last executing test programs: 5.700577729s ago: executing program 0 (id=760): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8108c4, &(0x7f0000000300)={[{@resv_level={'resv_level', 0x3d, 0x400}}, {@heartbeat_none}, {@inode64}, {@coherency_full}, {@err_ro}, {@localalloc={'localalloc', 0x3d, 0x1}}, {@intr}, {@localalloc}]}, 0x1, 0x442f, &(0x7f000000e480)="$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") syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000600)='./file0\x00', 0x2144840, 0x0, 0x3, 0x0, &(0x7f0000000100)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) 3.756180762s ago: executing program 0 (id=780): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x200, 0x4) sendmmsg$inet6(r0, &(0x7f00000027c0)=[{{&(0x7f00000002c0)={0xa, 0x6e20, 0x4, @mcast2, 0x41}, 0x1c, &(0x7f0000001180)=[{&(0x7f0000000a40)="e85eb3ad7a85f8ffbfeca731d6c8b8efffe715ca63a772ab76e7cffafb9d389706d2e3591336e025548a9a6dacd710c38203386303f61999708e2e086f02a597d35cb89496800f640fdc0d640b093b6048a305e8b1fe97a29fd305a32a525559ddd5ee389d8bc85b5c014a923f2633e07c9b1306f90aca263b0cbb80cd28e0d43c5e853eafd3471233aa29ffcbf71f5d41e6ac5cd9dd73d7d5a33ff36301367732b1d6d5c7bd74aa59bcbbeace3a5d25c319b37e9b5a1a2f49f5332b818ac6d3c9458fdbe1ac55b4c0560f22e891801c3c7ea9af178d90346e6bf66b6826d57dc05dcf8972c73b85085ebabef39bd87aed18f4de2d0caba6eb22132ee4e6c99097f54ca9742a3ae9bb80ab191d594d82418fadfa0cb593c22a452949e76978b77f7cd812009d64eaeeeb27224b6df92fbfeae6c94fb1c633246609466ac4d8fb1d890081d260b4c7acaf1b8a6f938205c462f4562e73d73546a47e3384abbd05de604e7d50d8053fb15a4ad2cc2d5a96c62fe5f4398362e4b098b6fd3b7fb03144c7a258b344de3fdb78ecb4237e53ae95ca31598a8102bd5990575fa6aff26ad340d7bbf1644ba6f1168d1d9a50aee8a9494c733f2c55dda98db0f23eff7df41a3354c3310c421703c0dad93182e4d10cf579215232e07cca2fa220d4a0751d2ededfd4924845baa5539fd6e666f3df3426afed1cd1c7c12bcf39eed1b848beee", 0x201}], 0x1}}], 0x1, 0x800) 3.406656212s ago: executing program 0 (id=782): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r0, 0x1) connect$bt_l2cap(r0, 0x0, 0x0) 3.372120654s ago: executing program 1 (id=783): r0 = timerfd_create(0x1, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000100)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r0, &(0x7f0000000300)) 3.186909685s ago: executing program 0 (id=786): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x4001, &(0x7f0000000340)=ANY=[], 0x0, 0x5538, &(0x7f0000002f80)="$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") fsync(r0) 3.186573145s ago: executing program 1 (id=787): io_setup(0x7, &(0x7f0000000280)=0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)='-', 0x1}]) 2.854819794s ago: executing program 2 (id=791): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x28, 0x2c, 0x1, 0x70bd28, 0x0, "", [@typed={0x8, 0x40, 0x0, 0x0, @uid=r1}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0x9, 0xdf, 0x0, 0x1, [@generic="1f598086b3"]}]}]}, 0x28}], 0x1}, 0x0) 2.683895314s ago: executing program 2 (id=793): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x20001) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00S']) 2.516306584s ago: executing program 2 (id=795): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="07000000010003", 0x7) 2.353171814s ago: executing program 2 (id=797): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @loopback}], 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1200) 2.152008716s ago: executing program 2 (id=800): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@index_off}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 1.973801255s ago: executing program 2 (id=801): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x79, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="420aa3"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.827075374s ago: executing program 1 (id=803): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x24, r1, 0x221, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 1.704374131s ago: executing program 0 (id=804): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.703895161s ago: executing program 4 (id=805): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x81, 0xfffffffb}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)='2', 0x1}, {&(0x7f0000000000)='0', 0x1}], 0x2, 0x0, 0x0) 1.596401718s ago: executing program 1 (id=807): syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f00000002c0)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c00a3b647fe731cd1aea259d2729275d8db387e99fe04a757710b05647c78041230ac6097388e4eec9974f2b8c6406f881dd1b9efaa86a5ab38396696d93713548e32ad2962703ba13855d8aea4d7efc6b0edb68d1126d5f2f63e0698c23f445b7499c61dc2304c278d679ccf4d1bd6d814dbaa3571bd1e111b4d2df8cb29522f15b626536c0fcdaf0bbb0c9ebac64a49b1c30381ba9c4df29492e4ee61ca4c42e2cb5ab3beaa6953b08704a52ea229490957ba0c785755f8f7e7"], 0x1, 0x9e18, &(0x7f000000a040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0) 1.503241323s ago: executing program 4 (id=808): fsopen(&(0x7f0000000040)='cpuset\x00', 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000040), 0x0}, 0x20) 1.488313494s ago: executing program 3 (id=809): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000fcdbdf254f00000008000300", @ANYRES32=0x0, @ANYBLOB="40007a800c000300a0d4e01051d6ff6314000100a141185d34a8353d9ec86372a23b0de6f87470a91cbb99c0fe5b1c37abc0da7ab2"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f00000000c0)={'wlan1\x00'}) 1.363700381s ago: executing program 3 (id=810): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000080)='trans=tcp,') 1.314721654s ago: executing program 4 (id=811): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d61746368000000300002800800024000000001180003006c7200006cd73e000500000000000000010000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) 1.238711308s ago: executing program 3 (id=812): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r1, 0x1, 0x783d27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x14) 1.121009035s ago: executing program 3 (id=813): setreuid(0xee01, 0xee01) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.099900077s ago: executing program 4 (id=814): syz_mount_image$jfs(&(0x7f0000007ec0), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3800400, &(0x7f0000007f40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="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"], 0xfe, 0x6245, &(0x7f0000025840)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x6, 0x7, 0xa}, 0x10001, 0x9}}, &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 989.149553ms ago: executing program 3 (id=815): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000015c0), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001d80)={0x2c, r1, 0x133, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x40}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x20}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 959.709125ms ago: executing program 1 (id=816): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={0x2c, r1, 0x1, 0x70bd24, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x9085}, 0x0) 924.305616ms ago: executing program 3 (id=817): fsopen(&(0x7f0000000280)='nfs\x00', 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff0924031300010005024524", @ANYRES8=r0, @ANYBLOB="0517"], 0x0) 801.232394ms ago: executing program 1 (id=818): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8205, &(0x7f0000001340)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x15}}, {@stripe}, {@grpid}, {@errors_remount}, {@data_err_ignore}, {@noblock_validity}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x13}}]}, 0x1, 0x60a, &(0x7f0000001c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xbc) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)=ANY=[@ANYRES32]) 226.093827ms ago: executing program 4 (id=819): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0xfffff05b}) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000080)=0x1ff, 0x4) 446.74µs ago: executing program 0 (id=820): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r1, 0x4068aea3, &(0x7f0000000080)) 0s ago: executing program 4 (id=821): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000100), 0x1d) kernel console output (not intermixed with test programs): 73.093496][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.101768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.115844][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.134487][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.148384][ T4189] device veth0_vlan entered promiscuous mode [ 73.156550][ T4193] device veth0_vlan entered promiscuous mode [ 73.168255][ T4185] device veth1_macvtap entered promiscuous mode [ 73.177378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.186749][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.195015][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.202529][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.210968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.220089][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.228271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.247976][ T4193] device veth1_vlan entered promiscuous mode [ 73.266306][ T4189] device veth1_vlan entered promiscuous mode [ 73.289496][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.302123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.311119][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.320267][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.330011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.356713][ T4193] device veth0_macvtap entered promiscuous mode [ 73.370673][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.389965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.399017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.408818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.418165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.428033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.436863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.445970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.466771][ T4193] device veth1_macvtap entered promiscuous mode [ 73.481613][ T4189] device veth0_macvtap entered promiscuous mode [ 73.516527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.526136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.537179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.546546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.556254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.565963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.574553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.582464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.595050][ T4189] device veth1_macvtap entered promiscuous mode [ 73.606617][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.621542][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.639404][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.656097][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.674486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.684055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.692666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.702635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.712991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.722991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.732709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.741405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.750202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.764172][ T4191] device veth0_vlan entered promiscuous mode [ 73.776977][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.787457][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.796788][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.806678][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.818477][ T4195] device veth0_vlan entered promiscuous mode [ 73.832948][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.847576][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.859735][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.869446][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.880678][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.891672][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.906519][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.923365][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.935735][ T4191] device veth1_vlan entered promiscuous mode [ 73.951652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.960362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.964875][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 73.975585][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 73.984605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.993733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.002566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.016213][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.025700][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.035135][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.044565][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 74.047040][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.050998][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 74.068713][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.082427][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.093890][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.104850][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.116421][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.124512][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 74.131188][ T4195] device veth1_vlan entered promiscuous mode [ 74.165449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.174850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.185494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.195247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.208059][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.217352][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.227269][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.236547][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.307863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.319075][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.330523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.380698][ T4191] device veth0_macvtap entered promiscuous mode [ 74.399714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.435683][ T4191] device veth1_macvtap entered promiscuous mode [ 74.456152][ T4195] device veth0_macvtap entered promiscuous mode [ 74.471225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.480483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.501001][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.519393][ T4195] device veth1_macvtap entered promiscuous mode [ 