last executing test programs: 4.485191868s ago: executing program 0 (id=1103): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x900) 4.344347009s ago: executing program 0 (id=1106): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 4.178109311s ago: executing program 0 (id=1110): r0 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 4.130079172s ago: executing program 0 (id=1111): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl(r0, 0xfffff000, &(0x7f0000000000)) 3.149761304s ago: executing program 3 (id=1119): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000280)=0x13) 2.836879447s ago: executing program 3 (id=1123): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1, 0x6c, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="000001080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.61526665s ago: executing program 1 (id=1126): syz_mount_image$nilfs2(&(0x7f0000000480), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x1, 0xeec, &(0x7f0000001e40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000340)={{0x0, 0x0, 0x40, 0xcc2c, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {0x0, 0x0, 0x8, 0x98f, 0xffff}}) 2.232192014s ago: executing program 0 (id=1127): syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000005240), 0x1, 0x51aa, &(0x7f0000005280)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a32433, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES8, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, 0x0, 0x82400, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0xa5e438, &(0x7f0000001ac0)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="4ea4164323d0136eb525e4df0380654dda5ebcf2de4311b52a2281c85ff08dbd024f787cd68755278fc572e23916a8c3d6696a0bf0670d64b4f5a0a0e534317a2966e83ce615c95af5aecc2e04a42b3bb6c722a5849ba823ebc75abf6d4b6e5fffc844d9d095cbd2eb8a982eb3140257", @ANYRESHEX, @ANYRESHEX=0x0, @ANYRES16, @ANYBLOB="37b57cfa7d0121345c29b6064f49a0f95b88671b8e9149556e5ff3c7012f7856b6557be6b51d61efea623114a0b4b52f68387d2040dd08c5aa753b596ede3f3d637f96752310a389efcd8cf335ca9dbbbc10bda7a16342968c9ab4fd1ac65da604cd9b42d6d0dc0e895e0b2f42822f1b342f88a8d607008d20b22b776a70a07a2c53fc32be094c857279c58542b176bfbcc6c7e9808da687b44a8b21d23cc2f80050f8fd457f5a5595226d2008bcded226ab2e75d00ab5592daa23e809e04c2b370af460ae93b7efc32bf174830779058ad75290b9abb59be5f8859001e651c1d4", @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRESHEX=0x0], 0xd, 0x0, &(0x7f0000000000)) 2.163672205s ago: executing program 1 (id=1128): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getpeername(r0, 0x0, &(0x7f00000000c0)) 1.918304048s ago: executing program 2 (id=1130): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001200)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x28, 0x33, @data_frame={@msdu=@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x7}, @device_b, @device_b, @device_b, {0x7, 0x2}, @broadcast, @value={0x5, 0x1}, @value=@ver_80211n={0x0, 0x10, 0x3, 0x3}}, @a_msdu}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.877897298s ago: executing program 1 (id=1131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x14}]}]}]}, 0x2c}}, 0x0) 1.810447199s ago: executing program 2 (id=1132): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x54, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x1e]}, @NL80211_ATTR_FRAME={0x22, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x2}, @device_a, @device_a, @from_mac=@broadcast, {0x6, 0x2}, @value=@ver_80211n={0x0, 0x9, 0x2, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x0, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x40810) 1.74958859s ago: executing program 4 (id=1133): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000000c0)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xa0000000}) 1.73132303s ago: executing program 1 (id=1134): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf256c00000008000300", @ANYRES32=r2, @ANYBLOB="0800270002000100080026006c09"], 0x2c}, 0x1, 0x0, 0x0, 0x4048000}, 0x4048010) 1.672522221s ago: executing program 2 (id=1135): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000) 1.660816611s ago: executing program 4 (id=1136): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) setreuid(0x0, 0xee00) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x0, 0x20, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 1.629652701s ago: executing program 1 (id=1137): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 1.571603822s ago: executing program 2 (id=1138): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x4, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x7db, 0x6, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x1002ca, 0x5, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x7fff, 0x4000000, 0x7, 0x60, 0xe, 0x7, 0x1, 0x2001, 0x7, 0xf, 0x7, 0x10001, 0x9, 0x5, 0x8, 0x6, 0xb, 0x5, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x5, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0xfffffffd, 0x6], [0xffffffd2, 0x80000001, 0xfffc, 0x8, 0xe62, 0x80003, 0x0, 0x9, 0xc33, 0x3, 0x7, 0x804, 0x6c368000, 0x4, 0x7, 0x0, 0xe, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x7, 0x0, 0x484d, 0x4, 0x7, 0x8, 0x40, 0xc0f, 0x80000001, 0x3, 0x5, 0x1, 0x7, 0x8, 0x6, 0x7, 0x4, 0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x11e, 0x100, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x0, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x6, 0x68], [0x3, 0x1, 0x4, 0xfffffffc, 0x2, 0x7fff, 0x401, 0xfffffff7, 0x2, 0x1000, 0x7, 0x4, 0xd, 0x7, 0x6, 0xeee5, 0x5, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x8000, 0x5, 0x1ff, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x2c000, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0xff, 0x40, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x2, 0xf, 0x0, 0xfffd, 0x7, 0x6, 0x2, 0x81, 0x800, 0x2, 0x7, 0x100, 0x8, 0x0, 0x6, 0x1], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62e, 0x4, 0x8, 0x2, 0x5, 0x8, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000900, 0x5, 0x3, 0x200, 0xfff, 0x3, 0x1, 0x3c62, 0x7, 0x6, 0xe6, 0xffffffff, 0x1, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x400001, 0x0, 0x9, 0x17ce, 0x0, 0x3, 0x2, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb756, 0x2, 0xb9, 0x4, 0x50, 0x8c1, 0x5, 0x1, 0x4, 0xf, 0x100, 0x400, 0x9, 0x6, 0xff, 0x1, 0xc, 0x2]}, 0x45c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0xfffffffe, 0x298, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @remote, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) 1.529264772s ago: executing program 1 (id=1139): syz_mount_image$xfs(&(0x7f0000000100), &(0x7f00000001c0)='./file1\x00', 0x4008003, &(0x7f0000000380)={[{}, {@ikeep}, {@nouuid}, {@uqnoenforce}, {@nouuid}, {@gquota}, {@ikeep}, {@usrquota}, {@nouuid}, {}]}, 0x1, 0x97b1, &(0x7f0000001500)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendfile(r1, r0, 0x0, 0xffffffff) 1.481286823s ago: executing program 4 (id=1140): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xbffffff8, 0x6, 0x9, 0xb, 0x2, "00000000000000000200", 0x2, 0x206}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x8) 1.446360193s ago: executing program 4 (id=1141): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000700)={0x1, 0x0, 0xe, 0x15, 0x177, &(0x7f0000000300)}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0x10, 0x6, 0x948, 0x0, 0x738, 0x230, 0xf0, 0x230, 0x878, 0x878, 0x878, 0x878, 0x878, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe, 0x3f}}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x7}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private2, @loopback, @mcast2, @local, @private1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @dev, @private1, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}]}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'bond_slave_1\x00', 'gretap0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty, 0x0, 0x29}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9a8) 1.308698955s ago: executing program 4 (id=1142): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000002a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaf6, &(0x7f0000002b80)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x1f81ca7, 0x0, 0x83, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0x500, 0x10000002000003, 0x0, 0x0, 0x300}) 939.343959ms ago: executing program 3 (id=1143): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[], 0x10034) 903.84564ms ago: executing program 2 (id=1144): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 875.07515ms ago: executing program 4 (id=1145): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x3200c00, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0xa, 0xac7, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600) 745.749911ms ago: executing program 3 (id=1146): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000600)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc008e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29103"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0xee01, 0xee00) keyctl$chown(0x4, r0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0x0, 0x0) 699.010492ms ago: executing program 2 (id=1147): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc295, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x7, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x4007, 0x2, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x2a39, 0x3fb0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x5, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3df, 0x3, 0x9, 0x6, {0x8, 0x25, 0x1, 0x0, 0x0, 0xf5, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x3f, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 537.458334ms ago: executing program 3 (id=1148): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5a9, &(0x7f00000005c0)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1) open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000f800000000000001fb"], 0x200000) 253.253127ms ago: executing program 0 (id=1149): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 0s ago: executing program 3 (id=1150): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x60, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1c, 0x2, 0x0, 0x9, 0x151, 0x1}, {0x81, 0x0, 0x4, 0x499d, 0x2, 0x8}, 0x7, 0xffffffc0, 0x477}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) kernel console output (not intermixed with test programs): 52] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 73.648422][ T4555] tap0: tun_chr_ioctl cmd 1074025676 [ 73.658527][ T4555] tap0: owner set to 0 [ 73.680919][ T26] audit: type=1800 audit(1778161423.135:2): pid=4552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.114" name="file1" dev="loop1" ino=1048590 res=0 errno=0 [ 73.942495][ T4568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.118'. [ 74.052233][ T4572] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.123'. [ 74.155509][ T4577] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 74.197834][ T4577] SQUASHFS error: Failed to read block 0x0: -5 [ 74.236703][ T4581] loop2: detected capacity change from 0 to 2048 [ 74.300960][ T4584] netlink: 'syz.4.129': attribute type 1 has an invalid length. [ 74.309774][ T4584] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.129'. [ 74.330079][ T4581] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051 [ 74.330969][ T4582] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 74.393296][ T4581] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 74.398406][ T4195] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 74.636261][ T4593] set_capacity_and_notify: 1 callbacks suppressed [ 74.636278][ T4593] loop4: detected capacity change from 0 to 512 [ 74.665643][ T4202] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 74.723268][ T4593] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 74.754448][ T4593] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.133: Invalid inode bitmap blk 4 in block_group 0 [ 74.771441][ T4593] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,grpquota,noload,nobarrier,usrquota,,errors=continue. Quota mode: writeback. [ 74.801586][ T4593] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 74.974960][ T4231] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.142884][ T4611] loop4: detected capacity change from 0 to 128 [ 75.190204][ T4613] loop2: detected capacity change from 0 to 16 [ 75.229025][ T4615] loop3: detected capacity change from 0 to 256 [ 75.238496][ T4231] usb 1-1: Using ep0 maxpacket: 32 [ 75.249945][ T4613] erofs: (device loop2): mounted with root inode @ nid 36. [ 75.268852][ T4615] exfat: Deprecated parameter 'utf8' [ 75.285596][ T4615] exfat: Deprecated parameter 'namecase' [ 75.295758][ T4613] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36 [ 75.304059][ T4615] exfat: Deprecated parameter 'utf8' [ 75.312038][ T4202] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 75.312654][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 75.336847][ T4202] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.339407][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 75.366254][ T4613] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 84 of nid 36 [ 75.367372][ T4202] usb 2-1: Product: syz [ 75.378487][ T4231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.397033][ T4231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.407702][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 85 @ nid 36 [ 75.423389][ T4231] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 75.429186][ T4202] usb 2-1: Manufacturer: syz [ 75.434859][ T4613] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36 [ 75.448007][ T4202] usb 2-1: SerialNumber: syz [ 75.455339][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.465948][ T4231] usb 1-1: config 0 descriptor?? [ 75.480689][ T4615] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 75.501779][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 75.502955][ T4202] usb 2-1: config 0 descriptor?? [ 75.515871][ T4613] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 344063 of nid 36 [ 75.594762][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 75.615388][ T4622] loop4: detected capacity change from 0 to 64 [ 75.618276][ T4613] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 75.640255][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 75.653408][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 81 @ nid 36 [ 75.684246][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 75.710779][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 75.737447][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 75.748097][ T4613] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 315391 of nid 36 [ 75.765957][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 75.782001][ T4613] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 75.810294][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 75.836186][ T4613] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 307199 of nid 36 [ 75.881861][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 75.891689][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 73 @ nid 36 [ 75.915356][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 75.931007][ T4625] loop4: detected capacity change from 0 to 512 [ 75.937973][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 75.973930][ T4613] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 290815 of nid 36 [ 75.985969][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 76.027484][ T4625] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 76.050742][ T4231] koneplus 0003:1E7D:2D51.