last executing test programs: 6.100354782s ago: executing program 0 (id=1628): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ac0)=@newtfilter={0x8c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x60, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x6, 0x7fffffff, 0x7, 0x400, {0x4, 0x0, 0x9b1, 0x63c8, 0x800}, {0x5, 0x2, 0x8, 0x7fff, 0xff, 0x8000}, 0x400, 0x16ff, 0x7}}]}, @TCA_FW_INDEV={0x14, 0x3, 'vlan0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x100}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 5.928375892s ago: executing program 4 (id=1629): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x1}, @IFLA_MACSEC_REPLAY_PROTECT={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 5.597584561s ago: executing program 4 (id=1632): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000100)={0x0, 0x10}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000003c0)={0x0, 0x31, 0x2, "bc30"}, 0x0, 0x0, 0x0, 0x0}) 4.883855783s ago: executing program 0 (id=1638): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc042, 0x0) fcntl$setlease(r0, 0x400, 0x1) unlink(&(0x7f0000000280)='./file1\x00') 4.715654953s ago: executing program 3 (id=1639): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20108c0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESOCT, @ANYRESOCT, @ANYRES64], 0x1, 0x61f5, &(0x7f00000075c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 3.426802549s ago: executing program 4 (id=1646): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='maps\x00') exit(0x800000000f) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 3.100033568s ago: executing program 0 (id=1648): r0 = socket(0xa, 0x3, 0xff) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x81, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x8, 0x2b, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@hopopts={0xff}]}}}}}, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x80000000, 0x0, 0x0) 3.06597385s ago: executing program 1 (id=1649): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="0800260090150000080057"], 0x2c}}, 0x80) 2.970374046s ago: executing program 3 (id=1651): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.859045492s ago: executing program 0 (id=1652): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x10, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1001c}, [@FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffffffd9, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 2.807906125s ago: executing program 1 (id=1653): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000640)) 2.635580266s ago: executing program 0 (id=1655): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000000200)=ANY=[@ANYBLOB='errors=remount-ro,noquota,nodiscard,iocharset=macturkish,errors=continue,errors=continue,nointegrity\x00iocharset=macgreek,quota,usrquota,usrquota,errors=remount-rocard,noquota,noquota,\x00\x00\x00\x00\x00'], 0x1, 0x611f, &(0x7f00000154c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', 0x101000, 0x108) syz_mount_image$exfat(0x0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2901842, 0x0, 0x0, 0x0, &(0x7f0000000100)) getdents64(r0, &(0x7f0000000f80)=""/4081, 0xff1) 2.471904605s ago: executing program 1 (id=1656): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@dax_inode}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@nombcache}, {@orlov}, {@abort}, {@nobh}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2.378462361s ago: executing program 4 (id=1658): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x200800, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f00000002c0)={0x1, r1}) 2.264483757s ago: executing program 3 (id=1659): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x789, &(0x7f0000000fc0)="$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") r0 = open(&(0x7f0000000780)='./bus\x00', 0x4c07e, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 1.955749425s ago: executing program 4 (id=1661): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20108c0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESOCT, @ANYRESOCT, @ANYRES64], 0x1, 0x61f5, &(0x7f00000075c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 1.663498862s ago: executing program 3 (id=1663): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x4, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) 1.607740256s ago: executing program 2 (id=1664): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1a, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a654, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.547725749s ago: executing program 1 (id=1665): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x5509, 0x0) 1.414923647s ago: executing program 3 (id=1666): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) fremovexattr(0xffffffffffffffff, 0x0) 1.404425688s ago: executing program 2 (id=1667): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a300000000044000400200001000a004e24000000440040000000002d2d000000000000004c37160000200002"], 0x6c}}, 0x0) 1.151049982s ago: executing program 2 (id=1668): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f786dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 562.588567ms ago: executing program 2 (id=1669): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 556.625857ms ago: executing program 4 (id=1670): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x1c, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x4040) 542.464739ms ago: executing program 1 (id=1671): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f00000003c0)=[{0x20, 0x0, 0x0, 0x0, @tick=0xb, {0x0, 0xfe}, {}, @control={0x9, 0x0, 0xa}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x3ff}, {0x6, 0x4}, {}, @quote}], 0x38) 271.778654ms ago: executing program 2 (id=1672): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000014000100fcffffff000000000a000000", @ANYRES32=r2, @ANYBLOB="14000100ff020000060000000000000000000001080008000204"], 0x34}}, 0x0) 201.219479ms ago: executing program 1 (id=1673): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x61d0, &(0x7f000000cb40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) getdents64(r0, 0x0, 0x22) 150.585341ms ago: executing program 3 (id=1674): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 53.710097ms ago: executing program 0 (id=1675): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000004, 0x1, 0x2, '\x00', 0x8}}, 0x2a) 0s ago: executing program 2 (id=1676): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x3a, 0x0, 0x2}]}) kernel console output (not intermixed with test programs): size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 183.191833][ T4279] XFS (loop2): Unmounting Filesystem [ 183.206788][ T6534] REISERFS (device loop3): checking transaction log (loop3) [ 183.275097][ T6534] REISERFS (device loop3): Using r5 hash to sort names [ 183.282430][ T6534] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 183.383649][ T6534] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 183.826925][ T26] audit: type=1400 audit(1769735870.325:8): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A202020202030206B420A416E6F6E4875676550616765733A20202020202020202030206B420A53686D656D506D644D61707065643A202020202020202030206B420A46696C65506D644D61707065643A20202020202020202030206B420A5368617265645F48756765746C623A202020202020202030206B420A507269766174655F48756765746C623A2020202020202030206B420A53 pid=6551 comm="syz.1.834" [ 183.971482][ T6554] loop4: detected capacity change from 0 to 2048 [ 184.070517][ T6554] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.201081][ T6563] loop1: detected capacity change from 0 to 512 [ 184.709282][ T6574] device ip6gretap1 entered promiscuous mode [ 185.209179][ T6594] loop2: detected capacity change from 0 to 128 [ 185.266493][ T6594] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 185.301996][ T6594] ext4 filesystem being mounted at /174/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 185.426072][ T26] audit: type=1800 audit(1769735871.925:9): pid=6594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.862" name="bus" dev="loop2" ino=12 res=0 errno=0 [ 185.519799][ T4334] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 185.585646][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 185.704290][ T4341] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 185.719293][ T4334] usb 2-1: Using ep0 maxpacket: 32 [ 185.728233][ T4334] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 185.747651][ T4334] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 185.774238][ T4334] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 185.789763][ T4334] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 185.803739][ T4334] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.825919][ T4334] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 185.845659][ T4334] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 185.864194][ T4334] usb 2-1: Product: syz [ 185.870940][ T6592] loop4: detected capacity change from 0 to 32768 [ 185.878816][ T4334] usb 2-1: Manufacturer: syz [ 185.883479][ T4334] usb 2-1: SerialNumber: syz [ 185.894324][ T4341] usb 4-1: Using ep0 maxpacket: 32 [ 185.901354][ T4341] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 185.925774][ T4341] usb 4-1: config 0 has no interface number 0 [ 185.932056][ T6592] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.850 (6592) [ 185.945040][ T4334] usb 2-1: config 0 descriptor?? [ 185.964383][ T4341] usb 4-1: config 0 interface 130 has no altsetting 0 [ 185.982787][ T4334] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 185.993483][ T4341] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1201, bcdDevice=69.37 [ 186.021433][ T4334] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 186.042951][ T4341] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.079820][ T4341] usb 4-1: Product: syz [ 186.088034][ T4341] usb 4-1: Manufacturer: syz [ 186.094576][ T4341] usb 4-1: SerialNumber: syz [ 186.112202][ T4341] usb 4-1: config 0 descriptor?? [ 186.181885][ T6592] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 186.192447][ T6592] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 186.246192][ T6597] ldusb 2-1:0.0: Write buffer overflow, 796 bytes dropped [ 186.256027][ T6592] BTRFS info (device loop4): use zlib compression, level 3 [ 186.263364][ T6592] BTRFS info (device loop4): using free space tree [ 186.298148][ T4794] usb 2-1: USB disconnect, device number 6 [ 186.298167][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 186.314812][ T6597] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 186.344543][ T4794] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 186.362367][ T4341] option 4-1:0.130: GSM modem (1-port) converter detected [ 186.387942][ T4341] usb 4-1: USB disconnect, device number 9 [ 186.418089][ T4341] option 4-1:0.130: device disconnected [ 186.624440][ T6592] BTRFS info (device loop4): enabling ssd optimizations [ 186.723933][ T4278] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 186.824433][ T4334] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 187.024338][ T4334] usb 1-1: Using ep0 maxpacket: 32 [ 187.036049][ T4334] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 187.057926][ T6645] loop2: detected capacity change from 0 to 2048 [ 187.064740][ T4334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.065731][ T6647] loop3: detected capacity change from 0 to 512 [ 187.110129][ T6647] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 187.128294][ T4334] usb 1-1: config 0 descriptor?? [ 187.158274][ T6649] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.241912][ T6647] EXT4-fs (loop3): 1 orphan inode deleted [ 187.253261][ T6647] EXT4-fs (loop3): 1 truncate cleaned up [ 187.260995][ T6647] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 187.349393][ T6649] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 187.370929][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 187.384800][ T4334] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 187.429836][ T6649] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 187.456038][ T4334] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 187.501069][ T6649] Remounting filesystem read-only [ 187.520205][ T4334] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 187.530289][ T6645] NILFS (loop2): mounting fs with errors [ 187.550784][ T6645] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 187.554420][ T4334] usb 1-1: media controller created [ 187.604582][ T6645] Remounting filesystem read-only [ 187.639025][ T6656] loop4: detected capacity change from 0 to 256 [ 187.661755][ T4334] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.679582][ T6656] exfat: Deprecated parameter 'utf8' [ 187.682276][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.871'. [ 187.738403][ T6656] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 187.768530][ T4279] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 187.785432][ T4334] az6027: usb out operation failed. (-71) [ 187.796196][ T4334] az6027: usb out operation failed. (-71) [ 187.802108][ T4334] stb0899_attach: Driver disabled by Kconfig [ 187.809391][ T4334] az6027: no front-end attached [ 187.809391][ T4334] [ 187.887498][ T4334] az6027: usb out operation failed. (-71) [ 187.924916][ T4334] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 187.936108][ T4334] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 187.981372][ T4334] dvb-usb: schedule remote query interval to 400 msecs. [ 188.032279][ T4334] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 188.124710][ T4334] usb 1-1: USB disconnect, device number 7 [ 188.236717][ T4334] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 188.265267][ T22] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 188.321571][ T6670] netlink: 16 bytes leftover after parsing attributes in process `syz.2.877'. [ 188.470516][ T22] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 188.472965][ T6673] loop0: detected capacity change from 0 to 8192 [ 188.493558][ T22] usb 2-1: config 0 has no interface number 0 [ 188.517848][ T22] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 188.547162][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.561044][ T6673] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 188.590075][ T22] usb 2-1: Product: syz [ 188.603842][ T22] usb 2-1: Manufacturer: syz [ 188.612380][ T22] usb 2-1: SerialNumber: syz [ 188.649247][ T22] usb 2-1: config 0 descriptor?? [ 188.668268][ T6673] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 188.730790][ T6673] REISERFS (device loop0): using ordered data mode [ 188.763969][ T6673] reiserfs: using flush barriers [ 188.794259][ T6673] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 188.824737][ T6673] REISERFS (device loop0): checking transaction log (loop0) [ 188.840620][ T6673] REISERFS (device loop0): Using r5 hash to sort names [ 188.853633][ T6673] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 188.881004][ T6673] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 188.894631][ T4334] kernel read not supported for file /dsp (pid: 4334 comm: kworker/0:6) [ 188.913125][ T22] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 188.949771][ T22] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 188.989267][ T22] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 