74.526728][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.546170][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.551395][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.570002][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.580579][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.591302][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.601827][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.613439][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.625293][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.642844][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.654142][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.666423][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.677282][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.687746][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.698737][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.710434][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.719093][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.727645][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.736057][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.745065][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.754528][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.764662][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.793308][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.810960][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.822076][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.832104][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.842452][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.853775][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.863774][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.874505][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.885940][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.896574][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.908714][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.937093][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.948823][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.957938][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.967567][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.979008][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.987693][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.996933][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.012031][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.024277][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.035338][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.046173][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.056322][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.067397][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.077554][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.089732][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.101475][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.111539][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.120828][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.134983][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.145202][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.169133][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.179417][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.188667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.197452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.209171][ T4195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.219173][ T4195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.231480][ T4195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.240596][ T4195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.279744][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.291522][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.332816][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.333662][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.365165][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.409248][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.491038][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.509934][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.524920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.620919][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.639945][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.658097][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.670998][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.696687][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.736158][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.746375][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.784073][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.808037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.044212][ T2283] Bluetooth: hci0: command 0x0419 tx timeout [ 76.056806][ T2283] Bluetooth: hci1: command 0x0419 tx timeout [ 76.123687][ T2283] Bluetooth: hci2: command 0x0419 tx timeout [ 76.140048][ T2283] Bluetooth: hci3: command 0x0419 tx timeout [ 76.173224][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.210226][ T2283] Bluetooth: hci4: command 0x0419 tx timeout [ 76.445685][ T4331] loop0: detected capacity change from 0 to 164 [ 76.499402][ T4331] Unable to read rock-ridge attributes [ 76.553331][ T13] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 76.569942][ T13] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 76.584652][ T4337] nbd: must specify a size in bytes for the device [ 76.601853][ T13] usb 4-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 76.674179][ T4331] Unable to read rock-ridge attributes [ 76.733644][ T4331] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 76.745742][ T13] usb 4-1: config 220 has no interface number 2 [ 76.781966][ T4335] loop4: detected capacity change from 0 to 32768 [ 76.792295][ T13] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 76.846718][ T4343] loop1: detected capacity change from 0 to 512 [ 76.860776][ T4335] (syz.4.19,4335,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x62b9e51c, computed 0xc1700438. Applying ECC. [ 76.874557][ T13] usb 4-1: config 220 interface 0 has no altsetting 0 [ 76.874606][ T13] usb 4-1: config 220 interface 76 has no altsetting 0 [ 76.874626][ T13] usb 4-1: config 220 interface 1 has no altsetting 0 [ 76.896449][ T4335] (syz.4.19,4335,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x62b9e51c, computed 0x98b843da [ 76.909653][ T4335] (syz.4.19,4335,1):ocfs2_validate_dir_block:452 ERROR: Checksum failed for dinode 352 [ 76.919779][ T4335] (syz.4.19,4335,1):ocfs2_read_virt_blocks:1021 ERROR: status = -5 [ 76.928873][ T4335] (syz.4.19,4335,1):ocfs2_read_dir_block:511 ERROR: status = -5 [ 76.936714][ T4335] (syz.4.19,4335,1):ocfs2_find_entry_el:728 ERROR: reading directory 66, offset 0 [ 76.947406][ T4335] (syz.4.19,4335,1):ocfs2_init_global_system_inodes:462 ERROR: status = -22 [ 76.956478][ T4335] (syz.4.19,4335,1):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 76.956520][ T4335] (syz.4.19,4335,1):ocfs2_init_global_system_inodes:473 ERROR: status = -22 [ 76.979375][ T4335] (syz.4.19,4335,1):ocfs2_initialize_super:2281 ERROR: status = -22 [ 76.987663][ T4335] (syz.4.19,4335,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 77.033749][ T13] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 77.055064][ T4343] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 77.080845][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.180294][ T13] usb 4-1: Product: syz [ 77.221245][ T13] usb 4-1: Manufacturer: syz [ 77.227268][ T4343] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.245526][ T13] usb 4-1: SerialNumber: syz [ 77.363156][ T4343] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.22: bg 0: block 18: invalid block bitmap [ 77.396788][ T4361] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.28'. [ 77.410971][ T4343] Quota error (device loop1): write_blk: dquota write failed [ 77.423432][ T4343] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 77.451550][ T4360] Quota error (device loop1): write_blk: dquota write failed [ 77.478187][ T4343] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.22: Failed to acquire dquot type 1 [ 77.527921][ T4360] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 77.566152][ T4360] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.22: Failed to acquire dquot type 1 [ 77.589752][ T4366] netlink: 'syz.4.31': attribute type 15 has an invalid length. [ 77.630567][ T4343] syz.1.22 (4343) used greatest stack depth: 19440 bytes left [ 77.655226][ T13] usb 4-1: selecting invalid altsetting 0 [ 77.662567][ T13] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 77.689292][ T13] usb 4-1: No valid video chain found. [ 77.806106][ T13] usb 4-1: selecting invalid altsetting 0 [ 77.822334][ T13] usbtest: probe of 4-1:220.1 failed with error -22 [ 77.870421][ T13] usb 4-1: USB disconnect, device number 2 [ 78.413469][ T4224] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.476723][ T4407] loop0: detected capacity change from 0 to 512 [ 78.484119][ T4407] ======================================================= [ 78.484119][ T4407] WARNING: The mand mount option has been deprecated and [ 78.484119][ T4407] and is ignored by this kernel. Remove the mand [ 78.484119][ T4407] option from the mount to silence this warning. [ 78.484119][ T4407] ======================================================= [ 78.576809][ T4407] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 78.595308][ T4410] loop3: detected capacity change from 0 to 256 [ 78.602950][ T4412] loop2: detected capacity change from 0 to 128 [ 78.612076][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.629671][ T4412] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 78.651583][ T4412] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.713281][ T4224] usb 2-1: Using ep0 maxpacket: 32 [ 78.747339][ T4407] EXT4-fs (loop0): 1 orphan inode deleted [ 78.753350][ T4407] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,jqfmt=vfsv0,resgid=0x0000000000000000,sysvgroups,delalloc,quota,. Quota mode: writeback. [ 78.774109][ T4407] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.918995][ T4419] netlink: 40 bytes leftover after parsing attributes in process `syz.2.56'. [ 79.014407][ T4224] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 79.037462][ T4224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.047254][ T4224] usb 2-1: Product: syz [ 79.051822][ T4224] usb 2-1: Manufacturer: syz [ 79.057015][ T4224] usb 2-1: SerialNumber: syz [ 79.087893][ T4224] usb 2-1: config 0 descriptor?? [ 79.133393][ T13] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 79.142504][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.179166][ T13] usb 5-1: Product: syz [ 79.184435][ T13] usb 5-1: Manufacturer: syz [ 79.189083][ T13] usb 5-1: SerialNumber: syz [ 79.214896][ T13] usb 5-1: config 0 descriptor?? [ 79.254708][ T13] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 79.292895][ T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 79.318632][ T4432] loop0: detected capacity change from 0 to 512 [ 79.341214][ T4434] loop3: detected capacity change from 0 to 256 [ 79.348411][ T13] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 79.376947][ T13] usb 5-1: media controller created [ 79.384118][ T4235] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.401465][ T4432] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.61: inode has both inline data and extents flags [ 79.420550][ T4432] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.61: couldn't read orphan inode 15 (err -117) [ 79.438500][ T4432] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 79.479225][ T4434] FAT-fs (loop3): Directory bread(block 64) failed [ 79.516649][ T4434] FAT-fs (loop3): Directory bread(block 65) failed [ 79.529008][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 79.534987][ T4434] FAT-fs (loop3): Directory bread(block 66) failed [ 79.551031][ T4434] FAT-fs (loop3): Directory bread(block 67) failed [ 79.559008][ T2283] Bluetooth: hci4: command 0x0405 tx timeout [ 79.563782][ T4434] FAT-fs (loop3): Directory bread(block 68) failed [ 79.573255][ T4434] FAT-fs (loop3): Directory bread(block 69) failed [ 79.577900][ T4224] airspy 2-1:0.0: Board ID: 00 [ 79.584671][ T4434] FAT-fs (loop3): Directory bread(block 70) failed [ 79.599838][ T4224] airspy 2-1:0.0: Firmware version: [ 79.605334][ T4434] FAT-fs (loop3): Directory bread(block 71) failed [ 79.623409][ T4434] FAT-fs (loop3): Directory bread(block 72) failed [ 79.637123][ T4434] FAT-fs (loop3): Directory bread(block 73) failed [ 79.663206][ T4235] usb 3-1: Using ep0 maxpacket: 16 [ 79.730590][ T13] DVB: Unable to find symbol mt352_attach() [ 79.765303][ T13] DVB: Unable to find symbol nxt6000_attach() [ 79.771446][ T13] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 79.784466][ T4235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.796692][ T4235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.802873][ T4224] airspy 2-1:0.0: usb_control_msg() failed -71 request 11 [ 79.848962][ T4224] airspy 2-1:0.0: Registered as swradio24 [ 79.863728][ T4224] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 79.872563][ T4235] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 79.901700][ T4235] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 79.919859][ T4224] usb 2-1: USB disconnect, device number 2 [ 79.929563][ T13] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 79.949821][ T4235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.974098][ T4235] usb 3-1: config 0 descriptor?? [ 79.980380][ T13] dvb-usb: schedule remote query interval to 1000 msecs. [ 79.992211][ T13] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 80.026279][ T13] dvb-usb: bulk message failed: -22 (7/0) [ 80.032318][ T13] dvb-usb: bulk message failed: -22 (7/0) [ 80.079347][ T13] usb 5-1: USB disconnect, device number 2 [ 80.169461][ T4448] xt_policy: too many policy elements [ 80.249498][ T13] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 80.467583][ T4235] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 80.498300][ T4235] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 80.575792][ T4463] loop0: detected capacity change from 0 to 256 [ 80.589779][ T4235] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 80.609002][ T4235] microsoft 0003:045E:07DA.0001: no inputs found [ 80.615890][ T4235] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 80.683807][ T4463] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 80.729697][ T2283] usb 3-1: USB disconnect, device number 2 [ 80.853240][ T4224] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 80.991226][ T4469] fido_id[4469]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 81.001935][ T4446] loop3: detected capacity change from 0 to 32768 [ 81.148221][ T4224] usb 2-1: Using ep0 maxpacket: 16 [ 81.172016][ T4446] XFS (loop3): Mounting V5 Filesystem [ 81.193517][ T4476] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 81.277794][ T4446] XFS (loop3): Ending clean mount [ 81.303760][ T4224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 81.315459][ T4224] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 81.335481][ T4224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.345830][ T4224] usb 2-1: config 0 descriptor?? [ 