last executing test programs: 2.947078525s ago: executing program 0 (id=764): mkdir(&(0x7f0000001b40)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c) newfstatat(0xffffffffffffff9c, &(0x7f0000006b40)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001440), 0x800) 2.671478119s ago: executing program 0 (id=767): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/pm_print_times', 0xe0c81, 0x9) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 2.418351383s ago: executing program 2 (id=769): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x100) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 2.148367197s ago: executing program 1 (id=771): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.088112538s ago: executing program 3 (id=772): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="000000000000000040001280"], 0x68}}, 0x82) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 1.99799383s ago: executing program 2 (id=773): r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f00000000c0)='dns_resolver\x00', 0x0, 0x0) 1.9279743s ago: executing program 1 (id=774): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, 0x0, 0x0) listen(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f00000004c0)=ANY=[@ANYBLOB='nodiscard,quota,iocharset=cp950,grpquota,quota,noquota,nointegrity\x00uid=', @ANYRESHEX, @ANYRES64=0x0, @ANYRESHEX=0x0, @ANYBLOB="bf6a8bfcf00ce3cc70200921", @ANYRESHEX=0x0, @ANYRES16, @ANYRES64=0x0, @ANYRES32, @ANYRES64], 0x1, 0x617a, &(0x7f0000000580)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x113) truncate(&(0x7f0000000280)='./file1\x00', 0x1fefff) sendfile(r2, r2, 0x0, 0x7a680003) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) sendmmsg(r0, &(0x7f0000000100), 0x0, 0x0) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvfrom$unix(r3, &(0x7f0000000c40)=""/240, 0xfffffffffffffd7b, 0x40000062, 0x0, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100001002bbd7000f4dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000080002001400030064756d6d7930000000000000000000000a000100aaaaaaaaaaaa0000180016801400018010000600040000ff"], 0x58}}, 0x0) 1.803551252s ago: executing program 2 (id=775): syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000080)={[{@block={'block', 0x3d, 0x800}}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp857'}}]}, 0x1, 0xaa5, &(0x7f0000000240)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 1.732508654s ago: executing program 3 (id=776): r0 = add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000140), &(0x7f00000007c0)={'syz', 0x0}, &(0x7f0000000280)="f40fc24077021c9b084c60ffc26fd06301176d36c2f546f1162626edb4a5e1cc09ed8c58ca4fe84b94a7b700000000000000000100000000000000dd3d0df936a10285ecc1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b57f5b606a43e50874c90143034142cd5e1bd9b4d27d8b57fbccb69ba4376b97b7feb75b9138dde818a3c6b96dd80000000000000", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000001340)={r1, r1, r0}, &(0x7f0000003f00)=""/4101, 0x1005, 0x0) 1.491148807s ago: executing program 3 (id=777): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0xffbf) 1.473372757s ago: executing program 2 (id=778): mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='.\x00', &(0x7f0000000000)='exfat\x00', 0x401, 0x0) 1.26623982s ago: executing program 1 (id=779): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) epoll_create(0xbff0) fcntl$setstatus(r0, 0x4, 0x2c00) r1 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) 1.231037791s ago: executing program 3 (id=780): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x31cde, 0x0, 0x8000808, 0x1, 0x9, 0x3c, 0x0, 0x0, 0x7f}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r1, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x5, 0x0, 0x55a}) 1.103090213s ago: executing program 2 (id=781): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x100) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 1.030077244s ago: executing program 0 (id=782): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 968.161376ms ago: executing program 1 (id=783): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000300000014000200fe8000000000000000000000000000002900070073797374656d5f753a6f626a6563745f723a69707461626c65735f636f6e665f743a733000000000140006"], 0x78}}, 0x0) 967.317865ms ago: executing program 3 (id=784): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="000000000000000040001280"], 0x68}}, 0x82) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 870.184427ms ago: executing program 1 (id=785): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f00000004c0)=ANY=[@ANYBLOB='nodiscard,quota,iocharset=cp950,grpquota,quota,noquota,nointegrity\x00uid=', @ANYRESHEX, @ANYRES64=0x0, @ANYRESHEX=0x0, @ANYBLOB="bf6a8bfcf00ce3cc70200921", @ANYRESHEX=0x0, @ANYRES16, @ANYRES64=0x0, @ANYRES32, @ANYRES64], 0x1, 0x617a, &(0x7f0000000580)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x113) truncate(&(0x7f0000000280)='./file1\x00', 0x1fefff) sendfile(r1, r1, 0x0, 0x7a680003) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvfrom$unix(r2, &(0x7f0000000c40)=""/240, 0xfffffffffffffd7b, 0x40000062, 0x0, 0xc) 813.713878ms ago: executing program 0 (id=786): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000140), &(0x7f00000007c0)={'syz', 0x0}, &(0x7f0000000280)="f40fc24077021c9b084c60ffc26fd06301176d36c2f546f1162626edb4a5e1cc09ed8c58ca4fe84b94a7b700000000000000000100000000000000dd3d0df936a10285ecc1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b57f5b606a43e50874c90143034142cd5e1bd9b4d27d8b57fbccb69ba4376b97b7feb75b9138dde818a3c6b96dd80000000000000", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000001340)={r1, r1, r0}, &(0x7f0000003f00)=""/4101, 0x1005, 0x0) 718.812019ms ago: executing program 0 (id=787): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, 0x0, 0x0) listen(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f00000004c0)=ANY=[@ANYBLOB='nodiscard,quota,iocharset=cp950,grpquota,quota,noquota,nointegrity\x00uid=', @ANYRESHEX, @ANYRES64=0x0, @ANYRESHEX=0x0, @ANYBLOB="bf6a8bfcf00ce3cc70200921", @ANYRESHEX=0x0, @ANYRES16, @ANYRES64=0x0, @ANYRES32, @ANYRES64], 0x1, 0x617a, &(0x7f0000000580)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x113) truncate(&(0x7f0000000280)='./file1\x00', 0x1fefff) sendfile(r2, r2, 0x0, 0x7a680003) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) sendmmsg(r0, &(0x7f0000000100), 0x0, 0x0) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvfrom$unix(r3, &(0x7f0000000c40)=""/240, 0xfffffffffffffd7b, 0x40000062, 0x0, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100001002bbd7000f4dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000080002001400030064756d6d7930000000000000000000000a000100aaaaaaaaaaaa0000180016801400018010000600040000ff"], 0x58}}, 0x0) 301.703095ms ago: executing program 3 (id=788): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000016c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_USERDATA={0xa, 0x8, "f7a5739f5984"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0xfdef}], 0x2) 234.622607ms ago: executing program 2 (id=789): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0xffbf) 9.73764ms ago: executing program 1 (id=790): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x40) 0s ago: executing program 0 (id=791): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/pm_print_times', 0xe0c81, 0x9) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) kernel console output (not intermixed with test programs): ][ T24] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.871874][ T24] Buffer I/O error on dev nbd2, logical block 0, async page read [ 75.882714][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.892115][ T96] Buffer I/O error on dev nbd2, logical block 0, async page read [ 75.910023][ T24] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.919208][ T24] Buffer I/O error on dev nbd2, logical block 0, async page read [ 75.927217][ T5778] ldm_validate_partition_table(): Disk read failed. [ 75.934257][ T5778] Dev nbd2: unable to read RDB block 0 [ 75.939765][ T5778] nbd2: unable to read partition table [ 75.947289][ T5778] nbd2: partition table beyond EOD, truncated [ 76.152689][ T27] kernel write not supported for file /22/attr/prev (pid: 27 comm: kworker/1:1) [ 76.177569][ T5917] netlink: 56 bytes leftover after parsing attributes in process `syz.0.25'. [ 76.220672][ T5770] Bluetooth: hci2: command 0x0c1a tx timeout [ 76.300897][ T5770] Bluetooth: hci1: command 0x0c1a tx timeout [ 76.350047][ T5764] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 76.381620][ T5770] Bluetooth: hci3: command 0x0405 tx timeout [ 76.619615][ T5926] loop2: detected capacity change from 0 to 64 [ 76.715786][ T5925] loop0: detected capacity change from 0 to 4096 [ 76.725379][ T5756] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 12 /dev/loop1 scanned by udevd (5756) [ 76.810036][ T5925] NILFS (loop0): invalid segment: Checksum error in segment payload [ 76.849998][ T5925] NILFS (loop0): trying rollback from an earlier position [ 76.874213][ T28] audit: type=1800 audit(1750314351.895:9): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.32" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 76.894302][ C1] vkms_vblank_simulate: vblank timer overrun [ 76.946465][ T5925] NILFS (loop0): recovery complete [ 76.972310][ T28] audit: type=1804 audit(1750314351.975:10): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.32" name="/newroot/10/file1/file1" dev="loop2" ino=18 res=1 errno=0 [ 76.993703][ C1] vkms_vblank_simulate: vblank timer overrun [ 77.490341][ T5939] loop1: detected capacity change from 0 to 256 [ 77.583235][ T5941] netlink: 56 bytes leftover after parsing attributes in process `syz.0.38'. [ 77.966953][ T5945] loop2: detected capacity change from 0 to 2048 [ 78.000527][ T5945] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 78.131211][ T5953] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.150709][ T5778] udevd[5778]: incorrect nilfs2 checksum on /dev/loop2 [ 78.173088][ T5952] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 78.242430][ T5945] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 3044605952 [ 78.254205][ T5955] loop0: detected capacity change from 0 to 764 [ 78.260075][ T5945] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=15) [ 78.291131][ T5945] Remounting filesystem read-only [ 78.296262][ T5945] NILFS (loop2): error -5 truncating bmap (ino=15) [ 78.311424][ T5770] Bluetooth: hci2: command 0x0c1a tx timeout [ 78.373021][ T5959] loop3: detected capacity change from 0 to 64 [ 78.380615][ T5770] Bluetooth: hci1: command 0x0c1a tx timeout [ 78.422834][ T5945] syz.2.41 (5945) used greatest stack depth: 19760 bytes left [ 78.464613][ T5770] Bluetooth: hci3: command 0x0405 tx timeout [ 78.471502][ T28] audit: type=1800 audit(1750314353.505:11): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.47" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 78.471885][ T5763] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 78.498655][ T5763] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 78.508364][ T5763] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 78.519187][ T5763] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 78.527058][ T5763] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 78.537317][ T5763] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 78.772451][ T5965] 9pnet_fd: Insufficient options for proto=fd [ 78.976363][ T5975] loop2: detected capacity change from 0 to 512 [ 79.025471][ T5975] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.53: casefold flag without casefold feature [ 79.087963][ T5975] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.53: couldn't read orphan inode 15 (err -117) [ 79.129672][ T5975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.461390][ T5988] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 79.508781][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.511406][ T5984] loop3: detected capacity change from 0 to 32768 [ 79.814867][ T5991] loop0: detected capacity change from 0 to 32768 [ 79.915664][ T5994] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 80.119486][ T5998] loop1: detected capacity change from 0 to 64 [ 80.274970][ T6000] loop2: detected capacity change from 0 to 64 [ 80.354435][ T6002] netlink: 36 bytes leftover after parsing attributes in process `syz.0.63'. [ 80.384516][ T5770] Bluetooth: hci2: command 0x0c1a tx timeout [ 80.444520][ T28] audit: type=1800 audit(1750314355.485:12): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.64" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 80.467354][ T6004] xt_recent: Unsupported userspace flags (000000de) [ 80.474490][ T5770] Bluetooth: hci1: command 0x0c1a tx timeout [ 80.540897][ T5770] Bluetooth: hci3: command 0x0405 tx timeout [ 80.549944][ T28] audit: type=1804 audit(1750314355.485:13): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.64" name="/newroot/16/file1/file1" dev="loop2" ino=18 res=1 errno=0 [ 80.585759][ T6008] loop0: detected capacity change from 0 to 4096 [ 80.608877][ T6008] NILFS (loop0): invalid segment: Checksum error in segment payload [ 80.622567][ T6008] NILFS (loop0): trying rollback from an earlier position [ 80.660547][ T6008] NILFS (loop0): recovery complete [ 80.774306][ T6006] loop1: detected capacity change from 0 to 4096 [ 80.795807][ T6006] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 80.884398][ T6012] xt_recent: Unsupported userspace flags (000000de) [ 80.934362][ T6006] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 81.100295][ T6015] capability: warning: `syz.0.69' uses deprecated v2 capabilities in a way that may be insecure [ 81.388593][ T6022] 9pnet_fd: Insufficient options for proto=fd [ 81.445630][ T6026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.74'. [ 81.632240][ T6031] loop1: detected capacity change from 0 to 2048 [ 81.664688][ T6029] loop2: detected capacity change from 0 to 4096 [ 81.700204][ T6036] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.738403][ T6029] NILFS (loop2): invalid segment: Checksum error in segment payload [ 81.769866][ T6029] NILFS (loop2): trying rollback from an earlier position [ 81.851792][ T6029] NILFS (loop2): recovery complete [ 81.936111][ T6036] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 81.952467][ T787] cfg80211: failed to load regulatory.db [ 81.954699][ T6036] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 81.980309][ T6036] Remounting filesystem read-only [ 82.133170][ T5764] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 82.159376][ T5764] NILFS (loop1): discard dirty page: offset=8192, ino=18 [ 82.170214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.179546][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.188030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.190904][ T5764] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 82.197061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.212421][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 82.242696][ T5764] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 82.258369][ T5764] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 82.273087][ T5764] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 82.278841][ T6049] 9pnet_fd: Insufficient options for proto=fd [ 82.282941][ T5764] NILFS (loop1): discard dirty page: offset=12288, ino=18 [ 82.300823][ T5764] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 82.310204][ T5764] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 82.325827][ T5764] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 82.334366][ T5764] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 82.343363][ T5764] NILFS (loop1): discard dirty page: offset=16384, ino=18 [ 82.353414][ T5764] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 82.360993][ T5764] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 82.368389][ T5764] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 82.378807][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 82.390704][ T5764] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 82.397489][ T5764] NILFS (loop1): discard dirty block: blocknr=35, size=1024 [ 82.408152][ T5764] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 82.421081][ T5764] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 82.434551][ T6046] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 82.437651][ T5764] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 82.460783][ T6046] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 82.482083][ T5764] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 82.494635][ T6046] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 82.504587][ T5764] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 82.525172][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 82.534780][ T6046] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 82.576970][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 82.586094][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 82.607903][ T5764] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 82.624559][ T5764] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 82.670002][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 82.678966][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 82.700956][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 82.716961][ T5764] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 82.756413][ T5764] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 82.770245][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 82.800399][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 82.809306][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 82.837755][ T5764] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 82.849180][ T5764] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 82.856829][ T5764] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 82.870536][ T5764] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 82.878003][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 82.884621][ T6063] loop3: detected capacity change from 0 to 4096 [ 82.890332][ T5764] NILFS (loop1): discard dirty page: offset=65536, ino=3 [ 82.921241][ T6063] NILFS (loop3): invalid segment: Checksum error in segment payload [ 82.940367][ T6063] NILFS (loop3): trying rollback from an earlier position [ 82.942563][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 82.998787][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.002330][ T6063] NILFS (loop3): recovery complete [ 83.037790][ T5764] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 83.047228][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.066743][ T5764] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 83.084071][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.098211][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.116617][ T5764] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 83.125853][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.259946][ T5806] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.403931][ T6078] loop1: detected capacity change from 0 to 764 [ 83.461674][ T5806] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 83.470612][ T5806] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.481897][ T5806] usb 1-1: config 0 has no interface number 0 [ 83.488043][ T5806] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 83.533668][ T5806] usb 1-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.587745][ T5806] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 83.598066][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.615864][ T6084] xt_recent: Unsupported userspace flags (000000de) [ 83.619647][ T6083] loop3: detected capacity change from 0 to 2048 [ 83.624664][ T5806] usb 1-1: Product: syz [ 83.642178][ T5806] usb 1-1: Manufacturer: syz [ 83.655306][ T6083] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 83.657613][ T5806] usb 1-1: SerialNumber: syz [ 83.696406][ T5806] usb 1-1: config 0 descriptor?? [ 83.706590][ T5754] udevd[5754]: incorrect nilfs2 checksum on /dev/loop3 [ 83.719875][ T6085] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.726259][ T6068] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 83.767080][ T5806] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 83.827545][ T5806] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 83.854919][ T5806] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 84.009763][ T6093] loop3: detected capacity change from 0 to 512 [ 84.010421][ T5806] usb 1-1: USB disconnect, device number 2 [ 84.034324][ T6093] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.106: casefold flag without casefold feature [ 84.057086][ T6093] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.106: couldn't read orphan inode 15 (err -117) [ 84.087203][ T6093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.112085][ T5806] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 84.163139][ T5806] cyberjack 1-1:0.69: device disconnected [ 84.248975][ T5761] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.259496][ T6101] loop2: detected capacity change from 0 to 764 [ 84.381029][ T5777] Bluetooth: hci0: command 0x0c1a tx timeout [ 84.404701][ T6104] loop3: detected capacity change from 0 to 256 [ 84.424211][ T6105] loop2: detected capacity change from 0 to 2048 [ 84.433803][ T6105] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 84.479022][ T6106] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.540073][ T5770] Bluetooth: hci1: command 0x0c1a tx timeout [ 84.543878][ T5766] Bluetooth: hci2: command 0x0c1a tx timeout [ 84.546352][ T5777] Bluetooth: hci3: command 0x0405 tx timeout [ 84.565216][ T6105] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 3044605952 [ 84.604237][ T6105] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=15) [ 84.628539][ T6105] Remounting filesystem read-only [ 84.638986][ T6105] NILFS (loop2): error -5 truncating bmap (ino=15) [ 84.691155][ T5763] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 84.710604][ T5763] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 84.736150][ T5763] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 84.771084][ T5763] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 84.778844][ T5763] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 84.822138][ T5763] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 84.874997][ T6114] loop0: detected capacity change from 0 to 64 [ 85.005213][ T6119] loop1: detected capacity change from 0 to 512 [ 85.035632][ T6119] EXT4-fs: Ignoring removed orlov option [ 85.070489][ T6119] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 85.097642][ T6117] loop2: detected capacity change from 0 to 2048 [ 85.107904][ T6119] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 85.145246][ T6119] EXT4-fs (loop1): 1 orphan inode deleted [ 85.172249][ T6119] EXT4-fs (loop1): 1 truncate cleaned up [ 85.180623][ T6117] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 85.199617][ T6126] loop3: detected capacity change from 0 to 2048 [ 85.221209][ T6119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.252407][ T6127] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.306450][ T6128] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.323249][ T5754] udevd[5754]: incorrect nilfs2 checksum on /dev/loop2 [ 85.382238][ T6127] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 85.423198][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.435543][ T6127] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 85.466657][ T6127] Remounting filesystem read-only [ 85.483323][ T59] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 85.534963][ T59] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 85.549916][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 85.582541][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 85.601851][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 85.620728][ T59] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 85.635304][ T59] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 85.652023][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 85.662812][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 85.673988][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 85.684703][ T59] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 85.699874][ T59] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 85.711998][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 85.723945][ T6138] loop1: detected capacity change from 0 to 64 [ 85.730399][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 85.739296][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 85.795768][ T5761] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 85.820233][ T5761] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 85.831324][ T5761] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 85.838658][ T5761] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 85.853838][ T5761] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 85.877212][ T5761] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 85.902793][ T5761] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 85.909532][ T5761] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 85.917410][ T5761] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 85.927839][ T5761] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 85.938641][ T5761] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 85.948140][ T5761] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 85.955163][ T5761] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 85.962977][ T5761] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 85.970790][ T5761] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 85.978102][ T5761] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 86.008849][ T5761] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 86.016944][ T5761] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 86.026184][ T5761] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 86.036721][ T5761] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 86.044348][ T5761] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 86.172884][ T6150] loop1: detected capacity change from 0 to 2048 [ 86.183364][ T6151] loop3: detected capacity change from 0 to 2048 [ 86.196765][ T6151] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 86.244332][ T6152] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.257954][ T6153] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.285769][ T6151] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 3044605952 [ 86.295114][ T6151] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15) [ 86.308932][ T6151] Remounting filesystem read-only [ 86.332236][ T6151] NILFS (loop3): error -5 truncating bmap (ino=15) [ 86.418926][ T5761] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 86.434339][ T6153] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 86.445651][ T5761] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 86.457614][ T6153] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 86.467931][ T5761] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 86.469912][ T5777] Bluetooth: hci0: command 0x0c1a tx timeout [ 86.478097][ T5761] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 86.490728][ T5761] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 86.494569][ T6153] Remounting filesystem read-only [ 86.498409][ T5761] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 86.532230][ T12] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 86.557100][ T12] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 86.572367][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 86.581376][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 86.591853][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 86.600920][ T12] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 86.602879][ T6158] Zero length message leads to an empty skb [ 86.608903][ T12] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 86.621474][ T5777] Bluetooth: hci3: command 0x0405 tx timeout [ 86.627585][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 86.636725][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 86.645721][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 86.655262][ T5764] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 86.664571][ T5764] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 86.671514][ T5764] NILFS (loop1): discard dirty block: blocknr=35, size=1024 [ 86.678905][ T5764] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 86.686464][ T5764] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 86.693902][ T5764] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 86.719620][ T5764] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 86.741195][ T5764] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 86.754211][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 86.774068][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 86.792940][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 86.812360][ T5764] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 86.839331][ T5764] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 86.855880][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 86.885987][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 86.913689][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 86.932580][ T5764] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 86.949562][ T5764] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 86.964045][ T5764] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 86.986045][ T5764] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 87.020534][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 87.048476][ T5764] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 87.067512][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 87.076853][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 87.086027][ T5764] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 87.093696][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 87.483768][ T6179] loop1: detected capacity change from 0 to 2048 [ 87.560754][ T6180] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.623686][ T6177] loop2: detected capacity change from 0 to 32768 [ 87.631731][ T6177] XFS: noikeep