last executing test programs: 4m49.130864173s ago: executing program 2 (id=445): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="04000226", @ANYRES16=0x0, @ANYBLOB="00000000000000000004e800000008000317"], 0x1c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan0\x00'}) 4m48.876622762s ago: executing program 2 (id=447): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 4m48.262206763s ago: executing program 2 (id=451): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x24, r0, 0x1, 0x70bd23, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 4m47.991908342s ago: executing program 2 (id=453): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x6, &(0x7f0000000080), 0x3, 0x45c, &(0x7f00000002c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 4m47.514745118s ago: executing program 2 (id=457): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x7, 0x6, 0x4, 0x2, 0xea31, 0xfff}}, {0x4}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 4m46.767550803s ago: executing program 2 (id=464): r0 = syz_open_procfs(0x0, &(0x7f0000000e00)='maps\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x10000000000) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x205a) 4m46.225264782s ago: executing program 32 (id=464): r0 = syz_open_procfs(0x0, &(0x7f0000000e00)='maps\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x10000000000) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x205a) 7.02797576s ago: executing program 1 (id=2497): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) 5.588929069s ago: executing program 1 (id=2506): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000000c0)={[{@barrier}, {@nogrpid}, {@quota}, {@nobh}]}, 0xff, 0x522, &(0x7f0000000540)="$eJzs3c9vI2cZAOB3vHHi3U2bbekBEHSXtrCg1TqJt42qHmA5IYQqIXoEaRsSbxTFjqPYKU3Yw/bMFYlKnODIH8C5J+5cENy4lAMSPyJQg8RhqhmPU2/WTqNkY0fx80ijmW8+r9/3W2vmy7yJZwKYWLci4nFETEfEuxExV+xPiiXud5fsdZ/sP1o52H+0kkSavvOvJO/P9kXfv8lcL96zEhE/+l7ET5On47Z39zaWG436dtGe7zS35tu7e3fXm8tr9bX6Zq22tLi08Oa9N2rPbKw3m9PF1lc//uPjb/08S2u22NM/jtNIukMetD8iyodxMlMR8YOzBLtArhTjmR53IpxKKSJejIhX8uN/Lq7knyYAcJml6Vykc/1tAOCyK+U1sKRULWoBs1EqVavdGt5Lca3UaLU7dx62djZXu7WyG1EuPVxv1BeKWuGNKCdZezHf/qxd67Zneu17EfFCRPxy5mrerq60Gqvj/MEHACbY9SPz/39nuvM/AHDJVcadAAAwcsX8f3/ceQAAo+P6HwAmj/kfACZPd/6/Ou40AIAROvb63/2AAOBSUv8HgInyw7ffzpb0oLj/9ep7uzsbrffurtbbG9Xmzkp1pbW9VV1rtdbye/Y0P+/9Gq3W1uLrsfP+jW9vtTvz7d29B83WzmbnQX5f7wf1cv6qgbfKBgBG5IWbH/0lyWbkt67mS/Q9y6E81syA81YadwLA2FwZdwLA2PjrHphcZ7jGVx6AS2LAI3qfUBn0BaE0TdPzSwk4Z7e/pP4Pk6qv/u+vgGHCqP/D5FL/h8mVpslJn/kfJ30hAHCxqfEDQ37//2Kx/l3xy4GfrB59xYfnmRUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcbL3n/1aLZ4HPRqlUrUY8FxE3opw8XG/UFyLi+Yj480x5JmsvjjlnAOCsSn9Piud/3Z57bfaJrpevH25OR8TPfv3Or95f7nS2/xQxnfx7pre/82Gxvzb67AGA42XX+r15Ol/3Xch/sv9opbeMMqd/fDciKt34B/vTcXAYfyqm8nUlyhFx7T9J0e5K+moXZ/H4g4j44qDxJzGb10C6Tz49Gj+L/dxI45eeiF/K+7rr7P/iC88gF5g0H2Xnn/uDjr9S3MrXg4//Sn6GOrvi/Je91cpBfg78LH7v/HdlyPnv1kljvP6H73e3rj7d90HEl6cierEP+s4/vfjJkPivnTD+X7/y8ivD+tLfRNyOwfH7Y813mlvz7d29u+vN5bX6Wn2zVltaXFp4894btfm8Rj0/fDb451t3nh/Wl43/2pD4lWPGfzMivn7C8f/2/+/++GvHxP/mq4Pil+KlY+Jnc+I3Thh/+drvK8P6svirQ8b/eZ//nRPG//hve089NhwAGJ/27t7GcqNR3x7nRpqmaf+eqVO8z2y5O6ALMBwb57aRfcIXII2BG98ZVazpGNz1i1e7h8CRrjQ9VaxhZ4xnUXUDLoLDgz4i/jfuZAAAAAAAAAAAAAAAgIFG8Y2lcY8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAy+vTAAAA//8tws6L") syz_usb_connect(0x0, 0x5a, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 4.060340341s ago: executing program 1 (id=2525): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x20008c0, &(0x7f0000001100)={[{@shortname_lower}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_lower}, {@fat=@nocase}, {@uni_xlate}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@numtail}, {@utf8no}, {@shortname_lower}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}]}, 0x1, 0x354, &(0x7f0000000900)="$eJzs3U9om2UYAPAn+9KkG8z2IAwF4dOboGWbeNBTx+hgmItK8M9BDK5TaeqgweB2WFYv4lHwqCdvHvTgYWcRFPHmwasTZCoedLeBw1eSfG2+NGnXCdks/n6H8PR9nyfv+zYfzdev/d68uhxr5+bi/I0b12N+vhLV5dPLcbMSi5HFlisppV6MqwUAcFDdTCn+TEP7LKnMeEoAwIwN3v9fP1pqeffrvfKTd38AOPCK3/8P75Uzv1vHhZlMCQCYsYnr/4+MddfG/9RfLf1XAABwUD3/0svPnGpEPJfn8xHr73Wb3WY8Peo/dT7ejHasxvFYiFsRwxOF/kNl8HjmbGPleJ7nvfhlMZr9im4zYr3XbQ7PFE5lg/p6nIiFWCzqi7ONlFJ25ovGyol8ICKu9Abjx3ql25yLI8X4Px6J1TgZedw/UR9xtrFyMi+eoLm+Vd+L2Bxdt+jPfykW4vvX4kK041z0a7dOaxorl0/k+enUGKvvNuuDvKFdr4AAAAAAAAAAAAAAAAAAAAAAAMC/spRvW9ze/yaN9u9ZWprSP9gfZ1hf7A+0OdwfKNVTpPTHO483389ibH+gnfvzdJvVOHRvlw4AAAAAAAAAAAAAAAAAAAD/GZ2LtWi126sbnYuX1spBb6Nz8VBE9Fve+vazrw7HZM5tgmoxRqkrL5ourbVStpWcsrGcIsj6g7dTGrR8enV7xuWc+vYqpk6jvntXu3304Z8/GrU8lG0989+jnCymLzDbMY1ysH7fcEp38o3aDk7eJudaSmm38suvTFZFJaJ65y/c3kHqB99cf+OBJzrHnhy0fJmGHn1s4YVrH37y21qr3R85Bq9gbaNzK621iq+nH2y7B1np+KnEMKiUj4TqXuWb4y2t7IffX3zwg+/2N3oqt7w9JScbLufznV21YdCf5o6uw9PGmpty8M8gOPbxcuvq5Z9+3W9V6YeEjToAAAAAAAAAAAAAAAAAAOCuKN0rXihu9p3bq+qpZ2c/MwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4e0af/18KNida9hP81YvJrvrqRieidq+XCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9w/AQAA//9CsnMc") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 3.108706774s ago: executing program 1 (id=2536): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x4, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.818156444s ago: executing program 1 (id=2540): syz_mount_image$xfs(&(0x7f0000000440), &(0x7f0000009640)='./file0\x00', 0x8004, &(0x7f0000000480)={[{@grpquota}]}, 0x1, 0x9761, &(0x7f0000033240)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000340)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x2) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) 2.520445534s ago: executing program 4 (id=2543): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000400)={[{@noblock_validity}, {@nodioread_nolock}, {@nojournal_checksum}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x6}}, {@usrquota}]}, 0xff, 0x5d4, &(0x7f00000015c0)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x25) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 1.881144226s ago: executing program 4 (id=2546): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x20008c0, &(0x7f0000001100)={[{@shortname_lower}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_lower}, {@fat=@nocase}, {@uni_xlate}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@numtail}, {@utf8no}, {@shortname_lower}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}]}, 0x1, 0x354, &(0x7f0000000900)="$eJzs3U9om2UYAPAn+9KkG8z2IAwF4dOboGWbeNBTx+hgmItK8M9BDK5TaeqgweB2WFYv4lHwqCdvHvTgYWcRFPHmwasTZCoedLeBw1eSfG2+NGnXCdks/n6H8PR9nyfv+zYfzdev/d68uhxr5+bi/I0b12N+vhLV5dPLcbMSi5HFlisppV6MqwUAcFDdTCn+TEP7LKnMeEoAwIwN3v9fP1pqeffrvfKTd38AOPCK3/8P75Uzv1vHhZlMCQCYsYnr/4+MddfG/9RfLf1XAABwUD3/0svPnGpEPJfn8xHr73Wb3WY8Peo/dT7ejHasxvFYiFsRwxOF/kNl8HjmbGPleJ7nvfhlMZr9im4zYr3XbQ7PFE5lg/p6nIiFWCzqi7ONlFJ25ovGyol8ICKu9Abjx3ql25yLI8X4Px6J1TgZedw/UR9xtrFyMi+eoLm+Vd+L2Bxdt+jPfykW4vvX4kK041z0a7dOaxorl0/k+enUGKvvNuuDvKFdr4AAAAAAAAAAAAAAAAAAAAAAAMC/spRvW9ze/yaN9u9ZWprSP9gfZ1hf7A+0OdwfKNVTpPTHO483389ibH+gnfvzdJvVOHRvlw4AAAAAAAAAAAAAAAAAAAD/GZ2LtWi126sbnYuX1spBb6Nz8VBE9Fve+vazrw7HZM5tgmoxRqkrL5ourbVStpWcsrGcIsj6g7dTGrR8enV7xuWc+vYqpk6jvntXu3304Z8/GrU8lG0989+jnCymLzDbMY1ysH7fcEp38o3aDk7eJudaSmm38suvTFZFJaJ65y/c3kHqB99cf+OBJzrHnhy0fJmGHn1s4YVrH37y21qr3R85Bq9gbaNzK621iq+nH2y7B1np+KnEMKiUj4TqXuWb4y2t7IffX3zwg+/2N3oqt7w9JScbLufznV21YdCf5o6uw9PGmpty8M8gOPbxcuvq5Z9+3W9V6YeEjToAAAAAAAAAAAAAAAAAAOCuKN0rXihu9p3bq+qpZ2c/MwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4e0af/18KNida9hP81YvJrvrqRieidq+XCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9w/AQAA//9CsnMc") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 1.635851854s ago: executing program 3 (id=2549): r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0xee00) keyctl$setperm(0x5, r0, 0x21081c22) keyctl$setperm(0x5, r0, 0x4010000) 1.490277639s ago: executing program 3 (id=2551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a050000000000000000000200000a0900020073797a32000000000900010073797a30000000000c0003"], 0x60}}, 0x0) 1.350198774s ago: executing program 3 (id=2552): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.127710562s ago: executing program 3 (id=2554): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40488d5) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000940)={[{@nodots}, {@fat=@fmask={'fmask', 0x3d, 0xdbd}}, {@nodots}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@fat=@nocase}, {@nodots}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@nodots}, {@fat=@nfs_nostale_ro}, {@dots}, {@nodots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x133}}, {@fat=@flush}, {@fat=@usefree}, {@fat=@uid}, {@nodots}, {@fat=@gid}, {@fat=@flush}, {@fat=@umask={'umask', 0x3d, 0x7}}, {@dots}, {@dots}], [{@appraise_type}, {@euid_lt}, {@dont_appraise}, {@smackfsdef={'smackfsdef', 0x3d, 'nodots'}}, {@audit}, {@uid_lt}, {@uid_gt}, {@flag='sync'}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f00000047c0)={0x2020}, 0x2020) 1.095575912s ago: executing program 0 (id=2555): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1}, 0x6e) 1.038216195s ago: executing program 1 (id=2556): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000300)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f00000000c0)}, 0x20) 921.634559ms ago: executing program 0 (id=2557): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004b40)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000002c0)='(', 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0xc}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000240)="a034", 0x2}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x8001, 0x202, 0x7, 0x100}, 0x10) 885.43596ms ago: executing program 3 (id=2558): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f0000000140)=ANY=[], 0xfe, 0x6241, &(0x7f000000ea80)="$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") r0 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) truncate(&(0x7f0000000080)='./file2\x00', 0x4fffc) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 819.289542ms ago: executing program 4 (id=2559): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 626.131429ms ago: executing program 0 (id=2560): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xb, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc800}, 