81.428873][ T4193] XFS (loop3): Unmounting Filesystem [ 81.527868][ T4489] set_capacity_and_notify: 1 callbacks suppressed [ 81.527885][ T4489] loop2: detected capacity change from 0 to 512 [ 81.617587][ T4489] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 81.646924][ T4489] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.679329][ T4489] EXT4-fs (loop2): 1 truncate cleaned up [ 81.692993][ T4489] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,resgid=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 81.847808][ T4224] hid (null): global environment stack underflow [ 81.867276][ T4224] corsair-cpro 0003:1B1C:1D00.0002: global environment stack underflow [ 81.876200][ T4224] corsair-cpro 0003:1B1C:1D00.0002: item 0 4 1 11 parsing failed [ 81.889525][ T4224] corsair-cpro: probe of 0003:1B1C:1D00.0002 failed with error -22 [ 82.084552][ T4224] usb 2-1: USB disconnect, device number 3 [ 82.124749][ T4500] netlink: 32 bytes leftover after parsing attributes in process `syz.2.87'. [ 82.140755][ T4502] loop0: detected capacity change from 0 to 164 [ 82.157481][ T4500] tipc: Invalid UDP bearer configuration [ 82.157605][ T4500] tipc: Enabling of bearer rejected, failed to enable media [ 82.234461][ T4502] rock: directory entry would overflow storage [ 82.240841][ T4502] rock: sig=0x66, size=4, remaining=3 [ 82.463509][ T4512] loop2: detected capacity change from 0 to 512 [ 82.640768][ T4512] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 82.694126][ T4512] ext4 filesystem being mounted at /23/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.787621][ T4520] loop1: detected capacity change from 0 to 256 [ 82.867351][ T4520] exfat: Deprecated parameter 'namecase' [ 82.933515][ T4520] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 83.046218][ T4532] loop3: detected capacity change from 0 to 64 [ 83.173518][ T4536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'. [ 83.225275][ T4532] hfs: hfs: Invalid key length: 94 [ 83.368776][ T4514] loop4: detected capacity change from 0 to 32768 [ 83.377150][ T4193] hfs: node 4:3 still has 1 user(s)! [ 83.391585][ T4540] loop1: detected capacity change from 0 to 1024 [ 83.598433][ T4514] ea_get: invalid extended attribute [ 83.629794][ T4514] ffff888074a8b170: 04 00 00 00 .... [ 83.744778][ T4555] netlink: 'syz.0.112': attribute type 1 has an invalid length. [ 83.755689][ T1159] hfsplus: b-tree write err: -5, ino 8 [ 83.803477][ T4555] netlink: 224 bytes leftover after parsing attributes in process `syz.0.112'. [ 83.803878][ T13] Bluetooth: hci4: command 0x0405 tx timeout [ 84.000046][ T4561] loop1: detected capacity change from 0 to 1024 [ 84.022869][ T4563] program syz.0.117 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.111264][ T4566] capability: warning: `syz.3.118' uses deprecated v2 capabilities in a way that may be insecure [ 84.126744][ T4567] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.515374][ T4587] loop3: detected capacity change from 0 to 256 [ 84.537423][ T4588] loop1: detected capacity change from 0 to 256 [ 84.577839][ T4592] netlink: 16 bytes leftover after parsing attributes in process `syz.0.129'. [ 84.612635][ T4588] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 84.636941][ T4594] hfsplus: failed to load root directory [ 84.724569][ T4593] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 84.768901][ T4593] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.976409][ T4612] netlink: 'syz.0.138': attribute type 1 has an invalid length. [ 85.313141][ T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 85.531935][ T4628] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.833390][ T13] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 85.883640][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.905959][ T4605] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 85.913286][ T13] usb 5-1: Product: syz [ 85.918544][ T13] usb 5-1: Manufacturer: syz [ 85.954097][ T13] usb 5-1: SerialNumber: syz [ 85.965462][ T4638] netlink: 'syz.1.151': attribute type 2 has an invalid length. [ 85.985308][ T4605] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 86.004796][ T13] usb 5-1: config 0 descriptor?? [ 86.064102][ T4641] netlink: 'syz.1.151': attribute type 2 has an invalid length. [ 86.266721][ T4645] hfs: unable to locate alternate MDB [ 86.304325][ T4645] hfs: continuing without an alternate MDB [ 86.313299][ T13] usb 5-1: ignoring: probably an ADSL modem [ 86.333239][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 86.469990][ T4648] netlink: 220 bytes leftover after parsing attributes in process `syz.3.154'. [ 86.499848][ T4648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.154'. [ 86.596144][ T13] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 86.631814][ T13] usb 5-1: USB disconnect, device number 3 [ 86.689754][ T23] cfg80211: failed to load regulatory.db [ 86.930992][ T4658] set_capacity_and_notify: 6 callbacks suppressed [ 86.931008][ T4658] loop0: detected capacity change from 0 to 1024 [ 86.981393][ T4658] EXT4-fs (loop0): Ignoring removed orlov option [ 87.084098][ T4658] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,user_xattr,,errors=continue. Quota mode: none. [ 87.191381][ T4652] loop1: detected capacity change from 0 to 32768 [ 87.258395][ T4652] [ 87.258395][ T4652] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.258395][ T4652] [ 87.273567][ T4644] loop2: detected capacity change from 0 to 32768 [ 87.387872][ T4669] ERROR: (device loop1): dbReAlloc: the block is outside the filesystem [ 87.387872][ T4669] [ 87.441800][ T4644] XFS (loop2): Mounting V5 Filesystem [ 87.475201][ T4669] ERROR: (device loop1): remounting filesystem as read-only [ 87.604545][ T4644] XFS (loop2): Ending clean mount [ 87.680422][ T4644] XFS (loop2): Quotacheck needed: Please wait. [ 87.690564][ T4654] loop3: detected capacity change from 0 to 32768 [ 87.780368][ T4654] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 87.804694][ T4654] JBD2: Ignoring recovery information on journal [ 87.897519][ T4644] XFS (loop2): Quotacheck: Done. [ 88.080823][ T4654] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 88.132061][ T4191] XFS (loop2): Unmounting Filesystem [ 88.228708][ T4685] loop1: detected capacity change from 0 to 4096 [ 88.268336][ T4654] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1 [ 88.336884][ T4654] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 88.377637][ T4654] OCFS2: File system is now read-only. [ 88.397903][ T4654] (syz.3.157,4654,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 88.409298][ T4685] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 88.428214][ T4654] (syz.3.157,4654,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 88.461478][ T4654] (syz.3.157,4654,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 88.486383][ T4685] ntfs3: loop1: Failed to load $Extend. [ 88.522205][ T4654] (syz.3.157,4654,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 88.551230][ T4654] (syz.3.157,4654,0):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 88.593782][ T4654] (syz.3.157,4654,0):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 88.626806][ T4654] (syz.3.157,4654,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 88.655212][ T4654] (syz.3.157,4654,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 88.683233][ T4654] (syz.3.157,4654,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 88.740199][ T4654] (syz.3.157,4654,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 88.782798][ T4677] loop4: detected capacity change from 0 to 40427 [ 88.800979][ T4654] (syz.3.157,4654,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 88.817397][ T4654] (syz.3.157,4654,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 88.846415][ T4654] (syz.3.157,4654,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 88.870033][ T4677] F2FS-fs (loop4): invalid crc value [ 88.880461][ T4654] (syz.3.157,4654,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 88.892386][ T4654] (syz.3.157,4654,0):ocfs2_mknod:357 ERROR: status = -30 [ 88.903823][ T4654] (syz.3.157,4654,0):ocfs2_mknod:502 ERROR: status = -30 [ 88.911761][ T4654] (syz.3.157,4654,0):ocfs2_mkdir:659 ERROR: status = -30 [ 88.923973][ T4677] F2FS-fs (loop4): Found nat_bits in checkpoint [ 88.957964][ T4654] (syz.3.157,4654,0):ocfs2_remount:667 ERROR: Cannot remount RDWR filesystem due to previous errors. [ 89.051404][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 89.087322][ T4677] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 89.294681][ T4195] attempt to access beyond end of device [ 89.294681][ T4195] loop4: rw=2049, want=45104, limit=40427 [ 89.316055][ T4711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.177'. [ 89.328237][ T4711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.177'. [ 89.942039][ T4722] loop3: detected capacity change from 0 to 32768 [ 89.989119][ T4722] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Trying to join cluster "lock_nolock", "__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9" [ 90.004109][ T4722] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Now mounting FS (format 0)... [ 90.049761][ T4722] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: journal 0 mapped with 16 extents in 0ms [ 90.073874][ T4222] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0, already locked for use [ 90.084821][ T4222] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Looking at journal... [ 90.177984][ T4222] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Journal head lookup took 93ms [ 90.199757][ T4222] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Done [ 90.220875][ T4722] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: first mount done, others may mount [ 90.233514][ T4722] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: no resource groups found in the file system. [ 90.430215][ T4742] loop0: detected capacity change from 0 to 512 [ 90.512071][ T4742] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 90.583410][ T4750] netlink: 16 bytes leftover after parsing attributes in process `syz.1.193'. [ 90.630152][ T4742] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002] [ 90.682062][ T4742] EXT4-fs (loop0): orphan cleanup on readonly fs [ 90.686980][ T4742] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.189: bg 0: block 361: padding at end of block bitmap is not set [ 90.690423][ T4742] EXT4-fs (loop0): Remounting filesystem read-only [ 90.690451][ T4742] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 90.691030][ T4742] EXT4-fs (loop0): Remounting filesystem read-only [ 90.691056][ T4742] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.189: attempt to clear invalid blocks 33619980 len 1 [ 90.691401][ T4742] EXT4-fs (loop0): Remounting filesystem read-only [ 90.692329][ T4742] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.189: invalid indirect mapped block 1811939328 (level 0) [ 90.692689][ T4742] EXT4-fs (loop0): Remounting filesystem read-only [ 90.692731][ T4742] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.189: invalid indirect mapped block 2185560079 (level 1) [ 90.693093][ T4742] EXT4-fs (loop0): Remounting filesystem read-only [ 90.693362][ T4742] EXT4-fs (loop0): 1 truncate cleaned up [ 90.693383][ T4742] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000000000000. Quota mode: none. [ 90.954640][ T4764] loop2: detected capacity change from 0 to 2048 [ 91.093849][ T4778] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.183672][ T4782] netlink: 'syz.0.206': attribute type 4 has an invalid length. [ 91.363537][ T4782] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.206'. [ 91.633331][ T4792] netlink: 100 bytes leftover after parsing attributes in process `syz.4.211'. [ 91.838238][ T4803] loop0: detected capacity change from 0 to 128 [ 91.950511][ T4803] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 91.960293][ T4813] netlink: 72 bytes leftover after parsing attributes in process `syz.1.221'. [ 92.062214][ T4185] sysv_free_block: flc_count > flc_size [ 92.092691][ T26] audit: type=1326 audit(1770024152.637:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4816 comm="syz.1.223" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f681d754eb9 code=0x0 [ 92.097927][ T4185] sysv_free_block: flc_count > flc_size [ 92.160644][ T4185] sysv_free_block: flc_count > flc_size [ 92.176801][ T4185] sysv_free_block: flc_count > flc_size [ 92.192709][ T4185] sysv_free_block: flc_count > flc_size [ 92.202850][ T4185] sysv_free_block: flc_count > flc_size [ 92.212967][ T4185] sysv_free_block: flc_count > flc_size [ 92.233372][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 92.261508][ T4185] sysv_free_block: flc_count > flc_size [ 92.290659][ T4185] sysv_free_block: flc_count > flc_size [ 92.319277][ T4185] sysv_free_block: flc_count > flc_size [ 92.334906][ T4185] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 92.354577][ T4826] set_capacity_and_notify: 1 callbacks suppressed [ 92.354594][ T4826] loop4: detected capacity change from 0 to 256 [ 92.377932][ T4826] exfat: Deprecated parameter 'utf8' [ 92.401713][ T4826] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 92.421247][ T4824] loop3: detected capacity change from 0 to 8192 [ 92.493754][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 92.499976][ T4824] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 92.542624][ T4824] REISERFS (device loop3): using ordered data mode [ 92.550963][ T4824] reiserfs: using flush barriers [ 92.562725][ T4824] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 92.592606][ T4824] REISERFS (device loop3): checking transaction log (loop3) [ 92.644129][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.663136][ T23] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 92.692368][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.717240][ T23] usb 3-1: config 0 descriptor?? [ 92.747858][ T4824] REISERFS (device loop3): Using r5 hash to sort names [ 92.781959][ T4824] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 92.815776][ T4836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.231'. [ 92.827430][ T4824] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 92.833620][ T4836] netlink: 16 bytes leftover after parsing attributes in process `syz.4.231'. [ 92.951337][ T4824] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 93.048656][ T4840] loop4: detected capacity change from 0 to 2048 [ 93.102805][ T4824] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 93.131301][ T4840] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 93.250833][ T4824] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 93.872807][ T4850] loop4: detected capacity change from 0 to 1024 [ 93.900432][ T4844] loop0: detected capacity change from 0 to 131072 [ 93.914970][ T23] hkems 0003:2006:0118.0003: unbalanced delimiter at end of report description [ 93.930890][ T23] hkems 0003:2006:0118.0003: parse failed [ 93.936751][ T23] hkems: probe of 0003:2006:0118.0003 failed with error -22 [ 93.951750][ T23] usb 3-1: USB disconnect, device number 3 [ 93.969697][ T4844] F2FS-fs (loop0): Zoned block device path is missing [ 