last executing test programs: 1m43.139020747s ago: executing program 3 (id=323): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@acl}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpid}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 1m42.669984185s ago: executing program 3 (id=326): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f00000000c0)={0x0}) 1m42.391582121s ago: executing program 3 (id=328): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 1m42.215223781s ago: executing program 3 (id=329): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc04, &(0x7f0000000100)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000000)='./file2\x00', 0x149) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m41.71353543s ago: executing program 3 (id=333): r0 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 1m41.105313116s ago: executing program 3 (id=338): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000100)=[0x0], 0x3c3c3c3c3c3c415, 0x2, 0x7, 0x0, r1}) 1m40.516204191s ago: executing program 32 (id=338): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000100)=[0x0], 0x3c3c3c3c3c3c415, 0x2, 0x7, 0x0, r1}) 18.775020488s ago: executing program 1 (id=902): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000980)='./file0\x00', 0x2010042, &(0x7f0000000300)={[{@cruft}, {@map_acorn}, {@showassoc}, {@utf8}, {@check_relaxed}, {}, {}, {@overriderock}, {@nocompress}, {@check_strict}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}, {@unhide}, {@hide}, {@session={'session', 0x3d, 0x49}}, {@overriderock}, {}, {@uid={'uid', 0x3d, 0xee00}}], [{@obj_user={'obj_user', 0x3d, 'gid'}}, {@measure}, {@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'h5ssi\x89n\r\xc6\xf3V\xa0Y\xe0\xdd\xf8\xbb:\xa3\xc1G{\a\xc7F\xe3\xd0\xb3\x18\xa2x\xe2\xc9\xd2QO\xa9\x1cUz'}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x65, 0x30, 0x62, 0x36, 0x36, 0x36, 0x34], 0x2d, [0x0, 0x64, 0x62, 0x32], 0x2d, [0x30, 0x38, 0x38, 0x31], 0x2d, [0x66, 0x33, 0x30, 0x33], 0x2d, [0x6360469c2a17242b, 0x32, 0x63, 0x66, 0x64, 0x62, 0x34, 0x37]}}}]}, 0x1, 0x943, &(0x7f0000001500)="$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") madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xffffc000) 18.536387932s ago: executing program 1 (id=903): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000200)="03", 0x1, 0xd010, &(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f00000010c0)=""/4106, &(0x7f0000000000)=0x100a) 18.369023892s ago: executing program 1 (id=907): io_setup(0x66, &(0x7f0000000400)=0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0xc, 0x12) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xe, r1, &(0x7f00000000c0)='-5', 0x12, 0x0, 0x0, 0x4}]) 18.123649316s ago: executing program 1 (id=908): syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000c40), 0xff, 0x4b7, &(0x7f0000000640)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000000)=""/39, 0x27) 17.330366763s ago: executing program 1 (id=916): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) poll(&(0x7f0000000100)=[{r0, 0x720c}], 0x1, 0x100) 14.977133341s ago: executing program 1 (id=924): sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000041400032bbd7000fcdbdf2508000100000000fb0800010000000000080001000200000008000100000000000800010001000000080001"], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000003000000010000000500008b9b3e9f7767757c06040000000f0000000300000008000000560000000200000006000000090000000600000006000000fbffffff04000000"], 0x0, 0x97, 0x0, 0x1, 0x3}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x0, 0xfffffffffffffe43}, 0x68) 14.407740685s ago: executing program 33 (id=924): sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000041400032bbd7000fcdbdf2508000100000000fb0800010000000000080001000200000008000100000000000800010001000000080001"], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000003000000010000000500008b9b3e9f7767757c06040000000f0000000300000008000000560000000200000006000000090000000600000006000000fbffffff04000000"], 0x0, 0x97, 0x0, 0x1, 0x3}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x0, 0xfffffffffffffe43}, 0x68) 6.826763239s ago: executing program 4 (id=978): syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) read$char_usb(r0, 0x0, 0x0) 5.008937086s ago: executing program 4 (id=983): r0 = getpid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x16, &(0x7f0000000000)={0xb, 0xb, 0x6}, 0x0) 4.758369081s ago: executing program 4 (id=984): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.477005557s ago: executing program 4 (id=987): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000040)="9170") 2.904088319s ago: executing program 5 (id=993): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000100)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@noquota}, {@grpquota}, {@discard_size={'discard', 0x3d, 0x4}}, {@errors_continue}, {@quota}, {@discard}, {@grpquota}]}, 0x1, 0x60b9, &(0x7f0000013cc0)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x408, 0x1) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='.\x02\x00') 1.853556311s ago: executing program 4 (id=1002): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) 1.849127231s ago: executing program 2 (id=1010): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a000000040001"], 0x84}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) 1.654410263s ago: executing program 5 (id=1003): r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r0, &(0x7f0000000380)=[{0x3, 0x4, 0x3000}, {0x1, 0xbbdd, 0x1000}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x7fff]) 1.569000338s ago: executing program 2 (id=1005): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) 1.392853758s ago: executing program 0 (id=1006): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7aa, 0x0) 1.323000282s ago: executing program 2 (id=1007): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="44010000100001000000000000000000fe800000000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r2], 0x144}}, 0x18) 972.743153ms ago: executing program 4 (id=1008): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed00000001090224"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 970.630973ms ago: executing program 0 (id=1017): r0 = syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x0, 0x203}, &(0x7f0000000040)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0, 0x80012002}) io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0) 969.944253ms ago: executing program 2 (id=1009): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r0 = syz_io_uring_setup(0x230, &(0x7f0000000080)={0x0, 0x20, 0x10000, 0x0, 0x100}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) 754.761405ms ago: executing program 2 (id=1011): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00030000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) 681.29469ms ago: executing program 0 (id=1012): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffc42, &(0x7f0000000000)={&(0x7f0000000740)={0x2c, 0x0, 0x1, 0x3, 0x0, 0x0, {0x3}, [@CTA_MARK={0x0, 0x8, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004055}, 0x80) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x3, 0x0, @remote, 0x5}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 581.182336ms ago: executing program 2 (id=1013): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r0, 0xe0ffff, 0x19, 0x3) execveat(r0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x100) 560.204687ms ago: executing program 0 (id=1014): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8, 0x3, 0x0, 0x1f, 0x10, 0x15, 0x7}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 505.38636ms ago: executing program 5 (id=1015): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0xc, 0x2, &(0x7f00000009c0)="1600", 0x9, 0x1, 0x16c0, 0x5df, 0x8b, 0x1, 0x9, 'syz0\x00'}) 373.085018ms ago: executing program 5 (id=1016): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='securityfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 301.270452ms ago: executing program 5 (id=1018): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fstat(r0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r1) setfsuid(r1) 185.362689ms ago: executing program 0 (id=1019): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) setresuid(0x0, 0xee01, 0x0) writev(r0, &(0x7f00000003c0), 0x100000000000022d) 40.678807ms ago: executing program 5 (id=1020): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001d40)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0xbe6}}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nogrpid}, {@acl}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = open(&(0x7f0000000080)='./file1\x00', 0x20042, 0x140) r1 = open(&(0x7f0000000000)='./file2\x00', 0x6840, 0x120) copy_file_range(r1, 0x0, r0, 0x0, 0x3df1, 0x0) 0s ago: executing program 0 (id=1021): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): g volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.100561][ T6452] loop3: detected capacity change from 0 to 4096 [ 119.457727][ T6483] loop3: detected capacity change from 0 to 764 [ 119.674202][ T6488] loop3: detected capacity change from 0 to 64 [ 119.783821][ T6490] loop7: detected capacity change from 0 to 7 [ 119.818081][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.827454][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.888271][ T6490] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.916348][ T6490] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.925438][ T6490] ldm_validate_partition_table(): Disk read failed. [ 119.943637][ T6490] Dev loop7: unable to read RDB block 0 [ 119.977358][ T6490] loop7: unable to read partition table [ 120.004206][ T6490] loop7: partition table beyond EOD, truncated [ 120.019193][ T6490] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 120.034309][ T6498] loop0: detected capacity change from 0 to 128 [ 120.061153][ T6498] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 120.097350][ T6498] hpfs: filesystem error: improperly stopped [ 120.103549][ T6498] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 120.155217][ T6498] hpfs: You really don't want any checks? You are crazy... [ 120.163002][ T6498] hpfs: hpfs_map_sector(): read error [ 120.195223][ T6498] hpfs: code page support is disabled [ 120.200928][ T6498] hpfs: hpfs_map_4sectors(): unaligned read [ 120.221667][ T6498] hpfs: hpfs_map_4sectors(): unaligned read [ 120.235562][ T6498] hpfs: filesystem error: unable to find root dir [ 120.324949][ T6498] hpfs: hpfs_map_4sectors(): unaligned read [ 120.335628][ T6498] hpfs: hpfs_map_sector(): read error [ 120.342907][ T6498] hpfs: hpfs_map_sector(): read error [ 120.353147][ T6503] netlink: 76 bytes leftover after parsing attributes in process `syz.2.253'. [ 121.247046][ T6536] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 121.666156][ T6547] netlink: 'syz.2.269': attribute type 1 has an invalid length. [ 121.680845][ T6520] loop3: detected capacity change from 0 to 32768 [ 121.687796][ T6547] nbd: error processing sock list [ 121.697181][ T6547] block nbd0: shutting down sockets [ 121.725614][ T6520] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.258 (6520) [ 121.826931][ T6520] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 121.857423][ T6520] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 121.905331][ T6520] BTRFS info (device loop3): using free space tree [ 121.939899][ T6552] loop0: detected capacity change from 0 to 2048 [ 121.997190][ T6552] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.015295][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 122.169491][ T6520] BTRFS info (device loop3): enabling ssd optimizations [ 122.188827][ T6520] BTRFS info (device loop3): auto enabling async discard [ 122.227341][ T8] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 122.238182][ T8] usb 2-1: config 0 has no interface number 0 [ 122.244518][ T8] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.264911][ T8] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.282788][ T8] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 122.303283][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.326049][ T8] usb 2-1: config 0 descriptor?? [ 122.454565][ T6520] fs-verity: sha256 using implementation "sha256-avx2" [ 122.578430][ T6520] BTRFS info (device loop3): setting compat-ro feature flag for VERITY (0x4) [ 122.861180][ T8] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.0003/input/input7 [ 122.938647][ T5769] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 123.094471][ T8] holtek_kbd 0003:04D9:A055.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1 [ 123.190849][ T8] usb 2-1: USB disconnect, device number 3 [ 123.399349][ T6593] loop3: detected capacity change from 0 to 256 [ 123.484562][ T6590] fido_id[6590]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 123.576282][ T6593] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 125.028578][ T6624] loop0: detected capacity change from 0 to 128 [ 125.058732][ T6624] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 125.131060][ T6624] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 125.141893][ T6628] netlink: 'syz.2.296': attribute type 29 has an invalid length. [ 125.175570][ T6628] netlink: 'syz.2.296': attribute type 29 has an invalid length. [ 125.201184][ T6624] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 125.232997][ T6629] netlink: 'syz.2.296': attribute type 29 has an invalid length. [ 125.245325][ T6624] FAT-fs (loop0): Filesystem has been set read-only [ 125.287296][ T6628] netlink: 'syz.2.296': attribute type 29 has an invalid length. [ 125.357074][ T6611] loop1: detected capacity change from 0 to 32768 [ 125.438900][ T6611] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 125.491272][ T6611] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 125.658550][ T6611] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 125.805188][ T6611] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 126.389957][ T6626] loop3: detected capacity change from 0 to 40427 [ 126.424834][ T6626] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 126.464611][ T6626] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 126.527142][ T6626] F2FS-fs (loop3): Found nat_bits in checkpoint [ 126.556085][ T6654] option changes via remount are deprecated (pid=6653 comm=syz.0.307) [ 126.649674][ T6659] netlink: 'syz.2.308': attribute type 21 has an invalid length. [ 126.678432][ T6659] netlink: 156 bytes leftover after parsing attributes in process `syz.2.308'. [ 126.714929][ T6662] netlink: 'syz.2.308': attribute type 21 has an invalid length. [ 126.743453][ T6662] netlink: 156 bytes leftover after parsing attributes in process `syz.2.308'. [ 126.755015][ T6626] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 126.765303][ T6626] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 127.206848][ T6678] loop2: detected capacity change from 0 to 128 [ 127.229908][ T6678] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 127.287274][ T6678] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 127.411060][ T6676] loop1: detected capacity change from 0 to 8192 [ 127.851623][ T6683] Bluetooth: MGMT ver 1.22 [ 128.147453][ T6674] loop0: detected capacity change from 0 to 40427 [ 128.148739][ T6687] loop1: detected capacity change from 0 to 2048 [ 128.181616][ T6674] F2FS-fs (loop0): invalid crc value [ 128.224534][ T6687] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 128.236361][ T6674] F2FS-fs (loop0): Found nat_bits in checkpoint [ 128.281167][ T6587] udevd[6587]: incorrect nilfs2 checksum on /dev/loop1 [ 128.362438][ T6693] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.386811][ T5780] udevd[5780]: incorrect nilfs2 checksum on /dev/loop1 [ 128.435478][ T967] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 128.485283][ T6674] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 128.530997][ T28] audit: type=1800 audit(1770385509.728:6): pid=6687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.320" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 128.648849][ T6698] loop3: detected capacity change from 0 to 1024 [ 128.657610][ T967] usb 3-1: Using ep0 maxpacket: 16 [ 128.668052][ T967] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.689835][ T28] audit: type=1804 audit(1770385509.878:7): pid=6674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.315" name="/newroot/91/file1/file1" dev="loop0" ino=10 res=1 errno=0 [ 128.712616][ T967] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 128.722002][ T967] usb 3-1: config 1 has no interface number 1 [ 128.728923][ T967] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 128.740179][ T967] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 128.766482][ T967] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 128.779001][ T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.798021][ T967] usb 3-1: Product: syz [ 128.803797][ T6698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.835215][ T967] usb 3-1: Manufacturer: syz [ 128.845428][ T967] usb 3-1: SerialNumber: syz [ 128.909960][ T5771] syz-executor: attempt to access beyond end of device [ 128.909960][ T5771] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 128.945378][ T5771] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 129.061556][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.621508][ T6712] loop3: detected capacity change from 0 to 512 [ 129.643169][ T6712] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 129.682722][ T6712] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 129.710292][ T6712] EXT4-fs (loop3): 1 truncate cleaned up [ 129.757939][ T6712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.868134][ T5829] usb 3-1: USB disconnect, device number 3 [ 130.018920][ T5769] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /70/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 130.080129][ T5769] EXT4-fs (loop3): Remounting filesystem read-only [ 130.331584][ T6727] loop0: detected capacity change from 0 to 256 [ 130.389378][ T6727] FAT-fs (loop0): Directory bread(block 64) failed [ 130.402284][ T6727] FAT-fs (loop0): Directory bread(block 65) failed [ 130.411007][ T6727] FAT-fs (loop0): Directory bread(block 66) failed [ 130.421280][ T6727] FAT-fs (loop0): Directory bread(block 67) failed [ 130.428440][ T5860] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 130.436361][ T6727] FAT-fs (loop0): Directory bread(block 68) failed [ 130.443123][ T6727] FAT-fs (loop0): Directory bread(block 69) failed [ 130.464224][ T6727] FAT-fs (loop0): Directory bread(block 70) failed [ 130.473060][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.474027][ T6727] FAT-fs (loop0): Directory bread(block 71) failed [ 130.521293][ T6727] FAT-fs (loop0): Directory bread(block 72) failed [ 130.533423][ T6727] FAT-fs (loop0): Directory bread(block 73) failed [ 130.635339][ T5860] usb 2-1: Using ep0 maxpacket: 8 [ 130.649123][ T5860] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 130.690637][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.711377][ T5860] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 130.731077][ T28] audit: type=1800 audit(1770385511.928:8): pid=6727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.336" name="bus" dev="loop0" ino=1048599 res=0 errno=0 [ 130.745985][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.778401][ T5860] usb 2-1: Product: syz [ 130.782659][ T5860] usb 2-1: Manufacturer: syz [ 130.798549][ T5860] usb 2-1: SerialNumber: syz [ 130.807450][ T6727] syz.0.336: attempt to access beyond end of device [ 130.807450][ T6727] loop0: rw=2049, sector=1224, nr_sectors = 76 limit=256 [ 130.845569][ T5860] usb 2-1: config 0 descriptor?? [ 130.865431][ T5860] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 130.873679][ T5860] usb 2-1: setting power ON [ 130.887105][ T5860] dvb-usb: bulk message failed: -22 (2/0) [ 130.928954][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.941670][ T5860] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 130.967185][ T5860] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 131.005357][ T5860] usb 2-1: media controller created [ 131.087601][ T6723] dvb-usb: bulk message failed: -22 (3/0) [ 131.093953][ T6723] dvb-usb: bulk message failed: -22 (4/0) [ 131.108203][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.123038][ T5860] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.132077][ T6723] cxusb: i2c read failed [ 131.154536][ T6723] dvb-usb: bulk message failed: -22 (4/0) [ 131.175242][ T6723] cxusb: i2c read failed [ 131.196590][ T5860] usb 2-1: selecting invalid altsetting 6 [ 131.202885][ T5860] usb 2-1: digital interface selection failed (-22) [ 131.214099][ T5860] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 131.225068][ T5860] usb 2-1: setting power OFF [ 131.232224][ T5860] dvb-usb: bulk message failed: -22 (2/0) [ 131.245355][ T5860] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 131.266223][ T5860] (NULL device *): no alternate interface [ 131.329814][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.411535][ T5860] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 131.505612][ T5860] usb 2-1: USB disconnect, device number 4 [ 131.642139][ T6738] loop2: detected capacity change from 0 to 512 [ 131.733823][ T6738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.747035][ T6738] ext4 filesystem being mounted at /93/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.904775][ T28] audit: type=1800 audit(1770385513.098:9): pid=6738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.342" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 132.188799][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.493853][ T6750] netlink: 'syz.2.343': attribute type 102 has an invalid length. [ 132.550874][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 132.566491][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 132.580590][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 132.600700][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 132.610276][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 132.619896][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 132.760295][ T6757] loop2: detected capacity change from 0 to 256 [ 132.826542][ T6757] exfat: Deprecated parameter 'utf8' [ 132.944838][ T6757] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x3e6496f2, utbl_chksum : 0xe619d30d) [ 133.243803][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.251357][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.525596][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 133.590448][ T6746] loop1: detected capacity change from 0 to 40427 [ 133.651201][ T6746] F2FS-fs (loop1): Invalid log blocks per segment (83886089) [ 133.685366][ T6746] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 133.715257][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 133.733202][ T9] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 133.752661][ T9] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 133.761745][ T6746] F2FS-fs (loop1): invalid crc value [ 133.782845][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 133.807624][ T9] usb 1-1: config 1 has no interface number 0 [ 133.807650][ T6746] F2FS-fs (loop1): Found nat_bits in checkpoint [ 133.827254][ T9] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.839077][ T9] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 133.859351][ T9] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 133.883335][ T6752] chnl_net:caif_netlink_parms(): no params data found [ 133.905520][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.936823][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 134.063737][ T6746] F2FS-fs (loop1): Start checkpoint disabled! [ 134.094957][ T6746] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 134.115733][ T6746] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 134.155777][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 134.715687][ T5860] usb 1-1: USB disconnect, device number 3 [ 134.736422][ T1108] kworker/u4:7: attempt to access beyond end of device [ 134.736422][ T1108] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 134.754291][ T5782] Bluetooth: hci1: command tx timeout [ 134.767487][ T5860] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 134.806008][ T1108] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 134.819094][ T6752] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.830013][ T1108] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 134.844343][ T6752] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.851970][ T6752] bridge_slave_0: entered allmulticast mode [ 134.874512][ T6752] bridge_slave_0: entered promiscuous mode [ 134.998867][ T6752] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.021611][ T6752] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.056171][ T6752] bridge_slave_1: entered allmulticast mode [ 135.063925][ T6752] bridge_slave_1: entered promiscuous mode [ 135.213380][ T49] hsr_slave_0: left promiscuous mode [ 135.240624][ T49] hsr_slave_1: left promiscuous mode [ 135.258436][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.267896][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.301535][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.314993][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.343298][ T49] bridge_slave_1: left allmulticast mode [ 135.364105][ T49] bridge_slave_1: left promiscuous mode [ 135.382523][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.425357][ T49] bridge_slave_0: left allmulticast mode [ 135.434372][ T49] bridge_slave_0: left promiscuous mode [ 135.446470][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.746767][ T49] veth1_macvtap: left promiscuous mode [ 135.754301][ T49] veth0_macvtap: left promiscuous mode [ 135.775288][ T49] veth1_vlan: left promiscuous mode [ 135.781311][ T49] veth0_vlan: left promiscuous mode [ 136.405389][ T967] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 136.484925][ T6817] loop1: detected capacity change from 0 to 32768 [ 136.506601][ T6814] loop2: detected capacity change from 0 to 32768 [ 136.606244][ T967] usb 1-1: Using ep0 maxpacket: 16 [ 136.612624][ T6814] read_mapping_page failed! [ 136.620738][ T6814] ERROR: (device loop2): txCommit: [ 136.620738][ T6814] [ 136.675299][ T967] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 136.684440][ T967] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 136.716651][ T967] usb 1-1: Product: syz [ 136.720977][ T967] usb 1-1: Manufacturer: syz [ 136.725922][ T967] usb 1-1: SerialNumber: syz [ 136.749946][ T967] usb 1-1: config 0 descriptor?? [ 136.825482][ T5782] Bluetooth: hci1: command tx timeout [ 136.851933][ T6817] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 136.901484][ T6817] (syz.1.359,6817,0):ocfs2_mknod:502 ERROR: status = -2 [ 136.925308][ T6817] (syz.1.359,6817,0):ocfs2_mkdir:659 ERROR: status = -2 [ 136.954427][ T6817] (syz.1.359,6817,0):ocfs2_mknod:502 ERROR: status = -2 [ 136.968729][ T6817] (syz.1.359,6817,0):ocfs2_create:676 ERROR: status = -2 [ 137.045502][ T967] usb 1-1: USB disconnect, device number 4 [ 137.199785][ T5768] (syz-executor,5768,0):ocfs2_inode_is_valid_to_delete:852 ERROR: Skipping delete of root inode. [ 137.312111][ T5768] ocfs2: Unmounting device (7,1) on (node local) [ 138.292858][ T49] team0 (unregistering): Port device team_slave_1 removed [ 138.383233][ T49] team0 (unregistering): Port device team_slave_0 removed [ 138.473347][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.536208][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.911641][ T5782] Bluetooth: hci1: command tx timeout [ 139.031501][ T49] bond0 (unregistering): Released all slaves [ 139.158892][ T6752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.192285][ T6833] netlink: 284 bytes leftover after parsing attributes in process `syz.1.366'. [ 139.257980][ T6752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.455341][ T6752] team0: Port device team_slave_0 added [ 139.457794][ T6853] loop1: detected capacity change from 0 to 8 [ 139.494953][ T6752] team0: Port device team_slave_1 added [ 139.628584][ T6752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.670757][ T6752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.746921][ T6853] SQUASHFS error: xz decompression failed, data probably corrupt [ 139.762297][ T6853] SQUASHFS error: Failed to read block 0x108: -5 [ 139.769715][ T6752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.784376][ T6853] SQUASHFS error: Unable to read metadata cache entry [106] [ 139.805364][ T6853] SQUASHFS error: Unable to read inode 0x11f [ 139.817957][ T6752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.836330][ T6752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.925365][ T6752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.207861][ T6752] hsr_slave_0: entered promiscuous mode [ 140.236554][ T6752] hsr_slave_1: entered promiscuous mode [ 140.299330][ T6871] loop0: detected capacity change from 0 to 512 [ 140.355350][ T6871] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 140.400135][ T6871] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.379: invalid indirect mapped block 4294967295 (level 1) [ 140.421561][ T6871] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.379: invalid indirect mapped block 4294967295 (level 1) [ 140.440563][ T6871] EXT4-fs (loop0): 2 truncates cleaned up [ 140.456844][ T6871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.484275][ T6880] loop2: detected capacity change from 0 to 1024 [ 140.576145][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.879701][ T6886] loop1: detected capacity change from 0 to 256 [ 140.919541][ T6886] exfat: Deprecated parameter 'namecase' [ 140.937681][ T6886] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xee17df4f, utbl_chksum : 0xe619d30d) [ 140.952635][ T28] audit: type=1800 audit(1770385522.148:10): pid=6880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.381" name="file2" dev="loop2" ino=22 res=0 errno=0 [ 140.973201][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.014177][ T5782] Bluetooth: hci1: command tx timeout [ 141.165273][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 141.286664][ T11] hfsplus: b-tree write err: -5, ino 4 [ 141.411714][ T9] usb 1-1: config 0 has no interfaces? [ 141.432934][ T9] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 141.450535][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.458837][ T9] usb 1-1: Product: syz [ 141.463106][ T9] usb 1-1: Manufacturer: syz [ 141.467910][ T9] usb 1-1: SerialNumber: syz [ 141.478917][ T9] usb 1-1: config 0 descriptor?? [ 141.500835][ T6752] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 141.510986][ T6894] loop2: detected capacity change from 0 to 128 [ 141.540536][ T6752] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 141.609720][ T6752] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 141.640523][ T6752] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 141.834251][ T8] usb 1-1: USB disconnect, device number 5 [ 141.950954][ T6752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.034807][ T6752] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.074848][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.082247][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.208017][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.215289][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.291010][ T6891] loop1: detected capacity change from 0 to 32768 [ 142.347617][ T6891] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 142.564029][ T6891] XFS (loop1): Ending clean mount [ 142.846366][ T5768] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 143.298754][ T6752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.414759][ T6944] loop2: detected capacity change from 0 to 512 [ 143.441805][ T6944] EXT4-fs: Ignoring removed orlov option [ 143.557351][ T6944] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 143.632388][ T6944] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 143.667200][ T6950] serio: Serial port ttyS3 [ 143.720405][ T6944] EXT4-fs error (device loop2): ext4_iget_extra_inode:4732: inode #15: comm syz.2.392: corrupted in-inode xattr: e_value size too large [ 143.808877][ T6944] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.392: couldn't read orphan inode 15 (err -117) [ 143.844700][ T6944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.004667][ T6965] netlink: 52 bytes