0x20000000) 505.498513ms ago: executing program 0 (id=2561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a050000000000000000000200000a0900020073797a32000000000900010073797a30000000000c0003"], 0x60}}, 0x0) 505.397473ms ago: executing program 4 (id=2562): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/4065, 0xfe1}], 0x1) 382.729147ms ago: executing program 0 (id=2563): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, 'gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) sendmmsg$inet(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000004c0)="5cf3e8955e4128b41793e40189eead863f7cb197b447ff20", 0x18}, {&(0x7f0000000500)="0c1132539646551d07a3317e3f21672200f937b17b348bfad1e89ebc1f59cd3295770e312b0bf135e2869517f4d7beb336c54f7784f0e90a6525a24a70264e23accecb9655ba89cc233a444c91078f2036f4714849d7166456af41d489c9c6b35b9424367ad740c08f94ca53181efcdf8081427cb84b31022b1d4db4517a0328b643c298b7482542d6770793e8264707e042b163151975fc595ddff6159f855e0186ba5f615a9484059a0022aebededc4de61b3e812a", 0xb6}, {&(0x7f00000005c0)="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", 0x50f}], 0x3}}], 0x1, 0x8001) 325.836809ms ago: executing program 4 (id=2564): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x840) 178.303194ms ago: executing program 4 (id=2565): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000240)={0x0, 0x0}) 24.080019ms ago: executing program 0 (id=2566): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbf8, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20044004) 0s ago: executing program 3 (id=2567): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x1, 0x470bda7, 0x25dfd402, {0x0, 0x0, 0x0, r2, 0x64e98, 0x168c1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x8, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FLUSH={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c000}, 0x200088c2) kernel console output (not intermixed with test programs): , gc=1, bpg=32768, ipg=32, mo=e041e118, mo2=0002] [ 321.369873][T10672] System zones: 0-1, 15-15, 18-18, 34-34 [ 321.411974][T10672] EXT4-fs (loop1): orphan cleanup on readonly fs [ 321.418738][T10672] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 321.428439][T10672] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 321.444720][T10672] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 321.454388][T10672] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1676: bg 0: block 40: padding at end of block bitmap is not set [ 321.471139][T10672] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 321.485770][T10672] EXT4-fs (loop1): 1 truncate cleaned up [ 321.494430][T10672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 321.641744][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.077288][T10665] loop0: detected capacity change from 0 to 40427 [ 322.124800][T10665] F2FS-fs (loop0): invalid crc value [ 322.138788][T10665] F2FS-fs (loop0): Found nat_bits in checkpoint [ 322.207124][T10689] loop3: detected capacity change from 0 to 128 [ 322.324501][T10689] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 322.369405][T10665] F2FS-fs (loop0): Start checkpoint disabled! [ 322.463299][T10689] ext4 filesystem being mounted at /390/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.489601][T10665] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 322.741407][ T5774] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 322.948427][ T39] kworker/u4:2: attempt to access beyond end of device [ 322.948427][ T39] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 322.996651][ T39] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 323.011674][ T39] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 323.042283][ T39] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 323.067693][T10704] loop3: detected capacity change from 0 to 4096 [ 323.361705][ T8] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 323.555610][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 323.576208][ T8] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 323.596649][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.632172][ T8] usb 2-1: Product: syz [ 323.636411][ T8] usb 2-1: Manufacturer: syz [ 323.636438][T10712] loop3: detected capacity change from 0 to 64 [ 323.641021][ T8] usb 2-1: SerialNumber: syz [ 323.681802][T10712] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 324.546015][ T8] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 324.578092][ T8] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 324.621697][ T8] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 324.659851][ T8] usb 2-1: clock source 0 is not valid, cannot use [ 324.696426][ T8] usb 2-1: 2:1: cannot get freq (v2/v3): err -71 [ 324.706245][ T8] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 324.808731][ T8] usb 2-1: USB disconnect, device number 20 [ 325.008084][ T5764] udevd[5764]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 325.891303][T10744] loop0: detected capacity change from 0 to 131072 [ 325.922352][T10744] F2FS-fs (loop0): Test dummy encryption