last executing test programs: 4.886790015s ago: executing program 3 (id=695): io_uring_setup(0xd73, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x2, 0x64}) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) 4.51992067s ago: executing program 3 (id=696): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[], 0xf5, 0x1213, &(0x7f0000000600)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 4.514674971s ago: executing program 0 (id=697): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0xf01c, 0x141000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1', [{0x20, '\xc6\x8c\xd7\xf3|\xc7\x8d\xf3\xcd\xc4\xc4\x87\xc5\x9c\xb3\x93\xe2\x80\x96lr\xdb\x82\xb9C\xe0#c\x1b\x173Ur{E$\xa2*0S\xda2\xf2a6\x93]\x9eK|\\\x1a\xba\x8c\xce9\xa7\xaf\xf7\xb8\xf8i\xc3\xef\n\bR==\x81\x8d6 \x95\xd0\xbf\x80\x97\x9bQR\xdfw\xd2\x0e`\xbd\xb4\x153\x0f]\xaa-\x81Q)k-c0x0) syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_destroy(r0) 2.309980432s ago: executing program 0 (id=704): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f00000004c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={r2, 0x12}, 0x8) 1.671746295s ago: executing program 2 (id=705): io_uring_setup(0xd73, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x2, 0x64}) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) 1.671598205s ago: executing program 3 (id=706): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000d40)=0xf) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 1.558842153s ago: executing program 3 (id=707): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)={0x30, r3, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x38}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) 1.488347838s ago: executing program 2 (id=708): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfe54, &(0x7f0000001b00)=ANY=[], 0x0) 1.466553469s ago: executing program 3 (id=709): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000000705000008004ef02d35010000000000950000000000000069163c0000000000bf67000000000000350605000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9d0cc7d3b4814261bdb94a050000a28a404be266df76965947c73c00c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e567238809000000000000000ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eb29000000000000003cc3aa39ee4b1386bab561cda886fa64ffffff7f473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59801fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d00000000d3114dbc7e2bf2402a75fd7a5573336004088000000000000000fb38c7f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf73400000000000000cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca8710d5c617df01f82a73f6bd61d1f5b2a443faa9bda0577383dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea90000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8a10300004d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c39e9d8547c666b6764a3c7dd62a94eee45881441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a365b5b11df7216652b5703f31e078ecdefe8e6bfc45a9980a7a8de863e3477dd47d0f11611ca92d89641a183c8f629f17cfc28fde209a793d9c0cdde3bb3f82670d33396982988b9f5207a732908fdf1506f307ccae47a69319ee2242272e4f7ceb7a40e49a21ce6405af3ecb3381bf0668749c81fc6c2d97e68a693e3e622af52e572f4fa7b20d5c72cf5ff8016461130a46803de45029489921a48bd7688dd593e4a3e9803263ecbd8ae8570293508ebe5fabc1842cbc01ae8fabbf41820c31b7bb83a3439d4540f839ed5c23828a33d7645baa1ec32bb7aa8a786bb0997ccf6bba0a2cf6ef2157a63974d5e525a3f3f7f993ea9e82732ccc2e12c631012175d5d474bef818bdf8f27a7e563684a225dee6ca5f5ff18a89ac6c627ff0e0e4769b6fbcfc847b20960704a4b13e962333bddb966de8bcade6f6bd3915a580ddec2e1bd88fbfdb749789cdc946822212f1cbacb03ba8d3e51e48ccdae20a43bf79ca0131b830620a97877242989e78dfec1d6df5f97ca5cddece50d0cae5d6eabbc1913aa3660e0b00000000000000000000004000bc16b71cb118d93461aa2914d6e454ef05c41beab7382787ba46b68c8d8b35da9fb58b259b4447b59c667ddcac0bb2d066eb0579be84bdca8ed5d693411b7e5b21efaceddacef03daa9772f2715b5613ae0d88f8d109e36f8b8871b646d9ebbcc25d527ad3f828c92cb6597f82ed4d496a519007781be0c7cac07fc508a585f415ef81a887475286df80fb6ff9c6524d0e22d50f88ca15545bc688063b04eb8e0248aca60b9983dd5966216499ccfc0551f6e0323859ae64f55e4d496a695f8e6382aa714b92f95dcfd0b456d9ce7a24f736e4009ef64230e8f83f8283a4cc5f178d4698b94ccd8d0e0e3e2e35e1a7ac0cb3ee52013e8c2802d2f89b3f708fb53c17c3e4fbe0326ee510c4317b5f5f1eb34ca8441c23755acfc469909b16fba134de01d484c1b380622d37"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) 1.280459742s ago: executing program 2 (id=710): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x9, 0x0, 0x7995}, 0xfcb9, 0x0, 0x0, 0x48000000, 0x8, 0x0, 0x0}) readv(r1, &(0x7f0000000200)=[{&(0x7f0000003180)=""/4108, 0x100c}], 0x1) 1.244022275s ago: executing program 1 (id=711): syz_emit_ethernet(0x66, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @loopback}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x200000, {{}, 0xfffff788}}}}}}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0xcc0, 0x0, @val=@iter={&(0x7f0000000000)=@map_fd=r0, 0x10}}, 0x20) 1.243761975s ago: executing program 0 (id=712): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4173, &(0x7f0000000180)={0x0, 0xbf56, 0x10000, 0x2, 0x2d0}, &(0x7f0000001040), &(0x7f0000001080), &(0x7f0000000000)) io_uring_enter(r0, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) 1.077306226s ago: executing program 1 (id=713): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, r1, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x7}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000380)={0x48, 0x8, r2, 0x0, 0x4, 0x1, &(0x7f0000000a80)="e3", 0x5}) 997.067992ms ago: executing program 2 (id=714): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x20108c0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32, @ANYBLOB="a783c89422e31c30d6bf831c4426922089e2b8944eda733c7bed9440aee9df8636110f251ff75794e847bbad8f5979c9d55434d5344bc268e61948fc8a8ffe2d27c14972f79c1c977c01b4a8a4e35f14d116c59482add0c31e922b29fb4c24948818edc636cced878ca31c24c6a3a31bcdca27864f7611d3163d21939c3c5afb70", @ANYBLOB="013ced044bdd1d80c6a59bca5c1f9d57c0bf983de420f461a7414616093c243234af9243259143a1df24ac0219d7c378a65b310c8b4a0a5be52831340548247ed220c3c9fbc83337fa0b63b0a54e73ff5f9b6625b0faa1fb755e1af638d96ec92d0802aa01c49d12703c6452c7b0edad1ecfdc926cf6ee88d55c25510952b43a773f9cd35d70e03d69b2af2ead1c39ef1c55be4e5afc92674e57e227951a9706cec7b734dec89e0ed0de44f23a3de29cee4de42e117c71af53f785eb2feb89"], 0xfa, 0x61ee, &(0x7f0000012cc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000021c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r0, 0x0, 0x0) 915.024397ms ago: executing program 1 (id=715): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 683.444113ms ago: executing program 1 (id=716): io_uring_setup(0xd73, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x2, 0x64}) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) 438.67192ms ago: executing program 1 (id=717): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x1, r0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2ed, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 99.936163ms ago: executing program 1 (id=718): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 0s ago: executing program 2 (id=719): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x2003, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) kernel console output (not intermixed with test programs): erval = 5 seconds, CP frequency < 30 seconds [ 99.780063][ T6094] BTRFS info (device loop0): enabling ssd optimizations [ 99.792297][ T6094] BTRFS info (device loop0): auto enabling async discard [ 99.828160][ T6107] syz.2.88 (6107) used greatest stack depth: 19344 bytes left [ 99.836950][ T28] audit: type=1804 audit(1775617096.795:6): pid=6107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.88" name="/newroot/19/file1/file1" dev="loop2" ino=15 res=1 errno=0 [ 99.908415][ T23] usb 2-1: USB disconnect, device number 3 [ 100.126704][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.91'. [ 100.165404][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.195089][ T5775] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 100.383021][ T6128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.663616][ T6136] syz.1.94 uses obsolete (PF_INET,SOCK_PACKET) [ 100.974927][ T5811] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.169414][ T6153] loop1: detected capacity change from 0 to 1024 [ 101.180418][ T5811] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 101.197233][ T6153] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.208645][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.208695][ T5811] usb 1-1: Product: syz [ 101.208711][ T5811] usb 1-1: Manufacturer: syz [ 101.208725][ T5811] usb 1-1: SerialNumber: syz [ 101.237020][ T5811] usb 1-1: config 0 descriptor?? [ 101.266843][ T6153] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 101.284807][ T6153] System zones: 0-1, 3-36 [ 101.293757][ T5811] hub 1-1:0.0: bad descriptor, ignoring hub [ 101.331998][ T6153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.337295][ T5811] hub: probe of 1-1:0.0 failed with error -5 [ 101.395954][ T6161] loop2: detected capacity change from 0 to 512 [ 101.438937][ T6161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.498780][ T5811] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 101.523479][ T5811] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 101.545114][ T5811] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 101.598680][ T5811] usb 1-1: media controller created [ 101.604195][ T28] audit: type=1800 audit(1775617098.555:7): pid=6161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.105" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 101.651213][ T5811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 101.665521][ T28] audit: type=1800 audit(1775617098.565:8): pid=6161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.105" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 101.697940][ T28] audit: type=1800 audit(1775617098.605:9): pid=6161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.105" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 101.740116][ T6139] dib0700: tx buffer length is larger than 4. Not supported. [ 101.800190][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.830856][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.895272][ T5811] DVB: Unable to find symbol dib7000p_attach() [ 101.901543][ T5811] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 102.060801][ T6169] loop1: detected capacity change from 0 to 2048 [ 102.072194][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.107'. [ 102.094801][ T5811] rc_core: IR keymap rc-dib0700-rc5 not found [ 102.114853][ T5811] Registered IR keymap rc-empty [ 102.120166][ T5811] dvb-usb: could not initialize remote control. [ 102.134730][ T5811] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 102.148021][ T6169] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.175399][ T5811] usb 1-1: USB disconnect, device number 4 [ 102.313551][ T5811] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 102.481806][ T6163] loop3: detected capacity change from 0 to 32768 [ 102.496944][ T6174] loop2: detected capacity change from 0 to 512 [ 102.514008][ T6174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.548036][ T6163] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.106 (6163) [ 102.708023][ T6163] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 102.730010][ T6163] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 102.740557][ T6163] BTRFS info (device loop3): using free space tree [ 102.883178][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.893197][ T6163] BTRFS info (device loop3): enabling ssd optimizations [ 102.915216][ T6163] BTRFS info (device loop3): auto enabling async discard [ 103.260513][ T5774] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 103.312156][ T6203] netlink: 16 bytes leftover after parsing attributes in process `syz.1.113'. [ 103.450127][ T6206] netlink: 'syz.2.116': attribute type 20 has an invalid length. [ 103.511312][ T5916] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop3 scanned by udevd (5916) [ 104.179339][ T6228] loop0: detected capacity change from 0 to 128 [ 104.980301][ T6230] loop3: detected capacity change from 0 to 40427 [ 104.988694][ T6236] syzkaller1: entered promiscuous mode [ 104.994264][ T6236] syzkaller1: entered allmulticast mode [ 105.003049][ T6230] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 105.044158][ T6230] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 105.090106][ T6230] F2FS-fs (loop3): invalid crc value [ 105.120612][ T6230] F2FS-fs (loop3): Found nat_bits in checkpoint [ 105.317296][ T6242] process 'syz.2.130' launched './file0' with NULL argv: empty string added [ 105.349953][ T6242] Invalid argument reading file caps for ./file0 [ 105.366839][ T6230] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 105.380792][ T6230] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 105.742881][ T6251] loop2: detected capacity change from 0 to 256 [ 105.758049][ T6237] loop1: detected capacity change from 0 to 32768 [ 105.774287][ T6237] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.129 (6237) [ 105.802270][ T6237] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 105.825602][ T6237] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 105.841723][ T6237] BTRFS info (device loop1): setting nodatasum [ 105.854712][ T5811] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 105.905434][ T6237] BTRFS info (device loop1): force zlib compression, level 3 [ 105.912930][ T6237] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 105.933978][ T6237] BTRFS info (device loop1): use lzo compression, level 0 [ 105.954170][ T6237] BTRFS info (device loop1): turning on flush-on-commit [ 105.978123][ T6237] BTRFS info (device loop1): enabling auto defrag [ 106.005249][ T6237] BTRFS info (device loop1): max_inline at 4096 [ 106.021807][ T6237] BTRFS info (device loop1): using free space tree [ 106.087226][ T5811] usb 1-1: Using ep0 maxpacket: 8 [ 106.099806][ T5811] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 106.135539][ T5811] usb 1-1: config 0 has no interface number 0 [ 106.141769][ T5811] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 106.220829][ T6237] BTRFS info (device loop1): enabling ssd optimizations [ 106.253755][ T5811] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 106.289181][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 106.323863][ T5811] usb 1-1: Product: syz [ 106.352436][ T5811] usb 1-1: config 0 descriptor?? [ 106.390548][ T5811] iowarrior 1-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 106.525350][ T5773] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 106.684951][ T5811] usb 1-1: USB disconnect, device number 5 [ 106.690876][ C0] iowarrior 1-1:0.8: iowarrior_callback - usb_submit_urb failed with result -19 [ 107.020300][ T6282] loop1: detected capacity change from 0 to 128 [ 107.121403][ T28] audit: type=1800 