last executing test programs: 5m56.127683474s ago: executing program 2 (id=3): msgget(0x3, 0x208) msgget(0x3, 0x4) 5m55.933936928s ago: executing program 2 (id=5): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000003c0)={0x300, {{0xa, 0x4e24, 0x2, @mcast2, 0xa5af}}}, 0x88) 5m55.560904275s ago: executing program 2 (id=7): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0xc, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20004094}, 0x4040) 5m55.32963011s ago: executing program 2 (id=10): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 5m54.437967657s ago: executing program 2 (id=19): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000280)="00000000020001000003be8c5e687a8a", 0x10) 5m53.582903483s ago: executing program 2 (id=29): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000040)="db00137a954e8fa665954ab3f52e4245a1f33be99a2dce534e9b8c7d28479836", 0x20}, {&(0x7f0000000240)="ac47dd0bf078a3b27f9965bb69224411a824f1d2d99beb6596a5f57f8328c1195ca58224571643c7b4900c387eab4ce54c8beab0f43550b23be7de8e0aa16227902bc0bd81343560cf89d09ea8ad73460b7157b71a96ad84b0db092cb97a748717999359bc2227db960a35975db177329b33ec86c0df3be26818c851cae1dad1b415fdd01468fb0f9bfb911a30a371ae5233eed4db521b9fed081bf4df7838e87bb52df9a25bfa509b7e853f9ab31ddf7f2fb96507d30d7d7535b34c3c03ccf17c89ad9414715359709c86f1788a824bd651157076d8b7", 0xd7}, {&(0x7f0000000340)="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", 0xf09}], 0x3) 5m53.069823913s ago: executing program 32 (id=29): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000040)="db00137a954e8fa665954ab3f52e4245a1f33be99a2dce534e9b8c7d28479836", 0x20}, {&(0x7f0000000240)="ac47dd0bf078a3b27f9965bb69224411a824f1d2d99beb6596a5f57f8328c1195ca58224571643c7b4900c387eab4ce54c8beab0f43550b23be7de8e0aa16227902bc0bd81343560cf89d09ea8ad73460b7157b71a96ad84b0db092cb97a748717999359bc2227db960a35975db177329b33ec86c0df3be26818c851cae1dad1b415fdd01468fb0f9bfb911a30a371ae5233eed4db521b9fed081bf4df7838e87bb52df9a25bfa509b7e853f9ab31ddf7f2fb96507d30d7d7535b34c3c03ccf17c89ad9414715359709c86f1788a824bd651157076d8b7", 0xd7}, {&(0x7f0000000340)="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", 0xf09}], 0x3) 4m34.474627152s ago: executing program 1 (id=886): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCGETNODEID(r0, 0x89e1, 0x0) 4m34.200898977s ago: executing program 1 (id=897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0xc, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20004094}, 0x4040) 4m34.016084561s ago: executing program 1 (id=891): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="14000b000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 4m33.652508928s ago: executing program 1 (id=894): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 4m32.993194771s ago: executing program 1 (id=904): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000600)={@mcast1, 0x800, 0x0, 0x2, 0x3, 0xfffc}, 0x20) 4m32.49491768s ago: executing program 1 (id=909): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x1, 0x50323234, 0x0, @discrete={0x7, 0x2001000}}) 4m32.141190047s ago: executing program 33 (id=909): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x1, 0x50323234, 0x0, @discrete={0x7, 0x2001000}}) 2m3.432669424s ago: executing program 5 (id=2600): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x208000}) ioctl$VT_SETMODE(r0, 0x5602, 0x0) 2m3.308748866s ago: executing program 5 (id=2602): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x3a000000, 0x5f}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 2m3.059935411s ago: executing program 5 (id=2604): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x2}, 0x4) bind$packet(r0, &(0x7f0000000640)={0x11, 0x9, 0x0, 0x1, 0x79, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 2m2.830128896s ago: executing program 5 (id=2605): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x2000002, &(0x7f0000001000)=ANY=[@ANYBLOB="766f6c756d653d3030303030303030303036332c696f636861727365743d6d6163677265656b2c696f636861727365743d6b6f69382d72752c7569643d666f726765742c756d61736b3d30303030303030303030303030303030303030303030322c6e6f7672732c6e6f7672732c66696c657365743d30303030303030303030303030303030303030342c646d6f64653d30303030303030303030303030303030303030303131362c007732be3442cd163f564b8a695afa1b16eefc0b9d590fbf9ab8391b97ea4c0cf06c797f1a493380ce6975738b912f61be3a342f9b9ee8b8bee4aa2b525fd11b2212573ec6e7f3235ad950c58d6bf8d5318071bd000000004c67990370b984f0b3bf4b8ee680536ebf6c9386b8e46872d639e0de679325aa384473cb1be572c7320000000000000000"], 0x1, 0xc2d, &(0x7f00000001c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m2.225539977s ago: executing program 5 (id=2607): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000140), 0x0}, 0x20) 2m1.645680829s ago: executing program 5 (id=2611): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x30}}, 0x44) 2m1.142375788s ago: executing program 34 (id=2611): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x30}}, 0x44) 2.402109183s ago: executing program 3 (id=3469): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) read$FUSE(r1, &(0x7f0000001240)={0x2020}, 0x2020) 2.180159077s ago: executing program 3 (id=3474): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x842}}], 0x18}}], 0x1, 0x0) 1.942925182s ago: executing program 3 (id=3476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000043000000080a05000000000000000010020000060c00034000000000000000020900020073797a32000000000900010073797a30"], 0x8c}}, 0x0) 1.760127416s ago: executing program 4 (id=3480): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000300), 0x2) 1.634510848s ago: executing program 3 (id=3481): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x14, r1, 0x341, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x14) 1.52140744s ago: executing program 4 (id=3484): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e23, 0xffffffff, @empty, 0x1}}, 0x6, 0x1c0}, 0x90) sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback, 0x80}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000000)='X', 0x1}], 0x1}}], 0x1, 0x48001) 1.368712333s ago: executing program 6 (id=3485): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000600)=""/108, 0x6c}, {&(0x7f0000000780)=""/242, 0xf2}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x3}, 0x60}], 0x1, 0x42, 0x0) 1.314267774s ago: executing program 3 (id=3487): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x20108c0, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES64, @ANYBLOB="a783c89422e31c30d6bf831c4426922089e2b8944eda733c7bed9440aee9df8636110f251ff75794e847bbad8f5979c9d55434d5344bc268e61948fc8a8ffe2d27c14972f79c1c977c01b4a8a4e35f14d116c59482add0c31e922b29fb4c24948818edc636cced878ca31c24c6a3a31bcdca27864f7611d3163d21939c3c5afb70", @ANYRESOCT], 0xfa, 0x61ee, &(0x7f0000012cc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1.250944986s ago: executing program 4 (id=3488): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000100)={0x2, 0x0, @local}, 0x0) 1.142465118s ago: executing program 0 (id=3489): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @random='\x00\x00\x00\b\x00'}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40004085}, 0x0) 1.082759719s ago: executing program 6 (id=3490): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYBLOB="ad"], 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x24000000) 1.02318285s ago: executing program 0 (id=3491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001940)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc00c084}, 0xbe26137d5f25bcde) 975.012341ms ago: executing program 4 (id=3492): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = syz_open_dev$sg(&(0x7f0000000100), 0xf3c, 0x22041) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @buffer={0x20, 0x0, 0x0}, &(0x7f0000000040)="587a9a0c5865", 0x0, 0x1ff, 0x19, 0x0, 0x0}) 857.469503ms ago: executing program 6 (id=3493): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup\x00', 0x0, 0x2) getdents64(r0, &(0x7f0000002300)=""/251, 0x1d) getdents(r0, 0x0, 0x58) 802.858244ms ago: executing program 0 (id=3494): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 684.250236ms ago: executing program 6 (id=3495): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xfb7f000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 684.165887ms ago: executing program 4 (id=3496): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 537.702069ms ago: executing program 4 (id=3497): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$ptp(r0, 0x0, 0x0) 496.92994ms ago: executing program 0 (id=3498): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb}, 0xc) 317.531084ms ago: executing program 6 (id=3499): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x30}}}) 198.871136ms ago: executing program 0 (id=3500): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 198.588516ms ago: executing program 3 (id=3501): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000b00)={'pcl711\x00', [0x4f2f, 0x0, 0x10000, 0x4, 0x7, 0x5, 0x4, 0x7, 0x54c6cff3, 0x30d, 0x2, 0x1, 0x1, 0xffffffff, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e58, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) 107.801458ms ago: executing program 6 (id=3502): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file2\x00', 0x8000, &(0x7f0000000080)=ANY=[], 0x1, 0x248, &(0x7f0000000cc0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 0s ago: executing program 0 (id=3503): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0xfff, @loopback, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000080)=0xffdffffe, 0x4) kernel console output (not intermixed with test programs): 5.154584][ T5870] usb 1-1: selecting invalid altsetting 1 [ 335.156433][T12326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.180184][T12326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.208957][T12326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.227096][T12326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.256016][T12326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.282913][T12326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.313428][T12326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.335981][T12326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.378582][T12443] usb 4-1: Using ep0 maxpacket: 16 [ 335.396588][T12443] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.414098][ T5870] gspca_stk014: init reg: 0x00 [ 335.420904][T12326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.429592][ T5870] stk014: probe of 1-1:0.205 failed with error -5 [ 335.437065][T12443] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.465207][T12326] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.484641][T12443] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 335.496025][T12326] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.504808][T12326] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.514377][T12443] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.535172][T12443] usb 4-1: config 0 descriptor?? [ 335.541205][T12326] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.699641][ T5790] usb 1-1: USB disconnect, device number 12 [ 335.784984][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.816148][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.914978][ T3545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.949518][ T3545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.000138][T12443] konepure 0003:1E7D:2DB4.0011: unknown main item tag 0x0 [ 336.030319][T12443] konepure 0003:1E7D:2DB4.0011: unknown main item tag 0x0 [ 336.068004][T12443] konepure 0003:1E7D:2DB4.0011: unknown main item tag 0x0 [ 336.075228][T12443] konepure 0003:1E7D:2DB4.0011: unknown main item tag 0x0 [ 336.117266][T12443] konepure 0003:1E7D:2DB4.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.3-1/input0 [ 336.358396][T12443] usb 4-1: USB disconnect, device number 20 [ 336.544148][T12639] hugetlbfs: Bad value 'O' for mount option 'nr_inodes' [ 336.544148][T12639] [ 337.032448][T12652] loop6: detected capacity change from 0 to 1024 [ 337.162305][T12652] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=802c018, mo2=0002] [ 337.191564][T12654] loop3: detected capacity change from 0 to 1764 [ 337.205134][T12652] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.299471][T12654] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 337.417173][ T28] audit: type=1800 audit(1757613279.463:75): pid=12652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2702" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 337.565201][T12635] loop0: detected capacity change from 0 to 32768 [ 337.580867][T12326] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.616121][T12635] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2696 (12635) [ 337.626663][ T28] audit: type=1326 audit(1757613279.683:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="syz.3.2706" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3300f8eba9 code=0x0 [ 337.760428][T12635] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 337.798672][T12635] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 337.820911][T12635] BTRFS info (device loop0): metadata ratio 2 [ 337.835126][T12635] BTRFS info (device loop0): allowing degraded mounts [ 337.851681][T12635] BTRFS info (device loop0): force zlib compression, level 3 [ 337.882861][T12635] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 337.882971][T12635] BTRFS info (device loop0): use zstd compression, level 3 [ 337.882996][T12635] BTRFS info (device loop0): force clearing of disk cache [ 337.883064][T12635] BTRFS info (device loop0): max_inline at 0 [ 337.883084][T12635] BTRFS info (device loop0): using free space tree [ 338.096227][T12635] BTRFS info (device loop0): enabling ssd optimizations [ 338.109506][T12635] BTRFS info (device loop0): rebuilding free space tree [ 338.282741][ T5786] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 338.437276][ T5851] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 338.705908][ T5851] usb 7-1: Using ep0 maxpacket: 16 [ 338.713411][ T5851] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 338.746688][ T5851] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 338.764414][ T5851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.861676][ T5851] usb 7-1: config 0 descriptor?? [ 339.323166][ T5851] lua 0003:1E7D:2C2E.0012: global environment stack underflow [ 339.366623][ T5851] lua 0003:1E7D:2C2E.0012: item 0 4 1 11 parsing failed [ 339.374451][ T5851] lua 0003:1E7D:2C2E.0012: parse failed [ 339.416515][ T5851] lua: probe of 0003:1E7D:2C2E.0012 failed with error -22 [ 339.531276][ T5851] usb 7-1: USB disconnect, device number 2 [ 339.694736][T12734] __nla_validate_parse: 15 callbacks suppressed [ 339.694755][T12734] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2721'. [ 339.722154][T12734] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2721'. [ 339.936412][ T1188] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 340.135861][ T1188] usb 5-1: Using ep0 maxpacket: 32 [ 340.146086][ T1188] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 340.170388][ T1188] usb 5-1: config 0 has no interface number 0 [ 340.195141][ T1188] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 340.235620][ T1188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.268530][T12752] loop0: detected capacity change from 0 to 64 [ 340.278929][ T1188] usb 5-1: Product: syz [ 340.283174][ T1188] usb 5-1: Manufacturer: syz [ 340.296095][ T1188] usb 5-1: SerialNumber: syz [ 340.339094][ T1188] usb 5-1: config 0 descriptor?? [ 340.798729][ T1188] radio-si470x 5-1:0.35: DeviceID=0x9242 ChipID=0x0000 [ 340.809562][ T1188] radio-si470x 5-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 340.865568][T12768] vlan2: entered promiscuous mode [ 340.878432][T12768] macvtap0: entered promiscuous mode [ 341.003282][ T1188] radio-si470x 5-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 341.034102][ T1188] radio-si470x 5-1:0.35: si470x_get_scratch: si470x_get_report returned -71 [ 341.058340][ T1188] radio-si470x: probe of 5-1:0.35 failed with error -5 [ 341.117569][ T1188] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 341.178512][ T1188] usb 5-1: USB disconnect, device number 15 [ 341.739142][ T28] audit: type=1326 audit(1757613283.803:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12789 comm="syz.4.