93.976649][ T4844] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 94.007920][ T4850] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 94.030592][ T4850] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.119479][ T4222] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 94.355034][ T4844] F2FS-fs (loop0): Test dummy encryption mode enabled [ 94.366507][ T4844] F2FS-fs (loop0): invalid crc value [ 94.373560][ T4222] usb 2-1: Using ep0 maxpacket: 32 [ 94.404274][ T4844] F2FS-fs (loop0): Found nat_bits in checkpoint [ 94.462713][ T4844] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 94.470058][ T4844] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 94.533256][ T4222] usb 2-1: config 0 interface 0 altsetting 145 endpoint 0x81 has invalid maxpacket 1027, setting to 1024 [ 94.563165][ T4222] usb 2-1: config 0 interface 0 altsetting 145 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.587894][ T4857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.617381][ T4222] usb 2-1: config 0 interface 0 has no altsetting 0 [ 94.640862][ T4222] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 94.691583][ T4222] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.731125][ T4222] usb 2-1: config 0 descriptor?? [ 94.763514][ T4842] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 94.806948][ T4856] loop3: detected capacity change from 0 to 32768 [ 94.900282][ T4856] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.236 (4856) [ 94.989227][ T4856] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 95.014018][ T4856] BTRFS info (device loop3): turning off barriers [ 95.028155][ T4856] BTRFS info (device loop3): enabling ssd optimizations [ 95.034085][ T4224] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 95.038722][ T4856] BTRFS info (device loop3): using spread ssd allocation scheme [ 95.071060][ T4856] BTRFS info (device loop3): enabling auto defrag [ 95.077724][ T4856] BTRFS info (device loop3): not using ssd optimizations [ 95.093194][ T4856] BTRFS info (device loop3): not using spread ssd allocation scheme [ 95.111645][ T4856] BTRFS info (device loop3): ignoring data csums [ 95.131972][ T4856] BTRFS info (device loop3): force zlib compression, level 3 [ 95.183324][ T4856] BTRFS info (device loop3): enabling ssd optimizations [ 95.210750][ T4856] BTRFS info (device loop3): using spread ssd allocation scheme [ 95.235798][ T4222] elo 0003:04E7:0030.0004: item fetching failed at offset 0/2 [ 95.261289][ T4222] elo 0003:04E7:0030.0004: parse failed [ 95.268029][ T4856] BTRFS info (device loop3): using free space tree [ 95.283156][ T4222] elo: probe of 0003:04E7:0030.0004 failed with error -22 [ 95.283528][ T4856] BTRFS info (device loop3): has skinny extents [ 95.369075][ T4224] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 95.450854][ T4222] usb 2-1: USB disconnect, device number 4 [ 95.513353][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 95.556608][ T4902] loop0: detected capacity change from 0 to 512 [ 95.623885][ T4902] EXT4-fs (loop0): Ignoring removed orlov option [ 95.630979][ T4902] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 95.688384][ T4902] EXT4-fs error (device loop0): ext4_iget_extra_inode:4566: inode #15: comm syz.0.249: corrupted in-inode xattr [ 95.715378][ T4902] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.249: couldn't read orphan inode 15 (err -117) [ 95.731656][ T4902] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,user_xattr,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,nodiscard,,errors=continue. Quota mode: none. [ 95.913301][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.929772][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.029192][ T23] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 96.045066][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 96.109268][ T23] usb 3-1: SerialNumber: syz [ 96.313505][ T4224] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 96.324923][ T4924] loop3: detected capacity change from 0 to 4096 [ 96.331539][ T4224] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.341326][ T4224] usb 5-1: Product: syz [ 96.346293][ T4224] usb 5-1: Manufacturer: syz [ 96.350943][ T4224] usb 5-1: SerialNumber: syz [ 96.359533][ T4224] usb 5-1: config 0 descriptor?? [ 96.405268][ T4224] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 96.428066][ T23] usb 3-1: 0:2 : does not exist [ 96.457073][ T4224] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 96.514715][ T23] usb 3-1: USB disconnect, device number 4 [ 96.523285][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.533423][ T4224] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 96.562261][ T4224] usb 5-1: media controller created [ 96.628839][ T4224] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 96.638081][ T4873] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 96.727249][ T4224] DVB: Unable to find symbol mt352_attach() [ 96.800993][ T4924] ntfs3: loop3: ino=1f, "file3" failed to undo rename [ 96.806005][ T4224] DVB: Unable to find symbol nxt6000_attach() [ 96.819328][ T4942] loop1: detected capacity change from 0 to 8 [ 96.825839][ T4224] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 96.865441][ T4449] udevd[4449]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.893524][ T21] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 96.903475][ T4224] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 96.919032][ T4224] dvb-usb: schedule remote query interval to 1000 msecs. [ 96.955442][ T4942] SQUASHFS error: zlib decompression failed, data probably corrupt [ 96.981342][ T4224] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 97.000002][ T4942] SQUASHFS error: Failed to read block 0x9b: -5 [ 97.018789][ T4942] SQUASHFS error: Unable to read metadata cache entry [99] [ 97.036534][ T4224] dvb-usb: bulk message failed: -22 (7/0) [ 97.042329][ T4224] dvb-usb: bulk message failed: -22 (7/0) [ 97.053229][ T4942] SQUASHFS error: Unable to read inode 0x127 [ 97.092433][ T4944] loop3: detected capacity change from 0 to 2048 [ 97.104392][ T4224] usb 5-1: USB disconnect, device number 4 [ 97.175409][ T4950] netlink: 60 bytes leftover after parsing attributes in process `syz.2.263'. [ 97.176761][ T4944] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,noblock_validity,errors=remount-ro,. Quota mode: none. [ 97.239939][ T4224] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 97.263753][ T4950] unsupported nlmsg_type 40 [ 97.402656][ T4958] netlink: 12 bytes leftover after parsing attributes in process `syz.4.264'. [ 97.446419][ T4958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.264'. [ 97.463652][ T4958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.264'. [ 97.791685][ T4980] loop4: detected capacity change from 0 to 16 [ 97.802345][ T4981] openvswitch: netlink: Actions may not be safe on all matching packets [ 97.823758][ T21] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 97.843675][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.871384][ T21] usb 1-1: Product: syz [ 97.886495][ T21] usb 1-1: Manufacturer: syz [ 97.891172][ T21] usb 1-1: SerialNumber: syz [ 97.940880][ T21] usb 1-1: config 0 descriptor?? [ 97.951338][ T4980] erofs: (device loop4): mounted with root inode @ nid 36. [ 98.005192][ T21] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 98.043952][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 98.061757][ T4980] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 98.073689][ T4990] netlink: 'syz.2.281': attribute type 3 has an invalid length. [ 98.085340][ T21] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 98.110469][ T21] usb 1-1: media controller created [ 98.147743][ T4993] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 98.210412][ T4928] dvb-usb: bulk message failed: -22 (7/0) [ 98.241848][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 98.298779][ T4997] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 98.345498][ T4997] [U] J"—E:ÀÆ" [ 98.423514][ T21] DVB: Unable to find symbol mt352_attach() [ 98.504878][ T4995] loop1: detected capacity change from 0 to 8192 [ 98.543298][ T21] DVB: Unable to find symbol nxt6000_attach() [ 98.549481][ T21] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 98.578120][ T4995] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 98.614641][ T21] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 98.627726][ T21] dvb-usb: schedule remote query interval to 1000 msecs. [ 98.635214][ T21] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 98.645776][ T21] dvb-usb: bulk message failed: -22 (7/0) [ 98.649356][ T4995] REISERFS (device loop1): using ordered data mode [ 98.651640][ T21] dvb-usb: bulk message failed: -22 (7/0) [ 98.665896][ T21] usb 1-1: USB disconnect, device number 2 [ 98.703096][ T4995] reiserfs: using flush barriers [ 98.711419][ T5010] loop2: detected capacity change from 0 to 2048 [ 98.763379][ T4995] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 98.797586][ T21] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 98.830876][ T5016] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.881900][ T4995] REISERFS (device loop1): checking transaction log (loop1) [ 98.904133][ T4995] REISERFS (device loop1): Using r5 hash to sort names [ 98.911481][ T4995] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 99.091759][ T5021] loop2: detected capacity change from 0 to 256 [ 99.221427][ T5021] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 256) [ 99.302925][ T5018] loop0: detected capacity change from 0 to 40427 [ 99.395643][ T5018] F2FS-fs (loop0): build fault injection attr: rate: 25, type: 0x1ffff [ 99.404609][ T5018] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0xeffa [ 99.432398][ T5018] F2FS-fs (loop0): invalid crc value [ 99.444238][ T5018] F2FS-fs (loop0) : inject kvmalloc in f2fs_kvmalloc of f2fs_build_segment_manager+0x5249/0x67c0 [ 99.455074][ T5018] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-12) [ 99.526872][ T5024] loop4: detected capacity change from 0 to 1024 [ 99.791340][ T1159] hfsplus: b-tree write err: -5, ino 4 [ 100.003871][ T5011] loop3: detected capacity change from 0 to 32768 [ 100.011988][ T5040] netlink: 68 bytes leftover after parsing attributes in process `syz.1.302'. [ 100.225998][ T5011] XFS (loop3): Mounting V5 Filesystem [ 100.360547][ T5049] loop2: detected capacity change from 0 to 4096 [ 100.378868][ T5011] XFS (loop3): Ending clean mount [ 100.467848][ T5064] loop0: detected capacity change from 0 to 8192 [ 100.502980][ T4193] XFS (loop3): Unmounting Filesystem [ 100.525645][ T5064] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 100.557591][ T5064] REISERFS (device loop0): using ordered data mode [ 100.571590][ T5064] reiserfs: using flush barriers [ 100.583704][ T5064] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 100.647513][ T5064] REISERFS (device loop0): checking transaction log (loop0) [ 100.767705][ T5064] REISERFS (device loop0): Using r5 hash to sort names [ 100.802465][ T5064] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 100.823877][ T5064] REISERFS warning (device loop0): vs-2180 finish_unfinished: iget failed for [1 0 0x0 SD] [ 100.854431][ T5064] REISERFS error (device loop0): vs-15011 reiserfs_release_objectid: tried to free free object id (0) [ 100.881154][ T5064] REISERFS (device loop0): Remounting filesystem read-only [ 101.307382][ T5089] loop1: detected capacity change from 0 to 8 [ 101.613453][ T5090] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 101.653237][ T5090] REISERFS (device loop3): using ordered data mode [ 101.660030][ T5090] reiserfs: using flush barriers [ 101.707216][ T5090] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 101.793673][ T5090] REISERFS (device loop3): checking transaction log (loop3) [ 101.818882][ T5090] REISERFS (device loop3): Using r5 hash to sort names [ 101.837003][ T5090] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 102.124678][ T5102] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.202931][ T5094] XFS (loop0): Mounting V5 Filesystem [ 102.349727][ T5094] XFS (loop0): Ending clean mount [ 102.365564][ T5094] XFS (loop0): Quotacheck needed: Please wait. [ 102.515454][ T5094] XFS (loop0): Quotacheck: Done. [ 102.649619][ T4185] XFS (loop0): Unmounting Filesystem [ 102.743308][ T4918] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 102.988485][ T4918] usb 2-1: Using ep0 maxpacket: 16 [ 103.113609][ T4918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.149198][ T4918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.181017][ T4918] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 103.262767][ T4918] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 103.273568][ T4918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.286858][ T4918] usb 2-1: config 0 descriptor?? [ 103.392516][ T5140] set_capacity_and_notify: 5 callbacks suppressed [ 103.392532][ T5140] loop2: detected capacity change from 0 to 4096 [ 103.436455][ T5140] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 103.534657][ T5140] ntfs: volume version 3.1. [ 103.583244][ T1107] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 103.622819][ T5140] ntfs: (device loop2): ntfs_read_locked_inode(): $INDEX_ROOT attribute is corrupt. [ 103.636578][ T5140] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 103.759639][ T4918] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0005/input/input9 [ 103.776001][ T4191] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 103.814482][ T4915] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.843169][ T1107] usb 5-1: Using ep0 maxpacket: 16 [ 103.867706][ T4918] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 103.936343][ T5158] loop3: detected capacity change from 0 to 4096 [ 103.961276][ T5161] loop2: detected capacity change from 0 to 256 [ 103.973087][ T1107] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 103.982903][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 104.017203][ T5158] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 104.038406][ T1107] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 104.048769][ T5161] exfat: Deprecated parameter 'utf8' [ 104.065734][ T4244] usb 2-1: USB disconnect, device number 5 [ 104.092636][ T5158] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 104.109960][ T5161] exfat: Deprecated parameter 'namecase' [ 104.129795][ T5160] fido_id[5160]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 104.190863][ T4915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.212330][ T5161] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 104.230784][ T4915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.252671][ T1107] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 104.264456][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.272648][ T4915] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 104.289969][ T1107] usb 5-1: Product: syz [ 104.303113][ T1107] usb 5-1: Manufacturer: syz [ 104.308603][ T4915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.324733][ T1107] usb 5-1: SerialNumber: syz [ 104.346340][ T1107] usb 5-1: config 0 descriptor?? [ 104.351980][ T5158] ntfs3: loop3: ino=1e, "file1" Internal error [ 104.363574][ T5142] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 104.369313][ T5158] ntfs3: loop3: ntfs_sync_inode r=1e failed, -22. [ 104.382880][ T4915] usb 1-1: config 0 descriptor?? [ 104.405692][ T1107] mceusb 5-1:0.0: mceusb_dev_probe: device setup failed! [ 104.413977][ T1107] mceusb: probe of 5-1:0.0 failed with error -12 [ 104.518477][ T4193] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 104.672539][ T1107] usb 5-1: USB disconnect, device number 5 [ 104.832875][ T5183] loop3: detected capacity change from 0 to 512 [ 104.886797][ T4915] elo 0003:04E7:0030.0006: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.0-1/input0 [ 104.927507][ T5183] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.359: invalid block [ 104.973298][ T5183] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.359: invalid indirect mapped block 10 (level 1) [ 104.989905][ T5183] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.359: invalid indirect mapped block 8 (level 1) [ 105.013946][ T5183] EXT4-fs (loop3): 1 truncate cleaned up [ 105.019779][ T5183] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 105.123960][ T4222] usb 1-1: USB disconnect, device number 3 [ 105.158311][ T5186] fido_id[5186]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 105.298202][ T5191] loop3: detected capacity change from 0 to 1024 [ 105.367541][ T5191] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,data_err=ignore,,errors=continue. Quota mode: none. [ 105.398966][ T5197] loop4: detected capacity change from 0 to 64 [ 105.496887][ T5181] loop2: detected capacity change from 0 to 32768 [ 105.671290][ T5181] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 105.780616][ T5181] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 105.862670][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 105.998882][ T5212] loop0: detected capacity change from 0 to 1024 [ 106.049620][ T5188] loop1: detected capacity change from 0 to 40427 [ 106.112592][ T5212] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 2: comm syz.0.370: lblock 2 mapped to illegal pblock 2 (length 1) [ 106.143296][ T5188] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 106.151844][ T5188] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 106.163359][ T5188] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 106.201909][ T5188] F2FS-fs (loop1): invalid crc value [ 106.230485][ T5212] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 106.238965][ T5212] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 48: comm syz.0.370: lblock 0 mapped to illegal pblock 48 (length 1) [ 106.271156][ T5212] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 106.283740][ T5188] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 106.317669][ T5212] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.370: Failed to acquire dquot type 0 [ 106.352827][ T5212] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 106.378330][ T5212] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #11: comm syz.0.370: mark_inode_dirty error [ 106.403641][ T5212] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 106.421878][ T5212] EXT4-fs (loop0): 1 orphan inode deleted [ 106.428093][ T5212] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,init_itable=0x0000000000000004,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 106.454336][ T144] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 106.508394][ T144] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 106.543485][ T5226] tipc: Started in network mode [ 106.548533][ T5226] tipc: Node identity , cluster identity 4711 [ 106.555663][ T144] EXT4-fs error (device loop0): ext4_release_dquot:6270: comm kworker/u4:1: Failed to release dquot type 0 [ 106.586981][ T5226] tipc: Failed to set node id, please configure manually [ 106.610672][ T5226] tipc: Enabling of bearer rejected, failed to enable media [ 106.713738][ T5188] F2FS-fs (loop1): Start checkpoint disabled! [ 106.726585][ T1159] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 106.759849][ T1159] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 106.775988][ T5188] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 106.806372][ T5188] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 106.813319][ T1159] EXT4-fs error (device loop0): ext4_release_dquot:6270: comm kworker/u4:3: Failed to release dquot type 0 [ 106.876445][ T4185] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 106.911521][ T4185] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 106.941498][ T4185] EXT4-fs error (device loop0): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 106.997325][ T5233] loop2: detected capacity change from 0 to 8 [ 107.643746][ T5258] EXT4-fs (loop3): inline encryption not supported [ 107.666641][ T5262] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 107.683960][ T5258] EXT4-fs (loop3): Test dummy encryption mode enabled [ 107.716170][ T5258] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 107.772403][ T5268] EXT4-fs (loop2): inline encryption not supported [ 107.773585][ T5258] System zones: 0-5 [ 107.782899][ T5268] EXT4-fs (loop2): Test dummy encryption mode enabled [ 107.791026][ T21] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 107.817017][ T5268] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 107.845245][ T5268] System zones: 0-5 [ 107.852113][ T5222] XFS (loop4): Mounting V5 Filesystem [ 107.864248][ T5258] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 107.907076][ T5268] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 108.016477][ T5222] XFS (loop4): Ending clean mount [ 108.123430][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 108.189556][ T4195] XFS (loop4): Unmounting Filesystem [ 108.241630][ T5278] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.480365][ T21] usb 1-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 108.510414][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.538920][ T21] usb 1-1: Product: syz [ 108.563219][ T21] usb 1-1: Manufacturer: syz [ 108.567931][ T21] usb 1-1: SerialNumber: syz [ 108.606042][ T21] usb 1-1: config 0 descriptor?? [ 108.675516][ T21] dw2102: su3000_identify_state [ 108.698599][ T21] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 108.728099][ T21] dw2102: su3000_power_ctrl: 1, initialized 0 [ 108.743826][ T21] dvb-usb: bulk message failed: -22 (2/0) [ 108.776515][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 108.843636][ T21] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 108.858331][ T5291] overlayfs: unrecognized mount option "\']*=°¢°©æ[\1\Ãåý07†ðÿ$Áܲ¹" or missing value [ 108.864104][ T21] usb 1-1: media controller created [ 108.879336][ T5255] dvb-usb: bulk message failed: -22 (3/0) [ 108.893306][ T5255] dw2102: i2c transfer failed. [ 108.913669][ T21] dvb-usb: bulk message failed: -22 (6/0) [ 108.943156][ T21] dw2102: i2c transfer failed. [ 108.959790][ T21] dvb-usb: bulk message failed: -22 (6/0) [ 108.978751][ T21] dw2102: i2c transfer failed. [ 108.993210][ T21] dvb-usb: bulk message failed: -22 (6/0) [ 109.008926][ T21] dw2102: i2c transfer failed. [ 109.032944][ T5277] set_capacity_and_notify: 4 callbacks suppressed [ 109.032961][ T5277] loop2: detected capacity change from 0 to 32768 [ 109.046355][ T21] dvb-usb: bulk message failed: -22 (6/0) [ 109.052293][ T21] dw2102: i2c transfer failed. [ 109.065670][ T21] dvb-usb: bulk message failed: -22 (6/0) [ 109.074489][ T21] dw2102: i2c transfer failed. [ 109.098363][ T21] dvb-usb: bulk message failed: -22 (6/0) [ 109.114621][ T21] dw2102: i2c transfer failed. [ 109.120559][ T21] dvb-usb: MAC address: 02:02:02:02:02:02 [ 109.185664][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.264637][ T21] dvb-usb: bulk message failed: -22 (3/0) [ 109.272241][ T21] dw2102: command 0x0e transfer failed. [ 109.285894][ T21] dvb-usb: bulk message failed: -22 (3/0) [ 109.292930][ T5277] XFS (loop2): Mounting V5 Filesystem [ 109.302897][ T21] dw2102: command 0x0e transfer failed. [ 109.376693][ T5277] XFS (loop2): Ending clean mount [ 109.524058][ T4191] XFS (loop2): Unmounting Filesystem [ 109.627933][ T21] dvb-usb: bulk message failed: -22 (3/0) [ 109.627981][ T21] dw2102: command 0x0e transfer failed. [ 109.628025][ T21] dvb-usb: bulk message failed: -22 (3/0) [ 109.628041][ T21] dw2102: command 0x0e transfer failed. [ 109.628052][ T21] dvb-usb: bulk message failed: -22 (1/0) [ 109.628066][ T21] dw2102: command 0x51 transfer failed. [ 109.820085][ T21] DVB: Unable to find symbol ds3000_attach() [ 109.820101][ T21] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 110.043436][ T21] rc_core: IR keymap rc-su3000 not found [ 110.043455][ T21] Registered IR keymap rc-empty [ 110.046202][ T21] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 110.049225][ T21] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input10 [ 110.050783][ T21] dvb-usb: schedule remote query interval to 150 msecs. [ 110.050804][ T21] dw2102: su3000_power_ctrl: 0, initialized 1 [ 110.050819][ T21] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 110.063403][ T21] usb 1-1: USB disconnect, device number 4 [ 110.123442][ T4224] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 110.188146][ T21] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 110.531150][ T5355] loop4: detected capacity change from 0 to 256 [ 110.626878][ T5355] FAT-fs (loop4): Directory bread(block 64) failed [ 110.626942][ T5355] FAT-fs (loop4): Directory bread(block 65) failed [ 110.627019][ T5355] FAT-fs (loop4): Directory bread(block 66) failed [ 110.627053][ T5355] FAT-fs (loop4): Directory bread(block 67) failed [ 110.627127][ T5355] FAT-fs (loop4): Directory bread(block 68) failed [ 110.627162][ T5355] FAT-fs (loop4): Directory bread(block 69) failed [ 110.627279][ T5355] FAT-fs (loop4): Directory bread(block 70) failed [ 110.627313][ T5355] FAT-fs (loop4): Directory bread(block 71) failed [ 110.627385][ T5355] FAT-fs (loop4): Directory bread(block 72) failed [ 110.627419][ T5355] FAT-fs (loop4): Directory bread(block 73) failed [ 110.703384][ T4224] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 110.703416][ T4224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.703438][ T4224] usb 2-1: Product: syz [ 110.703453][ T4224] usb 2-1: Manufacturer: syz [ 110.703469][ T4224] usb 2-1: SerialNumber: syz [ 110.705443][ T4224] usb 2-1: config 0 descriptor?? [ 110.745256][ T4224] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 110.747254][ T4224] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 110.763581][ T4224] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 110.763656][ T4224] usb 2-1: media controller created [ 110.789593][ T4224] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.931165][ T4224] DVB: Unable to find symbol mt352_attach() [ 111.044727][ T4224] DVB: Unable to find symbol nxt6000_attach() [ 111.044744][ T4224] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 111.080186][ T5365] device netdevsim0 entered promiscuous mode [ 111.097648][ T5365] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 111.107261][ T4224] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 111.163829][ T5367] capability: warning: `syz.0.428' uses 32-bit capabilities (legacy support in use) [ 111.181015][ T4224] dvb-usb: schedule remote query interval to 1000 msecs. [ 111.181041][ T4224] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 111.181058][ T4224] dvb-usb: bulk message failed: -22 (7/0) [ 111.181075][ T4224] dvb-usb: bulk message failed: -22 (7/0) [ 111.211327][ T4224] usb 2-1: USB disconnect, device number 6 [ 111.330878][ T4224] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 111.456465][ T5376] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 111.466940][ T5376] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=io+mem:owns=io+mem [ 111.588577][ T5381] netlink: 19 bytes leftover after parsing attributes in process `syz.3.434'. [ 111.720496][ T5379] loop0: detected capacity change from 0 to 4096 [ 111.760134][ T5384] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 111.919001][ T5386] loop2: detected capacity change from 0 to 4096 [ 111.936916][ T5379] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 111.996759][ T5379] ntfs3: loop0: Failed to load $Extend. [ 112.010398][ T5386] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 112.487044][ T5374] loop4: detected capacity change from 0 to 32768 [ 112.708501][ T5374] XFS (loop4): Mounting V5 Filesystem [ 112.768145][ T5428] loop2: detected capacity change from 0 to 512 [ 112.843206][ T5428] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 112.855398][ T5422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.453'. [ 112.951639][ T5374] XFS (loop4): Ending clean mount [ 112.988336][ T5428] EXT4-fs (loop2): 1 truncate cleaned up [ 113.040099][ T5428] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,nobarrier,,errors=continue. Quota mode: none. [ 113.079657][ T5429] sp0: Synchronizing with TNC [ 113.085809][ T4195] XFS (loop4): Unmounting Filesystem [ 113.561957][ T5459] smc: net device bond0 applied user defined pnetid SYZ0 [ 113.722129][ T5464] loop3: detected capacity change from 0 to 512 [ 113.742093][ T26] audit: type=1800 audit(1770024174.287:3): pid=5468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.459" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 113.815117][ T5464] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 113.896148][ T5464] EXT4-fs (loop3): 1 truncate cleaned up [ 113.929337][ T5464] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.084849][ T5464] EXT4-fs warning (device loop3): ext4_resize_fs:1981: can't read last block, resize aborted [ 114.465545][ T5494] loop1: detected capacity change from 0 to 736 [ 114.519598][ T5471] loop4: detected capacity change from 0 to 32768 [ 114.613367][ T5471] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 114.637080][ T5471] JBD2: Ignoring recovery information on journal [ 114.710043][ T5484] loop0: detected capacity change from 0 to 32768 [ 114.784360][ T5471] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 114.813412][ T4222] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 114.870551][ T5471] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1 [ 114.933323][ T154] read_mapping_page failed! [ 114.938425][ T154] ERROR: (device loop0): txCommit: [ 114.938425][ T154] [ 114.944960][ T5471] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 114.969020][ T5471] OCFS2: File system is now read-only. [ 114.979179][ T5471] (syz.4.471,5471,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 115.003194][ T5471] (syz.4.471,5471,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 115.027871][ T5471] (syz.4.471,5471,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 115.044125][ T154] jfs_write_inode: jfs_commit_inode failed! [ 115.056630][ T5471] (syz.4.471,5471,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 115.084714][ T5471] (syz.4.471,5471,1):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 115.095838][ T4222] usb 4-1: Using ep0 maxpacket: 8 [ 115.128772][ T5471] (syz.4.471,5471,1):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 115.137377][ T5471] (syz.4.471,5471,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 115.170727][ T5471] (syz.4.471,5471,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 115.186986][ T5471] (syz.4.471,5471,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 115.198818][ T5471] (syz.4.471,5471,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 115.211217][ T5471] (syz.4.471,5471,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 115.226614][ T5471] (syz.4.471,5471,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 115.234015][ T4222] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 115.249198][ T5471] (syz.4.471,5471,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 115.253425][ T4222] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.288398][ T5492] loop2: detected capacity change from 0 to 40427 [ 115.297965][ T5471] (syz.4.471,5471,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 115.300239][ T4222] usb 4-1: config 0 has no interface number 0 [ 115.326268][ T5492] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 115.333857][ T4222] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 255, changing to 11 [ 115.334100][ T4222] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 59391, setting to 1024 [ 115.334129][ T4222] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.334156][ T4222] usb 4-1: config 0 interface 52 has no altsetting 0 [ 115.373438][ T5471] (syz.4.471,5471,1):ocfs2_mknod:357 ERROR: status = -30 [ 115.393215][ T5471] (syz.4.471,5471,1):ocfs2_mknod:502 ERROR: status = -30 [ 115.400313][ T5471] (syz.4.471,5471,1):ocfs2_mkdir:659 ERROR: status = -30 [ 115.423622][ T4222] usb 4-1: New USB device found, idVendor=06cb, idProduct=0001, bcdDevice= 0.00 [ 115.432882][ T4222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 115.463227][ T4222] usb 4-1: SerialNumber: syz [ 115.495100][ T4222] usb 4-1: config 0 descriptor?? [ 115.517576][ T5471] (syz.4.471,5471,1):ocfs2_remount:667 ERROR: Cannot remount RDWR filesystem due to previous errors. [ 115.531383][ T5492] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 115.551828][ T5492] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 115.609012][ T4195] ocfs2: Unmounting device (7,4) on (node local) [ 115.617599][ T5492] F2FS-fs (loop2): Found nat_bits in checkpoint [ 115.760813][ T4222] input: USB Synaptics Device 06cb:0001 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input12 [ 115.781338][ T5492] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 115.804971][ T5492] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 115.976778][ T4222] usb 4-1: USB disconnect, device number 3 [ 115.978948][ T4339] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 116.026346][ T5504] loop1: detected capacity change from 0 to 32768 [ 116.120928][ T5521] loop4: detected capacity change from 0 to 64 [ 116.129011][ T5504] attempt to access beyond end of device [ 116.129011][ T5504] loop1: rw=0, want=137438953480, limit=32768 [ 116.164871][ T5504] attempt to access beyond end of device [ 116.164871][ T5504] loop1: rw=0, want=137438953480, limit=32768 [ 116.669142][ T5529] loop1: detected capacity change from 0 to 4096 [ 116.729074][ T5537] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 116.866703][ T5529] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 116.980078][ T5529] ntfs3: loop1: failed to convert "c46c" to cp866 [ 117.714114][ T5576] loop2: detected capacity change from 0 to 256 [ 117.814125][ T5576] FAT-fs (loop2): Directory bread(block 64) failed [ 117.820772][ T5576] FAT-fs (loop2): Directory bread(block 65) failed [ 117.838813][ T5577] loop0: detected capacity change from 0 to 4096 [ 117.863327][ T5576] FAT-fs (loop2): Directory bread(block 66) failed [ 117.883302][ T5576] FAT-fs (loop2): Directory bread(block 67) failed [ 117.895961][ T5579] loop1: detected capacity change from 0 to 4096 [ 117.912823][ T5576] FAT-fs (loop2): Directory bread(block 68) failed [ 117.920518][ T5576] FAT-fs (loop2): Directory bread(block 69) failed [ 117.931651][ T5576] FAT-fs (loop2): Directory bread(block 70) failed [ 117.938970][ T5576] FAT-fs (loop2): Directory bread(block 71) failed [ 117.946154][ T5576] FAT-fs (loop2): Directory bread(block 72) failed [ 117.969484][ T5576] FAT-fs (loop2): Directory bread(block 73) failed [ 117.987599][ T5579] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 117.999821][ T5580] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.013099][ T5539] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 118.063457][ T5539] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 118.143313][ T5539] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x1ffff [ 118.206242][ T5539] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1f8 [ 118.252222][ T5539] F2FS-fs (loop4): invalid crc value [ 118.314952][ T5539] F2FS-fs (loop4): Found nat_bits in checkpoint [ 118.467838][ T5539] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 118.497294][ T5539] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 118.555561][ T5560] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 118.613256][ T4235] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 118.662241][ T5560] (syz.3.508,5560,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64 [ 118.681631][ T4195] attempt to access beyond end of device [ 118.681631][ T4195] loop4: rw=2049, want=45104, limit=40427 [ 118.742321][ T5593] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 118.795169][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 118.823525][ T5593] EXT4-fs (loop1): 1 truncate cleaned up [ 118.829687][ T5593] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,nobarrier,,errors=continue. Quota mode: none. [ 118.889262][ T5600] comedi comedi0: dt2815: I/O port conflict (0x4f27,2) [ 118.916020][ T4235] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 119.072648][ T5602] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 119.266036][ T5610] device wireguard0 entered promiscuous mode [ 119.734519][ T4235] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 119.760832][ T4235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.793191][ T4235] usb 1-1: Product: syz [ 119.803622][ T4235] usb 1-1: Manufacturer: syz [ 119.813383][ T4235] usb 1-1: SerialNumber: syz [ 119.832850][ T4235] usb 1-1: config 0 descriptor?? [ 119.851230][ T5638] set_capacity_and_notify: 4 callbacks suppressed [ 119.851246][ T5638] loop4: detected capacity change from 0 to 64 [ 119.905201][ T4235] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 119.941435][ T5640] loop3: detected capacity change from 0 to 1024 [ 119.951526][ T4235] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 120.003400][ T4235] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 120.034861][ T4235] usb 1-1: media controller created [ 120.114245][ T5585] dvb-usb: bulk message failed: -22 (7/0) [ 120.124721][ T4235] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.192252][ T5618] loop2: detected capacity change from 0 to 32768 [ 120.232758][ T1159] hfsplus: b-tree write err: -5, ino 4 [ 120.269677][ T5618] (syz.2.529,5618,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 120.327093][ T4235] DVB: Unable to find symbol mt352_attach() [ 120.338246][ T5618] (syz.2.529,5618,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 120.471071][ T5618] JBD2: Ignoring recovery information on journal [ 120.482893][ T4235] DVB: Unable to find symbol nxt6000_attach() [ 120.499837][ T4235] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 120.620913][ T4235] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 120.682191][ T5618] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 120.704895][ T4235] dvb-usb: schedule remote query interval to 1000 msecs. [ 120.712006][ T4235] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 120.749596][ T5628] loop1: detected capacity change from 0 to 32768 [ 120.799289][ T4235] dvb-usb: bulk message failed: -22 (7/0) [ 120.857322][ T4235] dvb-usb: bulk message failed: -22 (7/0) [ 120.902281][ T4235] usb 1-1: USB disconnect, device number 5 [ 120.940019][ T5628] XFS (loop1): Mounting V5 Filesystem [ 121.016758][ T4235] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 121.074551][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 121.239782][ T5649] loop3: detected capacity change from 0 to 40427 [ 121.269481][ T5628] XFS (loop1): Ending clean mount [ 121.282922][ T5669] loop4: detected capacity change from 0 to 1024 [ 121.320269][ T5649] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff [ 121.375571][ T5649] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 121.405126][ T5669] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 121.439171][ T5669] System zones: 0-1, 3-8 [ 121.451517][ T4189] XFS (loop1): Unmounting Filesystem [ 121.465303][ T5649] F2FS-fs (loop3): invalid crc value [ 121.491992][ T5669] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,barrier,debug,quota,,errors=continue. Quota mode: writeback. [ 121.532491][ T5669] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.555281][ T5649] F2FS-fs (loop3): Found nat_bits in checkpoint [ 121.589935][ T26] audit: type=1800 audit(1770024182.137:4): pid=5669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.551" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 121.783654][ T5649] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 121.937961][ T5649] attempt to access beyond end of device [ 121.937961][ T5649] loop3: rw=2049, want=45104, limit=40427 [ 122.085234][ T5688] loop2: detected capacity change from 0 to 256 [ 122.100128][ T4193] attempt to access beyond end of device [ 122.100128][ T4193] loop3: rw=2049, want=45112, limit=40427 [ 122.330040][ T5692] loop0: detected capacity change from 0 to 4096 [ 122.375459][ T5698] comedi comedi3: pcl818: I/O port conflict (0x4f27,16) [ 122.534888][ T5692] ntfs: volume version 3.1. [ 123.043174][ T21] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 123.245733][ T5727] loop3: detected capacity change from 0 to 4096 [ 123.278507][ T5727] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 123.300837][ T5727] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 123.324699][ T5727] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 123.356914][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 123.423203][ T5727] ntfs: volume version 3.1. [ 123.450044][ T5731] loop2: detected capacity change from 0 to 256 [ 123.485601][ T21] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 123.502577][ T21] usb 5-1: config 0 has no interface number 0 [ 123.509397][ T5727] ntfs: (device loop3): ntfs_bmap(): BMAP does not make sense for resident attributes, returning 0. [ 123.623914][ T4193] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 123.714192][ T21] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 123.741383][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.813285][ T21] usb 5-1: Product: syz [ 123.817517][ T21] usb 5-1: Manufacturer: syz [ 123.822154][ T21] usb 5-1: SerialNumber: syz [ 123.845535][ T21] usb 5-1: config 0 descriptor?? [ 123.913228][ T21] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 124.116251][ T21] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 124.158944][ T21] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 124.288774][ T5729] F2FS-fs (loop1): Invalid log blocks per segment (4278190089) [ 124.309046][ T5729] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 124.327257][ T5729] F2FS-fs (loop1): invalid crc value [ 124.343232][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 150 [ 124.356410][ T5729] F2FS-fs (loop1): Found nat_bits in checkpoint [ 124.451016][ T5729] F2FS-fs (loop1): recover fsync data on readonly fs [ 124.493661][ T5729] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 124.511741][ T5729] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 124.555260][ T21] usb 5-1: USB disconnect, device number 6 [ 124.563137][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 124.588948][ T21] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 124.621564][ T5767] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 124.643612][ T4235] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 124.657326][ T5768] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.679710][ T21] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 124.744648][ T21] quatech2 5-1:0.51: device disconnected [ 124.923620][ T4235] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 125.160445][ T5782] set_capacity_and_notify: 2 callbacks suppressed [ 125.160462][ T5782] loop2: detected capacity change from 0 to 64 [ 125.228968][ T5784] loop4: detected capacity change from 0 to 128 [ 125.326342][ T5784] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 125.394370][ T5784] hpfs: filesystem error: improperly stopped [ 125.400833][ T5784] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 125.429784][ T5788] netlink: 128 bytes leftover after parsing attributes in process `syz.1.604'. [ 125.450128][ T5784] hpfs: You really don't want any checks? You are crazy... [ 125.471027][ T5784] hpfs: hpfs_map_sector(): read error [ 125.484232][ T5784] hpfs: code page support is disabled [ 125.505258][ T5784] hpfs: hpfs_map_4sectors(): unaligned read [ 125.527154][ T5784] hpfs: hpfs_map_4sectors(): unaligned read [ 125.546372][ T5784] hpfs: filesystem error: unable to find root dir [ 125.812944][ T5780] loop3: detected capacity change from 0 to 32768 [ 126.024715][ T5780] XFS (loop3): Mounting V5 Filesystem [ 126.093271][ T5792] loop1: detected capacity change from 0 to 40427 [ 126.227843][ T5792] F2FS-fs (loop1): Found nat_bits in checkpoint [ 126.236994][ T5780] XFS (loop3): Ending clean mount [ 126.377911][ T5821] loop2: detected capacity change from 0 to 512 [ 126.416750][ T4193] XFS (loop3): Unmounting Filesystem [ 126.442994][ T5792] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 126.481076][ T5821] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 126.545988][ T5821] EXT4-fs (loop2): orphan cleanup on readonly fs [ 126.590774][ T5821] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.615: Block bitmap for bg 0 marked uninitialized [ 126.631916][ T4189] attempt to access beyond end of device [ 126.631916][ T4189] loop1: rw=2049, want=45104, limit=40427 [ 126.673534][ T5821] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 126.733422][ T5821] EXT4-fs (loop2): 1 orphan inode deleted [ 126.750403][ T5821] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.102261][ T5833] team0: Cannot enslave team device to itself [ 127.127345][ T5833] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 127.426794][ T5830] loop0: detected capacity change from 0 to 32768 [ 127.576738][ T5857] loop4: detected capacity change from 0 to 8 [ 127.621787][ T5865] loop1: detected capacity change from 0 to 256 [ 127.687774][ T5865] exfat: Deprecated parameter 'utf8' [ 127.706285][ T5865] exfat: Deprecated parameter 'utf8' [ 127.712062][ T5865] exfat: Deprecated parameter 'utf8' [ 127.880016][ T5860] syz.3.632 (5860): drop_caches: 2 [ 127.880170][ T5830] XFS (loop0): Mounting V5 Filesystem [ 127.917650][ T5865] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 127.935715][ T5857] process 