audit(1775617104.095:10): pid=6282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.139" name="file2" dev="loop1" ino=1048598 res=0 errno=0 [ 107.161908][ T6282] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 107.200131][ T6282] FAT-fs (loop1): Filesystem has been set read-only [ 107.218167][ T6282] syz.1.139: attempt to access beyond end of device [ 107.218167][ T6282] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 107.255973][ T6282] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 107.287865][ T6282] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 107.380359][ T6274] mmap: syz.2.137 (6274) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 107.493511][ T6279] loop3: detected capacity change from 0 to 32768 [ 107.530459][ T6279] (syz.3.135,6279,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 107.557911][ T6279] (syz.3.135,6279,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 107.632599][ T6279] JBD2: Ignoring recovery information on journal [ 107.728594][ T6279] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 107.815772][ T5811] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 108.056815][ T5811] usb 2-1: Using ep0 maxpacket: 32 [ 108.097497][ T6298] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 108.097642][ T5811] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 108.116039][ T5811] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 108.138716][ T5811] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 108.160745][ T5811] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 108.174210][ T5811] usb 2-1: config 0 interface 0 has no altsetting 0 [ 108.194323][ T5811] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 108.224521][ T5811] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 108.233107][ T5811] usb 2-1: Product: syz [ 108.237933][ T5811] usb 2-1: Manufacturer: syz [ 108.242635][ T5811] usb 2-1: SerialNumber: syz [ 108.249333][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 108.262687][ T5811] usb 2-1: config 0 descriptor?? [ 108.309770][ T5811] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 108.355002][ T5811] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 108.678544][ T6286] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 108.685844][ T27] usb 2-1: USB disconnect, device number 4 [ 108.686317][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 108.715225][ T27] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 108.732205][ T6305] macvlan0: entered promiscuous mode [ 108.758479][ T6305] team0: entered promiscuous mode [ 108.763577][ T6305] team_slave_0: entered promiscuous mode [ 108.794851][ T6305] team_slave_1: entered promiscuous mode [ 108.817566][ T6305] hsr1: entered promiscuous mode [ 108.822621][ T6305] hsr1: entered allmulticast mode [ 108.841512][ T6300] loop2: detected capacity change from 0 to 32768 [ 108.848088][ T6305] macvlan0: entered allmulticast mode [ 108.853501][ T6305] veth1_vlan: entered allmulticast mode [ 108.864749][ T6305] team0: entered allmulticast mode [ 108.879455][ T6305] team_slave_0: entered allmulticast mode [ 108.896380][ T6300] JBD2: Ignoring recovery information on journal [ 108.904733][ T6305] team_slave_1: entered allmulticast mode [ 108.947796][ T6300] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 109.226545][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 109.672964][ T6323] serio: Serial port ptm0 [ 110.463236][ T6346] overlayfs: failed to verify origin (newroot/42, ino=233, err=-116) [ 110.498273][ T6346] overlayfs: failed to verify upper root origin [ 111.220747][ T6343] loop2: detected capacity change from 0 to 32768 [ 111.340571][ T6343] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 111.368328][ T6348] loop1: detected capacity change from 0 to 32768 [ 111.381909][ T6343] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 111.424005][ T6348] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 scanned by syz.1.165 (6348) [ 111.530164][ T6343] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 111.564179][ T6006] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 111.573272][ T6006] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 111.683675][ T6006] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 110ms [ 111.697772][ T6006] gfs2: fsid=syz:syz.0: jid=0: Done [ 111.709706][ T6343] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 111.786322][ T6348] BTRFS info (device loop1): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 111.838138][ T6348] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 111.901451][ T6348] BTRFS info (device loop1): using free space tree [ 112.145640][ T6343] gfs2: fsid=syz:syz.0: found 1 quota changes [ 112.172844][ T6348] BTRFS info (device loop1): enabling ssd optimizations [ 112.196224][ T6348] BTRFS info (device loop1): auto enabling async discard [ 112.561668][ T6378] Invalid argument reading file caps for ./file0 [ 112.715680][ T5772] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 112.715680][ T5772] inode = 11 2339 [ 112.715680][ T5772] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 472 [ 112.771061][ T5772] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 112.897785][ T5772] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5772 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 112.971181][ T5772] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 113.014276][ T5772] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 113.072339][ T5772] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 113.131900][ T6352] loop0: detected capacity change from 0 to 262144 [ 113.141144][ T5772] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 113.148687][ T5772] gfs2: fsid=syz:syz.0: File system withdrawn [ 113.154867][ T5772] CPU: 0 PID: 5772 Comm: syz-executor Not tainted syzkaller #0 [ 113.162458][ T5772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 113.172570][ T5772] Call Trace: [ 113.175906][ T5772] [ 113.178877][ T5772] dump_stack_lvl+0x18c/0x250 [ 113.183621][ T5772] ? kobject_uevent_env+0x363/0x8b0 [ 113.188882][ T5772] ? show_regs_print_info+0x20/0x20 [ 113.194164][ T5772] ? load_image+0x420/0x420 [ 113.198720][ T5772] ? kobject_uevent_env+0x363/0x8b0 [ 113.203987][ T5772] gfs2_withdraw+0xb24/0x13d0 [ 113.208742][ T5772] ? gfs2_lm+0x240/0x240 [ 113.213038][ T5772] ? gfs2_consist_inode_i+0xf5/0x110 [ 113.218462][ T5772] gfs2_inode_refresh+0xb89/0x1000 [ 113.223626][ T5772] ? gfs2_inode_metasync+0xf0/0xf0 [ 113.228791][ T5772] ? gfs2_glock_nq+0xd4f/0x1420 [ 113.233708][ T5772] gfs2_instantiate+0x162/0x220 [ 113.238625][ T5772] gfs2_glock_wait+0x1d4/0x2a0 [ 113.243443][ T5772] do_sync+0x4c6/0xe50 [ 113.247553][ T5772] ? gfs2_quota_sync+0x411/0x5a0 [ 113.252529][ T5772] ? bh_get+0x760/0x760 [ 113.256720][ T5772] ? __lock_acquire+0x7d40/0x7d40 [ 113.261789][ T5772] ? do_raw_spin_lock+0x11f/0x2c0 [ 113.266853][ T5772] ? gfs2_quota_sync+0x411/0x5a0 [ 113.271807][ T5772] ? do_raw_spin_unlock+0x121/0x230 [ 113.277044][ T5772] gfs2_quota_sync+0x411/0x5a0 [ 113.281858][ T5772] gfs2_sync_fs+0x4c/0xb0 [ 113.286222][ T5772] sync_filesystem+0xea/0x220 [ 113.291100][ T5772] generic_shutdown_super+0x6f/0x2b0 [ 113.296411][ T5772] kill_block_super+0x44/0x90 [ 113.301132][ T5772] deactivate_locked_super+0x97/0x100 [ 113.306528][ T5772] cleanup_mnt+0x43b/0x4d0 [ 113.310979][ T5772] task_work_run+0x1d4/0x260 [ 113.315596][ T5772] ? task_work_cancel+0x220/0x220 [ 113.320654][ T5772] ? exit_to_user_mode_loop+0x3b/0x110 [ 113.326326][ T5772] exit_to_user_mode_loop+0xe6/0x110 [ 113.331646][ T5772] exit_to_user_mode_prepare+0xee/0x180 [ 113.337220][ T5772] syscall_exit_to_user_mode+0x1a/0x50 [ 113.342789][ T5772] do_syscall_64+0x61/0xa0 [ 113.347239][ T5772] ? clear_bhb_loop+0x40/0x90 [ 113.351945][ T5772] ? clear_bhb_loop+0x40/0x90 [ 113.356645][ T5772] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.362563][ T5772] RIP: 0033:0x7fc27b59da57 [ 113.367029][ T5772] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 113.386651][ T5772] RSP: 002b:00007ffff368f1b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 113.395083][ T5772] RAX: 0000000000000000 RBX: 00007fc27b632048 RCX: 00007fc27b59da57 [ 113.403075][ T5772] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffff368f270 [ 113.411066][ T5772] RBP: 00007ffff368f270 R08: 00007ffff3690270 R09: 00000000ffffffff [ 113.419081][ T5772] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffff3690300 [ 113.427075][ T5772] R13: 00007fc27b632048 R14: 000000000001b6f8 R15: 00007ffff3690340 [ 113.435083][ T5772] [ 113.455064][ T6352] F2FS-fs (loop0): invalid crc value [ 113.507222][ T6352] F2FS-fs (loop0): Found nat_bits in checkpoint [ 113.604460][ T5773] BTRFS info (device loop1): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 113.653610][ T6352] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 114.252515][ T6393] loop3: detected capacity change from 0 to 4096 [ 114.294933][ T6393] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 114.520611][ T6393] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 114.547446][ T6393] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 114.638066][ T28] audit: type=1800 audit(1775617111.615:11): pid=6393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.174" name="file1" dev="loop3" ino=24 res=0 errno=0 [ 114.992032][ T6396] loop2: detected capacity change from 0 to 32768 [ 115.032793][ T6396] (syz.2.170,6396,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 115.066330][ T6396] (syz.2.170,6396,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 115.132691][ T6396] JBD2: Ignoring recovery information on journal [ 115.144770][ T788] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 115.239096][ T6396] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 115.262816][ T6398] loop1: detected capacity change from 0 to 32768 [ 115.334715][ T788] usb 4-1: Using ep0 maxpacket: 16 [ 115.345673][ T788] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.357860][ T788] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.368670][ T6398] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 115.378927][ T788] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 115.391647][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.542718][ T6398] XFS (loop1): Ending clean mount [ 115.622322][ T23] XFS (loop1): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:112). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 115.646357][ T23] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x20 [ 115.663308][ T23] XFS (loop1): Unmount and run xfs_repair [ 115.669835][ T23] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 115.677475][ T23] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 115.691176][ T23] 00000010: 00 00 00 00 00 00 00 20 00 00 00 02 00 00 00 10 ....... ........ [ 115.714867][ T23] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 115.744058][ T23] 00000030: 00 00 00 00 ca b4 20 ce 00 00 11 40 00 00 40 37 ...... ....@..@7 [ 115.765532][ T23] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 115.774471][ T23] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 115.807872][ T23] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 115.834710][ T23] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 115.847610][ T6398] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x20 len 8 error 74 [ 115.868486][ T788] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 115.887688][ T6398] XFS (loop1): Failed to initialize disk quotas. [ 115.986236][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 116.120636][ T788] usb 4-1: USB disconnect, device number 4 [ 116.154419][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 116.518316][ T6416] loop2: detected capacity change from 0 to 256 [ 116.579473][ T6416] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 117.215915][ T28] audit: type=1326 audit(1775617114.175:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.2.182" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc27b59c819 code=0x0 [ 117.414770][ T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 117.594850][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 117.607306][ T23] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 117.616260][ T23] usb 4-1: config 0 has no interface number 0 [ 117.632157][ T23] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 117.642484][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.663366][ T23] usb 4-1: Product: syz [ 117.683769][ T23] usb 4-1: Manufacturer: syz [ 117.699894][ T23] usb 4-1: SerialNumber: syz [ 117.736167][ T23] usb 4-1: config 0 descriptor?? [ 117.768173][ T6418] loop0: detected capacity change from 0 to 131072 [ 117.778148][ T6418] F2FS-fs (loop0): invalid crc value [ 117.781415][ T23] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 117.826340][ T6418] F2FS-fs (loop0): Found nat_bits in checkpoint [ 117.874056][ T6418] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 117.962629][ T6418] F2FS-fs (loop0): inconsistent node block, nid:7, node_footer[nid:2782593031,ino:0,ofs:0,cpver:1219692001,blkaddr:4611] [ 117.984852][ T6418] F2FS-fs (loop0): inconsistent node block, nid:7, node_footer[nid:2782593031,ino:0,ofs:0,cpver:1219692001,blkaddr:4611] [ 118.035683][ T23] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 118.083715][ T23] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 118.359669][ T6427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.405217][ T6427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.636111][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 118.653128][ T6434] loop1: detected capacity change from 0 to 32768 [ 118.656647][ T27] usb 4-1: USB disconnect, device number 5 [ 118.686348][ T27] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 118.734029][ T6434] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 118.755029][ T27] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 118.768621][ T27] quatech2 4-1:0.51: device disconnected [ 119.041839][ T6434] XFS (loop1): Ending clean mount [ 119.107152][ T6434] XFS (loop1): Quotacheck needed: Please wait. [ 119.277216][ T6434] XFS (loop1): Quotacheck: Done. [ 119.523934][ T6445] loop2: detected capacity change from 0 to 32768 [ 119.586158][ T6447] loop0: detected capacity change from 0 to 32768 [ 119.631050][ T6445] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 119.655279][ T5773] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 119.682705][ T6447] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 119.790423][ T6447] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 119.981720][ T6445] syz.2.187 (6445) used greatest stack depth: 18736 bytes left [ 120.074118][ T5775] (syz-executor,5775,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 120.129788][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 120.154146][ T5775] ocfs2: Unmounting device (7,0) on (node local) [ 120.650628][ T6480] loop1: detected capacity change from 0 to 256 [ 120.905031][ T788] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 120.997705][ T6488] loop2: detected capacity change from 0 to 64 [ 121.126550][ T788] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 121.137972][ T788] usb 4-1: config 0 has no interface number 0 [ 121.144208][ T788] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 121.179249][ T788] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 121.193595][ T788] usb 4-1: config 0 interface 255 has no altsetting 0 [ 121.208095][ T788] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 121.219003][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.262442][ T6488] overlayfs: upper fs needs to support d_type. [ 121.271233][ T788] usb 4-1: config 0 descriptor?? [ 121.285031][ T788] ums-realtek 4-1:0.255: USB Mass Storage device detected [ 121.301898][ T6488] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 121.312299][ T6488] overlayfs: failed to set xattr on upper [ 121.323815][ T6488] overlayfs: ...falling back to redirect_dir=nofollow. [ 121.332798][ T6488] overlayfs: ...falling back to index=off. [ 121.342893][ T6488] overlayfs: ...falling back to uuid=null. [ 121.541458][ T5811] usb 4-1: USB disconnect, device number 6 [ 121.563758][ T5772] syz-executor: attempt to access beyond end of device [ 121.563758][ T5772] loop2: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 121.598770][ T5772] Buffer I/O error on dev loop2, logical block 134217734, async page read [ 121.641318][ T5772] syz-executor: attempt to access beyond end of device [ 121.641318][ T5772] loop2: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 121.659470][ T5772] Buffer I/O error on dev loop2, logical block 134217734, async page read [ 121.732688][ T5772] Trying to free block not in datazone [ 121.858114][ T6504] input: syz0 as /devices/virtual/input/input8 [ 122.472234][ T6525] warning: `syz.3.214' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 123.154716][ T6544] capability: warning: `syz.3.220' uses deprecated v2 capabilities in a way that may be insecure [ 123.167564][ T6544] program syz.3.220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.916684][ T6562] loop2: detected capacity change from 0 to 128 [ 124.053189][ T6562] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.186054][ T6562] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 124.391403][ T6562] EXT4-fs error (device loop2): dx_make_map:1328: inode #2: block 20: comm syz.2.229: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 124.451333][ T6562] EXT4-fs error (device loop2) in do_split:2095: Corrupt filesystem [ 124.572232][ T5772] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.889368][ T6580] loop0: detected capacity change from 0 to 64 [ 125.573043][ T6582] loop2: detected capacity change from 0 to 32768 [ 125.603553][ T6582] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.237 (6582) [ 125.640586][ T6582] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 125.669319][ T6582] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 125.687703][ T6582] BTRFS info (device loop2): setting nodatasum [ 125.697812][ T6582] BTRFS info (device loop2): force zlib compression, level 3 [ 125.720202][ T6582] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 125.748956][ T6582] BTRFS info (device loop2): use lzo compression, level 0 [ 125.766867][ T6582] BTRFS info (device loop2): turning on flush-on-commit [ 125.773866][ T6582] BTRFS info (device loop2): enabling auto defrag [ 125.808998][ T6582] BTRFS info (device loop2): max_inline at 4096 [ 125.828641][ T6582] BTRFS info (device loop2): using free space tree [ 125.984867][ T6582] BTRFS info (device loop2): enabling ssd optimizations [ 126.164318][ T6589] loop0: detected capacity change from 0 to 32768 [ 126.186641][ T6589] (syz.0.239,6589,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 126.219619][ T6589] (syz.0.239,6589,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 126.292117][ T5772] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 126.372512][ T6589] JBD2: Ignoring recovery information on journal [ 126.410553][ T6593] loop3: detected capacity change from 0 to 32768 [ 126.523678][ T6589] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 126.552105][ T6593] JBD2: Ignoring recovery information on journal [ 126.747768][ T6593] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 127.179862][ T6593] (syz.3.242,6593,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 127.498197][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 127.934938][ T6621] loop1: detected capacity change from 0 to 131072 [ 127.955787][ T6621] F2FS-fs (loop1): invalid crc value [ 127.983683][ T6621] F2FS-fs (loop1): Found nat_bits in checkpoint [ 128.029550][ T6621] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 128.109721][ T5775] ocfs2: Unmounting device (7,0) on (node local) [ 129.544095][ T6643] loop0: detected capacity change from 0 to 40427 [ 129.577041][ T6643] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 129.627635][ T6643] F2FS-fs (loop0): invalid crc value [ 129.641183][ T6643] F2FS-fs (loop0): Found nat_bits in checkpoint [ 129.795980][ T6643] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 129.880995][ T28] audit: type=1326 audit(1775617126.855:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc27b53db99 code=0x7ffc0000 [ 129.998875][ T28] audit: type=1326 audit(1775617126.855:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27b59c819 code=0x7ffc0000 [ 130.067965][ T28] audit: type=1326 audit(1775617126.855:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc27b53db99 code=0x7ffc0000 [ 130.106572][ T28] audit: type=1326 audit(1775617126.855:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc27b53db99 code=0x7ffc0000 [ 130.187828][ T12] kworker/u4:1: attempt to access beyond end of device [ 130.187828][ T12] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 130.191812][ T28] audit: type=1326 audit(1775617126.855:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc27b53db99 code=0x7ffc0000 [ 130.295490][ T28] audit: type=1326 audit(1775617126.855:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc27b53db99 code=0x7ffc0000 [ 130.313647][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 130.415025][ T28] audit: type=1326 audit(1775617126.855:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc27b53db99 code=0x7ffc0000 [ 130.472562][ T28] audit: type=1326 audit(1775617126.855:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc27b53db99 code=0x7ffc0000 [ 130.585059][ T28] audit: type=1326 audit(1775617126.855:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc27b53db99 code=0x7ffc0000 [ 130.679632][ T28] audit: type=1326 audit(1775617126.855:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc27b53db99 code=0x7ffc0000 [ 130.818993][ T6667] Illegal XDP return value 4950 on prog (id 17) dev syz_tun, expect packet loss! [ 131.389850][ T6681] loop3: detected capacity change from 0 to 2048 [ 131.422984][ T6683] loop2: detected capacity change from 0 to 512 [ 131.447061][ T6684] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.510321][ T6683] EXT4-fs (loop2): 1 truncate cleaned up [ 131.566159][ T6683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.678005][ T6690] pim6reg: entered allmulticast mode [ 131.701524][ T6690] pim6reg: left allmulticast mode [ 131.988446][ T6671] loop1: detected capacity change from 0 to 32768 [ 131.997536][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.932603][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.939651][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.003391][ T6714] loop0: detected capacity change from 0 to 2048 [ 133.096858][ T6714] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.382454][ T6718] syzkaller1: entered promiscuous mode [ 133.434679][ T6718] syzkaller1: entered allmulticast mode [ 133.583721][ T6723] loop2: detected capacity change from 0 to 4096 [ 133.737624][ T6723] ntfs: volume version 3.1. [ 133.752027][ T6712] loop3: detected capacity change from 0 to 40427 [ 133.800274][ T6712] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 133.844908][ T6712] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 133.874738][ T6712] F2FS-fs (loop3): invalid crc value [ 133.927389][ T6712] F2FS-fs (loop3): Found nat_bits in checkpoint [ 134.139273][ T6712] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 134.185223][ T6712] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 134.327334][ T6712] syz.3.280: attempt to access beyond end of device [ 134.327334][ T6712] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 134.364219][ T6712] syz.3.280: attempt to access beyond end of device [ 134.364219][ T6712] loop3: rw=2051, sector=45096, nr_sectors = 8 limit=40427 [ 134.482924][ T11] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 134.521166][ T11] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 135.170194][ T28] kauditd_printk_skb: 97 callbacks suppressed [ 135.170212][ T28] audit: type=1326 audit(1775617132.145:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.1.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fddd0d3db99 code=0x7ffc0000 [ 135.238865][ T28] audit: type=1326 audit(1775617132.175:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.1.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd0d9c819 code=0x7ffc0000 [ 135.271642][ T28] audit: type=1326 audit(1775617132.175:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.1.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fddd0d3db99 code=0x7ffc0000 [ 135.299532][ T28] audit: type=1326 audit(1775617132.175:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.1.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd0d9c819 code=0x7ffc0000 [ 135.327510][ T28] audit: type=1326 audit(1775617132.175:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.1.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fddd0d3db99 code=0x7ffc0000 [ 135.364730][ T28] audit: type=1326 audit(1775617132.175:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.1.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd0d9c819 code=0x7ffc0000 [ 135.437829][ T28] audit: type=1326 audit(1775617132.175:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.1.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fddd0d3db99 code=0x7ffc0000 [ 135.469650][ T6742] loop0: detected capacity change from 0 to 32768 [ 135.555518][ T6742] (syz.0.292,6742,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 135.595482][ T28] audit: type=1326 audit(1775617132.185:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.1.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd0d9c819 code=0x7ffc0000 [ 135.627202][ T6742] (syz.0.292,6742,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 135.672735][ T28] audit: type=1326 audit(1775617132.185:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.1.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd0d9c819 code=0x7ffc0000 [ 135.764802][ T6742] JBD2: Ignoring recovery information on journal [ 135.833907][ T28] audit: type=1326 audit(1775617132.185:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.1.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fddd0d3db99 code=0x7ffc0000 [ 135.993583][ T6742] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 136.154327][ T6755] sctp: [Deprecated]: syz.2.297 (pid 6755) Use of int in max_burst socket option deprecated. [ 136.154327][ T6755] Use struct sctp_assoc_value instead [ 136.248016][ T6757] loop1: detected capacity change from 0 to 2048 [ 136.362340][ T6758] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.420359][ T6760] loop2: detected capacity change from 0 to 128 [ 136.446915][ T6757] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 136.474687][ T6757] Remounting filesystem read-only [ 136.559347][ T6757] NILFS (loop1): error -2 truncating bmap (ino=16) [ 136.576862][ T6762] loop3: detected capacity change from 0 to 512 [ 136.680563][ T5773] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 136.711435][ T6762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.737593][ T5773] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 136.754326][ T5775] ocfs2: Unmounting device (7,0) on (node local) [ 136.761415][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 136.777425][ T6762] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.790203][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 136.854692][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 136.864145][ T5773] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 136.936896][ T5773] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 136.943665][ T5773] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 136.974726][ T5773] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 136.982097][ T5773] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 137.007273][ T5773] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 137.040120][ T5773] NILFS (loop1): discard dirty page: offset=4096, ino=3 [ 137.041163][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.063694][ T5773] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 137.084302][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 137.108647][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 137.132547][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 137.266129][ T6773] loop2: detected capacity change from 0 to 1024 [ 137.373475][ T6773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 137.398397][ T6775] loop3: detected capacity change from 0 to 2048 [ 137.406595][ T6781] loop0: detected capacity change from 0 to 1024 [ 137.420463][ T6773] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.454323][ T6773] EXT4-fs error (device loop2): ext4_map_blocks:718: inode #15: block 3: comm syz.2.305: lblock 3 mapped to illegal pblock 3 (length 3) [ 137.487318][ T6773] EXT4-fs (loop2): Remounting filesystem read-only [ 137.526535][ T6775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.569983][ T6775] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.648535][ T6775] fs-verity: sha512 using implementation "sha512-avx2" [ 137.782754][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.793319][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 138.125449][ T6797] loop1: detected capacity change from 0 to 512 [ 138.134258][ T6797] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 138.148171][ T6797] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 138.204136][ T6797] EXT4-fs (loop1): 1 truncate cleaned up [ 138.230031][ T6797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.447873][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.583978][ T6806] loop3: detected capacity change from 0 to 4096 [ 138.706404][ T6806] EXT4-fs (loop3): Test dummy encryption mode enabled [ 138.748575][ T5811] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 138.770967][ T6806] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 138.786079][ T6806] System zones: 0-5 [ 138.793270][ T6806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.944716][ T5811] usb 1-1: Using ep0 maxpacket: 8 [ 138.964665][ T5811] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 138.978342][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.994481][ T6806] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 139.008418][ T5811] pvrusb2: Hardware description: Terratec Grabster AV400 [ 139.019689][ T5811] pvrusb2: ********** [ 139.023729][ T5811] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 139.035089][ T5811] pvrusb2: Important functionality might not be entirely working. [ 139.043588][ T5811] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 139.074502][ T5811] pvrusb2: ********** [ 139.151711][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.271162][ T6804] netlink: 'syz.0.315': attribute type 25 has an invalid length. [ 139.280452][ T6804] netlink: 'syz.0.315': attribute type 1 has an invalid length. [ 139.290895][ T6804] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.310091][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c788000: rx timeout, send abort [ 139.321572][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c788000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 139.350875][ T2320] pvrusb2: Invalid write control endpoint [ 139.358455][ T5811] usb 1-1: USB disconnect, device number 6 [ 139.509640][ T2320] pvrusb2: Invalid write control endpoint [ 139.522170][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 139.562465][ T6826] loop1: detected capacity change from 0 to 512 [ 139.574350][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 139.594447][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 139.636693][ T6826] EXT4-fs error (device loop1): ext4_iget_extra_inode:4732: inode #15: comm syz.1.321: corrupted in-inode xattr: e_value size too large [ 139.645452][ T2320] pvrusb2: Device being rendered inoperable [ 139.671203][ T6826] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.321: couldn't read orphan inode 15 (err -117) [ 139.688524][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 139.690066][ T6826] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.699300][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 139.721635][ T2320] pvrusb2: Attached sub-driver cx25840 [ 139.751019][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 139.784395][ T6831] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.323: invalid indirect mapped block 256 (level 2) [ 139.836847][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 139.924759][ T6831] EXT4-fs (loop3): 2 truncates cleaned up [ 139.931908][ T6831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.972580][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.249089][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.479791][ T6828] set_capacity_and_notify: 1 callbacks suppressed [ 140.479805][ T6828] loop2: detected capacity change from 0 to 40427 [ 140.493036][ T27] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 140.512487][ T6828] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x7 [ 140.530068][ T6828] F2FS-fs (loop2): invalid crc value [ 140.544522][ T6828] F2FS-fs (loop2): Found nat_bits in checkpoint [ 140.652205][ T6828] F2FS-fs (loop2): Start checkpoint disabled! [ 140.675219][ T6828] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 140.696027][ T27] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 140.704076][ T27] usb 2-1: config 0 has no interface number 0 [ 140.730783][ T27] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 140.754636][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.785482][ T27] usb 2-1: config 0 descriptor?? [ 140.816306][ T27] usb 2-1: selecting invalid altsetting 1 [ 140.841711][ T6828] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 140.873121][ T27] dvb_ttusb_budget: ttusb_init_controller: error [ 140.884619][ T27] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 141.053067][ T27] DVB: Unable to find symbol cx22700_attach() [ 141.133865][ T27] DVB: Unable to find symbol tda10046_attach() [ 141.147010][ T27] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 141.163454][ T5811] kernel write not supported for file /vcs (pid: 5811 comm: kworker/0:4) [ 141.178278][ T27] usb 2-1: USB disconnect, device number 5 [ 141.980966][ T6874] loop0: detected capacity change from 0 to 256 [ 142.006062][ T6874] exfat: Deprecated parameter 'namecase' [ 142.015667][ T6874] exfat: Deprecated parameter 'utf8' [ 142.046229][ T6874] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36584281, utbl_chksum : 0xe619d30d) [ 142.464047][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 142.464063][ T28] audit: type=1326 audit(1775617139.435:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6883 comm="syz.0.344" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f945a99c819 code=0x0 [ 142.507239][ T6887] loop1: detected capacity change from 0 to 4096 [ 143.054295][ T6890] loop1: detected capacity change from 0 to 32768 [ 143.553933][ T6899] loop0: detected capacity change from 0 to 2048 [ 143.782420][ T6901] loop0: detected capacity change from 0 to 256 [ 144.081661][ T6909] loop2: detected capacity change from 0 to 128 [ 144.209120][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.232974][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.249525][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.274797][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.283637][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.301749][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.310866][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.334990][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.355120][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.381031][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.394399][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.404407][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.454865][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.477195][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.504792][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.523981][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.528505][ T6917] netlink: 16 bytes leftover after parsing attributes in process `syz.3.358'. [ 144.543648][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.562471][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.581136][ T6917] netlink: 40 bytes leftover after parsing attributes in process `syz.3.358'. [ 144.585203][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.614705][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.637876][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.657310][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.685460][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.705138][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.733530][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.756319][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.785122][ T6922] loop3: detected capacity change from 0 to 512 [ 144.801927][ T6920] team0: Port device syz_tun added [ 144.802965][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.817370][ T6922] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 144.841780][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.867594][ T6922] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 144.906117][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.933546][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.945853][ T6922] EXT4-fs (loop3): 1 truncate cleaned up [ 144.954233][ T6922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.974252][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.985493][ T6920] team0: Port device syz_tun removed [ 144.991365][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 145.008308][ T6920] bridge_slave_0: left allmulticast mode [ 145.014236][ T6920] bridge_slave_0: left promiscuous mode [ 145.031898][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 145.041066][ T6920] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.070031][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 145.081943][ T28] audit: type=1800 audit(1775617142.045:209): pid=6922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.361" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 145.102294][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.124106][ T6909] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 145.135539][ T6920] bridge_slave_1: left allmulticast mode [ 145.141241][ T6920] bridge_slave_1: left promiscuous mode [ 145.184723][ T28] audit: type=1800 audit(1775617142.135:210): pid=6909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.355" name="/" dev="loop2" ino=1048605 res=0 errno=0 [ 145.195643][ T6920] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.236982][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.261235][ T6907] loop0: detected capacity change from 0 to 32768 [ 145.275050][ T6920] bond0: (slave bond_slave_0): Releasing backup interface [ 145.322886][ T6920] bond0: (slave bond_slave_1): Releasing backup interface [ 145.356832][ T6907] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 145.369489][ T6931] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 145.417306][ T6907] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 145.520873][ T6920] team0: Port device team_slave_0 removed [ 145.656728][ T6907] XFS (loop0): Ending clean mount [ 145.679849][ T6907] XFS (loop0): Quotacheck needed: Please wait. [ 145.701823][ T6920] team0: Port device team_slave_1 removed [ 145.759013][ T6920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.779829][ T6920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.823377][ T6920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.856883][ T6907] XFS (loop0): Quotacheck: Done. [ 145.866357][ T6920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.083359][ T5775] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 146.957613][ T6962] loop2: detected capacity change from 0 to 512 [ 147.080441][ T6962] loop2: detected capacity change from 0 to 8192 [ 147.250307][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.376'. [ 147.406607][ T6966] loop2: detected capacity change from 0 to 128 [ 147.462148][ T6960] loop3: detected capacity change from 0 to 32768 [ 147.501791][ T6966] syz.2.377: attempt to access beyond end of device [ 147.501791][ T6966] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 147.607128][ T6960] find_entry called with index = 0 [ 147.621511][ T6960] find_entry called with index = 0 [ 147.629411][ T6960] read_mapping_page failed! [ 147.634094][ T6960] ERROR: (device loop3): txCommit: [ 147.634094][ T6960] [ 147.653955][ T6970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'. [ 147.668263][ T6970] bridge_slave_1: entered promiscuous mode [ 147.683554][ T6970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'. [ 148.046431][ T6976] loop3: detected capacity change from 0 to 8192 [ 148.068374][ T6976] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 148.076664][ T5811] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 148.082338][ T6976] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 148.102371][ T6976] REISERFS (device loop3): using ordered data mode [ 148.109729][ T6976] reiserfs: using flush barriers [ 148.120361][ T6976] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 148.137739][ T6976] REISERFS (device loop3): checking transaction log (loop3) [ 148.276557][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.276963][ T6976] REISERFS (device loop3): Using tea hash to sort names [ 148.303557][ T6976] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 148.309655][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.344378][ T5811] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.369717][ T5811] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.394677][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.412236][ T5811] usb 2-1: config 0 descriptor?? [ 148.418451][ T6976] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 4) [ 148.605725][ T5085] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 148.608152][ T5776] Bluetooth: hci4: command 0x1003 tx timeout [ 148.803658][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.384'. [ 148.840695][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.384'. [ 148.945853][ T5811] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 148.990125][ T5811] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 149.097296][ T6992] loop3: detected capacity change from 0 to 2048 [ 149.155509][ T6992] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.262503][ T6997] loop0: detected capacity change from 0 to 128 [ 149.295138][ T6997] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 149.320000][ T788] usb 2-1: USB disconnect, device number 6 [ 149.352833][ T6997] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.621743][ T7004] netlink: 432 bytes leftover after parsing attributes in process `syz.0.393'. [ 149.724795][ T7006] loop0: detected capacity change from 0 to 2048 [ 149.755615][ T7006] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.885257][ T27] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 149.978164][ T7012] netlink: 'syz.0.397': attribute type 12 has an invalid length. [ 149.989911][ T7010] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 150.011677][ T7014] loop1: detected capacity change from 0 to 1024 [ 150.023311][ T7010] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 150.041786][ T7014] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 150.062666][ T7012] netlink: 'syz.0.397': attribute type 12 has an invalid length. [ 150.096368][ T7014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.125342][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 150.132023][ T27] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 150.144940][ T7014] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.155825][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.167089][ T27] usb 4-1: config 0 descriptor?? [ 150.293136][ T7014] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: comm syz.1.399: lblock 0 mapped to illegal pblock 0 (length 6) [ 150.316063][ T7014] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 150.333530][ T7014] EXT4-fs (loop1): This should not happen!! Data will be lost [ 150.333530][ T7014] [ 150.387538][ T7023] EXT4-fs error (device loop1): ext4_ext_remove_space:2940: inode #15: comm syz.1.399: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 150.475435][ T7025] loop0: detected capacity change from 0 to 512 [ 150.492916][ T7023] EXT4-fs error (device loop1) in ext4_setattr:5675: Corrupt filesystem [ 150.551617][ T7025] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.683553][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 150.793351][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.221463][ T27] video4linux radio48: keene_cmd_set failed (-71) [ 151.235544][ T27] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 151.265815][ T27] usb 4-1: USB disconnect, device number 7 [ 151.433060][ T7044] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.591230][ T7045] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 32 already freed [ 151.600514][ T7045] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 191 already freed [ 151.640374][ T7045] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean [ 152.042287][ T7055] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0002] [ 152.094496][ T7055] System zones: 1-20 [ 152.111909][ T7055] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.214120][ T28] audit: type=1800 audit(1775617149.185:211): pid=7055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.413" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 152.374808][ T9] IPVS: starting estimator thread 0... [ 152.485077][ T7067] IPVS: using max 20 ests per chain, 48000 per kthread [ 152.626078][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.673966][ T7052] set_capacity_and_notify: 2 callbacks suppressed [ 152.673980][ T7052] loop3: detected capacity change from 0 to 32768 [ 152.716104][ T7052] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.412 (7052) [ 152.772717][ T7052] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 152.800499][ T7052] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 152.842274][ T7052] BTRFS info (device loop3): enabling auto defrag [ 152.876696][ T7052] BTRFS info (device loop3): use no compression [ 152.896248][ T7052] BTRFS info (device loop3): max_inline at 4096 [ 152.902561][ T7052] BTRFS info (device loop3): using free space tree [ 153.073181][ T7052] BTRFS info (device loop3): enabling ssd optimizations [ 153.095100][ T7052] BTRFS info (device loop3): auto enabling async discard [ 153.186352][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 153.290140][ T28] audit: type=1326 audit(1775617150.265:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.2.420" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc27b59c819 code=0x0 [ 153.435058][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 153.444403][ T23] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 153.457858][ T23] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.467901][ T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 153.479268][ T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 153.498594][ T23] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.525099][ T23] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 153.539206][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.548676][ T5774] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 153.788366][ T7098] netlink: 20 bytes leftover after parsing attributes in process `syz.3.421'. [ 153.826906][ T23] usb 1-1: usb_control_msg returned -32 [ 153.832580][ T23] usbtmc 1-1:16.0: can't read capabilities [ 153.855430][ T7100] loop1: detected capacity change from 0 to 64 [ 153.912150][ T5916] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop3 scanned by udevd (5916) [ 154.235688][ T7107] usbtmc 1-1:16.0: INITIATE_CLEAR returned 0 [ 154.432677][ T9] usb 1-1: USB disconnect, device number 7 [ 154.771853][ T7120] loop1: detected capacity change from 0 to 256 [ 154.818622][ T7120] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 155.554810][ T2129] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 155.682029][ T7126] loop2: detected capacity change from 0 to 40427 [ 155.693617][ T7126] F2FS-fs (loop2): build fault injection attr: rate: 684, type: 0x7ffff [ 155.708887][ T7126] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 155.718546][ T7126] F2FS-fs (loop2): Image doesn't support compression [ 155.730214][ T7126] F2FS-fs (loop2): invalid crc value [ 155.740559][ T7126] F2FS-fs (loop2): Found nat_bits in checkpoint [ 155.754740][ T2129] usb 2-1: Using ep0 maxpacket: 32 [ 155.766091][ T2129] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 155.786070][ T2129] usb 2-1: config 0 has no interface number 0 [ 155.821700][ T2129] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 155.837906][ T2129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.859264][ T2129] usb 2-1: Product: syz [ 155.873204][ T2129] usb 2-1: Manufacturer: syz [ 155.881155][ T7126] F2FS-fs (loop2): Start checkpoint disabled! [ 155.892034][ T7126] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 155.897390][ T2129] usb 2-1: SerialNumber: syz [ 155.937706][ T2129] usb 2-1: config 0 descriptor?? [ 155.957362][ T2129] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 155.997279][ T28] audit: type=1800 audit(1775617152.975:213): pid=7126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.433" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 156.048537][ T7126] F2FS-fs (loop2): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x127/0xb50 [ 156.069246][ T7126] syz.2.433: attempt to access beyond end of device [ 156.069246][ T7126] loop2: rw=2049, sector=77824, nr_sectors = 592 limit=40427 [ 156.180974][ T2129] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 156.214830][ T2129] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 156.255405][ T2971] kworker/u4:10: attempt to access beyond end of device [ 156.255405][ T2971] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 156.290144][ T2971] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 156.324847][ T2971] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 156.421428][ T7134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.441224][ T7134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.629492][ T7146] loop3: detected capacity change from 0 to 32768 [ 156.659609][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 156.667665][ T27] usb 2-1: USB disconnect, device number 7 [ 156.684003][ T27] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 156.695352][ T7146] (syz.3.442,7146,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 156.723400][ T27] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 156.737466][ T27] quatech2 2-1:0.51: device disconnected [ 156.743246][ T7146] (syz.3.442,7146,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 156.815794][ T7146] JBD2: Ignoring recovery information on journal [ 156.959229][ T7146] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 156.970042][ T7150] loop2: detected capacity change from 0 to 4096 [ 157.420825][ T7153] loop1: detected capacity change from 0 to 1024 [ 157.428973][ T7153] EXT4-fs: inline encryption not supported [ 157.436879][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 157.472722][ T7153] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 157.603781][ T7153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 157.662005][ T7153] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.690681][ T7153] EXT4-fs error (device loop1): ext4_free_blocks:6692: comm syz.1.444: Freeing blocks not in datazone - block = 0, count = 16 [ 157.792916][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 157.827397][ T788] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 158.016392][ T788] usb 3-1: Using ep0 maxpacket: 8 [ 158.019067][ T7169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.449'. [ 158.028391][ T788] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 158.039028][ T788] usb 3-1: config 179 has no interface number 0 [ 158.048050][ T7169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.449'. [ 158.048078][ T788] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 158.065141][ T788] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 158.091669][ T788] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 158.118414][ T788] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 158.154909][ T788] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 158.199314][ T788] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 158.216957][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.235185][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 158.258385][ T7155] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 158.424783][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 158.449120][ T27] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 158.466813][ T27] usb 2-1: config 2 has no interface number 0 [ 158.473015][ T27] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 158.505869][ T27] usb 2-1: config 2 interface 88 has no altsetting 0 [ 158.515476][ T27] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 158.536900][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.568975][ T27] usb 2-1: Product: syz [ 158.573210][ T27] usb 2-1: Manufacturer: syz [ 158.611620][ T27] usb 2-1: SerialNumber: syz [ 158.638619][ T7165] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 158.762443][ T5811] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input10 [ 158.896802][ T7165] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 159.023686][ T7155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.035383][ T7155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.260689][ T7181] loop0: detected capacity change from 0 to 32768 [ 159.284857][ T7181] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.455 (7181) [ 159.330675][ T7181] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 159.370436][ T7181] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 159.382396][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 159.390755][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 159.399256][ T5811] usb 3-1: USB disconnect, device number 5 [ 159.405106][ T7181] BTRFS info (device loop0): setting nodatasum [ 159.405191][ T7181] BTRFS info (device loop0): force zlib compression, level 3 [ 159.405215][ T7181] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 159.405503][ T7181] BTRFS info (device loop0): use lzo compression, level 0 [ 159.405527][ T7181] BTRFS info (device loop0): turning on flush-on-commit [ 159.405543][ T7181] BTRFS info (device loop0): enabling auto defrag [ 159.405608][ T7181] BTRFS info (device loop0): max_inline at 4096 [ 159.405654][ T7181] BTRFS info (device loop0): using free space tree [ 159.623483][ T7181] BTRFS info (device loop0): enabling ssd optimizations [ 159.722318][ T27] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 159.749609][ T27] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 159.806088][ T27] asix: probe of 2-1:2.88 failed with error -71 [ 159.825848][ T27] usb 2-1: USB disconnect, device number 8 [ 159.920847][ T5775] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 160.570578][ T7209] loop1: detected capacity change from 0 to 256 [ 160.594206][ T7210] loop2: detected capacity change from 0 to 64 [ 161.024294][ T7217] loop1: detected capacity change from 0 to 256 [ 161.092777][ T7219] loop3: detected capacity change from 0 to 1024 [ 161.118970][ T7219] EXT4-fs: inline encryption not supported [ 161.165257][ T7217] FAT-fs (loop1): Directory bread(block 64) failed [ 161.172413][ T7217] FAT-fs (loop1): Directory bread(block 65) failed [ 161.225736][ T7217] FAT-fs (loop1): Directory bread(block 66) failed [ 161.239288][ T7219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 161.261943][ T7219] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.289289][ T7217] FAT-fs (loop1): Directory bread(block 67) failed [ 161.297482][ T7217] FAT-fs (loop1): Directory bread(block 68) failed [ 161.304073][ T7217] FAT-fs (loop1): Directory bread(block 69) failed [ 161.311012][ T7217] FAT-fs (loop1): Directory bread(block 70) failed [ 161.317635][ T7217] FAT-fs (loop1): Directory bread(block 71) failed [ 161.325122][ T7217] FAT-fs (loop1): Directory bread(block 72) failed [ 161.331864][ T7217] FAT-fs (loop1): Directory bread(block 73) failed [ 161.456264][ T7219] EXT4-fs error (device loop3): ext4_map_blocks:718: inode #15: block 3: comm syz.3.462: lblock 3 mapped to illegal pblock 3 (length 3) [ 161.493843][ T7219] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 161.521733][ T7219] EXT4-fs (loop3): This should not happen!! Data will be lost [ 161.521733][ T7219] [ 161.550501][ T7225] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.462: bg 0: block 112: padding at end of block bitmap is not set [ 161.602377][ T11] kworker/u4:0: attempt to access beyond end of device [ 161.602377][ T11] loop1: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 161.614764][ T7225] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 161.636473][ T7225] EXT4-fs (loop3): This should not happen!! Data will be lost [ 161.636473][ T7225] [ 161.650607][ T7225] EXT4-fs (loop3): Total free blocks count 0 [ 161.666688][ T7225] EXT4-fs (loop3): Free/Dirty block details [ 161.691041][ T7225] EXT4-fs (loop3): free_blocks=0 [ 161.715118][ T7225] EXT4-fs (loop3): dirty_blocks=64 [ 161.732917][ T7225] EXT4-fs (loop3): Block reservation details [ 161.845727][ T12] EXT4-fs error (device loop3): ext4_map_blocks:718: inode #15: block 8: comm kworker/u4:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 162.075148][ T23] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 162.258091][ T7221] loop2: detected capacity change from 0 to 40427 [ 162.277114][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.290562][ T7221] F2FS-fs (loop2): invalid crc value [ 162.298295][ T7221] F2FS-fs (loop2): Found nat_bits in checkpoint [ 162.299859][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 162.344278][ T23] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 162.371289][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.395659][ T23] usb 2-1: config 0 descriptor?? [ 162.427290][ T23] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 162.462693][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 162.473840][ T7221] F2FS-fs (loop2): Start checkpoint disabled! [ 162.494302][ T23] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 162.520299][ T7221] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 162.535281][ T23] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 162.554389][ T23] usb 2-1: media controller created [ 162.574312][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.633415][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 162.650819][ T23] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 162.668180][ T7228] dvb-usb: bulk message failed: -22 (2/0) [ 162.697773][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 162.750072][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 162.775497][ T23] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 162.823031][ T23] usb 2-1: USB disconnect, device number 9 [ 162.901816][ T23] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 163.103538][ T7226] loop0: detected capacity change from 0 to 32768 [ 163.209476][ T7226] read_mapping_page failed! [ 163.224790][ T7226] ERROR: (device loop0): txCommit: [ 163.224790][ T7226] [ 163.335523][ T28] audit: type=1800 audit(1775617160.315:214): pid=7226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.464" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 164.192052][ T7266] bond_slave_0: entered promiscuous mode [ 164.198515][ T7266] bond_slave_1: entered promiscuous mode [ 164.230854][ T7262] loop2: detected capacity change from 0 to 8192 [ 164.249411][ T7266] macvlan2: entered promiscuous mode [ 164.291680][ T7266] bond0: entered promiscuous mode [ 164.301808][ T7262] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 164.315638][ T7262] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 164.325041][ T7262] REISERFS (device loop2): using ordered data mode [ 164.331705][ T7262] reiserfs: using flush barriers [ 164.341471][ T7262] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 164.359275][ T7262] REISERFS (device loop2): checking transaction log (loop2) [ 164.416782][ T7266] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 164.479033][ T7266] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 164.555630][ T7266] bond0: left promiscuous mode [ 164.576273][ T7262] REISERFS (device loop2): Using r5 hash to sort names [ 164.585932][ T7266] bond_slave_0: left promiscuous mode [ 164.591514][ T7266] bond_slave_1: left promiscuous mode [ 164.597728][ T7262] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 164.763562][ T7270] syzkaller1: entered promiscuous mode [ 164.769892][ T7270] syzkaller1: entered allmulticast mode [ 165.554766][ T5811] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 165.777608][ T5811] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 165.804870][ T5811] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 165.834689][ T5811] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 165.854024][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.879176][ T7282] loop1: detected capacity change from 0 to 40427 [ 165.898177][ T7282] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 165.907296][ T7286] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 165.935072][ T7286] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 165.942597][ T7282] F2FS-fs (loop1): Image doesn't support compression [ 165.952815][ T5811] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 165.973469][ T7282] F2FS-fs (loop1): Image doesn't support compression [ 166.007849][ T7282] F2FS-fs (loop1): invalid crc value [ 166.082427][ T7282] F2FS-fs (loop1): Found nat_bits in checkpoint [ 166.304862][ T7282] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 166.443782][ T5811] usb 1-1: USB disconnect, device number 8 [ 166.829640][ T7300] loop2: detected capacity change from 0 to 4096 [ 167.071075][ T7302] loop1: detected capacity change from 0 to 128 [ 167.105763][ T7302] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 167.259535][ T7302] [syz.1.490/7302] FS: loop1 File: /memory.swap.current would truncate fibmap result [ 167.400098][ T7306] loop0: detected capacity change from 0 to 128 [ 167.516236][ T7306] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.601466][ T7313] loop1: detected capacity change from 0 to 512 [ 167.623437][ T7306] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 167.692268][ T7313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.735225][ T7313] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.791769][ T7313] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 167.816421][ T7306] fscrypt (loop0, inode 12): Can't use IV_INO_LBLK_32 policy on filesystem 'loop0' because it doesn't have stable inode numbers [ 167.881475][ T7313] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 10 with max blocks 23 with error 28 [ 167.895523][ T7313] EXT4-fs (loop1): This should not happen!! Data will be lost [ 167.895523][ T7313] [ 167.914742][ T7313] EXT4-fs (loop1): Total free blocks count 0 [ 167.944753][ T7313] EXT4-fs (loop1): Free/Dirty block details [ 167.953884][ T5775] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.954386][ T7313] EXT4-fs (loop1): free_blocks=65280 [ 167.989317][ T7313] EXT4-fs (loop1): dirty_blocks=28 [ 168.004958][ T5811] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 168.012737][ T7313] EXT4-fs (loop1): Block reservation details [ 168.044764][ T7313] EXT4-fs (loop1): i_reserved_data_blocks=28 [ 168.055163][ T7320] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 5 with max blocks 27 with error 28 [ 168.194740][ T5811] usb 3-1: Using ep0 maxpacket: 32 [ 168.202003][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.225569][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.235754][ T5811] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 168.254778][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.271273][ T5811] usb 3-1: config 0 descriptor?? [ 168.622215][ T7319] loop3: detected capacity change from 0 to 32768 [ 168.684936][ T7319] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 168.752006][ T7335] loop0: detected capacity change from 0 to 128 [ 168.760400][ T7319] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 168.792140][ T5811] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 168.828883][ T7335] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.884916][ T7319] XFS (loop3): Ending clean mount [ 168.886689][ T7335] ext4 filesystem being mounted at /122/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 168.981156][ T7341] loop1: detected capacity change from 0 to 512 [ 168.981969][ T7319] XFS (loop3): Quotacheck needed: Please wait. [ 169.003339][ T7341] EXT4-fs: Ignoring removed i_version option [ 169.007878][ T7335] fscrypt (loop0, inode 12): Unsupported encryption flags (0xd7) [ 169.054998][ T7341] EXT4-fs: Ignoring removed oldalloc option [ 169.069147][ T5811] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 [ 169.097470][ T7341] EXT4-fs (loop1): 1 truncate cleaned up [ 169.125064][ T5811] XFS (loop3): Unmount and run xfs_repair [ 169.131339][ T5811] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 169.147889][ T27] usb 3-1: USB disconnect, device number 6 [ 169.153948][ T7341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.173613][ T7342] fido_id[7342]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 169.213927][ T5811] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 169.271174][ T5811] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 169.301268][ T5811] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 169.322495][ T5775] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.336269][ T5811] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 169.345696][ T5811] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 169.352927][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.357195][ T5811] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 169.375099][ T5811] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 169.399320][ T5811] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 169.424799][ T2971] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 8 error 74 [ 169.470086][ T7319] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 169.746548][ T9] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 [ 169.777736][ T9] XFS (loop3): Unmount and run xfs_repair [ 169.783588][ T9] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 169.815731][ T9] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 169.829569][ T9] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 169.859436][ T7352] loop2: detected capacity change from 0 to 512 [ 169.871329][ T9] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 169.894141][ T9] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 169.954944][ T9] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 169.967623][ T9] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 169.995371][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 170.017402][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 170.036827][ T12] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 8 error 74 [ 170.078343][ T12] XFS (loop3): page discard on page ffffea0001547600, inode 0x114c, pos 0. [ 170.120617][ T5774] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 170.527912][ T7364] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 170.561872][ T7364] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 171.059351][ T7380] netlink: 'syz.1.520': attribute type 10 has an invalid length. [ 171.079716][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.519'. [ 171.105878][ T7381] netlink: 'syz.2.519': attribute type 18 has an invalid length. [ 171.119966][ T7381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.519'. [ 171.230466][ T7384] loop1: detected capacity change from 0 to 4096 [ 171.280578][ T7385] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.568431][ T7389] input: syz0 as /devices/virtual/input/input12 [ 171.655118][ T5811] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 171.860937][ T5811] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 171.885669][ T7399] loop1: detected capacity change from 0 to 256 [ 171.892772][ T5811] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 171.911743][ T7399] exfat: Deprecated parameter 'utf8' [ 171.917376][ T5811] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 171.935021][ T7399] exfat: Deprecated parameter 'utf8' [ 171.941233][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.950793][ T7399] exfat: Deprecated parameter 'utf8' [ 171.981418][ T7387] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 172.023944][ T7387] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 172.046814][ T5811] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 172.064098][ T7399] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 172.278685][ T7401] loop0: detected capacity change from 0 to 8192 [ 172.301794][ T7401] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 172.324935][ T7401] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 172.364368][ T7407] loop1: detected capacity change from 0 to 1024 [ 172.380015][ T7401] REISERFS (device loop0): using ordered data mode [ 172.419149][ T7401] reiserfs: using flush barriers [ 172.426504][ T7407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 172.438736][ T7407] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.461872][ T28] audit: type=1800 audit(1775617169.435:215): pid=7407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.531" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 172.461988][ T7401] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 172.499067][ T7407] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: block 8: comm syz.1.531: lblock 8 mapped to illegal pblock 8 (length 8) [ 172.515439][ T23] usb 3-1: USB disconnect, device number 7 [ 172.527333][ T7401] REISERFS (device loop0): checking transaction log (loop0) [ 172.534808][ T28] audit: type=1800 audit(1775617169.435:216): pid=7407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.531" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 172.559048][ T7407] EXT4-fs error (device loop1): ext4_ext_remove_space:2940: inode #15: comm syz.1.531: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 172.675231][ T7401] REISERFS (device loop0): Using r5 hash to sort names [ 172.683246][ T7401] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 172.727869][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 173.340957][ T7427] loop2: detected capacity change from 0 to 7 [ 173.382841][ T7427] Dev loop2: unable to read RDB block 7 [ 173.408760][ T7427] loop2: unable to read partition table [ 173.419117][ T7427] loop2: partition table beyond EOD, truncated [ 173.452738][ T7427] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 173.550129][ T7418] loop1: detected capacity change from 0 to 32768 [ 173.609932][ T7418] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 173.646225][ T7436] loop3: detected capacity change from 0 to 16 [ 173.680738][ T7436] erofs: (device loop3): mounted with root inode @ nid 36. [ 173.696701][ T28] audit: type=1800 audit(1775617170.665:217): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.539" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 173.718694][ T7436] syz.3.539: attempt to access beyond end of device [ 173.718694][ T7436] loop3: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 173.920903][ T7418] XFS (loop1): Ending clean mount [ 174.238797][ T5773] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.427860][ T7448] loop2: detected capacity change from 0 to 512 [ 174.489640][ T7448] EXT4-fs: Ignoring removed nomblk_io_submit option [ 174.559611][ T7448] EXT4-fs: Ignoring removed mblk_io_submit option [ 174.603544][ T7448] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 174.638763][ T7448] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 174.681681][ T7451] loop3: detected capacity change from 0 to 4096 [ 174.691187][ T7448] EXT4-fs (loop2): 1 truncate cleaned up [ 174.714207][ T7448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.786972][ T7448] EXT4-fs (loop2): shut down requested (2) [ 174.811219][ T7457] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.830232][ T7456] netlink: 'syz.0.547': attribute type 10 has an invalid length. [ 174.849420][ T7459] loop1: detected capacity change from 0 to 256 [ 174.911401][ T7456] bond0: (slave bond_slave_0): Releasing backup interface [ 174.949464][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.098955][ T7459] FAT-fs (loop1): Directory bread(block 64) failed [ 175.114427][ T7459] FAT-fs (loop1): Directory bread(block 65) failed [ 175.140328][ T7459] FAT-fs (loop1): Directory bread(block 66) failed [ 175.164712][ T7459] FAT-fs (loop1): Directory bread(block 67) failed [ 175.179477][ T7459] FAT-fs (loop1): Directory bread(block 68) failed [ 175.213016][ T7459] FAT-fs (loop1): Directory bread(block 69) failed [ 175.222667][ T7459] FAT-fs (loop1): Directory bread(block 70) failed [ 175.230642][ T7459] FAT-fs (loop1): Directory bread(block 71) failed [ 175.240979][ T7459] FAT-fs (loop1): Directory bread(block 72) failed [ 175.247884][ T7459] FAT-fs (loop1): Directory bread(block 73) failed [ 175.454058][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.550'. [ 175.475945][ T7466] netlink: 'syz.3.550': attribute type 18 has an invalid length. [ 175.483903][ T7466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.550'. [ 175.494738][ T11] kworker/u4:0: attempt to access beyond end of device [ 175.494738][ T11] loop1: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 175.524893][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 175.736230][ T9] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 175.756743][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.777214][ T9] usb 1-1: config 0 descriptor?? [ 175.786078][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 175.914779][ T7462] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.548 (7462) [ 175.949397][ T7462] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 175.977883][ T7462] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 176.004644][ T7462] BTRFS info (device loop2): force clearing of disk cache [ 176.012376][ T7462] BTRFS info (device loop2): force zlib compression, level 3 [ 176.034655][ T7462] BTRFS info (device loop2): enabling auto defrag [ 176.041315][ T7462] BTRFS info (device loop2): max_inline at 0 [ 176.064656][ T7462] BTRFS info (device loop2): enabling disk space caching [ 176.075021][ T7462] BTRFS info (device loop2): disk space caching is enabled [ 176.194382][ T7462] BTRFS info (device loop2): enabling ssd optimizations [ 176.201708][ T9] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 176.224612][ T7462] BTRFS info (device loop2): auto enabling async discard [ 176.257214][ T7462] BTRFS info (device loop2): rebuilding free space tree [ 176.365832][ T7462] BTRFS info (device loop2): disabling free space tree [ 176.383296][ T7462] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 176.410533][ T7462] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 176.623820][ T9] gspca_cpia1: usb_control_msg 02, error -71 [ 176.634788][ T9] gspca_cpia1: usb_control_msg 05, error -71 [ 176.649489][ T9] cpia1 1-1:0.0: unexpected systemstate: 00 [ 176.674480][ T9] usb 1-1: USB disconnect, device number 9 [ 176.741175][ T2971] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 176.757345][ T7472] set_capacity_and_notify: 1 callbacks suppressed [ 176.757362][ T7472] loop3: detected capacity change from 0 to 32768 [ 176.828394][ T7472] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 176.902901][ T5772] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 176.962389][ T7472] XFS (loop3): Ending clean mount [ 177.092173][ T7502] loop1: detected capacity change from 0 to 1024 [ 177.204125][ T5774] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 177.407724][ T7503] hfsplus: catalog searching failed [ 177.568358][ T2971] hfsplus: b-tree write err: -5, ino 3 [ 177.854353][ T7516] loop2: detected capacity change from 0 to 256 [ 177.977149][ T7516] FAT-fs (loop2): Directory bread(block 64) failed [ 177.990587][ T7516] FAT-fs (loop2): Directory bread(block 65) failed [ 178.008225][ T7516] FAT-fs (loop2): Directory bread(block 66) failed [ 178.020039][ T7516] FAT-fs (loop2): Directory bread(block 67) failed [ 178.033920][ T7516] FAT-fs (loop2): Directory bread(block 68) failed [ 178.046840][ T7516] FAT-fs (loop2): Directory bread(block 69) failed [ 178.062742][ T7516] FAT-fs (loop2): Directory bread(block 70) failed [ 178.083568][ T7516] FAT-fs (loop2): Directory bread(block 71) failed [ 178.101898][ T7516] FAT-fs (loop2): Directory bread(block 72) failed [ 178.120395][ T7516] FAT-fs (loop2): Directory bread(block 73) failed [ 178.520021][ T136] kworker/u4:5: attempt to access beyond end of device [ 178.520021][ T136] loop2: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 178.674173][ T7523] loop0: detected capacity change from 0 to 32768 [ 178.719543][ T7523] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 178.862529][ T7523] XFS (loop0): Ending clean mount [ 178.880077][ T7539] loop1: detected capacity change from 0 to 128 [ 178.932941][ T7539] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 178.975317][ T7539] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 178.990283][ T7539] ext2 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.001127][ T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 179.059407][ T7539] EXT4-fs (loop1): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.132238][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.142603][ T5775] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 179.214739][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 179.235985][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.260153][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 179.317237][ T23] usb 3-1: New USB device found, idVendor=1bc7, idProduct=1201, bcdDevice=55.67 [ 179.337574][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.364646][ T23] usb 3-1: Product: syz [ 179.368893][ T23] usb 3-1: Manufacturer: syz [ 179.393983][ T23] usb 3-1: SerialNumber: syz [ 179.435713][ T23] usb 3-1: config 0 descriptor?? [ 179.688844][ T7551] loop0: detected capacity change from 0 to 1024 [ 179.725939][ T6006] usb 3-1: USB disconnect, device number 8 [ 179.783905][ T7551] hfsplus: catalog searching failed [ 179.826054][ T2971] hfsplus: b-tree write err: -5, ino 3 [ 179.959049][ T7553] loop0: detected capacity change from 0 to 128 [ 180.004360][ T7553] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 180.090575][ T7546] loop1: detected capacity change from 0 to 32768 [ 180.118010][ T7546] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.568 (7546) [ 180.159723][ T7546] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 180.177322][ T7546] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 180.185680][ T7558] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 180.201930][ T7546] BTRFS info (device loop1): setting nodatasum [ 180.209522][ T7546] BTRFS info (device loop1): force zlib compression, level 3 [ 180.218863][ T7546] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 180.229309][ T7546] BTRFS info (device loop1): use lzo compression, level 0 [ 180.237357][ T7546] BTRFS info (device loop1): turning on flush-on-commit [ 180.245219][ T7546] BTRFS info (device loop1): enabling auto defrag [ 180.251822][ T7546] BTRFS info (device loop1): max_inline at 4096 [ 180.265309][ T7546] BTRFS info (device loop1): using free space tree [ 180.437915][ T7546] BTRFS info (device loop1): enabling ssd optimizations [ 180.587178][ T7580] tun0: tun_chr_ioctl cmd 1074025675 [ 180.602999][ T7580] tun0: persist enabled [ 180.613414][ T7580] tun0: tun_chr_ioctl cmd 1074025675 [ 180.624182][ T7580] tun0: persist enabled [ 180.751975][ T5773] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 181.042769][ T7588] loop2: detected capacity change from 0 to 7 [ 181.073907][ T7588] Dev loop2: unable to read RDB block 7 [ 181.081369][ T7588] loop2: unable to read partition table [ 181.107501][ T7585] syzkaller1: entered promiscuous mode [ 181.113147][ T7585] syzkaller1: entered allmulticast mode [ 181.113804][ T7588] loop2: partition table beyond EOD, truncated [ 181.144519][ T7588] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 181.208595][ T7593] loop5: detected capacity change from 0 to 7 [ 181.249971][ T7593] Dev loop5: unable to read RDB block 7 [ 181.297499][ T7593] loop5: AHDI p1 p2 p3 [ 181.334862][ T7593] loop5: partition table partially beyond EOD, truncated [ 181.384920][ T7593] loop5: p1 start 1601398130 is beyond EOD, truncated [ 181.399811][ T7593] loop5: p2 start 1702059890 is beyond EOD, truncated [ 181.685245][ T7601] netlink: 'syz.3.582': attribute type 12 has an invalid length. [ 181.693105][ T7601] netlink: 'syz.3.582': attribute type 42 has an invalid length. [ 181.728766][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 181.948313][ T7599] team0: Port device team_slave_0 removed [ 182.272036][ T7605] loop1: detected capacity change from 0 to 32768 [ 182.359727][ T7605] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 182.395781][ T7624] loop2: detected capacity change from 0 to 7 [ 182.422357][ T7624] Dev loop2: unable to read RDB block 7 [ 182.439292][ T7624] loop2: unable to read partition table [ 182.448040][ T7624] loop2: partition table beyond EOD, truncated [ 182.459363][ T7624] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 182.563860][ T7628] loop5: detected capacity change from 0 to 7 [ 182.627577][ T7628] Dev loop5: unable to read RDB block 7 [ 182.633222][ T7628] loop5: AHDI p1 p2 p3 [ 182.643195][ T5773] ocfs2: Unmounting device (7,1) on (node local) [ 182.687664][ T7628] loop5: partition table partially beyond EOD, truncated [ 182.714899][ T7628] loop5: p1 start 1601398130 is beyond EOD, truncated [ 182.744230][ T7628] loop5: p2 start 1702059890 is beyond EOD, truncated [ 182.933317][ T7633] loop2: detected capacity change from 0 to 1024 [ 183.003134][ T7634] syzkaller1: entered promiscuous mode [ 183.029443][ T7634] syzkaller1: entered allmulticast mode [ 183.111941][ T7638] TCP: MD5 Hash failed for (0.0.0.0, 0)->(0.0.0.0, 20002) L3 index 0 [ 183.244074][ T136] hfsplus: b-tree write err: -5, ino 25 [ 183.250192][ T136] hfsplus: b-tree write err: -5, ino 4 [ 183.269765][ T136] hfsplus: b-tree write err: -5, ino 2 [ 183.296978][ T136] hfsplus: b-tree write err: -5, ino 26 [ 183.514794][ T5811] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 183.694734][ T5811] usb 1-1: Using ep0 maxpacket: 32 [ 183.703562][ T5811] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 183.711834][ T5811] usb 1-1: config 0 has no interface number 0 [ 183.724847][ T5811] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 183.734157][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.742324][ T5811] usb 1-1: Product: syz [ 183.747376][ T5811] usb 1-1: Manufacturer: syz [ 183.753744][ T5811] usb 1-1: SerialNumber: syz [ 183.762906][ T5811] usb 1-1: config 0 descriptor?? [ 183.771698][ T5811] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 183.984740][ T5811] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 184.001462][ T5811] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 184.210682][ T7641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.234207][ T7641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.393563][ T7658] loop2: detected capacity change from 0 to 2048 [ 184.452313][ T7663] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.525540][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 184.528608][ T6006] usb 1-1: USB disconnect, device number 10 [ 184.554621][ T28] audit: type=1800 audit(1775617181.525:218): pid=7658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.601" name="file1" dev="loop2" ino=2097152 res=0 errno=0 [ 184.595538][ T6006] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 184.636500][ T6006] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 184.648942][ T7658] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean [ 184.681989][ T6006] quatech2 1-1:0.51: device disconnected [ 185.039265][ T7660] loop3: detected capacity change from 0 to 32768 [ 185.183203][ T7660] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 185.549305][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 185.872490][ T7690] loop2: detected capacity change from 0 to 64 [ 186.417773][ T7706] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 186.696627][ T7712] loop3: detected capacity change from 0 to 512 [ 186.708428][ T7692] loop0: detected capacity change from 0 to 32768 [ 186.738585][ T7692] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.616 (7692) [ 186.768929][ T7712] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.623: inode has both inline data and extents flags [ 186.799142][ T7692] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 186.811821][ T7692] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 186.821498][ T7692] BTRFS info (device loop0): force clearing of disk cache [ 186.828940][ T7692] BTRFS info (device loop0): force zlib compression, level 3 [ 186.836879][ T7692] BTRFS info (device loop0): enabling auto defrag [ 186.843511][ T7692] BTRFS info (device loop0): max_inline at 0 [ 186.849954][ T7692] BTRFS info (device loop0): enabling disk space caching [ 186.857330][ T7712] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.623: couldn't read orphan inode 15 (err -117) [ 186.857925][ T7692] BTRFS info (device loop0): disk space caching is enabled [ 186.900487][ T7712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.952266][ T7692] BTRFS info (device loop0): enabling ssd optimizations [ 186.959558][ T7692] BTRFS info (device loop0): auto enabling async discard [ 186.999361][ T7692] BTRFS info (device loop0): rebuilding free space tree [ 187.038565][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.070798][ T7692] BTRFS info (device loop0): disabling free space tree [ 187.087902][ T7692] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 187.164718][ T7692] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 187.387262][ T7709] loop1: detected capacity change from 0 to 32768 [ 187.437809][ T136] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 187.499328][ T7709] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 187.554875][ T6006] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 187.588854][ T5775] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 187.644653][ T7709] XFS (loop1): Ending clean mount [ 187.762453][ T7709] XFS (loop1): User initiated shutdown received. [ 187.795964][ T7709] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 187.837934][ T6006] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 187.848187][ T6006] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.857175][ T7709] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 187.882292][ T6006] usb 4-1: config 0 descriptor?? [ 187.904124][ T23] kernel write not supported for file /sg0 (pid: 23 comm: kworker/1:0) [ 187.955392][ T6006] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 188.010781][ T5773] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 188.380338][ T7758] sctp: [Deprecated]: syz.0.632 (pid 7758) Use of int in max_burst socket option deprecated. [ 188.380338][ T7758] Use struct sctp_assoc_value instead [ 188.723277][ T6006] gspca_sunplus: reg_w_riv err -71 [ 188.729074][ T6006] sunplus: probe of 4-1:0.0 failed with error -71 [ 188.759788][ T6006] usb 4-1: USB disconnect, device number 8 [ 189.234634][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 189.445757][ T23] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.453851][ T23] usb 3-1: config 0 has no interface number 0 [ 189.464618][ T23] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.504795][ T23] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.526044][ T23] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 189.546614][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.568567][ T23] usb 3-1: config 0 descriptor?? [ 190.090703][ T23] input: HID 04d9:a055 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04D9:A055.0007/input/input13 [ 190.375418][ T23] holtek_kbd 0003:04D9:A055.