last executing test programs: 5.921322857s ago: executing program 0 (id=711): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x80086603, 0x0) 4.474930354s ago: executing program 0 (id=715): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_012={0x2, 0x2, 0x0, 'R.'}, @main=@item_012={0x1, 0x0, 0x9, "b0"}]}}, 0x0}, 0x0) 2.190464898s ago: executing program 3 (id=727): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x1218001, &(0x7f0000000700)={[{@gid}, {@type={'type', 0x3d, "5ed07ee6"}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@codepage={'codepage', 0x3d, 'koi8-u'}}]}, 0x2, 0x342, &(0x7f0000000100)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r0, 0xfffffffffffffffd, 0xbb) 2.011141302s ago: executing program 0 (id=728): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 1.880632074s ago: executing program 3 (id=729): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000000040)=0x645, 0x4) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000080)=0xc, 0x4) 1.817052596s ago: executing program 2 (id=730): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) 1.623463299s ago: executing program 3 (id=732): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bc00d08e36655c00"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)=@urb_type_iso={0x0, {0x1, 0x1}, 0x10000, 0x3, 0x0, 0x0, 0x2, 0x1c0, 0x1, 0x10000, 0x1ff, 0x0, [{0x8, 0x9, 0x4}]}) 1.491670302s ago: executing program 0 (id=735): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) 1.382025454s ago: executing program 3 (id=736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a5c000000060a0104000000000000000002000000300004802c00018008000100636d700020000280080002400000000008000140000000080c00038005000200420000000900010073797a30000000000900020073797a32"], 0x84}}, 0x0) 1.328101765s ago: executing program 2 (id=737): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x200000, 0x0, 0x0, 0x8}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) 1.228137497s ago: executing program 0 (id=739): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCSETS(r0, 0x5402, 0x0) 1.193205208s ago: executing program 3 (id=740): set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x5) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000003b40)=0x4000000) 1.108041909s ago: executing program 2 (id=741): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xe5c}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) 994.305772ms ago: executing program 0 (id=742): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020ef17856000000000000109022400014000000009040008210300000009210000080122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, &(0x7f00000000c0)={0x40, 0x5, 0xcf, {0xcf, 0x11, "43d5be25f64524587fc4a61f838fbe781b0501a2f2ac2674622a7ebdf2c90658cfa8544cf37f77417c90f38edcc4a7e2ed55c5bcdad3bbf6850a24432657c46348132520f1b269586f3fc8ecdfd5729feb5fb62925f661c5a5e67910cea75efda29c0f37e6028ca48c5883d68aaebefdc6ab609f495e550dcfff315c392e9d6b65d95a505adfbc2dedf56f55a3039ac5c6bad9cb657d4e88f0bc18b90d13d5e5e2d37ffe28ec4a6ff358a5abd2e0abe4eeed32174b3827149c6fab55e2f5e7d8d303c34115c6421cb70fdc00f6"}}, &(0x7f00000001c0)={0x0, 0x3, 0xe4, @string={0xe4, 0x3, "4a93423c8b02dbdb78c5cbfd2ee01b8306d5df0df6d81b20198a0b72ea143e0d2c051aa76ba6ef4e47001ff3160987222ca1b1711bcc5c071c617be31f63a3cae509b044356d620221be82981839e0a9886b3b05122f97699ab310e6c6253de57bbdbd473c241d932ac6723d223c3c208f21f61173492e9c99c6b35fbb99719126679aea078f77ab1a80d2be7d8e0179aed4c875f192e4ff1ae3da06ca8fd2b5ce9b143b0041e9a65cc74d642b8d1b4a83aa18d87dd2d31e6138658595f5b3dc6db8787a0e08cb7ccfe16ad64e841f4e6de0b5a3042191f85e31e66487c4a6052254"}}, &(0x7f00000002c0)={0x0, 0x22, 0x6, {[@main=@item_012={0x0, 0x0, 0xa}, @global=@item_4={0x3, 0x1, 0x0, "fb4f721c"}]}}, 0x0}, 0x0) 967.050432ms ago: executing program 2 (id=744): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 767.879836ms ago: executing program 3 (id=745): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1aca438, &(0x7f00000008c0)=ANY=[], 0x9, 0x0, &(0x7f0000000000)) 767.727516ms ago: executing program 1 (id=746): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000070000e9070004000a010101080005"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x20040040) 658.187418ms ago: executing program 1 (id=747): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x8, "afacd2119ca94c6b377526aeb5ab2a81fc0e3d99f20900"}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00 1 [ 86.393610][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.402509][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.436936][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.444707][ T5800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.444871][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.462408][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.470565][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.472621][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.488192][ T5799] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.490870][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.496024][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.504826][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.512534][ T5103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.518159][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.527674][ T5103] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.536684][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.539800][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.546195][ T5801] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.553425][ T5103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.560136][ T5801] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.567576][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.576877][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.591490][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.122594][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 87.234606][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 87.295251][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 87.403413][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.413757][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.422827][ T5789] bridge_slave_0: entered allmulticast mode [ 87.432996][ T5789] bridge_slave_0: entered promiscuous mode [ 87.461365][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.468931][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.476730][ T5789] bridge_slave_1: entered allmulticast mode [ 87.484014][ T5789] bridge_slave_1: entered promiscuous mode [ 87.541838][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 87.576362][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.585631][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.598919][ T5786] bridge_slave_0: entered allmulticast mode [ 87.609264][ T5786] bridge_slave_0: entered promiscuous mode [ 87.622101][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.631963][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.642147][ T5786] bridge_slave_1: entered allmulticast mode [ 87.653415][ T5786] bridge_slave_1: entered promiscuous mode [ 87.783754][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.835424][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.845022][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.852484][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.865234][ T5788] bridge_slave_0: entered allmulticast mode [ 87.873999][ T5788] bridge_slave_0: entered promiscuous mode [ 87.889012][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.896286][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.908395][ T5788] bridge_slave_1: entered allmulticast mode [ 87.916031][ T5788] bridge_slave_1: entered promiscuous mode [ 87.927958][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.973216][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.111183][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.125086][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.138297][ T5789] team0: Port device team_slave_0 added [ 88.162198][ T5786] team0: Port device team_slave_0 added [ 88.169334][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.177002][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.184566][ T5785] bridge_slave_0: entered allmulticast mode [ 88.192170][ T5785] bridge_slave_0: entered promiscuous mode [ 88.232101][ T5789] team0: Port device team_slave_1 added [ 88.254841][ T5786] team0: Port device team_slave_1 added [ 88.285163][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.293352][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.301281][ T5785] bridge_slave_1: entered allmulticast mode [ 88.309038][ T5785] bridge_slave_1: entered promiscuous mode [ 88.319282][ T5788] team0: Port device team_slave_0 added [ 88.365942][ T5788] team0: Port device team_slave_1 added [ 88.399457][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.407103][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.433421][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.447134][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.454430][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.480705][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.508769][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.518775][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.525776][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.552501][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.573691][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.581100][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.588101][ T5803] Bluetooth: hci0: command tx timeout [ 88.608949][ T50] Bluetooth: hci3: command tx timeout [ 88.613760][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.631094][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.638212][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.665491][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.676977][ T50] Bluetooth: hci2: command tx timeout [ 88.679911][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.683014][ T50] Bluetooth: hci1: command tx timeout [ 88.690741][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.725217][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.740032][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.785976][ T5785] team0: Port device team_slave_0 added [ 88.819248][ T5785] team0: Port device team_slave_1 added [ 88.903549][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.910913][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.937850][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.955126][ T5788] hsr_slave_0: entered promiscuous mode [ 88.962816][ T5788] hsr_slave_1: entered promiscuous mode [ 88.975187][ T5789] hsr_slave_0: entered promiscuous mode [ 88.984572][ T5789] hsr_slave_1: entered promiscuous mode [ 88.991227][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.999430][ T5789] Cannot create hsr debugfs directory [ 89.021549][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.028777][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.055070][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.184776][ T5786] hsr_slave_0: entered promiscuous mode [ 89.191689][ T5786] hsr_slave_1: entered promiscuous mode [ 89.199377][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.208208][ T5786] Cannot create hsr debugfs directory [ 89.219340][ T5785] hsr_slave_0: entered promiscuous mode [ 89.226267][ T5785] hsr_slave_1: entered promiscuous mode [ 89.233607][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.242934][ T5785] Cannot create hsr debugfs directory [ 89.697916][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.714551][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.725987][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.739018][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.836594][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.853760][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.867082][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.880042][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.970967][ T5789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.013797][ T5789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.055027][ T5789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.068786][ T5789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.112882][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.124659][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.135829][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.152942][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.205873][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.264498][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.283726][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.333705][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.349533][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.357319][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.398350][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.405621][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.430153][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.437795][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.470946][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.478301][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.585985][ T5788] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.597233][ T5788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.633441][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.668011][ T50] Bluetooth: hci3: command tx timeout [ 90.668378][ T5803] Bluetooth: hci0: command tx timeout [ 90.701806][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.728884][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.746902][ T5803] Bluetooth: hci1: command tx timeout [ 90.752510][ T5803] Bluetooth: hci2: command tx timeout [ 90.795378][ T2951] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.802859][ T2951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.842053][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.849568][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.929814][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.978815][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.986198][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.044618][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.051924][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.106305][ T5789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.160434][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.189586][ T5786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.200557][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.273690][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.321101][ T5788] veth0_vlan: entered promiscuous mode [ 91.379603][ T5788] veth1_vlan: entered promiscuous mode [ 91.462696][ T5788] veth0_macvtap: entered promiscuous mode [ 91.499058][ T5785] veth0_vlan: entered promiscuous mode [ 91.518903][ T5788] veth1_macvtap: entered promiscuous mode [ 91.541737][ T5785] veth1_vlan: entered promiscuous mode [ 91.623049][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.661857][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.695554][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.706238][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.718959][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.728757][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.749131][ T5785] veth0_macvtap: entered promiscuous mode [ 91.760452][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.798541][ T5785] veth1_macvtap: entered promiscuous mode [ 91.924009][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.959322][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.970673][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.983367][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.004433][ T5789] veth0_vlan: entered promiscuous mode [ 92.010881][ T2951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.027567][ T2951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.036154][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.047605][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.060151][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.075424][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.090610][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.100462][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.111095][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.175224][ T5789] veth1_vlan: entered promiscuous mode [ 92.202723][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.218011][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.312382][ T5786] veth0_vlan: entered promiscuous mode [ 92.325428][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.341460][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.401259][ T5786] veth1_vlan: entered promiscuous mode [ 92.433308][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.453634][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.465619][ T5789] veth0_macvtap: entered promiscuous mode [ 92.494646][ T5789] veth1_macvtap: entered promiscuous mode [ 92.630373][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.667779][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.674398][ T786] cfg80211: failed to load regulatory.db [ 92.694878][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.730606][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.747501][ T5803] Bluetooth: hci3: command tx timeout [ 92.747514][ T50] Bluetooth: hci0: command tx timeout [ 92.759576][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.785001][ T5786] veth0_macvtap: entered promiscuous mode [ 92.827047][ T5803] Bluetooth: hci2: command tx timeout [ 92.828046][ T50] Bluetooth: hci1: command tx timeout [ 92.876949][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.889392][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.916043][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.937024][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.959398][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.980326][ T5786] veth1_macvtap: entered promiscuous mode [ 92.993787][ T5789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.013390][ T5885] syz.1.7[5885]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.036736][ T5789] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.056838][ T5789] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.065626][ T5789] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.239125][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.262437][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.274245][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.286190][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.297887][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.309411][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.322871][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.365123][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.377204][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.393386][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.404432][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.423415][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.435618][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.454041][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.475198][ T2951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.498312][ T2951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.523048][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.545406][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.556069][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.565645][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.619799][ T2951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.643681][ T2951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.833239][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.875447][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.976846][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.995334][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.136080][ T5885] loop1: detected capacity change from 0 to 32768 [ 94.142188][ T5887] loop2: detected capacity change from 0 to 32768 [ 94.227693][ T5885] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 94.244845][ T5887] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 94.271831][ T5905] capability: warning: `syz.3.4' uses deprecated v2 capabilities in a way that may be insecure [ 94.310588][ T5905] program syz.3.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.360991][ T5885] XFS (loop1): Ending clean mount [ 94.472109][ T5887] XFS (loop2): Starting recovery (logdev: internal) [ 94.580910][ T5887] XFS (loop2): Ending recovery (logdev: internal) [ 94.786675][ T5785] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 94.842439][ T50] Bluetooth: hci0: command tx timeout [ 94.848340][ T5803] Bluetooth: hci3: command tx timeout [ 94.907897][ T50] Bluetooth: hci1: command tx timeout [ 94.913419][ T50] Bluetooth: hci2: command tx timeout [ 94.922723][ T5788] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 95.031447][ T5919] loop3: detected capacity change from 0 to 64 [ 95.044616][ T5919] ======================================================= [ 95.044616][ T5919] WARNING: The mand mount option has been deprecated and [ 95.044616][ T5919] and is ignored by this kernel. Remove the mand [ 95.044616][ T5919] option from the mount to silence this warning. [ 95.044616][ T5919] ======================================================= [ 95.650175][ T5928] loop0: detected capacity change from 0 to 128 [ 95.714494][ T5934] loop1: detected capacity change from 0 to 64 [ 96.007357][ T5928] EXT4-fs (loop0): Test dummy encryption mode enabled [ 96.118251][ T5928] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.175430][ T5928] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.321622][ T5951] loop2: detected capacity change from 0 to 2048 [ 96.366891][ T5951] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 96.484019][ T5956] loop1: detected capacity change from 0 to 256 [ 96.515106][ T5957] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.522767][ T5951] syz.2.25: attempt to access beyond end of device [ 96.522767][ T5951] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 96.593511][ T5928] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 96.646917][ T5954] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 96.695336][ T5956] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 96.914308][ T5789] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.101671][ T5974] loop2: detected capacity change from 0 to 1024 [ 97.115754][ T5974] EXT4-fs: Ignoring removed oldalloc option [ 97.122130][ T5972] loop3: detected capacity change from 0 to 1024 [ 97.138363][ T5974] EXT4-fs: Ignoring removed bh option [ 97.153334][ T5974] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.201281][ T5972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.228778][ T5974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.392968][ T5972] CIFS: iocharset name too long [ 97.513336][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.532536][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.958867][ T5998] loop1: detected capacity change from 0 to 128 [ 98.044501][ T6000] netlink: 20 bytes leftover after parsing attributes in process `syz.2.40'. [ 98.287984][ T6008] netlink: 'syz.2.44': attribute type 4 has an invalid length. [ 98.295721][ T6008] netlink: 17 bytes leftover after parsing attributes in process `syz.2.44'. [ 98.606127][ T6018] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.408043][ T6044] loop3: detected capacity change from 0 to 1024 [ 99.517406][ T6044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.547179][ T6046] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 99.554444][ T6046] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 99.561420][ T6046] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 100.013526][ T6058] loop0: detected capacity change from 0 to 512 [ 100.157124][ T6058] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.236938][ T6058] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.242512][ T6043] loop2: detected capacity change from 0 to 32768 [ 100.266719][ T50] Bluetooth: hci0: command tx timeout [ 100.285782][ T6043] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.60 (6043) [ 100.370866][ T6043] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 100.377375][ T28] audit: type=1800 audit(1759416531.117:2): pid=6044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.59" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 100.381911][ T6043] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 100.442619][ T6043] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 100.486702][ T6043] BTRFS info (device loop2): use zstd compression, level 3 [ 100.505168][ T6043] BTRFS info (device loop2): using free space tree [ 100.559287][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.566179][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.830028][ T6043] BTRFS info (device loop2): enabling ssd optimizations [ 100.866513][ T6043] BTRFS info (device loop2): auto enabling async discard [ 101.443399][ T5788] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 101.597140][ T5857] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.886256][ T6108] netlink: 'syz.2.80': attribute type 21 has an invalid length. [ 101.906715][ T5857] usb 2-1: Using ep0 maxpacket: 8 [ 101.922524][ T28] audit: type=1326 audit(1759416532.677:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e31f8eec9 code=0x7fc00000 [ 101.953745][ T5857] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 101.985890][ T28] audit: type=1326 audit(1759416532.677:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e31f8eec9 code=0x7fc00000 [ 101.991162][ T5857] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 