'syz.4.630' launched './file1' with NULL argv: empty string added [ 127.991807][ T5857] SQUASHFS error: zstd decompression error: 2 [ 128.009931][ T5857] SQUASHFS error: zstd decompression failed, data probably corrupt [ 128.026894][ T5857] SQUASHFS error: Failed to read block 0x60: -5 [ 128.046299][ T5857] SQUASHFS error: zstd decompression error: 2 [ 128.074881][ T5857] SQUASHFS error: zstd decompression failed, data probably corrupt [ 128.124161][ T5857] SQUASHFS error: Failed to read block 0x60: -5 [ 128.144951][ T5830] XFS (loop0): Ending clean mount [ 128.190109][ T5830] XFS (loop0): Quotacheck needed: Please wait. [ 128.314929][ T5830] XFS (loop0): Quotacheck: Done. [ 128.482950][ T4185] XFS (loop0): Unmounting Filesystem [ 128.718914][ T5902] loop3: detected capacity change from 0 to 128 [ 128.838240][ T5902] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 128.897228][ T5902] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 128.952219][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'. [ 128.997357][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'. [ 129.357516][ T5936] loop3: detected capacity change from 0 to 256 [ 129.513553][ T5943] netlink: 16 bytes leftover after parsing attributes in process `syz.1.665'. [ 129.529898][ T5936] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x28b7239b, utbl_chksum : 0xe619d30d) [ 129.639963][ T5945] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 129.665448][ T5945] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 129.687336][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 129.811248][ T5947] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 129.850204][ T5947] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 129.890028][ T5947] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 130.049771][ T5923] JBD2: Ignoring recovery information on journal [ 130.203660][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 130.249540][ T5967] set_capacity_and_notify: 3 callbacks suppressed [ 130.249557][ T5967] loop2: detected capacity change from 0 to 512 [ 130.285340][ T5923] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 130.380659][ T5971] [U] „ [ 130.406373][ T5967] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,noblock_validity,,errors=continue. Quota mode: writeback. [ 130.459967][ T5967] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.499962][ T5980] netlink: 180 bytes leftover after parsing attributes in process `syz.4.679'. [ 130.569045][ T5976] netlink: 180 bytes leftover after parsing attributes in process `syz.4.679'. [ 130.661749][ T4185] ocfs2: Unmounting device (7,0) on (node local) [ 130.851911][ T5988] loop4: detected capacity change from 0 to 256 [ 130.952428][ T5994] loop2: detected capacity change from 0 to 1024 [ 130.979975][ T5996] netlink: 'syz.1.689': attribute type 3 has an invalid length. [ 131.096301][ T5994] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 131.128867][ T5994] EXT4-fs (loop2): orphan cleanup on readonly fs [ 131.254390][ T5994] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.686: Invalid inode table block 0 in block_group 0 [ 131.332072][ T6013] loop3: detected capacity change from 0 to 512 [ 131.341666][ T5994] EXT4-fs (loop2): Remounting filesystem read-only [ 131.358349][ T6007] loop4: detected capacity change from 0 to 4096 [ 131.381549][ T5994] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 131.411270][ T5994] EXT4-fs (loop2): Remounting filesystem read-only [ 131.455991][ T6012] loop0: detected capacity change from 0 to 4096 [ 131.463282][ T6013] EXT4-fs (loop3): Ignoring removed nobh option [ 131.470973][ T6013] EXT4-fs (loop3): Test dummy encryption mode enabled [ 131.487203][ T5994] EXT4-fs error (device loop2): ext4_quota_write:6646: inode #3: comm syz.2.686: mark_inode_dirty error [ 131.492649][ T6014] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.520201][ T5994] EXT4-fs (loop2): Remounting filesystem read-only [ 131.550107][ T6013] EXT4-fs error (device loop3): __ext4_iget:4912: inode #11: block 1: comm syz.3.695: invalid block [ 131.550146][ T5994] Quota error (device loop2): write_blk: dquota write failed [ 131.568935][ T5994] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 131.579911][ T5994] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.686: Failed to acquire dquot type 0 [ 131.623745][ T5994] EXT4-fs (loop2): Remounting filesystem read-only [ 131.643264][ T6013] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.695: couldn't read orphan inode 11 (err -117) [ 131.675092][ T6018] NILFS (loop4): the device already has a read-only mount. [ 131.705994][ T5994] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.686: Invalid inode table block 0 in block_group 0 [ 131.720925][ T6013] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,nobh,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,sysvgroups,debug_want_extra_isize=0x0000000000000004,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 131.754206][ T5994] EXT4-fs (loop2): Remounting filesystem read-only [ 131.774608][ T5994] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 131.827475][ T5994] EXT4-fs (loop2): Remounting filesystem read-only [ 131.849718][ T5994] EXT4-fs error (device loop2): ext4_ext_truncate:4456: inode #15: comm syz.2.686: mark_inode_dirty error [ 131.951098][ T5994] EXT4-fs (loop2): Remounting filesystem read-only [ 131.993304][ T5994] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.686: Invalid inode table block 0 in block_group 0 [ 132.068992][ T5994] EXT4-fs (loop2): Remounting filesystem read-only [ 132.099573][ T5994] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 132.154680][ T5994] EXT4-fs (loop2): Remounting filesystem read-only [ 132.183238][ T5994] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 132.193717][ T5994] EXT4-fs (loop2): Remounting filesystem read-only [ 132.203696][ T5994] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.686: Invalid inode table block 0 in block_group 0 [ 132.289861][ T5994] EXT4-fs (loop2): Remounting filesystem read-only [ 132.313134][ T5994] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 132.333272][ T4244] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 132.340963][ T5994] EXT4-fs (loop2): Remounting filesystem read-only [ 132.374549][ T5994] EXT4-fs error (device loop2): ext4_truncate:4279: inode #15: comm syz.2.686: mark_inode_dirty error [ 132.406414][ T5994] EXT4-fs (loop2): Remounting filesystem read-only [ 132.443464][ T5994] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 132.452669][ T6047] netlink: 224 bytes leftover after parsing attributes in process `syz.1.711'. [ 132.508364][ T5994] EXT4-fs (loop2): Remounting filesystem read-only [ 132.546187][ T5994] EXT4-fs (loop2): 1 truncate cleaned up [ 132.552786][ T5994] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000015,stripe=0x0000000000000000,grpid,errors=remount-ro,data_err=ignore,noblock_validity,minixdf,min_batch_time=0x0000000000000013,. Quota mode: writeback. [ 132.587318][ T6049] loop3: detected capacity change from 0 to 1024 [ 132.604283][ T4244] usb 5-1: Using ep0 maxpacket: 16 [ 132.694315][ T6049] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000003,abort,,errors=continue. Quota mode: none. [ 132.723330][ T4244] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 132.741798][ T4244] usb 5-1: config 1 has an invalid descriptor of length 169, skipping remainder of the config [ 132.766157][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.769909][ T4244] usb 5-1: config 1 has no interface number 0 [ 132.772738][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.780170][ T4244] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 132.805672][ T4244] usb 5-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.819037][ T4244] usb 5-1: config 1 interface 105 has no altsetting 0 [ 132.864461][ T6058] sg_read: process 313 (syz.1.714) changed security contexts after opening file descriptor, this is not allowed. [ 132.869970][ T6049] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.3.712: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 132.958732][ T6049] EXT4-fs error (device loop3) in ext4_delete_inline_entry:1800: Corrupt filesystem [ 132.983417][ T4244] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 133.000525][ T4244] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.029545][ T4244] usb 5-1: Product: syz [ 133.049106][ T4244] usb 5-1: Manufacturer: syz [ 133.073630][ T4244] usb 5-1: SerialNumber: syz [ 133.133458][ T6030] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 133.248975][ T6068] loop3: detected capacity change from 0 to 128 [ 133.259314][ T6066] loop2: detected capacity change from 0 to 1024 [ 133.295708][ T6068] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 133.393926][ T4244] aqc111: probe of 5-1:1.105 failed with error -22 [ 133.408677][ T21] Process accounting resumed [ 133.427748][ T21] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 133.453662][ T6075] ALSA: mixer_oss: invalid OSS volume '' [ 133.459770][ T21] FAT-fs (loop3): Filesystem has been set read-only [ 133.482014][ T154] hfsplus: b-tree write err: -5, ino 4 [ 133.645793][ T23] usb 5-1: USB disconnect, device number 7 [ 133.652314][ T4193] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 134.083299][ T21] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 134.107083][ T6101] loop3: detected capacity change from 0 to 4096 [ 134.154429][ T6101] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 134.250654][ T6101] ntfs: volume version 3.1. [ 134.339711][ T6101] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set ascii. You might want to try to use the mount option nls=utf8. [ 134.371474][ T6113] tipc: Started in network mode [ 134.388959][ T6113] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 134.413909][ T6113] tipc: Enabling of bearer rejected, failed to enable media [ 134.422448][ T6101] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 134.503522][ T21] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 134.520232][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.585268][ T21] usb 1-1: config 0 descriptor?? [ 134.881242][ T21] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 134.892155][ T21] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 135.109775][ T21] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 135.133227][ T21] [drm] Initialized udl on minor 2 [ 135.227429][ T6117] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 135.244728][ T6123] (syz.3.743,6123,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 135.270670][ T6117] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 135.283468][ T6123] (syz.3.743,6123,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 135.313358][ T21] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 135.323146][ T6117] F2FS-fs (loop2): invalid crc value [ 135.339981][ T21] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 135.360921][ T6117] F2FS-fs (loop2): Found nat_bits in checkpoint [ 135.368185][ T6123] JBD2: Ignoring recovery information on journal [ 135.386731][ T21] usb 1-1: USB disconnect, device number 6 [ 135.395593][ T4224] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 135.415669][ T4224] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 135.426170][ T4224] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 135.523722][ T6142] Invalid ELF header magic: != ELF [ 135.541364][ T6123] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 135.579965][ T6138] set_capacity_and_notify: 2 callbacks suppressed [ 135.579982][ T6138] loop1: detected capacity change from 0 to 8192 [ 135.678802][ T6117] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 135.737187][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 135.749443][ T6138] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 135.785489][ T6151] loop4: detected capacity change from 0 to 164 [ 135.792612][ T6138] REISERFS (device loop1): using ordered data mode [ 135.812585][ T6138] reiserfs: using flush barriers [ 135.826116][ T6117] attempt to access beyond end of device [ 135.826116][ T6117] loop2: rw=2049, want=45104, limit=40427 [ 135.864447][ T6138] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 135.893654][ T4191] attempt to access beyond end of device [ 135.893654][ T4191] loop2: rw=2049, want=45112, limit=40427 [ 135.906222][ T6138] REISERFS (device loop1): checking transaction log (loop1) [ 135.938676][ T6138] REISERFS (device loop1): Using r5 hash to sort names [ 135.949404][ T6138] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 136.371375][ T6157] loop4: detected capacity change from 0 to 4096 [ 136.415266][ T6157] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 136.488143][ T6157] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 136.601911][ T6159] loop1: detected capacity change from 0 to 8192 [ 136.615740][ T4292] udevd[4292]: incorrect nilfs2 checksum on /dev/loop4 [ 136.655465][ T6164] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.700946][ T6159] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 136.751214][ T6159] REISERFS (device loop1): using journaled data mode [ 136.758306][ T6159] reiserfs: using flush barriers [ 136.780623][ T6169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.766'. [ 136.807240][ T6159] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 136.824161][ T6159] REISERFS (device loop1): checking transaction log (loop1) [ 136.842405][ T6159] REISERFS (device loop1): Using r5 hash to sort names [ 136.886503][ T6173] loop3: detected capacity change from 0 to 512 [ 136.901422][ T6159] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 136.930456][ T6173] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 136.989154][ T6173] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c816e02c, mo2=0002] [ 136.993641][ T6159] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 137.042153][ T6173] EXT4-fs (loop3): orphan cleanup on readonly fs [ 137.048706][ T6173] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.768: bad orphan inode 267 [ 137.066702][ T6173] EXT4-fs (loop3): Remounting filesystem read-only [ 137.077551][ T6173] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,grpquota. Quota mode: writeback. [ 137.142060][ T6175] loop4: detected capacity change from 0 to 4096 [ 137.185151][ T6173] System zones: 1-12 [ 137.189270][ T6173] EXT4-fs (loop3): re-mounted. Opts: quota,noload,block_validity,. Quota mode: writeback. [ 137.243724][ T6179] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.342717][ T6153] loop0: detected capacity change from 0 to 32768 [ 137.495189][ T6184] loop1: detected capacity change from 0 to 128 [ 137.528659][ T6153] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 137.549445][ T6190] comedi comedi3: ni_at_a2150: I/O port conflict (0x4f27,28) [ 137.721767][ T6153] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 137.838208][ T6200] loop3: detected capacity change from 0 to 512 [ 137.859257][ T6202] comedi comedi3: 8255: I/O port conflict (0x4f27,4) [ 137.873764][ T6202] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 137.886032][ T23] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 