mount option is deprecated. [ 87.676356][ T6177] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 87.723317][ T6180] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 87.765842][ T6180] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 87.792613][ T6180] Remounting filesystem read-only [ 87.813048][ T12] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 87.839406][ T12] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 87.856218][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 87.867859][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 87.873082][ T6177] XFS (loop2): Ending clean mount [ 87.880890][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 87.895853][ T12] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 87.903698][ T12] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 87.903754][ T6177] XFS (loop2): Quotacheck needed: Please wait. [ 87.918122][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 87.951041][ T6177] XFS (loop2): Quotacheck: Done. [ 87.951981][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 87.970220][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 87.979392][ T12] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 87.991890][ T12] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 87.999217][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 88.010837][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 88.026438][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 88.050637][ T5763] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 88.080897][ T12] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 88.087635][ T12] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 88.117252][ T12] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 88.125687][ T12] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 88.147393][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 88.157102][ T12] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 88.169683][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 88.187160][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 88.196769][ T12] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 88.210412][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 88.219438][ T12] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 88.245518][ T12] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 88.270778][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 88.279683][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 88.319977][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 88.340555][ T5764] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 88.364476][ T5764] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 88.392598][ T5764] NILFS (loop1): discard dirty block: blocknr=35, size=1024 [ 88.411896][ T6194] xt_recent: Unsupported userspace flags (000000de) [ 88.440567][ T5764] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 88.457205][ T5764] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 88.479970][ T5764] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 88.541132][ T5777] Bluetooth: hci0: command 0x0c1a tx timeout [ 88.663201][ T6204] loop3: detected capacity change from 0 to 256 [ 89.100986][ T6208] loop1: detected capacity change from 0 to 32768 [ 89.108417][ T6208] XFS: noikeep mount option is deprecated. [ 89.135281][ T6208] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 89.188292][ T6208] XFS (loop1): Ending clean mount [ 89.198616][ T6208] XFS (loop1): Quotacheck needed: Please wait. [ 89.216511][ T6224] loop2: detected capacity change from 0 to 512 [ 89.256257][ T6224] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.156: casefold flag without casefold feature [ 89.278429][ T6208] XFS (loop1): Quotacheck: Done. [ 89.283149][ T6224] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.156: couldn't read orphan inode 15 (err -117) [ 89.333004][ T6224] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.390413][ T6228] xt_recent: Unsupported userspace flags (000000de) [ 89.437957][ T5764] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 89.546855][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.917993][ T6240] loop3: detected capacity change from 0 to 256 [ 90.159295][ T6246] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 90.174025][ T6250] loop2: detected capacity change from 0 to 256 [ 90.195457][ T6252] loop3: detected capacity change from 0 to 512 [ 90.228986][ T6251] loop0: detected capacity change from 0 to 2048 [ 90.247618][ T6252] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.167: casefold flag without casefold feature [ 90.294605][ T6254] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.354450][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 90.384506][ T6252] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.167: couldn't read orphan inode 15 (err -117) [ 90.436345][ T6252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.548478][ T5761] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.796442][ T6261] loop2: detected capacity change from 0 to 32768 [ 90.819775][ T6254] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 90.847100][ T6254] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 90.873477][ T6254] Remounting filesystem read-only [ 90.882660][ T48] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 90.902256][ T6262] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 90.903180][ T48] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 90.930614][ T48] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 90.951974][ T48] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 90.968445][ T48] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 91.001495][ T48] NILFS (loop0): discard dirty page: offset=8192, ino=18 [ 91.030163][ T48] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 91.056482][ T48] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 91.076092][ T48] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 91.085768][ T48] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 91.093245][ T48] NILFS (loop0): discard dirty page: offset=12288, ino=18 [ 91.100450][ T48] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 91.107670][ T48] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 91.116761][ T48] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 91.125063][ T48] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 91.133559][ T48] NILFS (loop0): discard dirty page: offset=16384, ino=18 [ 91.145545][ T48] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 91.161533][ T48] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 91.169896][ T48] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 91.177190][ T48] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 91.193734][ T48] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 91.201639][ T48] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 91.208963][ T48] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 91.221422][ T48] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 91.228748][ T48] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 91.238489][ T48] NILFS (loop0): discard dirty page: offset=65536, ino=3 [ 91.246218][ T48] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 91.258025][ T48] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 91.287074][ T48] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 91.295980][ T48] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 91.309457][ T48] NILFS (loop0): discard dirty page: offset=196608, ino=3 [ 91.325515][ T48] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 91.353821][ T48] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 91.371209][ T48] NILFS (loop0): discard dirty block: blocknr=49, size=1024 [ 91.381088][ T48] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 91.394662][ T5762] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 91.416689][ T6270] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 91.436725][ T5762] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 91.469129][ T5762] NILFS (loop0): discard dirty block: blocknr=35, size=1024 [ 91.489705][ T5762] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 91.506278][ T5762] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 91.526018][ T5762] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 91.548042][ T5762] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 91.557877][ T5762] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 91.566447][ T5762] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 91.579317][ T5762] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 91.588984][ T5762] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 91.600251][ T5762] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 91.605551][ T6276] 9pnet_fd: Insufficient options for proto=fd [ 91.606973][ T5762] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 91.621973][ T5762] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 91.632033][ T5762] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 91.642218][ T5762] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 91.744163][ T6280] loop1: detected capacity change from 0 to 512 [ 91.774480][ T6280] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.181: casefold flag without casefold feature [ 91.789916][ T55] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.804863][ T6280] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.181: couldn't read orphan inode 15 (err -117) [ 91.825268][ T6280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.876891][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.920404][ T5767] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.940110][ T55] usb 4-1: device descriptor read/64, error -71 [ 92.220212][ T55] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 92.295986][ T6289] loop1: detected capacity change from 0 to 32768 [ 92.341726][ T5767] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.351948][ T5767] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.369993][ T5767] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 92.379604][ T6293] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 92.380726][ T5767] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 92.395533][ T55] usb 4-1: device descriptor read/64, error -71 [ 92.410491][ T5767] usb 3-1: SerialNumber: syz [ 92.572467][ T55] usb usb4-port1: attempt power cycle [ 92.637140][ T5767] usb 3-1: 0:2 : does not exist [ 92.642458][ T5767] usb 3-1: unit 5 not found! [ 92.673295][ T5767] usb 3-1: USB disconnect, device number 2 [ 92.731580][ T5754] udevd[5754]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.001063][ T55] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 93.030695][ T55] usb 4-1: device descriptor read/8, error -71 [ 93.109965][ T5803] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 93.242197][ T6299] nbd2: detected capacity change from 0 to 4294967296 [ 93.299976][ T55] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 93.312646][ T5803] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.322945][ T5803] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.334532][ T5803] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 93.343809][ T55] usb 4-1: device descriptor read/8, error -71 [ 93.344752][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.358499][ T5803] usb 2-1: Product: syz [ 93.365705][ T5803] usb 2-1: Manufacturer: syz [ 93.370523][ T5803] usb 2-1: SerialNumber: syz [ 93.480198][ T55] usb usb4-port1: unable to enumerate USB device [ 93.584306][ T5803] usb 2-1: 0:2 : does not exist [ 93.600936][ T5803] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 93.622183][ T5803] usb 2-1: USB disconnect, device number 2 [ 93.657110][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.700037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.708500][ T6303] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 93.716826][ T6303] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 93.723548][ T6303] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 93.731482][ T6303] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 93.788634][ T6307] 9pnet_fd: Insufficient options for proto=fd [ 94.802147][ T6327] loop0: detected capacity change from 0 to 32768 [ 94.809559][ T6327] xfs: Bad value for 'swidth' [ 94.929306][ T6335] loop0: detected capacity change from 0 to 24 [ 94.936642][ T6335] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 94.957899][ T6335] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 94.992073][ T6335] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 95.113642][ T6338] loop1: detected capacity change from 0 to 128 [ 95.160899][ T6339] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 95.552461][ T6343] loop1: detected capacity change from 0 to 32768 [ 95.580104][ T5770] Bluetooth: hci0: command 0x0c1a tx timeout [ 95.741206][ T5770] Bluetooth: hci3: command 0x0405 tx timeout [ 95.741236][ T5085] Bluetooth: hci2: command 0x0c1a tx timeout [ 95.753783][ T5766] Bluetooth: hci1: command 0x0c1a tx timeout [ 96.055018][ T6359] loop1: detected capacity change from 0 to 128 [ 96.076120][ T6359] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.100507][ T6359] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.140558][ T6359] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.210: No space for directory leaf checksum. Please run e2fsck -D. [ 96.156710][ T6359] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.210: checksumming directory block 0 [ 96.211967][ T6299] block nbd2: shutting down sockets [ 96.235688][ T5764] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.256561][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 96.265760][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 96.283631][ T5754] ldm_validate_partition_table(): Disk read failed. [ 96.295085][ T5754] Dev nbd2: unable to read RDB block 0 [ 96.297516][ T6367] loop0: detected capacity change from 0 to 764 [ 96.305326][ T5754] nbd2: unable to read partition table [ 96.333833][ T5754] nbd2: partition table beyond EOD, truncated [ 96.415199][ T6369] loop1: detected capacity change from 0 to 64 [ 96.469095][ T28] audit: type=1800 audit(1750314371.505:14): pid=6369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.214" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 96.540887][ T28] audit: type=1804 audit(1750314371.505:15): pid=6369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.214" name="/newroot/47/file1/file1" dev="loop1" ino=18 res=1 errno=0 [ 96.840010][ T5803] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.946408][ T55] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 96.983910][ T6390] netlink: 48 bytes leftover after parsing attributes in process `syz.1.224'. [ 96.994183][ T6390] netlink: 48 bytes leftover after parsing attributes in process `syz.1.224'. [ 97.040413][ T5803] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 97.048813][ T5803] usb 1-1: config 0 has no interface number 0 [ 97.058309][ T5803] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 97.068879][ T5803] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 97.088671][ T5803] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 97.098095][ T5803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.110391][ T5803] usb 1-1: Product: syz [ 97.115118][ T5803] usb 1-1: Manufacturer: syz [ 97.120084][ T5803] usb 1-1: SerialNumber: syz [ 97.127212][ T5803] usb 1-1: config 0 descriptor?? [ 97.134081][ T6373] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 97.143852][ T5803] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 97.156145][ T5803] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 97.164596][ T55] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.166057][ T5803] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 97.184628][ T55] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.214846][ T55] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 97.241137][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 97.249260][ T55] usb 4-1: SerialNumber: syz [ 97.369266][ T23] usb 1-1: USB disconnect, device number 3 [ 97.402048][ T23] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 97.449622][ T23] cyberjack 1-1:0.69: device disconnected [ 97.534236][ T55] usb 4-1: 0:2 : does not exist [ 97.555421][ T55] usb 4-1: unit 5: unexpected type 0x0c [ 97.608046][ T6396] loop1: detected capacity change from 0 to 32768 [ 97.635882][ T55] usb 4-1: USB disconnect, device number 7 [ 97.646046][ T6396] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 97.654670][ T6396] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 97.692586][ T6396] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 97.737596][ T6396] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 97.773492][ T5754] udevd[5754]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.053819][ T6405] loop0: detected capacity change from 0 to 256 [ 98.144661][ T6407] netlink: 48 bytes leftover after parsing attributes in process `syz.2.233'. [ 98.178454][ T6407] netlink: 48 bytes leftover after parsing attributes in process `syz.2.233'. [ 98.351971][ T6412] netlink: 104 bytes leftover after parsing attributes in process `syz.1.231'. [ 98.481030][ T6418] loop1: detected capacity change from 0 to 2048 [ 98.491561][ T6418] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 98.500585][ T5767] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 98.549569][ T5754] udevd[5754]: incorrect nilfs2 checksum on /dev/loop1 [ 98.573059][ T6419] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.695445][ T5767] usb 1-1: Using ep0 maxpacket: 16 [ 98.719273][ T5767] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.729035][ T6423] loop2: detected capacity change from 0 to 764 [ 98.740896][ T5767] usb 1-1: config 0 interface 0 has no altsetting 0 [ 98.747595][ T5767] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 98.760677][ T6418] syz.1.237 (6418) used greatest stack depth: 19464 bytes left [ 98.773266][ T5767] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.786634][ T5767] usb 1-1: config 0 descriptor?? [ 99.030908][ T6405] process 'syz.0.232' launched '' with NULL argv: empty string added [ 99.048310][ T5767] usbhid 1-1:0.0: can't add hid device: -71 [ 99.055999][ T5767] usbhid: probe of 1-1:0.0 failed with error -71 [ 99.065595][ T5767] usb 1-1: USB disconnect, device number 4 [ 99.145226][ T6431] netlink: 36 bytes leftover after parsing attributes in process `syz.1.243'. [ 99.194661][ T6431] netlink: 36 bytes leftover after parsing attributes in process `syz.1.243'. [ 99.250188][ T5803] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.287927][ T6435] xt_recent: Unsupported userspace flags (000000de) [ 99.448323][ T5803] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 99.458154][ T5803] usb 3-1: config 0 has no interface number 0 [ 99.464508][ T5803] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 99.475055][ T5803] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.487580][ T5803] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 99.492277][ T6439] loop1: detected capacity change from 0 to 4096 [ 99.501028][ T5803] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 99.523634][ T6439] NILFS (loop1): invalid segment: Checksum error in segment payload [ 99.534000][ T5803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.536116][ T6439] NILFS (loop1): trying rollback from an earlier position [ 99.543228][ T5803] usb 3-1: Product: syz [ 99.554769][ T5803] usb 3-1: Manufacturer: syz [ 99.571741][ T6439] NILFS (loop1): recovery complete [ 99.573639][ T5803] usb 3-1: SerialNumber: syz [ 99.601826][ T5803] usb 3-1: config 0 descriptor?? [ 99.607962][ T6428] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 99.624541][ T5803] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 99.670316][ T5803] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 99.703031][ T5803] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 99.859521][ T5767] usb 3-1: USB disconnect, device number 3 [ 99.866122][ T6443] loop1: detected capacity change from 0 to 2048 [ 99.878069][ T5767] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 99.892526][ T5767] cyberjack 3-1:0.69: device disconnected [ 99.902205][ T6443] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 99.963229][ T6449] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.015921][ T6443] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 3044605952 [ 100.048571][ T6443] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=15) [ 100.075372][ T6443] Remounting filesystem read-only [ 100.128287][ T6443] NILFS (loop1): error -5 truncating bmap (ino=15) [ 100.171551][ T6443] syz.1.248 (6443) used greatest stack depth: 19432 bytes left [ 100.247254][ T5764] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 100.260352][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 100.284643][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 100.303692][ T6456] netlink: 36 bytes leftover after parsing attributes in process `syz.0.252'. [ 100.315844][ T5764] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 100.323720][ T5764] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 100.344318][ T5764] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 100.355284][ T6458] netlink: 36 bytes leftover after parsing attributes in process `syz.0.252'. [ 100.653516][ T6468] loop0: detected capacity change from 0 to 512 [ 100.665394][ T6468] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 100.675034][ T6461] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 100.687677][ T6461] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 100.693605][ T6468] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 100.694668][ T6468] System zones: 1-12 [ 100.721198][ T6461] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 100.740677][ T6468] EXT4-fs (loop0): 1 truncate cleaned up [ 100.753665][ T6461] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 100.758894][ T6469] loop2: detected capacity change from 0 to 4096 [ 100.761132][ T6468] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.799679][ T6469] NILFS (loop2): invalid segment: Checksum error in segment payload [ 100.822260][ T6469] NILFS (loop2): trying rollback from an earlier position [ 100.883423][ T6469] NILFS (loop2): recovery complete [ 100.939438][ T5762] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.258772][ T6483] loop0: detected capacity change from 0 to 2048 [ 101.304136][ T6483] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 101.371339][ T5754] udevd[5754]: incorrect nilfs2 checksum on /dev/loop0 [ 101.387425][ T6488] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.437122][ T6483] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 3044605952 [ 101.462228][ T6483] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=15) [ 101.485803][ T6483] Remounting filesystem read-only [ 101.512280][ T6483] NILFS (loop0): error -5 truncating bmap (ino=15) [ 101.568112][ T5762] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 101.588474][ T5762] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.611596][ T5762] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.629963][ T5762] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 101.651759][ T5762] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 101.669633][ T5762] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 101.678664][ T6498] loop2: detected capacity change from 0 to 4096 [ 101.711600][ T6498] NILFS (loop2): invalid segment: Checksum error in segment payload [ 101.734622][ T6498] NILFS (loop2): trying rollback from an earlier position [ 101.818894][ T6498] NILFS (loop2): recovery complete [ 101.983494][ T6507] xt_recent: Unsupported userspace flags (000000de) [ 102.352148][ T6509] loop2: detected capacity change from 0 to 32768 [ 102.622321][ T5777] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.700829][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.780616][ T5085] Bluetooth: hci1: command 0x0c1a tx timeout [ 102.791081][ T5777] Bluetooth: hci3: command 0x0405 tx timeout [ 102.814525][ T6521] loop0: detected capacity change from 0 to 764 [ 103.108823][ T6523] loop3: detected capacity change from 0 to 32768 [ 103.318066][ T6535] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 103.473128][ T6538] xt_recent: Unsupported userspace flags (000000de) [ 103.488480][ T6540] loop0: detected capacity change from 0 to 24 [ 103.511162][ T6540] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 103.531003][ T6540] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 103.860305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.060037][ T5803] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 104.117613][ T6550] loop3: detected capacity change from 0 to 32768 [ 104.155644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 104.170809][ T6544] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 104.177414][ T6544] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 104.183867][ T6544] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 104.196783][ T6544] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 104.211933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 104.321962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.367271][ T5803] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.393365][ T5803] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.411248][ T5803] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 104.436877][ T5803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 104.450180][ T5803] usb 1-1: SerialNumber: syz [ 104.538514][ T6557] loop2: detected capacity change from 0 to 764 [ 104.690624][ T5803] usb 1-1: 0:2 : does not exist [ 104.696324][ T5803] usb 1-1: unit 5: unexpected type 0x0c [ 104.726964][ T5803] usb 1-1: USB disconnect, device number 5 [ 104.930257][ T5807] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.024070][ T6566] loop3: detected capacity change from 0 to 24 [ 105.032457][ C1] sd 0:0:1:0: [sda] tag#7854 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 105.039168][ T6566] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 105.042911][ C1] sd 0:0:1:0: [sda] tag#7854 CDB: Read(10) 28 00 00 00 00 00 00 00 01 00 00 00 [ 105.070838][ T6566] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 105.091256][ T5807] usb 3-1: device descriptor read/64, error -71 [ 105.154064][ T6570] xt_recent: Unsupported userspace flags (000000de) [ 105.178768][ T6572] loop3: detected capacity change from 0 to 24 [ 105.197322][ T6572] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 105.216999][ T6572] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 105.588425][ T6576] loop1: detected capacity change from 0 to 32768 [ 105.597287][ T5807] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 105.636078][ T6576] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 105.644462][ T6576] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 105.663989][ T6576] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 105.707509][ T6576] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 105.790162][ T5807] usb 3-1: device descriptor read/64, error -71 [ 105.836369][ T6575] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 105.847613][ T6575] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 106.024301][ T6575] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 106.084653][ T5807] usb usb3-port1: attempt power cycle [ 106.118465][ T6575] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 106.510146][ T5807] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 106.541814][ T5807] usb 3-1: device descriptor read/8, error -71 [ 106.555104][ T6601] xt_recent: Unsupported userspace flags (000000de) [ 106.640503][ T6603] loop0: detected capacity change from 0 to 256 [ 106.810003][ T5807] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 106.845590][ T5807] usb 3-1: device descriptor read/8, error -71 [ 106.949976][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 106.970107][ T5807] usb usb3-port1: unable to enumerate USB device [ 107.130026][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 107.137130][ T23] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.149854][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 107.156520][ T23] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 107.169456][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.180381][ T23] usb 1-1: config 0 descriptor?? [ 107.398180][ T23] usbhid 1-1:0.0: can't add hid device: -71 [ 107.404221][ T23] usbhid: probe of 1-1:0.0 failed with error -71 [ 107.413624][ T23] usb 1-1: USB disconnect, device number 6 [ 107.731513][ T6614] overlayfs: failed to resolve './file1': -2 [ 107.824377][ T5777] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.833143][ T6618] loop2: detected capacity change from 0 to 24 [ 107.851753][ T6618] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 107.890919][ T6618] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 107.901500][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 108.140050][ T5777] Bluetooth: hci3: command 0x0405 tx timeout [ 108.146236][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.350203][ T6626] loop0: detected capacity change from 0 to 32768 [ 108.560107][ T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 108.716630][ T6636] loop2: detected capacity change from 0 to 32768 [ 108.735354][ T6636] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 108.743631][ T6636] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 108.757869][ T6636] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 108.763187][ T23] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 108.800157][ T6636] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 108.808727][ T5807] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.822444][ T23] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 108.852702][ T23] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 108.877419][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.923661][ T23] usb 4-1: Product: syz [ 108.927871][ T23] usb 4-1: Manufacturer: syz [ 108.939341][ T6641] xt_recent: Unsupported userspace flags (000000de) [ 108.961696][ T23] usb 4-1: SerialNumber: syz [ 109.048133][ T5807] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 109.059879][ T5807] usb 2-1: config 0 has no interface number 0 [ 109.066036][ T5807] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 109.114970][ T5807] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 109.166785][ T5807] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 109.184279][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.210654][ T23] usb 4-1: USB disconnect, device number 8 [ 109.211435][ T5807] usb 2-1: Product: syz [ 109.245951][ T5807] usb 2-1: Manufacturer: syz [ 109.259851][ T5807] usb 2-1: SerialNumber: syz [ 109.306962][ T5807] usb 2-1: config 0 descriptor?? [ 109.340477][ T6622] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.370084][ T5807] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 109.394370][ T5807] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 109.541838][ T6650] loop0: detected capacity change from 0 to 24 [ 109.557839][ T6650] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 109.566619][ T6650] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 109.766132][ T5807] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 109.791672][ T5803] usb 2-1: USB disconnect, device number 3 [ 109.808027][ T5803] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 109.825701][ T5803] cyberjack 2-1:0.69: device disconnected [ 109.981795][ T5807] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.999963][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 110.000961][ T5807] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.023828][ T5807] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.033430][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.042093][ T5807] usb 3-1: Product: syz [ 110.046402][ T5807] usb 3-1: Manufacturer: syz [ 110.051081][ T5807] usb 3-1: SerialNumber: syz [ 110.275434][ T5807] usb 3-1: 0:2 : does not exist [ 110.276150][ T6665] loop3: detected capacity change from 0 to 32768 [ 110.307901][ T5807] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 110.385422][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.404121][ T5807] usb 3-1: USB disconnect, device number 8 [ 110.409961][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.411405][ T23] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 110.460057][ T5754] udevd[5754]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.479866][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 110.500082][ T23] usb 1-1: SerialNumber: syz [ 110.732884][ T23] usb 1-1: 0:2 : does not exist [ 110.793721][ T23] usb 1-1: unit 5: unexpected type 0x0c [ 110.806974][ T6674] loop1: detected capacity change from 0 to 24 [ 110.813080][ T6669] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 110.816437][ T6674] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 110.826962][ T6669] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 110.863624][ T6669] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 110.882572][ T6669] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 110.882769][ T6674] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 110.906558][ T23] usb 1-1: USB disconnect, device number 7 [ 110.981405][ T6674] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 111.018425][ T5754] udevd[5754]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.029797][ T6678] Bluetooth: MGMT ver 1.22 [ 111.044098][ T6678] Bluetooth: hci0: unsupported parameter 32767 [ 111.057940][ T6678] Bluetooth: hci0: invalid len left 3, exp >= 173 [ 111.190506][ T6680] overlayfs: failed to resolve './file1': -2 [ 111.404343][ T6689] overlayfs: failed to resolve './file0': -2 [ 111.542250][ T6696] block nbd2: shutting down sockets [ 111.688691][ T6692] loop0: detected capacity change from 0 to 32768 [ 111.904331][ T6706] loop3: detected capacity change from 0 to 24 [ 111.940931][ T6706] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 111.980763][ T6708] loop1: detected capacity change from 0 to 64 [ 112.006576][ T6706] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 112.062568][ T6706] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 112.282616][ T6712] overlayfs: failed to resolve './file0': -2 [ 112.361260][ T6718] overlayfs: failed to resolve './file0': -2 [ 112.402149][ T5803] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 112.418727][ T6720] xt_recent: Unsupported userspace flags (000000de) [ 112.700012][ T5085] Bluetooth: hci0: command 0x0c1a tx timeout [ 112.766990][ T6723] loop2: detected capacity change from 0 to 32768 [ 112.802622][ T5803] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.824159][ T5803] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.848482][ T5803] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 112.864622][ T5085] Bluetooth: hci2: command 0x0c1a tx timeout [ 112.895721][ C1] sd 0:0:1:0: [sda] tag#7826 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 112.898673][ T5803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 112.906195][ C1] sd 0:0:1:0: [sda] tag#7826 CDB: Read(10) 28 00 00 00 00 00 00 00 01 00 00 00 [ 112.940408][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.946533][ T5085] Bluetooth: hci3: command 0x0405 tx timeout [ 113.018423][ T5803] usb 1-1: SerialNumber: syz [ 113.092061][ T6733] block nbd1: shutting down sockets [ 113.295166][ T6738] loop3: detected capacity change from 0 to 24 [ 113.334981][ T6738] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 113.376409][ T6738] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 113.408883][ T6738] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 113.469198][ T6736] loop2: detected capacity change from 0 to 32768 [ 113.500503][ T5803] usb 1-1: 0:2 : does not exist [ 113.505604][ T5803] usb 1-1: unit 5: unexpected type 0x0c [ 113.556001][ T5803] usb 1-1: USB disconnect, device number 8 [ 113.606277][ T6740] overlayfs: failed to resolve './file0': -2 [ 113.631736][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.751295][ T6744] xt_recent: Unsupported userspace flags (000000de) [ 114.034187][ C1] sd 0:0:1:0: [sda] tag#7827 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 114.044746][ C1] sd 0:0:1:0: [sda] tag#7827 CDB: Read(10) 28 00 00 00 00 00 00 00 01 00 00 00 [ 114.056155][ T6755] netlink: 'syz.1.368': attribute type 8 has an invalid length. [ 114.083884][ T6755] netlink: 16 bytes leftover after parsing attributes in process `syz.1.368'. [ 114.103971][ T6755] netlink: 'syz.1.368': attribute type 8 has an invalid length. [ 114.123486][ T6755] netlink: 16 bytes leftover after parsing attributes in process `syz.1.368'. [ 114.431117][ T6766] block nbd2: shutting down sockets [ 114.434010][ T6770] xt_recent: Unsupported userspace flags (000000de) [ 114.530805][ T6772] overlayfs: failed to resolve './file0': -2 [ 114.670033][ T5803] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 114.852814][ T5803] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.863021][ T5803] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.870071][ T5806] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 114.875881][ T5803] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.888623][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.896994][ T5803] usb 2-1: Product: syz [ 114.901254][ T5803] usb 2-1: Manufacturer: syz [ 114.905852][ T5803] usb 2-1: SerialNumber: syz [ 115.069645][ T5806] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.099766][ T5806] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.121075][ T5806] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 115.130114][ T5803] usb 2-1: 0:2 : does not exist [ 115.133882][ T5803] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 115.139919][ T5806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 115.170781][ T5806] usb 4-1: SerialNumber: syz [ 115.208005][ T5803] usb 2-1: USB disconnect, device number 4 [ 115.234637][ T6783] syz.0.380[6783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.234790][ T6783] syz.0.380[6783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.267643][ T5754] udevd[5754]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.460127][ T5807] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 115.542825][ T6785] loop0: detected capacity change from 0 to 32768 [ 115.564782][ T5806] usb 4-1: 0:2 : does not exist [ 115.587803][ T5806] usb 4-1: unit 5: unexpected type 0x0c [ 115.604407][ T5806] usb 4-1: USB disconnect, device number 9 [ 115.659452][ T5807] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 115.667276][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.703518][ T5807] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 115.750808][ T5807] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 115.779898][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.806900][ T5807] usb 3-1: Product: syz [ 115.816962][ T5807] usb 3-1: Manufacturer: syz [ 115.825595][ T5807] usb 3-1: SerialNumber: syz [ 116.059255][ T5807] usb 3-1: USB disconnect, device number 9 [ 116.218098][ T6793] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 116.228348][ T6793] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 116.237391][ T6793] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 116.255530][ T6793] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 116.356975][ T6805] loop1: detected capacity change from 0 to 1024 [ 116.397016][ T6805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.662937][ T28] audit: type=1800 audit(1750314391.665:16): pid=6805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.389" name="file1" dev="overlay" ino=15 res=0 errno=0 [ 116.709232][ T6810] loop0: detected capacity change from 0 to 32768 [ 116.790727][ T6814] loop2: detected capacity change from 0 to 512 [ 116.820575][ T6814] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 116.848359][ T6814] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 116.863033][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.871344][ T6817] netlink: 16 bytes leftover after parsing attributes in process `syz.3.393'. [ 116.874871][ T6814] System zones: 1-12 [ 116.888560][ T6817] netlink: 16 bytes leftover after parsing attributes in process `syz.3.393'. [ 116.901679][ T6814] EXT4-fs (loop2): 1 truncate cleaned up [ 116.908492][ T6814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.030109][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.381482][ T6834] netlink: 56 bytes leftover after parsing attributes in process `syz.2.400'. [ 117.420125][ T5806] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 117.526424][ T6838] netlink: 104 bytes leftover after parsing attributes in process `syz.2.402'. [ 117.621953][ T5806] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 117.648247][ T5806] usb 2-1: config 0 has no interface number 0 [ 117.661391][ T5806] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 117.684529][ T5806] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.703659][ T5806] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 117.721025][ T5806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.737992][ T5806] usb 2-1: Product: syz [ 117.749269][ T5806] usb 2-1: Manufacturer: syz [ 117.760542][ T5806] usb 2-1: SerialNumber: syz [ 117.776608][ T5806] usb 2-1: config 0 descriptor?? [ 117.788652][ T6825] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 117.798468][ T5806] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 117.813783][ T5806] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 117.865146][ T6832] loop0: detected capacity change from 0 to 32768 [ 117.891537][ T6832] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 117.972436][ T6832] XFS (loop0): Ending clean mount [ 117.983550][ T6832] XFS (loop0): Quotacheck needed: Please wait. [ 118.044794][ T6832] XFS (loop0): Quotacheck: Done. [ 118.122454][ T5762] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 118.140342][ T5085] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.209543][ T55] usb 2-1: USB disconnect, device number 5 [ 118.238603][ T55] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 118.258392][ T55] cyberjack 2-1:0.69: device disconnected [ 118.305682][ T5085] Bluetooth: hci3: command 0x0405 tx timeout [ 118.311892][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.314902][ T5766] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.473810][ T6860] overlayfs: failed to resolve './file0': -2 [ 118.518597][ T6862] loop0: detected capacity change from 0 to 64 [ 118.591048][ T6864] xt_recent: Unsupported userspace flags (000000de) [ 118.729641][ T6868] loop2: detected capacity change from 0 to 24 [ 118.748613][ T6868] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 118.757798][ T6868] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 118.902912][ T6874] loop1: detected capacity change from 0 to 256 [ 119.117356][ T6882] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 119.240310][ T5803] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 119.364864][ T6893] xt_recent: Unsupported userspace flags (000000de) [ 119.420263][ T5803] usb 2-1: Using ep0 maxpacket: 16 [ 119.427309][ T5803] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.443899][ T5803] usb 2-1: config 0 interface 0 has no altsetting 0 [ 119.453397][ T5803] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 119.465075][ T5803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.483789][ T5803] usb 2-1: config 0 descriptor?? [ 119.521066][ T55] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 119.699201][ T5803] usbhid 2-1:0.0: can't add hid device: -71 [ 119.706120][ T5803] usbhid: probe of 2-1:0.0 failed with error -71 [ 119.716199][ T5803] usb 2-1: USB disconnect, device number 6 [ 119.735226][ T55] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.747937][ T6896] loop3: detected capacity change from 0 to 32768 [ 119.755323][ T55] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.770388][ T6896] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 119.790748][ T55] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 119.800081][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 119.808182][ T55] usb 3-1: SerialNumber: syz [ 119.865532][ T5754] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 120.009698][ T6900] loop3: detected capacity change from 0 to 1024 [ 120.023276][ T6900] EXT4-fs: inline encryption not supported [ 120.039496][ T55] usb 3-1: 0:2 : does not exist [ 120.055591][ T55] usb 3-1: unit 5: unexpected type 0x0c [ 120.056469][ T6900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.077697][ T55] usb 3-1: USB disconnect, device number 10 [ 120.112124][ T6900] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4036: comm syz.3.426: Allocating blocks 257-513 which overlap fs metadata [ 120.146770][ T6900] EXT4-fs (loop3): Remounting filesystem read-only [ 120.154034][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.231093][ T5761] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.671093][ T6909] loop3: detected capacity change from 0 to 32768 [ 120.726618][ T6922] xt_recent: Unsupported userspace flags (000000de) [ 120.754919][ T6909] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 120.847678][ T6909] XFS (loop3): Ending clean mount [ 120.861466][ T6909] XFS (loop3): Quotacheck needed: Please wait. [ 120.949378][ T6909] XFS (loop3): Quotacheck: Done. [ 121.022303][ T6931] nbd0: detected capacity change from 0 to 4294967296 [ 121.061604][ T5761] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 121.132821][ T6937] block nbd0: shutting down sockets [ 121.177979][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.187136][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 121.195362][ T5754] ldm_validate_partition_table(): Disk read failed. [ 121.209997][ T5754] Dev nbd0: unable to read RDB block 0 [ 121.215523][ T5754] nbd0: unable to read partition table [ 121.233220][ T5754] nbd0: partition table beyond EOD, truncated [ 121.340845][ T5803] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 121.549908][ T5803] usb 2-1: Using ep0 maxpacket: 16 [ 121.557221][ T5803] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.577516][ T5803] usb 2-1: config 0 interface 0 has no altsetting 0 [ 121.587895][ T5803] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 121.597843][ T5803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.622978][ T5803] usb 2-1: config 0 descriptor?? [ 121.806099][ T6952] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 121.812364][ T6952] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.818853][ T6952] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.819941][ T27] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 121.833760][ T6952] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.859063][ T5803] usbhid 2-1:0.0: can't add hid device: -71 [ 121.880481][ T5803] usbhid: probe of 2-1:0.0 failed with error -71 [ 121.889716][ T5803] usb 2-1: USB disconnect, device number 7 [ 122.022260][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.042655][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.080645][ T27] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 122.098707][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 122.107780][ T27] usb 1-1: SerialNumber: syz [ 122.174792][ T6964] nbd3: detected capacity change from 0 to 4294967296 [ 122.283012][ T6966] block nbd3: shutting down sockets [ 122.295158][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.304363][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 122.317997][ T96] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.327495][ T96] Buffer I/O error on dev nbd3, logical block 0, async page read [ 122.336074][ T96] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.346693][ T96] Buffer I/O error on dev nbd3, logical block 0, async page read [ 122.355289][ T96] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.373399][ T96] Buffer I/O error on dev nbd3, logical block 0, async page read [ 122.382628][ T96] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.397070][ T6962] loop2: detected capacity change from 0 to 32768 [ 122.400072][ T96] Buffer I/O error on dev nbd3, logical block 0, async page read [ 122.415238][ T27] usb 1-1: 0:2 : does not exist [ 122.420152][ T5756] ldm_validate_partition_table(): Disk read failed. [ 122.420180][ T5756] Dev nbd3: unable to read RDB block 0 [ 122.420207][ T5756] nbd3: unable to read partition table [ 122.420405][ T5756] nbd3: partition table beyond EOD, [ 122.431478][ T27] usb 1-1: unit 5: unexpected type 0x0c [ 122.456430][ T5756] truncated [ 122.465157][ T6962] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 122.479204][ T27] usb 1-1: USB disconnect, device number 9 [ 122.671935][ T6962] XFS (loop2): Ending clean mount [ 122.680484][ T6962] XFS (loop2): Quotacheck needed: Please wait. [ 122.777219][ T6962] XFS (loop2): Quotacheck: Done. [ 122.959124][ T5763] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 123.102658][ T6989] nbd3: detected capacity change from 0 to 4294967296 [ 123.143962][ T6984] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 123.150313][ T6984] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 123.162099][ T6984] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 123.168418][ T6984] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 123.211251][ T6994] block nbd3: shutting down sockets [ 123.260177][ C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.269422][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 123.280799][ T96] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.290040][ T96] Buffer I/O error on dev nbd3, logical block 0, async page read [ 123.303374][ T24] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.312611][ T24] Buffer I/O error on dev nbd3, logical block 0, async page read [ 123.321808][ T5756] ldm_validate_partition_table(): Disk read failed. [ 123.347270][ T5756] Dev nbd3: unable to read RDB block 0 [ 123.380138][ T5756] nbd3: unable to read partition table [ 123.410125][ T5756] nbd3: partition table beyond EOD, truncated [ 123.602073][ T27] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 123.807083][ T7019] xt_recent: Unsupported userspace flags (000000de) [ 123.824468][ T27] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 123.845473][ T27] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 123.863554][ T27] usb 1-1: config 220 interface 0 has no altsetting 0 [ 123.874144][ T27] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 123.884130][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.892948][ T27] usb 1-1: Product: syz [ 123.897321][ T27] usb 1-1: Manufacturer: syz [ 123.902643][ T27] usb 1-1: SerialNumber: syz [ 123.973104][ T7023] nbd3: detected capacity change from 0 to 4294967296 [ 124.081189][ T7031] block nbd3: shutting down sockets [ 124.087973][ C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.097152][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 124.105748][ T5756] ldm_validate_partition_table(): Disk read failed. [ 124.115662][ T5756] Dev nbd3: unable to read RDB block 0 [ 124.125835][ T5756] nbd3: unable to read partition table [ 124.137031][ T5756] nbd3: partition table beyond EOD, truncated [ 124.161109][ T27] usb 1-1: USB disconnect, device number 10 [ 124.331892][ T7038] loop1: detected capacity change from 0 to 1024 [ 124.388419][ T7038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.421543][ T28] audit: type=1800 audit(1750314399.465:17): pid=7038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.475" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 124.459195][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.922054][ T7058] loop0: detected capacity change from 0 to 1024 [ 124.949394][ T7058] EXT4-fs: inline encryption not supported [ 125.002184][ T7058] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.100013][ T5766] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.102045][ T7057] loop2: detected capacity change from 0 to 32768 [ 125.176312][ T7057] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.185156][ T5766] Bluetooth: hci3: command 0x0405 tx timeout [ 125.185202][ T5766] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.185231][ T5766] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.294781][ T7057] XFS (loop2): Ending clean mount [ 125.314087][ T7057] XFS (loop2): Quotacheck needed: Please wait. [ 125.329382][ T5762] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.373746][ T7057] XFS (loop2): Quotacheck: Done. [ 125.375516][ T7073] loop1: detected capacity change from 0 to 1024 [ 125.431648][ T7073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.435156][ T7057] fuse: Bad value for 'fd' [ 125.489935][ T28] audit: type=1800 audit(1750314400.515:18): pid=7073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.484" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 125.557294][ T5763] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.603277][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.745126][ T7054] loop3: detected capacity change from 0 to 32768 [ 125.932687][ T7083] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 126.250306][ T27] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 126.456667][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.469696][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.486757][ T27] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 126.497544][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.518632][ T27] usb 2-1: Product: syz [ 126.534066][ T27] usb 2-1: Manufacturer: syz [ 126.550825][ T27] usb 2-1: SerialNumber: syz [ 126.639993][ T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 126.657975][ T7101] loop0: detected capacity change from 0 to 1024 [ 126.727609][ T7101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.766825][ T28] audit: type=1800 audit(1750314401.805:19): pid=7101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.494" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 126.784366][ T27] usb 2-1: 0:2 : does not exist [ 126.803835][ T27] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 126.842122][ T23] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 126.867509][ T27] usb 2-1: USB disconnect, device number 8 [ 126.875539][ T23] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 126.884700][ T7099] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 126.891064][ T7099] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 126.897357][ T23] usb 4-1: config 220 interface 0 has no altsetting 0 [ 126.907701][ T23] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 126.917788][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.927316][ T23] usb 4-1: Product: syz [ 126.937643][ T7099] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 126.945021][ T7099] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 126.948681][ T5762] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.977735][ T23] usb 4-1: Manufacturer: syz [ 127.010018][ T23] usb 4-1: SerialNumber: syz [ 127.264511][ T23] usb 4-1: USB disconnect, device number 10 [ 127.569106][ T7110] loop0: detected capacity change from 0 to 32768 [ 127.604928][ T7110] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 127.632380][ T7110] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 127.689411][ T7110] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 127.758835][ T7110] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 128.160507][ T7123] loop3: detected capacity change from 0 to 32768 [ 128.249525][ T7127] loop2: detected capacity change from 0 to 1024 [ 128.330040][ T7127] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.452549][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.890071][ T5766] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.944081][ T7143] loop2: detected capacity change from 0 to 32768 [ 128.950639][ T5766] Bluetooth: hci2: command 0x0c1a tx timeout [ 129.022039][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 129.024195][ T7138] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.033341][ T5766] Bluetooth: hci3: command 0x0405 tx timeout [ 129.040789][ T7138] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 129.050774][ T7143] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 129.062545][ T7138] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 129.071667][ T7138] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 129.086636][ T7156] loop3: detected capacity change from 0 to 24 [ 129.099126][ T7156] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 129.108773][ T7156] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 129.140139][ T7156] overlayfs: failed to resolve './file1': -2 [ 129.350908][ T7143] XFS (loop2): Ending clean mount [ 129.360104][ T7143] XFS (loop2): Quotacheck needed: Please wait. [ 129.460290][ T7143] XFS (loop2): Quotacheck: Done. [ 129.507342][ T7158] loop0: detected capacity change from 0 to 32768 [ 129.558978][ T7158] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 129.580193][ T787] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 129.608171][ T5763] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 129.761581][ T7158] XFS (loop0): Ending clean mount [ 129.770942][ T7158] XFS (loop0): Quotacheck needed: Please wait. [ 129.837530][ T787] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 129.862772][ T787] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 129.871994][ T7158] XFS (loop0): Quotacheck: Done. [ 129.875098][ T7175] loop3: detected capacity change from 0 to 256 [ 129.877964][ T787] usb 2-1: config 220 interface 0 has no altsetting 0 [ 129.892644][ T787] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 129.904661][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.912824][ T787] usb 2-1: Product: syz [ 129.922662][ T787] usb 2-1: Manufacturer: syz [ 129.927300][ T787] usb 2-1: SerialNumber: syz [ 130.091728][ T7178] loop2: detected capacity change from 0 to 1024 [ 130.098666][ T5762] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 130.146784][ T7178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.195833][ T787] usb 2-1: USB disconnect, device number 9 [ 130.291558][ T23] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 130.320600][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.509912][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 130.524544][ T23] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.561428][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.568921][ T23] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 130.578643][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.589142][ T23] usb 4-1: config 0 descriptor?? [ 130.962495][ T7191] loop1: detected capacity change from 0 to 32768 [ 130.972583][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 130.978572][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 131.011427][ T7191] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 131.022902][ T23] usb 4-1: USB disconnect, device number 11 [ 131.103970][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 131.110469][ T5085] Bluetooth: hci2: command 0x0c1a tx timeout [ 131.117806][ T5766] Bluetooth: hci3: command 0x0405 tx timeout [ 131.125955][ T7191] XFS (loop1): Ending clean mount [ 131.135044][ T7191] XFS (loop1): Quotacheck needed: Please wait. [ 131.196405][ T7191] XFS (loop1): Quotacheck: Done. [ 131.239076][ T7189] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 131.246061][ T7189] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 131.263108][ T7189] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 131.282676][ T5764] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 131.290183][ T7189] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 131.556813][ C1] sd 0:0:1:0: [sda] tag#7840 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 131.567352][ C1] sd 0:0:1:0: [sda] tag#7840 CDB: Read(10) 28 00 00 00 00 00 00 00 01 00 00 00 [ 131.732316][ T7213] fuse: Bad value for 'fd' [ 131.739279][ T7212] loop2: detected capacity change from 0 to 1024 [ 131.784343][ T7212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.901480][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.075382][ T7227] loop2: detected capacity change from 0 to 256 [ 132.369960][ T23] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 132.540290][ T5807] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 132.560071][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 132.568304][ T23] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.578381][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 