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.2-1/input1 [ 190.413144][ T23] usb 3-1: USB disconnect, device number 9 [ 190.619745][ T7804] fido_id[7804]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 190.761191][ T7810] loop1: detected capacity change from 0 to 2048 [ 190.770031][ T7812] loop3: detected capacity change from 0 to 256 [ 190.788234][ T7810] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 190.827023][ T7810] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.309677][ T7808] loop0: detected capacity change from 0 to 32768 [ 191.386885][ T5811] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 191.426838][ T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 191.551723][ T7822] loop0: detected capacity change from 0 to 1024 [ 191.602212][ T5811] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 191.617788][ T5811] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 191.628817][ T5811] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 191.635305][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 191.641912][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.653323][ T7822] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.675547][ T7815] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 191.683963][ T23] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 191.697518][ T5811] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 191.714647][ T23] usb 4-1: config 0 has no interface number 0 [ 191.746731][ T23] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 191.774700][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.830474][ T23] usb 4-1: Product: syz [ 191.840770][ T23] usb 4-1: Manufacturer: syz [ 191.874125][ T23] usb 4-1: SerialNumber: syz [ 191.887009][ T23] usb 4-1: config 0 descriptor?? [ 191.907117][ T23] smsc95xx v2.0.0 [ 191.944320][ T5811] usb 2-1: USB disconnect, device number 10 [ 191.978876][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.705349][ T23] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 192.914135][ T23] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 192.955966][ T23] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 192.967798][ T23] usb 4-1: USB disconnect, device number 9 [ 193.703869][ T7848] loop2: detected capacity change from 0 to 40427 [ 193.756239][ T7848] F2FS-fs (loop2): invalid crc value [ 193.778732][ T7848] F2FS-fs (loop2): Found nat_bits in checkpoint [ 193.866951][ T7848] F2FS-fs (loop2): Start checkpoint disabled! [ 193.884268][ T7848] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 194.241136][ T7874] loop2: detected capacity change from 0 to 4096 [ 194.281203][ T7874] EXT4-fs (loop2): Test dummy encryption mode enabled [ 194.313324][ T7874] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 194.340719][ T7874] System zones: 0-5 [ 194.348329][ T7874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.373057][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.380668][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.652283][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.733634][ T7879] loop1: detected capacity change from 0 to 8192 [ 194.758424][ T7886] loop0: detected capacity change from 0 to 1024 [ 194.779138][ T7879] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 194.841204][ T7879] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 194.892011][ T7879] REISERFS (device loop1): using ordered data mode [ 194.930242][ T7886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 194.931331][ T7879] reiserfs: using flush barriers [ 194.965809][ T7886] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.022976][ T7886] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: block 3: comm syz.0.690: lblock 3 mapped to illegal pblock 3 (length 3) [ 195.038393][ T7886] EXT4-fs (loop0): Remounting filesystem read-only [ 195.047432][ T7879] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 195.121165][ T7879] REISERFS (device loop1): checking transaction log (loop1) [ 195.128693][ T6006] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 195.162720][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 195.177730][ T7879] REISERFS (device loop1): Using r5 hash to sort names [ 195.205872][ T7879] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 195.220583][ T7879] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 195.334789][ T6006] usb 3-1: Using ep0 maxpacket: 8 [ 195.351297][ T6006] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 195.379280][ T6006] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.428881][ T6006] pvrusb2: Hardware description: Terratec Grabster AV400 [ 195.469788][ T6006] pvrusb2: ********** [ 195.473835][ T6006] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 195.504225][ T6006] pvrusb2: Important functionality might not be entirely working. [ 195.520623][ T6006] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 195.564236][ T6006] pvrusb2: ********** [ 195.650028][ T7896] loop3: detected capacity change from 0 to 2048 [ 195.650687][ T7889] netlink: 'syz.2.681': attribute type 25 has an invalid length. [ 195.683126][ T7896] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.694706][ T7889] netlink: 'syz.2.681': attribute type 1 has an invalid length. [ 195.725262][ T7889] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.751703][ T2320] pvrusb2: Invalid write control endpoint [ 195.760104][ T6006] usb 3-1: USB disconnect, device number 10 [ 195.930851][ T2320] pvrusb2: Invalid write control endpoint [ 195.952552][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 195.964715][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 195.994083][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 196.036147][ T2320] pvrusb2: Device being rendered inoperable [ 196.049580][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 196.059120][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 196.075567][ T2320] pvrusb2: Attached sub-driver cx25840 [ 196.087940][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 196.098500][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 196.268683][ T7914] loop3: detected capacity change from 0 to 2048 [ 196.315928][ T7915] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 196.374781][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 196.404889][ T7914] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 196.418838][ T7914] Remounting filesystem read-only [ 196.474525][ T7914] NILFS (loop3): error -2 truncating bmap (ino=16) [ 196.519965][ T5774] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 196.529516][ T5774] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 196.537098][ T5774] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 196.550869][ T5774] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 196.560431][ T5774] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 196.574710][ T5774] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 196.593948][ T5774] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 196.601702][ T5774] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 196.617796][ T5774] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 196.626727][ T5774] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 196.634143][ T5774] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 196.646743][ T5774] NILFS (loop3): discard dirty page: offset=4096, ino=3 [ 196.653865][ T5774] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 196.664230][ T5774] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 196.675924][ T5774] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 196.688684][ T5774] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.033175][ T7922] loop8: detected capacity change from 0 to 8 [ 197.061090][ T7922] Dev loop8: unable to read RDB block 8 [ 197.080029][ T7922] loop8: unable to read partition table [ 197.094894][ T7922] loop8: partition table beyond EOD, truncated [ 197.112294][ T7922] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 197.251511][ T7923] loop3: detected capacity change from 0 to 8192 [ 197.301432][ T7923] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 197.671555][ T7917] loop2: detected capacity change from 0 to 131072 [ 197.679868][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 197.689998][ T9] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 197.699212][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.708428][ T7917] F2FS-fs (loop2): invalid crc value [ 197.733349][ T9] usb 2-1: config 0 descriptor?? [ 197.739608][ T7917] F2FS-fs (loop2): Found nat_bits in checkpoint [ 197.815524][ T7917] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 197.852792][ T9] as10x_usb: device has been detected [ 197.882531][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 197.978960][ T9] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 198.091177][ T9] as10x_usb: error during firmware upload part1 [ 198.114221][ T9] Registered device nBox DVB-T Dongle [ 198.123551][ T9] usb 2-1: USB disconnect, device number 11 [ 198.253630][ T9] Unregistered device nBox DVB-T Dongle [ 198.267292][ T9] as10x_usb: device has been disconnected [ 198.818177][ T7931] loop3: detected capacity change from 0 to 32768 [ 198.875837][ T7931] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 199.011178][ T7931] XFS (loop3): Ending clean mount [ 199.070879][ T7931] XFS (loop3): Quotacheck needed: Please wait. [ 199.192848][ T7931] XFS (loop3): Quotacheck: Done. [ 199.343858][ T5774] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 201.201482][ T7976] loop2: detected capacity change from 0 to 32768 [ 201.565791][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 201.575579][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 201.581643][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 201.595449][ T112] ------------[ cut here ]------------ [ 201.601311][ T112] WARNING: CPU: 0 PID: 112 at fs/jfs/jfs_dmap.c:2875 dbAdjTree+0x448/0x4d0 [ 201.610536][ T112] Modules linked in: [ 201.614515][ T112] CPU: 0 PID: 112 Comm: jfsCommit Not tainted syzkaller #0 [ 201.622147][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 201.632673][ T112] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 201.638194][ T112] Code: e8 dd db db fe e9 5a ff ff ff e8 53 a5 83 fe eb 05 e8 4c a5 83 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 38 a5 83 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 201.658560][ T112] RSP: 0018:ffffc90002d07648 EFLAGS: 00010293 [ 201.665309][ T112] RAX: ffffffff83037c98 RBX: ffff888054fcb010 RCX: ffff888018bb0000 [ 201.673340][ T112] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 201.681860][ T112] RBP: 0000000000020056 R08: ffffea000153f2c7 R09: 1ffffd40002a7e58 [ 201.692152][ T112] R10: dffffc0000000000 R11: fffff940002a7e59 R12: ffff888054fcb018 [ 201.701568][ T112] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 201.710083][ T112] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 201.719352][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 201.726194][ T112] CR2: 00007f7f45f6b000 CR3: 00000000739ce000 CR4: 00000000003506f0 [ 201.734287][ T112] Call Trace: [ 201.737735][ T112] [ 201.740776][ T112] ? lock_page+0x2a0/0x2a0 [ 201.745427][ T112] dbJoin+0x238/0x300 [ 201.749655][ T112] dbFreeBits+0x4e1/0xda0 [ 201.754149][ T112] dbFree+0x332/0x650 [ 201.758343][ T112] txFreeMap+0x9e6/0xde0 [ 201.762727][ T112] ? do_raw_spin_unlock+0x121/0x230 [ 201.768282][ T112] xtTruncate+0xd27/0x2ec0 [ 201.772896][ T112] ? xtInitRoot+0x170/0x170 [ 201.777614][ T112] ? __lock_acquire+0x7d40/0x7d40 [ 201.782710][ T112] ? do_raw_spin_lock+0x11f/0x2c0 [ 201.788059][ T112] ? __asan_memset+0x22/0x40 [ 201.792778][ T112] ? __dquot_initialize+0x217/0xcd0 [ 201.798226][ T112] jfs_free_zero_link+0x35c/0x4c0 [ 201.803345][ T112] ? inode_wait_for_writeback+0x1e3/0x230 [ 201.809389][ T112] ? jfs_write_failed+0x190/0x190 [ 201.815095][ T112] ? sb_clear_inode_writeback+0x360/0x360 [ 201.822645][ T112] ? do_raw_spin_lock+0x11f/0x2c0 [ 201.827882][ T112] ? bit_waitqueue+0x30/0x30 [ 201.832543][ T112] jfs_evict_inode+0x35d/0x440 [ 201.837505][ T112] ? evict+0x4c4/0x8d0 [ 201.841687][ T112] ? jfs_write_inode+0x220/0x220 [ 201.846859][ T112] evict+0x4ca/0x8d0 [ 201.850876][ T112] ? proc_nr_inodes+0x230/0x230 [ 201.855871][ T112] ? do_raw_spin_unlock+0x121/0x230 [ 201.861151][ T112] ? _raw_spin_unlock+0x28/0x40 [ 201.866132][ T112] ? iput+0x706/0x920 [ 201.870189][ T112] jfs_lazycommit+0x429/0xa70 [ 201.875031][ T112] ? txFreelock+0x5a0/0x5a0 [ 201.879587][ T112] ? do_task_dead+0xd0/0xd0 [ 201.884201][ T112] ? __kthread_parkme+0x7a/0x1c0 [ 201.889433][ T112] kthread+0x2fa/0x390 [ 201.893625][ T112] ? txFreelock+0x5a0/0x5a0 [ 201.898304][ T112] ? kthread_blkcg+0xd0/0xd0 [ 201.903009][ T112] ret_from_fork+0x48/0x80 [ 201.907715][ T112] ? kthread_blkcg+0xd0/0xd0 [ 201.912431][ T112] ret_from_fork_asm+0x11/0x20 [ 201.918924][ T112] [ 201.922024][ T112] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 201.929429][ T112] CPU: 0 PID: 112 Comm: jfsCommit Not tainted syzkaller #0 [ 201.936676][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 201.946769][ T112] Call Trace: [ 201.950088][ T112] [ 201.953055][ T112] dump_stack_lvl+0x18c/0x250 [ 201.957792][ T112] ? show_regs_print_info+0x20/0x20 [ 201.963132][ T112] ? load_image+0x420/0x420 [ 201.967704][ T112] panic+0x2dc/0x730 [ 201.971674][ T112] ? bpf_jit_dump+0xd0/0xd0 [ 201.976237][ T112] ? ret_from_fork_asm+0x11/0x20 [ 201.981233][ T112] __warn+0x2e0/0x470 [ 201.985292][ T112] ? dbAdjTree+0x448/0x4d0 [ 201.989758][ T112] ? dbAdjTree+0x448/0x4d0 [ 201.994216][ T112] report_bug+0x2be/0x4f0 [ 201.998597][ T112] ? dbAdjTree+0x448/0x4d0 [ 202.003057][ T112] ? dbAdjTree+0x448/0x4d0 [ 202.007518][ T112] ? dbAdjTree+0x44a/0x4d0 [ 202.011961][ T112] handle_bug+0xcf/0x120 [ 202.016232][ T112] exc_invalid_op+0x1a/0x50 [ 202.020772][ T112] asm_exc_invalid_op+0x1a/0x20 [ 202.025662][ T112] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 202.030703][ T112] Code: e8 dd db db fe e9 5a ff ff ff e8 53 a5 83 fe eb 05 e8 4c a5 83 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 38 a5 83 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 202.050324][ T112] RSP: 0018:ffffc90002d07648 EFLAGS: 00010293 [ 202.056421][ T112] RAX: ffffffff83037c98 RBX: ffff888054fcb010 RCX: ffff888018bb0000 [ 202.064421][ T112] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 202.072421][ T112] RBP: 0000000000020056 R08: ffffea000153f2c7 R09: 1ffffd40002a7e58 [ 202.080421][ T112] R10: dffffc0000000000 R11: fffff940002a7e59 R12: ffff888054fcb018 [ 202.088438][ T112] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 202.096434][ T112] ? dbAdjTree+0x448/0x4d0 [ 202.100886][ T112] ? dbAdjTree+0x448/0x4d0 [ 202.105312][ T112] ? lock_page+0x2a0/0x2a0 [ 202.109757][ T112] dbJoin+0x238/0x300 [ 202.113767][ T112] dbFreeBits+0x4e1/0xda0 [ 202.118135][ T112] dbFree+0x332/0x650 [ 202.122155][ T112] txFreeMap+0x9e6/0xde0 [ 202.126434][ T112] ? do_raw_spin_unlock+0x121/0x230 [ 202.131665][ T112] xtTruncate+0xd27/0x2ec0 [ 202.136156][ T112] ? xtInitRoot+0x170/0x170 [ 202.140703][ T112] ? __lock_acquire+0x7d40/0x7d40 [ 202.145838][ T112] ? do_raw_spin_lock+0x11f/0x2c0 [ 202.150893][ T112] ? __asan_memset+0x22/0x40 [ 202.155515][ T112] ? __dquot_initialize+0x217/0xcd0 [ 202.160741][ T112] jfs_free_zero_link+0x35c/0x4c0 [ 202.165813][ T112] ? inode_wait_for_writeback+0x1e3/0x230 [ 202.171596][ T112] ? jfs_write_failed+0x190/0x190 [ 202.176651][ T112] ? sb_clear_inode_writeback+0x360/0x360 [ 202.182413][ T112] ? do_raw_spin_lock+0x11f/0x2c0 [ 202.187461][ T112] ? bit_waitqueue+0x30/0x30 [ 202.192071][ T112] jfs_evict_inode+0x35d/0x440 [ 202.196860][ T112] ? evict+0x4c4/0x8d0 [ 202.200964][ T112] ? jfs_write_inode+0x220/0x220 [ 202.205970][ T112] evict+0x4ca/0x8d0 [ 202.209914][ T112] ? proc_nr_inodes+0x230/0x230 [ 202.214783][ T112] ? do_raw_spin_unlock+0x121/0x230 [ 202.220012][ T112] ? _raw_spin_unlock+0x28/0x40 [ 202.224890][ T112] ? iput+0x706/0x920 [ 202.228912][ T112] jfs_lazycommit+0x429/0xa70 [ 202.233626][ T112] ? txFreelock+0x5a0/0x5a0 [ 202.238150][ T112] ? do_task_dead+0xd0/0xd0 [ 202.242683][ T112] ? __kthread_parkme+0x7a/0x1c0 [ 202.247645][ T112] kthread+0x2fa/0x390 [ 202.251729][ T112] ? txFreelock+0x5a0/0x5a0 [ 202.256369][ T112] ? kthread_blkcg+0xd0/0xd0 [ 202.261030][ T112] ret_from_fork+0x48/0x80 [ 202.265531][ T112] ? kthread_blkcg+0xd0/0xd0 [ 202.270143][ T112] ret_from_fork_asm+0x11/0x20 [ 202.274969][ T112] [ 202.278566][ T112] Kernel Offset: disabled [ 202.283014][ T112] Rebooting in 86400 seconds..