mode enabled [ 325.933356][T10744] F2FS-fs (loop0): invalid crc value [ 325.965493][T10744] F2FS-fs (loop0): Found nat_bits in checkpoint [ 326.023018][T10744] F2FS-fs (loop0): Start checkpoint disabled! [ 326.065727][T10744] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 326.075497][T10764] loop3: detected capacity change from 0 to 64 [ 326.144520][ T28] audit: type=1800 audit(1780663444.769:110): pid=10764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1709" name="file2" dev="loop3" ino=21 res=0 errno=0 [ 326.221619][ T28] audit: type=1800 audit(1780663444.779:111): pid=10764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1709" name="file2" dev="loop3" ino=21 res=0 errno=0 [ 326.262833][ T5774] hfs: node 4:3 still has 1 user(s)! [ 327.039194][T10781] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 327.096693][T10781] pim6reg: entered allmulticast mode [ 327.674418][T10789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1720'. [ 327.757641][T10791] loop1: detected capacity change from 0 to 2048 [ 327.865552][T10791] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 327.966865][T10783] loop4: detected capacity change from 0 to 40427 [ 327.994523][T10783] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 328.027569][T10783] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 328.076964][T10783] F2FS-fs (loop4): Found nat_bits in checkpoint [ 328.198920][T10800] loop0: detected capacity change from 0 to 128 [ 328.300544][T10800] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 328.335194][T10783] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 328.341925][T10800] ext4 filesystem being mounted at /469/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 328.373435][T10783] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 328.633416][ T5775] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 329.495906][T10805] loop1: detected capacity change from 0 to 40427 [ 329.541777][T10805] F2FS-fs (loop1): invalid crc value [ 329.560384][T10805] F2FS-fs (loop1): Found nat_bits in checkpoint [ 329.728996][T10805] F2FS-fs (loop1): Start checkpoint disabled! [ 329.794304][T10805] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 330.231631][ T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 330.335408][T10837] tun0: tun_chr_ioctl cmd 2147767511 [ 330.431810][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 330.457487][ T8] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 330.482593][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.512585][ T8] usb 5-1: Product: syz [ 330.516821][ T8] usb 5-1: Manufacturer: syz [ 330.521456][ T8] usb 5-1: SerialNumber: syz [ 330.538621][T10842] loop0: detected capacity change from 0 to 1024 [ 330.566518][ T8] usb 5-1: config 0 descriptor?? [ 330.691917][ T788] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 330.838593][ T8] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 330.900073][ T788] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 330.924826][ T788] usb 2-1: config 0 has no interface number 0 [ 330.932777][ T788] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.947044][ T788] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.957477][ T788] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 330.974825][ T788] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 330.988255][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.011829][ T788] usb 2-1: config 0 descriptor?? [ 331.304949][T10859] loop0: detected capacity change from 0 to 64 [ 331.383051][T10861] loop7: detected capacity change from 0 to 7 [ 331.407634][T10861] Dev loop7: unable to read RDB block 7 [ 331.413369][T10861] loop7: unable to read partition table [ 331.419370][T10861] loop7: partition table beyond EOD, truncated [ 331.428140][T10861] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 331.448287][ T8] usb write operation failed. (-71) [ 331.471383][ T8] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 331.509827][ T8] dvbdev: DVB: registering new adapter (Terratec H7) [ 331.531622][ T8] usb 5-1: media controller created [ 331.554820][ T8] usb read operation failed. (-71) [ 331.580775][ T8] usb write operation failed. (-71) [ 331.598599][ T8] dvb_usb_az6007: probe of 5-1:0.0 failed with error -5 [ 331.632792][ T8] usb 5-1: USB disconnect, device number 11 [ 331.726585][ T788] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0042.0012/input/input19 [ 331.855816][ T788] uclogic 0003:28BD:0042.0012: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.1-1/input1 [ 332.063405][ T8] usb 2-1: USB disconnect, device number 21 [ 332.780140][T10868] loop3: detected capacity change from 0 to 40427 [ 332.788662][T10868] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 332.824570][T10868] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 332.863905][T10868] F2FS-fs (loop3): invalid crc value [ 332.905115][T10868] F2FS-fs (loop3): Found nat_bits in checkpoint [ 333.135989][T10868] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 333.167426][T10868] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 