189.007089][ T6673] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 189.026582][ T22] usb 2-1: media controller created [ 189.072188][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.077323][ T6673] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 189.131407][ T6673] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 189.635328][ T6690] program syz.4.885 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.213603][ T22] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 190.316467][ T6707] loop2: detected capacity change from 0 to 512 [ 190.333464][ T22] usb 2-1: USB disconnect, device number 7 [ 190.361179][ T6707] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.892: inode #1: comm syz.2.892: iget: illegal inode # [ 190.439138][ T6707] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.892: error while reading EA inode 1 err=-117 [ 190.458739][ T6710] loop0: detected capacity change from 0 to 128 [ 190.539261][ T6707] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.892: inode #1: comm syz.2.892: iget: illegal inode # [ 190.562793][ T6710] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 190.692861][ T6707] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.892: error while reading EA inode 1 err=-117 [ 190.726415][ T6707] EXT4-fs (loop2): 1 orphan inode deleted [ 190.732257][ T6707] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 190.774872][ T9] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 191.006718][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 191.261631][ T6727] loop1: detected capacity change from 0 to 256 [ 191.408832][ T6727] FAT-fs (loop1): Directory bread(block 64) failed [ 191.439063][ T6727] FAT-fs (loop1): Directory bread(block 65) failed [ 191.464385][ T6727] FAT-fs (loop1): Directory bread(block 66) failed [ 191.471007][ T6727] FAT-fs (loop1): Directory bread(block 67) failed [ 191.512701][ T6725] loop0: detected capacity change from 0 to 4096 [ 191.544530][ T6727] FAT-fs (loop1): Directory bread(block 68) failed [ 191.582375][ T6732] netlink: 44 bytes leftover after parsing attributes in process `syz.2.903'. [ 191.611259][ T6727] FAT-fs (loop1): Directory bread(block 69) failed [ 191.633994][ T6725] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 191.663762][ T6727] FAT-fs (loop1): Directory bread(block 70) failed [ 191.697366][ T6727] FAT-fs (loop1): Directory bread(block 71) failed [ 191.707331][ T6725] ntfs3: loop0: Failed to load $Extend. [ 191.736746][ T6727] FAT-fs (loop1): Directory bread(block 72) failed [ 191.785748][ T6727] FAT-fs (loop1): Directory bread(block 73) failed [ 192.038708][ T6734] loop4: detected capacity change from 0 to 4096 [ 192.178467][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.906'. [ 192.341802][ T6734] ntfs: (device loop4): parse_options(): NLS character set is not found. Using previous one default. [ 192.384631][ T6734] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 192.449605][ T6746] netlink: 'syz.1.909': attribute type 10 has an invalid length. [ 192.479204][ T6734] ntfs: volume version 3.1. [ 192.528750][ T6746] bond0: (slave bond_slave_0): Releasing backup interface [ 192.566428][ T6746] device bond_slave_0 left promiscuous mode [ 192.590631][ T6734] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set default. You might want to try to use the mount option nls=utf8. [ 192.653762][ T6734] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 193.238141][ T4320] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 193.414493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 193.444387][ T4320] usb 5-1: Using ep0 maxpacket: 16 [ 193.451628][ T4320] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.502681][ T4320] usb 5-1: config 0 interface 0 has no altsetting 0 [ 193.530001][ T4320] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 193.567855][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.602408][ T4320] usb 5-1: config 0 descriptor?? [ 194.044297][ T4319] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 194.080842][ T4320] cougar 0003:060B:500A.000B: usage count exceeds max: fixing up report descriptor [ 194.118434][ T4320] cougar 0003:060B:500A.000B: unexpected long global item [ 194.153606][ T4320] cougar 0003:060B:500A.000B: parse failed [ 194.163065][ T4320] cougar: probe of 0003:060B:500A.000B failed with error -22 [ 194.238104][ T4319] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 194.250121][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.256518][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.289049][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.304208][ T4319] usb 3-1: Product: syz [ 194.314455][ T4319] usb 3-1: Manufacturer: syz [ 194.319219][ T4319] usb 3-1: SerialNumber: syz [ 194.326010][ T4320] usb 5-1: USB disconnect, device number 9 [ 194.340577][ T4319] usb 3-1: config 0 descriptor?? [ 194.547511][ T6774] loop3: detected capacity change from 0 to 32768 [ 194.571266][ T6780] loop1: detected capacity change from 0 to 128 [ 194.609704][ T6776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.629269][ T6776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.654643][ T4282] Bluetooth: hci4: unknown advertising packet type: 0x17 [ 194.654725][ T4282] Bluetooth: hci4: Dropping invalid advertising data [ 194.657038][ T4319] usb-storage 3-1:0.0: USB Mass Storage device detected [ 194.662239][ T4282] Bluetooth: hci4: unknown advertising packet type: 0x25 [ 194.662305][ T4282] Bluetooth: hci4: unknown advertising packet type: 0x05 [ 194.683525][ T4282] Bluetooth: hci4: Malformed LE Event: 0x02 [ 194.744352][ T6780] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 194.768352][ T6780] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.768485][ T6774] XFS (loop3): Mounting V5 Filesystem [ 194.872875][ T4319] usb 3-1: USB disconnect, device number 8 [ 194.896161][ T6774] XFS (loop3): Ending clean mount [ 194.938378][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 194.957725][ T6774] XFS (loop3): Quotacheck needed: Please wait. [ 195.082923][ T6774] XFS (loop3): Quotacheck: Done. [ 195.247007][ T4269] XFS (loop3): Unmounting Filesystem [ 195.444302][ T4320] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 195.648617][ T4320] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 195.662949][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.698032][ T4320] usb 2-1: Product: syz [ 195.722685][ T4320] usb 2-1: Manufacturer: syz [ 195.727800][ T4320] usb 2-1: SerialNumber: syz [ 195.765482][ T4320] usb 2-1: config 0 descriptor?? [ 195.792154][ T4320] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 008 [ 196.186391][ T4320] (null): failure reading functionality [ 196.212084][ T6810] loop3: detected capacity change from 0 to 8192 [ 196.219855][ T4320] i2c i2c-1: connected i2c-tiny-usb device [ 196.307640][ T6810] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 196.354332][ T4471] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 196.362116][ T6810] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 196.386891][ T6810] REISERFS (device loop3): using ordered data mode [ 196.414410][ T36] usb 2-1: USB disconnect, device number 8 [ 196.424410][ T6810] reiserfs: using flush barriers [ 196.434237][ T6810] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 196.550148][ T6810] REISERFS (device loop3): checking transaction log (loop3) [ 196.564290][ T4471] usb 5-1: Using ep0 maxpacket: 32 [ 196.574523][ T4471] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 196.584493][ T6810] REISERFS (device loop3): Using r5 hash to sort names [ 196.591723][ T6810] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 196.611920][ T4471] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.622022][ T4471] usb 5-1: Product: syz [ 196.632154][ T4471] usb 5-1: Manufacturer: syz [ 196.652463][ T4471] usb 5-1: SerialNumber: syz [ 196.662104][ T6810] REISERFS warning (device loop3): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=83886081, len=3 - odd [ 196.676422][ T4471] usb 5-1: config 0 descriptor?? [ 196.792774][ T6821] TCP: TCP_TX_DELAY enabled [ 197.032507][ T6825] netlink: 32 bytes leftover after parsing attributes in process `syz.0.939'. [ 197.293263][ T4471] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 197.308285][ T4471] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 197.334264][ T4471] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 197.396825][ T4471] peak_usb: probe of 5-1:0.0 failed with error -22 [ 197.506935][ T4334] usb 5-1: USB disconnect, device number 10 [ 197.885155][ T6823] loop2: detected capacity change from 0 to 32768 [ 197.900257][ T6823] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.936 (6823) [ 197.951025][ T6823] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 197.965841][ T6845] nbd0: detected capacity change from 0 to 549764202496 [ 197.998696][ T4282] block nbd0: Receive control failed (result -104) [ 198.009101][ T6823] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 198.031939][ T6823] BTRFS info (device loop2): using free space tree [ 198.174757][ T6831] loop0: detected capacity change from 0 to 32768 [ 198.283661][ T6831] XFS (loop0): Mounting V5 Filesystem [ 198.318386][ T6823] BTRFS info (device loop2): enabling ssd optimizations [ 198.394876][ T6831] XFS (loop0): Ending clean mount [ 198.670338][ T4266] XFS (loop0): Unmounting Filesystem [ 198.751477][ T4279] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 199.513370][ T6883] loop3: detected capacity change from 0 to 32768 [ 199.610555][ T6883] read_mapping_page failed! [ 199.638302][ T6883] ERROR: (device loop3): txCommit: [ 199.638302][ T6883] [ 199.694541][ T6900] read_mapping_page failed! [ 199.699141][ T6900] ERROR: (device loop3): txCommit: [ 199.699141][ T6900] [ 199.826404][ T6899] loop1: detected capacity change from 0 to 4096 [ 199.874376][ T4295] read_mapping_page failed! [ 199.880353][ T4295] ERROR: (device loop3): txCommit: [ 199.880353][ T4295] [ 199.927072][ T6899] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 199.937851][ T4295] jfs_write_inode: jfs_commit_inode failed! [ 200.027363][ T6908] loop2: detected capacity change from 0 to 256 [ 200.052965][ T6908] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 200.098487][ T26] audit: type=1800 audit(1769735892.588:10): pid=6899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.959" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 200.136026][ T6908] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 200.282275][ T6912] loop0: detected capacity change from 0 to 2048 [ 200.333279][ T6913] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 200.414328][ T4320] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 200.527187][ T6912] NILFS error (device loop0): nilfs_dotdot: directory #12 missing '..' [ 200.551909][ T6912] Remounting filesystem read-only [ 200.614491][ T4320] usb 4-1: Using ep0 maxpacket: 16 [ 200.621537][ T4320] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.687861][ T4320] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.729842][ T6919] loop2: detected capacity change from 0 to 1024 [ 200.739632][ T4320] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.753234][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.763375][ T4320] usb 4-1: Product: syz [ 200.777690][ T4320] usb 4-1: Manufacturer: syz [ 200.783252][ T6919] EXT4-fs: inline encryption not supported [ 200.792210][ T4320] usb 4-1: SerialNumber: syz [ 200.812607][ T4266] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 200.835588][ T6919] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 200.942219][ T6919] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 201.009347][ T6929] sp0: Synchronizing with TNC [ 201.071445][ T6931] loop1: detected capacity change from 0 to 256 [ 201.234641][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 201.241539][ T4320] usb 4-1: 0:2 : does not exist [ 201.444426][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 201.450570][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 201.454757][ T4276] Bluetooth: hci1: command 0x0406 tx timeout [ 201.456744][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 201.573596][ T6939] loop1: detected capacity change from 0 to 2048 [ 201.632179][ T6942] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.656496][ T4320] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 201.664650][ T4327] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 201.699474][ T6942] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 201.732349][ T6942] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 201.782688][ T6942] Remounting filesystem read-only [ 201.788331][ T4320] usb 4-1: USB disconnect, device number 10 [ 201.804607][ T6939] NILFS (loop1): mounting fs with errors [ 201.815734][ T6939] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 201.854280][ T4327] usb 1-1: Using ep0 maxpacket: 16 [ 201.863620][ T4327] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 201.878650][ T6939] Remounting filesystem read-only [ 201.902712][ T4327] usb 1-1: config 0 has no interface number 0 [ 201.922264][ T4327] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 201.941742][ T4327] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 201.964588][ T4327] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 201.984100][ T4327] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 201.993045][ T4327] usb 1-1: Product: syz [ 202.034286][ T4327] usb 1-1: SerialNumber: syz [ 202.047236][ T4267] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 202.057688][ T4327] usb 1-1: config 0 descriptor?? [ 202.092831][ T4327] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 202.127016][ T4327] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input9 [ 202.359105][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 202.374474][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 202.382141][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 202.390716][ T4327] usb 1-1: USB disconnect, device number 8 [ 202.438193][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 202.454395][ T4327] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 202.781502][ T6949] device macvtap1 entered promiscuous mode [ 202.840355][ T6949] device vlan0 entered promiscuous mode [ 202.938012][ T6949] team0: Device macvtap1 failed to register rx_handler [ 202.994942][ T6949] device vlan0 left promiscuous mode [ 203.516340][ T6937] loop2: detected capacity change from 0 to 40427 [ 203.573189][ T6937] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 203.649046][ T6937] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 203.713019][ T6937] F2FS-fs (loop2): invalid crc value [ 203.783530][ T6937] F2FS-fs (loop2): Found nat_bits in checkpoint [ 204.143723][ T6937] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 204.264255][ T6937] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 204.282439][ T6946] loop1: detected capacity change from 0 to 262144 [ 204.335197][ T6946] F2FS-fs (loop1): Found nat_bits in checkpoint [ 204.396224][ T6946] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 204.500892][ T26] audit: type=1800 audit(1769735896.988:11): pid=6946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.978" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 205.323955][ T6983] loop3: detected capacity change from 0 to 