failed with error -71 [ 136.647113][ T4795] usb 2-1: Using ep0 maxpacket: 8 [ 136.671336][ T4794] usb 3-1: USB disconnect, device number 6 [ 136.687743][ T6980] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.716715][ T5667] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 136.727819][ T6980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 136.735930][ T6980] usb 1-1: Product: syz [ 136.743673][ T6980] usb 1-1: Manufacturer: syz [ 136.748555][ T6980] usb 1-1: SerialNumber: syz [ 136.769177][ T6995] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 136.926855][ T4795] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 136.935970][ T4795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.947654][ T4795] usb 2-1: Product: syz [ 136.951852][ T4795] usb 2-1: Manufacturer: syz [ 136.958867][ T4795] usb 2-1: SerialNumber: syz [ 136.965302][ T4795] usb 2-1: config 0 descriptor?? [ 136.974241][ T4796] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 137.019296][ T4795] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 137.037487][ T6980] cdc_acm: probe of 1-1:1.0 failed with error -22 [ 137.055504][ T6980] usb 1-1: USB disconnect, device number 8 [ 137.116252][ T5667] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.128703][ T5667] usb 4-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 137.138453][ T5667] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.150015][ T5667] usb 4-1: config 0 descriptor?? [ 137.216562][ T4796] usb 5-1: Using ep0 maxpacket: 8 [ 137.336719][ T4796] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 137.348236][ T4796] usb 5-1: config 179 has no interface number 0 [ 137.354531][ T4796] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 137.366102][ T4796] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 137.377861][ T4796] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 137.389834][ T4796] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 137.401817][ T4796] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 137.418290][ T4796] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 137.428780][ T4796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.446609][ T4794] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 137.456672][ T4795] gspca_sonixj: reg_r err -71 [ 137.461409][ T4795] sonixj: probe of 2-1:0.0 failed with error -71 [ 137.461890][ T7034] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 137.485556][ T4795] usb 2-1: USB disconnect, device number 5 [ 137.639603][ T5667] uclogic 0003:28BD:0055.0010: unknown main item tag 0x3 [ 137.648177][ T5667] uclogic 0003:28BD:0055.0010: No inputs registered, leaving [ 137.660402][ T5667] uclogic 0003:28BD:0055.0010: hidraw0: USB HID v0.07 Device [HID 28bd:0055] on usb-dummy_hcd.3-1/input0 [ 137.826732][ T4794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 137.837869][ T4794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.847969][ T4794] usb 3-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 137.857308][ T4794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.870172][ T5667] usb 4-1: USB disconnect, device number 11 [ 137.883915][ T4794] usb 3-1: config 0 descriptor?? [ 137.899934][ T4795] usb 5-1: USB disconnect, device number 11 [ 137.906551][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 137.915282][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 138.352851][ T7065] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 138.364997][ T7065] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 138.373634][ T4794] wacom 0003:056A:00ED.0011: hidraw0: USB HID v0.00 Device [HID 056a:00ed] on usb-dummy_hcd.2-1/input0 [ 138.398223][ T7065] F2FS-fs (loop0): Found nat_bits in checkpoint [ 138.489113][ T7065] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 138.499633][ T7065] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 138.591172][ T4235] usb 3-1: USB disconnect, device number 7 [ 138.666676][ T7065] fscrypt (loop0, inode 3): Error -61 getting encryption context [ 139.018793][ T7092] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1152'. [ 139.326814][ T4795] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 139.342541][ T7115] set_capacity_and_notify: 1 callbacks suppressed [ 139.342555][ T7115] loop0: detected capacity change from 0 to 1024 [ 139.358490][ T7116] loop2: detected capacity change from 0 to 256 [ 139.401252][ T7116] FAT-fs (loop2): Directory bread(block 64) failed [ 139.419281][ T7116] FAT-fs (loop2): Directory bread(block 65) failed [ 139.425908][ T7116] FAT-fs (loop2): Directory bread(block 66) failed [ 139.445643][ T7116] FAT-fs (loop2): Directory bread(block 67) failed [ 139.456166][ T7116] FAT-fs (loop2): Directory bread(block 68) failed [ 139.469167][ T7116] FAT-fs (loop2): Directory bread(block 69) failed [ 139.476053][ T7116] FAT-fs (loop2): Directory bread(block 70) failed [ 139.494742][ T7116] FAT-fs (loop2): Directory bread(block 71) failed [ 139.509278][ T7116] FAT-fs (loop2): Directory bread(block 72) failed [ 139.551024][ T7116] FAT-fs (loop2): Directory bread(block 73) failed [ 139.566571][ T4795] usb 2-1: Using ep0 maxpacket: 16 [ 139.686778][ T4795] usb 2-1: config 0 interface 0 altsetting 187 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 139.711559][ T4795] usb 2-1: config 0 interface 0 altsetting 187 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.735124][ T4795] usb 2-1: config 0 interface 0 has no altsetting 0 [ 139.760951][ T4795] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 139.790482][ T4795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.835322][ T4795] usb 2-1: config 0 descriptor?? [ 139.874334][ T7109] loop3: detected capacity change from 0 to 32768 [ 139.911780][ T7125] loop0: detected capacity change from 0 to 4096 [ 139.952241][ T7109] JBD2: Ignoring recovery information on journal [ 139.980933][ T7125] ntfs: volume version 3.1. [ 139.987899][ T7109] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 140.056970][ T7109] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (0, expected 74) [ 140.077717][ T7109] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 140.088387][ T7109] OCFS2: File system is now read-only. [ 140.093868][ T7109] (syz.3.1161,7109,0):ocfs2_search_one_group:1684 ERROR: status = -30 [ 140.102209][ T7109] (syz.3.1161,7109,0):ocfs2_claim_suballoc_bits:1920 ERROR: status = -30 [ 140.110826][ T7109] (syz.3.1161,7109,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 140.119451][ T7109] (syz.3.1161,7109,0):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 140.129401][ T7109] (syz.3.1161,7109,1):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 140.147837][ T7109] (syz.3.1161,7109,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 140.155597][ T7109] (syz.3.1161,7109,0):ocfs2_mknod:385 ERROR: status = -30 [ 140.163036][ T6980] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 140.177246][ T7109] (syz.3.1161,7109,0):ocfs2_mknod:502 ERROR: status = -30 [ 140.184541][ T7109] (syz.3.1161,7109,0):ocfs2_mkdir:659 ERROR: status = -30 [ 140.234470][ T4185] ocfs2: Unmounting device (7,3) on (node local) [ 140.339310][ T4795] uclogic 0003:5543:0781.0012: unknown main item tag 0x3 [ 140.357305][ T4795] uclogic 0003:5543:0781.0012: No inputs registered, leaving [ 140.377271][ T4795] uclogic 0003:5543:0781.0012: hidraw0: USB HID v0.09 Device [HID 5543:0781] on usb-dummy_hcd.1-1/input0 [ 140.525056][ T7131] loop0: detected capacity change from 0 to 32768 [ 140.545622][ T4796] usb 2-1: USB disconnect, device number 6 [ 140.556843][ T6980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.568477][ T6980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.590080][ T6980] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.603989][ T6980] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.614249][ T6980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.634881][ T6980] usb 3-1: config 0 descriptor?? [ 140.647316][ T7131] XFS (loop0): Mounting V5 Filesystem [ 140.674382][ T7131] XFS (loop0): Ending clean mount [ 140.685491][ T7131] XFS (loop0): Quotacheck needed: Please wait. [ 140.740238][ T7131] XFS (loop0): Quotacheck: Done. [ 140.795756][ T4186] XFS (loop0): Unmounting Filesystem [ 141.004377][ T7148] loop3: detected capacity change from 0 to 4096 [ 141.032796][ T7148] __ntfs_error: 28 callbacks suppressed [ 141.032812][ T7148] ntfs: (device loop3): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 141.100419][ T6980] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 141.106978][ T7148] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 141.132869][ T7148] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 141.162345][ T6980] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 141.192762][ T7148] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 141.237074][ T7148] ntfs: volume version 3.1. [ 141.285556][ T7148] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Invalid LCN < -1 in mapping pairs array. [ 141.316562][ T7148] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 141.326279][ T6980] usb 3-1: USB disconnect, device number 8 [ 141.377075][ T7148] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Invalid LCN < -1 in mapping pairs array. [ 141.418143][ T7148] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 141.471552][ T7148] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Failed to map directory index page, error 5. [ 141.509885][ T7148] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 141.614338][ T7170] loop1: detected capacity change from 0 to 1024 [ 141.711148][ T7174] netlink: 'syz.0.1185': attribute type 16 has an invalid length. [ 141.724933][ T7170] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 141.736599][ T7170] hfsplus: cannot replace xattr [ 142.456018][ T7182] loop3: detected capacity change from 0 to 32768 [ 142.522971][ T7212] loop2: detected capacity change from 0 to 64 [ 142.636624][ T4235] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 142.713795][ T7182] XFS (loop3): Mounting V5 Filesystem [ 142.746404][ T7182] XFS (loop3): Ending clean mount [ 143.027017][ T4235] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.045896][ T4235] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 143.070718][ T4235] usb 2-1: config 0 interface 0 has no altsetting 0 [ 143.096566][ T4235] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 143.116151][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.139038][ T4235] usb 2-1: config 0 descriptor?? [ 143.159218][ T4185] XFS (loop3): Unmounting Filesystem [ 143.166984][ T7204] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 143.239413][ T7235] comedi comedi3: 8255: I/O port conflict (0x4f27,4) [ 143.256529][ T7235] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 143.285533][ T7235] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 143.302613][ T7235] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 143.312790][ T7235] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 143.326996][ T7233] loop0: detected capacity change from 0 to 4096 [ 143.333744][ T7235] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 143.347302][ T7235] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 143.364276][ T7235] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 143.391138][ T7235] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 143.430034][ T7235] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 143.580206][ T7237] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1214 (7237) [ 143.639383][ T4235] itetech 0003:06CB:73F5.0014: unbalanced collection at end of report description [ 143.669583][ T4235] itetech: probe of 0003:06CB:73F5.0014 failed with error -22 [ 143.714592][ T7237] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 143.723384][ T7237] BTRFS info (device loop4): force clearing of disk cache [ 143.730578][ T7237] BTRFS info (device loop4): enabling ssd optimizations [ 143.737568][ T7237] BTRFS info (device loop4): using spread ssd allocation scheme [ 143.745219][ T7237] BTRFS info (device loop4): disabling free space tree [ 143.752212][ T7237] BTRFS info (device