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 76.059067][ T4613] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 64 of nid 36 [ 76.085610][ T4625] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.148: bg 0: block 5: invalid block bitmap [ 76.104719][ T4625] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 76.114331][ T4625] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.148: invalid indirect mapped block 3 (level 2) [ 76.129439][ T4625] EXT4-fs (loop4): 2 truncates cleaned up [ 76.143478][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 65 @ nid 36 [ 76.153749][ T4613] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 266239 of nid 36 [ 76.164141][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 76.173427][ T4613] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 262143 of nid 36 [ 76.183656][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 76.183956][ T4625] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,dioread_nolock,grpquota,,errors=continue. Quota mode: writeback. [ 76.194781][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 76.219725][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 76.237721][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 76.247174][ T4613] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 76.257925][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 76.267129][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 76.276352][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 76.285536][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 55 @ nid 36 [ 76.295709][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 76.309094][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 76.344338][ T4634] loop3: detected capacity change from 0 to 8 [ 76.366646][ T4613] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 50 of nid 36 [ 76.377619][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 76.395956][ T4613] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 208895 of nid 36 [ 76.407293][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 76.448144][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 49 @ nid 36 [ 76.457261][ T4613] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 200703 of nid 36 [ 76.460350][ T4228] usb 2-1: USB disconnect, device number 4 [ 76.476856][ T4383] usb 1-1: USB disconnect, device number 2 [ 76.533689][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 76.600179][ T4613] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 196607 of nid 36 [ 76.611400][ T4634] SQUASHFS error: Failed to read block 0x1ec: -5 [ 76.630836][ T4634] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 76.663106][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 76.670786][ T4231] kernel write not supported for file /dsp (pid: 4231 comm: kworker/0:3) [ 76.704383][ T4640] input: syz1 as /devices/virtual/input/input5 [ 76.728218][ T4613] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 76.786451][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 76.827159][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 76.840383][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 76.852062][ T4642] device macvlan2 entered promiscuous mode [ 76.857912][ T4642] device bridge0 entered promiscuous mode [ 76.866472][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 76.885192][ T4613] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 76.920971][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 76.930937][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 76.946090][ T4613] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 76.962614][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 76.975965][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 76.994151][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 77.013626][ T4613] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 77.058435][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 77.080558][ T4652] loop0: detected capacity change from 0 to 64 [ 77.087439][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 77.118280][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 77.127939][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 77.138545][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 77.154540][ T4613] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 77.184953][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 77.202688][ T4652] Trying to free block not in datazone [ 77.208986][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 77.225020][ T4613] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 77.243953][ T4655] Trying to free block not in datazone [ 77.279007][ T4655] minix_free_inode: bit 5 already cleared [ 77.325137][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 77.340483][ T4613] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36 [ 77.351195][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 14 @ nid 36 [ 77.374392][ T4613] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36 [ 77.397793][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 77.408866][ T4613] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36 [ 77.419287][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 77.428916][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 77.438442][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 5 @ nid 36 [ 77.447429][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 77.459002][ T4613] erofs: (device loop2): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 77.475894][ T4613] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 77.490801][ T4613] attempt to access beyond end of device [ 77.490801][ T4613] loop2: rw=524288, want=312, limit=16 [ 77.509146][ T4613] attempt to access beyond end of device [ 77.509146][ T4613] loop2: rw=524288, want=1049280, limit=16 [ 77.527621][ T4613] attempt to access beyond end of device [ 77.527621][ T4613] loop2: rw=524288, want=736, limit=16 [ 77.588258][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.599827][ T4613] attempt to access beyond end of device [ 77.599827][ T4613] loop2: rw=524288, want=776, limit=16 [ 77.613393][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.639154][ T4613] attempt to access beyond end of device [ 77.639154][ T4613] loop2: rw=524288, want=848, limit=16 [ 77.658473][ T7] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 77.676665][ T4613] attempt to access beyond end of device [ 77.676665][ T4613] loop2: rw=524288, want=13478624104, limit=16 [ 77.677994][ T4672] loop1: detected capacity change from 0 to 512 [ 77.690645][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.712782][ T7] usb 4-1: config 0 descriptor?? [ 77.717978][ T4613] attempt to access beyond end of device [ 77.717978][ T4613] loop2: rw=524288, want=13478624080, limit=16 [ 77.742574][ T4613] attempt to access beyond end of device [ 77.742574][ T4613] loop2: rw=524288, want=56, limit=16 [ 77.754212][ T4613] attempt to access beyond end of device [ 77.754212][ T4613] loop2: rw=524288, want=40, limit=16 [ 77.765703][ T4613] attempt to access beyond end of device [ 77.765703][ T4613] loop2: rw=524288, want=96, limit=16 [ 77.780846][ T4672] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 77.900590][ T4672] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.168: corrupted inode contents [ 77.935887][ T4672] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #16: comm syz.1.168: mark_inode_dirty error [ 77.954218][ T4672] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.168: corrupted inode contents [ 78.007137][ T4683] loop0: detected capacity change from 0 to 512 [ 78.013930][ T4672] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.168: mark_inode_dirty error [ 78.034605][ T4672] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.168: corrupted inode contents [ 78.056323][ T4672] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 78.065916][ T4672] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.168: corrupted inode contents [ 78.079833][ T4672] EXT4-fs error (device loop1): ext4_truncate:4286: inode #16: comm syz.1.168: mark_inode_dirty error [ 78.143903][ T4672] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 78.187011][ T4672] EXT4-fs (loop1): 1 truncate cleaned up [ 78.222926][ T4672] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,block_validity,inode_readahead_blks=0x0000000000001000,resgid=0x0000000000000000,resgid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 78.260966][ T4672] ext4 filesystem being mounted at /31/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.276504][ T7] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 78.303971][ T7] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 78.332585][ T7] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 78.375566][ T7] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 78.383836][ T4692] erofs: (device loop2): mounted with root inode @ nid 36. [ 78.404452][ T7] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 78.463767][ T7] playstation 0003:054C:0DF2.0004: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 78.506932][ T4694] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 78.565760][ T4694] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.863134][ T7] playstation 0003:054C:0DF2.0004: Failed to retrieve feature with reportID 32: -71 [ 78.880700][ T7] playstation 0003:054C:0DF2.0004: Failed to retrieve DualSense firmware info: -71 [ 78.896624][ T7] playstation 0003:054C:0DF2.0004: Failed to get firmware info from DualSense [ 78.912259][ T7] playstation 0003:054C:0DF2.0004: Failed to create dualsense. [ 78.927664][ T7] playstation: probe of 0003:054C:0DF2.0004 failed with error -71 [ 78.997913][ T7] usb 4-1: USB disconnect, device number 3 [ 79.147637][ T4714] fido_id[4714]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 79.633869][ T4735] EXT4-fs (loop2): inline encryption not supported [ 79.938929][ T4735] EXT4-fs (loop2): Test dummy encryption mode enabled [ 79.995446][ T4735] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 80.032042][ T4735] System zones: 0-5 [ 80.138768][ T4735] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 80.320925][ T4770] set_capacity_and_notify: 4 callbacks suppressed [ 80.320941][ T4770] loop4: detected capacity change from 0 to 136 [ 80.519018][ T4770] Attempt to read inode for relocated directory [ 80.544901][ T4776] loop3: detected capacity change from 0 to 256 [ 80.642078][ T4739] loop1: detected capacity change from 0 to 32768 [ 80.749746][ T4776] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00007372) [ 80.796022][ T4739] JBD2: Ignoring recovery information on journal [ 80.861907][ T4739] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 80.914889][ T4739] JBD2: bad block at offset 32 [ 81.074242][ T4794] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.082028][ T4794] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.100298][ T4739] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 81.462592][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 81.493177][ T4805] loop0: detected capacity change from 0 to 1024 [ 81.585274][ T4814] loop4: detected capacity change from 0 to 256 [ 81.616824][ T4814] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.690611][ T1107] cfg80211: failed to load regulatory.db [ 81.711400][ T4814] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 81.778201][ T4230] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 81.809799][ T4814] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d) [ 81.826968][ T4235] hfsplus: b-tree write err: -5, ino 25 [ 81.850557][ T4235] hfsplus: b-tree write err: -5, ino 4 [ 81.863299][ T4235] hfsplus: b-tree write err: -5, ino 2 [ 81.877185][ T4235] hfsplus: b-tree write err: -5, ino 20 [ 82.058149][ T4230] usb 4-1: Using ep0 maxpacket: 16 [ 82.208384][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 82.289262][ T4826] loop1: detected capacity change from 0 to 2048 [ 82.392146][ T4826] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 82.408629][ T4230] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 82.418259][ T1107] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.439272][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.450821][ T4826] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 82.467795][ T4230] usb 4-1: Product: syz [ 82.474880][ T4828] loop2: detected capacity change from 0 to 764 [ 82.483910][ T4230] usb 4-1: Manufacturer: syz [ 82.488187][ T4826] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 82.502974][ T4230] usb 4-1: SerialNumber: syz [ 82.532968][ T4230] usb 4-1: config 0 descriptor?? [ 82.541977][ T4826] UDF-fs: Scanning with blocksize 512 failed [ 82.566259][ T4828] Symlink component flag not implemented [ 82.583957][ T4820] loop0: detected capacity change from 0 to 32768 [ 82.596116][ T4826] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.607859][ T4230] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 82.618468][ T4230] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 82.624105][ T4828] Symlink component flag not implemented (7) [ 82.662343][ T4820] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.225 (4820) [ 82.698936][ T1107] usb 5-1: Using ep0 maxpacket: 16 [ 82.757535][ T4820] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 82.786087][ T4820] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 82.808918][ T4820] BTRFS info (device loop0): use zstd compression, level 3 [ 82.816567][ T4820] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 82.849188][ T4820] BTRFS info (device loop0): use lzo compression, level 0 [ 82.856469][ T4820] BTRFS info (device loop0): using free space tree [ 82.878514][ T1107] usb 5-1: unable to get BOS descriptor or descriptor too short [ 82.896536][ T4820] BTRFS info (device loop0): has skinny extents [ 82.980813][ T4835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.231'. [ 82.990496][ T1107] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.999193][ T4835] netlink: 3 bytes leftover after parsing attributes in process `syz.1.231'. [ 83.002433][ T1107] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 83.023584][ T1107] usb 5-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.037258][ T1107] usb 5-1: config 1 interface 0 has no altsetting 0 [ 83.248708][ T1107] usb 5-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 83.268236][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.277761][ T1107] usb 5-1: Product: syz [ 83.288642][ T1107] usb 5-1: Manufacturer: syz [ 83.293402][ T1107] usb 5-1: SerialNumber: syz [ 83.298338][ T4230] em28xx 4-1:0.0: unknown em28xx chip ID (148) [ 83.308766][ T4820] BTRFS info (device loop0): enabling ssd optimizations [ 83.348456][ T4824] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 83.389683][ T4820] BTRFS error (device loop0): unrecognized mount option 'ÿÿ [ 83.389683][ T4820] Cß!Z“¡ë_¤œñëF@Ⱦt ÿÿ' [ 83.407497][ T26] audit: type=1800 audit(1778161432.855:3): pid=4820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.225" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 83.581294][ T1107] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input6 [ 83.649514][ T4230] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 83.660500][ T4230] em28xx 4-1:0.0: board has no eeprom [ 83.874181][ T4230] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 83.892335][ T4230] em28xx 4-1:0.0: dvb set to bulk mode. [ 83.948292][ T4230] usb 4-1: USB disconnect, device number 4 [ 83.955080][ T4230] em28xx 4-1:0.0: Disconnecting em28xx [ 84.076161][ T4274] em28xx 4-1:0.0: Binding DVB extension [ 84.249023][ T4274] em28xx 4-1:0.0: Registering input extension [ 84.279902][ T4230] em28xx 4-1:0.0: Closing input extension [ 84.338296][ T3545] bcm5974 5-1:1.0: could not read from device [ 84.361292][ T4230] em28xx 4-1:0.0: Freeing device [ 84.378162][ T23] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 84.403019][ T7] usb 5-1: USB disconnect, device number 2 [ 84.421613][ T4442] bcm5974 5-1:1.0: could not read from device [ 84.445749][ T3545] bcm5974 5-1:1.0: could not read from device [ 