leftover after parsing attributes in process `syz.0.396'. [ 144.184018][ T6752] veth0_vlan: entered promiscuous mode [ 144.202907][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.233525][ T6752] veth1_vlan: entered promiscuous mode [ 144.371460][ T6752] veth0_macvtap: entered promiscuous mode [ 144.399881][ T6752] veth1_macvtap: entered promiscuous mode [ 144.459154][ T6974] loop2: detected capacity change from 0 to 64 [ 144.487467][ T6752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.527959][ T6752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.568330][ T6752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.617078][ T6752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.641689][ T6978] loop1: detected capacity change from 0 to 16 [ 144.655271][ T6752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.682514][ T6978] erofs: (device loop1): mounted with root inode @ nid 36. [ 144.695921][ T6752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.737421][ T6752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.760679][ T6978] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 144.800304][ T6752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.814853][ T6978] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -20 in[63, 4033] out[1851] [ 144.845289][ T6752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.862549][ T6979] erofs: (device loop1): z_erofs_readahead: readahead error at folio 87 @ nid 36 [ 144.866286][ T6752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.912847][ T6752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.930843][ T6978] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 144.940643][ T6979] erofs: (device loop1): z_erofs_readahead: readahead error at folio 86 @ nid 36 [ 144.945394][ T6752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.975494][ T6752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.005721][ T6979] syz.1.399: attempt to access beyond end of device [ 145.005721][ T6979] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 145.009834][ T6752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.043199][ T6979] syz.1.399: attempt to access beyond end of device [ 145.043199][ T6979] loop1: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 145.097519][ T6752] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.127909][ T6979] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -20 in[63, 4033] out[3749] [ 145.139525][ T6752] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.164610][ T6752] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.186506][ T6752] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.612943][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.642916][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.730504][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.757790][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.404'. [ 145.768953][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.783657][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.403'. [ 146.626931][ T7019] capability: warning: `syz.4.411' uses deprecated v2 capabilities in a way that may be insecure [ 147.045489][ T7030] netlink: 168 bytes leftover after parsing attributes in process `syz.0.415'. [ 147.756301][ T5829] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 147.958995][ T5829] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 147.985155][ T5829] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 148.008754][ T5829] usb 3-1: config 220 has an invalid descriptor of length 36, skipping remainder of the config [ 148.025027][ T5829] usb 3-1: config 220 has no interface number 2 [ 148.033346][ T5829] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 148.064418][ T5829] usb 3-1: config 220 interface 0 has no altsetting 0 [ 148.073444][ T5829] usb 3-1: config 220 interface 76 has no altsetting 0 [ 148.083930][ T5829] usb 3-1: config 220 interface 1 has no altsetting 0 [ 148.094585][ T5829] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 148.109273][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.120057][ T5829] usb 3-1: Product: syz [ 148.124312][ T5829] usb 3-1: Manufacturer: syz [ 148.134261][ T5829] usb 3-1: SerialNumber: syz [ 148.397891][ T5829] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 148.404408][ T5829] usb 3-1: No valid video chain found. [ 148.424499][ T5829] usb 3-1: selecting invalid altsetting 0 [ 148.474456][ T5829] usb 3-1: selecting invalid altsetting 0 [ 148.489963][ T5829] usbtest: probe of 3-1:220.1 failed with error -22 [ 148.517794][ T5829] usb 3-1: USB disconnect, device number 4 [ 149.641650][ T7095] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 149.685280][ T7095] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 149.707972][ T7093] loop2: detected capacity change from 0 to 2048 [ 149.718372][ T7095] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 149.725027][ T7095] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 149.770471][ T7095] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 149.791493][ T7095] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 149.819911][ T7095] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 149.834189][ T7100] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.885561][ T7095] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 149.892626][ T7095] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 149.963329][ T7095] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 150.008490][ T7095] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 150.041875][ T7095] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 150.073440][ T7095] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 150.105272][ T7095] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 150.698207][ T7114] loop0: detected capacity change from 0 to 4096 [ 151.655601][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 151.855255][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 151.867537][ T23] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 151.886106][ T23] usb 1-1: config 0 has no interface number 0 [ 151.895904][ T23] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 151.908032][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.935318][ T23] usb 1-1: Product: syz [ 151.939774][ T23] usb 1-1: Manufacturer: syz [ 151.944444][ T23] usb 1-1: SerialNumber: syz [ 151.969833][ T23] usb 1-1: config 0 descriptor?? [ 152.288361][ T7152] loop4: detected capacity change from 0 to 128 [ 152.313088][ T7152] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 152.330266][ T7152] hpfs: filesystem error: improperly stopped [ 152.341557][ T7152] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 152.365346][ T7152] hpfs: You really don't want any checks? You are crazy... [ 152.373217][ T7152] hpfs: hpfs_map_sector(): read error [ 152.395943][ T23] radio-si470x 1-1:0.35: DeviceID=0x9242 ChipID=0x0000 [ 152.403546][ T23] radio-si470x 1-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 152.405964][ T7152] hpfs: code page support is disabled [ 152.437800][ T7152] hpfs: hpfs_map_4sectors(): unaligned read [ 152.444477][ T7152] hpfs: hpfs_map_4sectors(): unaligned read [ 152.454962][ T7152] hpfs: filesystem error: unable to find root dir [ 152.590502][ T23] radio-si470x 1-1:0.35: software version 146, hardware version 66 [ 152.620777][ T23] radio-si470x 1-1:0.35: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 152.796560][ T23] radio-si470x 1-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 152.837766][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 152.844786][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 152.852421][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 152.859457][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 152.868147][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 152.877332][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 152.884785][ T23] radio-si470x 1-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 152.893799][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 152.901540][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 152.908926][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 152.916226][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 152.924653][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 152.931607][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 152.945179][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 152.952642][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 152.963768][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 152.970929][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 152.977875][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 152.984667][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 152.991728][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 152.998555][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 153.005336][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 153.012428][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 153.025197][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 153.032225][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 153.039530][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 153.046606][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 153.053411][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 153.063045][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 153.071462][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 153.078272][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 153.085097][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 153.092051][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 153.098824][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 153.107821][ C1] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 153.115921][ T23] radio-si470x: probe of 1-1:0.35 failed with error -22 [ 153.141990][ T7161] loop2: detected capacity change from 0 to 47 [ 153.165657][ T23] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 153.215537][ T23] usb 1-1: USB disconnect, device number 6 [ 153.299116][ T7161] minix_free_block (loop2:20): bit already cleared [ 153.315555][ T7161] minix_free_block (loop2:21): bit already cleared [ 153.326905][ T7161] minix_free_block (loop2:19): bit already cleared [ 153.723432][ T7155] loop1: detected capacity change from 0 to 32768 [ 153.835575][ T7155] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 153.949893][ T7155] JBD2: Ignoring recovery information on journal [ 154.100409][ T7155] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 154.451653][ T7155] syz.1.449 (7155) used greatest stack depth: 19280 bytes left [ 154.466875][ T7187] loop2: detected capacity change from 0 to 1764 [ 154.674950][ T5768] ocfs2: Unmounting device (7,1) on (node local) [ 154.756193][ T7193] batadv_slave_1: entered promiscuous mode [ 154.783776][ T7192] batadv_slave_1: left promiscuous mode [ 155.325494][ T5829] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 155.566469][ T5829] usb 3-1: config 0 has no interfaces? [ 155.578051][ T5829] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 155.595278][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.603381][ T5829] usb 3-1: Product: syz [ 155.635659][ T5829] usb 3-1: Manufacturer: syz [ 155.640364][ T5829] usb 3-1: SerialNumber: syz [ 155.671098][ T5829] usb 3-1: config 0 descriptor?? [ 156.042999][ T9] usb 3-1: USB disconnect, device number 5 [ 156.065602][ T7214] loop1: detected capacity change from 0 to 32768 [ 156.093120][ T7214] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.475 (7214) [ 156.150591][ T7214] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 156.183796][ T7231] loop4: detected capacity change from 0 to 256 [ 156.197543][ T7214] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 156.221216][ T7214] BTRFS info (device loop1): enabling auto defrag [ 156.228987][ T7214] BTRFS info (device loop1): use no compression [ 156.237465][ T7214] BTRFS info (device loop1): force clearing of disk cache [ 156.281604][ T7214] BTRFS info (device loop1): max_inline at 4096 [ 156.307260][ T7214] BTRFS info (device loop1): disabling free space tree [ 156.475515][ T7214] BTRFS info (device loop1): enabling ssd optimizations [ 156.515342][ T7214] BTRFS info (device loop1): auto enabling async discard [ 156.535542][ T7214] BTRFS info (device loop1): rebuilding free space tree [ 156.636405][ T7214] BTRFS info (device loop1): disabling free space tree [ 156.653632][ T7214] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 156.686276][ T7214] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 157.011574][ T28] audit: type=1800 audit(1770385538.208:11): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.475" name="file1" dev="loop1" ino=261 res=0 errno=0 [ 157.586760][ T5768] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 157.967162][ T7248] loop4: detected capacity change from 0 to 40427 [ 157.998527][ T7248] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 158.030136][ T7248] F2FS-fs (loop4): Image doesn't support compression [ 158.055373][ T7248] F2FS-fs (loop4): Image doesn't support compression [ 158.089918][ T7248] F2FS-fs (loop4): invalid crc value [ 158.149706][ T7281] loop1: detected capacity change from 0 to 4096 [ 158.171456][ T7248] F2FS-fs (loop4): Found nat_bits in checkpoint [ 158.214109][ T7281] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 158.235969][ T5829] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 158.385949][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 158.441502][ T7248] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 158.474761][ T5829] usb 3-1: config 5 has an invalid interface number: 3 but max is 0 [ 158.514724][ T5829] usb 3-1: config 5 has no interface number 0 [ 158.541104][ T5829] usb 3-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 158.587481][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.605590][ T5829] usb 3-1: Product: syz [ 158.611265][ T5829] usb 3-1: Manufacturer: syz [ 158.616298][ T5829] usb 3-1: SerialNumber: syz [ 158.626409][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 158.644131][ T5829] ftdi_sio 3-1:5.3: FTDI USB Serial Device converter detected [ 158.661563][ T23] usb 1-1: config 0 has an invalid interface number: 209 but max is 0 [ 158.685668][ T23] usb 1-1: config 0 has no interface number 0 [ 158.693635][ T5829] ftdi_sio ttyUSB0: unknown device type: 0xfd36 [ 158.710318][ T23] usb 1-1: config 0 interface 209 has no altsetting 0 [ 158.723396][ T23] usb 1-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 158.735501][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.754100][ T23] usb 1-1: Product: syz [ 158.764026][ T23] usb 1-1: Manufacturer: syz [ 158.769476][ T23] usb 1-1: SerialNumber: syz [ 158.784128][ T23] usb 1-1: config 0 descriptor?? [ 158.865056][ T6752] syz-executor: attempt to access beyond end of device [ 158.865056][ T6752] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 158.904840][ T6752] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 158.956613][ T967] usb 3-1: USB disconnect, device number 6 [ 158.965015][ T967] ftdi_sio 3-1:5.3: device disconnected [ 159.201948][ T23] usb 1-1: USB disconnect, device number 7 [ 159.275498][ T5773] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 159.490076][ T5773] usb 2-1: config 0 has no interfaces? [ 159.500571][ T5773] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 159.510867][ T5773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.524832][ T5773] usb 2-1: Product: syz [ 159.530086][ T5773] usb 2-1: Manufacturer: syz [ 159.536031][ T5773] usb 2-1: SerialNumber: syz [ 159.543473][ T5773] usb 2-1: config 0 descriptor?? [ 159.902678][ T5773] usb 2-1: USB disconnect, device number 5 [ 160.040572][ T7306] loop2: detected capacity change from 0 to 4096 [ 160.087306][ T7306] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 160.167547][ T7306] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 160.871373][ T5782] block nbd0: Receive control failed (result -22) [ 160.883966][ T55] block nbd0: Dead connection, failed to find a fallback [ 160.893292][ T55] block nbd0: shutting down sockets [ 