132.585595][ T23] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 132.594773][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.604323][ T23] usb 3-1: config 0 descriptor?? [ 132.732017][ T5807] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.742307][ T5807] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.753150][ T5807] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 132.762501][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 132.770770][ T5807] usb 2-1: SerialNumber: syz [ 132.814650][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 132.821945][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 132.835492][ T23] usb 3-1: USB disconnect, device number 11 [ 133.002957][ T5807] usb 2-1: 0:2 : does not exist [ 133.007932][ T5807] usb 2-1: unit 5: unexpected type 0x0c [ 133.064779][ T5807] usb 2-1: USB disconnect, device number 10 [ 133.069721][ T7242] loop0: detected capacity change from 0 to 1024 [ 133.120801][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.127157][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.148164][ T5754] udevd[5754]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.181009][ T5777] Bluetooth: hci0: command 0x0c1a tx timeout [ 133.226364][ T7242] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.260249][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 133.272613][ T7242] overlayfs: failed to resolve './bus': -2 [ 133.337994][ T5762] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.340008][ T5777] Bluetooth: hci3: command 0x0405 tx timeout [ 133.353126][ T5766] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.424582][ T7252] xt_recent: Unsupported userspace flags (000000de) [ 133.539646][ T7256] Bluetooth: hci0: invalid length 1, exp 2 for type 0 [ 133.657449][ T7260] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 133.936148][ T7274] loop1: detected capacity change from 0 to 256 [ 134.229963][ T5807] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 134.369566][ T7278] Bluetooth: hci0: invalid length 1, exp 2 for type 0 [ 134.409905][ T5807] usb 2-1: Using ep0 maxpacket: 16 [ 134.424304][ T5807] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.440334][ T5807] usb 2-1: config 0 interface 0 has no altsetting 0 [ 134.447446][ T5807] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 134.457095][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.502568][ T5807] usb 2-1: config 0 descriptor?? [ 134.726029][ T5807] usbhid 2-1:0.0: can't add hid device: -71 [ 134.748059][ T5807] usbhid: probe of 2-1:0.0 failed with error -71 [ 134.771205][ T5807] usb 2-1: USB disconnect, device number 11 [ 134.871256][ T7294] xt_recent: Unsupported userspace flags (000000de) [ 135.310134][ T7296] loop1: detected capacity change from 0 to 24 [ 135.322323][ T7296] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 135.357645][ T7296] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 135.420162][ T5777] Bluetooth: hci3: command 0x0405 tx timeout [ 135.557228][ T7305] overlayfs: missing 'lowerdir' [ 136.297354][ T7316] loop0: detected capacity change from 0 to 65536 [ 136.306521][ T7316] XFS: ikeep mount option is deprecated. [ 136.333403][ T7316] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 136.376296][ T7316] XFS (loop0): Ending clean mount [ 136.537201][ T5762] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 136.961413][ T7343] loop1: detected capacity change from 0 to 64 [ 137.083588][ T7346] overlayfs: missing 'lowerdir' [ 137.217597][ T7350] loop2: detected capacity change from 0 to 256 [ 137.851143][ T23] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 138.052528][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.062980][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.074856][ T23] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 138.084439][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 138.092653][ T23] usb 4-1: SerialNumber: syz [ 138.294305][ T7371] overlayfs: missing 'lowerdir' [ 138.326915][ T23] usb 4-1: 0:2 : does not exist [ 138.337954][ T23] usb 4-1: unit 5: unexpected type 0x0c [ 138.388074][ T23] usb 4-1: USB disconnect, device number 12 [ 138.497828][ T5754] udevd[5754]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.131148][ T7383] loop0: detected capacity change from 0 to 32768 [ 139.201621][ T7383] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 139.314665][ T7383] XFS (loop0): Ending clean mount [ 139.322858][ T7383] XFS (loop0): Quotacheck needed: Please wait. [ 139.373062][ T7383] XFS (loop0): Quotacheck: Done. [ 139.482948][ T5762] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 139.583617][ T7404] overlayfs: missing 'lowerdir' [ 139.960130][ T7408] loop1: detected capacity change from 0 to 32768 [ 139.989325][ T7408] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 140.043549][ T7408] XFS (loop1): Ending clean mount [ 140.053920][ T7408] XFS (loop1): Quotacheck needed: Please wait. [ 140.125795][ T7408] XFS (loop1): Quotacheck: Done. [ 140.264338][ T5764] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 140.518340][ T7433] xt_recent: Unsupported userspace flags (000000de) [ 140.751503][ T7430] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 140.762949][ T7430] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 140.771585][ T7430] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.779557][ T7430] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.382546][ T7451] loop1: detected capacity change from 0 to 32768 [ 141.484549][ T7460] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 141.694775][ T7469] loop0: detected capacity change from 0 to 24 [ 141.707118][ T7469] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 141.730276][ T7469] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 141.921139][ T7467] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 141.970108][ T7467] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.996767][ T7467] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 142.047691][ T7467] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 142.225400][ T7487] netlink: 48 bytes leftover after parsing attributes in process `syz.2.624'. [ 142.295751][ T7491] netlink: 48 bytes leftover after parsing attributes in process `syz.2.624'. [ 142.551520][ T7490] loop3: detected capacity change from 0 to 32768 [ 142.916061][ T7495] loop0: detected capacity change from 0 to 32768 [ 142.964297][ T7495] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 143.080901][ T7495] XFS (loop0): Ending clean mount [ 143.089242][ T7495] XFS (loop0): Quotacheck needed: Please wait. [ 143.153676][ T7495] XFS (loop0): Quotacheck: Done. [ 143.330900][ T5762] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 143.501322][ T7517] netlink: 48 bytes leftover after parsing attributes in process `syz.2.636'. [ 143.511431][ T7517] netlink: 48 bytes leftover after parsing attributes in process `syz.2.636'. [ 143.681856][ T7521] loop2: detected capacity change from 0 to 64 [ 143.899936][ T5777] Bluetooth: hci0: command 0x0c1a tx timeout [ 143.985429][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.012678][ T7513] loop3: detected capacity change from 0 to 32768 [ 144.060190][ T5777] Bluetooth: hci3: command 0x0405 tx timeout [ 144.060247][ T5766] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.073290][ T7513] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 144.218667][ T7513] XFS (loop3): Ending clean mount [ 144.238766][ T7513] XFS (loop3): Quotacheck needed: Please wait. [ 144.248399][ T7543] overlayfs: missing 'lowerdir' [ 144.355448][ T7513] XFS (loop3): Quotacheck: Done. [ 144.395630][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'. [ 144.442013][ T5761] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 144.534521][ T7547] loop2: detected capacity change from 0 to 1024 [ 144.576942][ T7547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.635697][ T7547] overlayfs: failed to resolve './bus': -2 [ 144.699376][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.865759][ T7554] netlink: 48 bytes leftover after parsing attributes in process `syz.2.646'. [ 144.910734][ T7554] netlink: 48 bytes leftover after parsing attributes in process `syz.2.646'. [ 144.995515][ T7557] xt_recent: Unsupported userspace flags (000000de) [ 145.103924][ T7565] overlayfs: missing 'lowerdir' [ 145.223830][ T7569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.653'. [ 145.600700][ T7567] loop0: detected capacity change from 0 to 32768 [ 145.618125][ T7567] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 145.691422][ T7567] XFS (loop0): Ending clean mount [ 145.699555][ T7567] XFS (loop0): Quotacheck needed: Please wait. [ 145.732191][ T7567] XFS (loop0): Quotacheck: Done. [ 145.785519][ T5762] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 146.135036][ T7592] netlink: 48 bytes leftover after parsing attributes in process `syz.0.658'. [ 146.149648][ T7592] netlink: 48 bytes leftover after parsing attributes in process `syz.0.658'. [ 146.247149][ T7590] loop1: detected capacity change from 0 to 32768 [ 146.343425][ T7595] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 146.455022][ T7597] overlayfs: missing 'lowerdir' [ 146.722496][ T7607] loop3: detected capacity change from 0 to 24 [ 146.732277][ T7607] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 146.770084][ T7607] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 146.812681][ T7607] overlayfs: missing 'lowerdir' [ 147.066161][ T7616] loop3: detected capacity change from 0 to 8 [ 147.118415][ T7618] [U] [ 147.121423][ T7618] [U] [ 147.122360][ T7616] SQUASHFS error: xz decompression failed, data probably corrupt [ 147.124113][ T7618] [U] [ 147.124163][ T7618] [U] [ 147.129135][ T7618] [U] [ 147.137110][ T7616] SQUASHFS error: Failed to read block 0x108: -5 [ 147.137695][ T7618] [U] [ 147.140405][ T7616] SQUASHFS error: Unable to read metadata cache entry [106] [ 147.146661][ T7618] [U] [ 147.149470][ T7616] SQUASHFS error: Unable to read inode 0x11f [ 147.156570][ T7618] [U] [ 147.156577][ T7618] [U] ( [ 147.156583][ T7618] [U]  [ 147.156589][ T7618] [U] [ 147.156613][ T7618] [U] [ 147.193067][ T7617] [U] [ 147.255652][ T5807] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 147.298137][ T7621] overlayfs: missing 'lowerdir' [ 147.461408][ T5807] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 147.469629][ T5807] usb 1-1: config 0 has no interface number 0 [ 147.476621][ T5807] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 147.487019][ T5807] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 147.500336][ T5807] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 147.510063][ T5807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.518093][ T5807] usb 1-1: Product: syz [ 147.524022][ T5807] usb 1-1: Manufacturer: syz [ 147.528647][ T5807] usb 1-1: SerialNumber: syz [ 147.539061][ T5807] usb 1-1: config 0 descriptor?? [ 147.545733][ T7611] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 147.557346][ T5807] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 147.569321][ T5807] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 147.911757][ T7636] __nla_validate_parse: 2 callbacks suppressed [ 147.911774][ T7636] netlink: 48 bytes leftover after parsing attributes in process `syz.2.678'. [ 147.928408][ T7636] netlink: 48 bytes leftover after parsing attributes in process `syz.2.678'. [ 147.994076][ T5807] usb 1-1: USB disconnect, device number 11 [ 148.015105][ T5807] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 148.027904][ T5807] cyberjack 1-1:0.69: device disconnected [ 148.157576][ T7640] loop2: detected capacity change from 0 to 24 [ 148.165791][ T7640] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 148.175152][ T7640] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 148.192540][ T7640] overlayfs: missing 'lowerdir' [ 148.387160][ T7644] overlayfs: missing 'lowerdir' [ 148.604044][ T7657] netlink: 48 bytes leftover after parsing attributes in process `syz.2.687'. [ 148.641275][ T7657] netlink: 48 bytes leftover after parsing attributes in process `syz.2.687'. [ 148.770881][ T7661] loop1: detected capacity change from 0 to 24 [ 148.794112][ T7661] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 148.819536][ T7661] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 148.866299][ T7661] overlayfs: missing 'lowerdir' [ 149.339743][ T7665] loop2: detected capacity change from 0 to 65536 [ 149.347355][ T7665] XFS: ikeep mount option is deprecated. [ 149.385199][ T7671] overlayfs: missing 'lowerdir' [ 149.418777][ T7670] loop1: detected capacity change from 0 to 32768 [ 149.479660][ T7665] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 149.537757][ T7665] XFS (loop2): Ending clean mount [ 149.596502][ T7670] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 149.656087][ T5763] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 149.977028][ T7686] loop1: detected capacity change from 0 to 2048 [ 149.983717][ T7689] loop0: detected capacity change from 0 to 1024 [ 150.027616][ T7686] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 150.086304][ T7689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.121938][ T7698] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.229032][ T7700] /dev/loop1: Can't open blockdev [ 150.246672][ T7701] netlink: 48 bytes leftover after parsing attributes in process `syz.3.699'. [ 150.260291][ T7686] syz.1.696: attempt to access beyond end of device [ 150.260291][ T7686] loop1: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 150.305584][ T5762] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.318993][ T7701] netlink: 48 bytes leftover after parsing attributes in process `syz.3.699'. [ 150.320050][ T7686] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1) [ 150.830077][ T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 151.005030][ T7726] netlink: 16 bytes leftover after parsing attributes in process `syz.2.709'. [ 151.024024][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.050738][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.072097][ T7729] xt_recent: Unsupported userspace flags (000000de) [ 151.075766][ T23] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 151.098388][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 151.121674][ T23] usb 1-1: SerialNumber: syz [ 151.269871][ T7735] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 151.336700][ T23] usb 1-1: 0:2 : does not exist [ 151.345404][ T23] usb 1-1: unit 5: unexpected type 0x0c [ 151.374402][ T23] usb 1-1: USB disconnect, device number 12 [ 151.414161][ T5754] udevd[5754]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.508036][ T7741] loop2: detected capacity change from 0 to 24 [ 151.518500][ T7741] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 151.534401][ T7741] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 151.576115][ T7741] overlayfs: missing 'lowerdir' [ 151.845115][ T7754] netlink: 16 bytes leftover after parsing attributes in process `syz.1.719'. [ 151.847051][ T7755] overlayfs: missing 'workdir' [ 152.100817][ T7769] loop0: detected capacity change