loop4): has skinny extents [ 143.850935][ T4235] usb 2-1: USB disconnect, device number 7 [ 143.979284][ T7233] ntfs: volume version 3.1. [ 144.109321][ T144] BTRFS warning (device loop4): checksum verify failed on 5267456 wanted 0xb8512a1d2916df35de1eb979e5409d57680a9623aa14e80f6c4e3536403d44d6 found 0xce151675d3d37caae648b5af0e52f728deaf5fefa298dbb793f83d5ebd0fbd05 level 0 [ 144.199721][ T7237] BTRFS warning (device loop4): failed to read fs tree: -5 [ 144.257476][ T7237] BTRFS error (device loop4): open_ctree failed: -5 [ 144.712737][ T7273] set_capacity_and_notify: 1 callbacks suppressed [ 144.712754][ T7273] loop2: detected capacity change from 0 to 1024 [ 144.846653][ T7273] hfsplus: bad catalog entry type [ 144.917057][ T4786] hfsplus: b-tree write err: -5, ino 4 [ 145.253434][ T7298] loop2: detected capacity change from 0 to 2048 [ 145.350760][ T7298] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.141123][ T7290] loop0: detected capacity change from 0 to 32768 [ 146.286670][ T7270] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 146.365046][ T7290] XFS (loop0): Mounting V5 Filesystem [ 146.484956][ T7340] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1246'. [ 146.530738][ T7321] loop1: detected capacity change from 0 to 32768 [ 146.556199][ T7321] [ 146.556199][ T7321] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.556199][ T7321] [ 146.626355][ T7321] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 146.626355][ T7321] [ 146.652163][ T7290] XFS (loop0): Ending clean mount [ 146.671906][ T7290] XFS (loop0): Quotacheck needed: Please wait. [ 146.677385][ T7270] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 146.689586][ T7321] ERROR: (device loop1): jfs_unlink: [ 146.689586][ T7321] [ 146.702268][ T7270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.723537][ T7270] usb 3-1: config 0 descriptor?? [ 146.780996][ T7290] XFS (loop0): Quotacheck: Done. [ 146.797760][ T4191] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 146.797760][ T4191] [ 146.835898][ T144] ERROR: (device loop1): diWrite: ixpxd invalid [ 146.835898][ T144] [ 146.855315][ T144] ERROR: (device loop1): txCommit: [ 146.855315][ T144] [ 146.876606][ T144] jfs_write_inode: jfs_commit_inode failed! [ 146.885553][ T4191] [ 146.885553][ T4191] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.885553][ T4191] [ 146.896219][ T4186] XFS (loop0): Unmounting Filesystem [ 146.911001][ T4191] [ 146.911001][ T4191] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.911001][ T4191] [ 147.218238][ T7344] loop3: detected capacity change from 0 to 40427 [ 147.313528][ T7344] F2FS-fs (loop3): invalid crc value [ 147.353080][ T7344] F2FS-fs (loop3): Found nat_bits in checkpoint [ 147.379569][ T7357] loop0: detected capacity change from 0 to 512 [ 147.420683][ T7344] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 147.434111][ T7344] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 147.446719][ T7270] usb 3-1: Cannot set autoneg [ 147.451936][ T7270] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 147.484192][ T7270] usb 3-1: USB disconnect, device number 9 [ 147.494974][ T7357] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 147.546840][ T7357] ext4 filesystem being mounted at /297/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.566571][ T4791] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 147.601484][ T4185] attempt to access beyond end of device [ 147.601484][ T4185] loop3: rw=2049, want=45104, limit=40427 [ 147.816582][ T4791] usb 2-1: Using ep0 maxpacket: 8 [ 147.936837][ T4791] usb 2-1: config 0 has an invalid interface number: 88 but max is 3 [ 147.946141][ T4791] usb 2-1: config 0 has an invalid interface number: 250 but max is 3 [ 147.956006][ T4791] usb 2-1: config 0 has an invalid descriptor of length 101, skipping remainder of the config [ 147.968047][ T4791] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 147.986799][ T4791] usb 2-1: config 0 has no interface number 0 [ 147.992899][ T4791] usb 2-1: config 0 has no interface number 1 [ 148.027263][ T4791] usb 2-1: config 0 interface 88 has no altsetting 0 [ 148.041312][ T4791] usb 2-1: config 0 interface 250 has no altsetting 0 [ 148.052157][ T7373] loop2: detected capacity change from 0 to 256 [ 148.058645][ T4791] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=12.b3 [ 148.070121][ T4791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.108063][ T7373] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x769352d4, utbl_chksum : 0xe619d30d) [ 148.127871][ T4791] usb 2-1: config 0 descriptor?? [ 148.389964][ T7369] loop0: detected capacity change from 0 to 32768 [ 148.406747][ T4791] usb 2-1: string descriptor 0 read error: -71 [ 148.427937][ T4791] usb 2-1: USB disconnect, device number 8 [ 148.634297][ T7393] loop2: detected capacity change from 0 to 512 [ 148.745608][ T7393] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 148.773869][ T7393] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 1)! [ 148.796300][ T7393] EXT4-fs (loop2): group descriptors corrupted! [ 149.016690][ T4242] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 149.139656][ T7410] loop2: detected capacity change from 0 to 16 [ 149.191878][ T7414] sp0: Synchronizing with TNC [ 149.240429][ T7410] erofs: (device loop2): mounted with root inode @ nid 36. [ 149.268661][ T4242] usb 1-1: Using ep0 maxpacket: 8 [ 149.382197][ T7423] netlink: 'syz.1.1284': attribute type 7 has an invalid length. [ 149.442459][ T7423] netlink: 'syz.1.1284': attribute type 1 has an invalid length. [ 149.451102][ T4242] usb 1-1: unable to get BOS descriptor or descriptor too short [ 149.502036][ T7423] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.1284'. [ 149.551522][ T4242] usb 1-1: config 4 interface 0 has no altsetting 0 [ 149.713167][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1294'. [ 149.854705][ T4242] usb 1-1: string descriptor 0 read error: -22 [ 149.862612][ T4242] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 149.902629][ T4242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.932508][ T7455] loop1: detected capacity change from 0 to 1024 [ 149.959070][ T4242] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 149.984389][ T4242] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 149.995379][ T4242] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 150.013400][ T7455] EXT4-fs (loop1): Ignoring removed bh option [ 150.047173][ T4242] usb 1-1: media controller created [ 150.084186][ T7455] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 150.108221][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.122969][ T4242] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 150.224207][ T7464] loop2: detected capacity change from 0 to 8192 [ 150.281800][ T7464] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 150.291863][ T7464] REISERFS (device loop2): using ordered data mode [ 150.299299][ T7464] reiserfs: using flush barriers [ 150.305604][ T7464] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 150.322730][ T7464] REISERFS (device loop2): checking transaction log (loop2) [ 150.456972][ T7460] loop3: detected capacity change from 0 to 40427 [ 150.471975][ T7460] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 150.486596][ T7460] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 150.526212][ T7464] REISERFS (device loop2): Using tea hash to sort names [ 150.537004][ T7464] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 150.579428][ T7460] F2FS-fs (loop3): Found nat_bits in checkpoint [ 150.666607][ T7460] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 150.673849][ T7460] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 150.788866][ T7472] loop1: detected capacity change from 0 to 4096 [ 150.812208][ T7472] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 150.990773][ T7476] loop2: detected capacity change from 0 to 512 [ 150.999786][ T7472] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 151.098919][ T7476] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,errors=remount-ro,init_itable,barrier=0x0000000000000040,nodiscard,. Quota mode: writeback. [ 151.133514][ T7476] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.236446][ T7488] loop4: detected capacity change from 0 to 1024 [ 151.236695][ T4242] zl10353_read_register: readreg error (reg=127, ret==0) [ 151.250243][ T7397] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 151.280234][ T7490] loop3: detected capacity change from 0 to 128 [ 151.306573][ T7476] EXT4-fs error (device loop2): ext4_get_verity_descriptor_location:338: inode #15: comm syz.2.1305: verity file corrupted; can't find descriptor [ 151.365366][ T7490] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 151.377598][ T7476] EXT4-fs (loop2): Remounting filesystem read-only [ 151.384130][ T7476] fs-verity (loop2, inode 15): Error -117 getting verity descriptor size [ 151.411760][ T4242] usb 1-1: USB disconnect, device number 9 [ 151.453605][ T7490] ext4 filesystem being mounted at /248/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 151.529850][ T4278] hfsplus: b-tree write err: -5, ino 4 [ 151.710173][ T7502] loop2: detected capacity change from 0 to 136 [ 151.741380][ T7502] Attempt to read inode for relocated directory [ 151.782228][ T7502] attempt to access beyond end of device [ 151.782228][ T7502] loop2: rw=524288, want=335544432, limit=136 [ 151.832168][ T7502] attempt to access beyond end of device [ 151.832168][ T7502] loop2: rw=0, want=335544432, limit=136 [ 151.875858][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 151.875871][ T26] audit: type=1800 audit(1769865771.253:55): pid=7502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1317" name="file1" dev="loop2" ino=1487 res=0 errno=0 [ 152.001983][ T7511] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1324'. [ 152.287518][ T7531] team0: Cannot enslave team device to itself [ 152.313041][ T7531] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 152.530332][ T7550] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1343'. [ 152.616340][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1345'. [ 152.633449][ T7553] loop1: detected capacity change from 0 to 1024 [ 152.653840][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1345'. [ 152.675253][ T7554] device macvlan2 entered promiscuous mode [ 152.781376][ T7558] loop2: detected capacity change from 0 to 1024 [ 152.907199][ T7564] netlink: 'syz.3.1351': attribute type 1 has an invalid length. [ 153.039670][ T7570] netlink: 'syz.3.1353': attribute type 1 has an invalid length. [ 153.117637][ T7570] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1353'. [ 153.131577][ T7570] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1353'. [ 153.302448][ T7584] IPVS: Error joining to the multicast group [ 153.503611][ T7599] netlink: 'syz.1.1368': attribute type 1 has an invalid length. [ 153.864676][ T155] attempt to access beyond end of device [ 153.864676][ T155] loop2: rw=1, want=7548, limit=1024 [ 153.897111][ T155] attempt to access beyond end of device [ 153.897111][ T155] loop2: rw=1, want=10100, limit=1024 [ 153.922185][ T155] attempt to access beyond end of device [ 153.922185][ T155] loop2: rw=1, want=12172, limit=1024 [ 153.943485][ T155] attempt to access beyond end of device [ 153.943485][ T155] loop2: rw=1, want=14420, limit=1024 [ 153.974614][ T7612] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 154.038252][ T7612] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.144624][ T7622] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 154.324035][ T7622] EXT4-fs (loop0): 1 orphan inode deleted [ 154.340828][ T7595] F2FS-fs (loop4): Invalid log blocks per segment (4278190089) [ 154.355887][ T7622] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,jqfmt=vfsv0,resgid=0x0000000000000000,sysvgroups,delalloc,quota,. Quota mode: writeback. [ 154.403898][ T7595] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 154.430899][ T7622] ext4 filesystem being mounted at /314/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.457646][ T7595] F2FS-fs (loop4): invalid crc value [ 154.504539][ T7595] F2FS-fs (loop4): Found nat_bits in checkpoint [ 154.640213][ T7595] F2FS-fs (loop4): recover fsync data on readonly fs [ 154.706806][ T7595] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30 [ 154.776537][ T7595] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 154.813300][ T7650] trusted_key: encrypted_key: key user:syz not found [ 154.849854][ T7652] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1393'. [ 155.020885][ T7662] set_capacity_and_notify: 3 callbacks suppressed [ 155.020899][ T7662] loop3: detected capacity change from 0 to 512 [ 155.117644][ T7662] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,errors=continue,noblock_validity,,errors=continue. Quota mode: none. [ 155.201757][ T7662] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.1398: Unimplemented hash flags: 0x0001 [ 155.213965][ T7662] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1398: Corrupt directory, running e2fsck is recommended [ 155.678304][ T7690] loop0: detected capacity change from 0 to 1024 [ 155.726417][ T7666] loop4: detected capacity change from 0 to 32768 [ 155.736728][ T7690] EXT4-fs (loop0): Ignoring removed orlov option [ 155.769861][ T7690] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 156.149027][ T7706] loop0: detected capacity change from 0 to 1024 [ 156.235262][ T7706] hfsplus: bad catalog entry type [ 156.295449][ T4786] hfsplus: b-tree write err: -5, ino 4 [ 156.326655][ T4791] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 156.371926][ T7714] sock: sock_set_timeout: `syz.3.1419' (pid 7714) tries to set negative timeout [ 156.519096][ T7722] loop3: detected capacity change from 0 to 8 [ 156.618630][ T7728] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1425'. [ 156.696785][ T4791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.710156][ T7734] loop2: detected capacity change from 0 to 1024 [ 156.720066][ T4791] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 156.729799][ T4791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.749474][ T4791] usb 5-1: config 0 descriptor?? [ 156.761773][ T7736] loop0: detected capacity change from 0 to 128 [ 156.794891][ T7738] loop3: detected capacity change from 0 to 256 [ 156.846924][ T7736] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 156.913462][ T7736] hpfs: filesystem error: improperly stopped [ 156.941979][ T7738] FAT-fs (loop3): Directory bread(block 64) failed [ 156.955742][ T7736] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 156.966727][ T7738] FAT-fs (loop3): Directory bread(block 65) failed [ 156.979371][ T7744] loop1: detected capacity change from 0 to 256 [ 156.995579][ T7738] FAT-fs (loop3): Directory bread(block 66) failed [ 157.016159][ T7736] hpfs: You really don't want any checks? You are crazy... [ 157.056355][ T7738] FAT-fs (loop3): Directory bread(block 67) failed [ 157.072232][ T7744] FAT-fs (loop1): Directory bread(block 64) failed [ 157.085906][ T7736] hpfs: hpfs_map_sector(): read error [ 157.091775][ T7738] FAT-fs (loop3): Directory bread(block 68) failed [ 157.125477][ T7744] FAT-fs (loop1): Directory bread(block 65) failed [ 157.132320][ T7736] hpfs: code page support is disabled [ 157.132383][ T7738] FAT-fs (loop3): Directory bread(block 69) failed [ 157.157210][ T7736] hpfs: hpfs_map_4sectors(): unaligned read [ 157.166671][ T7744] FAT-fs (loop1): Directory bread(block 66) failed [ 157.173223][ T7744] FAT-fs (loop1): Directory bread(block 67) failed [ 157.189110][ T7736] hpfs: hpfs_map_4sectors(): unaligned read [ 157.190798][ T7738] FAT-fs (loop3): Directory bread(block 70) failed [ 157.210084][ T7736] hpfs: filesystem error: unable to find root dir [ 157.218519][ T7738] FAT-fs (loop3): Directory bread(block 71) failed [ 157.225407][ T7738] FAT-fs (loop3): Directory bread(block 72) failed [ 157.233184][ T7738] FAT-fs (loop3): Directory bread(block 73) failed [ 157.234839][ T4791] lenovo 0003:17EF:60A3.0015: ignoring exceeding usage max [ 157.261542][ T7744] FAT-fs (loop1): Directory bread(block 68) failed [ 157.285431][ T7744] FAT-fs (loop1): Directory bread(block 69) failed [ 157.297336][ T7736] hpfs: hpfs_map_4sectors(): unaligned read [ 157.303332][ T7736] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 157.321888][ T4791] lenovo 0003:17EF:60A3.0015: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.4-1/input0 [ 157.326366][ T7744] FAT-fs (loop1): Directory bread(block 70) failed [ 157.368696][ T7744] FAT-fs (loop1): Directory bread(block 71) failed [ 157.375386][ T7744] FAT-fs (loop1): Directory bread(block 72) failed [ 157.393856][ T7744] FAT-fs (loop1): Directory bread(block 73) failed [ 157.516785][ T4242] usb 5-1: USB disconnect, device number 12 [ 157.595645][ T4791] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 157.964658][ T7773] loop0: detected capacity change from 0 to 64 [ 157.987305][ T4791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.004087][ T7775] overlayfs: conflicting options: nfs_export=on,index=off [ 158.007373][ T4791] usb 3-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00 [ 158.046193][ T4791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.075950][ T4791] usb 3-1: config 0 descriptor?? [ 158.400668][ T7785] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 158.421995][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.520257][ T7785] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 158.571850][ T7801] hfs: hfs: Invalid key length: 94 [ 158.573041][ T7785] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 158.586412][ T4791] wacom 0003:056A:00B0.0016: Unknown device_type for 'HID 056a:00b0'. Assuming pen. [ 158.598485][ T7785] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 158.618413][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.629408][ T4791] wacom 0003:056A:00B0.0016: hidraw0: USB HID v0.00 Device [HID 056a:00b0] on usb-dummy_hcd.2-1/input0 [ 158.646659][ T7785] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 158.662408][ T4791] input: Wacom Intuos3 4x5 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00B0.0016/input/input23 [ 158.672555][ T7785] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 158.732400][ T4192] hfs: node 4:3 still has 1 user(s)! [ 158.756255][ T7785] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 158.786626][ T7785] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 158.832249][ T4791] usb 3-1: USB disconnect, device number 10 [ 158.847235][ T7785] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 158.878029][ T7805] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1464'. [ 158.921436][ T7785] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 158.974930][ T7805] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 159.015161][ T7785] ntfs: volume version 3.1. [ 159.130287][ T7810] fido_id[7810]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 159.312578][ T7823] siw: device registration error -23 [ 159.495572][ T7834] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1479'. [ 159.776695][ T7270] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 159.966542][ T4791] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 160.146676][ T7270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 160.163439][ T7270] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 160.182662][ T7270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.203476][ T7270] usb 4-1: config 0 descriptor?? [ 160.346726][ T4791] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 160.358231][ T4791] usb 1-1: config 0 has no interface number 0 [ 160.369948][ T4791] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 160.393255][ T4791] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 160.416298][ T4791] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 160.440357][ T4791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.471761][ T4791] usb 1-1: config 0 descriptor?? [ 160.487175][ T7866] set_capacity_and_notify: 4 callbacks suppressed [ 160.487186][ T7866] loop2: detected capacity change from 0 to 40427 [ 160.500628][ T7856] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 160.524371][ T4791] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 160.559587][ T7866] F2FS-fs (loop2): invalid crc value [ 160.595330][ T7866] F2FS-fs (loop2): Found nat_bits in checkpoint [ 160.675334][ T7876] comedi comedi0: No channels found! [ 160.688756][ T7270] asus 0003:0B05:17E0.0017: item fetching failed at offset 2/5 [ 160.708321][ T7270] asus 0003:0B05:17E0.0017: Asus hid parse failed: -22 [ 160.715250][ T7270] asus: probe of 0003:0B05:17E0.0017 failed with error -22 [ 160.745957][ T7866] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 160.834330][ T4242] usb 1-1: USB disconnect, device number 10 [ 160.869557][ T7878] loop1: detected capacity change from 0 to 8192 [ 160.910123][ T6980] usb 4-1: USB disconnect, device number 12 [ 160.923448][ T7878] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 160.958802][ T4184] attempt to access beyond end of device [ 160.958802][ T4184] loop2: rw=2049, want=45104, limit=40427 [ 161.032785][ T7878] REISERFS (device loop1): using ordered data mode [ 161.076577][ T7878] reiserfs: using flush barriers [ 161.084250][ T7878] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 161.116873][ T7878] REISERFS (device loop1): checking transaction log (loop1) [ 161.136232][ T7878] REISERFS (device loop1): Using r5 hash to sort names [ 161.150612][ T7878] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 161.853521][ T7921] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1515'. [ 161.981221][ T7927] loop1: detected capacity change from 0 to 256 [ 162.051425][ T7931] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1520'. [ 162.102965][ T7927] FAT-fs (loop1): Directory bread(block 64) failed [ 162.145757][ T7927] FAT-fs (loop1): Directory bread(block 65) failed [ 162.169388][ T7927] FAT-fs (loop1): Directory bread(block 66) failed [ 162.226954][ T7927] FAT-fs (loop1): Directory bread(block 67) failed [ 162.268507][ T7927] FAT-fs (loop1): Directory bread(block 68) failed [ 162.292273][ T7927] FAT-fs (loop1): Directory bread(block 69) failed [ 162.321534][ T7927] FAT-fs (loop1): Directory bread(block 70) failed [ 162.333718][ T7927] FAT-fs (loop1): Directory bread(block 71) failed [ 162.346749][ T7927] FAT-fs (loop1): Directory bread(block 72) failed [ 162.353431][ T7927] FAT-fs (loop1): Directory bread(block 73) failed [ 163.087748][ T7973] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1538'. [ 163.143901][ T7975] loop2: detected capacity change from 0 to 512 [ 163.281829][ T7975] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 163.321928][ T7975] EXT4-fs (loop2): orphan cleanup on readonly fs [ 163.330605][ T7986] xt_policy: too many policy elements [ 163.347164][ T7975] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 163.402326][ T7975] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1551: attempt to clear invalid blocks 2 len 1 [ 163.516849][ T7975] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 163.536695][ T4235] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 163.552129][ T7975] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1551: invalid indirect mapped block 1819239214 (level 0) [ 163.580073][ T7990] loop4: detected capacity change from 0 to 1764 [ 163.589503][ T7975] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1551: invalid indirect mapped block 1819239214 (level 1) [ 163.633549][ T7988] loop3: detected capacity change from 0 to 4096 [ 163.640561][ T7975] EXT4-fs (loop2): 1 truncate cleaned up [ 163.666925][ T7975] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 163.691905][ T7988] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 163.720410][ T7963] loop0: detected capacity change from 0 to 32768 [ 163.745933][ T7975] EXT4-fs (loop2): Quota file not on filesystem root. Journaled quota will not work [ 163.789727][ T7988] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 163.796922][ T4235] usb 2-1: Using ep0 maxpacket: 32 [ 163.916822][ T4235] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 163.957076][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.048100][ T4235] usb 2-1: config 0 descriptor?? [ 164.085348][ T7963] XFS (loop0): Mounting V5 Filesystem [ 164.148626][ T8003] loop4: detected capacity change from 0 to 1024 [ 164.180810][ T7963] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 164.271476][ T4278] hfsplus: b-tree write err: -5, ino 4 [ 164.302266][ T7963] XFS (loop0): Starting recovery (logdev: internal) [ 164.329868][ T8012] netlink: 'syz.3.1550': attribute type 11 has an invalid length. [ 164.386352][ T7963] XFS (loop0): Ending recovery (logdev: internal) [ 164.461076][ T8011] loop2: detected capacity change from 0 to 4096 [ 164.512769][ T8013] loop4: detected capacity change from 0 to 4096 [ 164.529087][ T4186] XFS (loop0): Unmounting Filesystem [ 164.537653][ T8011] __ntfs_error: 9 callbacks suppressed [ 164.537664][ T8011] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 164.558146][ T4235] a4tech 0003:09DA:022B.0018: item fetching failed at offset 5/7 [ 164.566251][ T4235] a4tech 0003:09DA:022B.0018: parse failed [ 164.605079][ T8013] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 164.624887][ T4235] a4tech: probe of 0003:09DA:022B.0018 failed with error -22 [ 164.692701][ T8011] ntfs: volume version 3.1. [ 164.764012][ T8013] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 164.799335][ T4235] usb 2-1: USB disconnect, device number 9 [ 165.021005][ T8019] ntfs3: loop2: ino=3, Correct links count -> 2. [ 165.069014][ T8021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1558'. [ 165.197751][ T8019] ntfs3: loop2: failed to convert "0080" to maccenteuro [ 165.253775][ T8019] ntfs3: loop2: failed to convert name for inode 1e. [ 165.575359][ T8017] set_capacity_and_notify: 1 callbacks suppressed [ 165.575374][ T8017] loop3: detected capacity change from 0 to 32768 [ 165.701389][ T4235] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 165.746922][ T8045] loop2: detected capacity change from 0 to 1024 [ 165.788672][ T8045] EXT4-fs (loop2): inline encryption not supported [ 165.803075][ T8045] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.832395][ T8049] loop4: detected capacity change from 0 to 256 [ 165.883096][ T8045] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 165.972221][ T8049] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 166.045997][ T8045] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 166.106683][ T4235] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.118457][ T4235] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.128863][ T8055] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 166.150639][ T4235] usb 2-1: config 0 interface 0 has no altsetting 0 [ 166.166635][ T4235] usb 2-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00 [ 166.176784][ T8055] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: writeback. [ 166.206220][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.224939][ T4235] usb 2-1: config 0 descriptor?? [ 166.313775][ T8062] loop4: detected capacity change from 0 to 64 [ 166.406296][ T8037] loop0: detected capacity change from 0 to 40427 [ 166.407841][ T8062] hfs: unable to locate alternate MDB [ 166.445049][ T8037] F2FS-fs (loop0): invalid crc value [ 166.450272][ T8062] hfs: continuing without an alternate MDB [ 166.482112][ T8037] F2FS-fs (loop0): Found nat_bits in checkpoint [ 166.678380][ T8037] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 166.715793][ T4235] wacom 0003:056A:0018.0019: unknown main item tag 0x2 [ 166.743611][ T4235] wacom 0003:056A:0018.0019: Unknown device_type for 'HID 056a:0018'. Assuming pen. [ 166.787009][ T4235] wacom 0003:056A:0018.0019: hidraw0: USB HID v0.00 Device [HID 056a:0018] on usb-dummy_hcd.1-1/input0 [ 166.844365][ T4235] input: Wacom BambooFun 6x8 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0018.0019/input/input27 [ 166.875912][ T8088] loop2: detected capacity change from 0 to 512 [ 166.946366][ T4186] attempt to access beyond end of device [ 166.946366][ T4186] loop0: rw=2049, want=45104, limit=40427 [ 166.985072][ T4235] usb 2-1: USB disconnect, device number 10 [ 167.064751][ T8088] EXT4-fs error (device loop2): __ext4_iget:4912: inode #11: block 1: comm syz.2.1598: invalid block [ 167.133900][ T8088] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1598: couldn't read orphan inode 11 (err -117) [ 167.152450][ T8088] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,minixdf,max_dir_size_kb=0x0000000000000009,data_err=abort,grpquota,noinit_itable,inode_readahead_blks=0x0000000000400000,i_version,acl,,errors=continue. Quota mode: writeback. [ 167.351651][ T8105] fido_id[8105]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 167.599340][ T8120] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1597'. [ 167.625570][ T8117] loop4: detected capacity change from 0 to 2048 [ 167.657850][ T8113] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1597'. [ 167.667135][ T4199] Bluetooth: hci3: link tx timeout [ 167.672293][ T4199] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 167.680671][ T4199] Bluetooth: hci3: link tx timeout [ 167.685807][ T4199] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 167.714758][ T8115] loop3: detected capacity change from 0 to 4096 [ 167.727694][ T8117] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=2362, location=2362 [ 167.805235][ T8117] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 167.846998][ T8117] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 167.877655][ T8125] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.892717][ T8117] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.980411][ T8119] loop1: detected capacity change from 0 to 32768 [ 168.039611][ T7270] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 168.052952][ T8119] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1600 (8119) [ 168.139739][ T8133] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1617'. [ 168.196603][ T8119] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 168.227914][ T8119] BTRFS info (device loop1): using free space tree [ 168.234462][ T8119] BTRFS info (device loop1): has skinny extents [ 168.244812][ T8135] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1605'. [ 168.271353][ T8135] xt_time: unknown flags 0xf4 [ 168.306551][ T7270] usb 1-1: Using ep0 maxpacket: 8 [ 168.373000][ T8146] loop4: detected capacity change from 0 to 256 [ 168.426806][ T7270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59209, setting to 1024 [ 168.427608][ T8119] BTRFS info (device loop1): enabling ssd optimizations [ 168.468947][ T7270] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 168.482806][ T8151] comedi comedi3: 8255: I/O port conflict (0x4f27,4) [ 168.516655][ T7270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.527051][ T8151] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 168.617812][ T7270] usb 1-1: config 0 descriptor?? [ 168.637809][ T8124] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 168.698067][ T4794] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 168.900346][ T7270] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 168.917785][ T8174] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 168.946521][ T8174] FAT-fs (loop3): Filesystem has been set read-only [ 168.948911][ T4794] usb 3-1: Using ep0 maxpacket: 8 [ 169.086762][ T4794] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 169.094884][ T4794] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.143663][ T4794] usb 3-1: config 0 has no interface number 0 [ 169.151136][ T5790] usb 1-1: USB disconnect, device number 11 [ 169.181748][ T4794] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 255, changing to 11 [ 169.202665][ T4794] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 59391, setting to 1024 [ 169.245052][ T4794] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.278408][ T4794] usb 3-1: config 0 interface 52 has no altsetting 0 [ 169.331921][ T8184] isofs: isofs_export_get_parent(): child directory not normalized! [ 169.360982][ T4794] usb 3-1: New USB device found, idVendor=06cb, idProduct=0001, bcdDevice= 0.00 [ 169.381069][ T4794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 169.389582][ T4794] usb 3-1: SerialNumber: syz [ 169.413118][ T4794] usb 3-1: config 0 descriptor?? [ 169.708666][ T4794] input: USB Synaptics Device 06cb:0001 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input30 [ 169.766647][ T4794] Bluetooth: hci3: command 0x0406 tx timeout [ 169.915977][ T8213] rdma_op ffff8880774eb9f0 conn xmit_rdma 0000000000000000 [ 169.956614][ T5790] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 169.965227][ T4794] usb 3-1: USB disconnect, device number 11 [ 170.010943][ T8216] tipc: Started in network mode [ 170.015979][ T8216] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 170.057545][ T8216] tipc: Enabling of bearer rejected, failed to enable media [ 170.072961][ T8214] hfsplus: bad catalog entry type [ 170.095662][ T7270] Bluetooth: hci2: command 0x0811 tx timeout [ 170.131252][ T4786] hfsplus: b-tree write err: -5, ino 4 [ 170.368131][ T8226] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 170.396841][ T8222] ntfs3: loop1: ino=3, Correct links count -> 2. [ 170.416886][ T5790] usb 5-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 170.431843][ T5790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.448410][ T8228] xt_socket: unknown flags 0xe4 [ 170.484165][ T5790] usb 5-1: config 0 descriptor?? [ 170.487056][ T8226] hpfs: filesystem error: improperly stopped [ 170.495363][ T8226] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 170.524337][ T8222] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 170.557333][ T8226] hpfs: You really don't want any checks? You are crazy... [ 170.593574][ T8226] hpfs: hpfs_map_sector(): read error [ 170.632558][ T8231] sp0: Synchronizing with TNC [ 170.641502][ T8226] hpfs: code page support is disabled [ 170.667707][ T8230] [U] è` [ 170.697412][ T8226] hpfs: hpfs_map_4sectors(): unaligned read [ 170.728464][ T8226] hpfs: hpfs_map_4sectors(): unaligned read [ 170.734396][ T8226] hpfs: filesystem error: unable to find root dir [ 170.874567][ T8240] netlink: 'syz.1.1649': attribute type 1 has an invalid length. [ 171.000195][ T5790] waltop 0003:172F:0038.001A: unknown main item tag 0x0 [ 171.022965][ T8248] set_capacity_and_notify: 7 callbacks suppressed [ 171.023526][ T8248] loop1: detected capacity change from 0 to 256 [ 171.047618][ T5790] waltop 0003:172F:0038.001A: unknown main item tag 0x0 [ 171.054630][ T5790] waltop 0003:172F:0038.001A: unknown main item tag 0x0 [ 171.062440][ T5790] waltop 0003:172F:0038.001A: unknown main item tag 0x0 [ 171.085217][ T5790] waltop 0003:172F:0038.001A: unknown main item tag 0x0 [ 171.094461][ T8250] loop2: detected capacity change from 0 to 128 [ 171.104904][ T5790] waltop 0003:172F:0038.001A: hidraw0: USB HID v0.05 Device [HID 172f:0038] on usb-dummy_hcd.4-1/input0 [ 171.178912][ T8248] FAT-fs (loop1): Directory bread(block 64) failed [ 171.188904][ T8250] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 171.205945][ T8248] FAT-fs (loop1): Directory bread(block 65) failed [ 171.212918][ T8248] FAT-fs (loop1): Directory bread(block 66) failed [ 171.221876][ T8250] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.239570][ T5790] usb 5-1: USB disconnect, device number 13 [ 171.286602][ T8248] FAT-fs (loop1): Directory bread(block 67) failed [ 171.293599][ T8248] FAT-fs (loop1): Directory bread(block 68) failed [ 171.321349][ T8248] FAT-fs (loop1): Directory bread(block 69) failed [ 171.346063][ T8248] FAT-fs (loop1): Directory bread(block 70) failed [ 171.363126][ T8248] FAT-fs (loop1): Directory bread(block 71) failed [ 171.378782][ T8248] FAT-fs (loop1): Directory bread(block 72) failed [ 171.391558][ T8251] fido_id[8251]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 171.406354][ T8248] FAT-fs (loop1): Directory bread(block 73) failed [ 171.640993][ T8261] loop0: detected capacity change from 0 to 64 [ 171.677139][ T8244] loop3: detected capacity change from 0 to 32768 [ 171.800785][ T8244] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 171.800785][ T8244] [ 171.831418][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1660'. [ 171.867930][ T8244] ERROR: (device loop3): remounting filesystem as read-only [ 171.915822][ T8244] xtLookup: xtSearch returned -5 [ 171.939514][ T8271] loop0: detected capacity change from 0 to 736 [ 171.987515][ T8275] loop4: detected capacity change from 0 to 8 [ 172.066501][ T8275] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 172.096571][ T8271] rock: directory entry would overflow storage [ 172.113257][ T8271] rock: sig=0x3b10, size=4, remaining=3 [ 172.674946][ T8299] IPVS: set_ctl: invalid protocol: 35143 10.1.1.2:20004 [ 172.813107][ T8306] loop4: detected capacity change from 0 to 256 [ 172.867492][ T8306] exfat: Deprecated parameter 'namecase' [ 172.874332][ T8308] netlink: 'syz.0.1682': attribute type 2 has an invalid length. [ 172.910381][ T8306] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 172.940987][ T8273] loop2: detected capacity change from 0 to 32768 [ 172.983298][ T8308] netlink: 'syz.0.1682': attribute type 2 has an invalid length. [ 173.017085][ T8308] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1682'. [ 173.105925][ T8273] XFS (loop2): Mounting V5 Filesystem [ 173.122877][ T8320] loop0: detected capacity change from 0 to 512 [ 173.290450][ T8273] XFS (loop2): Ending clean mount [ 173.301570][ T8320] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 173.316893][ T8320] ext4 filesystem being mounted at /362/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.426593][ T4184] XFS (loop2): Unmounting Filesystem [ 173.481111][ T8287] loop1: detected capacity change from 0 to 40427 [ 173.572661][ T8338] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1695'. [ 173.609377][ T8287] F2FS-fs (loop1): Invalid log blocks per segment (4278190089) [ 173.658156][ T8287] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 173.679465][ T8287] F2FS-fs (loop1): invalid crc value [ 173.734419][ T8287] F2FS-fs (loop1): Found nat_bits in checkpoint [ 173.962069][ T8287] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 173.984033][ T8287] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 174.362215][ T8374] EXT4-fs (loop2): inline encryption not supported [ 174.409557][ T8374] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 174.430169][ T8374] EXT4-fs (loop2): invalid journal inode [ 174.435905][ T8374] EXT4-fs (loop2): can't get journal size [ 174.476413][ T8374] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,norecovery,inlinecrypt,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 174.712191][ T8383] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.777088][ T26] audit: type=1800 audit(1769865794.163:56): pid=8383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1714" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 175.007548][ T8404] hugetlbfs: Bad value 'x' for mount option 'nr_inodes' [ 175.007548][ T8404] [ 175.055573][ T8394] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 175.127756][ T8394] EXT4-fs (loop4): Online resizing not supported with bigalloc [ 175.141720][ T8414] erofs: (device loop3): mounted with root inode @ nid 36. [ 175.498187][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1751'. [ 175.580370][ T8445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.615961][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.630122][ T8445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.642318][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.652637][ T8445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.663474][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.673742][ T8445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.685266][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.695833][ T8445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.716084][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.835969][ T144] hfsplus: b-tree write err: -5, ino 4 [ 176.073724][ T8464] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 176.325030][ T8477] netlink: 'syz.0.1757': attribute type 3 has an invalid length. [ 176.396737][ T6980] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 176.465307][ T8486] set_capacity_and_notify: 8 callbacks suppressed [ 176.465321][ T8486] loop0: detected capacity change from 0 to 256 [ 176.477158][ T8487] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1761'. [ 176.518633][ T5788] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 176.537437][ T8486] exfat: Deprecated parameter 'utf8' [ 176.553112][ T8486] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 176.754935][ T8502] loop1: detected capacity change from 0 to 256 [ 176.786895][ T5788] usb 5-1: Using ep0 maxpacket: 16 [ 176.824620][ T8502] FAT-fs (loop1): Directory bread(block 64) failed [ 176.831858][ T6980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 176.848206][ T6980] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 176.864283][ T8502] FAT-fs (loop1): Directory bread(block 65) failed [ 176.873684][ T8502] FAT-fs (loop1): Directory bread(block 66) failed [ 176.882675][ T8502] FAT-fs (loop1): Directory bread(block 67) failed [ 176.892619][ T8502] FAT-fs (loop1): Directory bread(block 68) failed [ 176.899453][ T8502] FAT-fs (loop1): Directory bread(block 69) failed [ 176.906143][ T8502] FAT-fs (loop1): Directory bread(block 70) failed [ 176.914088][ T8502] FAT-fs (loop1): Directory bread(block 71) failed [ 176.921036][ T8502] FAT-fs (loop1): Directory bread(block 72) failed [ 176.928450][ T5788] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 176.942197][ T5788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.950892][ T8502] FAT-fs (loop1): Directory bread(block 73) failed [ 176.967910][ T5788] usb 5-1: config 0 descriptor?? [ 176.974314][ T8504] loop0: detected capacity change from 0 to 4096 [ 177.005080][ T8504] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 177.022407][ T5788] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 177.036751][ T6980] usb 4-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 177.052678][ T6980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.076561][ T6980] usb 4-1: Product: syz [ 177.084111][ T6980] usb 4-1: Manufacturer: syz [ 177.093314][ T6980] usb 4-1: SerialNumber: syz [ 177.105401][ T6980] usb 4-1: config 0 descriptor?? [ 177.350704][ T26] audit: type=1326 audit(1769865796.733:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.2.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4265a66eb9 code=0x7fc00000 [ 177.421352][ T8513] loop1: detected capacity change from 0 to 4096 [ 177.431451][ T26] audit: type=1326 audit(1769865796.733:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.2.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4265a66eb9 code=0x7fc00000 [ 177.483673][ T26] audit: type=1326 audit(1769865796.733:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.2.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4265a66eb9 code=0x7fc00000 [ 177.516275][ T26] audit: type=1326 audit(1769865796.733:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.2.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4265a66eb9 code=0x7fc00000 [ 177.541636][ T8522] loop2: detected capacity change from 0 to 1024 [ 177.555465][ T26] audit: type=1326 audit(1769865796.733:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.2.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4265a66eb9 code=0x7fc00000 [ 177.560547][ T8521] loop0: detected capacity change from 0 to 4096 [ 177.587157][ T26] audit: type=1326 audit(1769865796.733:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.2.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4265a66eb9 code=0x7fc00000 [ 177.614374][ T26] audit: type=1326 audit(1769865796.733:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.2.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4265a66eb9 code=0x7fc00000 [ 177.640304][ T8522] EXT4-fs (loop2): Unrecognized mount option "hash" or missing value [ 177.651063][ T8513] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 177.655364][ T4242] usb 4-1: USB disconnect, device number 13 [ 177.669827][ T26] audit: type=1326 audit(1769865796.733:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.2.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4265a66eb9 code=0x7fc00000 [ 177.674764][ T8521] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 177.707309][ T26] audit: type=1326 audit(1769865796.733:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.2.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4265a66eb9 code=0x7fc00000 [ 177.716851][ T5788] gspca_sonixj: reg_w1 err -71 [ 177.741460][ T5788] sonixj: probe of 5-1:0.0 failed with error -71 [ 177.760634][ T5788] usb 5-1: USB disconnect, device number 14 [ 177.770576][ T8521] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 177.859468][ T8523] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.014559][ T4432] udevd[4432]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.081543][ T8530] loop0: detected capacity change from 0 to 256 [ 178.355108][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1796'. [ 178.383517][ T8541] device veth0_to_team entered promiscuous mode [ 178.483263][ T8546] xt_l2tp: v2 sid > 0xffff: 1114112 [ 178.593867][ T8550] loop4: detected capacity change from 0 to 64 [ 178.696830][ T8550] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 178.764694][ T8560] loop2: detected capacity change from 0 to 256 [ 178.888334][ T8560] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 178.988069][ T8560] exFAT-fs (loop2): hint_cluster is invalid (17) [ 179.014780][ T8571] loop1: detected capacity change from 0 to 512 [ 179.152127][ T8571] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 179.233279][ T8571] EXT4-fs (loop1): 1 truncate cleaned up [ 179.243992][ T8571] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 179.327688][ T8582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1804'. [ 179.411778][ T8582] netlink: 'syz.2.1804': attribute type 2 has an invalid length. [ 179.423602][ T8582] netlink: 'syz.2.1804': attribute type 1 has an invalid length. [ 179.444585][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1804'. [ 179.887203][ T4786] hfsplus: b-tree write err: -5, ino 4 [ 180.064914][ T8608] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lW»=¸Ý•¹µ«= [ 180.071488][ T8608] [U] J"—e:ÀÆ" [ 180.117960][ T8606] [U] ­Ý‘M [ 180.261855][ T8614] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 180.318959][ T8614] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.378014][ T8614] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 180.555884][ T8627] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1826'. [ 180.576888][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 180.576901][ T26] audit: type=1326 audit(1769865799.963:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.1.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e6f7eeb9 code=0x7fc00000 [ 180.606704][ T8627] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1826'. [ 180.646904][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 180.653004][ T5788] Bluetooth: hci4: command 0x0406 tx timeout [ 180.665301][ T4794] Bluetooth: hci0: command 0x0406 tx timeout [ 180.697494][ T5788] Bluetooth: hci2: command 0x0406 tx timeout [ 180.736525][ T26] audit: type=1326 audit(1769865799.963:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.1.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e6f7eeb9 code=0x7fc00000 [ 180.805279][ T144] tipc: Subscription rejected, illegal request [ 180.846019][ T26] audit: type=1326 audit(1769865799.963:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.1.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e6f7eeb9 code=0x7fc00000 [ 180.933959][ T26] audit: type=1326 audit(1769865799.963:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.1.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e6f7eeb9 code=0x7fc00000 [ 180.979919][ T26] audit: type=1326 audit(1769865799.963:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.1.