160.900431][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.912031][ T7324] nbd0: detected capacity change from 0 to 32 [ 160.912295][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 160.931297][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.942291][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 160.951372][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.960977][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 160.979598][ T1059] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.989514][ T1059] Buffer I/O error on dev nbd0, logical block 0, async page read [ 160.998691][ T1059] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.008086][ T1059] Buffer I/O error on dev nbd0, logical block 0, async page read [ 161.020035][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.029251][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 161.040223][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.051010][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 161.059195][ T5773] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 161.060386][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.080383][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 161.088485][ T5779] ldm_validate_partition_table(): Disk read failed. [ 161.095677][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.104896][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 161.112972][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.122264][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 161.130772][ T5779] Dev nbd0: unable to read RDB block 0 [ 161.137264][ T5779] nbd0: unable to read partition table [ 161.158644][ T5779] ldm_validate_partition_table(): Disk read failed. [ 161.168783][ T5779] Dev nbd0: unable to read RDB block 0 [ 161.175032][ T5779] nbd0: unable to read partition table [ 161.188498][ T5779] ldm_validate_partition_table(): Disk read failed. [ 161.195819][ T5779] Dev nbd0: unable to read RDB block 0 [ 161.202043][ T5779] nbd0: unable to read partition table [ 161.312269][ T5773] usb 2-1: config 5 has an invalid interface number: 3 but max is 0 [ 161.334321][ T7331] loop4: detected capacity change from 0 to 256 [ 161.341168][ T5773] usb 2-1: config 5 has no interface number 0 [ 161.376701][ T7325] loop0: detected capacity change from 0 to 8192 [ 161.402036][ T5773] usb 2-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 161.418685][ T5773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.447682][ T5773] usb 2-1: Product: syz [ 161.465204][ T5773] usb 2-1: Manufacturer: syz [ 161.480765][ T5773] usb 2-1: SerialNumber: syz [ 161.503633][ T5773] ftdi_sio 2-1:5.3: FTDI USB Serial Device converter detected [ 161.544607][ T5773] ftdi_sio ttyUSB0: unknown device type: 0xfd36 [ 161.778798][ T23] usb 2-1: USB disconnect, device number 6 [ 161.807005][ T23] ftdi_sio 2-1:5.3: device disconnected [ 161.909453][ T7313] loop2: detected capacity change from 0 to 40427 [ 161.937772][ T7313] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 161.968472][ T7313] F2FS-fs (loop2): Image doesn't support compression [ 161.993122][ T7313] F2FS-fs (loop2): Image doesn't support compression [ 162.047858][ T7313] F2FS-fs (loop2): invalid crc value [ 162.135194][ T7313] F2FS-fs (loop2): Found nat_bits in checkpoint [ 162.338982][ T7313] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 162.567457][ T5772] syz-executor: attempt to access beyond end of device [ 162.567457][ T5772] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 162.617522][ T5772] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 163.056140][ T7363] block nbd1: server does not support multiple connections per device. [ 163.085303][ T7363] block nbd1: shutting down sockets [ 163.391507][ T7340] loop0: detected capacity change from 0 to 32768 [ 163.428376][ T7340] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 163.482943][ T7340] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 163.536900][ T7340] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 163.615241][ T5773] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 163.677625][ T7372] loop4: detected capacity change from 0 to 8192 [ 163.685424][ T7340] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 163.757571][ T7372] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 163.806464][ T7372] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 163.818370][ T7372] REISERFS (device loop4): using ordered data mode [ 163.825966][ T7372] reiserfs: using flush barriers [ 163.859558][ T5773] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.896619][ T7372] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 163.928592][ T5773] usb 2-1: New USB device found, idVendor=1c9e, idProduct=9801, bcdDevice=25.d8 [ 163.975590][ T5773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.977440][ T7372] REISERFS (device loop4): checking transaction log (loop4) [ 163.999203][ T5773] usb 2-1: Product: syz [ 164.009254][ T5773] usb 2-1: Manufacturer: syz [ 164.030786][ T5773] usb 2-1: SerialNumber: syz [ 164.042878][ T5773] usb 2-1: config 0 descriptor?? [ 164.107030][ T7372] REISERFS (device loop4): Using r5 hash to sort names [ 164.120696][ T7372] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 164.151568][ T7372] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 164.384932][ T5773] usb 2-1: USB disconnect, device number 7 [ 164.430304][ T7372] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 164.489041][ T7393] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 164.551071][ T7372] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 164.592733][ T7372] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 164.837307][ T7400] loop2: detected capacity change from 0 to 128 [ 165.838487][ T7427] loop2: detected capacity change from 0 to 1024 [ 166.028932][ T7434] vivid-004: disconnect [ 166.064854][ T7434] vivid-004: reconnect [ 166.413873][ T7447] loop2: detected capacity change from 0 to 64 [ 166.625420][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.543'. [ 167.046788][ T7468] vivid-003: disconnect [ 167.075947][ T7468] vivid-003: reconnect [ 167.113712][ T7472] loop0: detected capacity change from 0 to 256 [ 167.553171][ T28] audit: type=1326 audit(1770385548.748:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7482 comm="syz.0.553" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a0ad9aeb9 code=0x0 [ 167.971252][ T7461] loop2: detected capacity change from 0 to 40427 [ 168.023263][ T7461] F2FS-fs (loop2): Found nat_bits in checkpoint [ 168.151466][ T7461] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 168.499108][ T7514] loop1: detected capacity change from 0 to 1024 [ 168.570063][ T5772] syz-executor: attempt to access beyond end of device [ 168.570063][ T5772] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 168.633855][ T5772] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 169.381757][ T7534] loop0: detected capacity change from 0 to 2048 [ 169.452482][ T7534] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.526678][ T7538] netlink: 48 bytes leftover after parsing attributes in process `syz.1.569'. [ 169.894175][ T7521] loop4: detected capacity change from 0 to 32768 [ 170.486642][ T7561] loop0: detected capacity change from 0 to 512 [ 170.551591][ T7561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.615054][ T7561] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.711267][ T7568] input: syz1 as /devices/virtual/input/input8 [ 170.839947][ T7561] EXT4-fs error (device loop0): ext4_get_inode_usage:888: inode #12: comm syz.0.576: corrupted xattr block 6: invalid header [ 170.949584][ T7561] EXT4-fs (loop0): Remounting filesystem read-only [ 171.003607][ T1108] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 171.045443][ T1108] Quota error (device loop0): write_blk: dquota write failed [ 171.064483][ T1108] Quota error (device loop0): free_dqentry: Can't write quota data block 5 [ 171.095532][ T1108] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 171.125220][ T1108] Quota error (device loop0): write_blk: dquota write failed [ 171.151625][ T7574] loop4: detected capacity change from 0 to 2048 [ 171.153662][ T1108] Quota error (device loop0): free_dqentry: Can't write quota data block 5 [ 171.162349][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.309280][ T7547] loop1: detected capacity change from 0 to 40427 [ 171.326545][ T7574] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.437867][ T7547] F2FS-fs (loop1): Found nat_bits in checkpoint [ 171.676913][ T7547] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 172.014325][ T5768] syz-executor: attempt to access beyond end of device [ 172.014325][ T5768] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 172.050053][ T5768] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 172.066196][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 172.216435][ T7606] loop2: detected capacity change from 0 to 2048 [ 172.270312][ T7606] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.285223][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 172.301539][ T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 172.336926][ T23] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 172.364111][ T23] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 172.403058][ T23] usb 5-1: Product: syz [ 172.415532][ T23] usb 5-1: Manufacturer: syz [ 172.420259][ T23] usb 5-1: SerialNumber: syz [ 172.681840][ T23] usb 5-1: Handspring Visor / Palm OS: port 0, is for HotSync use [ 172.710435][ T23] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 172.745224][ T23] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 172.892325][ T23] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 172.910718][ T23] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 172.949431][ T23] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 172.988949][ T23] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 173.022311][ T23] usb 5-1: USB disconnect, device number 2 [ 173.057467][ T23] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 173.127398][ T23] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 173.176382][ T23] visor 5-1:1.0: device disconnected [ 173.580738][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.600'. [ 173.585519][ T27] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 173.728956][ T7643] [U]  [ 173.732366][ T7643] [U] K{‘ [ 173.753824][ T7643] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 173.773398][ T7643] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 173.795625][ T7643] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 173.817854][ T7643] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 173.854416][ T7649] loop1: detected capacity change from 0 to 256 [ 173.867296][ T7643] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 173.899834][ T27] usb 3-1: config 0 has an invalid interface number: 204 but max is 0 [ 173.914160][ T7649] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ac714, utbl_chksum : 0xe619d30d) [ 173.928893][ T27] usb 3-1: config 0 has no interface number 0 [ 173.941593][ T7643] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 173.955843][ T27] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 173.986820][ T7643] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 173.997372][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.018786][ T27] usb 3-1: Product: syz [ 174.038208][ T27] usb 3-1: Manufacturer: syz [ 174.052329][ T7643] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`ƦM¢XÎÂ"Ä\ [ 174.373663][ T7643] [U] {;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 174.446096][ T7652] fscrypt (loop4, inode 12): Unsupported encryption flags (0x0e) [ 174.468556][ T7643] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 174.525361][ T7643] [U] 22½“Æ©ÐÛ©X?0;3U± [ 174.530864][ T7643] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 174.596429][ T7643] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 174.606478][ T7643] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 174.615449][ T7643] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 174.622623][ T7643] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 174.635677][ T7643] [U] ¹ EC [ 174.639457][ T7643] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 174.707163][ T6752] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 174.728083][ T5773] usb 3-1: USB disconnect, device number 7 [ 174.764770][ T7642] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 175.035059][ T7668] loop1: detected capacity change from 0 to 512 [ 175.355455][ T5829] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 175.589490][ T5829] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 175.605707][ T5829] usb 5-1: can't read configurations, error -71 [ 175.771920][ T7679] loop2: detected capacity change from 0 to 4096 [ 175.791558][ T7679] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 175.938548][ T7679] ntfs3: loop2: ino=1e, "file1" attr_set_size [ 175.955771][ T7679] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 175.963634][ T7679] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 176.139342][ T1094] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 176.939559][ T7692] loop2: detected capacity change from 0 to 32768 [ 176.967842][ T7692] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.617 (7692) [ 177.040197][ T7692] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 177.097174][ T7692] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 177.151873][ T7692] BTRFS info (device loop2): setting nodatacow, compression disabled [ 177.168825][ T7692] BTRFS info (device loop2): force clearing of disk cache [ 177.187432][ T7692] BTRFS info (device loop2): enabling ssd optimizations [ 177.194465][ T7692] BTRFS info (device loop2): using spread ssd allocation scheme [ 177.222770][ T7692] BTRFS info (device loop2): turning off barriers [ 177.240075][ T7692] BTRFS info (device loop2): disabling free space tree [ 177.260336][ T7692] BTRFS info (device loop2): not using ssd optimizations [ 177.277755][ T7692] BTRFS info (device loop2): not using spread ssd allocation scheme [ 177.464042][ T7692] BTRFS info (device loop2): rebuilding free space tree [ 177.533541][ T7692] BTRFS info (device loop2): disabling free space tree [ 177.555532][ T7692] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 177.615296][ T7692] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 177.895819][ T967] kernel write not supported for file /ppp (pid: 967 comm: kworker/1:2) [ 177.995928][ T7730] use of bytesused == 0 is deprecated and will be removed in the future, [ 178.009850][ T7730] use the actual size instead. [ 178.223182][ T5772] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 178.607145][ T7745] tap0: tun_chr_ioctl cmd 1074025677 [ 178.612710][ T7745] tap0: linktype set to 805 [ 178.793684][ T7751] program syz.1.638 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.030356][ T967] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 179.054916][ T7757] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 179.066273][ T7757] team0: Port device batadv1 added [ 179.225676][ T967] usb 1-1: Using ep0 maxpacket: 8 [ 179.236870][ T967] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 179.249601][ T967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.302194][ T967] pvrusb2: Hardware description: Terratec Grabster AV400 [ 179.325757][ T967] pvrusb2: ********** [ 179.334343][ T967] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 179.364401][ T967] pvrusb2: Important functionality might not be entirely working. [ 179.385306][ T967] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 179.400935][ T967] pvrusb2: ********** [ 179.521992][ T2322] pvrusb2: Invalid write control endpoint [ 179.683086][ T2322] pvrusb2: Invalid write control endpoint [ 179.697992][ T2322] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 179.734042][ T2322] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 179.762405][ T2322] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 179.782870][ T2322] pvrusb2: Device being rendered inoperable [ 179.807950][ T967] usb 1-1: USB disconnect, device number 8 [ 179.824238][ T2322] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 179.833907][ T2322] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 179.881649][ T2322] pvrusb2: Attached sub-driver cx25840 [ 179.915636][ T2322] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 179.935497][ T2322] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 180.238655][ T7767] loop1: detected capacity change from 0 to 40427 [ 180.261796][ T7767] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 180.283829][ T7767] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 180.326231][ T7767] F2FS-fs (loop1): invalid crc value [ 180.349429][ T7767] F2FS-fs (loop1): Found nat_bits in checkpoint [ 180.529939][ T7767] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 180.561199][ T7767] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 180.847710][ T5768] syz-executor: attempt to access beyond end of device [ 180.847710][ T5768] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 180.882738][ T5768] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 180.895242][ T5768] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 181.551924][ T7811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.663'. [ 181.571266][ T7811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.663'. [ 181.615644][ T7811] netlink: 40 bytes leftover after parsing attributes in process `syz.4.663'. [ 182.555219][ T967] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 182.745841][ T967] usb 2-1: Using ep0 maxpacket: 8 [ 182.755237][ T5829] kernel write not supported for file /input/event2 (pid: 5829 comm: kworker/1:3) [ 182.805296][ T967] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 182.813589][ T967] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.845785][ T967] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.867560][ T967] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 182.878259][ T967] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.891694][ T967] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 182.901565][ T967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.048802][ T7842] loop2: detected capacity change from 0 to 4096 [ 183.085329][ T7842] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 183.159359][ T967] usb 2-1: GET_CAPABILITIES returned 0 [ 183.175768][ T967] usbtmc 2-1:16.0: can't read capabilities [ 183.439125][ T7833] usb 2-1: usbtmc_ioctl_clear_in_halt returned -32 [ 183.469239][ T5773] usb 2-1: USB disconnect, device number 8 [ 183.501677][ T7847] loop0: detected capacity change from 0 to 128 [ 183.573209][ T7847] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 183.667990][ T7847] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 183.743829][ T7845] loop4: detected capacity change from 0 to 32768 [ 183.772749][ T7845] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.676 (7845) [ 183.865552][ T7845] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 183.893564][ T7845] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 183.924219][ T7845] BTRFS info (device loop4): setting nodatacow, compression disabled [ 183.946139][ T7845] BTRFS info (device loop4): force clearing of disk cache [ 183.975552][ T7845] BTRFS info (device loop4): enabling ssd optimizations [ 183.984005][ T7845] BTRFS info (device loop4): using spread ssd allocation scheme [ 184.013680][ T7845] BTRFS info (device loop4): turning off barriers [ 184.023538][ T7845] BTRFS info (device loop4): disabling free space tree [ 184.045295][ T7845] BTRFS info (device loop4): not using ssd optimizations [ 184.066871][ T7845] BTRFS info (device loop4): not using spread ssd allocation scheme [ 184.077640][ T7858] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 184.125327][ T5773] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 184.155869][ T7858] team0: Port device batadv1 added [ 184.257957][ T7845] BTRFS info (device loop4): rebuilding free space tree [ 184.326140][ T5773] usb 1-1: Using ep0 maxpacket: 16 [ 184.355351][ T7845] BTRFS info (device loop4): disabling free space tree [ 184.362371][ T7845] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 184.374024][ T5773] usb 1-1: config 0 interface 0 has no altsetting 0 [ 184.386178][ T5773] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 184.410913][ T5773] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.424858][ T7845] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 184.451442][ T5773] usb 1-1: config 0 descriptor?? [ 184.472999][ T7881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.682'. [ 184.897685][ T5773] hid (null): unknown global tag 0xe [ 184.914177][ T5773] hid (null): global environment stack underflow [ 184.939789][ T5773] hid (null): unknown global tag 0xd [ 184.951277][ T5773] hid (null): unknown global tag 0xc [ 184.990983][ T5773] hid (null): unknown global tag 0xe [ 185.013932][ T5773] hid (null): invalid report_size 61170 [ 185.021391][ T5773] hid (null): report_id 0 is invalid [ 185.031858][ T5773] hid (null): global environment stack overflow [ 185.092859][ T6752] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 185.207514][ T5773] usb 1-1: USB disconnect, device number 9 [ 185.802775][ T7910] loop4: detected capacity change from 0 to 2048 [ 185.912772][ T7910] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.931763][ T5771] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.169556][ T7916] loop2: detected capacity change from 0 to 256 [ 186.434273][ T7916] FAT-fs (loop2): Directory bread(block 64) failed [ 186.452783][ T7916] FAT-fs (loop2): Directory bread(block 65) failed [ 186.472371][ T7916] FAT-fs (loop2): Directory bread(block 66) failed [ 186.492388][ T7916] FAT-fs (loop2): Directory bread(block 67) failed [ 186.508632][ T7916] FAT-fs (loop2): Directory bread(block 68) failed [ 186.535580][ T7916] FAT-fs (loop2): Directory bread(block 69) failed [ 186.553410][ T7916] FAT-fs (loop2): Directory bread(block 70) failed [ 186.585323][ T7916] FAT-fs (loop2): Directory bread(block 71) failed [ 186.613890][ T7916] FAT-fs (loop2): Directory bread(block 72) failed [ 186.625333][ T7916] FAT-fs (loop2): Directory bread(block 73) failed [ 187.107807][ T7918] loop0: detected capacity change from 0 to 32768 [ 187.156332][ T7918] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.697 (7918) [ 187.208551][ T7918] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 187.229384][ T7922] loop1: detected capacity change from 0 to 32768 [ 187.229805][ T7918] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 187.246442][ T7918] BTRFS info (device loop0): setting nodatacow, compression disabled [ 187.254594][ T7918] BTRFS info (device loop0): force clearing of disk cache [ 187.287170][ T7918] BTRFS info (device loop0): enabling ssd optimizations [ 187.295307][ T7922] [ 187.295307][ T7922] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.295307][ T7922] [ 187.306351][ T7918] BTRFS info (device loop0): using spread ssd allocation scheme [ 187.314220][ T7918] BTRFS info (device loop0): turning off barriers [ 187.376926][ T7918] BTRFS info (device loop0): disabling free space tree [ 187.406487][ T7918] BTRFS info (device loop0): not using ssd optimizations [ 187.413643][ T7918] BTRFS info (device loop0): not using spread ssd allocation scheme [ 187.482213][ T7922] ERROR: (device loop1): dbReAlloc: the block is outside the filesystem [ 187.482213][ T7922] [ 187.536023][ T7922] ERROR: (device loop1): remounting filesystem as read-only [ 187.555703][ T7922] jfs_mkdir: dtInsert returned -EIO [ 187.681493][ T7922] ERROR: (device loop1): jfs_mkdir: [ 187.681493][ T7922] [ 187.723360][ T7918] BTRFS info (device loop0): rebuilding free space tree [ 187.834980][ T7918] BTRFS info (device loop0): disabling free space tree [ 187.864937][ T7918] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 187.894032][ T7918] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 188.572194][ T5771] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 189.471243][ T7977] mkiss: ax0: crc mode is auto. [ 189.690994][ T7983] loop4: detected capacity change from 0 to 256 [ 189.706319][ T7983] exfat: Deprecated parameter 'utf8' [ 189.811643][ T7983] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 189.872509][ T7987] netlink: 152 bytes leftover after parsing attributes in process `syz.2.721'. [ 189.929477][ T7987] tipc: Started in network mode [ 189.934459][ T7987] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 189.979169][ T7987] tipc: Enabled bearer , priority 10 [ 190.279222][ T7999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.725'. [ 190.465454][ T5829] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 190.491813][ T8003] ip6tnl1: entered allmulticast mode [ 190.530400][ T8007] tap0: tun_chr_ioctl cmd 35108 [ 190.673383][ T5829] usb 1-1: Using ep0 maxpacket: 32 [ 190.688925][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.702623][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.743427][ T5829] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 190.779127][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.817304][ T5829] usb 1-1: config 0 descriptor?? [ 191.088868][ T5773] tipc: Node number set to 4269801514 [ 191.299501][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.740'. [ 191.316046][ T5829] koneplus 0003:1E7D:2D51.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 191.335322][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.740'. [ 191.355337][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.740'. [ 191.380171][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.740'. [ 191.400641][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.740'. [ 191.420880][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.740'. [ 191.440259][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.740'. [ 191.469751][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.740'. [ 191.740031][ T5829] usb 1-1: USB disconnect, device number 10 [ 191.839185][ T8018] loop4: detected capacity change from 0 to 32768 [ 191.950135][ T8018] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 191.950135][ T8018] [ 191.981998][ T8018] xtLookup: xtSearch returned -5 [ 191.992709][ T8018] free_index: error reading directory table [ 192.009746][ T8018] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 192.009746][ T8018] [ 192.058155][ T8018] xtLookup: xtSearch returned -5 [ 192.083774][ T8018] free_index: error reading directory table [ 192.090507][ T8024] loop2: detected capacity change from 0 to 40427 [ 192.097725][ T8018] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 192.097725][ T8018] [ 192.121773][ T8018] xtLookup: xtSearch returned -5 [ 192.127207][ T8018] free_index: error reading directory table [ 192.133287][ T8018] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 192.133287][ T8018] [ 192.144162][ T8018] xtLookup: xtSearch returned -5 [ 192.153981][ T8018] free_index: error reading directory table [ 192.161603][ T8024] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 192.175739][ T8024] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 192.184230][ T8018] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 192.184230][ T8018] [ 192.223934][ T8018] xtLookup: xtSearch returned -5 [ 192.236196][ T8024] F2FS-fs (loop2): invalid crc value [ 192.243662][ T8018] free_index: error reading directory table [ 192.260338][ T8018] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 192.260338][ T8018] [ 192.272974][ T8024] F2FS-fs (loop2): Found nat_bits in checkpoint [ 192.322186][ T8018] xtLookup: xtSearch returned -5 [ 192.348077][ T8018] add_index: get/read_metapage failed! [ 192.353644][ T8018] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 192.353644][ T8018] [ 192.425327][ T8018] xtLookup: xtSearch returned -5 [ 192.465437][ T8018] free_index: error reading directory table [ 192.491495][ T8018] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 192.491495][ T8018] [ 192.512081][ T8018] xtLookup: xtSearch returned -5 [ 192.517487][ T8024] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 192.535337][ T8024] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 192.543776][ T8018] free_index: error reading directory table [ 192.552768][ T8018] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 192.552768][ T8018] [ 192.585198][ T8018] xtLookup: xtSearch returned -5 [ 192.613214][ T8018] free_index: error reading directory table [ 192.635492][ T8018] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 192.635492][ T8018] [ 192.666460][ T8018] xtLookup: xtSearch returned -5 [ 192.671502][ T8018] free_index: error reading directory table [ 192.706424][ T8018] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 192.706424][ T8018] [ 192.755646][ T8018] xtLookup: xtSearch returned -5 [ 192.774624][ T8018] free_index: error reading directory table [ 192.819562][ T8018] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 192.819562][ T8018] [ 192.857556][ T8018] xtLookup: xtSearch returned -5 [ 192.872420][ T8018] add_index: get/read_metapage failed! [ 193.494104][ T8062] loop4: detected capacity change from 0 to 512 [ 193.512059][ T8062] EXT4-fs: Ignoring removed oldalloc option [ 193.560259][ T8062] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (46593!=33349) [ 193.588022][ T8062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 193.839218][ T8069] program syz.1.756 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.866448][ T6752] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.999331][ T8074] loop4: detected capacity change from 0 to 256 [ 194.025505][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 194.039649][ T8074] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d) [ 194.205646][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 194.228834][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 255, changing to 11 [ 194.253532][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 59391, setting to 1024 [ 194.275049][ T8] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 194.290507][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.299962][ T8] usb 3-1: Product: syz [ 194.305837][ T8] usb 3-1: Manufacturer: syz [ 194.310727][ T8] usb 3-1: SerialNumber: syz [ 194.327438][ T8] usb 3-1: config 0 descriptor?? [ 194.342581][ T8065] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 194.382195][ T8] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 194.617033][ T8] usb 3-1: USB disconnect, device number 8 [ 194.624452][ T1141] usb 3-1: Failed to submit usb control message: -71 [ 194.634345][ T1141] usb 3-1: unable to send the bmi data to the device: -71 [ 194.642124][ T1141] usb 3-1: unable to get target info from device [ 194.656584][ T1141] usb 3-1: could not get target info (-71) [ 194.663675][ T1141] usb 3-1: could not probe fw (-71) [ 194.675822][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.684460][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.418950][ T8108] program syz.2.771 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.848258][ T8125] loop2: detected capacity change from 0 to 4096 [ 195.860515][ T8125] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 195.913080][ T8125] ntfs: (device loop2): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 195.938905][ T8125] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 195.965278][ T8125] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 195.992706][ T8125] ntfs: volume version 3.1. [ 196.101528][ T5772] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 196.182343][ T8132] binder: 8131:8132 ioctl 40046205 0 returned -22 [ 196.624829][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 196.804667][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 196.819569][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 196.841106][ T8] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 196.850553][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.867891][ T8] usb 2-1: Product: syz [ 196.872836][ T8] usb 2-1: Manufacturer: syz [ 196.884457][ T8] usb 2-1: SerialNumber: syz [ 196.901422][ T8] usb 2-1: config 0 descriptor?? [ 197.171860][ T8148] __nla_validate_parse: 48 callbacks suppressed [ 197.171878][ T8148] netlink: 16 bytes leftover after parsing attributes in process `syz.4.788'. [ 197.316982][ T8150] block device autoloading is deprecated and will be removed. [ 197.355786][ T8] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 