256 [ 205.469020][ T6983] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 205.514306][ T6986] program syz.2.990 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.600055][ T6983] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 206.648327][ T7001] loop0: detected capacity change from 0 to 4096 [ 206.667379][ T7001] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 206.813176][ T26] audit: type=1800 audit(1769735899.298:12): pid=7001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1000" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 207.549439][ T36] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 207.630284][ T7022] tun0: tun_chr_ioctl cmd 1074025675 [ 207.630937][ T22] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 207.635863][ T7022] tun0: persist enabled [ 207.674257][ T7005] loop4: detected capacity change from 0 to 32768 [ 207.753300][ T7005] XFS (loop4): Mounting V5 Filesystem [ 207.763696][ T36] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 207.784219][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.796341][ T36] usb 4-1: Product: syz [ 207.800573][ T36] usb 4-1: Manufacturer: syz [ 207.805358][ T36] usb 4-1: SerialNumber: syz [ 207.826998][ T22] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 207.836301][ T36] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 207.844944][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.876831][ T22] usb 1-1: config 0 descriptor?? [ 207.891487][ T22] cp210x 1-1:0.0: cp210x converter detected [ 207.899577][ T7005] XFS (loop4): Ending clean mount [ 207.935474][ T26] audit: type=1800 audit(1769735900.428:13): pid=7005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1002" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 207.968980][ T36] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 208.091174][ T22] usb 1-1: cp210x converter now attached to ttyUSB0 [ 208.135602][ T4278] XFS (loop4): Unmounting Filesystem [ 208.300274][ T22] usb 1-1: USB disconnect, device number 9 [ 208.310721][ T22] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 208.335549][ T22] cp210x 1-1:0.0: device disconnected [ 208.449545][ T4473] usb 4-1: USB disconnect, device number 11 [ 208.596572][ T7038] loop1: detected capacity change from 0 to 64 [ 208.621585][ T7040] loop2: detected capacity change from 0 to 256 [ 208.683280][ T7040] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 208.878024][ T4267] hfs: node 4:3 still has 1 user(s)! [ 209.044289][ T36] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 209.053074][ T36] ath9k_htc: Failed to initialize the device [ 209.088572][ T4473] usb 4-1: ath9k_htc: USB layer deinitialized [ 209.106561][ T7047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1016'. [ 209.149097][ T7051] loop3: detected capacity change from 0 to 256 [ 209.171133][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1016'. [ 209.237476][ T7051] exfat: Deprecated parameter 'utf8' [ 209.290158][ T7051] exfat: Deprecated parameter 'utf8' [ 209.316397][ T7051] exfat: Deprecated parameter 'utf8' [ 209.393419][ T7051] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 210.143609][ T7080] loop3: detected capacity change from 0 to 128 [ 210.739832][ T4327] hid-generic 0005:04F3:000F.000C: hidraw0: BLUETOOTH HID v0.87 Device [syz0] on aa:aa:aa:aa:aa:aa [ 211.394980][ T7113] loop3: detected capacity change from 0 to 1024 [ 211.509097][ T7113] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 211.526744][ T93] block nbd0: Connection timed out, retrying (0/1 alive) [ 211.536057][ T93] block nbd0: Dead connection, failed to find a fallback [ 211.548521][ T7113] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.712150][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 212.007759][ T7133] loop4: detected capacity change from 0 to 512 [ 212.014549][ T7135] device macvlan0 entered promiscuous mode [ 212.030615][ T7131] loop3: detected capacity change from 0 to 512 [ 212.092334][ T7131] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 212.245622][ T7131] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.1052: bad orphan inode 15 [ 212.293400][ T7131] ext4_test_bit(bit=14, block=18) = 1 [ 212.324428][ T7131] is_bad_inode(inode)=0 [ 212.329191][ T7131] NEXT_ORPHAN(inode)=1023 [ 212.333572][ T7131] max_ino=32 [ 212.360368][ T7131] i_nlink=0 [ 212.398101][ T7131] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 212.434710][ T7131] ext2 filesystem being mounted at /223/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 212.480000][ T7131] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #2: block 3: comm syz.3.1052: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=458767, rec_len=0, size=4096 fake=0 [ 212.783728][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 212.910899][ T7126] loop0: detected capacity change from 0 to 40427 [ 212.947518][ T7126] F2FS-fs (loop0): invalid crc value [ 212.977273][ T7126] F2FS-fs (loop0): Found nat_bits in checkpoint [ 213.054242][ T4334] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 213.095455][ T7126] F2FS-fs (loop0): Start checkpoint disabled! [ 213.110029][ T7133] loop4: detected capacity change from 0 to 32768 [ 213.141193][ T7126] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 213.246018][ T4334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.270160][ T4334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.311706][ T4334] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 213.340617][ T4334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.370230][ T4334] usb 3-1: config 0 descriptor?? [ 213.399302][ T7133] XFS (loop4): Mounting V5 Filesystem [ 213.427713][ T4360] kworker/u4:7: attempt to access beyond end of device [ 213.427713][ T4360] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 213.474812][ T7140] loop1: detected capacity change from 0 to 40427 [ 213.586374][ T7140] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 213.614539][ T7133] XFS (loop4): Ending clean mount [ 213.620925][ T7140] F2FS-fs (loop1): invalid crc value [ 213.680436][ T7140] F2FS-fs (loop1): Found nat_bits in checkpoint [ 213.790704][ T4278] XFS (loop4): Unmounting Filesystem [ 213.809444][ T4334] playstation 0003:054C:0DF2.000D: item fetching failed at offset 1/5 [ 213.830165][ T4334] playstation 0003:054C:0DF2.000D: Parse failed [ 213.862429][ T4334] playstation: probe of 0003:054C:0DF2.000D failed with error -22 [ 213.956689][ T7140] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 214.030772][ T4320] usb 3-1: USB disconnect, device number 9 [ 214.260039][ T4267] syz-executor: attempt to access beyond end of device [ 214.260039][ T4267] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 214.647145][ T7167] loop0: detected capacity change from 0 to 4096 [ 214.673021][ T7167] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 215.490619][ T7193] loop2: detected capacity change from 0 to 2048 [ 215.574787][ T7198] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 215.644259][ T26] audit: type=1800 audit(1769735908.128:14): pid=7193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1072" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 215.740917][ T7193] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 215.836465][ T7193] Remounting filesystem read-only [ 216.085108][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1078'. [ 216.137942][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1078'. [ 216.179751][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1078'. [ 216.212814][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1078'. [ 216.254794][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1078'. [ 216.285079][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1078'. [ 216.312576][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1078'. [ 216.343356][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1078'. [ 216.373756][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1078'. [ 216.411494][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1078'. [ 216.442171][ T7186] loop0: detected capacity change from 0 to 32768 [ 216.449895][ T7205] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 216.482490][ T7205] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.515167][ T7186] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1070 (7186) [ 216.531186][ T7217] loop6: detected capacity change from 0 to 7 [ 216.532579][ T7205] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.550170][ T4388] Dev loop6: unable to read RDB block 7 [ 216.571614][ T4388] loop6: unable to read partition table [ 216.591772][ T4388] loop6: partition table beyond EOD, truncated [ 216.599887][ T7186] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 216.630738][ T7205] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.640323][ T7205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.648652][ T7217] Dev loop6: unable to read RDB block 7 [ 216.659223][ T7186] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 216.672462][ T7217] loop6: unable to read partition table [ 216.690735][ T7220] loop4: detected capacity change from 0 to 1024 [ 216.691017][ T7186] BTRFS info (device loop0): turning off barriers [ 216.704015][ T7217] loop6: partition table beyond EOD, truncated [ 216.754209][ T7217] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 216.773602][ T7186] BTRFS info (device loop0): setting nodatasum [ 216.794979][ T7186] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 216.828648][ T7186] BTRFS info (device loop0): use zstd compression, level 3 [ 216.837127][ T3637] Dev loop6: unable to read RDB block 7 [ 216.842773][ T3637] loop6: unable to read partition table [ 216.864559][ T3637] loop6: partition table beyond EOD, truncated [ 216.888816][ T7186] BTRFS info (device loop0): using free space tree [ 217.013123][ T7230] loop3: detected capacity change from 0 to 512 [ 217.031147][ T47] hfsplus: b-tree write err: -5, ino 4 [ 217.106509][ T7230] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 3: comm syz.3.1087: lblock 0 mapped to illegal pblock 3 (length 1) [ 217.267842][ T7246] program syz.2.1088 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.297971][ T7230] EXT4-fs (loop3): Remounting filesystem read-only [ 217.319758][ T7230] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.1087: error -117 reading directory block [ 217.449646][ T7230] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 217.489690][ T7230] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 217.620360][ T7230] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 3: comm syz.3.1087: lblock 0 mapped to illegal pblock 3 (length 1) [ 217.698353][ T7230] EXT4-fs (loop3): Remounting filesystem read-only [ 217.746190][ T7230] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.1087: error -117 reading directory block [ 217.770831][ T4266] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 217.800206][ T7257] loop1: detected capacity change from 0 to 1024 [ 217.841677][ T7255] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 3: comm syz.3.1087: lblock 0 mapped to illegal pblock 3 (length 1) [ 217.944965][ T7255] EXT4-fs (loop3): Remounting filesystem read-only [ 217.951571][ T7255] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.1087: error -117 reading directory block [ 218.009793][ T7259] tap0: tun_chr_ioctl cmd 2148553947 [ 218.250142][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 218.284478][ T4334] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 218.514339][ T4334] usb 3-1: Using ep0 maxpacket: 16 [ 218.521423][ T4334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.554365][ T4334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.599925][ T4334] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 218.633104][ T4334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.653743][ T4334] usb 3-1: config 0 descriptor?? [ 218.744433][ T4486] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 218.947129][ T4486] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 218.973190][ T4486] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 219.015843][ T4486] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 219.037337][ T4486] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1600, setting to 64 [ 219.069476][ T4486] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 219.086700][ T4334] corsair 0003:1B1C:1B02.000E: hidraw1: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 219.095786][ T4319] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 219.108635][ T4486] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.124299][ T4486] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 219.142976][ T4486] usb 2-1: SerialNumber: syz [ 219.166455][ T7270] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 219.195455][ T7270] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 219.213138][ T7270] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 219.239302][ T7272] loop0: detected capacity change from 0 to 32768 [ 219.314356][ T4319] usb 5-1: Using ep0 maxpacket: 8 [ 219.336576][ T4319] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 219.383430][ T4319] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 219.399216][ T4319] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 219.410741][ T4319] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.441158][ T7270] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 219.468094][ T4319] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 219.474792][ T7270] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 219.494341][ T4319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.544526][ T4334] usb 3-1: USB disconnect, device number 10 [ 219.550823][ T7270] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 219.656200][ T7287] loop3: detected capacity change from 0 to 256 [ 219.710748][ T7285] fido_id[7285]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 219.788654][ T4319] usb 5-1: GET_CAPABILITIES returned 0 [ 219.795296][ T4319] usbtmc 5-1:16.0: can't read capabilities [ 219.849895][ T93] block nbd0: shutting down sockets [ 219.855765][ T93] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.865559][ T93] Buffer I/O error on dev nbd0, logical block 0, async page read [ 219.889333][ T93] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.898543][ T93] Buffer I/O error on dev nbd0, logical block 0, async page read [ 219.908369][ T93] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.917667][ T93] Buffer I/O error on dev nbd0, logical block 0, async page read [ 219.925732][ T93] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.934861][ T93] Buffer I/O error on dev nbd0, logical block 0, async page read [ 219.943669][ T93] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.952980][ T93] Buffer I/O error on dev nbd0, logical block 0, async page read [ 219.961227][ T93] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.970414][ T93] Buffer I/O error on dev nbd0, logical block 0, async page read [ 219.978562][ T93] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.987867][ T93] Buffer I/O error on dev nbd0, logical block 0, async page read [ 219.998578][ T93] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 220.008306][ T93] Buffer I/O error on dev nbd0, logical block 0, async page read [ 220.016258][ T4387] ldm_validate_partition_table(): Disk read failed. [ 