102.086651][ T28] audit: type=1326 audit(1759416532.677:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e31f8eec9 code=0x7fc00000 [ 102.096604][ T5857] usb 2-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 102.187734][ T5857] usb 2-1: Product: syz [ 102.198641][ T28] audit: type=1326 audit(1759416532.677:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e31f8eec9 code=0x7fc00000 [ 102.211600][ T5857] usb 2-1: Manufacturer: syz [ 102.286216][ T28] audit: type=1326 audit(1759416532.677:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e31f8eec9 code=0x7fc00000 [ 102.296898][ T5857] usb 2-1: SerialNumber: syz [ 102.345702][ T28] audit: type=1326 audit(1759416532.687:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e31f8eec9 code=0x7fc00000 [ 102.382445][ T5857] usb 2-1: config 0 descriptor?? [ 102.524847][ T28] audit: type=1326 audit(1759416533.277:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6119 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e31f8eec9 code=0x7ffc0000 [ 102.573437][ T28] audit: type=1326 audit(1759416533.277:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6119 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f0e31f8eec9 code=0x7ffc0000 [ 102.632085][ T28] audit: type=1326 audit(1759416533.277:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6119 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e31f8eec9 code=0x7ffc0000 [ 102.649710][ T5857] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 102.820125][ T6126] netlink: 136 bytes leftover after parsing attributes in process `syz.3.88'. [ 102.854256][ T6126] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 103.049013][ T5857] gspca_sunplus: reg_w_riv err -71 [ 103.054395][ T5857] sunplus: probe of 2-1:0.0 failed with error -71 [ 103.102076][ T5857] usb 2-1: USB disconnect, device number 2 [ 103.262770][ T6139] loop0: detected capacity change from 0 to 512 [ 103.328100][ T6142] netlink: 23 bytes leftover after parsing attributes in process `syz.2.96'. [ 103.341419][ T6139] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #12: comm syz.0.94: corrupted in-inode xattr: bad e_name length [ 103.365629][ T6139] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.94: couldn't read orphan inode 12 (err -117) [ 103.385973][ T6139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.573226][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.393805][ T6176] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 104.404388][ T6176] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 104.613947][ T6182] vlan2: entered promiscuous mode [ 104.667775][ T6182] bridge0: entered promiscuous mode [ 104.704919][ T6185] Illegal XDP return value 120 on prog (id 12) dev N/A, expect packet loss! [ 104.828904][ T6187] binder: BINDER_SET_CONTEXT_MGR already set [ 104.845920][ T6187] binder: 6186:6187 ioctl 40046207 0 returned -16 [ 105.020135][ T6189] loop2: detected capacity change from 0 to 2048 [ 105.059630][ T6191] netlink: 'syz.3.117': attribute type 1 has an invalid length. [ 105.063874][ T6189] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 105.077038][ T6189] UDF-fs: Scanning with blocksize 512 failed [ 105.112829][ T6189] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.157592][ T6178] loop1: detected capacity change from 0 to 32768 [ 105.217188][ T6178] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 105.352563][ T6178] XFS (loop1): Ending clean mount [ 105.407402][ T6178] XFS (loop1): Quotacheck needed: Please wait. [ 105.498092][ T6178] XFS (loop1): Quotacheck: Done. [ 105.579033][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 105.579049][ T28] audit: type=1800 audit(1759416536.337:20): pid=6178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.111" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 105.646966][ T5872] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.759365][ T5785] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 105.787007][ T50] Bluetooth: hci1: command tx timeout [ 105.879898][ T5872] usb 4-1: Using ep0 maxpacket: 8 [ 105.907074][ T5872] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 105.946614][ T5872] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 105.976342][ T5872] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 105.997652][ T5872] usb 4-1: Product: syz [ 106.018705][ T5872] usb 4-1: Manufacturer: syz [ 106.026220][ T5872] usb 4-1: SerialNumber: syz [ 106.289587][ T5872] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 106.298413][ T5872] usb 4-1: Handspring Visor / Palm OS: port 0, is for Console use [ 106.309085][ T5872] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 106.318232][ T5872] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 106.336714][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.486727][ T5841] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.494201][ T5872] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 106.525966][ T6220] netlink: 36 bytes leftover after parsing attributes in process `syz.0.127'. [ 106.542098][ T5872] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 106.566164][ T23] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 106.567404][ T5872] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 106.582880][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.594191][ T23] usb 3-1: Product: syz [ 106.599869][ T23] usb 3-1: Manufacturer: syz [ 106.602076][ T5872] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 106.604870][ T23] usb 3-1: SerialNumber: syz [ 106.619620][ T5872] usb 4-1: USB disconnect, device number 2 [ 106.641605][ T5872] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 106.659561][ T5872] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 106.665181][ T23] usb 3-1: config 0 descriptor?? [ 106.677017][ T5841] usb 2-1: Using ep0 maxpacket: 16 [ 106.678618][ T5872] visor 4-1:1.0: device disconnected [ 106.688804][ T5841] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 106.712138][ T23] hub 3-1:0.0: bad descriptor, ignoring hub [ 106.720739][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65051, setting to 1024 [ 106.736524][ T23] hub: probe of 3-1:0.0 failed with error -5 [ 106.752629][ T5841] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 106.768403][ T23] f81232 3-1:0.0: f81534a converter detected [ 106.790425][ T5841] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 106.813903][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.856963][ T5841] usb 2-1: Product: syz [ 106.861787][ T5841] usb 2-1: Manufacturer: syz [ 106.871144][ T5841] usb 2-1: SerialNumber: syz [ 106.879984][ T5841] usb 2-1: config 0 descriptor?? [ 106.887464][ T6217] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 106.897558][ T6217] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 106.915363][ T23] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 106.933512][ T23] f81534a: probe of ttyUSB0 failed with error -5 [ 106.999058][ T23] usb 3-1: USB disconnect, device number 2 [ 107.008754][ T23] f81232 3-1:0.0: device disconnected [ 107.234229][ T5841] rc_core: IR keymap rc-hauppauge not found [ 107.265370][ T5841] Registered IR keymap rc-empty [ 107.277033][ T5841] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 107.318791][ T5841] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 107.353000][ T5841] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 107.378004][ T5841] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 107.409388][ T5841] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 107.442926][ T5841] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 107.489218][ T5841] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 107.556877][ T5841] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 107.568713][ T786] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.586870][ T5841] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 107.617030][ T5841] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 107.646915][ T5841] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 107.694145][ T5841] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 107.754346][ T5841] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 107.766555][ T786] usb 4-1: Using ep0 maxpacket: 32 [ 107.793166][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.806862][ T5841] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 107.836609][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.853425][ T5841] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 107.863043][ T786] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.876363][ T5841] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 107.914539][ T786] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 107.928243][ T5841] usb 2-1: USB disconnect, device number 3 [ 107.953968][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.005761][ T786] usb 4-1: config 0 descriptor?? [ 108.471376][ T786] steelseries 0003:1038:1410.0001: ignoring exceeding usage max [ 108.513088][ T6259] loop1: detected capacity change from 0 to 4096 [ 108.514001][ T786] steelseries 0003:1038:1410.0001: missing HID_OUTPUT_REPORT 0 [ 108.532774][ T6259] EXT4-fs (loop1): Test dummy encryption mode enabled [ 108.546666][ T6259] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 108.559876][ T6259] System zones: 0-5 [ 108.572118][ T6259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.615213][ T6262] Zero length message leads to an empty skb [ 108.643910][ T6259] syz.1.145 (6259) used greatest stack depth: 20944 bytes left [ 108.711859][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.721380][ T786] usb 4-1: USB disconnect, device number 3 [ 109.005678][ T6270] loop2: detected capacity change from 0 to 16 [ 109.043293][ T6270] erofs: (device loop2): mounted with root inode @ nid 36. [ 109.169484][ T6270] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 109.213602][ T6275] netlink: 20 bytes leftover after parsing attributes in process `syz.1.151'. [ 109.223916][ T6270] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -46 in[60, 4036] out[1851] [ 109.246921][ T6270] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 109.339606][ T6270] block device autoloading is deprecated and will be removed. [ 109.542430][ T6284] loop3: detected capacity change from 0 to 164 [ 109.642366][ T6284] isofs: isofs_export_get_parent(): child directory not normalized! [ 110.106716][ T50] Bluetooth: hci1: command tx timeout [ 110.192500][ T6278] loop0: detected capacity change from 0 to 32768 [ 110.206646][ T6278] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.153 (6278) [ 110.249960][ T6278] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.269715][ T6278] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 110.293656][ T6278] BTRFS info (device loop0): turning off barriers [ 110.328361][ T6278] BTRFS info (device loop0): setting nodatasum [ 110.334644][ T6278] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 110.356831][ T5857] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.375057][ T6278] BTRFS info (device loop0): use zstd compression, level 3 [ 110.382550][ T6278] BTRFS info (device loop0): using free space tree [ 110.570497][ T5857] usb 2-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 110.590233][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.637641][ T5857] usb 2-1: config 0 descriptor?? [ 110.778425][ T28] audit: type=1800 audit(1759416541.537:21): pid=6278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.153" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 110.839847][ T5789] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.081521][ T5857] betop 0003:11C0:5506.0002: unknown main item tag 0x0 [ 111.111617][ T5857] betop 0003:11C0:5506.0002: unknown main item tag 0x0 [ 111.133893][ T6331] loop3: detected capacity change from 0 to 512 [ 111.142096][ T5857] betop 0003:11C0:5506.0002: unknown main item tag 0x0 [ 111.165457][ T6331] EXT4-fs: Ignoring removed bh option [ 111.171600][ T5857] betop 0003:11C0:5506.0002: unknown main item tag 0x0 [ 111.207199][ T5857] betop 0003:11C0:5506.0002: unknown main item tag 0x0 [ 111.214529][ T5857] betop 0003:11C0:5506.0002: unknown main item tag 0x0 [ 111.235950][ T6331] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.256499][ T5857] betop 0003:11C0:5506.0002: unknown main item tag 0x0 [ 111.265241][ T6331] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 111.324711][ T5857] betop 0003:11C0:5506.0002: hidraw0: USB HID v10.00 Device [HID 11c0:5506] on usb-dummy_hcd.1-1/input0 [ 111.343241][ T6329] loop2: detected capacity change from 0 to 8192 [ 111.352199][ T6331] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 111.365470][ T5857] betop 0003:11C0:5506.0002: no inputs found [ 111.369671][ T6329] FAT-fs (loop2): Unrecognized mount option "ÿ]µLî+AX²k÷KÚ" or missing value [ 111.378606][ T5857] usb 2-1: USB disconnect, device number 4 [ 111.397082][ T6331] EXT4-fs (loop3): orphan cleanup on readonly fs [ 111.455363][ T6331] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.171: Bad quota inum: 4294967291, type: 0 [ 111.596606][ T6331] EXT4-fs