197.760775][ T8] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 197.780666][ T8] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 197.794832][ T8] gs_usb: probe of 2-1:0.0 failed with error -71 [ 197.822566][ T8] usb 2-1: USB disconnect, device number 9 [ 198.019156][ T8163] loop4: detected capacity change from 0 to 256 [ 198.123596][ T8163] FAT-fs (loop4): Directory bread(block 64) failed [ 198.147342][ T8163] FAT-fs (loop4): Directory bread(block 65) failed [ 198.166140][ T8163] FAT-fs (loop4): Directory bread(block 66) failed [ 198.172782][ T8163] FAT-fs (loop4): Directory bread(block 67) failed [ 198.213611][ T8163] FAT-fs (loop4): Directory bread(block 68) failed [ 198.227377][ T8163] FAT-fs (loop4): Directory bread(block 69) failed [ 198.244352][ T8163] FAT-fs (loop4): Directory bread(block 70) failed [ 198.258921][ T8163] FAT-fs (loop4): Directory bread(block 71) failed [ 198.274668][ T8163] FAT-fs (loop4): Directory bread(block 72) failed [ 198.282364][ T8163] FAT-fs (loop4): Directory bread(block 73) failed [ 198.529261][ T28] audit: type=1800 audit(1770385835.721:13): pid=8163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.795" name="file0" dev="loop4" ino=1048612 res=0 errno=0 [ 198.595955][ T8163] syz.4.795: attempt to access beyond end of device [ 198.595955][ T8163] loop4: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 198.623536][ T28] audit: type=1800 audit(1770385835.751:14): pid=8163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.795" name="file0" dev="loop4" ino=1048612 res=0 errno=0 [ 199.213632][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 199.370482][ T8187] loop0: detected capacity change from 0 to 32768 [ 199.379322][ T8187] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop0 scanned by syz.0.807 (8187) [ 199.397545][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 199.398090][ T8187] BTRFS info (device loop0): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 199.398602][ T8187] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 199.398872][ T8187] BTRFS info (device loop0): using free space tree [ 199.402249][ T8] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 199.495859][ T8] usb 5-1: config 0 has no interface number 0 [ 199.495918][ T8] usb 5-1: config 0 interface 184 has no altsetting 0 [ 199.508191][ T8] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 199.525049][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.525076][ T8] usb 5-1: Product: syz [ 199.525092][ T8] usb 5-1: Manufacturer: syz [ 199.525107][ T8] usb 5-1: SerialNumber: syz [ 199.529729][ T8] usb 5-1: config 0 descriptor?? [ 199.532721][ T8] smsc75xx v1.0.0 [ 199.581114][ T8187] BTRFS info (device loop0): enabling ssd optimizations [ 199.581151][ T8187] BTRFS info (device loop0): auto enabling async discard [ 200.031858][ T5771] BTRFS info (device loop0): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 200.182788][ T5779] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 10 /dev/loop0 scanned by udevd (5779) [ 200.402916][ T8] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 200.423696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 200.450196][ T8] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 200.466307][ T8] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 200.480616][ T8] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 200.512532][ T8] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 200.551792][ T8218] vlan2: entered allmulticast mode [ 200.562905][ T8] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 200.573171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 200.614491][ T8218] veth0_to_bond: entered allmulticast mode [ 200.618274][ T8] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 200.698338][ T8] usb 5-1: USB disconnect, device number 5 [ 201.152563][ T5860] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 201.348509][ T5860] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 201.368657][ T5860] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 201.397620][ T5860] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.448326][ T5860] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 201.480845][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 201.507986][ T5860] usb 3-1: Product: syz [ 201.519506][ T5860] usb 3-1: Manufacturer: syz [ 201.534966][ T5860] usb 3-1: SerialNumber: syz [ 201.822481][ T5860] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 201.891624][ T8226] loop4: detected capacity change from 0 to 32768 [ 202.134603][ T5860] usb 3-1: USB disconnect, device number 9 [ 202.192157][ T5860] usblp0: removed [ 202.946519][ T8263] loop0: detected capacity change from 0 to 2364 [ 203.171641][ T27] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 203.361669][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 203.378259][ T27] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 203.395633][ T27] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 203.428187][ T27] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 203.451437][ T27] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 203.482688][ T8256] loop4: detected capacity change from 0 to 40427 [ 203.491325][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 203.501960][ T8256] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 203.530378][ T27] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 203.530860][ T8256] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 203.551648][ T27] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 203.582837][ T27] usb 3-1: Product: syz [ 203.587097][ T27] usb 3-1: Manufacturer: syz [ 203.603359][ T8256] F2FS-fs (loop4): Image doesn't support compression [ 203.619867][ T8256] F2FS-fs (loop4): invalid crc value [ 203.623486][ T27] usb 3-1: SerialNumber: syz [ 203.641891][ T8256] F2FS-fs (loop4): Found nat_bits in checkpoint [ 203.652486][ T27] usb 3-1: config 0 descriptor?? [ 203.675757][ T27] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 203.719759][ T27] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 203.778304][ T8256] F2FS-fs (loop4): Start checkpoint disabled! [ 203.806276][ T8256] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 203.904463][ T5860] usb 3-1: USB disconnect, device number 10 [ 203.927496][ T5860] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 203.966868][ T8256] F2FS-fs (loop4): inject dquot initialize in f2fs_dquot_initialize of f2fs_evict_inode+0x6d8/0x1890 [ 204.227763][ T49] kworker/u4:3: attempt to access beyond end of device [ 204.227763][ T49] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 204.229495][ T8268] loop0: detected capacity change from 0 to 40427 [ 204.256438][ T49] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 204.270692][ T49] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 204.278804][ T49] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 204.322587][ T8268] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 204.351020][ T8268] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 204.387840][ T8268] F2FS-fs (loop0): heap/no_heap options were deprecated [ 204.398694][ T8268] F2FS-fs (loop0): invalid crc value [ 204.469260][ T8268] F2FS-fs (loop0): Found nat_bits in checkpoint [ 204.644499][ T8268] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 204.660961][ T8268] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 204.684291][ T8275] loop1: detected capacity change from 0 to 32768 [ 204.738127][ T8275] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 204.811638][ T5771] syz-executor: attempt to access beyond end of device [ 204.811638][ T5771] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 204.861835][ T5771] F2FS-fs (loop0): Remounting filesystem read-only [ 204.946023][ T8275] XFS (loop1): Ending clean mount [ 204.981906][ T8275] XFS (loop1): Quotacheck needed: Please wait. [ 205.096305][ T8275] XFS (loop1): Quotacheck: Done. [ 205.313596][ T5768] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 206.208535][ T8310] loop1: detected capacity change from 0 to 8192 [ 206.246503][ T8310] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 206.260001][ T8310] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 206.269309][ T8310] REISERFS (device loop1): using ordered data mode [ 206.276937][ T8310] reiserfs: using flush barriers [ 206.285617][ T8310] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 206.303569][ T8310] REISERFS (device loop1): checking transaction log (loop1) [ 206.317546][ T8310] REISERFS (device loop1): Using rupasov hash to sort names [ 206.328333][ T8310] REISERFS (device loop1): using 3.5.x disk format [ 206.335680][ T8310] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 206.355437][ T8310] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 206.368415][ T8310] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 206.387390][ T8310] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 206.412325][ T8310] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 206.454230][ T8310] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 206.474539][ T8310] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 206.489935][ T8] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 206.509463][ T8314] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 206.536089][ T8314] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 206.571659][ T8310] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 206.696583][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.735747][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 206.759744][ T8] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 206.787554][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.828384][ T8] usb 3-1: config 0 descriptor?? [ 206.855350][ T8] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 206.870850][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 206.886677][ T8] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 206.896184][ T8] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 206.903966][ T8] usb 3-1: media controller created [ 206.911352][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 206.933353][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 206.950238][ T8] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 206.978673][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 207.014850][ T8322] netlink: 'syz.1.852': attribute type 15 has an invalid length. [ 207.028031][ T8] dvb-usb: schedule remote query interval to 150 msecs. [ 207.060036][ T8] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 207.223209][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 207.241364][ T8] dvb-usb: error while querying for an remote control event. [ 207.360053][ T8329] loop1: detected capacity change from 0 to 4096 [ 207.429345][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 207.435195][ T8] dvb-usb: error while querying for an remote control event. [ 207.451668][ T8330] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 207.609596][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 207.621140][ T8] dvb-usb: error while querying for an remote control event. [ 207.760133][ T8329] syz.1.855 (8329) used greatest stack depth: 19184 bytes left [ 207.779178][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 207.788820][ T8] dvb-usb: error while querying for an remote control event. [ 207.823148][ T9] usb 3-1: USB disconnect, device number 11 [ 208.004572][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 208.899443][ T8355] loop4: detected capacity change from 0 to 8192 [ 209.120334][ T8365] netlink: 64 bytes leftover after parsing attributes in process `syz.1.872'. [ 209.302623][ T8368] team0: entered allmulticast mode [ 209.307856][ T8368] team_slave_0: entered allmulticast mode [ 209.332993][ T8368] team_slave_1: entered allmulticast mode [ 209.432164][ T8373] random: crng reseeded on system resumption [ 210.159106][ T5829] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 210.250833][ T8390] loop2: detected capacity change from 0 to 8192 [ 210.367905][ T5829] usb 2-1: Using ep0 maxpacket: 16 [ 210.376549][ T5829] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.413152][ T5829] usb 2-1: config 0 has no interfaces? [ 210.448055][ T5829] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 210.478622][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.510647][ T5829] usb 2-1: config 0 descriptor?? [ 210.918307][ T5829] usb 2-1: USB disconnect, device number 10 [ 211.018429][ T8401] netlink: 'syz.4.887': attribute type 14 has an invalid length. [ 211.592612][ T8403] loop4: detected capacity change from 0 to 32768 [ 211.721461][ T28] audit: type=1800 audit(1770385848.927:15): pid=8403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.888" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 211.847326][ T8407] input: syz1 as /devices/virtual/input/input11 [ 211.967791][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.891'. [ 211.995512][ T8410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.891'. [ 212.076455][ T8410] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.086152][ T8410] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.094981][ T8410] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.104111][ T8410] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.117365][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 212.123455][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 212.791057][ T8433] loop0: detected capacity change from 0 to 512 [ 212.803083][ T8433] EXT4-fs: Ignoring removed nobh option [ 212.839454][ T8433] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 212.964892][ T8433] EXT4-fs (loop0): 1 truncate cleaned up [ 212.998228][ T8433] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.013919][ T8438] loop1: detected capacity change from 0 to 2364 [ 213.247950][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.460673][ T8445] can0: slcan on ptm0. [ 213.524190][ T8426] loop4: detected capacity change from 0 to 32768 [ 213.563166][ T8426] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 213.647547][ T8442] can0 (unregistered): slcan off ptm0. [ 213.713287][ T8449] loop1: detected capacity change from 0 to 512 [ 213.806293][ T8449] EXT4-fs error (device loop1): __ext4_iget:5071: inode #17: block 1803188595: comm syz.1.908: invalid block [ 213.921306][ T8449] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.908: couldn't read orphan inode 17 (err -117) [ 213.994419][ T5779] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 214.015852][ T8449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.144281][ T8449] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz.1.908: path /: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 214.324056][ T8468] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 214.370223][ T5768] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /221/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 214.456900][ T5768] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz-executor: bg 0: block 7: invalid block bitmap [ 214.525996][ T5768] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 214.594723][ T5768] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /221/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 214.686479][ T5768] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /221/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 214.742947][ T5768] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /221/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 214.773145][ T5768] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /221/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 214.802583][ T5768] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /221/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 214.864034][ T5768] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /221/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 215.605115][ T8494] loop0: detected capacity change from 0 to 64 [ 215.815353][ T5829] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 216.007466][ T5829] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 216.026590][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.051999][ T5829] usb 3-1: config 0 