333.193261][T10901] loop4: detected capacity change from 0 to 2048 [ 333.200730][T10901] EXT4-fs: Ignoring removed i_version option [ 333.325854][T10901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.361727][T10901] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.576681][ T7117] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.758736][T10914] loop4: detected capacity change from 0 to 64 [ 333.904280][ T28] audit: type=1800 audit(1780663452.539:112): pid=10914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1772" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 333.994112][T10918] loop1: detected capacity change from 0 to 64 [ 334.190431][T10899] loop0: detected capacity change from 0 to 32768 [ 334.348783][ T28] audit: type=1800 audit(1780663452.979:113): pid=10899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1765" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 335.271635][ T28] audit: type=1326 audit(1780663453.899:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10931 comm="syz.0.1779" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2eb9ce59 code=0x7ffc0000 [ 335.348462][ T28] audit: type=1326 audit(1780663453.899:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10931 comm="syz.0.1779" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2eb9ce59 code=0x7ffc0000 [ 335.443635][ T28] audit: type=1326 audit(1780663453.899:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10931 comm="syz.0.1779" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2eb9ce59 code=0x7ffc0000 [ 335.550057][ T28] audit: type=1326 audit(1780663453.899:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10931 comm="syz.0.1779" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2eb9ce59 code=0x7ffc0000 [ 335.611613][ T28] audit: type=1326 audit(1780663453.899:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10931 comm="syz.0.1779" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1b2eb9ce59 code=0x7ffc0000 [ 335.655882][T10959] loop0: detected capacity change from 0 to 128 [ 335.669455][ T28] audit: type=1326 audit(1780663453.899:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10931 comm="syz.0.1779" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2eb9ce59 code=0x7ffc0000 [ 335.695548][ T28] audit: type=1326 audit(1780663453.899:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10931 comm="syz.0.1779" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2eb9ce59 code=0x7ffc0000 [ 335.719696][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.800839][T10959] syz.0.1793: attempt to access beyond end of device [ 335.800839][T10959] loop0: rw=2049, sector=154, nr_sectors = 96 limit=128 [ 335.828890][ T28] audit: type=1326 audit(1780663453.909:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10931 comm="syz.0.1779" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2eb9ce59 code=0x7ffc0000 [ 335.853048][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.853166][T10959] syz.0.1793: attempt to access beyond end of device [ 335.853166][T10959] loop0: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 336.171694][T10973] loop0: detected capacity change from 0 to 512 [ 336.182757][T10973] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 336.234715][T10973] EXT4-fs (loop0): 1 truncate cleaned up [ 336.315050][T10973] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.317375][T10977] loop3: detected capacity change from 0 to 256 [ 336.447162][T10973] EXT4-fs (loop0): shut down requested (2) [ 336.615228][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.051950][T10999] netlink: 'syz.3.1810': attribute type 1 has an invalid length. [ 337.765583][T10991] loop1: detected capacity change from 0 to 32768 [ 337.810761][T10991] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 338.053339][T10991] XFS (loop1): Ending clean mount [ 338.233930][ T5773] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 338.781766][ T788] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 338.964957][T11029] loop4: detected capacity change from 0 to 40427 [ 339.008381][T11029] F2FS-fs (loop4): invalid crc value [ 339.015328][ T788] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 339.031179][ T788] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 339.053255][T11029] F2FS-fs (loop4): Found nat_bits in checkpoint [ 339.061686][ T788] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 339.109668][ T788] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 339.122127][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 339.130298][ T788] usb 1-1: Product: syz [ 339.138623][ T788] usb 1-1: Manufacturer: syz [ 339.147558][ T788] usb 1-1: SerialNumber: syz [ 339.232902][T11029] F2FS-fs (loop4): Start checkpoint disabled! [ 339.316852][T11049] loop1: detected capacity change from 0 to 128 [ 339.321695][T11029] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 339.422008][ T788] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 339.444485][T11051] loop3: detected capacity change from 0 to 256 [ 339.714596][ T788] usb 1-1: USB disconnect, device