warning (device loop3): ext4_enable_quotas:7175: Failed to enable quota tracking (type=0, err=-117, ino=4294967291). Please run e2fsck to fix. [ 111.657445][ T6331] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 111.670169][ T6335] fido_id[6335]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 111.688405][ T6331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.959071][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.007675][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.175'. [ 112.394106][ T6353] loop1: detected capacity change from 0 to 2048 [ 112.439365][ T6353] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.796089][ T6364] bridge0: entered promiscuous mode [ 112.796919][ T6364] macsec1: entered promiscuous mode [ 113.188989][ T6377] netlink: 88 bytes leftover after parsing attributes in process `syz.1.192'. [ 113.238883][ T6378] loop2: detected capacity change from 0 to 1024 [ 113.433356][ T6378] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 114.851361][ T6423] loop0: detected capacity change from 0 to 64 [ 114.896882][ T5841] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.944273][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'. [ 115.102616][ T5841] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.125765][ T5841] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 115.147813][ T5841] usb 4-1: config 1 has no interface number 0 [ 115.154195][ T5841] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.185512][ T5841] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 115.210744][ T5841] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 115.278932][ T5841] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.296517][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.304709][ T5841] usb 4-1: Product: syz [ 115.314367][ T5841] usb 4-1: Manufacturer: syz [ 115.326588][ T5841] usb 4-1: SerialNumber: syz [ 115.376602][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.556636][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 115.570922][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.586555][ T23] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 115.606667][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.629140][ T23] usb 1-1: config 0 descriptor?? [ 115.970458][ T5841] cdc_ncm 4-1:1.1: bind() failure [ 116.008258][ T5841] usb 4-1: USB disconnect, device number 4 [ 116.059488][ T6443] tipc: Started in network mode [ 116.064314][ T23] creative-sb0540 0003:041E:3100.0003: item fetching failed at offset 1/5 [ 116.065019][ T6443] tipc: Node identity , cluster identity 4711 [ 116.081092][ T23] creative-sb0540 0003:041E:3100.0003: parse failed [ 116.084369][ T6443] tipc: Failed to obtain node identity [ 116.095845][ T6443] tipc: Enabling of bearer rejected, failed to enable media [ 116.106782][ T23] creative-sb0540: probe of 0003:041E:3100.0003 failed with error -22 [ 116.177389][ T5792] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 116.316524][ T5841] usb 1-1: USB disconnect, device number 2 [ 116.357494][ T5792] usb 2-1: Using ep0 maxpacket: 16 [ 116.369835][ T5792] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 116.383729][ T5792] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 116.392991][ T5792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.408420][ T5792] usb 2-1: config 0 descriptor?? [ 116.427343][ T5792] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 116.637021][ T5792] bcm5974 2-1:0.0: could not read from device [ 116.679680][ T5143] bcm5974 2-1:0.0: could not read from device [ 116.703970][ T6445] loop2: detected capacity change from 0 to 40427 [ 116.724676][ T5792] input: failed to attach handler mousedev to device input7, error: -5 [ 116.735624][ T6445] F2FS-fs (loop2): invalid crc value [ 116.761020][ T5143] bcm5974 2-1:0.0: could not read from device [ 116.776960][ T5792] usb 2-1: USB disconnect, device number 5 [ 116.810188][ T6445] F2FS-fs (loop2): Found nat_bits in checkpoint [ 116.999643][ T6445] F2FS-fs (loop2): Start checkpoint disabled! [ 117.050199][ T6445] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 117.211589][ T6452] loop0: detected capacity change from 0 to 4096 [ 117.531379][ T6450] loop3: detected capacity change from 0 to 32768 [ 117.555286][ T6450] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.227 (6450) [ 117.634834][ T6450] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 117.685360][ T6450] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 117.746333][ T6450] BTRFS info (device loop3): using free space tree [ 117.990024][ T6450] BTRFS info (device loop3): enabling ssd optimizations [ 118.001881][ T6475] loop0: detected capacity change from 0 to 1024 [ 118.021740][ T6450] BTRFS info (device loop3): auto enabling async discard [ 118.216568][ T28] audit: type=1800 audit(1759416548.967:22): pid=6450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.227" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 118.397021][ T5786] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 119.151469][ T6503] mmap: syz.3.243 (6503) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 119.219430][ T6505] warning: `syz.2.244' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 119.277902][ T6507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.245'. [ 119.744684][ T6493] loop1: detected capacity change from 0 to 40427 [ 119.782894][ T6513] loop0: detected capacity change from 0 to 8192 [ 119.823205][ T6519] netlink: 20 bytes leftover after parsing attributes in process `syz.3.251'. [ 119.825438][ T6493] F2FS-fs (loop1): Found nat_bits in checkpoint [ 119.854200][ T6513] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.856708][ T6519] netlink: 'syz.3.251': attribute type 4 has an invalid length. [ 119.970748][ T6524] loop2: detected capacity change from 0 to 512 [ 119.990246][ T6493] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 120.034043][ T6513] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 120.077733][ T6513] FAT-fs (loop0): Filesystem has been set read-only [ 120.126308][ T6524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.139928][ T6493] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 120.173996][ T6529] loop3: detected capacity change from 0 to 512 [ 120.206749][ T6524] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.262493][ T6529] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.275460][ T6493] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 120.301505][ T6529] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.388830][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.550487][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.025876][ T6545] loop0: detected capacity change from 0 to 2048 [ 121.089455][ T6545] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.182133][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.262'. [ 121.575299][ T6562] loop2: detected capacity change from 0 to 512 [ 121.584819][ T6563] devtmpfs: Cannot disable swap on remount [ 121.614402][ T6562] EXT4-fs: inline encryption not supported [ 121.665952][ T6562] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.267: casefold flag without casefold feature [ 121.702009][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.269'. [ 121.752889][ T6562] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.267: couldn't read orphan inode 15 (err -117) [ 121.824635][ T6562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.988309][ T6562] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #2: comm syz.2.267: invalid size [ 121.990278][ T6576] capability: warning: `syz.3.274' uses 32-bit capabilities (legacy support in use) [ 122.016050][ T6575] loop0: detected capacity change from 0 to 512 [ 122.072919][ T6575] FAT-fs (loop0): Invalid FSINFO signature: 0x41610002, 0x61417272 (sector = 1) [ 122.138089][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.178303][ T6575] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0005) [ 122.206643][ T6575] FAT-fs (loop0): Filesystem has been set read-only [ 122.417828][ T5789] FAT-fs (loop0): Invalid FSINFO signature: 0x41610002, 0x61417272 (sector = 1) [ 122.580450][ T6589] CUSE: unknown device info "€" [ 122.585418][ T6589] CUSE: unknown device info "" [ 122.585433][ T6589] CUSE: unknown device info "" [ 122.585442][ T6589] CUSE: unknown device info "" [ 122.585452][ T6589] CUSE: zero length info key specified [ 123.095304][ T6609] loop0: detected capacity change from 0 to 4096 [ 123.125999][ T6609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.177817][ T6609] fs-verity: sha512 using implementation "sha512-avx2" [ 123.334922][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.936180][ T6630] sctp: [Deprecated]: syz.1.299 (pid 6630) Use of int in max_burst socket option deprecated. [ 123.936180][ T6630] Use struct sctp_assoc_value instead [ 124.479963][ T6642] loop2: detected capacity change from 0 to 2048 [ 124.532800][ T6642] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 124.564162][ T6642] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 124.578054][ T6642] UDF-fs: Scanning with blocksize 512 failed [ 124.655768][ T6642] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.906764][ T5803] Bluetooth: hci1: command tx timeout [ 125.134654][ T6652] loop3: detected capacity change from 0 to 8192 [ 125.168840][ T6652] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 125.192314][ T6652] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 125.202550][ T6652] REISERFS (device loop3): using ordered data mode [ 125.211084][ T6652] reiserfs: using flush barriers [ 125.270431][ T6652] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 125.325561][ T6652] REISERFS (device loop3): checking transaction log (loop3) [ 125.367255][ T6652] REISERFS (device loop3): Using tea hash to sort names [ 125.380002][ T6652] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 126.054110][ T6654] loop1: detected capacity change from 0 to 32768 [ 126.178051][ T6654] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 126.271127][ T6654] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 126.328378][ T6676] netlink: 'syz.3.315': attribute type 3 has an invalid length. [ 126.629112][ T5785] ocfs2: Unmounting device (7,1) on (node local) [ 126.814151][ T6667] loop0: detected capacity change from 0 to 32768 [ 126.825938][ T6680] loop3: detected capacity change from 0 to 512 [ 126.845500][ T6680] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 126.907158][ T6667] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 127.151970][ T6667] XFS (loop0): Ending clean mount [ 127.198219][ T6667] XFS (loop0): Quotacheck needed: Please wait. [ 127.386689][ T6667] XFS (loop0): Quotacheck: Done. [ 127.414570][ T6697] loop1: detected capacity change from 0 to 512 [ 127.509111][ T6697] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 127.553665][ T6697] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 127.619606][ T6697] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #13: comm syz.1.323: iget: bad i_size value: 12154757448730 [ 127.677123][ T6697] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.323: couldn't read orphan inode 13 (err -117) [ 127.689753][ T5789] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 127.706790][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 127.709314][ T6697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.777536][ T6672] loop2: detected capacity change from 0 to 40427 [ 127.819096][ T6672] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 127.861439][ T6672] F2FS-fs (loop2): Image doesn't support compression [ 127.876686][ T6672] F2FS-fs (loop2): Image doesn't support compression [ 127.900129][ T6672] F2FS-fs (loop2): invalid crc value [ 127.926547][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 127.944842][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.973305][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.985930][ T6672] F2FS-fs (loop2): Found nat_bits in checkpoint [ 127.993486][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 128.007488][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 128.020426][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.030326][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.072888][ T8] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 128.113434][ T8] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 128.154013][ T8] usb 4-1: Manufacturer: syz [ 128.183235][ T8] usb 4-1: config 0 descriptor?? [ 128.229744][ T6672] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 128.389516][ T6708] loop1: detected capacity change from 0 to 128 [ 128.401411][ T6672] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x13a/0x910 [ 128.431544][ T6708] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 128.451738][ T6708] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 128.562480][ T5788] syz-executor: attempt to access beyond end of device [ 128.562480][ T5788] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 128.597828][ T8] rc_core: IR keymap rc-hauppauge not found [ 128.603850][ T8] Registered IR keymap rc-empty [ 128.626471][ T5788] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 128.645507][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 128.676784][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 128.718280][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 128.773230][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8 [ 128.846644][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 128.905917][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 128.931213][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 128.959318][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 128.986834][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 129.016897][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 129.046748][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 129.076765][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 129.157131][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 129.187122][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 129.218699][ T8] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 129.218726][ T8] mceusb 4-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 129.236143][ T8] usb 4-1: USB disconnect, device number 5 [ 129.816595][ T5841] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 130.059410][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 130.076929][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.106534][ T5841] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 130.136264][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.147821][ T5841] usb 2-1: config 0 descriptor?? [ 130.589224][ T5841] bigben 0003:146B:0902.0004: unexpected rdesc, please submit for review [ 130.633752][ T5841] bigben 0003:146B:0902.0004: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.1-1/input0 [ 130.667826][ T5841] bigben 0003:146B:0902.0004: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 130.686539][ T5841] bigben 0003:146B:0902.0004: no output report found [ 130.850474][ T6730] loop0: detected capacity change from 0 to 32768 [ 130.867202][ T23] usb 2-1: USB disconnect, device number 6 [ 130.915867][ T6730] [ 130.915867][ T6730] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.915867][ T6730] [ 130.989754][ T6730] ERROR: (device loop0): diWrite: ixpxd invalid [ 130.989754][ T6730] [ 131.007110][ T6741] loop2: detected capacity change from 0 to 8192 [ 131.021475][ T6730] ERROR: (device loop0): txCommit: [ 131.021475][ T6730] [ 131.048754][ T5841] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 131.097362][ T6741] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 131.166609][ T6741] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 131.180773][ T6741] REISERFS (device loop2): using writeback data mode [ 131.189554][ T6741] reiserfs: using flush barriers [ 131.219753][ T6741] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 131.250472][ T5789] [ 131.250472][ T5789] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.250472][ T5789] [ 131.283652][ T5789] [ 131.283652][ T5789] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.283652][ T5789] [ 131.319551][ T6741] REISERFS (device loop2): checking transaction log (loop2) [ 131.341137][ T5841] usb 4-1: Using ep0 maxpacket: 16 [ 131.359378][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.384435][ T6741] REISERFS (device loop2): Using r5 hash to sort names [ 131.402492][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.415183][ T5841] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 131.433006][ T5841] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 131.476574][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.507359][ T5841] usb 4-1: config 0 descriptor?? [ 131.627797][ T6741] reiserfs: enabling write barrier flush mode [ 131.734385][ T6741] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 131.794088][ T6741] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 131.940806][ T6751] loop0: detected capacity change from 0 to 1024 [ 131.954503][ T5841] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 131.972605][ T5841] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 132.006675][ T5841] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 132.053254][ T5841] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 132.077623][ T5841] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 132.088756][ T6751] hfsplus: extend alloc file! (8192,512,16777719) [ 132.111807][ T5841] microsoft 0003:045E:07DA.0005: no inputs found [ 132.135433][ T5841] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 132.207065][ T5841] usb 4-1: USB disconnect, device number 6 [ 132.402885][ T6756] fido_id[6756]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 132.478669][ T6759] loop0: detected capacity change from 0 to 128 [ 132.551287][ T6759] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 132.586825][ T6759] hpfs: filesystem error: improperly stopped [ 132.592995][ T6759] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 132.666611][ T6759] hpfs: You really don't want any checks? You are crazy... [ 132.675630][ T6759] hpfs: hpfs_map_sector(): read error [ 132.711592][ T28] audit: type=1326 audit(1759416563.467:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7158eec9 code=0x7ffc0000 [ 132.736255][ T6759] hpfs: code page support is disabled [ 132.744360][ T6759] hpfs: hpfs_map_4sectors(): unaligned read [ 132.762354][ T6759] hpfs: hpfs_map_4sectors(): unaligned read [ 132.775764][ T28] audit: type=1326 audit(1759416563.467:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7158eec9 code=0x7ffc0000 [ 132.807230][ T6759] hpfs: filesystem error: unable to find root dir [ 132.867147][ T28] audit: type=1326 audit(1759416563.477:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1d7158eec9 code=0x7ffc0000 [ 132.889192][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.931978][ T28] audit: type=1326 audit(1759416563.477:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7158eec9 code=0x7ffc0000 [ 133.042409][ T28] audit: type=1326 audit(1759416563.477:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7158eec9 code=0x7ffc0000 [ 133.125147][ T28] audit: type=1326 audit(1759416563.507:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f1d7158eec9 code=0x7ffc0000 [ 133.235907][ T28] audit: type=1326 audit(1759416563.657:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7158eec9 code=0x7ffc0000 [ 133.259071][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.330315][ T6770] loop1: detected capacity change from 0 to 16 [ 133.349616][ T28] audit: type=1326 audit(1759416563.657:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7158eec9 code=0x7ffc0000 [ 133.372268][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.391836][ T6770] erofs: (device loop1): mounted with root inode @ nid 36. [ 133.459157][ T6770] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 133.482511][ T6770] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -46 in[60, 4036] out[1851] [ 133.514002][ T6770] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 133.636959][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.644063][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.721114][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 133.926556][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 133.944527][ T23] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 133.967354][ T23] usb 1-1: config 0 has no interface number 0 [ 133.998307][ T23] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 134.026501][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.036920][ T23] usb 1-1: Product: syz [ 134.041150][ T23] usb 1-1: Manufacturer: syz [ 134.057154][ T23] usb 1-1: SerialNumber: syz [ 134.068475][ T23] usb 1-1: config 0 descriptor?? [ 134.088015][ T23] hub 1-1:0.132: bad descriptor, ignoring hub [ 134.101281][ T23] hub: probe of 1-1:0.132 failed with error -5 [ 134.120233][ T23] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input9 [ 134.508146][ T6776] loop1: detected capacity change from 0 to 32768 [ 134.984644][ T6774] loop2: detected capacity change from 0 to 32768 [ 135.614195][ T6793] loop2: detected capacity change from 0 to 4096 [ 135.770916][ T6787] loop3: detected capacity change from 0 to 40427 [ 135.820747][ T6787] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 135.849865][ T6787] F2FS-fs (loop3): Image doesn't support compression [ 135.871413][ T6787] F2FS-fs (loop3): heap/no_heap options were deprecated [ 135.896938][ T6787] F2FS-fs (loop3): Image doesn't support compression [ 135.918264][ T6787] F2FS-fs (loop3): invalid crc value [ 135.982782][ T6787] F2FS-fs (loop3): Found nat_bits in checkpoint [ 136.199728][ T6787] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 136.381555][ T6787] F2FS-fs (loop3): inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0x97f/0x19e0 [ 136.405765][ T6787] syz.3.361: attempt to access beyond end of device [ 136.405765][ T6787] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 136.449984][ T6791] loop0: detected capacity change from 0 to 32768 [ 136.463513][ T6791] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.364 (6791) [ 136.515000][ T6791] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 136.550948][ T6791] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 136.562324][ T5786] syz-executor: attempt to access beyond end of device [ 136.562324][ T5786] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 136.576897][ T6791] BTRFS info (device loop0): enabling auto defrag [ 136.576928][ T6791] BTRFS info (device loop0): doing ref verification [ 136.594975][ T5786] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 136.612256][ T6806] loop1: detected capacity change from 0 to 2048 [ 136.629604][ T6791] BTRFS info (device loop0): use no compression [ 136.644593][ T6806] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 136.657490][ T6791] BTRFS info (device loop0): force clearing of disk cache [ 136.666160][ T6791] BTRFS info (device loop0): max_inline at 57 [ 136.677024][ T6791] BTRFS info (device loop0): disabling free space tree [ 136.689009][ T6806] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.841180][ T6791] BTRFS info (device loop0): enabling ssd optimizations [ 136.856603][ T6791] BTRFS info (device loop0): auto enabling async discard [ 136.872042][ T6791] BTRFS info (device loop0): rebuilding free space tree [ 136.928224][ T6791] BTRFS info (device loop0): disabling free space tree [ 136.991406][ T6791] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 137.016556][ T6791] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 137.168545][ T6801] loop2: detected capacity change from 0 to 32768 [ 137.284978][ T6801] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 137.441476][ T6801] XFS (loop2): Ending clean mount [ 137.569857][ T5789] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 137.672557][ T6836] overlayfs: maximum fs stacking depth exceeded [ 137.782890][ T5788] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 138.633002][ T6857] loop3: detected capacity change from 0 to 256 [ 138.652232][ T6857] exfat: Deprecated parameter 'utf8' [ 138.669107][ T6857] exfat: Deprecated parameter 'namecase' [ 138.678432][ T23] usb 1-1: USB disconnect, device number 3 [ 138.756127][ T6857] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8b6193f0, utbl_chksum : 0xe619d30d) [ 138.998525][ T6842] loop0: detected capacity change from 0 to 32768 [ 139.085275][ T6842] JBD2: Ignoring recovery information on journal [ 139.229139][ T6868] loop1: detected capacity change from 0 to 512 [ 139.240931][ T6864] bridge0: port 3(vlan3) entered blocking state [ 139.252881][ T6868] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 139.271339][ T6864] bridge0: port 3(vlan3) entered disabled state [ 139.292906][ T6864] vlan3: entered allmulticast mode [ 139.298412][ T6842] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 139.346522][ T6868] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 139.371651][ T6864] bridge0: entered allmulticast mode [ 139.401059][ T6864] vlan3: left allmulticast mode [ 139.406096][ T6864] bridge0: left allmulticast mode [ 139.421068][ T6868] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 139.454027][ T6842] (syz.0.373,6842,0):ocfs2_reflink_ioctl:4427 ERROR: status = -14 [ 139.489231][ T6868] EXT4-fs (loop1): 1 truncate cleaned up [ 139.498772][ T6868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.592471][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.636651][ T5789] ocfs2: Unmounting device (7,0) on (node local) [ 140.211899][ T6891] loop2: detected capacity change from 0 to 512 [ 140.330646][ T6891] EXT4-fs (loop2): 1 orphan inode deleted [ 140.342094][ T6896] loop0: detected capacity change from 0 to 1024 [ 140.348876][ T1127] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 140.361654][ T6891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.391707][ T6891] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.398516][ T6897] loop3: detected capacity change from 0 to 2048 [ 140.409975][ T1127] EXT4-fs error (device loop2): ext4_release_dquot:6976: comm kworker/u4:8: Failed to release dquot type 1 [ 140.431866][ T6897] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 140.523573][ T6898] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.524012][ T6897] syz.3.397: attempt to access beyond end of device [ 140.524012][ T6897] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 140.551693][ T28] audit: type=1800 audit(1759416571.307:31): pid=6891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.395" name="bus" dev="loop2" ino=16 res=0 errno=0 [ 140.735838][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.276670][ T6915] netlink: 'syz.1.404': attribute type 6 has an invalid length. [ 141.317927][ T6915] netlink: 'syz.1.404': attribute type 6 has an invalid length. [ 142.055848][ T6905] loop3: detected capacity change from 0 to 32768 [ 142.120066][ T6905] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 142.124527][ T6944] xt_hashlimit: max too large, truncated to 1048576 [ 142.147105][ T6944] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 142.342922][ T6905] XFS (loop3): Starting recovery (logdev: internal) [ 142.477796][ T6905] XFS (loop3): Ending recovery (logdev: internal) [ 142.482777][ T6955] syz.1.413 uses obsolete (PF_INET,SOCK_PACKET) [ 142.760462][ T6961] loop2: detected capacity change from 0 to 128 [ 142.874887][ T5786] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 142.879699][ T6961] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 142.957911][ T6961] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.197950][ T5788] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.612368][ T6990] netlink: 16 bytes leftover after parsing attributes in process `syz.0.423'. [ 143.741806][ T6993] loop0: detected capacity change from 0 to 1024 [ 143.776048][ T6993] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.404078][ T7004] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 144.708848][ T28] audit: type=1800 audit(1759416575.467:32): pid=6993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.424" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 144.897067][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.628143][ T7039] loop0: detected capacity change from 0 to 1024 [ 145.635685][ T7039] EXT4-fs: Ignoring removed orlov option [ 145.721004][ T7039] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 145.760639][ T7039] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.892287][ T7050] loop1: detected capacity change from 0 to 256 [ 145.942242][ T7050] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 146.000932][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 146.842695][ T7054] loop3: detected capacity change from 0 to 40427 [ 146.887842][ T7054] F2FS-fs (loop3): invalid crc value [ 146.936508][ T7054] F2FS-fs (loop3): Found nat_bits in checkpoint [ 147.115907][ T7054] F2FS-fs (loop3): Start checkpoint disabled! [ 147.141507][ T7054] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 147.514325][ T1143] kworker/u4:9: attempt to access beyond end of device [ 147.514325][ T1143] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 147.559942][ T1143] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 147.575269][ T1143] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 148.068454][ T7080] loop0: detected capacity change from 0 to 32768 [ 148.111470][ T7080] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.462 (7080) [ 148.164378][ T7080] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 148.182583][ T7080] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 148.204581][ T7080] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 148.232911][ T7080] BTRFS info (device loop0): use zstd compression, level 3 [ 148.246565][ T7080] BTRFS info (device loop0): using free space tree [ 148.369503][ T7103] loop1: detected capacity change from 0 to 128 [ 148.408663][ T7080] BTRFS info (device loop0): enabling ssd optimizations [ 148.410086][ T7103] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985 [ 148.427772][ T7080] BTRFS info (device loop0): auto enabling async discard [ 148.434134][ T7103] ; already mounted read-only [ 148.506718][ T7103] hpfs: filesystem error: improperly stopped [ 148.520551][ T7103] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 148.546583][ T7103] hpfs: You really don't want any checks? You are crazy... [ 148.583343][ T7103] hpfs: hpfs_map_sector(): read error [ 148.616533][ T7103] hpfs: code page support is disabled [ 148.623327][ T7103] hpfs: hpfs_map_4sectors(): unaligned read [ 148.656675][ T7103] hpfs: hpfs_map_4sectors(): unaligned read [ 148.662711][ T7103] hpfs: filesystem error: unable to find root dir [ 148.704271][ T5789] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 148.859138][ T7086] loop2: detected capacity change from 0 to 32768 [ 149.066823][ T7086] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 149.586544][ T7086] XFS (loop2): Ending clean mount [ 149.661955][ T7086] XFS (loop2): Quotacheck needed: Please wait. [ 149.863240][ T7086] XFS (loop2): Quotacheck: Done. [ 150.014135][ T7101] loop3: detected capacity change from 0 to 40427 [ 150.048070][ T5788] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 150.070287][ T7101] F2FS-fs (loop3): heap/no_heap options were deprecated [ 150.105975][ T7101] F2FS-fs (loop3): invalid crc value [ 150.126574][ T7101] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 150.157535][ T7101] F2FS-fs (loop3): Found nat_bits in checkpoint [ 150.376768][ T7101] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 150.528178][ T7101] F2FS-fs (loop3): heap/no_heap options were deprecated [ 150.535542][ T7101] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 150.669376][ T7138] loop1: detected capacity change from 0 to 1024 [ 150.781512][ T7138] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.924596][ T7138] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.1.479: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 150.992244][ T7138] EXT4-fs (loop1): Remounting filesystem read-only [ 151.083811][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.325310][ T7136] loop0: detected capacity change from 0 to 32768 [ 151.551213][ T7151] netlink: 'syz.1.483': attribute type 11 has an invalid length. [ 151.775923][ T7159] loop1: detected capacity change from 0 to 22 [ 151.795422][ T7159] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 151.836172][ T7159] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 151.875261][ T7161] ip6tnl1: entered allmulticast mode [ 153.088150][ T7192] loop3: detected capacity change from 0 to 4096 [ 153.113396][ T7192] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 153.139435][ T7190] loop1: detected capacity change from 0 to 4096 [ 153.234898][ T7190] ntfs: volume version 3.1. [ 153.317707][ T7192] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 153.985229][ T7194] loop0: detected capacity change from 0 to 32768 [ 154.004241][ T7194] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.504 (7194) [ 154.068896][ T7194] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 154.096887][ T7194] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 154.126550][ T7194] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 154.145906][ T7194] BTRFS info (device loop0): use zstd compression, level 3 [ 154.163755][ T7194] BTRFS info (device loop0): using free space tree [ 154.400474][ T7194] BTRFS info (device loop0): enabling ssd optimizations [ 154.425871][ T7194] BTRFS info (device loop0): auto enabling async discard [ 154.467326][ T7221] geneve2: entered promiscuous mode [ 154.472801][ T7221] geneve2: entered allmulticast mode [ 154.670963][ T5789] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 154.749208][ T7224] loop2: detected capacity change from 0 to 128 [ 155.113300][ T5793] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop0 scanned by udevd (5793) [ 155.968195][ T7249] loop1: detected capacity change from 0 to 1024 [ 156.036020][ T7251] loop2: detected capacity change from 0 to 512 [ 156.042674][ T5841] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 156.053808][ T7251] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 156.093512][ T7251] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 156.145323][ T7251] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 156.168465][ T7249] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 156.168767][ T7251] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 156.223496][ T7251] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 156.240584][ T7251] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=a040e01c, mo2=0000] [ 156.262928][ T7251] EXT4-fs (loop2): failed to initialize system zone (-117) [ 156.274949][ T5841] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 156.286672][ T7251] EXT4-fs (loop2): mount failed [ 156.306670][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.315016][ T5841] usb 1-1: Product: syz [ 156.326469][ T5841] usb 1-1: Manufacturer: syz [ 156.339603][ T5841] usb 1-1: SerialNumber: syz [ 156.405081][ T5841] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 156.465448][ T27] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 156.645869][ T7245] loop3: detected capacity change from 0 to 32768 [ 156.976784][ T8] usb 1-1: USB disconnect, device number 4 [ 157.240474][ T7268] loop3: detected capacity change from 0 to 1024 [ 157.309581][ T7268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.644023][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.786602][ T27] usb 1-1: Service connection timeout for: 256 [ 157.803256][ T27] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 157.835860][ T27] ath9k_htc: Failed to initialize the device [ 157.895675][ T8] usb 1-1: ath9k_htc: USB layer deinitialized [ 157.965397][ T7283] use of bytesused == 0 is deprecated and will be removed in the future, [ 158.016651][ T7283] use the actual size instead. [ 158.212722][ T7274] loop2: detected capacity change from 0 to 32768 [ 158.280726][ T7274] [ 158.280726][ T7274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.280726][ T7274] [ 158.356878][ T7274] ERROR: (device loop2): diWrite: ixpxd invalid [ 158.356878][ T7274] [ 158.391424][ T7274] ERROR: (device loop2): remounting filesystem as read-only [ 158.427728][ T7274] ERROR: (device loop2): txCommit: [ 158.427728][ T7274] [ 158.495613][ T7294] loop0: detected capacity change from 0 to 1024 [ 158.672900][ T7294] hfsplus: keylen 65060 too large [ 158.689117][ T7294] hfsplus: xattr searching failed [ 158.994872][ T27] kernel write not supported for file /input/mice (pid: 27 comm: kworker/1:1) [ 159.845927][ T7328] loop0: detected capacity change from 0 to 64 [ 160.130631][ T7330] loop3: detected capacity change from 0 to 4096 [ 160.164392][ T7334] loop0: detected capacity change from 0 to 128 [ 160.220145][ T7334] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 160.256023][ T7335] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 161.134516][ T7354] loop1: detected capacity change from 0 to 128 [ 161.212219][ T7355] loop3: detected capacity change from 0 to 512 [ 161.250655][ T7355] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 161.293125][ T7355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.570'. [ 161.634175][ T7351] loop0: detected capacity change from 0 to 32768 [ 161.882183][ T7365] loop1: detected capacity change from 0 to 2048 [ 161.980058][ T7365] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 161.996675][ T7365] UDF-fs: Scanning with blocksize 512 failed [ 162.027427][ T7365] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.608303][ T5841] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 162.798159][ T5841] usb 2-1: Using ep0 maxpacket: 32 [ 162.812541][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.857034][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.896805][ T5841] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 162.925271][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.958782][ T5841] usb 2-1: config 0 descriptor?? [ 163.399940][ T5841] aquacomputer_d5next 0003:0C70:F00A.0006: unknown main item tag 0x7 [ 163.432947][ T5841] aquacomputer_d5next 0003:0C70:F00A.0006: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.1-1/input0 [ 163.617027][ T5841] usb 2-1: USB disconnect, device number 7 [ 163.700011][ T7410] fido_id[7410]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 163.955944][ T7420] loop3: detected capacity change from 0 to 64 [ 164.001356][ T7417] loop2: detected capacity change from 0 to 4096 [ 164.060647][ T7396] loop0: detected capacity change from 0 to 32768 [ 164.085693][ T7396] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.581 (7396) [ 164.136978][ T7396] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 164.154486][ T7417] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 164.155628][ T7396] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 164.243249][ T7396] BTRFS info (device loop0): using free space tree [ 164.542471][ T7396] BTRFS info (device loop0): enabling