descriptor?? [ 216.073029][ T5829] cp210x 3-1:0.0: cp210x converter detected [ 216.285745][ T7669] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.514328][ T5829] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 216.568837][ T5829] usb 3-1: cp210x converter now attached to ttyUSB0 [ 216.802465][ T5829] usb 3-1: USB disconnect, device number 12 [ 216.814196][ T8501] loop0: detected capacity change from 0 to 32768 [ 216.832273][ T5829] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 216.869467][ T5829] cp210x 3-1:0.0: device disconnected [ 216.953674][ T8503] loop4: detected capacity change from 0 to 32768 [ 216.979634][ T8503] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.923 (8503) [ 217.036834][ T8503] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 217.054660][ T8503] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 217.063579][ T8503] BTRFS info (device loop4): using free space tree [ 217.245017][ T8503] BTRFS info (device loop4): enabling ssd optimizations [ 217.274405][ T8503] BTRFS info (device loop4): auto enabling async discard [ 217.651523][ T6752] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 218.239066][ T5082] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.267327][ T5082] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.284799][ T5082] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.311785][ T5082] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.330189][ T8541] loop4: detected capacity change from 0 to 1024 [ 218.342722][ T5082] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.350296][ T5082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.453195][ T8541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.618211][ T6752] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.030131][ T8538] chnl_net:caif_netlink_parms(): no params data found [ 219.278549][ T8573] loop2: detected capacity change from 0 to 512 [ 219.294842][ T8573] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 219.330135][ T8538] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.356594][ T8573] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 219.368696][ T8538] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.379407][ T8573] Quota error (device loop2): write_blk: dquota write failed [ 219.387349][ T8573] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 219.397108][ T8573] Quota error (device loop2): write_blk: dquota write failed [ 219.406202][ T8573] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 219.416198][ T8573] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.940: Failed to acquire dquot type 1 [ 219.428350][ T8573] EXT4-fs (loop2): 1 truncate cleaned up [ 219.435458][ T8573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.463664][ T8538] bridge_slave_0: entered allmulticast mode [ 219.471718][ T8538] bridge_slave_0: entered promiscuous mode [ 219.508055][ T8538] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.515435][ T8538] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.522734][ T8538] bridge_slave_1: entered allmulticast mode [ 219.530450][ T8538] bridge_slave_1: entered promiscuous mode [ 219.576163][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.588160][ T8538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.625414][ T8538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.693315][ T5082] Bluetooth: hci1: command tx timeout [ 219.725076][ T8538] team0: Port device team_slave_0 added [ 219.742437][ T8538] team0: Port device team_slave_1 added [ 219.832042][ T8538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.839257][ T8538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.894251][ T8538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.945960][ T8538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.980915][ T8538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.017385][ T8582] loop2: detected capacity change from 0 to 512 [ 220.060813][ T8538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.150693][ T8582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.231999][ T8582] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.290217][ T8538] hsr_slave_0: entered promiscuous mode [ 220.341694][ T28] audit: type=1800 audit(1770385857.542:16): pid=8582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.944" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 220.366709][ T8538] hsr_slave_1: entered promiscuous mode [ 220.391370][ T8538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.399563][ T8538] Cannot create hsr debugfs directory [ 220.413166][ T5082] Bluetooth: hci0: command tx timeout [ 220.464600][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.822130][ T8538] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 220.912317][ T8599] loop2: detected capacity change from 0 to 8192 [ 220.946874][ T8599] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 220.962822][ T8599] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 220.972209][ T8599] REISERFS (device loop2): using ordered data mode [ 220.979167][ T8599] reiserfs: using flush barriers [ 220.988066][ T8599] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 221.005280][ T8599] REISERFS (device loop2): checking transaction log (loop2) [ 221.024032][ T8599] REISERFS (device loop2): Using rupasov hash to sort names [ 221.031689][ T8599] REISERFS (device loop2): using 3.5.x disk format [ 221.049528][ T8599] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 221.061346][ T8599] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 221.074440][ T8599] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 221.085933][ T8599] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 221.100563][ T8599] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 221.130000][ T8599] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 221.143296][ T8599] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 221.160304][ T8599] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 221.171890][ T8599] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 221.187745][ T8599] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 221.297065][ T8538] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 221.378073][ T8538] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 221.474932][ T8538] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 221.547076][ T8613] loop0: detected capacity change from 0 to 64 [ 221.689592][ T8613] hfs: request for non-existent node 24 in B*Tree [ 221.735276][ T8613] hfs: request for non-existent node 24 in B*Tree [ 221.777337][ T8620] hfs: request for non-existent node 25 in B*Tree [ 221.803424][ T8620] hfs: request for non-existent node 25 in B*Tree [ 221.868007][ T8538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.936074][ T8538] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.001875][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.009504][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.048394][ T8624] loop4: detected capacity change from 0 to 256 [ 222.074731][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.082115][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.104361][ T8624] exfat: Deprecated parameter 'utf8' [ 222.132142][ T8624] exfat: Deprecated parameter 'utf8' [ 222.159275][ T8624] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 222.292364][ T8624] exFAT-fs (loop4): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 222.346911][ T8538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.382235][ T8631] random: crng reseeded on system resumption [ 222.430663][ T8627] loop2: detected capacity change from 0 to 8192 [ 222.492040][ T5082] Bluetooth: hci0: command tx timeout [ 223.039530][ T8538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.219165][ T8648] input: syz1 as /devices/virtual/input/input12 [ 223.322908][ T5842] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 223.463356][ T8654] loop4: detected capacity change from 0 to 2048 [ 223.516385][ T8654] loop4: p3 < > [ 223.542716][ T5842] usb 1-1: Using ep0 maxpacket: 16 [ 223.557496][ T5842] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.581256][ T5842] usb 1-1: config 0 has no interfaces? [ 223.602162][ T5842] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 223.639869][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.682481][ T5842] usb 1-1: config 0 descriptor?? [ 223.962214][ T8666] netlink: 16 bytes leftover after parsing attributes in process `syz.4.972'. [ 224.021822][ T8538] veth0_vlan: entered promiscuous mode [ 224.028175][ T27] usb 1-1: USB disconnect, device number 11 [ 224.084653][ T8538] veth1_vlan: entered promiscuous mode [ 224.141218][ T8668] netlink: 44 bytes leftover after parsing attributes in process `syz.2.974'. [ 224.161166][ T8668] netem: unknown loss type 12 [ 224.166746][ T8668] netem: change failed [ 224.214160][ T8538] veth0_macvtap: entered promiscuous mode [ 224.251781][ T8538] veth1_macvtap: entered promiscuous mode [ 224.297928][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.325780][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.340358][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.353952][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.391031][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.402505][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.410594][ T8673] loop4: detected capacity change from 0 to 512 [ 224.423282][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.434847][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.463150][ T8538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.513575][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.537576][ T8673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.555945][ T8673] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.580923][ T5082] Bluetooth: hci0: command tx timeout [ 224.587651][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.597832][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.608421][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.618818][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.629358][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.639472][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.650320][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.663499][ T8538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.679897][ T8538] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.703522][ T8538] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.719970][ T8538] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.732442][ T8538] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.780997][ T8673] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 224.885468][ T6752] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.968045][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.002620][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.110614][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.128020][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.333598][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 225.548232][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 225.559226][ T8] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 225.578831][ T8] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 225.600602][ T8] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 225.620045][ T8680] loop2: detected capacity change from 0 to 32768 [ 225.627069][ T8] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 225.649679][ T8680] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.985 (8680) [ 225.651005][ T27] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 225.670666][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 225.705514][ T8] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 225.716397][ T8680] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 225.727227][ T8] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 225.736664][ T8680] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 225.748307][ T8] usb 5-1: Product: syz [ 225.752663][ T8] usb 5-1: Manufacturer: syz [ 225.757304][ T8] usb 5-1: SerialNumber: syz [ 225.771302][ T8680] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 225.784487][ T8] usb 5-1: config 0 descriptor?? [ 225.791871][ T8680] BTRFS info (device loop2): use zstd compression, level 3 [ 225.799147][ T8680] BTRFS info (device loop2): using free space tree [ 225.812125][ T8] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 225.834471][ T8] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 225.901391][ T27] usb 6-1: Using ep0 maxpacket: 32 [ 225.973132][ T27] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 225.999082][ T8680] BTRFS info (device loop2): enabling ssd optimizations [ 226.020142][ T8680] BTRFS info (device loop2): auto enabling async discard [ 226.020259][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.076920][ T5860] usb 5-1: USB disconnect, device number 6 [ 226.083357][ T27] usb 6-1: config 0 descriptor?? [ 226.120773][ T27] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 226.149069][ T5860] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 226.344224][ T5772] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 226.636067][ T5779] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop2 scanned by udevd (5779) [ 226.650049][ T5082] Bluetooth: hci0: command tx timeout [ 226.740976][ T5842] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 226.813734][ T27] usb 6-1: USB disconnect, device number 2 [ 226.970390][ T5842] usb 1-1: unable to get BOS descriptor or descriptor too short [ 226.990659][ T5842] usb 1-1: not running at top speed; connect to a high speed hub [ 227.034051][ T5842] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.054884][ T5842] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 227.086372][ T5842] usb 1-1: string descriptor 0 read error: -22 [ 227.100115][ T5842] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 227.111570][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.184703][ T5842] usb 1-1: 0:2 : does not exist [ 227.351307][ T8721] random: crng reseeded on system resumption [ 227.557601][ T8726] loop5: detected capacity change from 0 to 512 [ 227.865568][ T8728] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 228.020324][ T5842] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 228.046138][ T5842] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 228.049633][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 228.061506][ T5860] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 228.073447][ T5842] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 228.137924][ T5842] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 228.154800][ T5842] usb 1-1: USB disconnect, device number 12 [ 228.260037][ T5860] usb 3-1: Using ep0 maxpacket: 16 [ 228.268969][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 228.283808][ T5860] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.301121][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.318895][ T5860] usb 3-1: config 0 has no interfaces? [ 228.324535][ T8] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 228.338905][ T5860] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 228.348010][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.356110][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.366916][ T8] usb 5-1: config 0 descriptor?? [ 228.374775][ T5860] usb 3-1: config 0 descriptor?? [ 228.739189][ T5773] usb 3-1: USB disconnect, device number 13 [ 228.854492][ T8] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 229.271232][ T5842] usb 5-1: USB disconnect, device number 7 [ 229.740832][ T8736] loop5: detected capacity change from 0 to 32768 [ 229.857739][ T8736] read_mapping_page failed! [ 229.898393][ T8736] ERROR: (device loop5): txCommit: [ 229.898393][ T8736] [ 230.026740][ T8756] netlink: 'syz.2.1010': attribute type 1 has an invalid length. [ 230.246932][ T8760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1004'. [ 230.606538][ T8766] netdevsim netdevsim2 netdevsim0: Unsupported IPsec algorithm [ 230.926915][ T8776] random: crng reseeded on system resumption [ 231.273380][ T8789] loop2: detected capacity change from 0 to 16 [ 231.287916][ T5842] hid-generic 0005:16C0:05DF.0007: item