from 0 to 24 [ 152.112981][ T7769] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 152.146310][ T7769] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 152.163147][ T7769] overlayfs: missing 'lowerdir' [ 152.330231][ T7739] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 152.475606][ T7781] netlink: 16 bytes leftover after parsing attributes in process `syz.2.731'. [ 152.509980][ T7739] usb 4-1: Using ep0 maxpacket: 32 [ 152.520071][ T7739] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 152.531438][ T7739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.548578][ T7739] usb 4-1: config 0 descriptor?? [ 152.773417][ T7739] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 152.786388][ T7739] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 152.805961][ T7739] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 152.813603][ T7739] usb 4-1: media controller created [ 152.820137][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 152.836366][ T7739] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.915799][ T7785] overlayfs: missing 'workdir' [ 152.981437][ T7739] az6027: usb out operation failed. (-71) [ 152.992096][ T7739] az6027: usb out operation failed. (-71) [ 152.997947][ T7739] stb0899_attach: Driver disabled by Kconfig [ 153.009756][ T7739] az6027: no front-end attached [ 153.009756][ T7739] [ 153.012502][ T9] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 153.019058][ T7739] az6027: usb out operation failed. (-71) [ 153.027477][ T9] usb 3-1: config 0 has no interface number 0 [ 153.044088][ T7739] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 153.047741][ T9] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 153.059751][ T7739] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 153.087177][ T9] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 153.089549][ T7739] dvb-usb: schedule remote query interval to 400 msecs. [ 153.118944][ T7739] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 153.122365][ T9] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 153.138454][ T7739] usb 4-1: USB disconnect, device number 13 [ 153.156507][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.165884][ T9] usb 3-1: Product: syz [ 153.180186][ T9] usb 3-1: Manufacturer: syz [ 153.218465][ T9] usb 3-1: SerialNumber: syz [ 153.251151][ T9] usb 3-1: config 0 descriptor?? [ 153.256978][ T7783] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 153.271640][ T7739] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 153.272107][ T9] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 153.353523][ T9] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 153.384057][ T7791] nbd0: detected capacity change from 0 to 4294967296 [ 153.437164][ T7794] block nbd0: shutting down sockets [ 153.458837][ C1] blk_print_req_error: 1 callbacks suppressed [ 153.458854][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.474129][ C1] buffer_io_error: 1 callbacks suppressed [ 153.474142][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 153.487815][ T5756] ldm_validate_partition_table(): Disk read failed. [ 153.520072][ T5756] Dev nbd0: unable to read RDB block 0 [ 153.525608][ T5756] nbd0: unable to read partition table [ 153.547253][ T5756] nbd0: partition table beyond EOD, truncated [ 153.748423][ T9] usb 3-1: USB disconnect, device number 12 [ 153.770503][ T9] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 153.815554][ T9] cyberjack 3-1:0.69: device disconnected [ 154.449599][ T7812] loop3: detected capacity change from 0 to 32768 [ 154.810816][ T7823] nbd0: detected capacity change from 0 to 4294967296 [ 154.870375][ T7824] block nbd0: shutting down sockets [ 154.877220][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.887330][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 154.895541][ T96] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.905003][ T96] Buffer I/O error on dev nbd0, logical block 0, async page read [ 154.914532][ T5754] ldm_validate_partition_table(): Disk read failed. [ 154.925643][ T5754] Dev nbd0: unable to read RDB block 0 [ 154.931613][ T5754] nbd0: unable to read partition table [ 154.937784][ T5754] nbd0: partition table beyond EOD, truncated [ 156.263532][ T7818] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 156.417794][ T7831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.751'. [ 156.843178][ T7842] nbd0: detected capacity change from 0 to 4294967296 [ 156.868321][ T7835] loop2: detected capacity change from 0 to 32768 [ 156.870612][ T7844] block nbd0: shutting down sockets [ 156.900042][ T96] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.909614][ T96] Buffer I/O error on dev nbd0, logical block 0, async page read [ 156.918008][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.927562][ T24] Buffer I/O error on dev nbd0, logical block 0, async page read [ 156.937811][ T5754] ldm_validate_partition_table(): Disk read failed. [ 156.990900][ T5754] Dev nbd0: unable to read RDB block 0 [ 157.015974][ T5754] nbd0: unable to read partition table [ 157.049499][ T5754] nbd0: partition table beyond EOD, truncated [ 157.410678][ T7854] loop1: detected capacity change from 0 to 32768 [ 157.597360][ T7861] loop3: detected capacity change from 0 to 24 [ 157.615493][ T7861] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 157.637974][ T7860] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 157.665658][ T7861] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 157.708122][ T7861] overlayfs: missing 'workdir' [ 158.046056][ T7865] loop3: detected capacity change from 0 to 2048 [ 158.074730][ T7865] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 158.147101][ T7870] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.178589][ T7865] /dev/loop3: Can't open blockdev [ 158.264186][ T7872] loop1: detected capacity change from 0 to 2048 [ 158.311093][ T7873] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.339953][ T55] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 158.429255][ T7876] nbd2: detected capacity change from 0 to 4294967296 [ 158.517133][ T7882] block nbd2: shutting down sockets [ 158.533059][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.542213][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 158.547206][ T55] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.560485][ T5756] ldm_validate_partition_table(): Disk read failed. [ 158.567122][ T5756] Dev nbd2: unable to read RDB block 0 [ 158.589585][ T5756] nbd2: unable to read partition table [ 158.599929][ T55] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.611416][ T5756] nbd2: partition table beyond EOD, truncated [ 158.621852][ T55] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 158.649901][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 158.658037][ T55] usb 1-1: SerialNumber: syz [ 158.996706][ T7892] loop2: detected capacity change from 0 to 1764 [ 159.123088][ T7890] loop1: detected capacity change from 0 to 32768 [ 159.139176][ T55] usb 1-1: 0:2 : does not exist [ 159.146454][ T55] usb 1-1: unit 5: unexpected type 0x0c [ 159.171904][ T55] usb 1-1: USB disconnect, device number 13 [ 159.227622][ T7895] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 159.327729][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.399502][ T7899] syz.2.778: attempt to access beyond end of device [ 159.399502][ T7899] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 159.460271][ T7899] exFAT-fs (loop2): unable to read boot sector [ 159.466549][ T7899] exFAT-fs (loop2): failed to read boot sector [ 159.489917][ T7899] exFAT-fs (loop2): failed to recognize exfat type [ 159.771249][ T7907] nbd2: detected capacity change from 0 to 4294967296 [ 159.874710][ T7916] block nbd2: shutting down sockets [ 160.167807][ T7915] loop1: detected capacity change from 0 to 32768 [ 160.205059][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.214213][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 160.233166][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.242443][ T96] Buffer I/O error on dev nbd2, logical block 0, async page read [ 160.250888][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.260293][ T96] Buffer I/O error on dev nbd2, logical block 0, async page read [ 160.268459][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.277953][ T7920] loop0: detected capacity change from 0 to 32768 [ 160.279458][ T96] Buffer I/O error on dev nbd2, logical block 0, async page read [ 160.292936][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.302193][ T96] Buffer I/O error on dev nbd2, logical block 0, async page read [ 160.311234][ T5756] ldm_validate_partition_table(): Disk read failed. [ 160.317873][ T5756] Dev nbd2: unable to read RDB block 0 [ 160.324873][ T5756] nbd2: unable to read partition table [ 160.331745][ T5756] nbd2: partition table beyond EOD, truncated [ 160.486187][ T7922] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 160.625764][ T7926] [U] [ 160.628522][ T7926] [U] [ 160.631229][ T7926] [U] [ 160.633936][ T7926] [U] [ 160.659749][ T7926] [U] [ 160.662507][ T7926] [U] [ 160.665221][ T7926] [U] [ 160.667906][ T7926] [U] [ 160.670587][ T7926] [U] ( [ 160.673360][ T7926] [U]  [ 160.676225][ T7926] [U] [ 160.678927][ T7926] [U] [ 160.733049][ T7926] [U] [ 160.735808][ T7926] [U] [ 160.738517][ T7926] [U] [ 160.741247][ T7926] [U] [ 160.759447][ T5764] general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN [ 160.771206][ T5764] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 160.778562][ T7926] [U] [ 160.779629][ T5764] CPU: 0 PID: 5764 Comm: syz-executor Not tainted 6.6.93-syzkaller #0 [ 160.782293][ T7926] [U] [ 160.790400][ T5764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.793079][ T7926] [U] [ 160.803107][ T5764] RIP: 0010:jfs_flush_journal+0x7ae/0xeb0 [ 160.805776][ T7926] [U] [ 160.811449][ T5764] Code: 00 00 00 4d 8d 77 d8 4c 89 f0 48 c1 e8 03 80 3c 18 00 74 08 4c 89 f7 e8 d0 08 dd fe 4d 8b 26 49 83 c4 40 4c 89 e0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 e7 e8 b4 08 dd fe 49 8b 3c 24 e8 7b 2d b3 [ 160.834025][ T5764] RSP: 0018:ffffc900046cfb20 EFLAGS: 00010202 [ 160.840081][ T5764] RAX: 0000000000000008 RBX: dffffc0000000000 RCX: ffff88807d4e3c00 [ 160.848041][ T5764] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 160.855998][ T5764] RBP: ffffc900046cfc50 R08: 0000000000000004 R09: 0000000000000004 [ 160.863956][ T5764] R10: ffffc900046cfa44 R11: fffff520008d9f51 R12: 0000000000000040 [ 160.871913][ T5764] R13: ffff88805f77a9a8 R14: ffff88802b956210 R15: ffff88802b956238 [ 160.879881][ T5764] FS: 0000555588904500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 160.888794][ T5764] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.895362][ T5764] CR2: 00007f7b7179b000 CR3: 0000000062a65000 CR4: 00000000003506f0 [ 160.903324][ T5764] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 160.911280][ T5764] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 160.919326][ T5764] Call Trace: [ 160.922610][ T5764] [ 160.925526][ T5764] ? dquot_disable+0x1310/0x1b60 [ 160.930468][ T5764] ? lmLogShutdown+0x830/0x830 [ 160.935215][ T5764] ? hook_sb_delete+0xa64/0xba0 [ 160.940050][ T5764] ? fsnotify_destroy_marks+0x82/0x310 [ 160.945496][ T5764] ? dquot_file_open+0xb0/0xb0 [ 160.950250][ T5764] jfs_umount+0x178/0x3c0 [ 160.954573][ T5764] jfs_put_super+0x8c/0x190 [ 160.959063][ T5764] ? jfs_free_inode+0x30/0x30 [ 160.963732][ T5764] generic_shutdown_super+0x134/0x2b0 [ 160.969091][ T5764] kill_block_super+0x44/0x90 [ 160.973757][ T5764] deactivate_locked_super+0x97/0x100 [ 160.979113][ T5764] cleanup_mnt+0x429/0x4c0 [ 160.983517][ T5764] task_work_run+0x1ce/0x250 [ 160.988095][ T5764] ? task_work_cancel+0x240/0x240 [ 160.993105][ T5764] ? exit_to_user_mode_loop+0x3b/0x110 [ 160.998551][ T5764] exit_to_user_mode_loop+0xe6/0x110 [ 161.003822][ T5764] exit_to_user_mode_prepare+0xb1/0x140 [ 161.009356][ T5764] syscall_exit_to_user_mode+0x1a/0x50 [ 161.014803][ T5764] do_syscall_64+0x61/0xb0 [ 161.019209][ T5764] ? clear_bhb_loop+0x40/0x90 [ 161.023867][ T5764] ? clear_bhb_loop+0x40/0x90 [ 161.028526][ T5764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.034410][ T5764] RIP: 0033:0x7faa1c18fc57 [ 161.038823][ T5764] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 161.058414][ T5764] RSP: 002b:00007ffefe699cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 161.066811][ T5764] RAX: 0000000000000000 RBX: 00007faa1c210925 RCX: 00007faa1c18fc57 [ 161.074772][ T5764] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffefe699db0 [ 161.082729][ T5764] RBP: 00007ffefe699db0 R08: 0000000000000000 R09: 0000000000000000 [ 161.090681][ T5764] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffefe69ae40 [ 161.098653][ T5764] R13: 00007faa1c210925 R14: 0000000000027306 R15: 00007ffefe69ae80 [ 161.106616][ T5764] [ 161.109627][ T5764] Modules linked in: [ 161.139909][ T5764] ---[ end trace 0000000000000000 ]--- [ 161.162225][ T5764] RIP: 0010:jfs_flush_journal+0x7ae/0xeb0 [ 161.174435][ T5764] Code: 00 00 00 4d 8d 77 d8 4c 89 f0 48 c1 e8 03 80 3c 18 00 74 08 4c 89 f7 e8 d0 08 dd fe 4d 8b 26 49 83 c4 40 4c 89 e0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 e7 e8 b4 08 dd fe 49 8b 3c 24 e8 7b 2d b3 [ 161.210837][ T5764] RSP: 0018:ffffc900046cfb20 EFLAGS: 00010202 [ 161.212228][ T7926] [U] [ 161.217103][ T5764] RAX: 0000000000000008 RBX: dffffc0000000000 RCX: ffff88807d4e3c00 [ 161.219617][ T7926] [U] [ 161.219641][ T7926] [U] [ 161.232953][ T7926] [U] [ 161.238868][ T7926] [U] [ 161.241591][ T7926] [U] [ 161.244287][ T7926] [U] [ 161.246973][ T7926] [U] [ 161.250493][ T7926] [U] [ 161.253202][ T7926] [U] [ 161.255925][ T7926] [U] [ 161.256295][ T5764] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 161.258597][ T7926] [U] [ 161.260545][ T7926] [U] [ 161.270048][ T55] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 161.271916][ T7926] [U] [ 161.271939][ T7926] [U] [ 161.284355][ T5764] RBP: ffffc900046cfc50 R08: 0000000000000004 R09: 0000000000000004 [ 161.284776][ T7926] [U] [ 161.295959][ T5764] R10: ffffc900046cfa44 R11: fffff520008d9f51 R12: 0000000000000040 [ 161.304578][ T5764] R13: ffff88805f77a9a8 R14: ffff88802b956210 R15: ffff88802b956238 [ 161.313001][ T5764] FS: 0000555588904500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 161.313021][ T7926] [U] [ 161.313044][ T7926] [U] [ 161.323140][ T5764] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 161.324608][ T7926] [U] [ 161.327249][ T5764] CR2: 0000200000004000 CR3: 0000000062a65000 CR4: 00000000003506f0 [ 161.333820][ T7926] [U] [ 161.334432][ T7926] [U] [ 161.336751][ T5764] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 161.344464][ T7926] [U] [ 161.344487][ T7926] [U] [ 161.344508][ T7926] [U] [ 161.346014][ T7926] [U] [ 161.351795][ T5764] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 161.358128][ T7926] [U] [ 161.358153][ T7926] [U] [ 161.358178][ T7926] [U] [ 161.359075][ T7926] [U] [ 161.363461][ T5764] Kernel panic - not syncing: Fatal exception [ 161.364346][ T7926] [U] [ 161.364373][ T7926] [U] [ 161.364398][ T7926] [U] [ 161.364687][ T5764] Kernel Offset: disabled [ 161.406775][ T5764] Rebooting in 86400 seconds..