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facbc98eba9 code=0x7ffc0000 [ 341.785606][ T28] audit: type=1326 audit(1757613283.823:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12789 comm="syz.4.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facbc98eba9 code=0x7ffc0000 [ 341.819879][ T28] audit: type=1326 audit(1757613283.833:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12789 comm="syz.4.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7facbc98d510 code=0x7ffc0000 [ 341.851333][ T28] audit: type=1326 audit(1757613283.833:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12789 comm="syz.4.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7facbc98d510 code=0x7ffc0000 [ 341.906589][ T28] audit: type=1326 audit(1757613283.843:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12789 comm="syz.4.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facbc98eba9 code=0x7ffc0000 [ 341.931150][T12792] loop3: detected capacity change from 0 to 2048 [ 342.008664][T12792] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 342.021043][ T28] audit: type=1326 audit(1757613283.843:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12789 comm="syz.4.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facbc98eba9 code=0x7ffc0000 [ 342.119069][T12792] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 342.125593][ T28] audit: type=1326 audit(1757613283.863:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12789 comm="syz.4.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7facbc98eba9 code=0x7ffc0000 [ 342.204046][ T28] audit: type=1326 audit(1757613283.863:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12789 comm="syz.4.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facbc98eba9 code=0x7ffc0000 [ 342.253256][T12802] loop0: detected capacity change from 0 to 512 [ 342.320150][T12805] loop4: detected capacity change from 0 to 512 [ 342.327671][T12805] EXT4-fs: Ignoring removed bh option [ 342.359413][T12805] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 342.393323][T12802] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 342.409894][T12805] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 342.450294][ T28] audit: type=1326 audit(1757613284.503:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12807 comm="syz.6.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c458eba9 code=0x50000 [ 342.451627][T12802] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 342.487549][T12805] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 342.488711][T12802] EXT4-fs (loop0): 1 truncate cleaned up [ 342.533285][T12802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.548047][ T28] audit: type=1326 audit(1757613284.503:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12807 comm="syz.6.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c458eba9 code=0x50000 [ 342.596064][T12805] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 342.625601][T12805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.657010][T12802] EXT4-fs: group quota file already specified [ 342.819179][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.910407][ T5946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.324258][T12827] loop6: detected capacity change from 0 to 2048 [ 343.352120][T12833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2754'. [ 343.371239][T12833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2754'. [ 343.413647][T12827] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 343.438196][T12833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2754'. [ 343.464262][T12833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2754'. [ 343.495117][T12833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2754'. [ 343.532643][T12833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2754'. [ 343.553387][T12833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2754'. [ 343.577011][T12833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2754'. [ 343.846980][T12839] loop4: detected capacity change from 0 to 512 [ 343.912556][T12839] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 343.922039][T12839] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 343.967428][T12839] EXT4-fs (loop4): 1 truncate cleaned up [ 343.974516][T12839] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.036565][T12845] netlink: 'syz.0.2759': attribute type 27 has an invalid length. [ 344.087276][T12839] EXT4-fs: group quota file already specified [ 344.228096][ T5946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.390658][T12835] loop3: detected capacity change from 0 to 32768 [ 344.586881][T12844] loop6: detected capacity change from 0 to 32768 [ 344.596260][ T23] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 344.622370][T12844] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 344.646440][T12844] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 344.789957][ T23] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 344.812747][ T23] usb 1-1: config 0 has no interface number 0 [ 344.830457][ T23] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 344.882945][ T23] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 344.916020][ T23] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 344.946616][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.970447][ T23] usb 1-1: config 0 descriptor?? [ 344.984437][T12847] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 345.004013][T12326] ocfs2: Unmounting device (7,6) on (node local) [ 345.046968][ T23] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 345.284062][ T23] usb 1-1: USB disconnect, device number 13 [ 345.343173][T12856] loop3: detected capacity change from 0 to 32768 [ 345.361223][T12856] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2763 (12856) [ 345.389527][T12856] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 345.411903][T12856] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 345.421329][T12856] BTRFS info (device loop3): setting nodatacow, compression disabled [ 345.431079][T12856] BTRFS info (device loop3): max_inline at 0 [ 345.437443][T12856] BTRFS info (device loop3): enabling disk space caching [ 345.444623][T12856] BTRFS info (device loop3): turning off barriers [ 345.452366][T12856] BTRFS info (device loop3): turning on flush-on-commit [ 345.460625][T12856] BTRFS info (device loop3): doing ref verification [ 345.468608][T12856] BTRFS info (device loop3): force clearing of disk cache [ 345.476450][T12856] BTRFS info (device loop3): enabling ssd optimizations [ 345.483719][T12856] BTRFS info (device loop3): max_inline at 4096 [ 345.491147][T12856] BTRFS info (device loop3): disk space caching is enabled [ 345.599076][T12874] __nla_validate_parse: 14 callbacks suppressed [ 345.599095][T12874] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2766'. [ 345.621631][T12856] BTRFS info (device loop3): auto enabling async discard [ 345.630266][T12874] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2766'. [ 345.640840][T12856] BTRFS info (device loop3): rebuilding free space tree [ 345.655888][T12874] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2766'. [ 345.671051][T12874] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2766'. [ 345.682263][T12874] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2766'. [ 345.692094][T12856] BTRFS info (device loop3): disabling free space tree [ 345.699277][T12856] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 345.710388][T12874] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2766'. [ 345.719872][T12856] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 345.740861][T12874] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2766'. [ 345.761796][T12874] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2766'. [ 345.783397][T12874] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2766'. [ 345.855367][T12874] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2766'. [ 346.090783][ T5785] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 346.153387][T12889] loop6: detected capacity change from 0 to 512 [ 346.251753][T12889] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 346.317289][T12889] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 346.331875][T12889] System zones: 0-1, 15-15, 18-18, 34-34 [ 346.363018][T12889] EXT4-fs (loop6): orphan cleanup on readonly fs [ 346.396868][T12889] EXT4-fs warning (device loop6): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 346.447353][T12889] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 346.488602][T12889] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.2771: bg 0: block 40: padding at end of block bitmap is not set [ 346.562350][T12898] loop0: detected capacity change from 0 to 2048 [ 346.579406][T12889] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 346.624809][T12889] EXT4-fs (loop6): 1 truncate cleaned up [ 346.645738][T12889] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 346.684667][T12898] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 346.734904][T12898] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 346.772922][T12898] UDF-fs: Scanning with blocksize 512 failed [ 346.855646][T12889] EXT4-fs error (device loop6): ext4_encrypted_get_link:46: inode #16: comm syz.6.2771: bad symlink. [ 346.909508][T12905] EXT4-fs error (device loop6): ext4_encrypted_get_link:46: inode #16: comm syz.6.2771: bad symlink. [ 346.957891][T12898] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 347.117696][T12326] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.377750][T12920] loop3: detected capacity change from 0 to 64 [ 347.397468][T12920] MINIX-fs: mounting file system with errors, running fsck is recommended [ 347.706343][T12925] usb usb8: usbfs: process 12925 (syz.0.2781) did not claim interface 0 before use [ 347.877685][T12930] Cannot find add_set index 1 as target [ 348.252960][T12945] loop3: detected capacity change from 0 to 64 [ 348.280944][T12945] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 348.652565][T12951] loop6: detected capacity change from 0 to 256 [ 349.308139][T12949] loop0: detected capacity change from 0 to 40427 [ 349.315921][ T1188] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 349.331171][T12949] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 349.355453][T12949] F2FS-fs (loop0): invalid crc value [ 349.381342][T12949] F2FS-fs (loop0): Found nat_bits in checkpoint [ 349.516750][ T1188] usb 5-1: Using ep0 maxpacket: 32 [ 349.528793][T12949] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 349.537039][ T1188] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.576230][ T1188] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.616002][ T1188] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.646803][ T1188] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 349.685866][ T1188] usb 5-1: config 0 interface 0 has no altsetting 0 [ 349.702788][ T1188] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 349.736915][ T1188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.751935][ T5786] syz-executor: attempt to access beyond end of device [ 349.751935][ T5786] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 349.787072][ T5786] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 349.787527][ T1188] usb 5-1: config 0 descriptor?? [ 349.833190][T12955] loop6: detected capacity change from 0 to 32768 [ 349.852329][T12955] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.2796 (12955) [ 349.883359][T12953] loop3: detected capacity change from 0 to 40427 [ 349.912513][T12955] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 349.928520][T12953] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 349.952708][T12953] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 349.962168][T12955] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 350.003242][T12955] BTRFS info (device loop6): enabling auto defrag [ 350.033816][T12955] BTRFS info (device loop6): setting nodatasum [ 350.057796][T12953] F2FS-fs (loop3): Found nat_bits in checkpoint [ 350.063488][T12955] BTRFS info (device loop6): turning on flush-on-commit [ 350.091788][T12955] BTRFS info (device loop6): doing ref verification [ 350.116204][T12955] BTRFS info (device loop6): allowing degraded mounts [ 350.152453][T12955] BTRFS info (device loop6): force clearing of disk cache [ 350.176952][T12955] BTRFS info (device loop6): enabling ssd optimizations [ 350.184037][T12955] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 350.210840][T12953] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 350.218790][T12953] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 350.236221][T12955] BTRFS info (device loop6): use lzo compression, level 0 [ 350.243480][T12955] BTRFS info (device loop6): using free space tree [ 350.279422][ T1188] hid-thrustmaster 0003:044F:B65D.0013: item fetching failed at offset 3/5 [ 350.318000][ T1188] hid-thrustmaster 0003:044F:B65D.0013: parse failed with error -22 [ 350.352170][ T1188] hid-thrustmaster: probe of 0003:044F:B65D.0013 failed with error -22 [ 350.474920][ T1188] usb 5-1: USB disconnect, device number 16 [ 350.515899][T12955] BTRFS info (device loop6): auto enabling async discard [ 350.571638][T12955] BTRFS info (device loop6): rebuilding free space tree [ 351.238232][T12989] loop4: detected capacity change from 0 to 512 [ 351.264331][T12989] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 351.289018][T12989] UDF-fs: Scanning with blocksize 512 failed [ 351.324532][T12989] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 351.341907][T12989] UDF-fs: Scanning with blocksize 1024 failed [ 351.406277][T12989] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 351.413879][T12989] UDF-fs: Scanning with blocksize 2048 failed [ 351.470005][T12989] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 351.489657][T12326] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 351.532157][T12989] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 351.652643][T12989] overlayfs: upper fs needs to support d_type. [ 351.710591][T12989] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 351.776045][T12989] overlayfs: failed to set xattr on upper [ 351.781859][T12989] overlayfs: ...falling back to redirect_dir=nofollow. [ 351.805898][T12989] overlayfs: ...falling back to index=off. [ 351.836451][T12989] overlayfs: ...falling back to uuid=null. [ 352.321415][T12986] loop0: detected capacity change from 0 to 40427 [ 352.348859][T12986] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 352.416036][T12986] F2FS-fs (loop0): invalid crc value [ 352.451473][T12986] F2FS-fs (loop0): Found nat_bits in checkpoint [ 352.678913][T12986] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 352.928387][ T5786] syz-executor: attempt to access beyond end of device [ 352.928387][ T5786] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 352.994228][ T5786] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 353.410183][T13027] loop3: detected capacity change from 0 to 2048 [ 353.497210][T13027] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 353.519112][T13012] loop4: detected capacity change from 0 to 32768 [ 353.684902][T13012] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 353.795859][ T1124] (kworker/u4:6,1124,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 353.822883][T13014] loop6: detected capacity change from 0 to 32768 [ 353.962134][T13014] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 354.025351][T13014] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 354.103017][ T5946] ocfs2: Unmounting device (7,4) on (node local) [ 354.163074][T13014] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 354.597203][T12326] ocfs2: Unmounting device (7,6) on (node local) [ 354.956345][T13062] tipc: Started in network mode [ 354.961314][T13062] tipc: Node identity ac14142a, cluster identity 4711 [ 354.991816][T13062] tipc: Enabled bearer , priority 10 [ 355.311208][T13074] loop0: detected capacity change from 0 to 64 [ 356.107883][ T1188] tipc: Node number set to 2886997034 [ 356.227157][ T8] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 356.416168][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 356.435025][ T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.474965][ T8] usb 7-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.510588][ T8] usb 7-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.535484][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 356.551580][ T8] usb 7-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 356.561191][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.581647][T13114] netlink: 'syz.0.2835': attribute type 4 has an invalid length. [ 356.583003][ T8] usb 7-1: config 0 descriptor?? [ 356.629194][T13114] __nla_validate_parse: 11 callbacks suppressed [ 356.629209][T13114] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2835'. [ 357.041757][ T8] hid-alps 0003:044E:1215.0014: hidraw0: USB HID v0.00 Device [HID 044e:1215] on usb-dummy_hcd.6-1/input0 [ 357.134382][T13102] loop4: detected capacity change from 0 to 32768 [ 357.154154][T13102] XFS: ikeep mount option is deprecated. [ 357.232335][ T8] usb 7-1: USB disconnect, device number 3 [ 357.267336][T13107] loop3: detected capacity change from 0 to 32768 [ 357.335730][T13102] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 357.361662][T13107] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 357.431416][T13102] XFS (loop4): Ending clean mount [ 357.464827][T13102] XFS (loop4): Quotacheck needed: Please wait. [ 357.567596][T13107] XFS (loop3): Ending clean mount [ 357.646714][ T5157] udevd[5157]: worker [6002] terminated by signal 33 (Unknown signal 33) [ 357.666645][ T5157] udevd[5157]: worker [6002] failed while handling '/devices/virtual/block/loop3' [ 357.683618][T13102] XFS (loop4): Quotacheck: Done. [ 357.754312][ T5785] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 357.896752][T13153] loop0: detected capacity change from 0 to 512 [ 357.924828][T13153] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 358.034922][T13153] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2840: invalid indirect mapped block 4294967295 (level 1) [ 358.160206][ T5946] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 358.200568][T13153] EXT4-fs (loop0): Remounting filesystem read-only [ 358.207840][T13153] EXT4-fs (loop0): 2 truncates cleaned up [ 358.215122][T13153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.440250][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.090770][T13157] loop6: detected capacity change from 0 to 32768 [ 359.146034][ T5790] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 359.187227][T13157] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 359.292529][T13157] XFS (loop6): Ending clean mount [ 359.315671][T13157] XFS (loop6): Quotacheck needed: Please wait. [ 359.386991][ T5790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 359.417553][ T5790] usb 4-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 359.474763][T13157] XFS (loop6): Quotacheck: Done. [ 359.479933][ T5790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.503351][ T5790] usb 4-1: config 0 descriptor?? [ 359.525292][T13179] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 359.894115][T12326] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 360.008124][ T5790] logitech 0003:046D:C287.0015: unknown main item tag 0x0 [ 360.015365][ T5790] logitech 0003:046D:C287.0015: unknown main item tag 0x0 [ 360.044234][ T5790] logitech 0003:046D:C287.0015: unknown main item tag 0x0 [ 360.063562][ T5790] logitech 0003:046D:C287.0015: unknown main item tag 0x0 [ 360.085039][ T5790] logitech 0003:046D:C287.0015: unknown main item tag 0x0 [ 360.114450][ T5790] logitech 0003:046D:C287.0015: hidraw0: USB HID v1.01 Device [HID 046d:c287] on usb-dummy_hcd.3-1/input0 [ 360.166196][ T5790] logitech 0003:046D:C287.0015: no inputs found [ 360.266045][ T5790] usb 4-1: USB disconnect, device number 21 [ 360.442843][T13214] fido_id[13214]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 360.954294][T13223] loop4: detected capacity change from 0 to 32768 [ 360.974608][T13223] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.2854 (13223) [ 361.004122][T13223] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 361.016495][T13223] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 361.028106][T13223] BTRFS info (device loop4): turning on sync discard [ 361.036541][T13223] BTRFS info (device loop4): enabling auto defrag [ 361.043062][T13223] BTRFS info (device loop4): doing ref verification [ 361.050382][T13223] BTRFS info (device loop4): use no compression [ 361.058103][T13223] BTRFS info (device loop4): force clearing of disk cache [ 361.067553][T13223] BTRFS info (device loop4): disabling free space tree [ 361.307534][T13223] BTRFS info (device loop4): enabling ssd optimizations [ 361.347293][T13223] BTRFS info (device loop4): rebuilding free space tree [ 361.369934][T13254] loop6: detected capacity change from 0 to 2048 [ 361.379903][T13254] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 361.431396][T13254] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 361.453300][T13254] UDF-fs: Scanning with blocksize 512 failed [ 361.481089][T13223] BTRFS info (device loop4): disabling free space tree [ 361.509542][T13223] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 361.529044][T13254] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 361.536844][T13223] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 361.703983][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 361.703999][ T28] audit: type=1800 audit(1757613303.763:152): pid=13223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2854" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 361.820391][ T5946] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 362.067683][T13264] loop0: detected capacity change from 0 to 1764 [ 363.787784][T13286] loop4: detected capacity change from 0 to 32768 [ 363.950350][T13303] loop6: detected capacity change from 0 to 32768 [ 364.745538][T13326] loop0: detected capacity change from 0 to 4096 [ 364.782461][T13335] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2878'. [ 364.801224][T13336] loop6: detected capacity change from 0 to 64 [ 364.807831][T13326] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 364.813718][T13335] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2878'. [ 364.856149][T13336] Trying to free block not in datazone [ 364.881752][T13336] Trying to free block not in datazone [ 364.896061][T13336] Trying to free block not in datazone [ 364.946801][T13336] Trying to free block not in datazone [ 364.965145][T13336] Trying to free block not in datazone [ 364.986655][T13336] Trying to free block not in datazone [ 365.006928][T13336] Trying to free block not in datazone [ 365.030480][T13336] Trying to free block not in datazone [ 365.049421][T13336] Trying to free block not in datazone [ 365.068923][T13336] Trying to free block not in datazone [ 365.401907][T13350] program syz.4.2885 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.369629][ T3545] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 366.420465][ T3545] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 366.425075][ T27] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 366.854367][T13391] overlayfs: missing 'lowerdir' [ 366.956191][ T8] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 367.197706][T13354] loop6: detected capacity change from 0 to 65536 [ 367.246748][ T5788] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 367.284849][T13354] XFS (loop6): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 367.388979][T13354] XFS (loop6): Ending clean mount [ 367.407403][T13354] XFS (loop6): Quotacheck needed: Please wait. [ 367.543676][T13354] XFS (loop6): Quotacheck: Done. [ 367.763134][T13389] loop4: detected capacity change from 0 to 40427 [ 367.795893][T12326] XFS (loop6): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 367.826229][T13389] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 367.834711][T13389] F2FS-fs (loop4): Image doesn't support compression [ 367.872166][T13389] F2FS-fs (loop4): Image doesn't support compression [ 367.931079][T13389] F2FS-fs (loop4): invalid crc value [ 367.936390][T13397] loop3: detected capacity change from 0 to 32768 [ 367.963822][T13389] F2FS-fs (loop4): Found nat_bits in checkpoint [ 368.259406][T13389] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 368.426847][T13414] loop3: detected capacity change from 0 to 1024 [ 368.542065][T13414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.012492][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.031291][T13411] loop0: detected capacity change from 0 to 32768 [ 369.147352][T13411] jfs_create: dtInsert returned -EIO [ 369.153497][T13411] ERROR: (device loop0): jfs_create: [ 369.153497][T13411] [ 369.426009][ T1188] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 369.539821][T13429] loop4: detected capacity change from 0 to 256 [ 369.572129][T13429] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 369.630163][ T1188] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.659716][ T1188] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 369.694057][ T1188] usb 7-1: config 0 interface 0 has no altsetting 0 [ 369.704663][ T1188] usb 7-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 369.759541][ T1188] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.792941][ T1188] usb 7-1: config 0 descriptor?? [ 370.126028][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 370.139809][T13438] loop3: detected capacity change from 0 to 8192 [ 370.168426][T13438] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 370.246506][T13438] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 370.277660][ T1188] itetech 0003:06CB:73F6.0016: hidraw0: USB HID v0.01 Device [HID 06cb:73f6] on usb-dummy_hcd.6-1/input0 [ 370.308702][T13438] REISERFS (device loop3): using ordered data mode [ 370.328897][T13448] loop0: detected capacity change from 0 to 256 [ 370.336208][T13438] reiserfs: using flush barriers [ 370.371667][T13448] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 370.398519][T13438] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 370.399380][T13448] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 370.467333][T13438] REISERFS (device loop3): checking transaction log (loop3) [ 370.487699][ T5788] usb 7-1: USB disconnect, device number 4 [ 370.530145][T13438] REISERFS (device loop3): Using r5 hash to sort names [ 370.533700][T13449] fido_id[13449]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 370.553451][T13438] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 370.583048][T13448] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 370.595469][T13438] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 370.642546][T13438] REISERFS warning (device loop3): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=2, len=0 - odd [ 371.231556][T13463] loop6: detected capacity change from 0 to 4096 [ 371.316809][T13466] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 372.162015][T13462] loop3: detected capacity change from 0 to 40427 [ 372.204258][T13462] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 372.247104][T13462] F2FS-fs (loop3): invalid crc value [ 372.276338][T13462] F2FS-fs (loop3): Found nat_bits in checkpoint [ 372.375198][T13462] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 372.525411][T13470] loop4: detected capacity change from 0 to 32768 [ 372.535990][ T5851] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 372.662966][ T5785] syz-executor: attempt to access beyond end of device [ 372.662966][ T5785] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 372.724455][ T5785] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 372.746775][ T5851] usb 1-1: Using ep0 maxpacket: 8 [ 372.757479][ T5851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 372.785945][ T5851] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 372.872307][ T5851] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 372.911440][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.943299][ T5851] usb 1-1: config 0 descriptor?? [ 372.993180][T13494] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2944'. [ 373.022743][T13494] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2944'. [ 373.048234][T13494] netlink: 'syz.6.2944': attribute type 7 has an invalid length. [ 373.296732][T13499] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2946'. [ 373.323746][T13499] netlink: 'syz.6.2946': attribute type 6 has an invalid length. [ 373.341895][T13499] netlink: 'syz.6.2946': attribute type 5 has an invalid length. [ 373.352398][T13499] netlink: 'syz.6.2946': attribute type 4 has an invalid length. [ 373.403931][ T5851] logitech 0003:046D:C298.0017: item fetching failed at offset 4/5 [ 373.438165][ T5851] logitech 0003:046D:C298.0017: parse failed [ 373.444437][ T5851] logitech: probe of 0003:046D:C298.0017 failed with error -22 [ 373.612378][ T5851] usb 1-1: USB disconnect, device number 14 [ 373.792587][T13510] netlink: 'syz.4.2951': attribute type 1 has an invalid length. [ 373.935924][ T5870] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 373.969556][T13516] overlayfs: missing 'workdir' [ 374.100142][T13522] netlink: 'syz.4.2955': attribute type 2 has an invalid length. [ 374.126405][ T5870] usb 7-1: Using ep0 maxpacket: 16 [ 374.138599][ T5870] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.171147][ T5870] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.198205][ T5870] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 374.211836][ T5870] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 374.222257][ T5870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.246965][ T5870] usb 7-1: config 0 descriptor?? [ 374.336646][ T1188] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 374.538548][ T1188] usb 4-1: config 0 has an invalid interface number: 23 but max is 0 [ 374.553040][ T1188] usb 4-1: config 0 has no interface number 0 [ 374.560041][ T1188] usb 4-1: config 0 interface 23 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 374.578642][ T1188] usb 4-1: config 0 interface 23 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 374.601975][ T1188] usb 4-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 374.621676][ T1188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.630544][ T1188] usb 4-1: Product: syz [ 374.634999][ T1188] usb 4-1: Manufacturer: syz [ 374.646383][ T1188] usb 4-1: SerialNumber: syz [ 374.655411][ T1188] usb 4-1: config 0 descriptor?? [ 374.663668][T13520] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 374.676861][ T5870] microsoft 0003:045E:07DA.0018: ignoring exceeding usage max [ 374.687237][T13520] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 374.699040][ T5870] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 374.710101][ T1188] ums-usbat 4-1:0.23: USB Mass Storage device detected [ 374.717325][ T5870] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 374.735633][ T5870] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 374.743504][ T5870] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 374.753759][ T5870] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 374.761704][ T5870] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 374.777194][ T5870] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 374.785226][ T5870] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 374.793354][ T5870] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 374.796231][ T5790] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 374.802023][ T5870] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 374.834123][ T5870] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0018/input/input24 [ 374.984648][ T1188] ums-usbat: probe of 4-1:0.23 failed with error -5 [ 375.006221][ T5790] usb 1-1: Using ep0 maxpacket: 32 [ 375.016488][ T5790] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.024292][ T1188] usb 4-1: USB disconnect, device number 22 [ 375.043846][ T5790] usb 1-1: config 0 interface 0 has no altsetting 0 [ 375.062793][ T8] microsoft 0003:045E:07DA.0018: implement() called with too large value 1 (n: 0)! (kworker/0:0) [ 375.075620][ T5790] usb 1-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 375.113665][ T8] microsoft 0003:045E:07DA.0018: implement() called with too large value 1 (n: 0)! (kworker/0:0) [ 375.119191][ T5790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.124227][ T8] microsoft 0003:045E:07DA.0018: implement() called with too large value 1 (n: 0)! (kworker/0:0) [ 375.143287][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.187207][ T8] microsoft 0003:045E:07DA.0018: implement() called with too large value 1 (n: 0)! (kworker/0:0) [ 375.197794][ T8] microsoft 0003:045E:07DA.0018: implement() called with too large value 1 (n: 0)! (kworker/0:0) [ 375.208347][ T8] microsoft 0003:045E:07DA.0018: implement() called with too large value 1 (n: 0)! (kworker/0:0) [ 375.219392][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.230402][ T5870] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 375.277162][ T5790] usb 1-1: config 0 descriptor?? [ 375.298880][ T5870] usb 7-1: USB disconnect, device number 5 [ 375.438552][T13545] fido_id[13545]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 375.526632][ T5790] usbhid 1-1:0.0: can't add hid device: -71 [ 375.545979][ T5790] usbhid: probe of 1-1:0.0 failed with error -71 [ 375.568314][ T5790] usb 1-1: USB disconnect, device number 15 [ 376.019198][T13560] loop3: detected capacity change from 0 to 1024 [ 376.203790][ T1124] hfsplus: b-tree write err: -5, ino 4 [ 376.294788][T13547] loop4: detected capacity change from 0 to 32768 [ 376.358796][T13547] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 376.379850][T13569] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2972'. [ 376.430407][T13547] (syz.4.2966,13547,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 376.482168][T13547] (syz.4.2966,13547,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 376.505831][T13547] (syz.4.2966,13547,0):ocfs2_link:762 ERROR: status = -2 [ 376.518535][T13547] (syz.4.2966,13547,0):ocfs2_link:840 ERROR: status = -2 [ 376.606194][ T5870] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 376.660513][ T5946] ocfs2: Unmounting device (7,4) on (node local) [ 376.844518][ T5870] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 376.876165][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.899710][ T5870] usb 1-1: config 0 descriptor?? [ 376.994854][T13580] loop6: detected capacity change from 0 to 2048 [ 377.068985][T13580] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 377.354777][ T5870] hackrf 1-1:0.0: Board ID: 00 [ 377.376003][ T5870] hackrf 1-1:0.0: Firmware version: [ 377.417418][ T5870] hackrf 1-1:0.0: Registered as swradio24 [ 377.423238][ T5870] videodev: could not get a free minor [ 377.458094][ T5870] hackrf 1-1:0.0: Failed to register as video device (-23) [ 377.488826][ T5870] hackrf: probe of 1-1:0.0 failed with error -23 [ 377.534049][T13573] loop3: detected capacity change from 0 to 32768 [ 377.545122][T13573] XFS: noikeep mount option is deprecated. [ 377.566038][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 377.621618][T13573] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 377.641351][ T5790] usb 1-1: USB disconnect, device number 16 [ 377.802602][T13573] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 377.851753][T13573] XFS (loop3): Starting recovery (logdev: internal) [ 377.890308][T13573] XFS (loop3): Ending recovery (logdev: internal) [ 378.114053][ T5785] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 378.753563][T13603] loop6: detected capacity change from 0 to 32768 [ 378.806318][T13603] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.2983 (13603) [ 378.853792][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.865081][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.888243][T13603] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 378.948125][T13603] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 378.966327][T13603] BTRFS info (device loop6): enabling auto defrag [ 378.973525][T13603] BTRFS info (device loop6): force clearing of disk cache [ 378.999610][T13603] BTRFS info (device loop6): max_inline at 0 [ 379.023872][T13603] BTRFS info (device loop6): turning on sync discard [ 379.059707][T13603] BTRFS info (device loop6): using free space tree [ 379.083182][T13625] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2991'. [ 379.106054][T13625] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2991'. [ 379.142036][T13625] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2991'. [ 379.246058][T13603] BTRFS info (device loop6): enabling ssd optimizations [ 379.278949][T13603] BTRFS info (device loop6): rebuilding free space tree [ 379.510651][T13648] loop0: detected capacity change from 0 to 2048 [ 379.564109][T13650] loop3: detected capacity change from 0 to 512 [ 379.605681][T12326] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 379.634145][T13648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.693101][T13650] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 33619980: comm syz.3.2995: invalid block [ 379.857744][T13650] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.2995: bg 0: block 127: padding at end of block bitmap is not set [ 379.876622][T13648] MPI: mpi too large (113288 bits) [ 379.921020][T13650] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 379.971315][T13650] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.2995: attempt to clear invalid blocks 983260 len 1 [ 379.974573][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.012128][T13650] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2995: invalid indirect mapped block 2683928664 (level 0) [ 380.073610][T13650] EXT4-fs error (device loop3): __ext4_get_inode_loc:4483: comm syz.3.2995: Invalid inode table block 0 in block_group 0 [ 380.131956][T13650] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 380.189379][T13650] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 380.216631][T13650] EXT4-fs error (device loop3): __ext4_get_inode_loc:4483: comm syz.3.2995: Invalid inode table block 0 in block_group 0 [ 380.268196][T13650] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 380.323897][T13650] EXT4-fs error (device loop3): ext4_truncate:4288: inode #13: comm syz.3.2995: mark_inode_dirty error [ 380.384167][T13650] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 380.437073][T13650] EXT4-fs (loop3): 1 truncate cleaned up [ 380.445537][T13650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.709524][T13668] loop6: detected capacity change from 0 to 2048 [ 380.728000][T13668] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 380.741055][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.760040][T13670] loop4: detected capacity change from 0 to 2048 [ 380.768445][T13671] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 380.806299][T13548] udevd[13548]: incorrect nilfs2 checksum on /dev/loop6 [ 380.872295][T13672] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 381.255888][ T8] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 381.436122][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 381.449527][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.491824][ T8] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 381.509686][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 381.544067][ T8] usb 1-1: SerialNumber: syz [ 381.560052][ T8] usb 1-1: config 0 descriptor?? [ 381.585422][ T8] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 381.592713][ T8] usb 1-1: No valid video chain found. [ 381.703863][T13696] tipc: Started in network mode [ 381.709710][T13696] tipc: Node identity e0000001, cluster identity 4711 [ 381.717542][T13696] tipc: Enabling of bearer rejected, failed to enable media [ 381.780660][ T8] usb 1-1: USB disconnect, device number 17 [ 381.881908][T13702] program syz.6.3016 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 381.924034][T13700] loop3: detected capacity change from 0 to 4096 [ 381.932099][T13700] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 381.995622][T13700] ntfs: (device loop3): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 382.029655][T13700] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 382.057791][T13700] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 382.098088][T13700] ntfs: volume version 3.1. [ 382.117893][T13706] No buffer was provided with the request [ 382.374800][ T5785] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 382.947933][T13725] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 383.371562][T13713] loop0: detected capacity change from 0 to 32768 [ 383.395367][T13713] XFS: noikeep mount option is deprecated. [ 383.453034][T13735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3031'. [ 383.466989][T13713] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 383.533368][T13735] vlan0: entered allmulticast mode [ 383.580610][T13746] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3033'. [ 383.590183][T13746] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3033'. [ 383.591432][T13735] vlan1: entered allmulticast mode [ 383.600092][T13746] netlink: 'syz.3.3033': attribute type 5 has an invalid length. [ 383.636171][T13735] veth0_vlan: entered allmulticast mode [ 383.666166][T13746] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3033'. [ 383.701644][T13713] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 383.760288][T13713] XFS (loop0): Starting recovery (logdev: internal) [ 383.833802][T13713] XFS (loop0): Ending recovery (logdev: internal) [ 384.159006][ T5786] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 384.371691][T13763] loop6: detected capacity change from 0 to 256 [ 384.813849][T13771] loop6: detected capacity change from 0 to 4096 [ 384.853613][T13771] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 384.881147][T13771] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 384.904723][T13775] loop0: detected capacity change from 0 to 4096 [ 384.947439][T13771] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 384.992113][T13771] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 385.004443][T13775] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 385.028248][T13771] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 385.058282][T13771] ntfs: volume version 3.1. [ 385.111335][T13775] ntfs3: loop0: Failed to load $Extend (-22). [ 385.120662][T13775] ntfs3: loop0: Failed to initialize $Extend. [ 385.146750][T13778] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 385.186025][T13778] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 385.211765][T13778] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 385.239161][T13778] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 385.281399][T13778] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 385.313270][T13778] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 385.340717][T13778] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 385.363616][T13778] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 385.383892][T13778] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 385.414366][T13778] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 385.421550][T13778] comedi comedi3: 8255: I/O port conflict (0xd4,4) [ 385.435980][T13778] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 385.724020][T13773] loop4: detected capacity change from 0 to 32768 [ 385.734027][ T8] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 385.765215][T13773] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3047 (13773) [ 385.768532][T13788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3053'. [ 385.817502][T13773] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 385.843311][T13773] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 385.866896][T13773] BTRFS info (device loop4): using free space tree [ 385.950024][ T8] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 385.965938][ T8] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 386.008909][ T8] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 386.022494][T13773] BTRFS info (device loop4): enabling ssd optimizations [ 386.025956][ T5788] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 386.039235][ T8] usb 1-1: config 220 has no interface number 2 [ 386.046347][T13773] BTRFS info (device loop4): auto enabling async discard [ 386.062498][ T8] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 386.076143][ T8] usb 1-1: config 220 interface 0 has no altsetting 0 [ 386.082980][ T8] usb 1-1: config 220 interface 76 has no altsetting 0 [ 386.090228][ T8] usb 1-1: config 220 interface 1 has no altsetting 0 [ 386.100960][ T8] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 386.126017][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.134200][ T8] usb 1-1: Product: syz [ 386.146051][ T8] usb 1-1: Manufacturer: syz [ 386.156358][ T8] usb 1-1: SerialNumber: syz [ 386.181248][ T5946] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 386.277020][ T5788] usb 7-1: Using ep0 maxpacket: 32 [ 386.291382][ T5788] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 386.319684][ T5788] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 386.339124][ T5788] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 386.366306][ T5788] usb 7-1: Product: syz [ 386.380862][ T5788] usb 7-1: Manufacturer: syz [ 386.385547][ T5788] usb 7-1: SerialNumber: syz [ 386.429438][ T8] usb 1-1: selecting invalid altsetting 0 [ 386.431135][ T5788] usb 7-1: config 0 descriptor?? [ 386.450417][ T8] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 386.476774][T13787] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 386.485723][ T5788] hub 7-1:0.0: bad descriptor, ignoring hub [ 386.486008][ T8] usb 1-1: No valid video chain found. [ 