number 19 [ 339.734371][ T788] usblp0: removed [ 339.751177][ T39] kworker/u4:2: attempt to access beyond end of device [ 339.751177][ T39] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 339.778656][ T39] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 339.787208][ T39] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 339.794644][ T39] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 340.077016][T11063] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 340.219614][T11067] loop3: detected capacity change from 0 to 256 [ 340.428852][T11071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1841'. [ 340.837334][T11084] loop3: detected capacity change from 0 to 8192 [ 340.852052][ T23] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 340.870264][T11084] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 340.885476][T11090] vivid-001: disconnect [ 340.899303][T11089] vivid-001: reconnect [ 340.934155][T11084] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 340.966721][T11084] REISERFS (device loop3): using ordered data mode [ 340.991581][T11084] reiserfs: using flush barriers [ 341.030697][T11084] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 341.063386][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 341.084046][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 341.102615][T11084] REISERFS (device loop3): checking transaction log (loop3) [ 341.115949][ T23] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 341.154751][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.186622][ T23] usb 2-1: config 0 descriptor?? [ 341.331203][T11084] REISERFS (device loop3): Using tea hash to sort names [ 341.356323][T11084] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 341.425458][ T23] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 341.612166][ T788] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 341.683500][ T23] usb 2-1: USB disconnect, device number 22 [ 341.737660][T11107] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.746650][T11107] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.755020][T11107] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.763400][T11107] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.803767][ T788] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 341.814328][ T788] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.829180][ T788] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 341.845694][ T788] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.861862][ T788] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 341.871001][ T788] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 341.891695][ T788] usb 1-1: Product: syz [ 341.895902][ T788] usb 1-1: Manufacturer: syz [ 341.909953][ T788] cdc_wdm 1-1:1.0: skipping garbage [ 341.916456][ T788] cdc_wdm 1-1:1.0: skipping garbage [ 341.924148][ T788] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 341.930104][ T788] cdc_wdm 1-1:1.0: Unknown control protocol [ 342.208416][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 342.215316][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 342.224623][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 342.231266][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 342.238284][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 342.244916][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 342.251686][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 342.258340][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 342.265096][ T5777] usb 1-1: USB disconnect, device number 20 [ 342.271128][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 342.271154][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 342.271170][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 342.365868][T11116] tap0: tun_chr_ioctl cmd 1074025677 [ 342.383593][T11116] tap0: linktype set to 780 [ 342.535458][T11122] loop4: detected capacity change from 0 to 256 [ 342.571165][T11124] loop3: detected capacity change from 0 to 16 [ 342.572091][T11122] exfat: Deprecated parameter 'utf8' [ 342.619630][T11122] exfat: Deprecated parameter 'namecase' [ 342.635088][T11124] erofs: (device loop3): mounted with root inode @ nid 36. [ 342.686578][T11122] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 342.713620][T11124] erofs: (device loop3): erofs_find_target_block: corrupted dir block 0 @ nid 46 [ 342.884747][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 342.919436][ T1081] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 343.441715][T11133] loop4: detected capacity change from 0 to 32768 [ 343.481799][T11133] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1867 (11133) [ 343.540368][T11133] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 343.572793][T11133] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 343.590276][T11133] BTRFS info (device loop4): force clearing of disk cache [ 343.630436][T11133] BTRFS info (device loop4): force zlib compression, level 3 [ 343.672286][T11133] BTRFS info (device loop4): enabling auto defrag [ 343.678793][T11133] BTRFS info (device loop4): max_inline at 0 [ 343.716068][T11133] BTRFS info (device loop4): enabling disk space caching [ 343.735281][T11133] BTRFS info (device loop4): disk space caching is enabled [ 343.762051][T11147] loop0: detected capacity change from 0 to 256 [ 343.861766][T11133] BTRFS info (device loop4): enabling ssd optimizations [ 343.889392][T11133] BTRFS info (device loop4): auto enabling async discard [ 343.909911][T11133] BTRFS info (device loop4): rebuilding free space tree [ 343.965520][T11133] BTRFS info (device loop4): disabling free space tree [ 343.974112][T11133] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 343.984329][T11133] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 344.051900][ T788] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 344.089467][ T7117] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 344.251626][ T788] usb 1-1: Using ep0 maxpacket: 32 [ 344.277081][ T6074] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop4 scanned by udevd (6074) [ 344.308968][ T788] usb 1-1: unable to get BOS descriptor or descriptor too short [ 344.346485][ T788] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 344.366353][ T788] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 344.391659][ T788] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 344.400781][ T788] usb 1-1: config 128 has no interface number 0 [ 344.414562][ T788] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 344.432129][ T788] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 344.458237][ T788] usb 1-1: config 128 interface 127 has no altsetting 0 [ 344.530469][ T788] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 344.561636][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.569711][ T788] usb 1-1: Product: syz [ 344.611550][ T788] usb 1-1: Manufacturer: syz [ 344.616234][ T788] usb 1-1: SerialNumber: syz [ 344.781895][ T5777] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 344.891653][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 344.986156][ T5777] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 345.001780][ T5777] usb 4-1: config 0 has no interface number 0 [ 345.015209][ T5777] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.033382][ T788] usb 1-1: USB disconnect, device number 21 [ 345.088103][ T5777] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.118799][ T6276] udevd[6276]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 345.131883][ T5777] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 345.171435][ T5777] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 345.217965][ T5777] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.253044][ T5777] usb 4-1: config 0 descriptor?? [ 345.336411][T11178] loop4: detected capacity change from 0 to 1024 [ 345.933494][ T5777] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0042.0013/input/input20 [ 346.002377][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 346.002393][ T28] audit: type=1326 audit(1780663464.639:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11189 comm="syz.4.1885" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9fc59ce59 code=0x7ffc0000 [ 346.052120][ T28] audit: type=1326 audit(1780663464.679:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11189 comm="syz.4.1885" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9fc59ce59 code=0x7ffc0000 [ 346.084654][ T28] audit: type=1326 audit(1780663464.679:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11189 comm="syz.4.1885" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9fc59ce59 code=0x7ffc0000 [ 346.119546][ T28] audit: type=1326 audit(1780663464.679:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11189 comm="syz.4.1885" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fd9fc59ce59 code=0x7ffc0000 [ 346.151668][ T5777] uclogic 0003:28BD:0042.0013: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.3-1/input1 [ 346.174038][ T28] audit: type=1326 audit(1780663464.679:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11189 comm="syz.4.1885" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9fc59ce59 code=0x7ffc0000 [ 346.206584][ T5777] usb 4-1: USB disconnect, device number 19 [ 346.234896][ T28] audit: type=1326 audit(1780663464.679:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11189 comm="syz.4.1885" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9fc59ce59 code=0x7ffc0000 [ 346.296257][ T28] audit: type=1326 audit(1780663464.679:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11189 comm="syz.4.1885" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9fc59ce59 code=0x7ffc0000 [ 346.421655][ T28] audit: type=1326 audit(1780663464.679:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11189 comm="syz.4.1885" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9fc59ce59 code=0x7ffc0000 [ 346.467743][T11191] fido_id[11191]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 346.485935][T11193] loop0: detected capacity change from 0 to 4096 [ 346.502511][ T28] audit: type=1326 audit(1780663464.689:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11189 