84.572186][ T4872] loop2: detected capacity change from 0 to 32768 [ 84.706831][ T4872] XFS (loop2): Mounting V5 Filesystem [ 84.787765][ T4884] loop3: detected capacity change from 0 to 32768 [ 84.794768][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.846585][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 84.945309][ T4884] XFS (loop3): Mounting V5 Filesystem [ 84.990612][ T4884] XFS (loop3): Ending clean mount [ 85.008178][ T4884] XFS (loop3): Quotacheck needed: Please wait. [ 85.058464][ T4872] XFS (loop2): Ending clean mount [ 85.108334][ T23] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.141837][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.141856][ T4916] capability: warning: `syz.4.249' uses deprecated v2 capabilities in a way that may be insecure [ 85.181603][ T23] usb 2-1: Product: syz [ 85.194659][ T23] usb 2-1: Manufacturer: syz [ 85.203906][ T23] usb 2-1: SerialNumber: syz [ 85.257074][ T4884] XFS (loop3): Quotacheck: Done. [ 85.268671][ T4872] XFS (loop2): Quotacheck needed: Please wait. [ 85.374562][ T4872] XFS (loop2): Quotacheck: Done. [ 85.450036][ T4196] XFS (loop3): Unmounting Filesystem [ 85.514768][ T1277] hfsplus: b-tree write err: -5, ino 25 [ 85.520903][ T1277] hfsplus: b-tree write err: -5, ino 4 [ 85.526793][ T1277] hfsplus: b-tree write err: -5, ino 2 [ 85.583492][ T1277] hfsplus: b-tree write err: -5, ino 26 [ 85.646122][ T4197] XFS (loop2): Unmounting Filesystem [ 85.745686][ T23] usb 2-1: 0:2 : does not exist [ 86.240486][ T4230] usb 2-1: USB disconnect, device number 5 [ 86.486565][ T4937] set_capacity_and_notify: 2 callbacks suppressed [ 86.486582][ T4937] loop4: detected capacity change from 0 to 8192 [ 86.555676][ T4925] loop0: detected capacity change from 0 to 32768 [ 86.614623][ T4947] loop3: detected capacity change from 0 to 4096 [ 86.723627][ T4925] XFS (loop0): Mounting V5 Filesystem [ 86.757297][ T4962] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.771298][ T4947] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 86.832913][ T4947] NILFS (loop3): mounting fs with errors [ 86.973316][ T4925] XFS (loop0): Ending clean mount [ 87.039841][ T4972] netlink: 16 bytes leftover after parsing attributes in process `syz.1.273'. [ 87.185130][ T4188] XFS (loop0): Unmounting Filesystem [ 87.207736][ T4977] program syz.4.275 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.271727][ T4980] loop1: detected capacity change from 0 to 256 [ 87.476952][ T4980] FAT-fs (loop1): Directory bread(block 64) failed [ 87.494880][ T4980] FAT-fs (loop1): Directory bread(block 65) failed [ 87.496838][ T4991] loop2: detected capacity change from 0 to 128 [ 87.505853][ T4980] FAT-fs (loop1): Directory bread(block 66) failed [ 87.548913][ T4980] FAT-fs (loop1): Directory bread(block 67) failed [ 87.555947][ T4980] FAT-fs (loop1): Directory bread(block 68) failed [ 87.562953][ T4980] FAT-fs (loop1): Directory bread(block 69) failed [ 87.567187][ T4993] loop4: detected capacity change from 0 to 256 [ 87.570213][ T4980] FAT-fs (loop1): Directory bread(block 70) failed [ 87.583619][ T4980] FAT-fs (loop1): Directory bread(block 71) failed [ 87.584669][ T4991] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 87.590763][ T4980] FAT-fs (loop1): Directory bread(block 72) failed [ 87.609703][ T4980] FAT-fs (loop1): Directory bread(block 73) failed [ 87.634487][ T4991] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 87.840363][ T4235] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 87.978390][ T4997] loop2: detected capacity change from 0 to 256 [ 88.201385][ T5006] loop0: detected capacity change from 0 to 1024 [ 88.293945][ T5006] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 88.382976][ T5014] option changes via remount are deprecated (pid=5013 comm=syz.3.291) [ 88.438211][ T4230] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 88.888427][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 88.906056][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.948189][ T4230] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 88.988514][ T4230] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 88.997618][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.049872][ T4230] usb 2-1: config 0 descriptor?? [ 89.094117][ T5010] loop4: detected capacity change from 0 to 40427 [ 89.144675][ T5010] F2FS-fs (loop4): invalid crc value [ 89.180992][ T5010] F2FS-fs (loop4): Found nat_bits in checkpoint [ 89.296769][ T5023] loop0: detected capacity change from 0 to 32768 [ 89.303571][ T4301] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 89.340866][ T5010] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 89.360556][ C1] Illegal XDP return value 16128, expect packet loss! [ 89.424957][ T5023] [ 89.424957][ T5023] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 89.424957][ T5023] [ 89.515771][ T5023] ERROR: (device loop0): diWrite: ixpxd invalid [ 89.515771][ T5023] [ 89.540305][ T5023] ERROR: (device loop0): txCommit: [ 89.540305][ T5023] [ 89.564663][ T4230] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 89.570734][ T5023] ERROR: (device loop0): diWrite: ixpxd invalid [ 89.570734][ T5023] [ 89.577736][ T4230] microsoft 0003:045E:07DA.0005: unsupported Resolution Multiplier 0 [ 89.585589][ T5023] ERROR: (device loop0): txCommit: [ 89.585589][ T5023] [ 89.599807][ T4230] microsoft 0003:045E:07DA.0005: implement() called with n (152) > 32! (kworker/1:6) [ 89.647855][ T4194] handle_bad_sector: 1 callbacks suppressed [ 89.647877][ T4194] attempt to access beyond end of device [ 89.647877][ T4194] loop4: rw=2049, want=45112, limit=40427 [ 89.699254][ T4301] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 89.706218][ T4188] [ 89.706218][ T4188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 89.706218][ T4188] [ 89.708274][ T4301] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 89.751687][ T4188] [ 89.751687][ T4188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 89.751687][ T4188] [ 89.778694][ T4230] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 89.817470][ T4230] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 89.832554][ T4230] microsoft 0003:045E:07DA.0005: no inputs found [ 89.840662][ T4230] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 89.888470][ T4230] usb 2-1: USB disconnect, device number 6 [ 89.908540][ T4301] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 89.928457][ T4301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.977197][ T4301] usb 4-1: Product: syz [ 89.981955][ T4301] usb 4-1: Manufacturer: syz [ 89.997486][ T4301] usb 4-1: SerialNumber: syz [ 90.029206][ T4301] usb 4-1: config 0 descriptor?? [ 90.066409][ T5044] fido_id[5044]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 90.070276][ T4301] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 90.344383][ T5059] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 90.423677][ T5059] EXT4-fs (loop4): 1 truncate cleaned up [ 90.445284][ T5059] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.468221][ T4383] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.573542][ T5064] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 90.606317][ T5064] REISERFS (device loop0): using ordered data mode [ 90.615089][ T5064] reiserfs: using flush barriers [ 90.631856][ T5064] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 90.671405][ T5064] REISERFS (device loop0): checking transaction log (loop0) [ 90.708653][ T4383] usb 3-1: Using ep0 maxpacket: 8 [ 90.728522][ T5069] EXT4-fs (loop1): Ignoring removed oldalloc option [ 90.737534][ T5064] REISERFS (device loop0): Using r5 hash to sort names [ 90.747019][ T5069] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 90.763797][ T5064] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 90.810580][ T5069] EXT4-fs (loop1): 1 truncate cleaned up [ 90.816346][ T5069] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,errors=continue,inode_readahead_blks=0x0000000000004000,stripe=0x0000000000000003,bsdgroups,oldalloc,,errors=continue. Quota mode: none. [ 90.840763][ T4383] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 90.852479][ T4383] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 90.865568][ T4383] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.878008][ T4383] usb 3-1: config 0 descriptor?? [ 90.939692][ T4301] gspca_sunplus: reg_r err -71 [ 90.944736][ T4301] sunplus: probe of 4-1:0.0 failed with error -71 [ 90.968671][ T4301] usb 4-1: USB disconnect, device number 5 [ 91.160591][ T4383] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 91.436075][ T5091] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 91.621008][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.669264][ T5104] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 91.671240][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.699158][ T5104] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 91.701754][ T5102] set_capacity_and_notify: 3 callbacks suppressed [ 91.701769][ T5102] loop0: detected capacity change from 0 to 2048 [ 91.720694][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.777440][ T5102] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 91.824425][ T5102] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.909514][ T23] usb 3-1: USB disconnect, device number 3 [ 92.112293][ T5112] loop3: detected capacity change from 0 to 2048 [ 92.167141][ T5112] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 92.261960][ T5112] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=./file1,noauto_da_alloc,bsddf,,errors=continue. Quota mode: writeback. [ 92.276843][ T5112] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.364050][ T5106] loop4: detected capacity change from 0 to 32768 [ 92.509244][ T5112] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 92.528866][ T5112] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 93.367296][ T5153] IPVS: ip_vs_add_dest(): server weight less than zero [ 93.968295][ T4231] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.988887][ T4230] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 94.158266][ T4383] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 94.218182][ T4231] usb 5-1: Using ep0 maxpacket: 32 [ 94.231719][ T5174] loop1: detected capacity change from 0 to 32768 [ 94.234086][ T4230] usb 1-1: Using ep0 maxpacket: 8 [ 94.244332][ T5190] netlink: 52 bytes leftover after parsing attributes in process `syz.3.368'. [ 94.296510][ T5174] JBD2: Ignoring recovery information on journal [ 94.340697][ T4231] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 94.368851][ T5174] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 94.372229][ T4231] usb 5-1: config 0 has no interface number 0 [ 94.496291][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 94.529436][ T4383] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 94.540727][ T4383] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.578797][ T4230] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 94.579643][ T4383] usb 3-1: config 0 descriptor?? [ 94.593460][ T4231] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 94.598681][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.613869][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.624988][ T4231] usb 5-1: Product: syz [ 94.634793][ T4231] usb 5-1: Manufacturer: syz [ 94.635762][ T4230] usb 1-1: Product: syz [ 94.643415][ T4231] usb 5-1: SerialNumber: syz [ 94.644501][ T5200] netlink: 'syz.3.373': attribute type 3 has an invalid length. [ 94.659743][ T4230] usb 1-1: Manufacturer: syz [ 94.664377][ T4230] usb 1-1: SerialNumber: syz [ 94.669646][ T5200] netlink: 76 bytes leftover after parsing attributes in process `syz.3.373'. [ 94.670296][ T4383] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 94.698949][ T4230] usb 1-1: config 0 descriptor?? [ 94.707726][ T4231] usb 5-1: config 0 descriptor?? [ 94.760025][ T4231] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 94.760354][ T4230] gspca_main: sq930x-2.14.0 probing 2770:930c [ 94.861147][ T5203] loop1: detected capacity change from 0 to 256 [ 94.989442][ T4231] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 95.033246][ T4231] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 95.273161][ T5214] loop1: detected capacity change from 0 to 256 [ 95.438152][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 95.467543][ T4231] usb 5-1: USB disconnect, device number 3 [ 95.478305][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 95.498993][ T4231] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 95.530617][ T4231] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 95.551822][ T4231] quatech2 5-1:0.51: device disconnected [ 95.571417][ T4383] gspca_sunplus: reg_w_riv err -71 [ 95.576693][ T4383] sunplus: probe of 3-1:0.0 failed with error -71 [ 95.612244][ T4383] usb 3-1: USB disconnect, device number 4 [ 95.648458][ T4230] gspca_sq930x: ucbus_write failed -71 [ 95.704646][ T5223] loop1: detected capacity change from 0 to 2048 [ 95.731760][ T5223] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.859277][ T23] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 95.877407][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.899548][ T4230] gspca_sq930x: Sensor ov9630 not yet treated [ 95.906963][ T4230] sq930x: probe of 1-1:0.0 failed with error -22 [ 95.925808][ T23] usb 4-1: config 0 descriptor?? [ 95.938704][ T5225] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.383'. [ 95.945935][ T4230] usb 1-1: USB disconnect, device number 3 [ 95.997542][ T23] cp210x 4-1:0.0: cp210x converter detected [ 96.000198][ T5225] netlink: zone id is out of range [ 96.027930][ T5225] netlink: zone id is out of range [ 96.033257][ T5225] netlink: zone id is out of range [ 96.039162][ T5225] netlink: zone id is out of range [ 96.044618][ T5225] netlink: zone id is out of range [ 96.051090][ T5225] netlink: zone id is out of range [ 96.056335][ T5225] netlink: zone id is out of range [ 96.067835][ T5225] netlink: zone id is out of range [ 96.074633][ T5225] netlink: zone id is out of range [ 96.174175][ T5231] loop2: detected capacity change from 0 to 256 [ 96.282384][ T5231] FAT-fs (loop2): Directory bread(block 64) failed [ 96.321031][ T5231] FAT-fs (loop2): Directory bread(block 65) failed [ 96.342897][ T5231] FAT-fs (loop2): Directory bread(block 66) failed [ 96.373787][ T5231] FAT-fs (loop2): Directory bread(block 67) failed [ 96.407094][ T5231] FAT-fs (loop2): Directory bread(block 68) failed [ 96.434188][ T23] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 96.438469][ T5231] FAT-fs (loop2): Directory bread(block 69) failed [ 96.462425][ T5231] FAT-fs (loop2): Directory bread(block 70) failed [ 96.486169][ T5231] FAT-fs (loop2): Directory bread(block 71) failed [ 96.488128][ T23] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 96.508880][ T23] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 96.516340][ T5231] FAT-fs (loop2): Directory bread(block 72) failed [ 96.527737][ T23] usb 4-1: cp210x converter now attached to ttyUSB0 [ 96.551176][ T5231] FAT-fs (loop2): Directory bread(block 73) failed [ 96.567582][ T23] usb 4-1: USB disconnect, device number 6 [ 96.632206][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 96.668591][ T23] cp210x 4-1:0.0: device disconnected [ 96.781102][ T5247] loop0: detected capacity change from 0 to 512 [ 96.927056][ T5254] capability: warning: `syz.4.395' uses 32-bit capabilities (legacy support in use) [ 96.950158][ T5247] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,errors=remount-ro,usrjquota=,sysvgroups,usrquota,. Quota mode: writeback. [ 96.967035][ T5247] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.022031][ T5247] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.393: bg 0: block 217: padding at end of block bitmap is not set [ 97.044716][ T5258] program syz.4.395 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.094176][ T5247] EXT4-fs (loop0): Remounting filesystem read-only [ 97.108749][ T5247] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 97.141382][ T5247] EXT4-fs (loop0): Remounting filesystem read-only [ 97.835329][ T5285] netlink: 10 bytes leftover after parsing attributes in process `syz.3.407'. [ 98.092841][ T5296] program syz.2.412 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.187236][ T5253] loop1: detected capacity change from 0 to 32768 [ 98.294552][ T5253] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.394 (5253) [ 98.383297][ T5253] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 98.420207][ T5253] BTRFS info (device loop1): using free space tree [ 98.445289][ T5253] BTRFS info (device loop1): has skinny extents [ 98.766414][ T5253] BTRFS info (device loop1): enabling ssd optimizations [ 99.134970][ T5332] loop3: detected capacity change from 0 to 4096 [ 99.182967][ T5287] loop0: detected capacity change from 0 to 32768 [ 99.364783][ T5332] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 99.413693][ T5300] loop2: detected capacity change from 0 to 32768 [ 99.498354][ T5287] XFS (loop0): Mounting V5 Filesystem [ 99.533239][ T5356] loop1: detected capacity change from 0 to 256 [ 99.610520][ T5332] EXT4-fs error (device loop3): ext4_empty_dir:3154: inode #12: block 80: comm syz.3.418: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 99.647119][ T5300] find_entry called with index >= next_index [ 99.715610][ T5356] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 99.735225][ T5332] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #12: comm syz.3.418: directory missing '..' [ 99.741924][ T5300] find_entry called with index >= next_index [ 99.783179][ T5287] XFS (loop0): Ending clean mount [ 99.798930][ T5300] find_entry called with index >= next_index [ 99.805397][ T5300] find_entry called with index >= next_index [ 99.887673][ T5300] find_entry called with index >= next_index [ 99.907872][ T5300] add_index: next_index = 0. Resetting! [ 99.935092][ T5300] find_entry called with index >= next_index [ 99.969519][ T5300] find_entry called with index >= next_index [ 100.002830][ T5300] find_entry called with index >= next_index [ 100.042822][ T5300] find_entry called with index >= next_index [ 100.055303][ T4188] XFS (loop0): Unmounting Filesystem [ 100.098254][ T5363] netlink: 72 bytes leftover after parsing attributes in process `syz.1.423'. [ 100.155490][ T5365] netlink: 148 bytes leftover after parsing attributes in process `syz.4.425'. [ 100.162292][ T5300] non-latin1 character 0x3ff found in JFS file name [ 100.208285][ T5300] mount with iocharset=utf8 to access [ 100.476963][ T5373] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 101.050006][ T5390] loop0: detected capacity change from 0 to 1024 [ 101.182151][ T5390] hfsplus: request for non-existent node 262144 in B*Tree [ 101.237212][ T5390] hfsplus: request for non-existent node 262144 in B*Tree [ 101.252950][ T5369] loop4: detected capacity change from 0 to 32768 [ 101.315754][ T5397] hfsplus: request for non-existent node 262144 in B*Tree [ 101.347057][ T5397] hfsplus: request for non-existent node 262144 in B*Tree [ 101.389412][ T5369] XFS (loop4): Mounting V5 Filesystem [ 101.492318][ T5369] XFS (loop4): Ending clean mount [ 101.503141][ T5369] XFS (loop4): Quotacheck needed: Please wait. [ 101.562300][ T5411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.441'. [ 101.642213][ T5369] XFS (loop4): Quotacheck: Done. [ 101.761771][ T5369] XFS (loop4): User initiated shutdown received. [ 101.782959][ T5369] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 101.840543][ T5369] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 101.968617][ T4194] XFS (loop4): Unmounting Filesystem [ 102.026981][ T5392] loop2: detected capacity change from 0 to 32768 [ 102.263924][ T5392] XFS (loop2): Mounting V5 Filesystem [ 102.413845][ T5392] XFS (loop2): Ending clean mount [ 102.423604][ T5392] XFS (loop2): Quotacheck needed: Please wait. [ 102.516605][ T5444] loop3: detected capacity change from 0 to 1764 [ 102.542372][ T5392] XFS (loop2): Quotacheck: Done. [ 102.629245][ T5444] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 102.639991][ T5392] overlayfs: unrecognized mount option "/" or missing value [ 102.731012][ T5450] loop4: detected capacity change from 0 to 256 [ 102.837389][ T4197] XFS (loop2): Unmounting Filesystem [ 103.033056][ T5456] program syz.4.458 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.551434][ T5470] loop4: detected capacity change from 0 to 4096 [ 103.667986][ T5470] EXT4-fs (loop4): inline encryption not supported [ 103.735463][ T5481] netlink: 'syz.0.469': attribute type 25 has an invalid length. [ 103.744179][ T5470] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 103.802828][ T5470] System zones: 0-5 [ 103.847832][ T5481] netlink: 'syz.0.469': attribute type 7 has an invalid length. [ 103.865338][ T5470] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,delalloc,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 103.915647][ T5481] netlink: 164 bytes leftover after parsing attributes in process `syz.0.469'. [ 103.984547][ T5474] loop3: detected capacity change from 0 to 32768 [ 104.080582][ T5474] JBD2: Ignoring recovery information on journal [ 104.215998][ T5474] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 104.370771][ T5504] overlayfs: upper fs does not support tmpfile. [ 104.411483][ T5474] OCFS2: ERROR (device loop3): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 104.411602][ T5474] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 104.461018][ T5508] loop4: detected capacity change from 0 to 128 [ 104.504368][ T5512] OCFS2: ERROR (device loop3): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 104.504421][ T5512] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 104.547113][ T5474] OCFS2: File system is now read-only. [ 104.575170][ T5508] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.610319][ T5508] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.690927][ T5508] fscrypt (loop4, inode 12): Unsupported encryption flags (0x10) [ 104.756647][ T4196] ocfs2: Unmounting device (7,3) on (node local) [ 105.265462][ T5543] tap0: tun_chr_ioctl cmd 1074025677 [ 105.283402][ T5543] tap0: linktype set to 823 [ 105.338513][ T4274] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 105.379626][ T4231] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 105.426620][ T5548] loop3: detected capacity change from 0 to 4096 [ 105.430265][ T5552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.499'. [ 105.538470][ T5548] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 105.576827][ T5548] ntfs3: loop3: Failed to load $Extend. [ 105.639072][ T4231] usb 5-1: Using ep0 maxpacket: 16 [ 105.741048][ T5561] loop0: detected capacity change from 0 to 4096 [ 105.758565][ T4274] usb 3-1: config 0 has no interfaces? [ 105.758588][ T4231] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 105.868266][ T4274] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 105.884366][ T4274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 105.902730][ T4274] usb 3-1: SerialNumber: syz [ 105.914875][ T4274] usb 3-1: config 0 descriptor?? [ 105.919573][ T4231] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 105.929280][ T4383] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 105.950431][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.964561][ T4188] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 105.966361][ T4231] usb 5-1: Product: syz [ 105.977546][ T4231] usb 5-1: Manufacturer: syz [ 105.982818][ T4231] usb 5-1: SerialNumber: syz [ 105.990926][ T4188] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 105.991826][ T4231] usb 5-1: config 0 descriptor?? [ 106.039661][ T4231] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 106.056159][ T4231] usb 5-1: Detected FT232RL [ 106.094313][ T5563] netlink: 128 bytes leftover after parsing attributes in process `syz.0.504'. [ 106.105343][ T5563] netlink: 20 bytes leftover after parsing attributes in process `syz.0.504'. [ 106.114612][ T5563] netlink: 20 bytes leftover after parsing attributes in process `syz.0.504'. [ 106.180193][ T4383] usb 4-1: Using ep0 maxpacket: 32 [ 106.191365][ T7] usb 3-1: USB disconnect, device number 5 [ 106.258253][ T4231] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 106.308630][ T4383] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.339357][ T4383] usb 4-1: config 0 has no interfaces? [ 106.352043][ T4383] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 106.377442][ T4383] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.415639][ T4383] usb 4-1: config 0 descriptor?? [ 106.425222][ T5573] loop0: detected capacity change from 0 to 16 [ 106.445120][ T5573] erofs: (device loop0): mounted with root inode @ nid 36. [ 106.461035][ T5571] loop1: detected capacity change from 0 to 8192 [ 106.467010][ T5573] attempt to access beyond end of device [ 106.467010][ T5573] loop0: rw=0, want=40, limit=16 [ 106.491715][ T5573] erofs: (device loop0): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 106.504776][ T5573] erofs: (device loop0): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 106.507186][ T5571] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 106.516845][ T5573] erofs: (device loop0): z_erofs_readahead: readahead error at page 17 @ nid 36 [ 106.535823][ T5573] erofs: (device loop0): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 106.537908][ T5571] REISERFS (device loop1): using ordered data mode [ 106.547948][ T5573] attempt to access beyond end of device [ 106.547948][ T5573] loop0: rw=524288, want=1049304, limit=16 [ 106.557624][ T4231] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 106.565581][ T5573] attempt to access beyond end of device [ 106.565581][ T5573] loop0: rw=524288, want=48, limit=16 [ 106.584663][ T5573] attempt to access beyond end of device [ 106.584663][ T5573] loop0: rw=524288, want=408, limit=16 [ 106.596353][ T5571] reiserfs: using flush barriers [ 106.602679][ T5571] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 106.627805][ T5571] REISERFS (device loop1): checking transaction log (loop1) [ 106.782223][ T4231] usb 4-1: USB disconnect, device number 7 [ 106.902144][ T1107] usb 5-1: USB disconnect, device number 4 [ 106.917187][ T5571] REISERFS (device loop1): Using r5 hash to sort names [ 106.937729][ T5571] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 106.952474][ T1107] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 106.998850][ T1107] ftdi_sio 5-1:0.0: device disconnected [ 107.194892][ T5592] reiserfs: enabling write barrier flush mode [ 107.822796][ T5596] loop2: detected capacity change from 0 to 8192 [ 107.888273][ T4230] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 107.921538][ T5596] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 107.956071][ T5596] REISERFS (device loop2): using ordered data mode [ 107.963502][ T5596] reiserfs: using flush barriers [ 107.972281][ T5596] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 108.162496][ T5596] REISERFS (device loop2): checking transaction log (loop2) [ 108.184586][ T4230] usb 5-1: Using ep0 maxpacket: 16 [ 108.233821][ T5596] REISERFS (device loop2): Using r5 hash to sort names [ 108.275746][ T5596] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 108.328609][ T4230] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.368831][ T4230] usb 5-1: config 0 interface 0 has no altsetting 0 [ 108.386366][ T4230] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 108.420407][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.447745][ T4230] usb 5-1: config 0 descriptor?? [ 108.934026][ T4230] mcp2221 0003:04D8:00DD.0006: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 109.117799][ T5647] loop2: detected capacity change from 0 to 764 [ 109.194854][ T5647] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 109.307971][ T5626] loop3: detected capacity change from 0 to 32768 [ 109.373895][ T4230] usb 5-1: USB disconnect, device number 5 [ 109.446372][ T5626] XFS (loop3): Mounting V5 Filesystem [ 109.710487][ T5670] loop1: detected capacity change from 0 to 24 [ 109.727226][ T5626] XFS (loop3): Ending clean mount [ 109.748820][ T5670] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 109.811042][ T5670] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 109.841329][ T4196] XFS (loop3): Unmounting Filesystem [ 110.194007][ T5686] netlink: 16 bytes leftover after parsing attributes in process `syz.2.552'. [ 110.763415][ T5712] loop2: detected capacity change from 0 to 128 [ 110.798129][ T5717] tipc: Started in network mode [ 110.804854][ T5715] loop0: detected capacity change from 0 to 1024 [ 110.811520][ T5717] tipc: Node identity ac14140f, cluster identity 4711 [ 110.848994][ T5717] tipc: New replicast peer: 255.255.255.255 [ 110.856547][ T5720] loop4: detected capacity change from 0 to 512 [ 110.883216][ T5715] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 110.902998][ T5717] tipc: Enabled bearer , priority 10 [ 110.952963][ T5720] EXT4-fs (loop4): Ignoring removed orlov option [ 110.967994][ T5715] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000004,norecovery,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,max_batch_time=0x00000000000001ff,mblk_io_submit,norecovery,,errors=continue. Quota mode: none. [ 110.978183][ T5720] EXT4-fs (loop4): Test dummy encryption mode enabled [ 111.135287][ T5720] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 111.230735][ T5720] EXT4-fs (loop4): 1 truncate cleaned up [ 111.236642][ T5720] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 111.665024][ T5745] loop2: detected capacity change from 0 to 128 [ 111.672668][ T5723] loop1: detected capacity change from 0 to 32768 [ 111.693810][ T5742] loop3: detected capacity change from 0 to 4096 [ 111.718825][ T5720] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 111.750389][ T5745] EXT4-fs (loop2): Ignoring removed oldalloc option [ 111.786329][ T5742] EXT4-fs (loop3): inline encryption not supported [ 111.838675][ T5742] EXT4-fs (loop3): Test dummy encryption mode enabled [ 111.848908][ T5723] (syz.1.569,5723,0):ocfs2_find_slot:468 ERROR: no free slots available! [ 111.871187][ T23] tipc: Node number set to 2886997007 [ 111.880061][ T5723] (syz.1.569,5723,1):ocfs2_mount_volume:1811 ERROR: status = -22 [ 111.911947][ T5723] (syz.1.569,5723,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 111.966476][ T5745] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c01c, mo2=0002] [ 111.985612][ T5742] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 112.035738][ T5742] System zones: 0-5 [ 112.041521][ T5745] System zones: 1-3, 19-19, 35-36 [ 112.077065][ T5742] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 112.126146][ T5745] EXT4-fs (loop2): mounted filesystem without journal. Opts: oldalloc,debug,bsdgroups,,errors=continue. Quota mode: none. [ 112.152964][ T5756] program syz.1.577 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.258594][ T5745] ext4 filesystem being mounted at /108/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.296292][ T5752] ntfs3: loop0: ino=21, fallocate(0x40) is not supported [ 112.463919][ T4188] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 112.498110][ T4188] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 112.881936][ T5776] program syz.0.585 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.334133][ T5789] set_capacity_and_notify: 1 callbacks suppressed [ 113.334150][ T5789] loop1: detected capacity change from 0 to 1024 [ 113.425312][ T5789] EXT4-fs (loop1): Ignoring removed orlov option [ 113.458249][ T4231] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 113.525519][ T5789] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 113.708406][ T4231] usb 1-1: Using ep0 maxpacket: 16 [ 113.828557][ T4231] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 113.844312][ T4231] usb 1-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 113.883146][ T4231] usb 1-1: config 0 has no interface number 0 [ 113.962837][ T5819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.602'. [ 113.981142][ T5819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 113.994508][ T5819] netlink: 'syz.1.602': attribute type 19 has an invalid length. [ 114.003520][ T5819] netlink: 'syz.1.602': attribute type 20 has an invalid length. [ 114.021385][ T5821] batman_adv: batadv0: Adding interface: macvtap1 [ 114.032729][ T5821] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.068131][ T1324] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 114.098392][ T4231] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 114.108286][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.123341][ T5821] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 114.141764][ T4231] usb 1-1: Product: syz [ 114.146091][ T4231] usb 1-1: Manufacturer: syz [ 114.154488][ T4231] usb 1-1: SerialNumber: syz [ 114.174740][ T4231] usb 1-1: config 0 descriptor?? [ 114.208547][ T5826] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 114.208547][ T5826] The task syz.2.605 (5826) triggered the difference, watch for misbehavior. [ 114.328845][ T1324] usb 4-1: Using ep0 maxpacket: 16 [ 114.450788][ T1324] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 114.463485][ T4231] usb 1-1: USB disconnect, device number 4 [ 114.476523][ T1324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.491402][ T1324] usb 4-1: config 0 descriptor?? [ 114.531575][ T1324] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 114.669246][ T5843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.612'. [ 115.211549][ T5865] netlink: 28 bytes leftover after parsing attributes in process `syz.0.621'. [ 115.225602][ T5865] netem: change failed [ 115.318845][ T5869] program syz.0.623 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.418294][ T1324] gspca_sonixj: reg_r err -71 [ 115.423384][ T1324] sonixj: probe of 4-1:0.0 failed with error -71 [ 115.441822][ T1324] usb 4-1: USB disconnect, device number 8 [ 115.565334][ T5879] loop0: detected capacity change from 0 to 256 [ 115.651118][ T5879] exfat: Deprecated parameter 'utf8' [ 115.695205][ T5883] loop2: detected capacity change from 0 to 512 [ 115.712108][ T5879] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe1018169, utbl_chksum : 0xe619d30d) [ 115.779096][ T5883] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.038940][ T5892] loop4: detected capacity change from 0 to 256 [ 116.119770][ T5892] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.168155][ T5892] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 116.230766][ T5892] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 116.583065][ T5918] loop4: detected capacity change from 0 to 1024 [ 116.632624][ T5918] EXT4-fs (loop4): inline encryption not supported [ 116.714447][ T5918] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000006,norecovery,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,grpquota,norecovery,,errors=continue. Quota mode: writeback. [ 117.109291][ T5914] loop0: detected capacity change from 0 to 32768 [ 117.119305][ T5916] loop2: detected capacity change from 0 to 32768 [ 117.239082][ T5916] XFS (loop2): Mounting V5 Filesystem [ 117.297159][ T5920] loop1: detected capacity change from 0 to 32768 [ 117.482717][ T5920] XFS (loop1): Mounting V5 Filesystem [ 117.531164][ T5924] loop4: detected capacity change from 0 to 40427 [ 117.571753][ T5916] XFS (loop2): Ending clean mount [ 117.580597][ T5916] XFS (loop2): Quotacheck needed: Please wait. [ 117.596296][ T5924] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 117.638841][ T5924] F2FS-fs (loop4): invalid crc value [ 117.646875][ T5916] XFS (loop2): Quotacheck: Done. [ 117.703682][ T5924] F2FS-fs (loop4): Found nat_bits in checkpoint [ 117.720206][ T5920] XFS (loop1): Ending clean mount [ 117.896057][ T4187] XFS (loop1): Unmounting Filesystem [ 117.898143][ T5924] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 118.019499][ T4197] XFS (loop2): Unmounting Filesystem [ 118.216804][ T4194] attempt to access beyond end of device [ 118.216804][ T4194] loop4: rw=2049, want=40976, limit=40427 [ 118.478184][ T4195] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 118.885746][ T5961] loop1: detected capacity change from 0 to 4096 [ 118.995322][ T5966] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.998881][ T5961] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 119.063207][ T5961] NILFS (loop1): mounting fs with errors [ 119.076095][ T5968] loop4: detected capacity change from 0 to 512 [ 119.271342][ T5968] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.659: inode has both inline data and extents flags [ 119.368679][ T5968] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.659: couldn't read orphan inode 15 (err -117) [ 119.397640][ T5974] loop3: detected capacity change from 0 to 8192 [ 119.415624][ T5974] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 119.422909][ T5955] loop2: detected capacity change from 0 to 32768 [ 119.446715][ T5974] REISERFS (device loop3): using ordered data mode [ 119.455889][ T5974] reiserfs: using flush barriers [ 119.465262][ T5968] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 119.488815][ T5955] [ 119.488815][ T5955] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.488815][ T5955] [ 119.497092][ T5974] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 119.517445][ T5974] REISERFS (device loop3): checking transaction log (loop3) [ 119.536154][ T5974] REISERFS (device loop3): Using r5 hash to sort names [ 119.632020][ T5974] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 119.665642][ T4197] [ 119.665642][ T4197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.665642][ T4197] [ 119.677050][ T4229] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 119.728592][ T4197] [ 119.728592][ T4197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.728592][ T4197] [ 119.885651][ T5983] loop4: detected capacity change from 0 to 8 [ 119.978170][ T4229] usb 1-1: Using ep0 maxpacket: 32 [ 120.095616][ T5987] loop2: detected capacity change from 0 to 1024 [ 120.138309][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.164398][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.208464][ T4229] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 120.262451][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.327585][ T4229] usb 1-1: config 0 descriptor?? [ 120.395075][ T4229] hub 1-1:0.0: USB hub found [ 120.622111][ T144] hfsplus: b-tree write err: -5, ino 25 [ 120.637084][ T144] hfsplus: b-tree write err: -5, ino 4 [ 120.646281][ T144] hfsplus: b-tree write err: -5, ino 2 [ 120.665151][ T144] hfsplus: b-tree write err: -5, ino 26 [ 120.725245][ T4229] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 120.812497][ T6000] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 121.038371][ T1324] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 121.048130][ T4229] usbhid 1-1:0.0: can't add hid device: -71 [ 121.054294][ T4229] usbhid: probe of 1-1:0.0 failed with error -71 [ 121.135808][ T4229] usb 1-1: USB disconnect, device number 5 [ 121.150988][ T5996] loop3: detected capacity change from 0 to 32768 [ 121.271794][ T5996] JBD2: Ignoring recovery information on journal [ 121.298291][ T1324] usb 2-1: Using ep0 maxpacket: 16 [ 121.402137][ T6003] loop2: detected capacity change from 0 to 32768 [ 121.436810][ T5996] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 121.440985][ T6003] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.674 (6003) [ 121.458270][ T1324] usb 2-1: unable to get BOS descriptor or descriptor too short [ 121.538491][ T1324] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 121.556642][ T6003] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 121.586261][ T6003] BTRFS info (device loop2): enabling auto defrag [ 121.634718][ T6003] BTRFS info (device loop2): use no compression [ 121.661549][ T6003] BTRFS info (device loop2): max_inline at 4096 [ 121.685687][ T6003] BTRFS info (device loop2): using free space tree [ 121.705138][ T4196] ocfs2: Unmounting device (7,3) on (node local) [ 121.723553][ T6003] BTRFS info (device loop2): has skinny extents [ 121.750870][ T1324] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 121.778223][ T1324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.807966][ T1324] usb 2-1: Product: syz [ 121.812860][ T1324] usb 2-1: Manufacturer: syz [ 121.828173][ T1324] usb 2-1: SerialNumber: syz [ 122.060849][ T6003] BTRFS info (device loop2): enabling ssd optimizations [ 122.111228][ T1324] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 122.156221][ T1324] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 122.325091][ T26] audit: type=1800 audit(1778161471.775:4): pid=6003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.674" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 122.335217][ T6041] sch_tbf: burst 9 is lower than device lo mtu (65550) ! [ 122.618559][ T1324] usb 2-1: USB disconnect, device number 7 [ 122.640661][ T6003] syz.2.674 (6003) used greatest stack depth: 20560 bytes left [ 122.944234][ T4264] udevd[4264]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.147493][ T6054] loop3: detected capacity change from 0 to 64 [ 123.732586][ T4196] hfs: request for non-existent node 131072 in B*Tree [ 123.778689][ T6068] loop0: detected capacity change from 0 to 64 [ 123.876320][ T6048] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 123.930911][ T6048] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 123.990488][ T6048] F2FS-fs (loop4): invalid crc value [ 124.055049][ T6048] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 124.103850][ T6080] set_capacity_and_notify: 1 callbacks suppressed [ 124.103868][ T6080] loop3: detected capacity change from 0 to 2048 [ 124.266228][ T6080] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.304350][ T6080] ext4 filesystem being mounted at /133/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 124.382504][ T6087] loop2: detected capacity change from 0 to 4096 [ 124.410486][ T6048] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 124.417678][ T6048] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 124.567262][ T6087] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 124.909183][ T4194] attempt to access beyond end of device [ 124.909183][ T4194] loop4: rw=2049, want=45104, limit=40427 [ 125.306900][ T6065] loop1: detected capacity change from 0 to 32768 [ 125.336778][ T6105] loop0: detected capacity change from 0 to 512 [ 125.400732][ T6102] loop2: detected capacity change from 0 to 4096 [ 125.519766][ T6065] XFS (loop1): Mounting V5 Filesystem [ 125.525697][ T6102] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 125.552279][ T6105] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 125.643389][ T6105] EXT4-fs (loop0): 1 truncate cleaned up [ 125.704727][ T6105] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.711942][ T6097] loop3: detected capacity change from 0 to 131072 [ 125.731370][ T6065] XFS (loop1): Ending clean mount [ 125.798953][ T6097] F2FS-fs (loop3): Test dummy encryption mode enabled [ 125.864022][ T6097] F2FS-fs (loop3): Found nat_bits in checkpoint [ 125.936896][ T6097] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 125.963281][ T4187] XFS (loop1): Unmounting Filesystem [ 126.119715][ T6102] ntfs3: loop2: ntfs3_write_inode r=1e failed, -22. [ 126.431602][ T4197] ntfs3: loop2: ntfs_evict_inode r=1e failed, -22. [ 126.437791][ T6123] loop0: detected capacity change from 0 to 4096 [ 126.470798][ T4197] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 126.521533][ T6123] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 126.694729][ T26] audit: type=1800 audit(1778161476.145:5): pid=6123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.710" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 126.877873][ T5346] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 126.884130][ T6138] loop1: detected capacity change from 0 to 64 [ 127.139368][ T5346] usb 5-1: Using ep0 maxpacket: 8 [ 127.291903][ T6155] loop2: detected capacity change from 0 to 65 [ 127.325626][ T6158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.724'. [ 127.368307][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.724'. [ 127.407297][ T6155] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 127.418600][ T5346] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 127.450637][ T5346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.479613][ T5346] usb 5-1: Product: syz [ 127.483855][ T5346] usb 5-1: Manufacturer: syz [ 127.509336][ T5346] usb 5-1: SerialNumber: syz [ 127.531856][ T5346] usb 5-1: config 0 descriptor?? [ 127.569360][ T6167] loop3: detected capacity change from 0 to 64 [ 127.610359][ T5346] gspca_main: se401-2.14.0 probing 047d:5003 [ 127.896639][ T6172] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 127.923028][ T6172] REISERFS (device loop1): using ordered data mode [ 127.957531][ T6172] reiserfs: using flush barriers [ 128.037473][ T6172] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 128.068312][ T5346] gspca_se401: Bayer format not supported! [ 128.105722][ T6172] REISERFS (device loop1): checking transaction log (loop1) [ 128.117912][ T6172] REISERFS (device loop1): Using r5 hash to sort names [ 128.138704][ T6189] erofs: (device loop3): mounted with root inode @ nid 36. [ 128.159614][ T6172] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 128.203659][ T6189] attempt to access beyond end of device [ 128.203659][ T6189] loop3: rw=0, want=40, limit=16 [ 128.245916][ T6189] attempt to access beyond end of device [ 128.245916][ T6189] loop3: rw=0, want=40, limit=16 [ 128.295319][ T5346] usb 5-1: USB disconnect, device number 6 [ 128.342656][ T6189] attempt to access beyond end of device [ 128.342656][ T6189] loop3: rw=524288, want=48, limit=16 [ 128.448290][ T6189] attempt to access beyond end of device [ 128.448290][ T6189] loop3: rw=524288, want=40, limit=16 [ 128.706587][ T6197] EXT4-fs (loop1): Ignoring removed nobh option [ 128.712912][ T6195] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 128.727658][ T6195] EXT4-fs (loop3): orphan cleanup on readonly fs [ 128.753459][ T6195] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:510: comm syz.3.743: Block bitmap for bg 0 marked uninitialized [ 128.772301][ T6195] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 128.822672][ T6195] EXT4-fs (loop3): 1 orphan inode deleted [ 128.828670][ T6195] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,jqfmt=vfsv1,lazytime,nodiscard,nobarrier,,errors=continue. Quota mode: none. [ 128.869538][ T6197] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,abort,,errors=continue. Quota mode: none. [ 128.881920][ T6197] ext4 filesystem being mounted at /155/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 128.963924][ T6195] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 128.976236][ T6197] fscrypt (loop1, inode 12): Reserved bits set in encryption policy [ 129.051209][ T6195] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: none. [ 129.130309][ T6195] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:510: comm syz.3.743: Block bitmap for bg 0 marked uninitialized [ 129.332468][ T6209] set_capacity_and_notify: 5 callbacks suppressed [ 129.332487][ T6209] loop4: detected capacity change from 0 to 8192 [ 129.497115][ T6209] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 129.518787][ T6209] REISERFS (device loop4): using ordered data mode [ 129.528284][ T6209] reiserfs: using flush barriers [ 129.559331][ T6209] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 129.641987][ T6209] REISERFS (device loop4): checking transaction log (loop4) [ 129.751085][ T6212] loop2: detected capacity change from 0 to 32768 [ 129.897149][ T6212] JBD2: Ignoring recovery information on journal [ 130.149136][ T6212] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 130.157501][ T6209] REISERFS (device loop4): Using tea hash to sort names [ 130.186151][ T6209] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 130.238292][ T6209] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 130.456504][ T6209] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 130.620868][ T4197] ocfs2: Unmounting device (7,2) on (node local) [ 131.055133][ T6269] syz.3.772 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 131.055348][ T6266] loop4: detected capacity change from 0 to 128 [ 131.150030][ T6248] loop1: detected capacity change from 0 to 32768 [ 131.187314][ T6266] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 131.268459][ T6248] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 131.283860][ T6274] netlink: 16 bytes leftover after parsing attributes in process `syz.3.773'. [ 131.291021][ T6248] JBD2: Ignoring recovery information on journal [ 131.525678][ T6248] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 131.547769][ T4194] sysv_free_block: trying to free block not in datazone [ 131.587370][ T4194] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 131.650783][ T6281] loop2: detected capacity change from 0 to 8192 [ 131.780276][ T6248] (syz.1.764,6248,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 131.784785][ T6284] loop4: detected capacity change from 0 to 1024 [ 131.804023][ T6248] (syz.1.764,6248,0):ocfs2_get_suballoc_slot_bit:2719 ERROR: read block 8589934594 failed -12 [ 131.815365][ T6248] (syz.1.764,6248,0):ocfs2_get_suballoc_slot_bit:2751 ERROR: status = -12 [ 131.824784][ T6248] (syz.1.764,6248,0):ocfs2_test_inode_bit:2833 ERROR: get alloc slot and bit failed -12 [ 131.835361][ T6248] (syz.1.764,6248,0):ocfs2_test_inode_bit:2874 ERROR: status = -12 [ 131.843986][ T6248] (syz.1.764,6248,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 131.971138][ T6284] hfsplus: xattr searching failed [ 132.050126][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 132.130178][ T154] hfsplus: bad catalog file entry [ 132.136129][ T154] hfsplus: b-tree write err: -5, ino 3 [ 132.504609][ T6279] loop3: detected capacity change from 0 to 32768 [ 132.597026][ T6305] loop4: detected capacity change from 0 to 256 [ 132.625894][ T6279] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.776 (6279) [ 132.689505][ T6279] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 132.708955][ T6305] exfat: Deprecated parameter 'utf8' [ 132.715717][ T6305] exfat: Deprecated parameter 'utf8' [ 132.722499][ T6279] BTRFS info (device loop3): allowing degraded mounts [ 132.736194][ T6305] exfat: Bad value for 'errors' [ 132.748116][ T6279] BTRFS info (device loop3): setting nodatasum [ 132.784192][ T6279] BTRFS info (device loop3): disabling tree log [ 132.818263][ T6279] BTRFS info (device loop3): using free space tree [ 132.824846][ T6279] BTRFS info (device loop3): has skinny extents [ 132.880331][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.886698][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.960223][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.790'. [ 133.186409][ T6325] loop2: detected capacity change from 0 to 4096 [ 133.351580][ T26] audit: type=1800 audit(1778161482.805:6): pid=6279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.776" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 133.450965][ T6344] loop4: detected capacity change from 0 to 256 [ 133.466511][ T6346] program syz.0.797 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.568741][ T6344] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.679051][ T26] audit: type=1800 audit(1778161483.135:7): pid=6344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.796" name="file1" dev="loop4" ino=1048634 res=0 errno=0 [ 133.720364][ T4264] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (4264) [ 133.758377][ T26] audit: type=1800 audit(1778161483.135:8): pid=6344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.796" name="file1" dev="loop4" ino=1048634 res=0 errno=0 [ 134.135711][ T6349] FAT-fs (loop4): error, invalid FAT chain (i_pos 196, last_block 8200) [ 134.225631][ T6349] FAT-fs (loop4): Filesystem has been set read-only [ 134.572690][ T6364] netlink: 'syz.4.803': attribute type 1 has an invalid length. [ 134.609445][ T6364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.803'. [ 134.945528][ T6369] set_capacity_and_notify: 1 callbacks suppressed [ 134.945545][ T6369] loop2: detected capacity change from 0 to 1024 [ 135.002505][ T6348] loop0: detected capacity change from 0 to 40427 [ 135.075017][ T6348] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 135.110741][ T6348] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 135.124662][ T6381] loop3: detected capacity change from 0 to 512 [ 135.168209][ T6348] F2FS-fs (loop0): invalid crc value [ 135.205541][ T6348] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 135.224717][ T6381] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 135.315711][ T6381] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.811: corrupted inode contents [ 135.342354][ T6381] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 135.408234][ T6381] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.811: corrupted inode contents [ 135.448620][ T6381] EXT4-fs error (device loop3): ext4_evict_inode:332: inode #15: comm syz.3.811: mark_inode_dirty error [ 135.493430][ T6381] EXT4-fs (loop3): 1 orphan inode deleted [ 135.503499][ T6381] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,journal_dev=0x00000000000000ff,bsddf,usrjquota=,resuid=0x000000000000ee01,journal_dev=0x000000000000000f,nomblk_io_submit,,errors=continue. Quota mode: none. [ 135.614729][ T6348] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 135.648132][ T6352] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 135.648178][ T6348] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 135.854661][ T6408] loop2: detected capacity change from 0 to 1024 [ 135.899404][ T6352] usb 5-1: Using ep0 maxpacket: 16 [ 136.017790][ T6408] EXT4-fs (loop2): Ignoring removed orlov option [ 136.018362][ T4188] attempt to access beyond end of device [ 136.018362][ T4188] loop0: rw=2049, want=40976, limit=40427 [ 136.036026][ T6352] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.057442][ T6413] loop1: detected capacity change from 0 to 2048 [ 136.064043][ T6352] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.075884][ T6352] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 136.108388][ T6352] usb 5-1: config 0 interface 0 has no altsetting 0 [ 136.125497][ T6352] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 136.136975][ T6413] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 136.158258][ T6352] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.184143][ T6413] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 136.197260][ T6408] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 136.223530][ T6352] usb 5-1: config 0 descriptor?? [ 136.262323][ T6413] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 136.305881][ T6413] UDF-fs: Scanning with blocksize 512 failed [ 136.396642][ T6413] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.505303][ T6408] EXT4-fs error (device loop2): __ext4_new_inode:1292: comm syz.2.820: failed to insert inode 12: doubly allocated? [ 136.576852][ T6398] loop4: detected capacity change from 0 to 2048 [ 136.697163][ T6398] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 136.750135][ T6398] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.924498][ T6432] device veth1_macvtap left promiscuous mode [ 136.981123][ T6436] device veth1_macvtap entered promiscuous mode [ 137.041186][ T6352] hid (null): unknown global tag 0xd [ 137.049527][ T6352] hid (null): invalid report_count 20617 [ 137.055320][ T6352] hid (null): unknown global tag 0xd [ 137.120534][ T6352] hid (null): unknown global tag 0xd [ 137.141894][ T6352] hid (null): unknown global tag 0xe [ 137.151661][ T6442] netlink: 16 bytes leftover after parsing attributes in process `syz.3.835'. [ 137.180017][ T6352] hid (null): unknown global tag 0xd [ 137.193991][ T6352] hid (null): unknown global tag 0xd [ 137.214043][ T6352] hid (null): unknown global tag 0xe [ 137.227246][ T6352] hid (null): unknown global tag 0xe [ 137.243195][ T6352] hid (null): invalid report_count 36403 [ 137.263492][ T6352] hid (null): unknown global tag 0xe [ 137.303720][ T6352] usb 5-1: USB disconnect, device number 7 [ 137.503449][ T6458] tap0: tun_chr_ioctl cmd 1074025677 [ 137.517504][ T6458] tap0: linktype set to 769 [ 137.618358][ T6353] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 137.664674][ T6468] loop1: detected capacity change from 0 to 128 [ 137.674602][ T6468] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.705324][ T6468] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 137.788335][ T5349] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 137.878210][ T6353] usb 4-1: Using ep0 maxpacket: 16 [ 138.000580][ T6353] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 138.013171][ T6353] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.043686][ T6353] usb 4-1: config 0 descriptor?? [ 138.089959][ T6353] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 138.105360][ T6466] loop2: detected capacity change from 0 to 40427 [ 138.139789][ T6466] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 138.147782][ T6466] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 138.156575][ T5349] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.170140][ T6466] F2FS-fs (loop2): invalid crc value [ 138.181608][ T5349] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.203976][ T6466] F2FS-fs (loop2): Found nat_bits in checkpoint [ 138.206800][ T5349] usb 1-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 138.258141][ T5349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.294624][ T5349] usb 1-1: config 0 descriptor?? [ 138.308331][ T6353] usb 4-1: Detected FT232BM [ 138.320027][ T6473] loop4: detected capacity change from 0 to 32768 [ 138.323469][ T6466] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 138.334055][ T6466] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 138.390319][ T6473] JBD2: Ignoring recovery information on journal [ 138.465113][ T6473] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 138.640093][ T4194] ocfs2: Unmounting device (7,4) on (node local) [ 138.768368][ T6353] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 138.789531][ T5349] hid (null): global environment stack underflow [ 138.798398][ T6353] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 138.807845][ T5349] hid (null): report_id 51381 is invalid [ 138.834590][ T5349] hid (null): unknown global tag 0x32 [ 138.868491][ T6353] usb 4-1: USB disconnect, device number 9 [ 138.889638][ T5349] waltop 0003:172F:0500.0008: unknown main item tag 0x0 [ 138.915316][ T5349] waltop 0003:172F:0500.0008: unknown main item tag 0x0 [ 138.927674][ T6353] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 138.946412][ T6353] ftdi_sio 4-1:0.0: device disconnected [ 138.952503][ T5349] waltop 0003:172F:0500.0008: unknown main item tag 0x0 [ 138.967079][ T5349] waltop 0003:172F:0500.0008: unknown main item tag 0x0 [ 138.976752][ T5349] waltop 0003:172F:0500.0008: unknown main item tag 0x0 [ 138.990759][ T5349] waltop 0003:172F:0500.0008: unknown main item tag 0x0 [ 138.997871][ T5349] waltop 0003:172F:0500.0008: unknown main item tag 0x0 [ 139.015586][ T5349] waltop 0003:172F:0500.0008: unexpected long global item [ 139.046630][ T5349] waltop: probe of 0003:172F:0500.0008 failed with error -22 [ 139.080089][ T5349] usb 1-1: USB disconnect, device number 6 [ 139.571433][ T6494] loop4: detected capacity change from 0 to 40427 [ 139.598592][ T6494] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 139.643402][ T6494] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 139.726536][ T6494] F2FS-fs (loop4): Found nat_bits in checkpoint [ 139.874609][ T6494] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 139.884300][ T6494] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 139.975037][ T6496] loop2: detected capacity change from 0 to 40427 [ 140.007086][ T6496] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 140.028307][ T6496] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 140.128515][ T6496] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 140.160542][ T6496] F2FS-fs (loop2): Found nat_bits in checkpoint [ 140.381695][ T6496] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 140.412477][ T6496] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 140.440900][ T6525] binder: 6523:6525 ioctl 4020ae46 7f8b357a3fc0 returned -22 [ 140.459799][ T6525] binder: 6523:6525 ioctl 4020ae46 7f8b357a3fc0 returned -22 [ 140.467850][ T6525] binder: 6523:6525 ioctl 4020ae46 7f8b357a3fc0 returned -22 [ 140.513401][ T6501] loop0: detected capacity change from 0 to 32768 [ 140.518285][ T6525] binder: 6523:6525 ioctl 4020ae46 7f8b357a3fc0 returned -22 [ 140.527449][ T6525] binder: 6523:6525 ioctl 4020ae46 7f8b357a3fc0 returned -22 [ 140.579380][ T6501] XFS: ikeep mount option is deprecated. [ 140.611576][ T6525] binder: 6523:6525 ioctl 4020ae46 7f8b357a3fc0 returned -22 [ 140.629815][ T6525] binder: 6523:6525 ioctl 4020ae46 7f8b357a3fc0 returned -22 [ 140.665563][ T6525] binder: 6523:6525 ioctl 4020ae46 7f8b357a3fc0 returned -22 [ 140.673475][ T6525] binder: 6523:6525 ioctl 4020ae46 7f8b357a3fc0 returned -22 [ 140.691430][ T6525] binder: 6523:6525 ioctl 4020ae46 7f8b357a3fc0 returned -22 [ 140.699451][ T6525] binder: 6523:6525 ioctl 4020ae46 7f8b357a3fc0 returned -22 [ 140.706968][ T6525] binder: 6523:6525 ioctl 4020ae46 7f8b357a3fc0 returned -22 [ 140.714905][ T6525] binder: 6523:6525 ioctl 4020ae46 7f8b357a3fc0 returned -22 [ 140.725532][ T6525] binder: 6523:6525 ioctl 4020ae46 7f8b357a3fc0 returned -22 [ 140.729156][ T6501] XFS (loop0): Mounting V5 Filesystem [ 140.875650][ T6501] XFS (loop0): Ending clean mount [ 141.003583][ T6545] loop3: detected capacity change from 0 to 256 [ 141.114382][ T4188] XFS (loop0): Unmounting Filesystem [ 141.136651][ T6545] FAT-fs (loop3): Directory bread(block 64) failed [ 141.174327][ T6545] FAT-fs (loop3): Directory bread(block 65) failed [ 141.195937][ T6545] FAT-fs (loop3): Directory bread(block 66) failed [ 141.218765][ T6545] FAT-fs (loop3): Directory bread(block 67) failed [ 141.272020][ T6545] FAT-fs (loop3): Directory bread(block 68) failed [ 141.318499][ T6545] FAT-fs (loop3): Directory bread(block 69) failed [ 141.331774][ T6545] FAT-fs (loop3): Directory bread(block 70) failed [ 141.376885][ T6545] FAT-fs (loop3): Directory bread(block 71) failed [ 141.397497][ T6545] FAT-fs (loop3): Directory bread(block 72) failed [ 141.427147][ T6545] FAT-fs (loop3): Directory bread(block 73) failed [ 141.996610][ T6567] loop0: detected capacity change from 0 to 512 [ 142.082030][ T6567] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 142.090424][ T6573] netlink: 36 bytes leftover after parsing attributes in process `syz.2.887'. [ 142.119376][ T6571] loop4: detected capacity change from 0 to 1024 [ 142.182731][ T6567] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.884: invalid indirect mapped block 256 (level 2) [ 142.241744][ T6567] EXT4-fs (loop0): 2 truncates cleaned up [ 142.290502][ T6571] EXT4-fs (loop4): Ignoring removed bh option [ 142.318254][ T6567] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,dioread_nolock,,errors=continue. Quota mode: writeback. [ 142.411307][ T26] audit: type=1800 audit(1778161491.865:9): pid=6567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.884" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 