fetching failed at offset 0/2 [ 231.308067][ T5842] hid-generic: probe of 0005:16C0:05DF.0007 failed with error -22 [ 231.378370][ T8789] erofs: (device loop2): mounted with root inode @ nid 36. [ 231.430561][ T8789] syz.2.1013: attempt to access beyond end of device [ 231.430561][ T8789] loop2: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 231.487005][ T8789] syz.2.1013: attempt to access beyond end of device [ 231.487005][ T8789] loop2: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 231.568024][ T8795] syz.2.1013: attempt to access beyond end of device [ 231.568024][ T8795] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 231.720001][ T5772] BUG: Bad page state in process syz-executor pfn:553f1 [ 231.728283][ T5772] page:ffffea000154fc40 refcount:0 mapcount:0 mapping:ffff8880768a8d20 index:0x2 pfn:0x553f1 [ 231.738627][ T5772] aops:z_erofs_cache_aops ino:0 [ 231.743536][ T5772] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 231.751902][ T5772] page_type: 0xffffffff() [ 231.756286][ T5772] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff8880768a8d20 [ 231.765040][ T5772] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 231.775172][ T5772] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 231.782663][ T5772] page_owner tracks the page as allocated [ 231.789790][ T5772] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 8789, tgid 8787 (syz.2.1013), ts 231430003178, free_ts 231110620773 [ 231.812022][ T5772] post_alloc_hook+0x1c1/0x200 [ 231.816859][ T5772] get_page_from_freelist+0x1951/0x19e0 [ 231.822689][ T5772] __alloc_pages+0x1f0/0x460 [ 231.827719][ T5772] z_erofs_do_read_page+0x2181/0x36b0 [ 231.833168][ T5772] z_erofs_readahead+0x88b/0xda0 [ 231.838385][ T5772] read_pages+0x189/0x850 [ 231.842772][ T5772] page_cache_ra_unbounded+0x68a/0x770 [ 231.848382][ T5772] force_page_cache_ra+0x2c1/0x320 [ 231.853553][ T5772] generic_fadvise+0x47e/0x780 [ 231.858525][ T5772] __x64_sys_fadvise64+0x140/0x180 [ 231.863708][ T5772] do_syscall_64+0x55/0xa0 [ 231.868265][ T5772] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.874229][ T5772] page last free stack trace: [ 231.879051][ T5772] free_unref_page_prepare+0x7b2/0x8c0 [ 231.884581][ T5772] free_unref_page_list+0xbe/0x860 [ 231.890447][ T5772] release_pages+0x1f7a/0x2200 [ 231.895269][ T5772] tlb_flush_mmu+0x377/0x510 [ 231.900117][ T5772] tlb_finish_mmu+0xc3/0x1d0 [ 231.904779][ T5772] exit_mmap+0x428/0xb90 [ 231.909221][ T5772] __mmput+0x118/0x3c0 [ 231.913365][ T5772] exit_mm+0x1f2/0x2c0 [ 231.917667][ T5772] do_exit+0x8dd/0x2460 [ 231.921889][ T5772] do_group_exit+0x21b/0x2d0 [ 231.926538][ T5772] get_signal+0x12fc/0x13f0 [ 231.927460][ T5842] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 231.931819][ T5772] arch_do_signal_or_restart+0xc2/0x800 [ 231.944335][ T5772] exit_to_user_mode_loop+0x70/0x110 [ 231.949732][ T5772] exit_to_user_mode_prepare+0xee/0x180 [ 231.955348][ T5772] syscall_exit_to_user_mode+0x1a/0x50 [ 231.961044][ T5772] do_syscall_64+0x61/0xa0 [ 231.965527][ T5772] Modules linked in: [ 231.969582][ T5772] CPU: 0 PID: 5772 Comm: syz-executor Not tainted syzkaller #0 [ 231.977198][ T5772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 231.987330][ T5772] Call Trace: [ 231.990659][ T5772] [ 231.993642][ T5772] dump_stack_lvl+0x18c/0x250 [ 231.998395][ T5772] ? show_regs_print_info+0x20/0x20 [ 232.003704][ T5772] ? swiotlb_print_info+0x70/0x70 [ 232.008824][ T5772] bad_page+0x14b/0x170 [ 232.013036][ T5772] free_unref_page_prepare+0x85f/0x8c0 [ 232.018660][ T5772] free_unref_page+0x32/0x2e0 [ 232.023402][ T5772] ? __folio_put+0xef/0x210 [ 232.027961][ T5772] erofs_try_to_free_all_cached_pages+0x295/0x5f0 [ 232.034446][ T5772] erofs_shrink_workstation+0x11f/0x290 [ 232.040037][ T5772] ? erofs_shrinker_unregister+0x170/0x170 [ 232.045877][ T5772] ? io_schedule+0xd0/0xd0 [ 232.050331][ T5772] ? kobject_put+0x428/0x460 [ 232.054958][ T5772] erofs_shrinker_unregister+0x5d/0x170 [ 232.060534][ T5772] erofs_put_super+0x4e/0x150 [ 232.065244][ T5772] ? erofs_free_inode+0xb0/0xb0 [ 232.070135][ T5772] generic_shutdown_super+0x134/0x2b0 [ 232.075666][ T5772] kill_block_super+0x44/0x90 [ 232.080383][ T5772] erofs_kill_sb+0x4c/0x140 [ 232.084926][ T5772] deactivate_locked_super+0x97/0x100 [ 232.090334][ T5772] cleanup_mnt+0x43b/0x4d0 [ 232.094804][ T5772] task_work_run+0x1d4/0x260 [ 232.099440][ T5772] ? task_work_cancel+0x220/0x220 [ 232.104506][ T5772] ? exit_to_user_mode_loop+0x3b/0x110 [ 232.110008][ T5772] exit_to_user_mode_loop+0xe6/0x110 [ 232.115332][ T5772] exit_to_user_mode_prepare+0xee/0x180 [ 232.120912][ T5772] syscall_exit_to_user_mode+0x1a/0x50 [ 232.126413][ T5772] do_syscall_64+0x61/0xa0 [ 232.130878][ T5772] ? clear_bhb_loop+0x40/0x90 [ 232.135589][ T5772] ? clear_bhb_loop+0x40/0x90 [ 232.140300][ T5772] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.146222][ T5772] RIP: 0033:0x7f639539c117 [ 232.150678][ T5772] Code: a2 c7 05 7c c4 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 232.170311][ T5772] RSP: 002b:00007ffca70e3908 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 232.178758][ T5772] RAX: 0000000000000000 RBX: 00007f639540471f RCX: 00007f639539c117 [ 232.186764][ T5772] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca70e39c0 [ 232.194771][ T5772] RBP: 00007ffca70e39c0 R08: 00007ffca70e49c0 R09: 00000000ffffffff [ 232.202785][ T5772] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffca70e4a50 [ 232.210782][ T5772] R13: 00007f639540471f R14: 00000000000388c5 R15: 00007ffca70e4a90 [ 232.218800][ T5772] [ 232.222917][ T5772] Disabling lock debugging due to kernel taint [ 232.229240][ T5772] BUG: Bad page state in process syz-executor pfn:6562c [ 232.236295][ T5772] page:ffffea0001958b00 refcount:0 mapcount:0 mapping:ffff8880768a8d20 index:0x3 pfn:0x6562c [ 232.246535][ T5772] aops:z_erofs_cache_aops ino:0 [ 232.251518][ T5772] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 232.259317][ T5772] page_type: 0xffffffff() [ 232.263696][ T5772] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff8880768a8d20 [ 232.272355][ T5772] raw: 0000000000000003 0000000000000000 00000000ffffffff 0000000000000000 [ 232.281032][ T5772] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 232.288375][ T5772] page_owner tracks the page as allocated [ 232.294120][ T5772] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 8789, tgid 8787 (syz.2.1013), ts 231430021973, free_ts 231110606039 [ 232.312358][ T8803] loop5: detected capacity change from 0 to 1024 [ 232.317973][ T5772] post_alloc_hook+0x1c1/0x200 [ 232.323170][ T5842] usb 5-1: Using ep0 maxpacket: 16 [ 232.327500][ T5772] get_page_from_freelist+0x1951/0x19e0 [ 232.338194][ T5772] __alloc_pages+0x1f0/0x460 [ 232.342823][ T5772] z_erofs_do_read_page+0x2181/0x36b0 [ 232.348277][ T5772] z_erofs_readahead+0x88b/0xda0 [ 232.353411][ T5772] read_pages+0x189/0x850 [ 232.357817][ T5772] page_cache_ra_unbounded+0x68a/0x770 [ 232.362506][ T5842] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.363304][ T5772] force_page_cache_ra+0x2c1/0x320 [ 232.378704][ T5772] generic_fadvise+0x47e/0x780 [ 232.383512][ T5772] __x64_sys_fadvise64+0x140/0x180 [ 232.388720][ T5772] do_syscall_64+0x55/0xa0 [ 232.393193][ T5772] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.399695][ T5772] page last free stack trace: [ 232.404420][ T5772] free_unref_page_prepare+0x7b2/0x8c0 [ 232.404875][ T8803] EXT4-fs: Ignoring removed bh option [ 232.411422][ T5772] free_unref_page_list+0xbe/0x860 [ 232.416419][ T5842] usb 5-1: config 0 has no interfaces? [ 232.420614][ T5772] release_pages+0x1f7a/0x2200 [ 232.430988][ T5772] tlb_flush_mmu+0x377/0x510 [ 232.435628][ T5772] tlb_finish_mmu+0xc3/0x1d0 [ 232.440310][ T5772] exit_mmap+0x428/0xb90 [ 232.444596][ T5772] __mmput+0x118/0x3c0 [ 232.448745][ T5772] exit_mm+0x1f2/0x2c0 [ 232.452860][ T5772] do_exit+0x8dd/0x2460 [ 232.457157][ T5772] do_group_exit+0x21b/0x2d0 [ 232.460290][ T5842] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 232.461779][ T5772] get_signal+0x12fc/0x13f0 [ 232.475430][ T5772] arch_do_signal_or_restart+0xc2/0x800 [ 232.481086][ T5772] exit_to_user_mode_loop+0x70/0x110 [ 232.486418][ T5772] exit_to_user_mode_prepare+0xee/0x180 [ 232.492222][ T5772] syscall_exit_to_user_mode+0x1a/0x50 [ 232.497769][ T5772] do_syscall_64+0x61/0xa0 [ 232.502824][ T5772] Modules linked in: [ 232.506902][ T5772] CPU: 0 PID: 5772 Comm: syz-executor Tainted: G B syzkaller #0 [ 232.515963][ T5772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 232.526047][ T5772] Call Trace: [ 232.529356][ T5772] [ 232.532310][ T5772] dump_stack_lvl+0x18c/0x250 [ 232.537059][ T5772] ? show_regs_print_info+0x20/0x20 [ 232.542343][ T5772] ? swiotlb_print_info+0x70/0x70 [ 232.547406][ T5772] bad_page+0x14b/0x170 [ 232.551595][ T5772] free_unref_page_prepare+0x85f/0x8c0 [ 232.557123][ T5772] free_unref_page+0x32/0x2e0 [ 232.561841][ T5772] ? __folio_put+0xef/0x210 [ 232.566367][ T5772] erofs_try_to_free_all_cached_pages+0x295/0x5f0 [ 232.572816][ T5772] erofs_shrink_workstation+0x11f/0x290 [ 232.578391][ T5772] ? erofs_shrinker_unregister+0x170/0x170 [ 232.584231][ T5772] ? io_schedule+0xd0/0xd0 [ 232.588682][ T5772] ? kobject_put+0x428/0x460 [ 232.593302][ T5772] erofs_shrinker_unregister+0x5d/0x170 [ 232.598881][ T5772] erofs_put_super+0x4e/0x150 [ 232.603596][ T5772] ? erofs_free_inode+0xb0/0xb0 [ 232.608493][ T5772] generic_shutdown_super+0x134/0x2b0 [ 232.613892][ T5772] kill_block_super+0x44/0x90 [ 232.618595][ T5772] erofs_kill_sb+0x4c/0x140 [ 232.623153][ T5772] deactivate_locked_super+0x97/0x100 [ 232.628552][ T5772] cleanup_mnt+0x43b/0x4d0 [ 232.632996][ T5772] task_work_run+0x1d4/0x260 [ 232.637635][ T5772] ? task_work_cancel+0x220/0x220 [ 232.642709][ T5772] ? exit_to_user_mode_loop+0x3b/0x110 [ 232.648231][ T5772] exit_to_user_mode_loop+0xe6/0x110 [ 232.653572][ T5772] exit_to_user_mode_prepare+0xee/0x180 [ 232.659160][ T5772] syscall_exit_to_user_mode+0x1a/0x50 [ 232.664668][ T5772] do_syscall_64+0x61/0xa0 [ 232.669125][ T5772] ? clear_bhb_loop+0x40/0x90 [ 232.673830][ T5772] ? clear_bhb_loop+0x40/0x90 [ 232.678535][ T5772] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.684455][ T5772] RIP: 0033:0x7f639539c117 [ 232.688894][ T5772] Code: a2 c7 05 7c c4 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 232.708532][ T5772] RSP: 002b:00007ffca70e3908 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 232.716994][ T5772] RAX: 0000000000000000 RBX: 00007f639540471f RCX: 00007f639539c117 [ 232.725006][ T5772] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca70e39c0 [ 232.733003][ T5772] RBP: 00007ffca70e39c0 R08: 00007ffca70e49c0 R09: 00000000ffffffff [ 232.741020][ T5772] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffca70e4a50 [ 232.749080][ T5772] R13: 00007f639540471f R14: 00000000000388c5 R15: 00007ffca70e4a90 [ 232.757100][ T5772] [ 232.760269][ T5772] BUG: Bad page state in process syz-executor pfn:5eaf9 [ 232.768354][ T5772] page:ffffea00017abe40 refcount:0 mapcount:0 mapping:ffff8880768a8d20 index:0x4 pfn:0x5eaf9 [ 232.778789][ T5772] aops:z_erofs_cache_aops ino:0 [ 232.783694][ T5772] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 232.791535][ T5772] page_type: 0xffffffff() [ 232.795959][ T5772] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff8880768a8d20 [ 232.797185][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.804765][ T5772] raw: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 232.821997][ T5772] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 232.829390][ T5772] page_owner tracks the page as allocated [ 232.835145][ T5772] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 8789, tgid 8787 (syz.2.1013), ts 231430040822, free_ts 231110590829 [ 232.855678][ T5842] usb 5-1: config 0 descriptor?? [ 232.857203][ T5772] post_alloc_hook+0x1c1/0x200 [ 232.857240][ T5772] get_page_from_freelist+0x1951/0x19e0 [ 232.857259][ T5772] __alloc_pages+0x1f0/0x460 [ 232.857275][ T5772] z_erofs_do_read_page+0x2181/0x36b0 [ 232.857296][ T5772] z_erofs_readahead+0x88b/0xda0 [ 232.857316][ T5772] read_pages+0x189/0x850 [ 232.857332][ T5772] page_cache_ra_unbounded+0x68a/0x770 [ 232.857356][ T5772] force_page_cache_ra+0x2c1/0x320 [ 232.857374][ T5772] generic_fadvise+0x47e/0x780 [ 232.857398][ T5772] __x64_sys_fadvise64+0x140/0x180 [ 232.857421][ T5772] do_syscall_64+0x55/0xa0 [ 232.918700][ T5772] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.924649][ T5772] page last free stack trace: [ 232.929414][ T5772] free_unref_page_prepare+0x7b2/0x8c0 [ 232.934939][ T5772] free_unref_page_list+0xbe/0x860 [ 232.940153][ T5772] release_pages+0x1f7a/0x2200 [ 232.944961][ T5772] tlb_flush_mmu+0x377/0x510 [ 232.949666][ T5772] tlb_finish_mmu+0xc3/0x1d0 [ 232.954326][ T5772] exit_mmap+0x428/0xb90 [ 232.958753][ T5772] __mmput+0x118/0x3c0 [ 232.962872][ T5772] exit_mm+0x1f2/0x2c0 [ 232.967053][ T5772] do_exit+0x8dd/0x2460 [ 232.971257][ T5772] do_group_exit+0x21b/0x2d0 [ 232.973313][ T8803] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 232.975881][ T5772] get_signal+0x12fc/0x13f0 [ 232.975905][ T5772] arch_do_signal_or_restart+0xc2/0x800 [ 232.997416][ T5772] exit_to_user_mode_loop+0x70/0x110 [ 233.002767][ T5772] exit_to_user_mode_prepare+0xee/0x180 [ 233.008449][ T5772] syscall_exit_to_user_mode+0x1a/0x50 [ 233.014547][ T5772] do_syscall_64+0x61/0xa0 [ 233.019216][ T5772] Modules linked in: [ 233.023150][ T5772] CPU: 0 PID: 5772 Comm: syz-executor Tainted: G B syzkaller #0 [ 233.032228][ T5772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 233.042349][ T5772] Call Trace: [ 233.045672][ T5772] [ 233.048645][ T5772] dump_stack_lvl+0x18c/0x250 [ 233.053387][ T5772] ? show_regs_print_info+0x20/0x20 [ 233.058654][ T5772] ? swiotlb_print_info+0x70/0x70 [ 233.063759][ T5772] bad_page+0x14b/0x170 [ 233.067973][ T5772] free_unref_page_prepare+0x85f/0x8c0 [ 233.073516][ T5772] free_unref_page+0x32/0x2e0 [ 233.078260][ T5772] ? __folio_put+0xef/0x210 [ 233.082815][ T5772] erofs_try_to_free_all_cached_pages+0x295/0x5f0 [ 233.089294][ T5772] erofs_shrink_workstation+0x11f/0x290 [ 233.094901][ T5772] ? erofs_shrinker_unregister+0x170/0x170 [ 233.100762][ T5772] ? io_schedule+0xd0/0xd0 [ 233.105241][ T5772] ? kobject_put+0x428/0x460 [ 233.109877][ T5772] erofs_shrinker_unregister+0x5d/0x170 [ 233.115470][ T5772] erofs_put_super+0x4e/0x150 [ 233.120205][ T5772] ? erofs_free_inode+0xb0/0xb0 [ 233.125091][ T5772] generic_shutdown_super+0x134/0x2b0 [ 233.130527][ T5772] kill_block_super+0x44/0x90 [ 233.135234][ T5772] erofs_kill_sb+0x4c/0x140 [ 233.139782][ T5772] deactivate_locked_super+0x97/0x100 [ 233.145552][ T5772] cleanup_mnt+0x43b/0x4d0 [ 233.150720][ T5772] task_work_run+0x1d4/0x260 [ 233.155460][ T5772] ? task_work_cancel+0x220/0x220 [ 233.160711][ T5772] ? exit_to_user_mode_loop+0x3b/0x110 [ 233.166205][ T5772] exit_to_user_mode_loop+0xe6/0x110 [ 233.171520][ T5772] exit_to_user_mode_prepare+0xee/0x180 [ 233.177114][ T5772] syscall_exit_to_user_mode+0x1a/0x50 [ 233.182597][ T5772] do_syscall_64+0x61/0xa0 [ 233.187043][ T5772] ? clear_bhb_loop+0x40/0x90 [ 233.191746][ T5772] ? clear_bhb_loop+0x40/0x90 [ 233.196470][ T5772] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.202487][ T5772] RIP: 0033:0x7f639539c117 [ 233.206931][ T5772] Code: a2 c7 05 7c c4 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 233.226662][ T5772] RSP: 002b:00007ffca70e3908 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 233.235118][ T5772] RAX: 0000000000000000 RBX: 00007f639540471f RCX: 00007f639539c117 [ 233.243114][ T5772] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca70e39c0 [ 233.251129][ T5772] RBP: 00007ffca70e39c0 R08: 00007ffca70e49c0 R09: 00000000ffffffff [ 233.259139][ T5772] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffca70e4a50 [ 233.267136][ T5772] R13: 00007f639540471f R14: 00000000000388c5 R15: 00007ffca70e4a90 [ 233.275320][ T5772] [ 233.337619][ T8803] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.400471][ T5842] usb 5-1: USB disconnect, device number 8 [ 233.426669][ T28] audit: type=1800 audit(1770385870.648:17): pid=8803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1020" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 237.684249][ T5782] Bluetooth: hci3: command 0x0406 tx timeout