137.899350][ T4185] ocfs2: Unmounting device (7,0) on (node local) [ 137.962234][ T6202] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 137.983540][ T6202] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 137.992960][ T6200] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 138.010860][ T6200] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.038307][ T6202] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 138.054498][ T6202] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 138.061133][ T6202] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 138.068491][ T6202] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 138.075327][ T6202] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 138.082103][ T6202] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 138.091856][ T6202] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 138.102376][ T6202] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 138.140288][ T6202] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 138.175063][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 138.314584][ T23] usb 5-1: config 0 interface 0 altsetting 187 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 138.337955][ T23] usb 5-1: config 0 interface 0 altsetting 187 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.389081][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 138.412534][ T23] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 138.450523][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.487565][ T23] usb 5-1: config 0 descriptor?? [ 138.504612][ T6220] tipc: Enabling of bearer <Ýth:h> rejected, media not registered [ 138.582719][ T6224] loop2: detected capacity change from 0 to 736 [ 138.834807][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.791'. [ 138.976486][ T23] uclogic 0003:5543:0781.0007: unknown main item tag 0x3 [ 138.985604][ T6234] program syz.2.793 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.015985][ T23] uclogic 0003:5543:0781.0007: No inputs registered, leaving [ 139.035108][ T23] uclogic 0003:5543:0781.0007: hidraw0: USB HID v0.09 Device [HID 5543:0781] on usb-dummy_hcd.4-1/input0 [ 139.191019][ T23] usb 5-1: USB disconnect, device number 8 [ 139.293132][ T6238] fido_id[6238]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 139.452778][ T6222] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 139.504969][ T6222] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 139.542354][ T6248] overlayfs: conflicting options: nfs_export=on,index=off [ 139.559239][ T6222] F2FS-fs (loop0): invalid crc value [ 139.609652][ T6222] F2FS-fs (loop0): Found nat_bits in checkpoint [ 139.676928][ T6222] F2FS-fs (loop0): recover fsync data on readonly fs [ 139.695585][ T6222] F2FS-fs (loop0): Try to recover 2th superblock, ret: -30 [ 139.702852][ T6222] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 139.703813][ T6249] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 139.935356][ T4915] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 139.974313][ T4193] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 139.986287][ T4193] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 139.992902][ T4193] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 140.188433][ T6262] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 140.203184][ T4915] usb 3-1: Using ep0 maxpacket: 8 [ 140.243535][ T6262] hpfs: filesystem error: improperly stopped [ 140.253993][ T6262] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 140.261875][ T6262] hpfs: You really don't want any checks? You are crazy... [ 140.270504][ T6262] hpfs: hpfs_map_sector(): read error [ 140.276384][ T6262] hpfs: code page support is disabled [ 140.323378][ T4915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.323495][ T6262] hpfs: hpfs_map_4sectors(): unaligned read [ 140.352272][ T4915] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.397513][ T4915] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 140.407671][ T6262] hpfs: hpfs_map_4sectors(): unaligned read [ 140.425381][ T4915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.426906][ T6262] hpfs: filesystem error: unable to find root dir [ 140.462179][ T4915] usb 3-1: config 0 descriptor?? [ 140.471415][ T6262] [ 140.606576][ T6273] set_capacity_and_notify: 3 callbacks suppressed [ 140.606594][ T6273] loop0: detected capacity change from 0 to 8192 [ 140.756132][ T6273] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 140.773609][ T6273] REISERFS (device loop0): using ordered data mode [ 140.780292][ T6273] reiserfs: using flush barriers [ 140.817085][ T6273] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 140.865772][ T6273] REISERFS (device loop0): checking transaction log (loop0) [ 140.885313][ T6273] REISERFS (device loop0): Using r5 hash to sort names [ 140.899007][ T6273] reiserfs: enabling write barrier flush mode [ 140.923311][ T6273] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 140.957260][ T6273] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 140.978614][ T6273] REISERFS (device loop0): Remounting filesystem read-only [ 140.988740][ T4915] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 140.996166][ T6287] loop1: detected capacity change from 0 to 1024 [ 141.003627][ T4915] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 141.021356][ T6273] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 141.036432][ T4915] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 141.053159][ T4915] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 141.060842][ T6273] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 141.083835][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 141.109009][ T6287] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 141.109964][ T4915] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 141.122421][ T6287] EXT4-fs (loop1): orphan cleanup on readonly fs [ 141.147150][ T6287] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz.1.818: Invalid inode table block 0 in block_group 0 [ 141.180573][ T6273] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 141.212750][ T4915] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 141.228116][ T6278] loop4: detected capacity change from 0 to 32768 [ 141.234739][ T6273] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error [ 141.263245][ T6287] EXT4-fs (loop1): Remounting filesystem read-only [ 141.269960][ T6287] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 141.275141][ T4915] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 141.287809][ T6287] EXT4-fs (loop1): Remounting filesystem read-only [ 141.295049][ T6287] EXT4-fs error (device loop1): ext4_quota_write:6646: inode #3: comm syz.1.818: mark_inode_dirty error [ 141.304504][ T6273] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 141.319483][ T6287] EXT4-fs (loop1): Remounting filesystem read-only [ 141.334043][ T4915] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 141.341455][ T4915] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 141.349091][ T6287] Quota error (device loop1): write_blk: dquota write failed [ 141.356890][ T6273] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 141.372140][ T6287] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 141.390432][ T6273] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 141.409310][ T6287] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.818: Failed to acquire dquot type 0 [ 141.419785][ T4915] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 141.422561][ T6273] REISERFS warning (device loop0): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 141.444262][ T6287] EXT4-fs (loop1): Remounting filesystem read-only [ 141.450850][ T6287] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz.1.818: Invalid inode table block 0 in block_group 0 [ 141.459274][ T4915] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 141.475990][ T6287] EXT4-fs (loop1): Remounting filesystem read-only [ 141.491900][ T4915] dragonrise 0003:0079:0011.0008: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.2-1/input0 [ 141.514745][ T6287] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 141.552901][ T6287] EXT4-fs (loop1): Remounting filesystem read-only [ 141.559829][ T4915] usb 3-1: USB disconnect, device number 5 [ 141.570673][ T6287] EXT4-fs error (device loop1): ext4_ext_truncate:4456: inode #15: comm syz.1.818: mark_inode_dirty error [ 141.586050][ T4185] ------------[ cut here ]------------ [ 141.589525][ T6287] EXT4-fs (loop1): Remounting filesystem read-only [ 141.591674][ T4185] kernel BUG at fs/reiserfs/journal.c:1913! [ 141.598776][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.615355][ T6287] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz.1.818: Invalid inode table block 0 in block_group 0 [ 141.632877][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.672260][ T4185] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 141.678414][ T4185] CPU: 0 PID: 4185 Comm: syz-executor Not tainted syzkaller #0 [ 141.685998][ T4185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 141.696222][ T4185] RIP: 0010:do_journal_release+0x4e2/0x4f0 [ 141.702084][ T4185] Code: bd ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 e8 85 bd ff e9 f9 fc ff ff e8 ce 81 78 ff <0f> 0b e8 c7 81 78 ff 0f 0b 0f 1f 44 00 00 41 57 41 56 53 48 89 f3 [ 141.721728][ T4185] RSP: 0018:ffffc90002dcfb80 EFLAGS: 00010293 [ 141.727832][ T4185] RAX: ffffffff82009dd2 RBX: 1ffff920005b9f74 RCX: ffff888077288000 [ 141.735846][ T4185] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.743860][ T4185] RBP: ffffc90002dcfc78 R08: ffffc90002dcfbf7 R09: ffffc90002dcfbc0 [ 141.751873][ T4185] R10: dffffc0000000000 R11: fffff520005b9f7f R12: ffffc90003351000 [ 141.759887][ T4185] R13: dffffc0000000000 R14: ffff888061466678 R15: 0000000000000000 [ 141.767911][ T4185] FS: 000055558f51a500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 141.776887][ T4185] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.783516][ T4185] CR2: 0000001b32819ff8 CR3: 00000000672c3000 CR4: 00000000003506f0 [ 141.791534][ T4185] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 141.799546][ T4185] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 141.807557][ T4185] Call Trace: [ 141.810910][ T4185] [ 141.813879][ T4185] ? journal_release+0x30/0x30 [ 141.818702][ T4185] ? do_raw_spin_unlock+0x11d/0x230 [ 141.823966][ T4185] journal_release+0x1b/0x30 [ 141.828722][ T4185] reiserfs_put_super+0x267/0x510 [ 141.833793][ T4185] ? hook_inode_free_security+0xa0/0xa0 [ 141.839381][ T4185] ? evict_inodes+0x642/0x6a0 [ 141.844104][ T4185] ? reiserfs_dirty_inode+0x260/0x260 [ 141.849528][ T4185] ? reiserfs_dirty_inode+0x260/0x260 [ 141.854943][ T4185] generic_shutdown_super+0x130/0x300 [ 141.860363][ T4185] kill_block_super+0x7c/0xe0 [ 141.865104][ T4185] deactivate_locked_super+0x93/0xf0 [ 141.870447][ T4185] cleanup_mnt+0x42d/0x4e0 [ 141.875028][ T4185] ? lockdep_hardirqs_on+0x94/0x140 [ 141.880269][ T4185] task_work_run+0x125/0x1a0 [ 141.884892][ T4185] exit_to_user_mode_loop+0x10f/0x130 [ 141.890307][ T4185] exit_to_user_mode_prepare+0xee/0x180 [ 141.895928][ T4185] syscall_exit_to_user_mode+0x16/0x40 [ 141.901432][ T4185] do_syscall_64+0x58/0xa0 [ 141.904507][ T23] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 141.905982][ T4185] ? clear_bhb_loop+0x30/0x80 [ 141.919717][ T4185] ? clear_bhb_loop+0x30/0x80 [ 141.924441][ T4185] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.930383][ T4185] RIP: 0033:0x7f7ec5a22117 [ 141.931577][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 141.934839][ T4185] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 141.934857][ T4185] RSP: 002b:00007ffc17f34568 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 141.934879][ T4185] RAX: 0000000000000000 RBX: 00007f7ec5a8a71f RCX: 00007f7ec5a22117 [ 141.934894][ T4185] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc17f34620 [ 141.969574][ T23] usb 4-1: SerialNumber: syz [ 141.971199][ T4185] RBP: 00007ffc17f34620 R08: 00007ffc17f35620 R09: 00000000ffffffff [ 141.971218][ T4185] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc17f356b0 [ 142.008141][ T4185] R13: 00007f7ec5a8a71f R14: 00000000000228b8 R15: 00007ffc17f356f0 [ 142.016157][ T4185] [ 142.019223][ T4185] Modules linked in: [ 142.023251][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.040339][ T6287] EXT4-fs (loop1): Remounting filesystem read-only [ 142.040377][ T4185] ---[ end trace a3575025c66db3c4 ]--- [ 142.052587][ T4185] RIP: 0010:do_journal_release+0x4e2/0x4f0 [ 142.053778][ T6287] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 142.066092][ T4185] Code: bd ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 e8 85 bd ff e9 f9 fc ff ff e8 ce 81 78 ff <0f> 0b e8 c7 81 78 ff 0f 0b 0f 1f 44 00 00 41 57 41 56 53 48 89 f3 [ 142.096469][ T6287] EXT4-fs (loop1): Remounting filesystem read-only [ 142.108312][ T6287] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 142.119536][ T6287] EXT4-fs (loop1): Remounting filesystem read-only [ 142.126553][ T6287] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz.1.818: Invalid inode table block 0 in block_group 0 [ 142.142721][ T4185] RSP: 0018:ffffc90002dcfb80 EFLAGS: 00010293 [ 142.149360][ T4185] RAX: ffffffff82009dd2 RBX: 1ffff920005b9f74 RCX: ffff888077288000 [ 142.165068][ T6287] EXT4-fs (loop1): Remounting filesystem read-only [ 142.171718][ T6287] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 142.181963][ T4185] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.190072][ T6292] fido_id[6292]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 142.207884][ T6287] EXT4-fs (loop1): Remounting filesystem read-only [ 142.215065][ T6287] EXT4-fs error (device loop1): ext4_truncate:4279: inode #15: comm syz.1.818: mark_inode_dirty error [ 142.228668][ T4185] RBP: ffffc90002dcfc78 R08: ffffc90002dcfbf7 R09: ffffc90002dcfbc0 [ 142.237166][ T6287] EXT4-fs (loop1): Remounting filesystem read-only [ 142.247383][ T4185] R10: dffffc0000000000 R11: fffff520005b9f7f R12: ffffc90003351000 [ 142.255727][ T6287] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 142.267333][ T4185] R13: dffffc0000000000 R14: ffff888061466678 R15: 0000000000000000 [ 142.277284][ T6287] EXT4-fs (loop1): Remounting filesystem read-only [ 142.286220][ T4185] FS: 000055558f51a500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 142.295938][ T6287] EXT4-fs (loop1): 1 truncate cleaned up [ 142.301809][ T23] usb 4-1: 0:2 : does not exist [ 142.309773][ T4185] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.316715][ T6287] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000015,stripe=0x0000000000000000,grpid,errors=remount-ro,data_err=ignore,noblock_validity,minixdf,min_batch_time=0x0000000000000013,. Quota mode: writeback. [ 142.318798][ T4185] CR2: 00007fc22d1492c0 CR3: 00000000672c3000 CR4: 00000000003506f0 [ 142.349833][ T4185] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 142.358527][ T4185] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 142.369001][ T4185] Kernel panic - not syncing: Fatal exception [ 142.375437][ T4185] Kernel Offset: disabled [ 142.379886][ T4185] Rebooting in 86400 seconds..