142.467039][ T5339] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm kworker/u4:8: bg 0: block 5: invalid block bitmap [ 142.500010][ T6571] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 142.563982][ T5339] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 142.597499][ T5339] EXT4-fs (loop0): This should not happen!! Data will be lost [ 142.597499][ T5339] [ 142.628091][ T5339] EXT4-fs (loop0): Total free blocks count 0 [ 142.647449][ T4228] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 142.655220][ T5339] EXT4-fs (loop0): Free/Dirty block details [ 142.668160][ T5339] EXT4-fs (loop0): free_blocks=0 [ 142.698145][ T5339] EXT4-fs (loop0): dirty_blocks=2 [ 142.703246][ T5339] EXT4-fs (loop0): Block reservation details [ 142.709492][ T6571] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 142.754278][ T5339] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 142.765335][ T4235] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16843019 with max blocks 1 with error 28 [ 142.784098][ T6555] loop1: detected capacity change from 0 to 32768 [ 142.810587][ T4235] EXT4-fs (loop0): This should not happen!! Data will be lost [ 142.810587][ T4235] [ 142.928192][ T4228] usb 3-1: Using ep0 maxpacket: 32 [ 143.048506][ T4228] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 143.061537][ T4228] usb 3-1: config 0 has no interface number 0 [ 143.079836][ T6555] XFS (loop1): Mounting V5 Filesystem [ 143.268219][ T4228] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 143.286943][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.324736][ T4228] usb 3-1: Product: syz [ 143.333379][ T4228] usb 3-1: Manufacturer: syz [ 143.364421][ T4228] usb 3-1: SerialNumber: syz [ 143.418846][ T4228] usb 3-1: config 0 descriptor?? [ 143.464936][ T6555] XFS (loop1): Ending clean mount [ 143.480031][ T4228] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 143.700105][ T4228] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 143.734891][ T4228] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 143.758878][ T4187] XFS (loop1): Unmounting Filesystem [ 144.172451][ T6057] usb 3-1: USB disconnect, device number 6 [ 144.198087][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 144.240440][ T6057] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 144.287864][ T6057] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 144.340974][ T6057] quatech2 3-1:0.51: device disconnected [ 144.621910][ T6619] loop0: detected capacity change from 0 to 32768 [ 144.747994][ T6632] loop1: detected capacity change from 0 to 64 [ 144.774950][ T6619] XFS (loop0): Mounting V5 Filesystem [ 145.095578][ T6619] XFS (loop0): Ending clean mount [ 145.195428][ T6646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.910'. [ 145.282040][ T4188] XFS (loop0): Unmounting Filesystem [ 145.309524][ T6650] program syz.3.912 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.997524][ T6676] loop1: detected capacity change from 0 to 1024 [ 146.118800][ T6679] ax25_connect(): syz.4.925 uses autobind, please contact jreuter@yaina.de [ 146.154205][ T6681] loop3: detected capacity change from 0 to 1024 [ 146.238628][ T6683] 9pnet: Insufficient options for proto=fd [ 146.272371][ T6683] devpts: called with bogus options [ 146.288323][ T6681] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 146.334602][ T6685] loop2: detected capacity change from 0 to 512 [ 146.359310][ T6681] EXT4-fs (loop3): orphan cleanup on readonly fs [ 146.448387][ T6681] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 146.457830][ T6681] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 146.509796][ T6681] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 146.551663][ T6685] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 146.600155][ T6685] EXT4-fs (loop2): orphan cleanup on readonly fs [ 146.653012][ T6681] EXT4-fs (loop3): 1 truncate cleaned up [ 146.674213][ T6685] Quota error (device loop2): v2_read_file_info: Free block number too big (0 >= 0). [ 146.698320][ T6681] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 146.721021][ T6696] loop4: detected capacity change from 0 to 256 [ 146.733406][ T6685] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 146.767210][ T6698] loop0: detected capacity change from 0 to 1024 [ 146.775247][ T6696] exfat: Deprecated parameter 'utf8' [ 146.784394][ T6696] exfat: Deprecated parameter 'namecase' [ 146.791300][ T6685] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 146.805212][ T6696] exfat: Deprecated parameter 'namecase' [ 146.816189][ T6685] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.927: bg 0: block 40: padding at end of block bitmap is not set [ 146.864570][ T6685] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 146.891381][ T6696] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 146.909049][ T6685] EXT4-fs (loop2): 1 truncate cleaned up [ 146.924126][ T6685] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 146.956842][ T4244] hfsplus: bad catalog file entry [ 146.966915][ T4244] hfsplus: b-tree write err: -5, ino 3 [ 147.275123][ T6688] loop1: detected capacity change from 0 to 32768 [ 147.298118][ T6685] loop2: detected capacity change from 0 to 256 [ 147.315769][ T6707] loop0: detected capacity change from 0 to 2048 [ 147.396565][ T6711] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.604097][ T6707] syz.0.937 (6707) used greatest stack depth: 20016 bytes left [ 148.426280][ T6752] loop2: detected capacity change from 0 to 1024 [ 148.563021][ T6752] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 148.715183][ T6752] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000004,norecovery,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,max_batch_time=0x00000000000001ff,mblk_io_submit,norecovery,,errors=continue. Quota mode: none. [ 148.834758][ T6722] loop4: detected capacity change from 0 to 40427 [ 148.948340][ T6722] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 148.955728][ T6722] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 149.037476][ T6722] F2FS-fs (loop4): invalid crc value [ 149.085171][ T6722] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 149.125501][ T6792] netlink: 44 bytes leftover after parsing attributes in process `syz.0.973'. [ 149.168291][ T6792] netlink: 'syz.0.973': attribute type 6 has an invalid length. [ 149.216876][ T6792] netlink: 'syz.0.973': attribute type 5 has an invalid length. [ 149.255524][ T6792] netlink: 'syz.0.973': attribute type 4 has an invalid length. [ 149.325507][ T6722] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 149.360676][ T6722] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 149.529110][ T6803] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 149.591870][ T6803] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 149.622704][ T4194] attempt to access beyond end of device [ 149.622704][ T4194] loop4: rw=2049, want=40976, limit=40427 [ 149.741237][ T6811] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 149.926093][ T6811] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 150.182568][ T6817] tap0: tun_chr_ioctl cmd 2147767519 [ 150.519495][ T6823] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 150.545175][ T6809] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 150.554583][ T6823] hfsplus: xattr searching failed [ 150.562377][ T6809] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 150.582543][ T6823] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 150.601149][ T6809] F2FS-fs (loop0): invalid crc value [ 150.696169][ T6809] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 150.961721][ T6809] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 151.002023][ T6809] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 151.628082][ T1107] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 151.808332][ T6869] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.815663][ T6869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.825365][ T6869] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.833347][ T6869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.868345][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.898724][ T1107] usb 3-1: Using ep0 maxpacket: 16 [ 152.136817][ T6878] set_capacity_and_notify: 5 callbacks suppressed [ 152.136835][ T6878] loop3: detected capacity change from 0 to 64 [ 152.179535][ T6876] tipc: Started in network mode [ 152.187666][ T6876] tipc: Node identity ac14140f, cluster identity 4711 [ 152.197967][ T6876] tipc: New replicast peer: 255.255.255.255 [ 152.218371][ T1107] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 152.224213][ T6876] tipc: Enabled bearer , priority 10 [ 152.242692][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.260355][ T1107] usb 3-1: Product: syz [ 152.268529][ T6880] kvm [6879]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010005 data 0xcd [ 152.280461][ T1107] usb 3-1: Manufacturer: syz [ 152.285726][ T1107] usb 3-1: SerialNumber: syz [ 152.306823][ T1107] usb 3-1: config 0 descriptor?? [ 152.369959][ T1107] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 152.446855][ T6888] loop1: detected capacity change from 0 to 512 [ 152.810322][ T1107] usb 3-1: clie_3_5_startup: get interface number bad return length: 0 [ 152.824098][ T1107] visor: probe of 3-1:0.0 failed with error -5 [ 152.892156][ T6893] loop3: detected capacity change from 0 to 8192 [ 153.002969][ T6901] loop4: detected capacity change from 0 to 256 [ 153.028742][ T6893] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 153.076653][ T6351] usb 3-1: USB disconnect, device number 7 [ 153.087995][ T6893] REISERFS (device loop3): using ordered data mode [ 153.095099][ T6893] reiserfs: using flush barriers [ 153.144422][ T6893] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 153.180516][ T6901] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 153.245995][ T26] audit: type=1800 audit(1778161502.695:10): pid=6901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1018" name="file1" dev="loop4" ino=1048638 res=0 errno=0 [ 153.266208][ T6901] attempt to access beyond end of device [ 153.266208][ T6901] loop4: rw=34817, want=304, limit=256 [ 153.274421][ T6893] REISERFS (device loop3): checking transaction log (loop3) [ 153.338252][ T4383] tipc: Node number set to 2886997007 [ 153.564544][ T6893] REISERFS (device loop3): Using tea hash to sort names [ 153.581237][ T6896] loop1: detected capacity change from 0 to 40427 [ 153.599102][ T6893] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 153.622824][ T6893] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 153.638117][ T6896] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 153.646374][ T6896] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 153.692915][ T6896] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 153.774707][ T6896] F2FS-fs (loop1): Found nat_bits in checkpoint [ 153.779311][ T6910] loop2: detected capacity change from 0 to 512 [ 153.864305][ T6899] loop0: detected capacity change from 0 to 40427 [ 153.899528][ T26] audit: type=1326 audit(1778161503.345:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.4.1022" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a4df9ddd9 code=0x0 [ 153.926283][ T6893] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 153.961066][ T6910] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.1021: corrupted inode contents [ 153.986921][ T6896] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 153.996132][ T6910] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #16: comm syz.2.1021: mark_inode_dirty error [ 154.001559][ T6896] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 154.035556][ T6899] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 154.048196][ T6899] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 154.074804][ T6899] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x6 [ 154.100190][ T6910] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.1021: corrupted inode contents [ 154.129208][ T6910] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.1021: mark_inode_dirty error [ 154.144260][ T6899] F2FS-fs (loop0): invalid crc value [ 154.164526][ T6899] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 154.165884][ T6910] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.1021: corrupted inode contents [ 154.256595][ T6910] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 154.283798][ T6910] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.1021: corrupted inode contents [ 154.349519][ T6899] F2FS-fs (loop0): Start checkpoint disabled! [ 154.359490][ T6910] EXT4-fs error (device loop2): ext4_truncate:4286: inode #16: comm syz.2.1021: mark_inode_dirty error [ 154.413497][ T6910] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 154.434293][ T6899] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 154.434307][ T6920] loop3: detected capacity change from 0 to 64 [ 154.445463][ T6920] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 154.455191][ T6899] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 154.458642][ T6910] EXT4-fs (loop2): 1 truncate cleaned up [ 154.540545][ T6910] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,block_validity,inode_readahead_blks=0x0000000000001000,resgid=0x0000000000000000,resgid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 154.610069][ T6910] ext4 filesystem being mounted at /181/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.715575][ T5339] attempt to access beyond end of device [ 154.715575][ T5339] loop0: rw=2049, want=45112, limit=40427 [ 155.047810][ T6932] loop1: detected capacity change from 0 to 512 [ 155.150714][ T6932] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.1030: inode has both inline data and extents flags [ 155.167099][ T6932] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1030: couldn't read orphan inode 15 (err -117) [ 155.180323][ T6932] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 156.020974][ T6948] loop3: detected capacity change from 0 to 4096 [ 156.124372][ T6948] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 156.140419][ T6946] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 156.181424][ T6946] REISERFS (device loop0): using ordered data mode [ 156.227993][ T6946] reiserfs: using flush barriers [ 156.238505][ T6940] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 156.246777][ T6940] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 156.258912][ T6940] F2FS-fs (loop2): invalid crc value [ 156.275547][ T6946] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 156.324510][ T6940] F2FS-fs (loop2): Found nat_bits in checkpoint [ 156.370149][ T6940] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 156.371779][ T6948] ntfs: volume version 3.1. [ 156.377488][ T6940] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 156.406137][ T6946] REISERFS (device loop0): checking transaction log (loop0) [ 156.423403][ T6946] REISERFS (device loop0): Using r5 hash to sort names [ 156.434080][ T6948] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 156.478621][ T6946] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 156.494856][ T6948] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 156.530823][ T6948] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 156.686878][ T6948] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set maccenteuro. You might want to try to use the mount option nls=utf8. [ 156.767098][ T6948] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 156.786219][ T26] audit: type=1326 audit(1778161506.235:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6971 comm="syz.4.1046" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a4df9ddd9 code=0x0 [ 156.847345][ T6976] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 157.091985][ T6970] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.364128][ T6969] UDF-fs: error (device loop1): udf_truncate_tail_extent: Extent after EOF in inode 1367 [ 157.780037][ T7004] set_capacity_and_notify: 3 callbacks suppressed [ 157.780055][ T7004] loop3: detected capacity change from 0 to 4096 [ 157.878389][ T7015] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1062'. [ 157.947997][ T7004] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 158.125193][ T7010] loop2: detected capacity change from 0 to 8192 [ 158.212023][ T7010] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 158.273002][ T7010] REISERFS (device loop2): using ordered data mode [ 158.309157][ T7010] reiserfs: using flush barriers [ 158.370530][ T7010] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 158.435637][ T7010] REISERFS (device loop2): checking transaction log (loop2) [ 158.742398][ T7046] Failed to get privilege flags for destination (handle=0x2:0x400) [ 158.843666][ T7010] REISERFS (device loop2): Using tea hash to sort names [ 158.874326][ T7010] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 158.913169][ T7010] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 159.202808][ T7010] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 159.273963][ T7056] loop0: detected capacity change from 0 to 512 [ 159.354713][ T7056] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 159.479220][ T7056] EXT4-fs (loop0): 1 truncate cleaned up [ 159.484902][ T7056] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.681851][ T7060] loop2: detected capacity change from 0 to 256 [ 159.758764][ T7060] exfat: Deprecated parameter 'utf8' [ 159.827222][ T7060] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 160.055402][ T7066] input: syz1 as /devices/virtual/input/input9 [ 160.094694][ T7069] loop0: detected capacity change from 0 to 128 [ 160.177288][ T7069] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 160.207449][ T7053] loop1: detected capacity change from 0 to 40427 [ 160.275700][ T7069] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 160.305062][ T7074] tap0: tun_chr_ioctl cmd 2147767511 [ 160.315745][ T7053] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 160.379073][ T7053] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 160.387786][ T7053] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x6 [ 160.452842][ T7053] F2FS-fs (loop1): invalid crc value [ 160.465724][ T7053] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 160.558620][ T154] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 160.806241][ T7053] F2FS-fs (loop1): Start checkpoint disabled! [ 160.822426][ T7053] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 160.856919][ T7053] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 161.116338][ T9] attempt to access beyond end of device [ 161.116338][ T9] loop1: rw=2049, want=45112, limit=40427 [ 161.562956][ T7095] loop2: detected capacity change from 0 to 32768 [ 161.641693][ T7095] JBD2: Ignoring recovery information on journal [ 161.663607][ T7095] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 161.672676][ T7095] JBD2: bad block at offset 32 [ 161.720582][ T7095] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 161.737505][ T7108] loop1: detected capacity change from 0 to 2048 [ 161.829689][ T7110] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 161.849585][ T4197] ocfs2: Unmounting device (7,2) on (node local) [ 162.738211][ T4228] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 162.953596][ T7151] loop3: detected capacity change from 0 to 256 [ 163.138424][ T4228] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.169061][ T4228] usb 1-1: config 0 has no interfaces? [ 163.228274][ T4228] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.268915][ T7133] loop4: detected capacity change from 0 to 131072 [ 163.277393][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.298326][ T7155] loop1: detected capacity change from 0 to 4096 [ 163.307524][ T4228] usb 1-1: config 0 descriptor?? [ 163.406058][ T7133] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 163.415223][ T7133] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 163.428663][ T7133] F2FS-fs (loop4): invalid crc value [ 163.496842][ T7133] F2FS-fs (loop4): Found nat_bits in checkpoint [ 163.549630][ T7133] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 163.556923][ T7133] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 163.645020][ T1107] usb 1-1: USB disconnect, device number 7 [ 163.883980][ T7174] loop1: detected capacity change from 0 to 4096 [ 163.984329][ T6353] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 164.011854][ T7175] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.368424][ T6353] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 164.379183][ T6353] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.416646][ T6353] usb 4-1: config 0 descriptor?? [ 164.469365][ T6353] cp210x 4-1:0.0: cp210x converter detected [ 164.617669][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1131'. [ 164.810497][ T7198] program syz.4.1136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.918231][ T6353] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 164.954082][ T6353] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 164.982872][ T6353] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 165.023638][ T6353] usb 4-1: cp210x converter now attached to ttyUSB0 [ 165.051741][ T6353] usb 4-1: USB disconnect, device number 10 [ 165.096012][ T6353] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 165.146343][ T6353] cp210x 4-1:0.0: device disconnected [ 165.217321][ T7210] loop4: detected capacity change from 0 to 2048 [ 165.257161][ T7177] loop0: detected capacity change from 0 to 32768 [ 165.312877][ T7177] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 scanned by syz.0.1127 (7177) [ 165.349128][ T7211] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.386848][ T7177] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 165.412454][ T7177] BTRFS info (device loop0): using free space tree [ 165.434320][ T7177] BTRFS info (device loop0): has skinny extents [ 165.751060][ T7228] loop4: detected capacity change from 0 to 2048 [ 165.763084][ T7206] loop1: detected capacity change from 0 to 32768 [ 165.823066][ T7206] XFS: ikeep mount option is deprecated. [ 165.829064][ T7206] XFS: ikeep mount option is deprecated. [ 165.862917][ T7177] BTRFS info (device loop0): enabling ssd optimizations [ 165.904984][ T7245] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.934011][ T7249] loop3: detected capacity change from 0 to 1024 [ 165.986857][ T7206] XFS (loop1): Mounting V5 Filesystem [ 165.994726][ T7249] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (47942!=20869) [ 166.049217][ T26] audit: type=1800 audit(1778161515.505:13): pid=7228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1145" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 166.049794][ T7251] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 166.089502][ T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 166.105410][ T7206] XFS (loop1): Ending clean mount [ 166.119798][ T7249] EXT4-fs (loop3): orphan cleanup on readonly fs [ 166.126395][ T7249] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 166.142213][ T7249] EXT4-fs (loop3): Cannot turn on quotas: error -13 [ 166.178172][ T7249] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1148: couldn't read orphan inode 12 (err -116) [ 166.183235][ T7206] XFS (loop1): Quotacheck needed: Please wait. [ 166.262555][ T7249] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 166.346039][ T7251] Remounting filesystem read-only [ 166.358298][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 166.379002][ T7245] ------------[ cut here ]------------ [ 166.384870][ T7249] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 166.385143][ T7245] WARNING: CPU: 1 PID: 7245 at fs/nilfs2/dat.c:200 nilfs_dat_commit_end+0x5ac/0x6b0 [ 166.403939][ T7245] Modules linked in: [ 166.408041][ T7245] CPU: 1 PID: 7245 Comm: segctord Not tainted syzkaller #0 [ 166.415628][ T7245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 166.426068][ T7245] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 166.432632][ T7245] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b8 54 03 00 e8 03 4c 6a fe e8 8e 94 f1 fd e9 b8 fc ff ff e8 f4 4b 6a fe <0f> 0b e9 16 fc ff ff e8 e8 4b 6a fe e8 73 94 f1 fd e9 74 fe ff ff [ 166.452526][ T7245] RSP: 0018:ffffc90004a27358 EFLAGS: 00010293 [ 166.458694][ T7245] RAX: ffffffff830ee89c RBX: ffff88802b4181a0 RCX: ffff888029710000 [ 166.467323][ T7245] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000009000002 [ 166.475655][ T7245] RBP: 0000000000000003 R08: ffff88805ef4448f R09: 1ffff1100bde8891 [ 166.483713][ T7245] R10: dffffc0000000000 R11: ffffed100bde8892 R12: ffff888029711788 [ 166.492642][ T7245] R13: ffff88805c8c7980 R14: 0000000009000002 R15: ffff8880216996b0 [ 166.500867][ T7245] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 166.509987][ T7245] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.516697][ T7245] CR2: 00007f04643d6000 CR3: 0000000074e8a000 CR4: 00000000003506e0 [ 166.525116][ T7245] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 166.533271][ T7245] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 166.541356][ T7245] Call Trace: [ 166.544668][ T7245] [ 166.547739][ T7245] nilfs_dat_commit_update+0x24/0x40 [ 166.553143][ T7245] nilfs_btree_commit_update_v+0x93/0x410 [ 166.559430][ T7245] nilfs_btree_propagate+0x95a/0xcf0 [ 166.565173][ T7245] nilfs_bmap_propagate+0x70/0x120 [ 166.570396][ T7245] nilfs_collect_file_data+0x4b/0xc0 [ 166.575917][ T7245] nilfs_segctor_apply_buffers+0x15d/0x320 [ 166.582247][ T7245] ? nilfs_segctor_end_finfo+0x5b0/0x5b0 [ 166.587920][ T7245] nilfs_segctor_scan_file+0x29f/0x9d0 [ 166.593591][ T7245] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 166.600876][ T7245] ? __might_sleep+0xf0/0xf0 [ 166.605643][ T7245] ? __wake_up_bit+0x120/0x120 [ 166.610482][ T7245] ? nilfs_sufile_mark_dirty+0x3e8/0x680 [ 166.616165][ T7245] ? nilfs_segbuf_extend_segsum+0x25d/0x360 [ 166.622426][ T7245] ? rcu_is_watching+0x11/0xa0 [ 166.627236][ T7245] nilfs_segctor_do_construct+0x1c26/0x6ca0 [ 166.633252][ T7245] ? verify_lock_unused+0x140/0x140 [ 166.638548][ T7245] ? nilfs_transaction_unlock+0x220/0x220 [ 166.644564][ T7245] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 166.650951][ T7245] ? clear_nonspinnable+0x60/0x60 [ 166.656249][ T7245] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 166.661858][ T7245] ? __lock_acquire+0x7d10/0x7d10 [ 166.666952][ T7245] ? __rwlock_init+0x140/0x140 [ 166.671791][ T7245] ? do_raw_spin_unlock+0x11d/0x230 [ 166.677036][ T7245] ? _raw_spin_unlock+0x24/0x40 [ 166.682125][ T7245] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 166.687628][ T7245] nilfs_segctor_construct+0x17b/0x690 [ 166.693196][ T7245] nilfs_segctor_thread+0x523/0x1180 [ 166.698586][ T7245] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 166.704643][ T7245] ? nilfs_iput_work_func+0x70/0x70 [ 166.709931][ T7245] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 166.716061][ T7245] ? _raw_spin_unlock+0x40/0x40 [ 166.721267][ T7245] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 166.727285][ T7245] ? init_wait_entry+0xd0/0xd0 [ 166.732142][ T7245] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 166.738100][ T7245] ? __kthread_parkme+0x157/0x1b0 [ 166.743168][ T7245] kthread+0x436/0x520 [ 166.747280][ T7245] ? nilfs_iput_work_func+0x70/0x70 [ 166.752809][ T7245] ? kthread_blkcg+0xd0/0xd0 [ 166.757478][ T7245] ret_from_fork+0x1f/0x30 [ 166.762012][ T7245] [ 166.765506][ T7245] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 166.772987][ T7245] CPU: 1 PID: 7245 Comm: segctord Not tainted syzkaller #0 [ 166.780224][ T7245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 166.790403][ T7245] Call Trace: [ 166.793730][ T7245] [ 166.796688][ T7245] dump_stack_lvl+0x188/0x250 [ 166.801410][ T7245] ? show_regs_print_info+0x20/0x20 [ 166.806640][ T7245] ? load_image+0x400/0x400 [ 166.811190][ T7245] panic+0x2e5/0x810 [ 166.815128][ T7245] ? bpf_jit_dump+0xd0/0xd0 [ 166.819734][ T7245] ? ret_from_fork+0x1f/0x30 [ 166.824361][ T7245] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 166.829769][ T7245] __warn+0x248/0x2b0 [ 166.833790][ T7245] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 166.839570][ T7245] report_bug+0x1b7/0x2e0 [ 166.844047][ T7245] handle_bug+0x3a/0x70 [ 166.848245][ T7245] exc_invalid_op+0x16/0x40 [ 166.852873][ T7245] asm_exc_invalid_op+0x16/0x20 [ 166.857784][ T7245] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 166.864122][ T7245] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b8 54 03 00 e8 03 4c 6a fe e8 8e 94 f1 fd e9 b8 fc ff ff e8 f4 4b 6a fe <0f> 0b e9 16 fc ff ff e8 e8 4b 6a fe e8 73 94 f1 fd e9 74 fe ff ff [ 166.883954][ T7245] RSP: 0018:ffffc90004a27358 EFLAGS: 00010293 [ 166.890069][ T7245] RAX: ffffffff830ee89c RBX: ffff88802b4181a0 RCX: ffff888029710000 [ 166.898163][ T7245] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000009000002 [ 166.906168][ T7245] RBP: 0000000000000003 R08: ffff88805ef4448f R09: 1ffff1100bde8891 [ 166.914263][ T7245] R10: dffffc0000000000 R11: ffffed100bde8892 R12: ffff888029711788 [ 166.922370][ T7245] R13: ffff88805c8c7980 R14: 0000000009000002 R15: ffff8880216996b0 [ 166.930499][ T7245] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 166.936009][ T7245] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 166.941456][ T7245] nilfs_dat_commit_update+0x24/0x40 [ 166.946780][ T7245] nilfs_btree_commit_update_v+0x93/0x410 [ 166.952653][ T7245] nilfs_btree_propagate+0x95a/0xcf0 [ 166.957987][ T7245] nilfs_bmap_propagate+0x70/0x120 [ 166.963139][ T7245] nilfs_collect_file_data+0x4b/0xc0 [ 166.968472][ T7245] nilfs_segctor_apply_buffers+0x15d/0x320 [ 166.974313][ T7245] ? nilfs_segctor_end_finfo+0x5b0/0x5b0 [ 166.979978][ T7245] nilfs_segctor_scan_file+0x29f/0x9d0 [ 166.985684][ T7245] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 166.992840][ T7245] ? __might_sleep+0xf0/0xf0 [ 166.997561][ T7245] ? __wake_up_bit+0x120/0x120 [ 167.002362][ T7245] ? nilfs_sufile_mark_dirty+0x3e8/0x680 [ 167.008027][ T7245] ? nilfs_segbuf_extend_segsum+0x25d/0x360 [ 167.014142][ T7245] ? rcu_is_watching+0x11/0xa0 [ 167.019110][ T7245] nilfs_segctor_do_construct+0x1c26/0x6ca0 [ 167.025088][ T7245] ? verify_lock_unused+0x140/0x140 [ 167.030325][ T7245] ? nilfs_transaction_unlock+0x220/0x220 [ 167.036075][ T7245] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 167.042271][ T7245] ? clear_nonspinnable+0x60/0x60 [ 167.047335][ T7245] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 167.052826][ T7245] ? __lock_acquire+0x7d10/0x7d10 [ 167.057880][ T7245] ? __rwlock_init+0x140/0x140 [ 167.062682][ T7245] ? do_raw_spin_unlock+0x11d/0x230 [ 167.067909][ T7245] ? _raw_spin_unlock+0x24/0x40 [ 167.073273][ T7245] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 167.078788][ T7245] nilfs_segctor_construct+0x17b/0x690 [ 167.084396][ T7245] nilfs_segctor_thread+0x523/0x1180 [ 167.089732][ T7245] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 167.095751][ T7245] ? nilfs_iput_work_func+0x70/0x70 [ 167.100956][ T7245] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 167.106970][ T7245] ? _raw_spin_unlock+0x40/0x40 [ 167.111844][ T7245] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 167.117748][ T7245] ? init_wait_entry+0xd0/0xd0 [ 167.122615][ T7245] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 167.128701][ T7245] ? __kthread_parkme+0x157/0x1b0 [ 167.134437][ T7245] kthread+0x436/0x520 [ 167.138546][ T7245] ? nilfs_iput_work_func+0x70/0x70 [ 167.143910][ T7245] ? kthread_blkcg+0xd0/0xd0 [ 167.148616][ T7245] ret_from_fork+0x1f/0x30 [ 167.153062][ T7245] [ 167.156372][ T7245] Kernel Offset: disabled [ 167.161138][ T7245] Rebooting in 86400 seconds..