220.023096][ T93] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 220.032288][ T93] Buffer I/O error on dev nbd0, logical block 0, async page read [ 220.043122][ T4334] usb 5-1: USB disconnect, device number 11 [ 220.050397][ T93] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 220.059721][ T93] Buffer I/O error on dev nbd0, logical block 0, async page read [ 220.068706][ T4387] Dev nbd0: unable to read RDB block 0 [ 220.074822][ T4387] nbd0: unable to read partition table [ 220.113205][ T4387] ldm_validate_partition_table(): Disk read failed. [ 220.126119][ T4387] Dev nbd0: unable to read RDB block 0 [ 220.137642][ T4387] nbd0: unable to read partition table [ 220.176973][ T4486] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 220.260945][ T4486] usb 2-1: USB disconnect, device number 9 [ 220.297534][ T4486] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 221.181564][ T7315] loop0: detected capacity change from 0 to 512 [ 221.228599][ T7315] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 221.294475][ T7315] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.410024][ T22] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 221.452176][ T7320] EXT4-fs error (device loop0): ext4_validate_inode_bitmap:106: comm syz.0.1118: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 221.474094][ T7315] EXT4-fs error (device loop0): ext4_validate_inode_bitmap:106: comm syz.0.1118: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 221.582291][ T7299] loop3: detected capacity change from 0 to 40427 [ 221.591199][ T7315] EXT4-fs error (device loop0) in ext4_free_inode:362: Filesystem failed CRC [ 221.610086][ T22] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 221.625228][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.633928][ T22] usb 5-1: Product: syz [ 221.644349][ T22] usb 5-1: Manufacturer: syz [ 221.651244][ T7299] F2FS-fs (loop3): invalid crc value [ 221.664064][ T22] usb 5-1: SerialNumber: syz [ 221.707485][ T7299] F2FS-fs (loop3): Found nat_bits in checkpoint [ 221.799530][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 221.880865][ T7299] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 221.927397][ T7319] loop1: detected capacity change from 0 to 32768 [ 222.030535][ T7329] netlink: 'syz.0.1121': attribute type 12 has an invalid length. [ 222.055784][ T7319] XFS (loop1): Mounting V5 Filesystem [ 222.176777][ T7319] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 222.233228][ T7301] loop2: detected capacity change from 0 to 65536 [ 222.265574][ T7319] XFS (loop1): Starting recovery (logdev: internal) [ 222.317494][ T22] rtl8150 5-1:1.0: eth1: rtl8150 is detected [ 222.424419][ T7319] XFS (loop1): Ending recovery (logdev: internal) [ 222.447906][ T7319] XFS (loop1): Quotacheck needed: Please wait. [ 222.454288][ T7301] XFS (loop2): Mounting V5 Filesystem [ 222.515383][ T4334] usb 5-1: USB disconnect, device number 12 [ 222.546961][ T7319] XFS (loop1): Quotacheck: Done. [ 222.571272][ T7301] XFS (loop2): Ending clean mount [ 222.721059][ T4267] XFS (loop1): Unmounting Filesystem [ 222.726804][ T22] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 222.749736][ T4279] XFS (loop2): Unmounting Filesystem [ 222.912871][ T7347] loop3: detected capacity change from 0 to 256 [ 222.964390][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 222.981088][ T22] usb 1-1: config 32 has an invalid interface number: 85 but max is 0 [ 222.993603][ T7347] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 223.012605][ T22] usb 1-1: config 32 has no interface number 0 [ 223.020023][ T22] usb 1-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 223.074322][ T22] usb 1-1: config 32 interface 85 has no altsetting 0 [ 223.136297][ T22] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 223.158996][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.174252][ T22] usb 1-1: Product: syz [ 223.179014][ T22] usb 1-1: Manufacturer: syz [ 223.186383][ T22] usb 1-1: SerialNumber: syz [ 223.242793][ T7349] loop4: detected capacity change from 0 to 512 [ 223.292323][ T7351] loop3: detected capacity change from 0 to 512 [ 223.405732][ T7349] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 223.462669][ T7349] System zones: 0-2, 18-18, 34-34 [ 223.479272][ T7351] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 223.509766][ T7349] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #3: comm syz.4.1126: corrupted inode contents [ 223.534636][ T7351] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.574260][ T7349] EXT4-fs error (device loop4): ext4_dirty_inode:6137: inode #3: comm syz.4.1126: mark_inode_dirty error [ 223.710549][ T7349] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #3: comm syz.4.1126: corrupted inode contents [ 223.764642][ T7349] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.1126: mark_inode_dirty error [ 223.789218][ T7349] Quota error (device loop4): write_blk: dquota write failed [ 223.804585][ T7349] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 223.807700][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 223.826519][ T7349] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.1126: Failed to acquire dquot type 0 [ 223.899303][ T7349] EXT4-fs (loop4): 1 orphan inode deleted [ 223.917557][ T4360] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 223.928536][ T7349] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 223.949011][ T4360] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u4:7: Failed to release dquot type 1 [ 223.982294][ T7349] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.995134][ T22] appletouch 1-1:32.85: Geyser mode initialized. [ 224.010255][ T22] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:32.85/input/input10 [ 224.080828][ C0] appletouch 1-1:32.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 224.112212][ T7349] EXT4-fs (loop4): shut down requested (2) [ 224.292307][ T4794] usb 1-1: USB disconnect, device number 10 [ 224.327750][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 224.406208][ T4794] appletouch 1-1:32.85: input: appletouch disconnected [ 224.753525][ T7376] loop4: detected capacity change from 0 to 8 [ 224.851618][ T7377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.084340][ T4334] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 225.134315][ T4794] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 225.183698][ T7390] loop1: detected capacity change from 0 to 512 [ 225.208991][ T7390] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1140: inode has both inline data and extents flags [ 225.233083][ T7390] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1140: couldn't read orphan inode 15 (err -117) [ 225.252182][ T7390] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 225.274354][ T4334] usb 5-1: Using ep0 maxpacket: 16 [ 225.282259][ T4334] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.292963][ T4334] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 225.309932][ T4334] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 225.320197][ T4327] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 225.335026][ T4794] usb 3-1: Using ep0 maxpacket: 32 [ 225.345698][ T4794] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 225.353845][ T4794] usb 3-1: config 0 has no interface number 0 [ 225.366339][ T4334] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 225.379174][ T4794] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 225.392620][ T4334] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.412158][ T4794] usb 3-1: config 0 interface 85 has no altsetting 0 [ 225.421664][ T4334] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 225.437895][ T4334] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 225.441257][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 225.453602][ T4794] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 225.463048][ T4334] usb 5-1: Manufacturer: syz [ 225.491241][ T4794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.501425][ T4334] usb 5-1: config 0 descriptor?? [ 225.515029][ T4794] usb 3-1: Product: syz [ 225.519266][ T4794] usb 3-1: Manufacturer: syz [ 225.523896][ T4794] usb 3-1: SerialNumber: syz [ 225.549698][ T4327] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.582991][ T4327] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.601811][ T7396] loop3: detected capacity change from 0 to 256 [ 225.615121][ T4794] usb 3-1: config 0 descriptor?? [ 225.638046][ T4327] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 225.660633][ T7396] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 225.671498][ T4327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 225.681489][ T4327] usb 1-1: SerialNumber: syz [ 225.890417][ T7399] loop1: detected capacity change from 0 to 2048 [ 225.907619][ T4334] rc_core: IR keymap rc-hauppauge not found [ 225.913634][ T4334] Registered IR keymap rc-empty [ 225.919157][ T7399] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 225.929861][ T4327] usb 1-1: 0:2 : does not exist [ 225.944237][ T7399] NILFS (loop1): mounting unchecked fs [ 225.953349][ T4334] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 225.995182][ T7399] NILFS (loop1): recovery complete [ 226.010774][ T7400] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 226.014578][ T4334] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 226.031832][ T4327] usb 1-1: USB disconnect, device number 11 [ 226.105856][ T4334] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 226.152531][ T4334] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input12 [ 226.201657][ T4334] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 226.243879][ T4794] appletouch 3-1:0.85: Geyser mode initialized. [ 226.256178][ T4794] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input11 [ 226.285549][ T5263] udevd[5263]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.301802][ T4334] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 226.334913][ T4334] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 226.374433][ T4334] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 226.414885][ T4334] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 226.429024][ T7405] loop3: detected capacity change from 0 to 512 [ 226.460283][ T4334] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 226.463246][ T7405] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 226.487097][ T4798] usb 3-1: USB disconnect, device number 11 [ 226.512038][ T4334] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 226.541664][ T7407] __nla_validate_parse: 67 callbacks suppressed [ 226.541680][ T7407] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1146'. [ 226.559623][ T4334] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 226.586907][ T7405] EXT4-fs (loop3): 1 truncate cleaned up [ 226.595348][ T4334] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 226.603359][ T4798] appletouch 3-1:0.85: input: appletouch disconnected [ 226.616241][ T7405] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 226.625194][ T4334] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 226.667111][ T4334] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 226.701459][ T7405] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.3.1145: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 226.729203][ T4334] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 226.776328][ T4334] usb 5-1: USB disconnect, device number 13 [ 226.793484][ T7411] loop1: detected capacity change from 0 to 128 [ 226.813388][ T7405] EXT4-fs (loop3): Remounting filesystem read-only [ 226.849467][ T7405] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem [ 226.900195][ T7405] EXT4-fs (loop3): Remounting filesystem read-only [ 226.907334][ T7411] binder: 7410:7411 ioctl c0306201 200000000380 returned -14 [ 226.926538][ T7405] EXT4-fs warning (device loop3): ext4_rename_delete:3778: inode #2: comm syz.3.1145: Deleting old file: nlink 5, error=-117 [ 227.019976][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 227.191132][ T7418] loop1: detected capacity change from 0 to 512 [ 227.246223][ T7418] EXT4-fs: Ignoring removed oldalloc option [ 227.370006][ T7418] EXT4-fs (loop1): 1 truncate cleaned up [ 227.424209][ T7418] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 227.649204][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 228.074212][ T22] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 228.207486][ T7432] loop2: detected capacity change from 0 to 40427 [ 228.251738][ T7432] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 228.282550][ T7432] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff [ 228.293451][ T22] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.333787][ T7432] F2FS-fs (loop2): invalid crc value [ 228.340450][ T22] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.383071][ T22] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 228.403111][ T7432] F2FS-fs (loop2): Found nat_bits in checkpoint [ 228.424860][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 228.439023][ T22] usb 2-1: SerialNumber: syz [ 228.475216][ T7440] loop3: detected capacity change from 0 to 64 [ 228.656838][ T22] usb 2-1: 0:2 : does not exist [ 228.688207][ T7432] F2FS-fs (loop2): Start checkpoint disabled! [ 228.701993][ T7432] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 228.727501][ T22] usb 2-1: USB disconnect, device number 10 [ 228.861375][ T7447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1163'. [ 229.031205][ T11] kworker/u4:1: attempt to access beyond end of device [ 229.031205][ T11] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 229.048338][ T4466] udevd[4466]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.092696][ T11] kworker/u4:1: attempt to access beyond end of device [ 229.092696][ T11] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 229.234213][ T4334] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 229.426299][ T4334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.453015][ T4334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.485145][ T4334] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 229.515738][ T4334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.555876][ T4334] usb 4-1: config 0 descriptor?? [ 229.892720][ T7465] loop2: detected capacity change from 0 to 4096 [ 229.977735][ T7451] loop0: detected capacity change from 0 to 32768 [ 229.996688][ T4334] arvo 0003:1E7D:30D4.000F: unknown main item tag 0x0 [ 230.028962][ T4334] arvo 0003:1E7D:30D4.