386.493658][T13548] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (13548) [ 386.529409][ T5788] hub: probe of 7-1:0.0 failed with error -5 [ 386.533604][ T8] usb 1-1: selecting invalid altsetting 0 [ 386.579911][ T8] usbtest: probe of 1-1:220.1 failed with error -22 [ 386.598037][ T8] usb 1-1: USB disconnect, device number 18 [ 386.916275][ T5788] usb 7-1: USB disconnect, device number 6 [ 387.119907][T13794] loop3: detected capacity change from 0 to 32768 [ 387.148509][T13794] XFS: ikeep mount option is deprecated. [ 387.195059][T13818] loop0: detected capacity change from 0 to 64 [ 387.214626][T13794] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 387.276926][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 387.276943][ T28] audit: type=1800 audit(1757613329.343:153): pid=13818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3058" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 387.286047][ T8] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 387.496568][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 387.532055][T13794] XFS (loop3): Ending clean mount [ 387.547410][ T8] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 387.551387][T13794] XFS (loop3): Quotacheck needed: Please wait. [ 387.602223][ T8] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 387.631981][ T8] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 387.672379][ T8] usb 7-1: Product: syz [ 387.685606][ T8] usb 7-1: config 0 descriptor?? [ 387.699144][T13794] XFS (loop3): Quotacheck: Done. [ 387.733140][T13787] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 387.777913][ T8] hub 7-1:0.0: bad descriptor, ignoring hub [ 387.784270][ T8] hub: probe of 7-1:0.0 failed with error -5 [ 387.804062][T13813] loop4: detected capacity change from 0 to 32768 [ 387.818559][ T5785] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 387.953034][T13813] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 388.256183][ T27] usb 7-1: USB disconnect, device number 7 [ 388.258705][T13813] XFS (loop4): Ending clean mount [ 388.562351][ T5946] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 388.952217][T13851] netlink: 'syz.6.3069': attribute type 2 has an invalid length. [ 389.162038][T13853] loop3: detected capacity change from 0 to 1024 [ 389.191345][T13853] EXT4-fs: inline encryption not supported [ 389.226955][T13853] EXT4-fs: Ignoring removed i_version option [ 389.239647][T13855] netlink: 'syz.6.3071': attribute type 30 has an invalid length. [ 389.273238][T13853] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 389.384477][T13841] loop0: detected capacity change from 0 to 32768 [ 389.398768][T13853] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 2: comm syz.3.3070: lblock 2 mapped to illegal pblock 2 (length 1) [ 389.475872][T13853] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 389.510488][T13853] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 48: comm syz.3.3070: lblock 0 mapped to illegal pblock 48 (length 1) [ 389.523355][T13841] ERROR: (device loop0): diAllocAG: ipimap->i_size is wrong [ 389.523355][T13841] [ 389.571457][T13853] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 389.575574][T13841] ERROR: (device loop0): remounting filesystem as read-only [ 389.595703][T13841] ialloc: diAlloc returned -5! [ 389.604789][T13853] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.3070: Failed to acquire dquot type 0 [ 389.636170][T13853] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 389.708249][T13853] EXT4-fs error (device loop3): ext4_evict_inode:252: inode #11: comm syz.3.3070: mark_inode_dirty error [ 389.739236][T13853] EXT4-fs warning (device loop3): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 389.778309][T13853] EXT4-fs (loop3): 1 orphan inode deleted [ 389.785620][T13853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.826841][ T48] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 389.880676][ T48] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 389.913346][T13867] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3073'. [ 389.923805][ T48] EXT4-fs error (device loop3): ext4_release_dquot:6976: comm kworker/u4:3: Failed to release dquot type 0 [ 389.960594][T13853] EXT4-fs error (device loop3): __ext4_get_inode_loc:4483: comm syz.3.3070: Invalid inode table block 1 in block_group 0 [ 389.962670][T13867] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3073'. [ 390.024586][T13853] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 390.041000][T13864] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3073'. [ 390.093444][T13853] EXT4-fs error (device loop3): ext4_setattr:5488: inode #2: comm syz.3.3070: mark_inode_dirty error [ 390.312880][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.336314][ T48] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 390.396600][ T48] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 390.405128][ T48] EXT4-fs error (device loop3): ext4_release_dquot:6976: comm kworker/u4:3: Failed to release dquot type 0 [ 390.442287][ T5785] EXT4-fs error (device loop3): __ext4_get_inode_loc:4483: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 390.478350][ T5785] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 390.499553][ T5785] EXT4-fs error (device loop3): ext4_quota_off:7224: inode #3: comm syz-executor: mark_inode_dirty error [ 390.678784][T13881] loop4: detected capacity change from 0 to 1024 [ 390.711276][T13880] loop0: detected capacity change from 0 to 2048 [ 390.730890][T13883] tipc: Enabling of bearer rejected, media not registered [ 390.792147][T13880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.886804][T13881] hfsplus: keylen 65060 too large [ 390.935954][T13881] hfsplus: xattr searching failed [ 391.094669][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.124000][T13895] loop3: detected capacity change from 0 to 1024 [ 391.259886][ T28] audit: type=1800 audit(1757613333.303:154): pid=13895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3085" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 391.337651][T13895] syz.3.3085: attempt to access beyond end of device [ 391.337651][T13895] loop3: rw=34817, sector=5778, nr_sectors = 2 limit=1024 [ 391.645985][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 391.867667][ T28] audit: type=1326 audit(1757613333.923:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13912 comm="syz.0.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fdef8eba9 code=0x7ffc0000 [ 391.926856][ T28] audit: type=1326 audit(1757613333.953:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13912 comm="syz.0.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fdef8eba9 code=0x7ffc0000 [ 391.994251][ T28] audit: type=1326 audit(1757613333.953:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13912 comm="syz.0.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fdef8eba9 code=0x7ffc0000 [ 392.044665][ T28] audit: type=1326 audit(1757613333.953:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13912 comm="syz.0.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fdef8eba9 code=0x7ffc0000 [ 392.658559][T13909] loop3: detected capacity change from 0 to 40427 [ 392.681568][T13909] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 392.706501][T13909] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 392.735426][T13909] F2FS-fs (loop3): invalid crc value [ 392.756897][T13909] F2FS-fs (loop3): Found nat_bits in checkpoint [ 392.910059][T13909] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 392.931754][T13909] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 393.250466][T13952] loop6: detected capacity change from 0 to 1024 [ 393.312384][T13952] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.607628][T12326] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.000514][T13964] loop3: detected capacity change from 0 to 1024 [ 394.027681][T13960] loop6: detected capacity change from 0 to 8192 [ 394.068784][T13960] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 394.086195][T13960] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 394.152339][T13960] REISERFS (device loop6): using ordered data mode [ 394.201200][T13949] loop4: detected capacity change from 0 to 40427 [ 394.215152][T13960] reiserfs: using flush barriers [ 394.231934][T13960] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 394.248939][T13960] REISERFS (device loop6): checking transaction log (loop6) [ 394.268144][T13949] F2FS-fs (loop4): invalid crc value [ 394.287712][T13949] F2FS-fs (loop4): Found nat_bits in checkpoint [ 394.394090][T13974] loop0: detected capacity change from 0 to 512 [ 394.421244][T13974] EXT4-fs: Ignoring removed orlov option [ 394.489422][T13949] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 394.536233][T13974] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 394.597662][T13974] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 394.666049][T13960] REISERFS (device loop6): Using tea hash to sort names [ 394.687556][T13960] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 394.744974][T13974] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.3116: corrupted in-inode xattr: e_value size too large [ 394.768403][ T5946] syz-executor: attempt to access beyond end of device [ 394.768403][ T5946] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 394.798907][ T5946] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 394.855127][T13974] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.3116: couldn't read orphan inode 15 (err -117) [ 394.902200][T13974] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.226565][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.406622][T13986] loop6: detected capacity change from 0 to 2048 [ 395.456360][T13986] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 395.517241][T13993] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 395.535491][T13992] loop3: detected capacity change from 0 to 2048 [ 395.542652][T13986] syz.6.3120: attempt to access beyond end of device [ 395.542652][T13986] loop6: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 395.574013][T13992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.644821][T13992] EXT4-fs error (device loop3): ext4_ext_precache:645: inode #2: comm syz.3.3124: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 395.760347][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.980026][T14001] netlink: 'syz.6.3128': attribute type 11 has an invalid length. [ 396.382405][T14017] loop6: detected capacity change from 0 to 64 [ 396.510507][T14016] loop3: detected capacity change from 0 to 4096 [ 396.658235][T14016] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 396.686506][T14016] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 396.801997][T14016] ntfs3: loop3: ino=1e, "file1" attr_set_size [ 396.849441][T14015] ntfs3: loop3: ino=1e, "file1" attr_set_size [ 396.973849][ T61] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 396.981579][T14024] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3136'. [ 396.997132][ T5785] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 397.003720][ T5785] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 397.022306][ T5785] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 397.031774][ T1124] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 397.101275][T14006] loop4: detected capacity change from 0 to 32768 [ 397.147351][T14006] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 397.189979][T14006] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 397.311876][T14006] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 397.452379][T14006] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 397.506031][T12443] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 397.616935][ T5870] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 397.695863][T12443] usb 7-1: Using ep0 maxpacket: 32 [ 397.718616][T12443] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 397.732868][T12443] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.743786][T12443] usb 7-1: Product: syz [ 397.748483][T12443] usb 7-1: Manufacturer: syz [ 397.753308][T12443] usb 7-1: SerialNumber: syz [ 397.765577][T12443] usb 7-1: config 0 descriptor?? [ 397.810706][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.826785][ T5870] usb 4-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.00 [ 397.836931][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.852074][ T5870] usb 4-1: config 0 descriptor?? [ 398.173352][T14040] loop4: detected capacity change from 0 to 32768 [ 398.196297][T12443] airspy 7-1:0.0: Board ID: 00 [ 398.214061][T14040] (syz.4.3143,14040,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 398.214132][T12443] airspy 7-1:0.0: Firmware version: [ 398.237533][T14040] (syz.4.3143,14040,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 398.283103][ T5870] wacom 0003:056A:00B2.0019: Unknown device_type for 'HID 056a:00b2'. Assuming pen. [ 398.311615][ T5870] wacom 0003:056A:00B2.0019: hidraw0: USB HID v0.00 Device [HID 056a:00b2] on usb-dummy_hcd.3-1/input0 [ 398.345353][T14040] JBD2: Ignoring recovery information on journal [ 398.410856][T12443] airspy 7-1:0.0: usb_control_msg() failed -71 request 11 [ 398.429006][ T5870] input: Wacom Intuos3 9x12 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B2.0019/input/input25 [ 398.485244][T12443] airspy 7-1:0.0: Registered as swradio24 [ 398.511584][T12443] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 398.571854][T12443] usb 7-1: USB disconnect, device number 8 [ 398.629048][ T5870] usb 4-1: USB disconnect, device number 23 [ 398.671353][T14040] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 398.930772][ T5946] ocfs2: Unmounting device (7,4) on (node local) [ 399.438911][T14059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3147'. [ 399.465864][T14059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3147'. [ 399.490616][T14048] loop0: detected capacity change from 0 to 32768 [ 399.497281][T14059] netlink: 'syz.4.3147': attribute type 14 has an invalid length. [ 399.556513][T14066] loop3: detected capacity change from 0 to 256 [ 399.564544][T14066] exfat: Deprecated parameter 'namecase' [ 399.566159][T14048] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 399.575209][T14059] netlink: 'syz.4.3147': attribute type 12 has an invalid length. [ 399.659973][T14072] netlink: 332 bytes leftover after parsing attributes in process `syz.6.3153'. [ 399.668487][T14066] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 399.670582][T14072] netlink: 'syz.6.3153': attribute type 9 has an invalid length. [ 399.689785][T14072] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3153'. [ 399.699571][T14072] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3153'. [ 399.971929][T14048] XFS (loop0): Ending clean mount [ 399.988860][T14048] XFS (loop0): Quotacheck needed: Please wait. [ 400.105024][T14048] XFS (loop0): Quotacheck: Done. [ 400.196828][T14080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3157'. [ 400.206369][T14080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3157'. [ 400.215690][T14080] netlink: 'syz.4.3157': attribute type 20 has an invalid length. [ 400.481904][ T5786] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 401.150523][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3168'. [ 401.370192][T14109] netlink: 'syz.6.3171': attribute type 1 has an invalid length. [ 401.673254][T14113] loop4: detected capacity change from 0 to 8192 [ 401.736824][T14113] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 401.825961][T14113] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 