ssd optimizations [ 164.587490][ T7396] BTRFS info (device loop0): auto enabling async discard [ 164.736306][ T7445] loop2: detected capacity change from 0 to 1024 [ 164.778131][ T7445] EXT4-fs: Invalid gid value -1 [ 164.801693][ T28] audit: type=1800 audit(1759416595.557:33): pid=7396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.581" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 164.904045][ T5789] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 165.476934][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 165.624546][ T7463] macsec2: entered promiscuous mode [ 165.671377][ T8] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 165.692095][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.728904][ T8] usb 4-1: Product: syz [ 165.758387][ T8] usb 4-1: Manufacturer: syz [ 165.763175][ T8] usb 4-1: SerialNumber: syz [ 165.832154][ T8] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 165.862988][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 166.376713][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 166.401296][ T27] usb 4-1: USB disconnect, device number 7 [ 166.566702][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 166.581217][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 166.599675][ T8] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 166.618772][ T8] usb 2-1: Product: syz [ 166.623318][ T8] usb 2-1: Manufacturer: syz [ 166.648717][ T8] usb 2-1: SerialNumber: syz [ 166.668787][ T8] usb 2-1: config 0 descriptor?? [ 166.681319][ T8] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 167.227214][ T9] usb 4-1: Service connection timeout for: 256 [ 167.233797][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 167.267175][ T9] ath9k_htc: Failed to initialize the device [ 167.273993][ T27] usb 4-1: ath9k_htc: USB layer deinitialized [ 167.287305][ T8] gspca_zc3xx: reg_w_i err -71 [ 167.292232][ T8] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 167.340826][ T8] usb 2-1: USB disconnect, device number 8 [ 167.343572][ T7476] loop0: detected capacity change from 0 to 32768 [ 167.874456][ T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 168.079343][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 168.088303][ T27] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 168.116925][ T27] usb 1-1: config 179 has no interface number 0 [ 168.126481][ T27] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 168.161124][ T27] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 168.196545][ T27] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 168.226525][ T27] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 168.250941][ T27] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 168.307438][ T27] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 168.317289][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.342614][ T7482] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 169.148223][ T9] usb 1-1: USB disconnect, device number 5 [ 169.148281][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 169.163266][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 169.234346][ T7496] loop3: detected capacity change from 0 to 32768 [ 169.313465][ T7496] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 169.477219][ T7496] XFS (loop3): Ending clean mount [ 169.513002][ T7496] XFS (loop3): Quotacheck needed: Please wait. [ 169.623414][ T7496] XFS (loop3): Quotacheck: Done. [ 169.769986][ T5786] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 169.872392][ T7530] loop1: detected capacity change from 0 to 2048 [ 169.933422][ T7530] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.284340][ T7540] loop1: detected capacity change from 0 to 8192 [ 170.321559][ T7540] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 170.392493][ T7544] team0: Device gtp0 is of different type [ 170.404976][ T7540] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 170.468470][ T7540] REISERFS (device loop1): using ordered data mode [ 170.488815][ T7540] reiserfs: using flush barriers [ 170.508618][ T7540] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 170.556304][ T7540] REISERFS (device loop1): checking transaction log (loop1) [ 170.794804][ T7540] REISERFS (device loop1): Using tea hash to sort names [ 170.804762][ T7540] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 170.861778][ T7547] loop0: detected capacity change from 0 to 32768 [ 170.913210][ T7547] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 171.277450][ T7547] XFS (loop0): Ending clean mount [ 171.434985][ T5789] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 171.687103][ T7568] loop2: detected capacity change from 0 to 2048 [ 171.711681][ T7568] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.959771][ T7574] loop1: detected capacity change from 0 to 4096 [ 172.072673][ T7577] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.245630][ T7574] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 172.316945][ T7574] Remounting filesystem read-only [ 172.407207][ T7585] dummy0: entered promiscuous mode [ 172.436736][ T7585] macsec1: entered promiscuous mode [ 172.463895][ T7585] dummy0: left promiscuous mode [ 172.490815][ T5785] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 172.519682][ T5785] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 172.528910][ T5785] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 172.548661][ T5785] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 172.557064][ T5785] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 172.564384][ T5785] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 172.998179][ T7599] loop0: detected capacity change from 0 to 4096 [ 173.043032][ T7599] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 173.052892][ T7599] ntfs3: loop0: Failed to load $Extend (-22). [ 173.063021][ T7599] ntfs3: loop0: Failed to initialize $Extend. [ 173.114887][ T7599] ntfs3: loop0: ino=5, "/" directory corrupted [ 173.130304][ T7599] ntfs3: loop0: ino=5, "/" directory corrupted [ 173.359215][ T7593] loop1: detected capacity change from 0 to 32768 [ 173.570728][ T7607] loop3: detected capacity change from 0 to 4096 [ 173.646259][ T7613] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.737048][ T7614] team0: Device gtp0 is of different type [ 173.788171][ T7607] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 173.831819][ T7607] Remounting filesystem read-only [ 173.847827][ T7616] netlink: 'syz.1.666': attribute type 3 has an invalid length. [ 173.927328][ T5786] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 173.938489][ T5786] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 173.945977][ T5786] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 173.963271][ T5786] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 173.983532][ T5786] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 173.991299][ T5786] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 174.296715][ T7619] loop0: detected capacity change from 0 to 8192 [ 174.340886][ T7619] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 174.399861][ T7619] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 174.451706][ T7619] REISERFS (device loop0): using ordered data mode [ 174.492115][ T7619] reiserfs: using flush barriers [ 174.517447][ T7619] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 174.585043][ T7619] REISERFS (device loop0): checking transaction log (loop0) [ 174.631972][ T7622] loop3: detected capacity change from 0 to 32768 [ 174.707313][ T7622] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 174.806126][ T7619] REISERFS (device loop0): Using tea hash to sort names [ 174.818915][ T7622] XFS (loop3): Ending clean mount [ 174.822222][ T7619] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 174.852585][ T7622] XFS (loop3): Quotacheck needed: Please wait. [ 174.967502][ T7622] XFS (loop3): Quotacheck: Done. [ 175.081241][ T5786] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 175.570134][ T7650] loop0: detected capacity change from 0 to 128 [ 175.607320][ T7650] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 175.629221][ T7650] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 175.986183][ T7661] loop2: detected capacity change from 0 to 64 [ 176.388468][ T7670] loop2: detected capacity change from 0 to 64 [ 176.409255][ T7672] loop1: detected capacity change from 0 to 512 [ 176.462675][ T7672] EXT4-fs: Ignoring removed orlov option [ 176.475699][ T7672] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 176.498198][ T7674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.689'. [ 176.542974][ T7672] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 176.550650][ T7668] loop3: detected capacity change from 0 to 8192 [ 176.593624][ T7672] EXT4-fs (loop1): 1 orphan inode deleted [ 176.614595][ T7672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.615763][ T7668] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 176.682072][ T7668] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 176.692381][ T7668] REISERFS (device loop3): using ordered data mode [ 176.699173][ T7668] reiserfs: using flush barriers [ 176.708316][ T7668] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 176.725912][ T7668] REISERFS (device loop3): checking transaction log (loop3) [ 176.759252][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.978873][ T7668] REISERFS (device loop3): Using tea hash to sort names [ 177.003046][ T7668] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 177.250411][ T7690] loop0: detected capacity change from 0 to 512 [ 177.278250][ T7690] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 177.733483][ T7699] loop1: detected capacity change from 0 to 1024 [ 177.783625][ T7699] hfsplus: extend alloc file! (8192,512,16777719) [ 178.048933][ T7703] loop1: detected capacity change from 0 to 2048 [ 178.099106][ T7703] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.194745][ T7685] loop2: detected capacity change from 0 to 32768 [ 178.243524][ T7685] [ 178.243524][ T7685] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.243524][ T7685] [ 178.359122][ T7685] ERROR: (device loop2): diWrite: ixpxd invalid [ 178.359122][ T7685] [ 178.389255][ T7685] ERROR: (device loop2): txCommit: [ 178.389255][ T7685] [ 178.527533][ T5788] [ 178.527533][ T5788] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.527533][ T5788] [ 178.544939][ T7698] loop3: detected capacity change from 0 to 32768 [ 178.579379][ T5788] [ 178.579379][ T5788] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.579379][ T5788] [ 178.628872][ T7698] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 178.645382][ T7707] loop0: detected capacity change from 0 to 512 [ 178.660198][ T7707] EXT4-fs: Ignoring removed nobh option [ 178.737525][ T7698] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 178.752512][ T7707] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #3: comm syz.0.711: corrupted inode contents [ 178.866595][ T7707] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #3: comm syz.0.711: mark_inode_dirty error [ 178.925009][ T7707] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #3: comm syz.0.711: corrupted inode contents [ 179.007621][ T7707] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.711: mark_inode_dirty error [ 179.077531][ T7707] Quota error (device loop0): write_blk: dquota write failed [ 179.077780][ T7707] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 179.077834][ T7707] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.711: Failed to acquire dquot type 0 [ 179.107415][ T5786] ocfs2: Unmounting device (7,3) on (node local) [ 179.114982][ T7707] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.711: corrupted inode contents [ 179.131947][ T7707] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #16: comm syz.0.711: mark_inode_dirty error [ 179.138782][ T7707] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.711: corrupted inode contents [ 179.321780][ T7707] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.711: mark_inode_dirty error [ 179.327894][ T7723] loop3: detected capacity change from 0 to 1024 [ 179.347070][ T7707] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.711: corrupted inode contents [ 179.371857][ T7707] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 179.415356][ T7707] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.711: corrupted inode contents [ 179.480282][ T7707] EXT4-fs error (device loop0): ext4_truncate:4288: inode #16: comm syz.0.711: mark_inode_dirty error [ 179.507046][ T7707] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 179.509764][ T12] hfsplus: b-tree write err: -5, ino 4 [ 179.552793][ T7707] EXT4-fs (loop0): 1 truncate cleaned up [ 179.560624][ T7707] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.617048][ T7707] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.632703][ T7727] loop2: detected capacity change from 0 to 128 [ 179.670084][ T7727] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 179.726630][ T7727] hpfs: filesystem error: improperly stopped [ 179.732819][ T7727] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 179.767580][ T7727] hpfs: You really don't want any checks? You are crazy... [ 179.792667][ T7727] hpfs: hpfs_map_sector(): read error [ 179.819214][ T7727] hpfs: code page support is disabled [ 179.824903][ T7727] hpfs: hpfs_map_4sectors(): unaligned read [ 179.873504][ T7727] hpfs: hpfs_map_4sectors(): unaligned read [ 179.892432][ T7727] hpfs: filesystem error: unable to find root dir [ 179.979908][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.993504][ T28] audit: type=1326 audit(1759416610.747:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7732 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e31f8eec9 code=0x7ffc0000 [ 180.037833][ T28] audit: type=1326 audit(1759416610.747:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7732 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e31f8eec9 code=0x7ffc0000 [ 180.148488][ T28] audit: type=1326 audit(1759416610.777:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7732 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0e31f8eec9 code=0x7ffc0000 [ 180.226589][ T28] audit: type=1326 audit(1759416610.777:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7732 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e31f8eec9 code=0x7ffc0000 [ 180.248840][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.318543][ T28] audit: type=1326 audit(1759416610.777:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7732 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e31f8eec9 code=0x7ffc0000 [ 180.381027][ T28] audit: type=1326 audit(1759416610.817:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7732 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f0e31f8eec9 code=0x7ffc0000 [ 180.466472][ T28] audit: type=1326 audit(1759416611.027:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7732 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e31f8eec9 code=0x7ffc0000 [ 180.516532][ T28] audit: type=1326 audit(1759416611.027:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7732 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e31f8eec9 code=0x7ffc0000 [ 180.516659][ T8] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 180.676040][ T7731] loop1: detected capacity change from 0 to 32768 [ 180.701674][ T7731] [ 180.701674][ T7731] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.701674][ T7731] [ 180.783916][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 180.809418][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.831501][ T7731] ERROR: (device loop1): diWrite: ixpxd invalid [ 180.831501][ T7731] [ 180.864836][ T8] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 180.890744][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.896474][ T7731] ERROR: (device loop1): txCommit: [ 180.896474][ T7731] [ 180.938054][ T8] usb 1-1: config 0 descriptor?? [ 180.946231][ T7747] loop3: detected capacity change from 0 to 2048 [ 181.024394][ T7747] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.050730][ T5785] [ 181.050730][ T5785] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.050730][ T5785] [ 181.068917][ T5785] [ 181.068917][ T5785] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.068917][ T5785] [ 181.398283][ T8] bigben 0003:146B:0902.0007: unexpected rdesc, please submit for review [ 181.411740][ T7756] loop3: detected capacity change from 0 to 128 [ 181.450256][ T7756] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 181.463351][ T8] bigben 0003:146B:0902.0007: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.0-1/input0 [ 181.508007][ T7756] hpfs: filesystem error: improperly stopped [ 181.519363][ T8] bigben 0003:146B:0902.0007: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 181.521648][ T7756] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 181.549997][ T8] bigben 0003:146B:0902.0007: no output report found [ 181.558666][ T7758] loop1: detected capacity change from 0 to 512 [ 181.576533][ T7756] hpfs: You really don't want any checks? You are crazy... [ 181.584417][ T7756] hpfs: hpfs_map_sector(): read error [ 181.587694][ T7758] EXT4-fs: Ignoring removed nobh option [ 181.608210][ T7756] hpfs: code page support is disabled [ 181.613900][ T7756] hpfs: hpfs_map_4sectors(): unaligned read [ 181.627242][ T8] usb 1-1: USB disconnect, device number 6 [ 181.668063][ T7756] hpfs: hpfs_map_4sectors(): unaligned read [ 181.674141][ T7756] hpfs: filesystem error: unable to find root dir [ 181.718812][ T7758] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #3: comm syz.1.724: corrupted inode contents [ 181.725465][ T7759] fido_id[7759]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 181.792867][ T7758] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #3: comm syz.1.724: mark_inode_dirty error [ 181.837197][ T7758] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #3: comm syz.1.724: corrupted inode contents [ 181.863780][ T7758] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.724: mark_inode_dirty error [ 181.912185][ T7758] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.724: Failed to acquire dquot type 0 [ 181.959584][ T7758] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.724: corrupted inode contents [ 181.979343][ T7758] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #16: comm syz.1.724: mark_inode_dirty error [ 181.992740][ T7758] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.724: corrupted inode contents [ 182.008427][ T7758] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.724: mark_inode_dirty error [ 182.021548][ T7758] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.724: corrupted inode contents [ 182.034003][ T7758] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 182.048028][ T7758] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.724: corrupted inode contents [ 182.065216][ T7758] EXT4-fs error (device loop1): ext4_truncate:4288: inode #16: comm syz.1.724: mark_inode_dirty error [ 182.079109][ T7758] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 182.089679][ T7758] EXT4-fs (loop1): 1 truncate cleaned up [ 182.102704][ T7758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.115885][ T7758] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.191401][ T7754] loop2: detected capacity change from 0 to 32768 [ 182.225102][ T7754] JBD2: Ignoring recovery information on journal [ 182.254999][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.287938][ T7754] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 182.315745][ T7766] loop3: detected capacity change from 0 to 64 [ 182.502798][ T7754] (syz.2.733,7754,1):ocfs2_reflink_ioctl:4427 ERROR: status = -14 [ 182.622058][ T5788] ocfs2: Unmounting device (7,2) on (node local) [ 183.259086][ T7789] loop1: detected capacity change from 0 to 64 [ 183.822075][ T7803] loop3: detected capacity change from 0 to 8192 [ 183.873361][ T7803] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 183.935708][ T7803] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 183.948045][ T7803] REISERFS (device loop3): using ordered data mode [ 183.954805][ T7803] reiserfs: using flush barriers [ 183.966542][ T7803] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 183.983709][ T7803] REISERFS (device loop3): checking transaction log (loop3) [ 184.011331][ T7803] REISERFS (device loop3): Using r5 hash to sort names [ 184.075960][ T7803] reiserfs: enabling write barrier flush mode [ 184.116768][ T7803] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 184.133067][ T7803] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 184.145305][ T7803] REISERFS (device loop3): Remounting filesystem read-only [ 184.154208][ T7803] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 184.168475][ T7803] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 184.185029][ T7803] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 184.197592][ T7803] REISERFS error (device loop3): zam-7001 reiserfs_find_entry: io error [ 184.206304][ T7803] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 184.248774][ T7803] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 184.267233][ T7803] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 184.281416][ T7803] REISERFS warning (device loop3): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 184.342573][ T7814] ax25_connect(): syz.2.751 uses autobind, please contact jreuter@yaina.de [ 184.343258][ T7803] REISERFS warning (device loop3): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 184.434574][ T5786] ------------[ cut here ]------------ [ 184.440618][ T5786] kernel BUG at fs/reiserfs/journal.c:1916! [ 184.457433][ T5786] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 184.463609][ T5786] CPU: 1 PID: 5786 Comm: syz-executor Not tainted syzkaller #0 [ 184.471197][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 184.481561][ T5786] RIP: 0010:do_journal_release+0x53a/0x550 [ 184.487446][ T5786] Code: b6 ff e9 49 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c b9 fc ff ff 4c 89 ff e8 40 d3 b6 ff e9 ac fc ff ff e8 a6 7b 5f ff <0f> 0b e8 9f 7b 5f ff 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 184.507175][ T5786] RSP: 0018:ffffc9000467fb00 EFLAGS: 00010293 [ 184.513390][ T5786] RAX: ffffffff82260f4a RBX: ffff888018f8c000 RCX: ffff88802c358000 [ 184.521497][ T5786] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 184.529587][ T5786] RBP: ffffc9000467fbf8 R08: ffffc9000467fb77 R09: 0000000000000000 [ 184.537674][ T5786] R10: ffffc9000467fb40 R11: fffff520008cff6f R12: ffffc9000c0e1000 [ 184.545834][ T5786] R13: 1ffff920008cff64 R14: ffff888018f8c630 R15: 0000000000000000 [ 184.553946][ T5786] FS: 000055556262a500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 184.562921][ T5786] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.569535][ T5786] CR2: 00007f3adb9156c0 CR3: 0000000063dc5000 CR4: 00000000003506e0 [ 184.577524][ T5786] Call Trace: [ 184.580814][ T5786] [ 184.583759][ T5786] ? journal_release+0x30/0x30 [ 184.588559][ T5786] journal_release+0x1f/0x30 [ 184.593211][ T5786] reiserfs_put_super+0x222/0x480 [ 184.598464][ T5786] ? hook_inode_free_security+0xb0/0xb0 [ 184.604207][ T5786] ? reiserfs_dirty_inode+0x240/0x240 [ 184.609747][ T5786] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 184.615580][ T5786] ? reiserfs_dirty_inode+0x240/0x240 [ 184.620988][ T5786] generic_shutdown_super+0x134/0x2b0 [ 184.626430][ T5786] kill_block_super+0x44/0x90 [ 184.631438][ T5786] deactivate_locked_super+0x97/0x100 [ 184.636979][ T5786] cleanup_mnt+0x429/0x4c0 [ 184.641627][ T5786] task_work_run+0x1ce/0x250 [ 184.646358][ T5786] ? task_work_cancel+0x240/0x240 [ 184.651408][ T5786] ? exit_to_user_mode_loop+0x3b/0x110 [ 184.657091][ T5786] exit_to_user_mode_loop+0xe6/0x110 [ 184.662487][ T5786] exit_to_user_mode_prepare+0xf6/0x180 [ 184.668068][ T5786] syscall_exit_to_user_mode+0x1a/0x50 [ 184.673749][ T5786] do_syscall_64+0x61/0xb0 [ 184.678205][ T5786] ? clear_bhb_loop+0x40/0x90 [ 184.682918][ T5786] ? clear_bhb_loop+0x40/0x90 [ 184.687716][ T5786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.693732][ T5786] RIP: 0033:0x7f0e31f901f7 [ 184.698401][ T5786] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 184.718508][ T5786] RSP: 002b:00007fff473012a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 184.726960][ T5786] RAX: 0000000000000000 RBX: 00007f0e32011d7d RCX: 00007f0e31f901f7 [ 184.735002][ T5786] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff47301360 [ 184.743091][ T5786] RBP: 00007fff47301360 R08: 0000000000000000 R09: 0000000000000000 [ 184.751259][ T5786] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff473023f0 [ 184.759347][ T5786] R13: 00007f0e32011d7d R14: 000000000002d012 R15: 00007fff47302430 [ 184.767532][ T5786] [ 184.770579][ T5786] Modules linked in: [ 184.774537][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.799083][ T5786] ---[ end trace 0000000000000000 ]--- [ 184.804769][ T5786] RIP: 0010:do_journal_release+0x53a/0x550 [ 184.816175][ T5786] Code: b6 ff e9 49 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c b9 fc ff ff 4c 89 ff e8 40 d3 b6 ff e9 ac fc ff ff e8 a6 7b 5f ff <0f> 0b e8 9f 7b 5f ff 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 184.836797][ T5786] RSP: 0018:ffffc9000467fb00 EFLAGS: 00010293 [ 184.842947][ T5786] RAX: ffffffff82260f4a RBX: ffff888018f8c000 RCX: ffff88802c358000 [ 184.851627][ T5786] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 184.860046][ T5786] RBP: ffffc9000467fbf8 R08: ffffc9000467fb77 R09: 0000000000000000 [ 184.870112][ T5786] R10: ffffc9000467fb40 R11: fffff520008cff6f R12: ffffc9000c0e1000 [ 184.879545][ T5786] R13: 1ffff920008cff64 R14: ffff888018f8c630 R15: 0000000000000000 [ 184.891266][ T5786] FS: 000055556262a500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 184.900555][ T5786] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.907773][ T5786] CR2: 00007f3adadb4198 CR3: 0000000063dc5000 CR4: 00000000003506f0 [ 184.915814][ T5786] Kernel panic - not syncing: Fatal exception [ 184.922227][ T5786] Kernel Offset: disabled [ 184.926703][ T5786] Rebooting in 86400 seconds..