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 230.209544][ T7451] XFS (loop0): Mounting V5 Filesystem [ 230.367943][ T7451] XFS (loop0): Ending clean mount [ 230.439404][ T7451] XFS (loop0): Quotacheck needed: Please wait. [ 230.455331][ T4334] usb 4-1: USB disconnect, device number 12 [ 230.503831][ T7467] loop1: detected capacity change from 0 to 32768 [ 230.561775][ T7451] XFS (loop0): Quotacheck: Done. [ 230.602070][ T7483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1176'. [ 230.662293][ T7483] tipc: Started in network mode [ 230.680391][ T7483] tipc: Node identity 7, cluster identity 4711 [ 230.727672][ T7483] tipc: Node number set to 7 [ 230.772969][ T7481] fido_id[7481]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 230.792463][ T7467] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 230.815530][ T4266] XFS (loop0): Unmounting Filesystem [ 231.278936][ T7477] loop4: detected capacity change from 0 to 32768 [ 231.444262][ T4267] (syz-executor,4267,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 231.537109][ T4267] ocfs2: Unmounting device (7,1) on (node local) [ 231.697877][ T7496] loop1: detected capacity change from 0 to 736 [ 231.729283][ T7499] program syz.4.1183 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.804421][ T4334] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 232.014399][ T4334] usb 3-1: Using ep0 maxpacket: 8 [ 232.021364][ T4334] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 232.064923][ T4334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.118466][ T7504] loop4: detected capacity change from 0 to 128 [ 232.119566][ T4334] pvrusb2: Hardware description: Terratec Grabster AV400 [ 232.144554][ T4334] pvrusb2: ********** [ 232.148754][ T4334] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 232.178910][ T7504] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 232.221664][ T7504] hpfs: filesystem error: improperly stopped [ 232.234264][ T4334] pvrusb2: Important functionality might not be entirely working. [ 232.245393][ T7504] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 232.273717][ T4334] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 232.273835][ T7504] hpfs: You really don't want any checks? You are crazy... [ 232.320695][ T4334] pvrusb2: ********** [ 232.329073][ T7504] hpfs: hpfs_map_sector(): read error [ 232.351182][ T7504] hpfs: code page support is disabled [ 232.359021][ T2309] pvrusb2: Invalid write control endpoint [ 232.384339][ T7504] hpfs: hpfs_map_4sectors(): unaligned read [ 232.414919][ T7504] hpfs: hpfs_map_4sectors(): unaligned read [ 232.420921][ T7504] hpfs: filesystem error: unable to find root dir [ 232.500943][ T7490] loop3: detected capacity change from 0 to 32768 [ 232.541132][ T7490] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1180 (7490) [ 232.589033][ T7494] pvrusb2: Invalid write control endpoint [ 232.618721][ T4334] usb 3-1: USB disconnect, device number 12 [ 232.664218][ T7490] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 232.714252][ T7490] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 232.733250][ T7490] BTRFS info (device loop3): enabling auto defrag [ 232.785625][ T2309] pvrusb2: Invalid write control endpoint [ 232.792053][ T2309] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 232.802845][ T7490] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 232.816264][ T2309] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 232.823883][ T2309] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 232.834793][ T7490] BTRFS info (device loop3): trying to use backup root at mount time [ 232.855250][ T7490] BTRFS info (device loop3): use no compression [ 232.861627][ T7490] BTRFS info (device loop3): max_inline at 0 [ 232.883414][ T2309] pvrusb2: Device being rendered inoperable [ 232.904223][ T7490] BTRFS info (device loop3): using free space tree [ 232.923860][ T2309] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 232.932799][ T2309] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 233.014392][ T2309] pvrusb2: Attached sub-driver cx25840 [ 233.020662][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 233.031287][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 233.102990][ T7516] loop4: detected capacity change from 0 to 256 [ 233.309706][ T7490] BTRFS info (device loop3): enabling ssd optimizations [ 233.532943][ T7506] loop1: detected capacity change from 0 to 32768 [ 233.770130][ T4269] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 234.294413][ T4334] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 234.489266][ T4334] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 234.516132][ T4334] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 234.554662][ T4334] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 234.592123][ T4334] usb 2-1: config 220 has no interface number 2 [ 234.616170][ T4334] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 234.659437][ T4334] usb 2-1: config 220 interface 0 has no altsetting 0 [ 234.682892][ T4334] usb 2-1: config 220 interface 76 has no altsetting 0 [ 234.707429][ T4334] usb 2-1: config 220 interface 1 has no altsetting 0 [ 234.731355][ T4334] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 234.761399][ T4334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.807456][ T4334] usb 2-1: Product: syz [ 234.822000][ T4334] usb 2-1: Manufacturer: syz [ 234.865365][ T4334] usb 2-1: SerialNumber: syz [ 234.942739][ T7536] loop4: detected capacity change from 0 to 32768 [ 235.001348][ T7557] loop3: detected capacity change from 0 to 64 [ 235.021159][ T7536] (syz.4.1192,7536,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 235.091460][ T7536] (syz.4.1192,7536,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 235.096228][ T4334] usb 2-1: selecting invalid altsetting 0 [ 235.131239][ T4334] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 235.150280][ T4334] usb 2-1: No valid video chain found. [ 235.220851][ T7536] JBD2: Ignoring recovery information on journal [ 235.236656][ T4334] usb 2-1: selecting invalid altsetting 0 [ 235.252946][ T4334] usbtest: probe of 2-1:220.1 failed with error -22 [ 235.266090][ T4334] usb 2-1: USB disconnect, device number 11 [ 235.409487][ T7547] loop2: detected capacity change from 0 to 32768 [ 235.417714][ T7536] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 236.135819][ T7571] netlink: 'syz.3.1206': attribute type 12 has an invalid length. [ 236.177593][ T7571] netlink: 'syz.3.1206': attribute type 3 has an invalid length. [ 236.207690][ T7571] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1206'. [ 236.272772][ T4278] ocfs2: Unmounting device (7,4) on (node local) [ 236.288306][ T7573] binder: 7572:7573 ioctl 4018620d 0 returned -22 [ 236.326341][ T7555] loop0: detected capacity change from 0 to 40427 [ 236.375909][ T7555] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 236.395494][ T7555] F2FS-fs (loop0): invalid crc value [ 236.416622][ T7555] F2FS-fs (loop0): Found nat_bits in checkpoint [ 236.651896][ T7555] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 236.763615][ T7587] loop3: detected capacity change from 0 to 128 [ 236.791849][ T7588] loop2: detected capacity change from 0 to 256 [ 236.872943][ T7588] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d) [ 236.954770][ T4266] syz-executor: attempt to access beyond end of device [ 236.954770][ T4266] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 237.161661][ T7594] program syz.4.1216 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.477345][ T7600] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1220'. [ 237.971597][ T7592] loop1: detected capacity change from 0 to 32768 [ 237.986268][ T7610] loop3: detected capacity change from 0 to 2048 [ 238.017642][ T7592] (syz.1.1214,7592,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 238.062925][ T7592] (syz.1.1214,7592,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 238.099219][ T7610] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 238.131057][ T7592] JBD2: Ignoring recovery information on journal [ 238.184347][ T4334] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 238.277325][ T7592] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 238.320657][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 238.379825][ T7598] loop2: detected capacity change from 0 to 32768 [ 238.388001][ T4334] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.424310][ T4334] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.456475][ T7598] (syz.2.1218,7598,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 238.474980][ T4334] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 238.512050][ T4334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.539782][ T4334] usb 5-1: config 0 descriptor?? [ 238.545442][ T7598] (syz.2.1218,7598,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 238.626780][ T7598] debugfs: Directory '9357E9D751824C228242B9B0D0FB6750' with parent 'ocfs2' already present! [ 238.667176][ T7621] loop3: detected capacity change from 0 to 2048 [ 238.701717][ T7621] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 238.702355][ T4267] ocfs2: Unmounting device (7,1) on (node local) [ 238.753649][ T7598] JBD2: Ignoring recovery information on journal [ 238.793428][ T7623] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 238.806725][ T7614] XFS: noikeep mount option is deprecated. [ 238.960271][ T7621] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 238.976347][ T4334] arvo 0003:1E7D:30D4.0010: unknown main item tag 0x0 [ 238.990293][ T4334] arvo 0003:1E7D:30D4.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 238.995597][ T7598] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 239.014313][ T7621] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 239.025923][ T7614] XFS (loop0): Mounting V5 Filesystem [ 239.157519][ T7621] Remounting filesystem read-only [ 239.180612][ T7626] NILFS (loop3): the device already has a read-only mount. [ 239.226842][ T7621] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 239.252109][ T7621] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 239.265407][ T7621] NILFS (loop3): error -5 truncating bmap (ino=16) [ 239.326108][ T7614] XFS (loop0): Ending clean mount [ 239.377339][ T7614] XFS (loop0): Quotacheck needed: Please wait. [ 239.392688][ T4269] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 239.422390][ T4334] usb 5-1: USB disconnect, device number 14 [ 239.464911][ T4279] ocfs2: Unmounting device (7,2) on (node local) [ 239.471933][ T7614] XFS (loop0): Quotacheck: Done. [ 239.530083][ T7634] fido_id[7634]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 239.767216][ T4266] XFS (loop0): Unmounting Filesystem [ 240.630570][ T7638] set_capacity_and_notify: 1 callbacks suppressed [ 240.630587][ T7638] loop2: detected capacity change from 0 to 32768 [ 240.653337][ T7638] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1228 (7638) [ 240.696214][ T7638] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 240.715004][ T126] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 240.750427][ T7638] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 240.770185][ T7657] loop1: detected capacity change from 0 to 4096 [ 240.776908][ T7638] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 240.791432][ T7638] BTRFS info (device loop2): use zstd compression, level 3 [ 240.839358][ T7638] BTRFS info (device loop2): using free space tree [ 240.924396][ T126] usb 5-1: Using ep0 maxpacket: 16 [ 240.929601][ T7657] ntfs3: loop1: MFT: r=1b, expect seq=1 instead of 0! [ 240.946435][ T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.994900][ T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.034550][ T126] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 241.064297][ T126] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 241.083668][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.110901][ T126] usb 5-1: config 0 descriptor?? [ 241.121777][ T7638] BTRFS info (device loop2): enabling ssd optimizations [ 241.276726][ T4341] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 241.407075][ T7683] smc: net device hsr0 applied user defined pnetid SYZ2 [ 241.463056][ T7685] smc: net device hsr0 erased user defined pnetid SYZ2 [ 241.476496][ T4341] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 241.502437][ T4341] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 241.527872][ T126] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 241.554478][ T4341] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 241.563730][ T126] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 241.584439][ T126] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 241.592718][ T4341] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.601612][ T126] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 241.626072][ T126] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 241.633814][ T7661] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 241.658297][ T7661] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 241.689969][ T126] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 241.712876][ T126] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 241.732135][ T126] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 241.767024][ T126] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 241.785771][ T126] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 241.806706][ T126] microsoft 0003:045E:07DA.0011: No inputs registered, leaving [ 241.851146][ T126] microsoft 0003:045E:07DA.0011: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 241.888088][ T126] microsoft 0003:045E:07DA.0011: no inputs found [ 241.907285][ T126] microsoft 0003:045E:07DA.0011: could not initialize ff, continuing anyway [ 241.930749][ T126] usb 5-1: USB disconnect, device number 15 [ 242.003691][ T4327] usb 1-1: USB disconnect, device number 12 [ 242.112634][ T7680] loop1: detected capacity change from 0 to 32768 [ 242.143347][ T7680] (syz.1.1239,7680,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 242.171911][ T7680] (syz.1.1239,7680,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 242.283362][ T7680] JBD2: Ignoring recovery information on journal [ 242.333223][ T7688] fido_id[7688]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 242.447324][ T7680] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 242.475454][ T4279] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 242.692777][ T7699] loop3: detected capacity change from 0 to 128 [ 242.773509][ T7699] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 243.153141][ T7706] loop4: detected capacity change from 0 to 128 [ 243.245806][ T4267] ocfs2: Unmounting device (7,1) on (node local) [ 243.384699][ T7709] [U] ^G„ [ 243.417795][ T7707] [U] ^G [ 243.683007][ T7719] loop3: detected capacity change from 0 to 128 [ 243.702094][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1252'. [ 243.761070][ T7719] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 243.811380][ T7719] hpfs: filesystem error: improperly stopped [ 243.848486][ T7719] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 243.880058][ T7719] hpfs: You really don't want any checks? You are crazy... [ 243.926831][ T7719] hpfs: hpfs_map_sector(): read error [ 243.962839][ T7719] hpfs: code page support is disabled [ 243.980943][ T7719] hpfs: hpfs_map_4sectors(): unaligned read [ 243.991490][ T7719] hpfs: hpfs_map_4sectors(): unaligned read [ 244.010875][ T7719] hpfs: filesystem error: unable to find root dir [ 244.682997][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1268'. [ 244.751343][ T7760] loop3: detected capacity change from 0 to 65 [ 244.823612][ T7760] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 244.846101][ T7760] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 244.910802][ T7762] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1272'. [ 245.182286][ T4482] hid-generic 0005:4C4A:4158.0012: unknown main item tag 0x0 [ 245.284906][ T4482] hid-generic 0005:4C4A:4158.0012: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 245.421093][ T7782] loop1: detected capacity change from 0 to 64 [ 245.423179][ T7780] loop2: detected capacity change