401.835335][T14113] REISERFS (device loop4): using ordered data mode [ 401.842394][T14113] reiserfs: using flush barriers [ 401.852553][T14113] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 401.870807][T14113] REISERFS (device loop4): checking transaction log (loop4) [ 401.936453][T14113] REISERFS (device loop4): Using r5 hash to sort names [ 401.943814][T14113] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 402.100911][T14128] loop0: detected capacity change from 0 to 4096 [ 402.215438][T14133] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 402.220739][T14132] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3182'. [ 402.251166][T14132] netlink: 'syz.6.3182': attribute type 4 has an invalid length. [ 402.266094][T14128] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 402.358225][T14128] Remounting filesystem read-only [ 402.363389][T14128] NILFS error (device loop0): nilfs_readdir: bad page in #2 [ 402.482113][T14137] loop6: detected capacity change from 0 to 1024 [ 402.607122][T14137] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.626742][T14137] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.845303][T12326] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.105291][T14152] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3190'. [ 403.126316][T14152] Zero length message leads to an empty skb [ 403.318130][T14158] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 403.324713][T14160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3194'. [ 403.576123][ T5790] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 403.691071][T14146] loop0: detected capacity change from 0 to 40427 [ 403.712263][T14146] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 403.743056][T14146] F2FS-fs (loop0): Image doesn't support compression [ 403.753157][T14146] F2FS-fs (loop0): Image doesn't support compression [ 403.766230][ T5790] usb 7-1: Using ep0 maxpacket: 32 [ 403.776996][T14146] F2FS-fs (loop0): invalid crc value [ 403.791636][T14146] F2FS-fs (loop0): Found nat_bits in checkpoint [ 403.799989][ T5790] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 403.832378][ T5790] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 403.865829][ T5790] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 403.893391][ T5790] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 403.927626][ T5790] usb 7-1: config 0 interface 0 has no altsetting 0 [ 403.939701][T14146] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 403.947182][ T5790] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 403.975960][ T5790] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 403.994694][ T5790] usb 7-1: Product: syz [ 404.014958][ T5790] usb 7-1: Manufacturer: syz [ 404.019787][ T5790] usb 7-1: SerialNumber: syz [ 404.053838][ T5790] usb 7-1: config 0 descriptor?? [ 404.078970][ T5790] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 404.126684][ T5790] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 404.252369][ T5786] F2FS-fs (loop0): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x5b4/0x19c0 [ 404.303932][ T5786] F2FS-fs (loop0): invalid blkaddr: 1535, type: 10, run fsck to fix. [ 404.347794][ T27] usb 7-1: USB disconnect, device number 9 [ 404.367476][ T27] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 404.516154][ T5790] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 404.734564][ T5790] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 404.745785][ T5790] usb 5-1: config 0 has no interface number 0 [ 404.768148][ T5790] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.797923][ T5790] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.804719][T14169] loop3: detected capacity change from 0 to 40427 [ 404.818193][ T5790] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 404.845523][ T5790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.850964][T14169] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 404.872635][ T5790] usb 5-1: config 0 descriptor?? [ 404.874320][T14169] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 404.923904][T14169] F2FS-fs (loop3): invalid crc value [ 404.984882][T14169] F2FS-fs (loop3): Found nat_bits in checkpoint [ 405.211895][T14169] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 405.222470][T14182] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3202'. [ 405.229763][T14169] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 405.458520][ T5790] prodikeys 0003:041E:2801.001A: unknown global tag 0xe [ 405.480999][ T5790] prodikeys 0003:041E:2801.001A: item 0 1 1 14 parsing failed [ 405.497498][ T5790] prodikeys 0003:041E:2801.001A: hid parse failed [ 405.514486][ T5790] prodikeys: probe of 0003:041E:2801.001A failed with error -22 [ 405.535616][ T5785] syz-executor: attempt to access beyond end of device [ 405.535616][ T5785] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 405.577359][ T5785] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 405.712106][ T5790] usb 5-1: USB disconnect, device number 17 [ 406.602864][T14203] loop4: detected capacity change from 0 to 256 [ 406.683538][T14203] FAT-fs (loop4): Directory bread(block 64) failed [ 406.683578][T14203] FAT-fs (loop4): Directory bread(block 65) failed [ 406.683692][T14203] FAT-fs (loop4): Directory bread(block 66) failed [ 406.683721][T14203] FAT-fs (loop4): Directory bread(block 67) failed [ 406.683823][T14203] FAT-fs (loop4): Directory bread(block 68) failed [ 406.683853][T14203] FAT-fs (loop4): Directory bread(block 69) failed [ 406.683949][T14203] FAT-fs (loop4): Directory bread(block 70) failed [ 406.683978][T14203] FAT-fs (loop4): Directory bread(block 71) failed [ 406.684080][T14203] FAT-fs (loop4): Directory bread(block 72) failed [ 406.684108][T14203] FAT-fs (loop4): Directory bread(block 73) failed [ 406.854216][T14197] loop0: detected capacity change from 0 to 32768 [ 406.870992][T14197] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.3209 (14197) [ 406.892186][T14197] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 406.892284][T14197] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 406.892326][T14197] BTRFS info (device loop0): metadata ratio 2 [ 406.892346][T14197] BTRFS info (device loop0): allowing degraded mounts [ 406.892364][T14197] BTRFS info (device loop0): force zlib compression, level 3 [ 406.892391][T14197] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 406.892413][T14197] BTRFS info (device loop0): use zstd compression, level 3 [ 406.892433][T14197] BTRFS info (device loop0): force clearing of disk cache [ 406.892492][T14197] BTRFS info (device loop0): max_inline at 0 [ 406.892510][T14197] BTRFS info (device loop0): using free space tree [ 406.929776][T14207] sp0: Synchronizing with TNC [ 407.120684][T14197] BTRFS info (device loop0): enabling ssd optimizations [ 407.126922][T14197] BTRFS info (device loop0): rebuilding free space tree [ 407.472702][T14228] loop4: detected capacity change from 0 to 256 [ 407.666317][ T5786] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 407.998938][T13548] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop0 scanned by udevd (13548) [ 408.320839][T14246] loop6: detected capacity change from 0 to 512 [ 408.329546][T14246] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 408.373128][T14246] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #17: comm syz.6.3224: iget: bad i_size value: -6917529027641081756 [ 408.466125][T14246] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.3224: couldn't read orphan inode 17 (err -117) [ 408.537396][T14246] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.697886][T14246] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 408.894364][T12326] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.023814][T14235] loop3: detected capacity change from 0 to 32768 [ 409.181317][T14235] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 409.386176][T14244] loop4: detected capacity change from 0 to 32768 [ 409.412076][T14235] XFS (loop3): Ending clean mount [ 409.509075][T14244] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 409.737686][ T5785] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 409.925980][T14244] XFS (loop4): Ending clean mount [ 410.096506][T14244] XFS (loop4): Quotacheck needed: Please wait. [ 410.303537][T14244] XFS (loop4): Quotacheck: Done. [ 410.708278][T14276] loop0: detected capacity change from 0 to 32768 [ 410.737651][ T5946] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 411.453221][T14290] loop6: detected capacity change from 0 to 32768 [ 411.580601][T14290] read_mapping_page failed! [ 411.601357][T14290] ERROR: (device loop6): txCommit: [ 411.601357][T14290] [ 411.688876][ T61] read_mapping_page failed! [ 411.693840][ T61] ERROR: (device loop6): txCommit: [ 411.693840][ T61] [ 411.702445][ T61] jfs_write_inode: jfs_commit_inode failed! [ 411.916430][ T27] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 412.121532][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 412.132085][ T27] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 412.140635][ T27] usb 4-1: config 0 has no interface number 0 [ 412.159100][ T27] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 412.173069][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=9 [ 412.184191][ T27] usb 4-1: Product: syz [ 412.189063][ T27] usb 4-1: Manufacturer: syz [ 412.193715][ T27] usb 4-1: SerialNumber: syz [ 412.231501][ T27] usb 4-1: config 0 descriptor?? [ 412.243864][ T27] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 412.498431][ T27] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 412.539376][ T27] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 412.783312][T14333] sp0: Synchronizing with TNC [ 412.983998][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 412.985482][ T5870] usb 4-1: USB disconnect, device number 24 [ 413.043536][ T5870] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 413.092858][ T5870] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 413.114654][T14342] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3258'. [ 413.144771][ T5870] quatech2 4-1:0.51: device disconnected [ 413.217231][T14344] sp0: Synchronizing with TNC [ 413.438855][T14352] loop0: detected capacity change from 0 to 512 [ 413.448235][T14352] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 413.546852][ T1188] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 413.557243][T14352] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 413.795845][ T1188] usb 5-1: Using ep0 maxpacket: 8 [ 413.803806][ T1188] usb 5-1: unable to get BOS descriptor or descriptor too short [ 413.823994][ T1188] usb 5-1: config 4 interface 0 has no altsetting 0 [ 413.844147][ T1188] usb 5-1: string descriptor 0 read error: -22 [ 413.856060][ T1188] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 413.875998][ T1188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.913685][ T1188] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 413.973961][ T1188] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 414.020100][ T1188] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 414.050259][ T1188] usb 5-1: media controller created [ 414.113655][ T1188] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 414.134165][T14365] loop3: detected capacity change from 0 to 8 [ 414.242743][ T1188] zl10353_read_register: readreg error (reg=127, ret==0) [ 414.332880][T14365] SQUASHFS error: xz decompression failed, data probably corrupt [ 414.352136][T14365] SQUASHFS error: Failed to read block 0xa8: -5 [ 414.401839][ T1188] usb 5-1: USB disconnect, device number 18 [ 414.413577][T14365] SQUASHFS error: xz decompression failed, data probably corrupt [ 414.433748][T14350] loop6: detected capacity change from 0 to 32768 [ 414.437507][T14365] SQUASHFS error: Failed to read block 0xa8: -5 [ 414.468686][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 414.468701][ T28] audit: type=1800 audit(1757613356.533:162): pid=14365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3269" name="file0" dev="loop3" ino=3 res=0 errno=0 [ 414.537234][T14350] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 414.791818][T14350] XFS (loop6): Ending clean mount [ 414.812371][T14350] XFS (loop6): Quotacheck needed: Please wait. [ 414.894641][T14350] XFS (loop6): Quotacheck: Done. [ 415.225515][T14363] loop0: detected capacity change from 0 to 32768 [ 415.244937][T12326] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 415.333512][T14363] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 415.444897][T14363] XFS (loop0): Ending clean mount [ 415.606001][ T5786] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 416.138944][T14397] loop3: detected capacity change from 0 to 32768 [ 416.156630][T14397] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 416.302532][T13548] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 416.484352][ T27] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 416.747439][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 416.780833][T14415] loop0: detected capacity change from 0 to 512 [ 416.802785][ T27] usb 5-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 416.816189][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.827029][T14415] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 416.842680][ T27] usb 5-1: config 0 descriptor?? [ 416.876554][T14415] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #17: comm syz.0.3287: iget: bad i_size value: -6917529027641081756 [ 416.892717][T14415] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.3287: couldn't read orphan inode 17 (err -117) [ 416.925039][T14415] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.960748][ T5788] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 417.023059][T14415] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 417.112418][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.196617][ T5788] usb 4-1: Using ep0 maxpacket: 32 [ 417.204377][ T5788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.226140][ T5788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.247862][T14426] bond0: entered promiscuous mode [ 417.252986][T14426] bond_slave_0: entered promiscuous mode [ 417.262814][ T5788] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 417.269533][T14426] bond_slave_1: entered promiscuous mode [ 417.298109][T14425] bond0: left promiscuous mode [ 417.303879][ T5788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.308375][T14425] bond_slave_0: left promiscuous mode [ 417.312948][ T27] thrustmaster 0003:044F:B65A.001B: hidraw0: USB HID v0.03 Device [HID 044f:b65a] on usb-dummy_hcd.4-1/input0 [ 417.331371][ T27] thrustmaster 0003:044F:B65A.001B: no inputs found [ 417.340174][ T5788] usb 4-1: config 0 descriptor?? [ 417.347008][T14425] bond_slave_1: left promiscuous mode [ 417.563507][ T27] usb 5-1: USB disconnect, device number 19 [ 417.572902][T14433] loop0: detected capacity change from 0 to 1024 [ 417.799102][ T5788] aquacomputer_d5next 0003:0C70:F0B6.001C: hidraw0: USB HID vff.fc Device [HID 0c70:f0b6] on usb-dummy_hcd.3-1/input0 [ 417.885140][T14437] Bluetooth: MGMT ver 1.22 [ 417.987248][ T5788] usb 4-1: USB disconnect, device number 25 [ 418.025657][T14438] fido_id[14438]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 418.467863][T14455] loop4: detected capacity change from 0 to 512 [ 418.510549][T14455] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 418.526022][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 418.578619][T14455] EXT4-fs (loop4): 1 truncate cleaned up [ 418.585675][T14455] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.596442][T14460] tipc: Started in network mode [ 418.603241][T14460] tipc: Node identity 5e7f486e62b5, cluster identity 4711 [ 418.610914][T14460] tipc: Enabled bearer , priority 10 [ 418.801763][T14466] geneve2: entered promiscuous mode [ 418.829799][ T5946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.144423][T14472] loop3: detected capacity change from 0 to 4096 [ 419.237198][T14476] loop0: detected capacity change from 0 to 4096 [ 419.404035][T14472] ntfs3: loop3: ino=0, "file0" failed to extend initialized size to 8fecc. [ 419.725918][T12443] tipc: Node number set to 1019889774 [ 419.986285][T14495] loop0: detected capacity change from 0 to 256 [ 420.166475][T14497] loop4: detected capacity change from 0 to 256 [ 420.200486][T14499] loop3: detected capacity change from 0 to 256 [ 420.211395][T14497] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 420.243523][T14497] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 420.284385][ T28] audit: type=1800 audit(1757613362.343:163): pid=14499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3325" name="file1" dev="loop3" ino=1048725 res=0 errno=0 [ 420.407382][T14503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3326'. [ 420.608373][T14509] loop3: detected capacity change from 0 to 1024 [ 420.615612][T14510] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3328'. [ 420.643049][T14509] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 420.749537][T14509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.762170][T14516] loop6: detected capacity change from 0 to 64 [ 421.001501][ T28] audit: type=1326 audit(1757613363.053:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.6.3333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c458eba9 code=0x7ffc0000 [ 421.058159][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.078768][ T28] audit: type=1326 audit(1757613363.053:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.6.3333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c458eba9 code=0x7ffc0000 [ 421.141602][ T28] audit: type=1326 audit(1757613363.063:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.6.3333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd4c458eba9 code=0x7ffc0000 [ 421.246171][ T28] audit: type=1326 audit(1757613363.063:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.6.3333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c458eba9 code=0x7ffc0000 [ 421.284635][ T28] audit: type=1326 audit(1757613363.063:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.6.3333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c458eba9 code=0x7ffc0000 [ 421.319115][ T28] audit: type=1326 audit(1757613363.063:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.6.3333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7fd4c458eba9 code=0x7ffc0000 [ 421.358993][ T28] audit: type=1326 audit(1757613363.063:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.6.3333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c458eba9 code=0x7ffc0000 [ 421.599308][T14512] loop0: detected capacity change from 0 to 32768 [ 421.656047][T14512] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.3330 (14512) [ 421.672917][T14528] loop3: detected capacity change from 0 to 256 [ 421.710590][T14512] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 421.736178][T14512] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 421.752517][T14528] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 421.771128][T14512] BTRFS info (device loop0): force zlib compression, level 3 [ 421.801812][T14512] BTRFS info (device loop0): force clearing of disk cache [ 421.820777][T14512] BTRFS info (device loop0): turning off barriers [ 421.854502][T14528] syz.3.3337: attempt to access beyond end of device [ 421.854502][T14528] loop3: rw=0, sector=311, nr_sectors = 1 limit=256 [ 421.869314][T14512] BTRFS info (device loop0): doing ref verification [ 421.886822][T14512] BTRFS info (device loop0): enabling disk space caching [ 421.900088][T14512] BTRFS info (device loop0): disk space caching is enabled [ 422.135925][T14512] BTRFS info (device loop0): enabling ssd optimizations [ 422.142962][T14512] BTRFS info (device loop0): auto enabling async discard [ 422.176806][T14518] loop4: detected capacity change from 0 to 32768 [ 422.227612][T14518] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.3332 (14518) [ 422.240420][T14512] BTRFS info (device loop0): rebuilding free space tree [ 422.278568][T14518] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 422.286685][T14512] BTRFS info (device loop0): disabling free space tree [ 422.313762][T14512] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 422.317382][T14518] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 422.354017][T14512] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 422.363173][T14518] BTRFS info (device loop4): metadata ratio 2 [ 422.385892][T14518] BTRFS info (device loop4): allowing degraded mounts [ 422.410926][T14518] BTRFS info (device loop4): force zlib compression, level 3 [ 422.464262][T14518] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 422.489790][T14518] BTRFS info (device loop4): use zstd compression, level 3 [ 422.520807][T14518] BTRFS info (device loop4): force clearing of disk cache [ 422.540310][T14518] BTRFS info (device loop4): turning on flush-on-commit [ 422.568192][T14518] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 422.604937][T14512] BTRFS info (device loop0): balance: start -slimit=4,stripes=7..9 [ 422.613768][T14518] BTRFS info (device loop4): trying to use backup root at mount time [ 422.633440][T14522] loop6: detected capacity change from 0 to 40427 [ 422.653622][T14518] BTRFS info (device loop4): using free space tree [ 422.660176][T14512] BTRFS info (device loop0): balance: ended with status: 0 [ 422.683898][T14522] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x7 [ 422.695123][T14522] F2FS-fs (loop6): invalid crc value [ 422.757041][T14522] F2FS-fs (loop6): Found nat_bits in checkpoint [ 422.916674][ T5786] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 422.966509][T14518] BTRFS info (device loop4): enabling ssd optimizations [ 422.994220][T14518] BTRFS info (device loop4): rebuilding free space tree [ 423.060669][T14522] F2FS-fs (loop6): Start checkpoint disabled! [ 423.106353][T14522] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 423.579292][ T5946] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 423.645047][ T1124] kworker/u4:6: attempt to access beyond end of device [ 423.645047][ T1124] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 423.692008][ T1124] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 423.702885][ T1124] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 423.972564][T14579] loop3: detected capacity change from 0 to 8192 [ 424.035229][T14579] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 424.083766][T14586] sp0: Synchronizing with TNC [ 424.099895][T14579] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 424.110563][T14579] REISERFS (device loop3): using ordered data mode [ 424.117792][T14579] reiserfs: using flush barriers [ 424.127447][T14579] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 424.173385][T14579] REISERFS (device loop3): checking transaction log (loop3) [ 424.218005][T14579] REISERFS (device loop3): Using rupasov hash to sort names [ 424.225439][T14579] REISERFS (device loop3): using 3.5.x disk format [ 424.238922][T14579] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 424.276268][T14579] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 424.288913][T14579] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 424.302250][T14579] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 424.779122][T14594] netlink: 'syz.3.3349': attribute type 322 has an invalid length. [ 425.389245][T14610] loop6: detected capacity change from 0 to 1024 [ 425.471172][T14610] hfsplus: request for non-existent node 134217728 in B*Tree [ 425.506182][T14610] hfsplus: request for non-existent node 134217728 in B*Tree [ 425.528839][T14612] loop4: detected capacity change from 0 to 512 [ 425.622458][T14612] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.3358: casefold flag without casefold feature [ 425.675949][T14612] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3358: couldn't read orphan inode 15 (err -117) [ 425.767970][T14612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.849031][ T28] audit: type=1800 audit(1757613367.903:171): pid=14612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3358" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 425.946354][ T5946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.957672][T14596] loop0: detected capacity change from 0 to 32768 [ 426.099029][T14607] loop3: detected capacity change from 0 to 32768 [ 426.233254][ T48] read_mapping_page failed! [ 426.245902][T14607] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 426.264251][ T48] ERROR: (device loop0): txCommit: [ 426.264251][ T48] [ 426.335664][ T48] jfs_write_inode: jfs_commit_inode failed! [ 426.412948][T14632] loop6: detected capacity change from 0 to 8 [ 426.535001][T14632] SQUASHFS error: zstd decompression failed, data probably corrupt [ 426.602892][T14607] XFS (loop3): Ending clean mount [ 426.606002][T14632] SQUASHFS error: Failed to read block 0x60: -5 [ 426.634806][T14607] XFS (loop3): Quotacheck needed: Please wait. [ 426.671895][T14632] SQUASHFS error: zstd decompression failed, data probably corrupt [ 426.719101][T14632] SQUASHFS error: Failed to read block 0x60: -5 [ 426.780803][T14607] XFS (loop3): Quotacheck: Done. [ 427.107307][T14644] bond0: option packets_per_slave: invalid value (18446744071562067968) [ 427.126801][T14644] bond0: option packets_per_slave: allowed values 0 - 65535 [ 427.199372][ T5785] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 427.383003][T14651] vlan2: entered promiscuous mode [ 427.412749][T14651] bridge0: entered promiscuous mode [ 428.351992][T14679] loop0: detected capacity change from 0 to 2048 [ 428.372039][T14677] loop6: detected capacity change from 0 to 8192 [ 428.393758][T14677] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 428.413763][T14679] EXT4-fs: Ignoring removed mblk_io_submit option [ 428.416846][T14677] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 428.430559][T14677] REISERFS (device loop6): using ordered data mode [ 428.439612][T14677] reiserfs: using flush barriers [ 428.464323][T14677] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 428.547342][T14679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.604048][T14685] loop3: detected capacity change from 0 to 64 [ 428.607687][T14677] REISERFS (device loop6): checking transaction log (loop6) [ 428.635375][T14668] loop4: detected capacity change from 0 to 32768 [ 428.648761][T14677] REISERFS (device loop6): Using rupasov hash to sort names [ 428.683633][T14677] REISERFS (device loop6): using 3.5.x disk format [ 428.714519][T14677] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 428.752209][T14668] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 428.789130][T14677] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 428.826619][T14679] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.3386: bg 0: block 234: padding at end of block bitmap is not set [ 428.897148][T14677] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 428.930800][T14679] EXT4-fs (loop0): Remounting filesystem read-only [ 429.013014][T14677] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 429.139937][T14668] XFS (loop4): Ending clean mount [ 429.174105][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.193761][T14668] XFS (loop4): Quotacheck needed: Please wait. [ 429.376354][T14668] XFS (loop4): Quotacheck: Done. [ 429.665437][T14700] loop0: detected capacity change from 0 to 512 [ 429.689749][T14700] EXT4-fs: inline encryption not supported [ 429.695654][T14700] EXT4-fs: Ignoring removed mblk_io_submit option [ 429.734986][T14700] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 429.752365][ T5946] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 429.769147][ T28] audit: type=1326 audit(1757613371.823:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14701 comm="syz.6.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c458eba9 code=0x7ffc0000 [ 429.795017][T14700] EXT4-fs (loop0): Test dummy encryption mode enabled [ 429.835850][ T28] audit: type=1326 audit(1757613371.823:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14701 comm="syz.6.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c458eba9 code=0x7ffc0000 [ 429.841243][T14700] EXT4-fs (loop0): orphan cleanup on readonly fs [ 429.880374][ T28] audit: type=1326 audit(1757613371.823:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14701 comm="syz.6.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fd4c458eba9 code=0x7ffc0000 [ 429.880960][T14700] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.3391: inode #13: comm syz.0.3391: iget: illegal inode # [ 429.913556][ T28] audit: type=1326 audit(1757613371.823:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14701 comm="syz.6.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c458eba9 code=0x7ffc0000 [ 430.001856][T14700] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.3391: couldn't read orphan inode 13 (err -117) [ 430.052439][T14700] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 430.082575][T14707] loop6: detected capacity change from 0 to 128 [ 430.249905][T14700] EXT4-fs: inline encryption not supported [ 430.267758][T14707] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 430.273136][T14710] loop4: detected capacity change from 0 to 2048 [ 430.292014][T14700] EXT4-fs: Ignoring removed mblk_io_submit option [ 430.336879][T14700] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 430.339919][T14710] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 430.376655][T14707] ext4 filesystem being mounted at /182/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 430.429360][T14700] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 430.465446][T14711] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 430.486725][T14700] EXT4-fs error (device loop0): __ext4_remount:6743: comm syz.0.3391: Abort forced by user [ 430.513461][T14700] EXT4-fs (loop0): Remounting filesystem read-only [ 430.553120][T14700] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 430.570160][T14714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3396'. [ 430.576586][T12326] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 430.619079][T14700] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 430.619506][T14712] NILFS (loop4): error -2 truncating bmap (ino=16) [ 430.795474][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.837267][T14711] NILFS (loop4): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 430.880566][T14719] loop6: detected capacity change from 0 to 128 [ 430.883209][T14711] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=16) [ 430.910047][T14719] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 430.953360][T14711] Remounting filesystem read-only [ 430.955646][T14719] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 430.981645][ T11] NILFS (loop4): discard dirty page: offset=229376, ino=3 [ 431.016833][ T11] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 431.047354][ T11] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 431.073045][ T11] NILFS (loop4): discard dirty block: blocknr=50, size=1024 [ 431.092572][ T11] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 431.123024][ T11] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 431.140380][ T11] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 431.184262][ T11] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 431.208880][ T11] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 431.219479][ T11] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 431.230432][ T11] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 431.240204][ T11] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 431.266369][ T11] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 431.297582][ T11] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 431.322711][ T11] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 431.356152][ T5946] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 431.398864][ T5946] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 431.423225][ T5946] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 431.456054][ T5946] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 431.466683][ T5946] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 431.485892][ T5946] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 431.495313][ T5946] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 431.526265][ T5946] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 431.533638][ T5946] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 431.551324][ T5946] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 431.565984][ T5946] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 431.840714][T14728] loop6: detected capacity change from 0 to 4096 [ 431.919399][T14722] loop0: detected capacity change from 0 to 32768 [ 431.933681][T14722] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.3397 (14722) [ 431.991563][T14720] loop3: detected capacity change from 0 to 32768 [ 432.042637][T14720] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 432.048182][T14722] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 432.083052][T14722] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 432.088530][T14720] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 432.104455][T14722] BTRFS info (device loop0): using free space tree [ 432.228797][T14720] XFS (loop3): Ending clean mount [ 432.259240][T14722] BTRFS info (device loop0): enabling ssd optimizations [ 432.300920][T14722] BTRFS info (device loop0): auto enabling async discard [ 432.464758][ T5785] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 432.511292][ T28] audit: type=1800 audit(1757613374.563:176): pid=14722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3397" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 432.678850][T14722] BTRFS info (device loop0): balance: start -sconvert=raid0,soft [ 432.728096][T14722] BTRFS info (device loop0): balance: ended with status: 0 [ 433.071681][ T5786] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 433.222616][T14765] tmpfs: Cannot retroactively limit inodes [ 433.580336][T14775] vivid-001: disconnect [ 433.608997][T14774] vivid-001: reconnect [ 434.124817][T14791] loop3: detected capacity change from 0 to 512 [ 434.203645][T14791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.255656][T14795] loop0: detected capacity change from 0 to 512 [ 434.321163][T14795] EXT4-fs: Ignoring removed nobh option [ 434.344850][T14795] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 434.435921][T14795] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.3422: iget: bad i_size value: 38620345925642 [ 434.496919][T14795] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.3422: couldn't read orphan inode 15 (err -117) [ 434.602142][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.628430][T14795] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.674940][T14805] loop4: detected capacity change from 0 to 512 [ 434.679203][T14795] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.3422: invalid indirect mapped block 3973251072 (level 0) [ 434.744755][T14805] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 434.778296][T14805] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 434.807287][T14805] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 434.851123][T14805] System zones: 0-2, 18-18, 34-35 [ 434.898865][T14805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 434.900337][T14810] loop3: detected capacity change from 0 to 256 [ 434.963037][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.046321][T14810] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 435.077136][T14805] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 435.188372][ T28] audit: type=1800 audit(1757613377.253:177): pid=14810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3427" name="file1" dev="loop3" ino=1048729 res=0 errno=0 [ 435.215497][T14810] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 435.246820][ T5946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.264038][ T28] audit: type=1326 audit(1757613377.303:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.6.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c458eba9 code=0x7ffc0000 [ 435.279410][T14810] exFAT-fs (loop3): Filesystem has been set read-only [ 435.304179][T14810] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805f955c60 iblock : 8, err : -5) [ 435.370505][ T28] audit: type=1326 audit(1757613377.303:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.6.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c458eba9 code=0x7ffc0000 [ 435.427591][T14810] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 435.431924][ T28] audit: type=1326 audit(1757613377.323:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.6.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fd4c458eba9 code=0x7ffc0000 [ 435.492962][T14819] loop4: detected capacity change from 0 to 1764 [ 435.502917][ T28] audit: type=1326 audit(1757613377.323:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.6.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c458eba9 code=0x7ffc0000 [ 435.616399][ T28] audit: type=1326 audit(1757613377.323:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.6.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c458eba9 code=0x7ffc0000 [ 435.621288][T14819] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 435.645054][ T28] audit: type=1326 audit(1757613377.333:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.6.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fd4c458eba9 code=0x7ffc0000 [ 435.673134][ T28] audit: type=1326 audit(1757613377.343:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.6.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c458eba9 code=0x7ffc0000 [ 435.938761][T14827] loop3: detected capacity change from 0 to 128 [ 436.013937][T14827] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 436.057078][T14827] ext4 filesystem being mounted at /864/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.153334][T14837] loop6: detected capacity change from 0 to 16 [ 436.193832][T14837] erofs: (device loop6): mounted with root inode @ nid 36. [ 436.233196][T14837] overlayfs: failed to get redirect (-117) [ 436.244369][ T5785] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 436.872181][T14856] loop3: detected capacity change from 0 to 512 [ 436.921743][T14856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.956960][T14856] ext4 filesystem being mounted at /867/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.064016][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.085298][T14868] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3452'. [ 437.097251][T14868] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3452'. [ 437.213516][T14870] loop0: detected capacity change from 0 to 256 [ 437.221538][T14870] exfat: Deprecated parameter 'namecase' [ 437.290903][T14870] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 438.524769][T14910] loop0: detected capacity change from 0 to 1764 [ 438.781582][T14918] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3476'. [ 438.810651][T14920] loop6: detected capacity change from 0 to 256 [ 439.096771][T14928] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3482'. [ 440.144142][ T28] audit: type=1326 audit(1757613382.203:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14960 comm="syz.4.3497" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7facbc98eba9 code=0x0 [ 440.201105][T14938] loop3: detected capacity change from 0 to 32768 [ 440.291712][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.299106][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.578165][T14970] loop6: detected capacity change from 0 to 16 [ 440.602163][ T5785] syz_tun (unregistering): left promiscuous mode [ 440.618842][ T5785] syz_tun (unregistering): left allmulticast mode [ 440.648442][T14970] erofs: (device loop6): mounted with root inode @ nid 36. [ 440.650297][ T5785] team0: Port device syz_tun removed [ 440.724064][ T112] ------------[ cut here ]------------ [ 440.731366][ T112] WARNING: CPU: 0 PID: 112 at fs/jfs/jfs_dmap.c:2875 dbAdjTree+0x448/0x4d0 [ 440.741090][ T112] Modules linked in: [ 440.745058][ T112] CPU: 0 PID: 112 Comm: jfsCommit Not tainted syzkaller #0 [ 440.753319][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 440.763960][ T112] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 440.769991][ T112] Code: e8 7d b7 df fe e9 5a ff ff ff e8 b3 6c 88 fe eb 05 e8 ac 6c 88 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 98 6c 88 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 440.790217][ T112] RSP: 0018:ffffc90002d37648 EFLAGS: 00010293 [ 440.797560][ T112] RAX: ffffffff82fd23a8 RBX: ffff888064303010 RCX: ffff888018f3bc00 [ 440.805681][ T112] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 440.814582][ T112] RBP: 0000000000020056 R08: ffffea000190c0c7 R09: 1ffffd4000321818 [ 440.823181][ T112] R10: dffffc0000000000 R11: fffff94000321819 R12: ffff888064303018 [ 440.831771][ T112] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 440.840816][ T112] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 440.850557][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 440.857850][ T112] CR2: 00002000000004c0 CR3: 000000007a23a000 CR4: 00000000003506f0 [ 440.866457][ T112] Call Trace: [ 440.869801][ T112] [ 440.872776][ T112] ? lock_page+0x2a0/0x2a0 [ 440.877938][ T112] dbJoin+0x238/0x300 [ 440.882002][ T112] dbFreeBits+0x4e2/0xdb0 [ 440.887012][ T112] dbFree+0x332/0x650 [ 440.891183][ T112] txFreeMap+0x9e6/0xde0 [ 440.896313][ T112] ? do_raw_spin_unlock+0x121/0x230 [ 440.901598][ T112] xtTruncate+0xcce/0x2dc0 [ 440.906826][ T112] ? xtInitRoot+0x170/0x170 [ 440.911431][ T112] ? __lock_acquire+0x7c80/0x7c80 [ 440.917051][ T112] ? do_raw_spin_lock+0x121/0x2c0 [ 440.922151][ T112] ? __asan_memset+0x22/0x40 [ 440.927511][ T112] ? __dquot_initialize+0x215/0xcb0 [ 440.932821][ T112] jfs_free_zero_link+0x33b/0x490 [ 440.938773][ T112] ? jfs_write_failed+0x190/0x190 [ 440.944319][ T112] ? sb_clear_inode_writeback+0x360/0x360 [ 440.950754][ T112] ? do_raw_spin_lock+0x121/0x2c0 [ 440.956363][ T112] ? bit_waitqueue+0x30/0x30 [ 440.961021][ T112] jfs_evict_inode+0x35d/0x440 [ 440.966403][ T112] ? evict+0x480/0x870 [ 440.970532][ T112] ? jfs_write_inode+0x220/0x220 [ 440.975622][ T112] evict+0x486/0x870 [ 440.980226][ T112] ? __lock_acquire+0x7c80/0x7c80 [ 440.985560][ T112] ? proc_nr_inodes+0x230/0x230 [ 440.990651][ T112] ? do_raw_spin_unlock+0x121/0x230 [ 440.996066][ T112] ? _raw_spin_unlock+0x28/0x40 [ 441.001782][ T112] ? iput+0x70a/0x920 [ 441.006231][ T112] jfs_lazycommit+0x42b/0xa60 [ 441.011076][ T112] ? txFreelock+0x5a0/0x5a0 [ 441.016324][ T112] ? do_task_dead+0xd0/0xd0 [ 441.021505][ T112] ? __kthread_parkme+0x7a/0x1c0 [ 441.027091][ T112] kthread+0x2fa/0x390 [ 441.031225][ T112] ? txFreelock+0x5a0/0x5a0 [ 441.036477][ T112] ? kthread_blkcg+0xd0/0xd0 [ 441.043700][ T112] ret_from_fork+0x48/0x80 [ 441.049720][ T112] ? kthread_blkcg+0xd0/0xd0 [ 441.054687][ T112] ret_from_fork_asm+0x11/0x20 [ 441.060660][ T112] [ 441.063916][ T112] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 441.071850][ T112] CPU: 0 PID: 112 Comm: jfsCommit Not tainted syzkaller #0 [ 441.079173][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 441.089537][ T112] Call Trace: [ 441.092837][ T112] [ 441.095959][ T112] dump_stack_lvl+0x16c/0x230 [ 441.100679][ T112] ? show_regs_print_info+0x20/0x20 [ 441.105923][ T112] ? load_image+0x3b0/0x3b0 [ 441.110465][ T112] panic+0x2c0/0x710 [ 441.114846][ T112] ? bpf_jit_dump+0xd0/0xd0 [ 441.119401][ T112] ? ret_from_fork_asm+0x11/0x20 [ 441.124469][ T112] __warn+0x2e0/0x470 [ 441.128484][ T112] ? dbAdjTree+0x448/0x4d0 [ 441.132925][ T112] ? dbAdjTree+0x448/0x4d0 [ 441.137445][ T112] report_bug+0x2be/0x4f0 [ 441.141800][ T112] ? dbAdjTree+0x448/0x4d0 [ 441.146236][ T112] ? dbAdjTree+0x448/0x4d0 [ 441.150778][ T112] ? dbAdjTree+0x44a/0x4d0 [ 441.155213][ T112] handle_bug+0xcf/0x120 [ 441.159570][ T112] exc_invalid_op+0x1a/0x50 [ 441.164089][ T112] asm_exc_invalid_op+0x1a/0x20 [ 441.169047][ T112] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 441.174186][ T112] Code: e8 7d b7 df fe e9 5a ff ff ff e8 b3 6c 88 fe eb 05 e8 ac 6c 88 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 98 6c 88 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 441.193809][ T112] RSP: 0018:ffffc90002d37648 EFLAGS: 00010293 [ 441.199892][ T112] RAX: ffffffff82fd23a8 RBX: ffff888064303010 RCX: ffff888018f3bc00 [ 441.208516][ T112] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 441.216676][ T112] RBP: 0000000000020056 R08: ffffea000190c0c7 R09: 1ffffd4000321818 [ 441.224920][ T112] R10: dffffc0000000000 R11: fffff94000321819 R12: ffff888064303018 [ 441.233284][ T112] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 441.241473][ T112] ? dbAdjTree+0x448/0x4d0 [ 441.246024][ T112] ? dbAdjTree+0x448/0x4d0 [ 441.250662][ T112] ? lock_page+0x2a0/0x2a0 [ 441.255111][ T112] dbJoin+0x238/0x300 [ 441.259413][ T112] dbFreeBits+0x4e2/0xdb0 [ 441.263867][ T112] dbFree+0x332/0x650 [ 441.268173][ T112] txFreeMap+0x9e6/0xde0 [ 441.272586][ T112] ? do_raw_spin_unlock+0x121/0x230 [ 441.278272][ T112] xtTruncate+0xcce/0x2dc0 [ 441.283042][ T112] ? xtInitRoot+0x170/0x170 [ 441.287844][ T112] ? __lock_acquire+0x7c80/0x7c80 [ 441.292900][ T112] ? do_raw_spin_lock+0x121/0x2c0 [ 441.298146][ T112] ? __asan_memset+0x22/0x40 [ 441.302789][ T112] ? __dquot_initialize+0x215/0xcb0 [ 441.308176][ T112] jfs_free_zero_link+0x33b/0x490 [ 441.313318][ T112] ? jfs_write_failed+0x190/0x190 [ 441.318542][ T112] ? sb_clear_inode_writeback+0x360/0x360 [ 441.324411][ T112] ? do_raw_spin_lock+0x121/0x2c0 [ 441.329751][ T112] ? bit_waitqueue+0x30/0x30 [ 441.334659][ T112] jfs_evict_inode+0x35d/0x440 [ 441.339651][ T112] ? evict+0x480/0x870 [ 441.343774][ T112] ? jfs_write_inode+0x220/0x220 [ 441.348746][ T112] evict+0x486/0x870 [ 441.352662][ T112] ? __lock_acquire+0x7c80/0x7c80 [ 441.358070][ T112] ? proc_nr_inodes+0x230/0x230 [ 441.363041][ T112] ? do_raw_spin_unlock+0x121/0x230 [ 441.368287][ T112] ? _raw_spin_unlock+0x28/0x40 [ 441.373633][ T112] ? iput+0x70a/0x920 [ 441.377710][ T112] jfs_lazycommit+0x42b/0xa60 [ 441.382503][ T112] ? txFreelock+0x5a0/0x5a0 [ 441.387220][ T112] ? do_task_dead+0xd0/0xd0 [ 441.391767][ T112] ? __kthread_parkme+0x7a/0x1c0 [ 441.396779][ T112] kthread+0x2fa/0x390 [ 441.401066][ T112] ? txFreelock+0x5a0/0x5a0 [ 441.405956][ T112] ? kthread_blkcg+0xd0/0xd0 [ 441.410583][ T112] ret_from_fork+0x48/0x80 [ 441.415034][ T112] ? kthread_blkcg+0xd0/0xd0 [ 441.419652][ T112] ret_from_fork_asm+0x11/0x20 [ 441.424451][ T112] [ 441.427802][ T112] Kernel Offset: disabled [ 441.432387][ T112] Rebooting in 86400 seconds..