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e6f7eeb9 code=0x7fc00000 [ 181.031860][ T26] audit: type=1326 audit(1769865799.963:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.1.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e6f7eeb9 code=0x7fc00000 [ 181.090586][ T8637] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 181.148528][ T26] audit: type=1326 audit(1769865799.963:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.1.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e6f7eeb9 code=0x7fc00000 [ 181.159852][ T8637] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 181.296840][ T26] audit: type=1326 audit(1769865799.963:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.1.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e6f7eeb9 code=0x7fc00000 [ 181.357469][ T8637] ntfs: volume version 3.1. [ 181.746840][ T7270] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 181.774760][ T8666] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 182.062290][ T8679] set_capacity_and_notify: 5 callbacks suppressed [ 182.062305][ T8679] loop2: detected capacity change from 0 to 256 [ 182.116725][ T7270] usb 4-1: config 0 has an invalid interface number: 84 but max is 0 [ 182.135040][ T7270] usb 4-1: config 0 has no interface number 0 [ 182.147832][ T8679] exfat: Deprecated parameter 'utf8' [ 182.153225][ T8679] exfat: Deprecated parameter 'namecase' [ 182.162051][ T7270] usb 4-1: config 0 interface 84 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 182.185818][ T8679] exfat: Deprecated parameter 'utf8' [ 182.227011][ T8682] loop4: detected capacity change from 0 to 1024 [ 182.236693][ T7270] usb 4-1: config 0 interface 84 has no altsetting 0 [ 182.246847][ T7270] usb 4-1: New USB device found, idVendor=0eef, idProduct=0002, bcdDevice=50.d6 [ 182.259518][ T8679] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4b823b56, utbl_chksum : 0xe619d30d) [ 182.286579][ T7270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.333117][ T7270] usb 4-1: config 0 descriptor?? [ 182.433047][ T1245] hfsplus: b-tree write err: -5, ino 4 [ 182.515523][ T8689] loop2: detected capacity change from 0 to 512 [ 182.636763][ T7270] usb 4-1: string descriptor 0 read error: -71 [ 182.656167][ T8673] loop0: detected capacity change from 0 to 32768 [ 182.665810][ T8689] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1853: attempt to clear invalid blocks 2 len 1 [ 182.686832][ T7270] usbtouchscreen: probe of 4-1:0.84 failed with error -71 [ 182.729591][ T7270] usb 4-1: USB disconnect, device number 14 [ 182.740218][ T8689] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 182.838171][ T8689] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1853: invalid indirect mapped block 1819239214 (level 0) [ 182.857681][ T8673] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 182.877887][ T8689] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1853: invalid indirect mapped block 1819239214 (level 1) [ 182.902355][ T8673] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 182.932911][ T8689] EXT4-fs (loop2): 1 truncate cleaned up [ 182.946532][ T8689] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000003,,errors=continue. Quota mode: none. [ 183.059489][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 183.347700][ T8711] loop4: detected capacity change from 0 to 128 [ 183.422930][ T8711] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 183.475490][ T8711] hpfs: filesystem error: improperly stopped [ 183.497193][ T8711] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 183.542151][ T8711] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 183.584998][ T8711] hpfs: You really don't want any checks? You are crazy... [ 183.599354][ T8711] hpfs: hpfs_map_sector(): read error [ 183.626629][ T8711] hpfs: code page support is disabled [ 183.632119][ T8711] hpfs: hpfs_map_4sectors(): unaligned read [ 183.679619][ T8711] hpfs: hpfs_map_4sectors(): unaligned read [ 183.685561][ T8711] hpfs: filesystem error: unable to find root dir [ 183.763181][ T8722] netlink: 'syz.0.1868': attribute type 3 has an invalid length. [ 184.131478][ T8710] loop2: detected capacity change from 0 to 40427 [ 184.236023][ T8738] loop3: detected capacity change from 0 to 512 [ 184.251098][ T8710] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 184.265674][ T8710] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 184.291236][ T8710] F2FS-fs (loop2): invalid crc value [ 184.343101][ T8710] F2FS-fs (loop2): Found nat_bits in checkpoint [ 184.395606][ T8738] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 184.497891][ T8738] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 184.516563][ T8738] EXT4-fs (loop3): 1 truncate cleaned up [ 184.522282][ T8738] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,grpjquota="data_err=ignore,noload,nombcache,usrjquota="errors=continue,errors=remount-ro,barrier,. Quota mode: writeback. [ 184.567701][ T8710] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 184.585016][ T8710] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 184.612401][ T8724] loop0: detected capacity change from 0 to 40427 [ 184.667042][ T8724] F2FS-fs (loop0): invalid crc value [ 184.676310][ T8724] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 184.695633][ T8738] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #2: block 4: comm syz.3.1875: lblock 0 mapped to illegal pblock 4 (length 1) [ 184.745056][ T8724] F2FS-fs (loop0): Found nat_bits in checkpoint [ 184.779359][ T8738] EXT4-fs (loop3): Remounting filesystem read-only [ 184.946169][ T8724] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 185.001776][ T8724] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 185.057148][ T8724] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 185.222750][ T8766] loop4: detected capacity change from 0 to 512 [ 185.293930][ T8766] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1886: iget: bad i_size value: 38620345925642 [ 185.404491][ T8776] loop2: detected capacity change from 0 to 256 [ 185.424214][ T8766] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1886: couldn't read orphan inode 15 (err -117) [ 185.510495][ T8776] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 185.526678][ T4794] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 185.535270][ T8766] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 185.567005][ T8776] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 185.645042][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 185.645057][ T26] audit: type=1800 audit(1769865805.023:109): pid=8776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1888" name="file2" dev="loop2" ino=1048801 res=0 errno=0 [ 185.786616][ T4794] usb 4-1: Using ep0 maxpacket: 8 [ 185.906849][ T4794] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 185.936678][ T4794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.977555][ T4794] usb 4-1: config 0 descriptor?? [ 186.160824][ T8800] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 186.194516][ T8796] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 186.287452][ T8800] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.1902: missing EA_INODE flag [ 186.307836][ T8800] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1902: error while reading EA inode 2 err=-117 [ 186.369885][ T8800] EXT4-fs (loop4): 1 truncate cleaned up [ 186.375655][ T8800] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,nogrpid,,errors=continue. Quota mode: none. [ 186.467998][ T4794] saitek 0003:06A3:0621.001B: unknown main item tag 0x5 [ 186.485789][ T4794] saitek 0003:06A3:0621.001B: item fetching failed at offset 4/5 [ 186.522152][ T4794] saitek 0003:06A3:0621.001B: parse failed [ 186.555946][ T4794] saitek: probe of 0003:06A3:0621.001B failed with error -22 [ 186.654946][ T8821] exfat: Deprecated parameter 'utf8' [ 186.679253][ T4794] usb 4-1: USB disconnect, device number 15 [ 186.685740][ T8821] exfat: Deprecated parameter 'utf8' [ 186.717157][ T8821] exfat: Deprecated parameter 'namecase' [ 186.733079][ T8821] exfat: Deprecated parameter 'utf8' [ 186.788481][ T8821] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf794f3fa, utbl_chksum : 0xe619d30d) [ 186.923130][ T1245] hfsplus: b-tree write err: -5, ino 4 [ 187.202336][ T8813] XFS (loop0): Mounting V5 Filesystem [ 187.459457][ T8813] XFS (loop0): Ending clean mount [ 187.479910][ T8813] XFS (loop0): Quotacheck needed: Please wait. [ 187.548130][ T8813] XFS (loop0): Quotacheck: Done. [ 187.575659][ T26] audit: type=1800 audit(1769865806.953:110): pid=8813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1906" name="file1" dev="loop0" ino=9286 res=0 errno=0 [ 187.685434][ T4186] XFS (loop0): Unmounting Filesystem [ 187.727845][ T8862] sp0: Synchronizing with TNC [ 187.769235][ T8848] set_capacity_and_notify: 5 callbacks suppressed [ 187.769249][ T8848] loop2: detected capacity change from 0 to 32768 [ 187.872268][ T8848] ERROR: (device loop2): diWrite: ixpxd invalid [ 187.872268][ T8848] [ 187.907020][ T8848] ERROR: (device loop2): remounting filesystem as read-only [ 187.949576][ T8848] ERROR: (device loop2): txCommit: [ 187.949576][ T8848] [ 187.997183][ T8835] loop1: detected capacity change from 0 to 32768 [ 188.042304][ T8865] loop4: detected capacity change from 0 to 2048 [ 188.206717][ T8835] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 188.215410][ T8835] BTRFS info (device loop1): using free space tree [ 188.265536][ T8835] BTRFS info (device loop1): has skinny extents [ 188.366105][ T8872] loop2: detected capacity change from 0 to 128 [ 188.378219][ T8872] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 188.426522][ T8872] hpfs: filesystem error: improperly stopped [ 188.435782][ T8872] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 188.471592][ T8860] loop3: detected capacity change from 0 to 32768 [ 188.475788][ T8872] hpfs: You really don't want any checks? You are crazy... [ 188.486780][ T8872] hpfs: hpfs_map_sector(): read error [ 188.492189][ T8872] hpfs: code page support is disabled [ 188.497759][ T8872] hpfs: hpfs_map_4sectors(): unaligned read [ 188.509879][ T8872] hpfs: hpfs_map_4sectors(): unaligned read [ 188.515799][ T8872] hpfs: filesystem error: unable to find root dir [ 188.618087][ T8891] loop0: detected capacity change from 0 to 64 [ 188.722669][ T8835] BTRFS info (device loop1): enabling ssd optimizations [ 188.948464][ T8906] loop2: detected capacity change from 0 to 512 [ 188.958939][ T8907] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1938'. [ 189.047515][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1938'. [ 189.071527][ T8906] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 189.125955][ T8906] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1937: invalid indirect mapped block 10 (level 1) [ 189.143075][ T8906] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1937: invalid indirect mapped block 8 (level 1) [ 189.159740][ T8906] EXT4-fs (loop2): 1 truncate cleaned up [ 189.165516][ T8906] EXT4-fs (loop2): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 189.299565][ T8916] loop4: detected capacity change from 0 to 256 [ 189.381745][ T8916] exfat: Deprecated parameter 'utf8' [ 189.401129][ T8916] exfat: Deprecated parameter 'namecase' [ 189.479933][ T8916] exfat: Deprecated parameter 'namecase' [ 189.511565][ T8916] exfat: Deprecated parameter 'utf8' [ 189.548591][ T8924] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 189.645656][ T8916] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 189.956622][ T8947] program syz.3.1954 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.119328][ T8958] loop0: detected capacity change from 0 to 1024 [ 190.149331][ T4235] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 190.335476][ T144] hfsplus: b-tree write err: -5, ino 4 [ 190.433916][ T8971] loop3: detected capacity change from 0 to 2048 [ 190.521733][ T8971] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 190.576802][ T4235] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 190.595017][ T4235] usb 2-1: config 1 has no interface number 0 [ 190.601238][ T4235] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 190.611910][ T4242] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 190.632164][ T4235] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.645529][ T8971] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 190.824227][ T8979] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1970 (8979) [ 190.838058][ T4235] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 190.847706][ T4235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.856254][ T4235] usb 2-1: Product: syz [ 190.860979][ T4235] usb 2-1: Manufacturer: syz [ 190.865599][ T4235] usb 2-1: SerialNumber: syz [ 190.897284][ T8979] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 190.906503][ T4242] usb 3-1: Using ep0 maxpacket: 8 [ 190.916841][ T8979] BTRFS info (device loop0): using free space tree [ 190.927324][ T8938] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 190.943912][ T8979] BTRFS info (device loop0): has skinny extents [ 190.952065][ T4235] usb 2-1: Expected 3 endpoints, found: 2 [ 191.017109][ T8979] BTRFS info (device loop0): enabling ssd optimizations [ 191.081183][ T4242] usb 3-1: unable to get BOS descriptor or descriptor too short [ 191.183783][ T4242] usb 3-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 191.194880][ T4242] usb 3-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0 [ 191.204858][ T4242] usb 3-1: config 12 interface 0 has no altsetting 0 [ 191.246693][ T4792] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 191.392086][ T4242] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 191.420276][ T4242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.434676][ T4242] usb 3-1: Product: syz [ 191.439095][ T4242] usb 3-1: Manufacturer: syz [ 191.443723][ T4242] usb 3-1: SerialNumber: syz [ 191.496640][ T4792] usb 4-1: Using ep0 maxpacket: 8 [ 191.514065][ T9012] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 191.599551][ T9019] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 191.656734][ T4792] usb 4-1: unable to get BOS descriptor or descriptor too short [ 191.736924][ T4792] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 191.750898][ T4792] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 191.762140][ T4792] usb 4-1: config 4 has no interface number 0 [ 191.832688][ T4242] usb 3-1: selecting invalid altsetting 0 [ 191.861731][ T9027] hfsplus: failed to load root directory [ 191.988869][ T4242] snd-usb-audio: probe of 3-1:12.0 failed with error -12 [ 192.006772][ T4792] usb 4-1: string descriptor 0 read error: -22 [ 192.014251][ T4792] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 192.025782][ T4242] usb 3-1: USB disconnect, device number 12 [ 192.091432][ T9036] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 192.102676][ T4792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.184500][ T9039] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 192.192479][ T4792] usb 4-1: Found UVC 0.02 device (04f2:b746) [ 192.201722][ T4792] usb 4-1: No valid video chain found. [ 192.257466][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.312933][ T9044] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.344227][ T9043] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 192.386670][ T9043] Remounting filesystem read-only [ 192.406776][ T4792] usb 4-1: USB disconnect, device number 16 [ 192.476640][ T6980] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 192.726732][ T4794] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 192.756684][ T6980] usb 1-1: Using ep0 maxpacket: 16 [ 192.837818][ T7] usb 2-1: USB disconnect, device number 11 [ 192.898836][ T6980] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 192.925722][ T6980] usb 1-1: config 0 has no interface number 0 [ 192.966742][ T4794] usb 5-1: Using ep0 maxpacket: 16 [ 193.087743][ T6980] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 193.091634][ T4794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.115371][ T6980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.115585][ T4794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.136371][ T6980] usb 1-1: Product: syz [ 193.151769][ T6980] usb 1-1: Manufacturer: syz [ 193.154046][ T4794] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 193.157674][ T6980] usb 1-1: SerialNumber: syz [ 193.176553][ T4794] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 193.187206][ T4794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.208703][ T6980] usb 1-1: config 0 descriptor?? [ 193.237182][ T4794] usb 5-1: config 0 descriptor?? [ 193.273316][ T6980] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 193.404478][ T9084] tipc: Started in network mode [ 193.409901][ T9084] tipc: Node identity -, cluster identity 4711 [ 193.503571][ T9086] program syz.2.2011 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.537844][ T9091] set_capacity_and_notify: 7 callbacks suppressed [ 193.537859][ T9091] loop3: detected capacity change from 0 to 16 [ 193.558858][ T9091] erofs: (device loop3): mounted with root inode @ nid 36. [ 193.571146][ T9091] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 193.595818][ T9091] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -46 in[60, 4036] out[1851] [ 193.616580][ T9091] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 193.708736][ T4794] microsoft 0003:045E:07DA.001C: bogus close delimiter [ 193.715651][ T4794] microsoft 0003:045E:07DA.001C: item 0 4 2 10 parsing failed [ 193.724112][ T4794] microsoft 0003:045E:07DA.001C: parse failed [ 193.730890][ T4794] microsoft: probe of 0003:045E:07DA.001C failed with error -22 [ 193.823719][ T9097] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 193.833476][ T9097] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 193.896709][ T6980] gspca_spca1528: reg_w err -71 [ 193.924013][ T4234] usb 5-1: USB disconnect, device number 15 [ 193.934485][ T6980] spca1528: probe of 1-1:0.1 failed with error -71 [ 193.936963][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.947351][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.950380][ T6980] usb 1-1: USB disconnect, device number 12 [ 194.141682][ T4794] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 194.164863][ T9108] loop1: detected capacity change from 0 to 1024 [ 194.462448][ T9116] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2025'. [ 194.490356][ T9118] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 194.526810][ T4794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.546870][ T4794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.602499][ T4794] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 194.632570][ T4794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.673741][ T4794] usb 4-1: config 0 descriptor?? [ 194.810423][ T9134] loop4: detected capacity change from 0 to 2048 [ 194.839581][ T9134] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 194.882101][ T9134] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.151360][ T9150] loop1: detected capacity change from 0 to 64 [ 195.177550][ T4794] lg-g15 0003:046D:C222.001D: collection stack underflow [ 195.184637][ T4794] lg-g15 0003:046D:C222.001D: item 0 0 0 12 parsing failed [ 195.247693][ T4794] lg-g15: probe of 0003:046D:C222.001D failed with error -22 [ 195.370291][ T21] usb 4-1: USB disconnect, device number 17 [ 195.427067][ T9168] loop0: detected capacity change from 0 to 8 [ 195.569539][ T9168] SQUASHFS error: xz decompression failed, data probably corrupt [ 195.580727][ T9180] loop2: detected capacity change from 0 to 512 [ 195.591976][ T9168] SQUASHFS error: Failed to read block 0x108: -5 [ 195.600325][ T9168] SQUASHFS error: Unable to read metadata cache entry [106] [ 195.613837][ T9168] SQUASHFS error: Unable to read inode 0x11f [ 195.661594][ T9180] EXT4-fs (loop2): Ignoring removed bh option [ 195.762872][ T9180] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 195.807046][ T9180] ext4 filesystem being mounted at /405/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.826557][ T4794] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 195.875884][ T9180] EXT4-fs error (device loop2): ext4_resize_begin:61: comm syz.2.2056: resize_inode disabled but reserved GDT blocks non-zero [ 195.894968][ T9186] loop0: detected capacity change from 0 to 4096 [ 195.974263][ T9188] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2058'. [ 196.034869][ T4186] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 196.042298][ T4186] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 196.216785][ T4794] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 193, using maximum allowed: 30 [ 196.239839][ T4794] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 196.291054][ T4794] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 196.306044][ T4794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.328810][ T4794] usb 5-1: config 0 descriptor?? [ 196.576703][ T4234] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 196.595984][ T9218] loop3: detected capacity change from 0 to 2048 [ 196.612858][ T9218] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 196.656076][ T9220] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 196.811207][ T4794] magicmouse 0003:05AC:0269.001E: collection stack underflow [ 196.833416][ T4794] magicmouse 0003:05AC:0269.001E: item 0 0 0 12 parsing failed [ 196.853875][ T4794] magicmouse 0003:05AC:0269.001E: magicmouse hid parse failed [ 196.863707][ T4794] magicmouse: probe of 0003:05AC:0269.001E failed with error -22 [ 196.946720][ T4234] usb 1-1: not running at top speed; connect to a high speed hub [ 197.010672][ T4792] usb 5-1: USB disconnect, device number 16 [ 197.047816][ T4234] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 197.066499][ T4234] usb 1-1: config 1 has no interface number 1 [ 197.072961][ T4234] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 197.161951][ T9222] loop1: detected capacity change from 0 to 32768 [ 197.213689][ T9222] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 197.256554][ T9222] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 197.266916][ T4794] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 197.286956][ T4234] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 197.296249][ T4234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.325572][ T9238] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2082'. [ 197.339304][ T4234] usb 1-1: Product: syz [ 197.343520][ T4234] usb 1-1: Manufacturer: syz [ 197.350791][ T4234] usb 1-1: SerialNumber: syz [ 197.364754][ T9222] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 197.418961][ T9222] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 197.556884][ T4794] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 197.735920][ T9254] netlink: 'syz.2.2090': attribute type 4 has an invalid length. [ 197.776851][ T4234] usb 1-1: failed to enable PITCH for EP 0x82 [ 197.843241][ T4234] usb 1-1: USB disconnect, device number 13 [ 198.167881][ T8532] udevd[8532]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.193227][ T9250] loop4: detected capacity change from 0 to 32768 [ 198.257294][ T9250] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 198.280624][ T9250] JBD2: Ignoring recovery information on journal [ 198.376750][ T4794] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 198.376779][ T4794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.376798][ T4794] usb 4-1: Product: syz [ 198.376812][ T4794] usb 4-1: Manufacturer: syz [ 198.376825][ T4794] usb 4-1: SerialNumber: syz [ 198.378838][ T4794] usb 4-1: config 0 descriptor?? [ 198.417431][ T9250] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 198.419157][ T4794] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 198.426917][ T4794] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 198.446762][ T4794] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 198.446819][ T4794] usb 4-1: media controller created [ 198.477543][ T4794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 198.515946][ T4192] ocfs2: Unmounting device (7,4) on (node local) [ 198.613944][ T4794] DVB: Unable to find symbol mt352_attach() [ 198.621785][ T9232] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 198.687761][ T4794] DVB: Unable to find symbol nxt6000_attach() [ 198.687776][ T4794] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 198.750152][ T4794] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input32 [ 198.910903][ T4794] dvb-usb: schedule remote query interval to 1000 msecs. [ 198.928522][ T4794] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 198.946373][ T4794] dvb-usb: bulk message failed: -22 (7/0) [ 198.978613][ T9294] bridge0: port 3(vlan2) entered blocking state [ 198.984902][ T9294] bridge0: port 3(vlan2) entered disabled state [ 198.994286][ T4794] dvb-usb: bulk message failed: -22 (7/0) [ 199.027862][ T4794] usb 4-1: USB disconnect, device number 18 [ 199.114589][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2110'. [ 199.181925][ T4794] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 199.301102][ T9308] loop1: detected capacity change from 0 to 256 [ 199.305062][ T9307] loop4: detected capacity change from 0 to 256 [ 199.341041][ T4234] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 199.382372][ T9308] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 199.426647][ T9307] FAT-fs (loop4): Directory bread(block 64) failed [ 199.433243][ T9307] FAT-fs (loop4): Directory bread(block 65) failed [ 199.451043][ T9308] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 199.489904][ T9308] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 199.507323][ T9307] FAT-fs (loop4): Directory bread(block 66) failed [ 199.514019][ T9307] FAT-fs (loop4): Directory bread(block 67) failed [ 199.562091][ T9307] FAT-fs (loop4): Directory bread(block 68) failed [ 199.579721][ T9307] FAT-fs (loop4): Directory bread(block 69) failed [ 199.601819][ T9307] FAT-fs (loop4): Directory bread(block 70) failed [ 199.619175][ T9307] FAT-fs (loop4): Directory bread(block 71) failed [ 199.636589][ T4234] usb 1-1: Using ep0 maxpacket: 32 [ 199.650086][ T9307] FAT-fs (loop4): Directory bread(block 72) failed [ 199.665345][ T9307] FAT-fs (loop4): Directory bread(block 73) failed [ 199.683454][ T9322] overlayfs: unrecognized mount option "\']*=°¢°©æ[\1\Ãåý07†ðÿ$Áܲ¹" or missing value [ 199.771562][ T4234] usb 1-1: config 0 has an invalid interface number: 191 but max is 0 [ 199.783882][ T4234] usb 1-1: config 0 has no interface number 0 [ 199.791156][ T4234] usb 1-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 200.006888][ T4234] usb 1-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 200.015982][ T4234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.086339][ T4234] usb 1-1: Product: syz [ 200.092957][ T4234] usb 1-1: Manufacturer: syz [ 200.106501][ T4234] usb 1-1: SerialNumber: syz [ 200.137297][ T4234] usb 1-1: config 0 descriptor?? [ 200.157867][ T9297] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 200.252818][ T9320] loop3: detected capacity change from 0 to 32768 [ 200.275209][ T9348] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2133'. [ 200.321982][ T9347] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2133'. [ 200.390136][ T9297] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 200.445453][ T9320] XFS (loop3): Mounting V5 Filesystem [ 200.536519][ T6980] XFS (loop3): Metadata CRC error detected at xfs_agf_read_verify+0x192/0x250, xfs_agf block 0x1 [ 200.556571][ T6980] XFS (loop3): Unmount and run xfs_repair [ 200.580736][ T9372] loop1: detected capacity change from 0 to 8192 [ 200.597398][ T6980] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 200.604816][ T6980] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 10 00 XAGF............ [ 200.676801][ T4234] asix 1-1:0.191 (unnamed net_device) (uninitialized): invalid hw address, using random [ 200.690454][ T9372] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 200.706489][ T6980] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01 ................ [ 200.736609][ T9372] REISERFS (device loop1): using ordered data mode [ 200.743153][ T9372] reiserfs: using flush barriers [ 200.783431][ T6980] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 200.796157][ T9377] loop2: detected capacity change from 0 to 164 [ 200.802630][ T9372] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 200.820692][ T9372] REISERFS (device loop1): checking transaction log (loop1) [ 200.835861][ T6980] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 200.853209][ T9372] REISERFS (device loop1): Using r5 hash to sort names [ 200.870655][ T9372] reiserfs: enabling write barrier flush mode [ 200.875235][ T6980] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 200.890811][ T9372] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 200.906817][ T4234] asix 1-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 200.921660][ T9377] rock: directory entry would overflow storage [ 200.926576][ T4234] asix 1-1:0.191 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 200.941889][ T9377] rock: sig=0x66, size=4, remaining=3 [ 200.944580][ T6980] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 200.948899][ T9372] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 200.966876][ T4234] asix: probe of 1-1:0.191 failed with error -71 [ 200.985699][ T6980] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 201.004973][ T9372] REISERFS (device loop1): Remounting filesystem read-only [ 201.012555][ T9377] rock: directory entry would overflow storage [ 201.019815][ T4234] usb 1-1: USB disconnect, device number 14 [ 201.029752][ T9372] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 201.046531][ T9377] rock: sig=0x66, size=4, remaining=3 [ 201.055601][ T9372] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 201.075574][ T6980] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 201.116253][ T9320] XFS (loop3): metadata I/O error in "xfs_read_agf+0x252/0x510" at daddr 0x1 len 1 error 74 [ 201.134664][ T9370] loop4: detected capacity change from 0 to 32768 [ 201.148132][ T9320] XFS (loop3): Error -117 reserving per-AG metadata reserve pool. [ 201.177570][ T9320] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1bf/0x1f0 (fs/xfs/xfs_fsops.c:577). Shutting down filesystem. [ 201.193579][ T9372] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 201.219509][ T9320] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 201.235355][ T9372] REISERFS error (device loop1): zam-7001 reiserfs_find_entry: io error [ 201.275216][ T9320] XFS (loop3): Ending clean mount [ 201.288808][ T9320] XFS (loop3): Failed to initialize disk quotas. [ 201.328530][ T9372] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 201.406680][ T4185] XFS (loop3): Unmounting Filesystem [ 201.429331][ T9372] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 201.475345][ T9372] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 201.543928][ T9372] REISERFS warning (device loop1): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 201.696643][ T9372] REISERFS warning (device loop1): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 201.805971][ T4191] ------------[ cut here ]------------ [ 201.836291][ T4191] kernel BUG at fs/reiserfs/journal.c:1913! [ 201.852896][ T4191] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 201.859007][ T4191] CPU: 1 PID: 4191 Comm: syz-executor Not tainted syzkaller #0 [ 201.866594][ T4191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.876672][ T4191] RIP: 0010:do_journal_release+0x4e2/0x4f0 [ 201.882503][ T4191] Code: bd ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 e8 85 bd ff e9 f9 fc ff ff e8 ce 81 78 ff <0f> 0b e8 c7 81 78 ff 0f 0b 0f 1f 44 00 00 41 57 41 56 53 48 89 f3 [ 201.902156][ T4191] RSP: 0018:ffffc90002f3fb80 EFLAGS: 00010293 [ 201.908251][ T4191] RAX: ffffffff82009dd2 RBX: 1ffff920005e7f74 RCX: ffff88801a5b8000 [ 201.916247][ T4191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 201.924247][ T4191] RBP: ffffc90002f3fc78 R08: ffffc90002f3fbf7 R09: ffffc90002f3fbc0 [ 201.932235][ T4191] R10: dffffc0000000000 R11: fffff520005e7f7f R12: ffffc900047f1000 [ 201.940226][ T4191] R13: dffffc0000000000 R14: ffff88801b198678 R15: 0000000000000000 [ 201.948219][ T4191] FS: 00005555730a3500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 201.957277][ T4191] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 201.963876][ T4191] CR2: 000000110c30a3b9 CR3: 0000000063152000 CR4: 00000000003506e0 [ 201.971858][ T4191] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 201.979842][ T4191] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 201.987836][ T4191] Call Trace: [ 201.991134][ T4191] [ 201.994109][ T4191] ? journal_release+0x30/0x30 [ 201.998916][ T4191] ? do_raw_spin_unlock+0x11d/0x230 [ 202.004144][ T4191] journal_release+0x1b/0x30 [ 202.008747][ T4191] reiserfs_put_super+0x267/0x510 [ 202.013792][ T4191] ? hook_inode_free_security+0xa0/0xa0 [ 202.019351][ T4191] ? evict_inodes+0x642/0x6a0 [ 202.024041][ T4191] ? reiserfs_dirty_inode+0x260/0x260 [ 202.029435][ T4191] ? reiserfs_dirty_inode+0x260/0x260 [ 202.034838][ T4191] generic_shutdown_super+0x130/0x300 [ 202.040257][ T4191] kill_block_super+0x7c/0xe0 [ 202.044956][ T4191] deactivate_locked_super+0x93/0xf0 [ 202.050271][ T4191] cleanup_mnt+0x42d/0x4e0 [ 202.054714][ T4191] ? lockdep_hardirqs_on+0x94/0x140 [ 202.059935][ T4191] task_work_run+0x125/0x1a0 [ 202.064540][ T4191] exit_to_user_mode_loop+0x10f/0x130 [ 202.069937][ T4191] exit_to_user_mode_prepare+0xee/0x180 [ 202.075501][ T4191] syscall_exit_to_user_mode+0x16/0x40 [ 202.080974][ T4191] do_syscall_64+0x58/0xa0 [ 202.085405][ T4191] ? clear_bhb_loop+0x30/0x80 [ 202.090102][ T4191] ? clear_bhb_loop+0x30/0x80 [ 202.094798][ T4191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 202.100706][ T4191] RIP: 0033:0x7f18e6f80117 [ 202.105132][ T4191] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 202.124750][ T4191] RSP: 002b:00007ffc69d73f28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 202.133182][ T4191] RAX: 0000000000000000 RBX: 00007f18e6fe871f RCX: 00007f18e6f80117 [ 202.141171][ T4191] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc69d73fe0 [ 202.149151][ T4191] RBP: 00007ffc69d73fe0 R08: 00007ffc69d74fe0 R09: 00000000ffffffff [ 202.157142][ T4191] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc69d75070 [ 202.165135][ T4191] R13: 00007f18e6fe871f R14: 000000000003141a R15: 00007ffc69d750b0 [ 202.173123][ T4191] [ 202.176161][ T4191] Modules linked in: [ 202.186339][ T4191] ---[ end trace de70498d9ff323a2 ]--- [ 202.209379][ T4191] RIP: 0010:do_journal_release+0x4e2/0x4f0 [ 202.217340][ T4191] Code: bd ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 e8 85 bd ff e9 f9 fc ff ff e8 ce 81 78 ff <0f> 0b e8 c7 81 78 ff 0f 0b 0f 1f 44 00 00 41 57 41 56 53 48 89 f3 [ 202.220785][ T9398] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2144'. [ 202.249430][ T4191] RSP: 0018:ffffc90002f3fb80 EFLAGS: 00010293 [ 202.262022][ T4191] RAX: ffffffff82009dd2 RBX: 1ffff920005e7f74 RCX: ffff88801a5b8000 [ 202.270427][ T4191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.284288][ T4191] RBP: ffffc90002f3fc78 R08: ffffc90002f3fbf7 R09: ffffc90002f3fbc0 [ 202.293556][ T4191] R10: dffffc0000000000 R11: fffff520005e7f7f R12: ffffc900047f1000 [ 202.304476][ T4191] R13: dffffc0000000000 R14: ffff88801b198678 R15: 0000000000000000 [ 202.312884][ T4191] FS: 00005555730a3500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 202.323908][ T4191] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 202.330903][ T4794] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 202.340062][ T4191] CR2: 00007efca24f4198 CR3: 0000000063152000 CR4: 00000000003506e0 [ 202.348389][ T4191] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 202.356373][ T4191] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 202.364404][ T4191] Kernel panic - not syncing: Fatal exception [ 202.370822][ T4191] Kernel Offset: disabled [ 202.375162][ T4191] Rebooting in 86400 seconds..