from 0 to 1024 [ 245.566987][ T56] hfsplus: b-tree write err: -5, ino 4 [ 245.706214][ T7792] loop1: detected capacity change from 0 to 128 [ 245.764492][ T22] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 245.853309][ T7796] loop1: detected capacity change from 0 to 512 [ 245.891053][ T7796] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.1287: bad orphan inode 13 [ 245.906296][ T7796] ext4_test_bit(bit=12, block=4) = 1 [ 245.911838][ T7796] is_bad_inode(inode)=0 [ 245.917169][ T7796] NEXT_ORPHAN(inode)=0 [ 245.921300][ T7796] max_ino=32 [ 245.925035][ T7796] i_nlink=1 [ 245.928403][ T7796] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 245.946089][ T7796] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.1287: Unrecognised inode hash code 20 [ 245.958694][ T7796] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1287: Corrupt directory, running e2fsck is recommended [ 245.973038][ T7796] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.1287: Unrecognised inode hash code 20 [ 245.985006][ T7796] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1287: Corrupt directory, running e2fsck is recommended [ 245.994620][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 246.026463][ T22] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 246.053619][ T7796] EXT4-fs (loop1): shut down requested (2) [ 246.075751][ T22] usb 1-1: config 0 has no interface number 0 [ 246.081977][ T22] usb 1-1: config 0 interface 184 has no altsetting 0 [ 246.131367][ T22] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 246.150304][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.159779][ T22] usb 1-1: Product: syz [ 246.164075][ T22] usb 1-1: Manufacturer: syz [ 246.196679][ T22] usb 1-1: SerialNumber: syz [ 246.220705][ T22] usb 1-1: config 0 descriptor?? [ 246.245629][ T22] smsc75xx v1.0.0 [ 246.276731][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 246.850494][ T7814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1293'. [ 246.964935][ T4482] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 247.041551][ T7820] netlink: 'syz.4.1296': attribute type 1 has an invalid length. [ 247.079094][ T22] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 247.090215][ T7820] netlink: 'syz.4.1296': attribute type 2 has an invalid length. [ 247.110484][ T22] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 247.134353][ T22] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 247.155285][ T7821] netlink: 'syz.4.1296': attribute type 1 has an invalid length. [ 247.165219][ T22] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 247.177182][ T4482] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 247.189202][ T7821] netlink: 'syz.4.1296': attribute type 2 has an invalid length. [ 247.194273][ T22] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 247.214262][ T4482] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 247.234229][ T4482] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 247.247082][ T22] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 247.264772][ T22] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 247.271693][ T4482] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 247.308395][ T22] usb 1-1: USB disconnect, device number 13 [ 247.317406][ T4482] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 247.334207][ T4482] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.352663][ T4482] usb 3-1: Product: syz [ 247.373038][ T4482] usb 3-1: Manufacturer: syz [ 247.386661][ T4482] usb 3-1: SerialNumber: syz [ 247.414037][ T4482] usb 3-1: config 0 descriptor?? [ 247.640446][ T4482] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 247.772230][ T7835] loop0: detected capacity change from 0 to 256 [ 247.875605][ T4334] usb 3-1: USB disconnect, device number 13 [ 247.924338][ T4327] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 247.994308][ T4482] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 248.019866][ T7825] loop1: detected capacity change from 0 to 32768 [ 248.117632][ T4327] usb 4-1: config 0 interface 0 has no altsetting 0 [ 248.131149][ T4327] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 248.144970][ T4327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.178766][ T4327] usb 4-1: config 0 descriptor?? [ 248.194306][ T4482] usb 5-1: Using ep0 maxpacket: 16 [ 248.209884][ T4482] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 248.222831][ T4482] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 248.244405][ T4482] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 248.263868][ T4482] usb 5-1: config 0 has no interface number 0 [ 248.279759][ T4482] usb 5-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 248.290506][ T4482] usb 5-1: config 0 interface 104 has no altsetting 1 [ 248.315675][ T4482] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 248.332936][ T4482] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.341704][ T4482] usb 5-1: Product: syz [ 248.346249][ T4482] usb 5-1: Manufacturer: syz [ 248.350953][ T4482] usb 5-1: SerialNumber: syz [ 248.375254][ T4482] usb 5-1: config 0 descriptor?? [ 248.398556][ T4482] asix: probe of 5-1:0.104 failed with error -22 [ 248.605276][ T4334] usb 5-1: USB disconnect, device number 16 [ 249.039254][ T4327] video4linux radio48: keene_cmd_main failed (-71) [ 249.054199][ T4327] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 249.073327][ T4327] usb 4-1: USB disconnect, device number 13 [ 249.470567][ T7851] loop2: detected capacity change from 0 to 32768 [ 249.539940][ T4466] blk_print_req_error: 24 callbacks suppressed [ 249.539959][ T4466] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 249.799014][ T7868] loop4: detected capacity change from 0 to 1024 [ 249.852174][ T7868] EXT4-fs: Ignoring removed nomblk_io_submit option [ 249.937200][ T7868] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 249.966469][ T7868] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.110893][ T26] audit: type=1800 audit(1769735942.598:15): pid=7868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1318" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 250.142567][ T7868] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 3: comm syz.4.1318: lblock 3 mapped to illegal pblock 3 (length 3) [ 250.174266][ T7879] loop1: detected capacity change from 0 to 128 [ 250.225918][ T7868] EXT4-fs (loop4): Remounting filesystem read-only [ 250.233057][ T7879] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 250.293545][ T7868] EXT4-fs error (device loop4): ext4_ext_remove_space:2930: inode #15: comm syz.4.1318: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 250.324384][ T7879] sysv_count_free_blocks: >flc_size entries in free-list block [ 250.424562][ T7879] sysv_count_free_inodes: unable to read inode table [ 250.431456][ T7868] EXT4-fs (loop4): Remounting filesystem read-only [ 250.441754][ T7879] sysv_count_free_blocks: >flc_size entries in free-list block [ 250.458242][ T7881] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: block 3: comm syz.4.1318: lblock 3 mapped to illegal pblock 3 (length 3) [ 250.463827][ T7879] sysv_count_free_inodes: unable to read inode table [ 250.552125][ T7881] EXT4-fs (loop4): Remounting filesystem read-only [ 250.661774][ T4267] sysv_free_block: flc_count > flc_size [ 250.673964][ T4267] sysv_free_block: flc_count > flc_size [ 250.691304][ T4267] sysv_free_block: flc_count > flc_size [ 250.707298][ T4267] sysv_free_block: flc_count > flc_size [ 250.731825][ T4267] sysv_free_block: flc_count > flc_size [ 250.743055][ T4267] sysv_free_block: flc_count > flc_size [ 250.753226][ T4267] sysv_free_block: flc_count > flc_size [ 250.774479][ T4267] sysv_free_block: flc_count > flc_size [ 250.780197][ T4267] sysv_free_block: flc_count > flc_size [ 250.824455][ T4267] sysv_free_block: flc_count > flc_size [ 250.841459][ T4267] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 250.852829][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 250.947858][ T7886] loop2: detected capacity change from 0 to 1024 [ 250.988310][ T7886] EXT4-fs: Ignoring removed mblk_io_submit option [ 251.048640][ T7886] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 251.168034][ T7886] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 251.408671][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 251.429738][ T7903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1329'. [ 251.640103][ T7909] loop0: detected capacity change from 0 to 128 [ 251.701590][ T7909] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 251.744368][ T7909] hpfs: filesystem error: improperly stopped [ 251.744398][ T7909] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 251.744416][ T7909] hpfs: You really don't want any checks? You are crazy... [ 251.744763][ T7909] hpfs: hpfs_map_sector(): read error [ 251.744776][ T7909] hpfs: code page support is disabled [ 251.747828][ T7909] hpfs: hpfs_map_4sectors(): unaligned read [ 251.747931][ T7909] hpfs: hpfs_map_4sectors(): unaligned read [ 251.747943][ T7909] hpfs: filesystem error: unable to find root dir [ 252.117846][ T7920] loop0: detected capacity change from 0 to 2048 [ 252.164693][ T7920] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 252.164794][ T7920] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.193163][ T7920] fs-verity: sha512 using implementation "sha512-avx2" [ 252.485313][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 252.734228][ T22] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 252.936315][ T22] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 252.964185][ T22] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 252.977592][ T7927] loop1: detected capacity change from 0 to 32768 [ 253.001307][ T22] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 253.025223][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.070229][ T7937] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 253.078028][ T7937] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 253.099619][ T7927] XFS (loop1): Mounting V5 Filesystem [ 253.167540][ T7927] XFS (loop1): Ending clean mount [ 253.366339][ T4267] XFS (loop1): Unmounting Filesystem [ 253.381769][ T22] usb 5-1: USB disconnect, device number 17 [ 253.490049][ T7942] loop3: detected capacity change from 0 to 32768 [ 253.726848][ T7942] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 253.900796][ T7970] loop2: detected capacity change from 0 to 64 [ 253.969100][ T4269] ocfs2: Unmounting device (7,3) on (node local) [ 254.317036][ T7974] loop4: detected capacity change from 0 to 2048 [ 254.332196][ T7976] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1359'. [ 254.381640][ T7974] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 254.409690][ T7974] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.486018][ T7983] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1357'. [ 254.748220][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 254.762162][ T7991] loop3: detected capacity change from 0 to 128 [ 254.826682][ T7991] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 254.873837][ T7991] hpfs: filesystem error: improperly stopped [ 254.923098][ T7991] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 254.960746][ T7991] hpfs: You really don't want any checks? You are crazy... [ 254.970701][ T7997] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1367'. [ 255.004536][ T7991] hpfs: hpfs_map_sector(): read error [ 255.009997][ T7991] hpfs: code page support is disabled [ 255.031498][ T7991] hpfs: hpfs_map_4sectors(): unaligned read [ 255.085002][ T7991] hpfs: hpfs_map_4sectors(): unaligned read [ 255.094683][ T7991] hpfs: filesystem error: unable to find root dir [ 255.253715][ T8006] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1370'. [ 255.464280][ T4375] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 255.605434][ T8019] loop1: detected capacity change from 0 to 128 [ 255.676108][ T4375] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 255.688819][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.695247][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.720410][ T4375] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 255.772834][ T4375] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 255.813533][ T4375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.866013][ T8002] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 255.893923][ T8002] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 256.100763][ T8031] device ip6gre1 entered promiscuous mode [ 256.138813][ T8034] loop0: detected capacity change from 0 to 256 [ 256.140723][ T4375] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 256.182534][ T4375] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 256.207632][ T4334] usb 3-1: USB disconnect, device number 14 [ 256.213903][ T8034] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 256.243148][ T4482] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 256.414075][ T8036] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1383'. [ 256.664404][ T4482] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 257.093506][ T8052] loop2: detected capacity change from 0 to 136 [ 257.124412][ T4482] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 257.183539][ T8040] loop3: detected capacity change from 0 to 40427 [ 257.204005][ T8052] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 257.238575][ T8040] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 257.267384][ T4482] kernel read not supported for file /dsp (pid: 4482 comm: kworker/1:15) [ 257.294285][ T8040] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 257.302635][ T8040] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 257.352693][ T8040] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff [ 257.418388][ T8040] F2FS-fs (loop3): invalid crc value [ 257.463153][ T8040] F2FS-fs (loop3): Found nat_bits in checkpoint [ 257.619532][ T8040] F2FS-fs (loop3): Start checkpoint disabled! [ 257.673316][ T8040] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 257.682905][ T8040] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 257.958848][ T11] kworker/u4:1: attempt to access beyond end of device [ 257.958848][ T11] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 258.893519][ T8087] overlayfs: conflicting lowerdir path [ 259.068681][ T8093] sch_fq: defrate 0 ignored. [ 259.285809][ T8099] loop2: detected capacity change from 0 to 2048 [ 259.319515][ T8099] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 259.384602][ T8099] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 259.886802][ T8107] loop0: detected capacity change from 0 to 8192 [ 259.924352][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 260.887214][ T8133] loop0: detected capacity change from 0 to 128 [ 261.031424][ T8114] loop2: detected capacity change from 0 to 32768 [ 261.106131][ T8114] XFS (loop2): Mounting V5 Filesystem [ 261.257311][ T8114] XFS (loop2): Ending clean mount [ 261.294993][ T8114] XFS (loop2): Quotacheck needed: Please wait. [ 261.449831][ T8114] XFS (loop2): Quotacheck: Done. [ 261.645389][ T4279] XFS (loop2): Unmounting Filesystem [ 262.182760][ T8164] loop1: detected capacity change from 0 to 1024 [ 262.549588][ T8172] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1441'. [ 262.591735][ T8172] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.602677][ T8172] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.791608][ T8178] loop1: detected capacity change from 0 to 128 [ 262.902458][ T8178] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 262.955385][ T8178] hpfs: filesystem error: improperly stopped [ 263.006058][ T8178] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 263.013882][ T8178] hpfs: You really don't want any checks? You are crazy... [ 263.073263][ T8178] hpfs: hpfs_map_sector(): read error [ 263.094458][ T8178] hpfs: code page support is disabled [ 263.101127][ T8178] hpfs: hpfs_map_4sectors(): unaligned read [ 263.139696][ T8178] hpfs: hpfs_map_4sectors(): unaligned read [ 263.161347][ T8178] hpfs: filesystem error: unable to find root dir [ 263.222026][ T8185] netlink: 'syz.2.1444': attribute type 10 has an invalid length. [ 263.257994][ T8178] hpfs: hpfs_map_4sectors(): unaligned read [ 263.313859][ T8166] loop4: detected capacity change from 0 to 32768 [ 263.355857][ T8166] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1438 (8166) [ 263.377873][ T8185] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 263.424373][ T8166] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 263.470461][ T8184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.477965][ T8166] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 263.528649][ T8166] BTRFS info (device loop4): using free space tree [ 263.817476][ T8166] BTRFS info (device loop4): enabling ssd optimizations [ 263.842074][ T8217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1450'. [ 264.001408][ T4278] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 264.493369][ T4466] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (4466) [ 264.761520][ T8239] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1459'. [ 264.833403][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1459'. [ 265.138117][ T8252] loop4: detected capacity change from 0 to 128 [ 265.238997][ T8252] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 265.297374][ T8252] FAT-fs (loop4): Filesystem has been set read-only [ 265.366921][ T8256] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 265.453734][ T8261] loop0: detected capacity change from 0 to 128 [ 265.525765][ T8261] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 265.594379][ T8261] hpfs: filesystem error: improperly stopped [ 265.617180][ T8261] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 265.643447][ T8261] hpfs: You really don't want any checks? You are crazy... [ 265.693396][ T8261] hpfs: hpfs_map_sector(): read error [ 265.728736][ T8261] hpfs: code page support is disabled [ 265.774408][ T8261] hpfs: hpfs_map_4sectors(): unaligned read [ 265.781568][ T8261] hpfs: hpfs_map_4sectors(): unaligned read [ 265.800264][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1472'. [ 265.815850][ T8261] hpfs: filesystem error: unable to find root dir [ 266.071210][ T8267] loop4: detected capacity change from 0 to 4096 [ 266.144018][ T8274] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 266.198901][ T8240] loop2: detected capacity change from 0 to 32768 [ 266.213814][ T8267] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 266.229435][ T8240] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 266.238482][ T8267] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=12) [ 266.252361][ T8240] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 266.293183][ T8267] Remounting filesystem read-only [ 266.317766][ T8267] NILFS (loop4): error -5 truncating bmap (ino=12) [ 266.326635][ T8240] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 266.374240][ T4375] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 266.497827][ T8240] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 266.515549][ T8277] loop0: detected capacity change from 0 to 2048 [ 266.556523][ T4278] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 266.592550][ T8277] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 266.602087][ T4375] usb 2-1: Using ep0 maxpacket: 32 [ 266.617327][ T4375] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 266.667176][ T4375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.710375][ T4375] usb 2-1: config 0 descriptor?? [ 266.945128][ T4375] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 266.962991][ T4375] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 267.010644][ T4375] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 267.043385][ T4375] usb 2-1: media controller created [ 267.135213][ T4375] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.150156][ T8273] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 267.204293][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 267.227682][ T4375] az6027: usb out operation failed. (-71) [ 267.233837][ T4375] az6027: usb out operation failed. (-71) [ 267.239869][ T4375] stb0899_attach: Driver disabled by Kconfig [ 267.246020][ T4375] az6027: no front-end attached [ 267.246020][ T4375] [ 267.253430][ T4375] az6027: usb out operation failed. (-71) [ 267.260134][ T4375] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 267.268586][ T4375] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 267.296975][ T4375] dvb-usb: schedule remote query interval to 400 msecs. [ 267.304238][ T4375] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 267.332377][ T4375] usb 2-1: USB disconnect, device number 12 [ 267.414678][ T8289] loop2: detected capacity change from 0 to 128 [ 267.475431][ T8289] EXT4-fs: Ignoring removed nobh option [ 267.530672][ T8289] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 267.556283][ T4375] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 267.565314][ T8289] ext4 filesystem being mounted at /292/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 267.752404][ T8294] loop0: detected capacity change from 0 to 8192 [ 267.825070][ T8294] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 267.899542][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 267.932033][ T8294] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 267.994676][ T8294] REISERFS (device loop0): using ordered data mode [ 268.001269][ T8294] reiserfs: using flush barriers [ 268.064234][ T8294] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 268.100066][ T26] audit: type=1326 audit(1769735960.588:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.2.1487" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33ff19aeb9 code=0x0 [ 268.134709][ T8294] REISERFS (device loop0): checking transaction log (loop0) [ 268.149365][ T8303] tap0: tun_chr_ioctl cmd 1074025680 [ 268.153011][ T8294] REISERFS (device loop0): Using r5 hash to sort names [ 268.162935][ T8294] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 269.468382][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1505'. [ 269.494000][ T8339] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1505'. [ 269.652831][ T8345] loop2: detected capacity change from 0 to 256 [ 269.720324][ T8345] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 269.764069][ T8345] FAT-fs (loop2): Filesystem has been set read-only [ 270.034380][ T8353] serio: Serial port ttyS3 [ 270.279168][ T8358] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1512'. [ 270.681880][ T8349] loop4: detected capacity change from 0 to 32768 [ 270.736036][ T8349] XFS (loop4): Mounting V5 Filesystem [ 270.820991][ T8349] XFS (loop4): Ending clean mount [ 270.829538][ T8370] loop1: detected capacity change from 0 to 8192 [ 270.854990][ T8370] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 270.873711][ T8349] XFS (loop4): Quotacheck needed: Please wait. [ 270.880501][ T8370] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 270.922156][ T8370] REISERFS (device loop1): using ordered data mode [ 270.976003][ T8370] reiserfs: using flush barriers [ 271.034214][ T8370] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 271.096655][ T8370] REISERFS (device loop1): checking transaction log (loop1) [ 271.135492][ T8370] REISERFS (device loop1): Using r5 hash to sort names [ 271.163050][ T8370] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 271.186677][ T8349] XFS (loop4): Quotacheck: Done. [ 271.352388][ T8392] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1524'. [ 271.445980][ T4278] XFS (loop4): Unmounting Filesystem [ 271.813893][ T8402] loop0: detected capacity change from 0 to 512 [ 272.036520][ T8402] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 272.074420][ T8402] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 272.085069][ T8402] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.1529: Failed to acquire dquot type 1 [ 272.124455][ T8402] EXT4-fs (loop0): 1 truncate cleaned up [ 272.144337][ T8402] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 272.165211][ T8402] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.419217][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 272.702972][ T26] audit: type=1326 audit(1769735965.188:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8af9aeb9 code=0x7ffc0000 [ 272.782833][ T26] audit: type=1326 audit(1769735965.228:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8af9aeb9 code=0x7ffc0000 [ 272.861339][ T26] audit: type=1326 audit(1769735965.228:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fbc8af9aeb9 code=0x7ffc0000 [ 272.966546][ T26] audit: type=1326 audit(1769735965.228:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8af9aeb9 code=0x7ffc0000 [ 273.084466][ T26] audit: type=1326 audit(1769735965.228:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8af9aeb9 code=0x7ffc0000 [ 273.171235][ T26] audit: type=1326 audit(1769735965.228:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fbc8af9aeb9 code=0x7ffc0000 [ 273.253214][ T26] audit: type=1326 audit(1769735965.228:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8af9aeb9 code=0x7ffc0000 [ 273.348016][ T26] audit: type=1326 audit(1769735965.228:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8af9aeb9 code=0x7ffc0000 [ 273.443611][ T26] audit: type=1326 audit(1769735965.238:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fbc8af9aeb9 code=0x7ffc0000 [ 273.487817][ T8445] loop2: detected capacity change from 0 to 1024 [ 273.496788][ T26] audit: type=1326 audit(1769735965.238:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8af9aeb9 code=0x7ffc0000 [ 273.527398][ T26] audit: type=1326 audit(1769735965.238:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8af9aeb9 code=0x7ffc0000 [ 273.724693][ T26] audit: type=1800 audit(1769735966.218:28): pid=8445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1545" name="bus" dev="loop2" ino=26 res=0 errno=0 [ 273.774896][ T8417] loop1: detected capacity change from 0 to 40427 [ 273.817441][ T8417] F2FS-fs (loop1): build fault injection attr: rate: 684, type: 0x3ffff [ 273.860456][ T8417] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 273.899450][ T8445] syz.2.1545: attempt to access beyond end of device [ 273.899450][ T8445] loop2: rw=34817, sector=996, nr_sectors = 40 limit=1024 [ 273.915164][ T8417] F2FS-fs (loop1): invalid crc value [ 273.947447][ T8417] F2FS-fs (loop1): Found nat_bits in checkpoint [ 274.102313][ T8417] F2FS-fs (loop1): Start checkpoint disabled! [ 274.136560][ T8417] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 274.159108][ T56] hfsplus: b-tree write err: -5, ino 4 [ 274.222188][ T8417] syz.1.1532: attempt to access beyond end of device [ 274.222188][ T8417] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 274.352430][ T8465] loop2: detected capacity change from 0 to 256 [ 274.393506][ T8469] loop0: detected capacity change from 0 to 64 [ 274.511704][ T8465] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 274.519395][ T8465] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 274.682362][ T8465] vhci_hcd vhci_hcd.0: Device attached [ 274.790606][ T8478] device veth0_macvtap left promiscuous mode [ 274.934277][ T4375] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 275.240458][ T4285] Bluetooth: hci4: link tx timeout [ 275.247206][ T4285] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 275.259298][ T4285] Bluetooth: hci4: link tx timeout [ 275.264627][ T4285] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 275.380509][ T8495] loop0: detected capacity change from 0 to 256 [ 275.432336][ T8495] exfat: Deprecated parameter 'namecase' [ 275.467903][ T8495] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 276.049921][ T8513] tap0: tun_chr_ioctl cmd 1074025677 [ 276.063853][ T8513] tap0: linktype set to 0 [ 276.262307][ T8472] usb 37-1: recv xbuf, 0 [ 276.283863][ T4295] vhci_hcd: stop threads [ 276.296890][ T4295] vhci_hcd: release socket [ 276.310402][ T4295] vhci_hcd: disconnect device [ 276.344644][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1578'. [ 276.366923][ T4375] vhci_hcd: vhci_device speed not set [ 276.389407][ T8525] loop0: detected capacity change from 0 to 256 [ 276.404381][ T7] hid-generic 00A1:0009:0003.0013: unknown main item tag 0x0 [ 276.450489][ T7] hid-generic 00A1:0009:0003.0013: unknown main item tag 0x0 [ 276.465788][ T7] hid-generic 00A1:0009:0003.0013: unknown main item tag 0x0 [ 276.474053][ T7] hid-generic 00A1:0009:0003.0013: unknown main item tag 0x0 [ 276.482172][ T7] hid-generic 00A1:0009:0003.0013: unknown main item tag 0x0 [ 276.522855][ T7] hid-generic 00A1:0009:0003.0013: unknown main item tag 0x0 [ 276.543124][ T7] hid-generic 00A1:0009:0003.0013: unknown main item tag 0x0 [ 276.563398][ T7] hid-generic 00A1:0009:0003.0013: unknown main item tag 0x0 [ 276.583938][ T7] hid-generic 00A1:0009:0003.0013: unknown main item tag 0x0 [ 276.602117][ T7] hid-generic 00A1:0009:0003.0013: unknown main item tag 0x0 [ 276.620254][ T7] hid-generic 00A1:0009:0003.0013: unknown main item tag 0x0 [ 276.650806][ T7] hid-generic 00A1:0009:0003.0013: unknown main item tag 0x0 [ 276.674225][ T7] hid-generic 00A1:0009:0003.0013: unknown main item tag 0x0 [ 276.694869][ T7] hid-generic 00A1:0009:0003.0013: unknown main item tag 0x0 [ 276.710567][ T7] hid-generic 00A1:0009:0003.0013: unknown main item tag 0x0 [ 276.792233][ T7] hid-generic 00A1:0009:0003.0013: hidraw0: HID v0.05 Device [syz1] on syz0 [ 277.284338][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 278.505299][ T8565] tap0: tun_chr_ioctl cmd 1074025694 [ 278.641544][ T8569] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1596'. [ 278.860935][ T8556] loop1: detected capacity change from 0 to 32768 [ 278.913026][ T8556] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1591 (8556) [ 279.005119][ T8556] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 279.027402][ T8556] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 279.067127][ T8556] BTRFS info (device loop1): using free space tree [ 279.362763][ T8600] loop2: detected capacity change from 0 to 256 [ 279.372745][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 279.437324][ T8604] syz.3.1605 (8604): /proc/8603/oom_adj is deprecated, please use /proc/8603/oom_score_adj instead. [ 279.448185][ T8600] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 279.470241][ T8556] BTRFS info (device loop1): enabling ssd optimizations [ 279.511222][ T8606] loop4: detected capacity change from 0 to 512 [ 279.583839][ T8606] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 279.652872][ T8606] EXT4-fs (loop4): 1 truncate cleaned up [ 279.674271][ T8606] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 279.958380][ T4267] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 280.680011][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 280.937593][ T8620] loop0: detected capacity change from 0 to 32768 [ 280.979486][ T8620] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop0 scanned by syz.0.1612 (8620) [ 281.050386][ T8620] BTRFS info (device loop0): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 281.080668][ T8620] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 281.115634][ T8620] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 281.177378][ T8620] BTRFS info (device loop0): use lzo compression, level 0 [ 281.214217][ T8620] BTRFS info (device loop0): using free space tree [ 281.286393][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 281.454758][ T8620] BTRFS info (device loop0): enabling ssd optimizations [ 281.632237][ T4266] BTRFS info (device loop0): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 281.878918][ T8634] loop2: detected capacity change from 0 to 32768 [ 281.890048][ T4466] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 9 /dev/loop0 scanned by udevd (4466) [ 282.389954][ T8634] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 282.389954][ T8634] [ 282.483054][ T8634] ERROR: (device loop2): remounting filesystem as read-only [ 282.501118][ T8634] ialloc: diAlloc returned -5! [ 282.534207][ T4375] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 282.754201][ T4375] usb 5-1: Using ep0 maxpacket: 8 [ 282.761540][ T4375] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.802920][ T4375] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 282.832592][ T4375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.859801][ T4375] usb 5-1: config 0 descriptor?? [ 282.903300][ T4375] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 283.319069][ T8698] loop2: detected capacity change from 0 to 256 [ 283.384676][ T8698] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 283.460663][ T26] audit: type=1800 audit(1769735975.948:29): pid=8698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1635" name="file1" dev="loop2" ino=1048663 res=0 errno=0 [ 283.690412][ T4375] gspca_vc032x: reg_w err -71 [ 283.695544][ T4375] vc032x: probe of 5-1:0.0 failed with error -71 [ 283.725963][ T4375] usb 5-1: USB disconnect, device number 18 [ 283.900755][ T8693] loop0: detected capacity change from 0 to 32768 [ 283.933798][ T8693] (syz.0.1638,8693,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 283.989774][ T8693] (syz.0.1638,8693,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 284.056687][ T8693] JBD2: Ignoring recovery information on journal [ 284.141918][ T8693] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 284.500023][ T26] audit: type=1800 audit(1769735976.988:30): pid=8693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1638" name="file1" dev="loop0" ino=16978 res=0 errno=0 [ 284.659158][ T4266] ocfs2: Unmounting device (7,0) on (node local) [ 285.000851][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1652'. [ 285.047071][ T8732] loop2: detected capacity change from 0 to 128 [ 285.360238][ T8737] loop1: detected capacity change from 0 to 512 [ 285.435143][ T8737] EXT4-fs: Ignoring removed orlov option [ 285.441499][ T8737] EXT4-fs: Ignoring removed nobh option [ 285.497664][ T26] audit: type=1326 audit(1769735977.988:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.2.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ff19aeb9 code=0x7ffc0000 [ 285.520589][ T8737] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 285.558411][ T8737] EXT4-fs (loop1): orphan cleanup on readonly fs [ 285.565725][ T26] audit: type=1326 audit(1769735978.028:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.2.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f33ff19aeb9 code=0x7ffc0000 [ 285.595904][ T8737] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1656: bg 0: block 248: padding at end of block bitmap is not set [ 285.694806][ T26] audit: type=1326 audit(1769735978.038:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.2.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f33ff19ac22 code=0x7ffc0000 [ 285.717673][ T8737] Quota error (device loop1): write_blk: dquota write failed [ 285.744477][ T8737] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 285.784531][ T8737] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.1656: Failed to acquire dquot type 1 [ 285.804244][ T26] audit: type=1326 audit(1769735978.048:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.2.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f33ff19ac22 code=0x7ffc0000 [ 285.834556][ T26] audit: type=1326 audit(1769735978.048:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.2.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ff19aeb9 code=0x7ffc0000 [ 285.873232][ T8737] EXT4-fs (loop1): 1 truncate cleaned up [ 285.897459][ T8737] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 285.917420][ T26] audit: type=1326 audit(1769735978.048:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.2.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ff19aeb9 code=0x7ffc0000 [ 285.971636][ T8737] EXT4-fs error (device loop1): __ext4_remount:6644: comm syz.1.1656: Abort forced by user [ 286.024326][ T8737] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 286.144636][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 286.430798][ T8761] tipc: Enabling of bearer rejected, failed to enable media [ 286.455634][ T8735] loop0: detected capacity change from 0 to 32768 [ 286.521311][ T8735] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 286.521311][ T8735] [ 286.562027][ T8735] xtLookup: xtSearch returned -5 [ 286.574514][ T8735] free_index: error reading directory table [ 286.581415][ T8735] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 286.581415][ T8735] [ 286.633137][ T8735] xtLookup: xtSearch returned -5 [ 286.656671][ T8735] free_index: error reading directory table [ 286.662650][ T8735] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 286.662650][ T8735] [ 286.744211][ T8735] xtLookup: xtSearch returned -5 [ 286.759485][ T8735] free_index: error reading directory table [ 286.775977][ T8735] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 286.775977][ T8735] [ 286.814472][ T8735] xtLookup: xtSearch returned -5 [ 286.824529][ T8735] free_index: error reading directory table [ 286.827060][ T8749] loop4: detected capacity change from 0 to 32768 [ 286.854277][ T8735] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 286.854277][ T8735] [ 286.884281][ T8735] xtLookup: xtSearch returned -5 [ 286.914135][ T8735] free_index: error reading directory table [ 286.928704][ T8735] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 286.928704][ T8735] [ 286.958668][ T8735] xtLookup: xtSearch returned -5 [ 286.984839][ T8735] add_index: get/read_metapage failed! [ 287.003213][ T8735] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 287.003213][ T8735] [ 287.044511][ T8735] xtLookup: xtSearch returned -5 [ 287.049657][ T8735] free_index: error reading directory table [ 287.076458][ T8735] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 287.076458][ T8735] [ 287.134246][ T8735] xtLookup: xtSearch returned -5 [ 287.168557][ T8735] free_index: error reading directory table [ 287.178824][ T8735] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 287.178824][ T8735] [ 287.233525][ T8735] xtLookup: xtSearch returned -5 [ 287.262850][ T8735] free_index: error reading directory table [ 287.282626][ T8735] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 287.282626][ T8735] [ 287.347317][ T8735] xtLookup: xtSearch returned -5 [ 287.352448][ T8735] free_index: error reading directory table [ 287.400158][ T8735] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 287.400158][ T8735] [ 287.430956][ T8735] xtLookup: xtSearch returned -5 [ 287.453473][ T8735] free_index: error reading directory table [ 287.552280][ T8735] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 287.552280][ T8735] [ 287.599662][ T8735] xtLookup: xtSearch returned -5 [ 287.615573][ T8735] add_index: get/read_metapage failed! [ 287.758110][ T108] ------------[ cut here ]------------ [ 287.765083][ T108] WARNING: CPU: 0 PID: 108 at fs/jfs/jfs_dmap.c:2875 dbAdjTree+0x448/0x4d0 [ 287.773853][ T108] Modules linked in: [ 287.777897][ T108] CPU: 0 PID: 108 Comm: jfsCommit Not tainted syzkaller #0 [ 287.785557][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.795753][ T108] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 287.800852][ T108] Code: e8 1d 19 e3 fe e9 5a ff ff ff e8 53 2e 92 fe eb 05 e8 4c 2e 92 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 38 2e 92 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 287.820589][ T108] RSP: 0018:ffffc90002ce7668 EFLAGS: 00010293 [ 287.826774][ T108] RAX: ffffffff82f04438 RBX: ffff88802632b010 RCX: ffff88801a3a5940 [ 287.834868][ T108] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 287.842896][ T108] RBP: 0000000000020056 R08: ffffea000098cac7 R09: 1ffffd4000131958 [ 287.850980][ T108] R10: dffffc0000000000 R11: fffff94000131959 R12: ffff88802632b018 [ 287.859091][ T108] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 287.867205][ T108] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 287.876253][ T108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.882900][ T108] CR2: 00007fc81d4d8000 CR3: 000000005a621000 CR4: 00000000003506f0 [ 287.891061][ T108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.899136][ T108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.907238][ T108] Call Trace: [ 287.910600][ T108] [ 287.913594][ T108] ? lock_page+0x2b0/0x2b0 [ 287.918210][ T108] dbJoin+0x238/0x300 [ 287.922351][ T108] ? PageHeadHuge+0x8f/0x1c0 [ 287.927076][ T108] dbFreeBits+0x4e1/0xda0 [ 287.931480][ T108] dbFree+0x32e/0x640 [ 287.935569][ T108] txFreeMap+0x9e2/0xde0 [ 287.939895][ T108] ? do_raw_spin_unlock+0x11d/0x230 [ 287.945219][ T108] xtTruncate+0xcc0/0x2d10 [ 287.949753][ T108] ? xtInitRoot+0x160/0x160 [ 287.954390][ T108] ? mapping_evict_folio+0x520/0x520 [ 287.959916][ T108] ? __lock_acquire+0x7d10/0x7d10 [ 287.965073][ T108] ? do_raw_spin_lock+0x128/0x2f0 [ 287.970258][ T108] ? memset+0x1e/0x40 [ 287.974345][ T108] ? __dquot_initialize+0x213/0xcd0 [ 287.979619][ T108] jfs_free_zero_link+0x358/0x4b0 [ 287.984782][ T108] ? inode_wait_for_writeback+0x1df/0x220 [ 287.990572][ T108] ? jfs_write_failed+0x190/0x190 [ 287.995735][ T108] ? sb_clear_inode_writeback+0x3c0/0x3c0 [ 288.001534][ T108] ? do_raw_spin_lock+0x128/0x2f0 [ 288.006685][ T108] ? bit_waitqueue+0x30/0x30 [ 288.011364][ T108] jfs_evict_inode+0x359/0x430 [ 288.016249][ T108] ? evict+0x4c3/0x8d0 [ 288.020506][ T108] ? jfs_write_inode+0x220/0x220 [ 288.025569][ T108] evict+0x4c9/0x8d0 [ 288.029565][ T108] ? proc_nr_inodes+0x2f0/0x2f0 [ 288.034645][ T108] ? do_raw_spin_unlock+0x11d/0x230 [ 288.039917][ T108] ? _raw_spin_unlock+0x24/0x40 [ 288.045097][ T108] ? iput+0x768/0x980 [ 288.049152][ T108] jfs_lazycommit+0x425/0xa70 [ 288.053999][ T108] ? txFreelock+0x5a0/0x5a0 [ 288.058644][ T108] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 288.064643][ T108] ? do_task_dead+0xd0/0xd0 [ 288.069307][ T108] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 288.075322][ T108] ? __kthread_parkme+0x162/0x1c0 [ 288.080431][ T108] kthread+0x29d/0x330 [ 288.084965][ T108] ? txFreelock+0x5a0/0x5a0 [ 288.089548][ T108] ? kthread_blkcg+0xd0/0xd0 [ 288.094260][ T108] ret_from_fork+0x1f/0x30 [ 288.098752][ T108] [ 288.101817][ T108] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 288.109144][ T108] CPU: 0 PID: 108 Comm: jfsCommit Not tainted syzkaller #0 [ 288.116393][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 288.126500][ T108] Call Trace: [ 288.129812][ T108] [ 288.132776][ T108] dump_stack_lvl+0x188/0x24e [ 288.137511][ T108] ? memcpy+0x3c/0x60 [ 288.141547][ T108] ? show_regs_print_info+0x12/0x12 [ 288.147015][ T108] ? load_image+0x400/0x400 [ 288.151713][ T108] panic+0x2e5/0x730 [ 288.155775][ T108] ? bpf_jit_dump+0xd0/0xd0 [ 288.160360][ T108] ? ret_from_fork+0x1f/0x30 [ 288.165025][ T108] __warn+0x2f8/0x4f0 [ 288.169077][ T108] ? dbAdjTree+0x448/0x4d0 [ 288.173547][ T108] ? dbAdjTree+0x448/0x4d0 [ 288.178044][ T108] report_bug+0x2ba/0x4f0 [ 288.182455][ T108] ? dbAdjTree+0x448/0x4d0 [ 288.186942][ T108] handle_bug+0x3a/0x70 [ 288.191269][ T108] exc_invalid_op+0x16/0x40 [ 288.195849][ T108] asm_exc_invalid_op+0x16/0x20 [ 288.200784][ T108] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 288.205982][ T108] Code: e8 1d 19 e3 fe e9 5a ff ff ff e8 53 2e 92 fe eb 05 e8 4c 2e 92 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 38 2e 92 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 288.225689][ T108] RSP: 0018:ffffc90002ce7668 EFLAGS: 00010293 [ 288.231842][ T108] RAX: ffffffff82f04438 RBX: ffff88802632b010 RCX: ffff88801a3a5940 [ 288.239903][ T108] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 288.248021][ T108] RBP: 0000000000020056 R08: ffffea000098cac7 R09: 1ffffd4000131958 [ 288.256133][ T108] R10: dffffc0000000000 R11: fffff94000131959 R12: ffff88802632b018 [ 288.264169][ T108] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 288.272205][ T108] ? dbAdjTree+0x448/0x4d0 [ 288.276698][ T108] ? dbAdjTree+0x448/0x4d0 [ 288.281692][ T108] ? lock_page+0x2b0/0x2b0 [ 288.286216][ T108] dbJoin+0x238/0x300 [ 288.290254][ T108] ? PageHeadHuge+0x8f/0x1c0 [ 288.294917][ T108] dbFreeBits+0x4e1/0xda0 [ 288.299319][ T108] dbFree+0x32e/0x640 [ 288.303359][ T108] txFreeMap+0x9e2/0xde0 [ 288.307679][ T108] ? do_raw_spin_unlock+0x11d/0x230 [ 288.312937][ T108] xtTruncate+0xcc0/0x2d10 [ 288.317534][ T108] ? xtInitRoot+0x160/0x160 [ 288.322129][ T108] ? mapping_evict_folio+0x520/0x520 [ 288.327584][ T108] ? __lock_acquire+0x7d10/0x7d10 [ 288.332671][ T108] ? do_raw_spin_lock+0x128/0x2f0 [ 288.337791][ T108] ? memset+0x1e/0x40 [ 288.341942][ T108] ? __dquot_initialize+0x213/0xcd0 [ 288.347738][ T108] jfs_free_zero_link+0x358/0x4b0 [ 288.352846][ T108] ? inode_wait_for_writeback+0x1df/0x220 [ 288.358934][ T108] ? jfs_write_failed+0x190/0x190 [ 288.364107][ T108] ? sb_clear_inode_writeback+0x3c0/0x3c0 [ 288.369880][ T108] ? do_raw_spin_lock+0x128/0x2f0 [ 288.374988][ T108] ? bit_waitqueue+0x30/0x30 [ 288.379747][ T108] jfs_evict_inode+0x359/0x430 [ 288.384576][ T108] ? evict+0x4c3/0x8d0 [ 288.388703][ T108] ? jfs_write_inode+0x220/0x220 [ 288.394713][ T108] evict+0x4c9/0x8d0 [ 288.399116][ T108] ? proc_nr_inodes+0x2f0/0x2f0 [ 288.404019][ T108] ? do_raw_spin_unlock+0x11d/0x230 [ 288.409367][ T108] ? _raw_spin_unlock+0x24/0x40 [ 288.414362][ T108] ? iput+0x768/0x980 [ 288.418493][ T108] jfs_lazycommit+0x425/0xa70 [ 288.423240][ T108] ? txFreelock+0x5a0/0x5a0 [ 288.427800][ T108] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 288.433762][ T108] ? do_task_dead+0xd0/0xd0 [ 288.438427][ T108] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 288.444378][ T108] ? __kthread_parkme+0x162/0x1c0 [ 288.449487][ T108] kthread+0x29d/0x330 [ 288.453614][ T108] ? txFreelock+0x5a0/0x5a0 [ 288.458175][ T108] ? kthread_blkcg+0xd0/0xd0 [ 288.462935][ T108] ret_from_fork+0x1f/0x30 [ 288.467429][ T108] [ 288.471211][ T108] Kernel Offset: disabled [ 288.475999][ T108] Rebooting in 86400 seconds..