comm="syz.4.1885" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fd9fc59ce59 code=0x7ffc0000 [ 346.531700][T11193] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 346.575078][ T28] audit: type=1326 audit(1780663464.689:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11189 comm="syz.4.1885" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9fc59ce59 code=0x7ffc0000 [ 346.954905][T11193] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 346.993162][T11193] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 347.626232][T11220] loop0: detected capacity change from 0 to 256 [ 347.648151][T11220] exfat: Deprecated parameter 'utf8' [ 347.685801][T11220] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 347.731746][ T5777] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 347.909663][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1901'. [ 347.931663][ T5777] usb 2-1: Using ep0 maxpacket: 16 [ 347.939154][T11225] netlink: 'syz.3.1901': attribute type 20 has an invalid length. [ 347.939181][ T5777] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.959842][ T5777] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 347.959895][T11225] netlink: 'syz.3.1901': attribute type 21 has an invalid length. [ 347.991238][ T5777] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 348.001358][ T5777] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 348.021725][ T5777] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.076768][ T5777] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 348.096254][ T5777] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 348.121609][ T5777] usb 2-1: Manufacturer: syz [ 348.137650][ T5777] usb 2-1: config 0 descriptor?? [ 348.435008][T11234] loop0: detected capacity change from 0 to 128 [ 348.521619][ T5777] rc_core: IR keymap rc-hauppauge not found [ 348.555361][ T5777] Registered IR keymap rc-empty [ 348.577145][ T5777] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 348.598664][T11238] loop4: detected capacity change from 0 to 2048 [ 348.621670][ T5777] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 348.662651][T11238] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.678152][ T5777] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 348.724477][T11238] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.772482][ T5777] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input21 [ 348.845144][ T5777] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 348.925164][T11246] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1907: bg 0: block 345: padding at end of block bitmap is not set [ 348.931795][ T5777] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 348.964711][T11246] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 348.972854][ T5777] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 349.007315][T11246] EXT4-fs (loop4): This should not happen!! Data will be lost [ 349.007315][T11246] [ 349.021708][ T5777] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 349.061677][ T5777] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 349.091715][ T5777] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 349.131752][ T5777] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 349.146426][ T1081] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 58 with error 28 [ 349.161841][ T5777] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 349.175885][ T1081] EXT4-fs (loop4): This should not happen!! Data will be lost [ 349.175885][ T1081] [ 349.196789][ T1081] EXT4-fs (loop4): Total free blocks count 0 [ 349.201707][ T5777] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 349.221586][ T1081] EXT4-fs (loop4): Free/Dirty block details [ 349.227564][ T1081] EXT4-fs (loop4): free_blocks=0 [ 349.231830][ T5777] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 349.237223][ T1081] EXT4-fs (loop4): dirty_blocks=64 [ 349.250953][ T1081] EXT4-fs (loop4): Block reservation details [ 349.281658][ T5777] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 349.330988][ T5777] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 349.359452][ T5777] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 349.386665][ T5777] usb 2-1: USB disconnect, device number 23 [ 349.929114][T11269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1919'. [ 350.959741][T11282] loop3: detected capacity change from 0 to 2048 [ 351.047886][T11282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.107587][T11266] loop0: detected capacity change from 0 to 131072 [ 351.137053][T11266] F2FS-fs (loop0): invalid crc value [ 351.149468][T11266] F2FS-fs (loop0): Found nat_bits in checkpoint [ 351.185667][T11282] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 351.231891][T11282] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 351.255863][T11266] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 351.272751][ T5777] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 351.288444][T11282] EXT4-fs (loop3): This should not happen!! Data will be lost [ 351.288444][T11282] [ 351.299613][T11282] EXT4-fs (loop3): Total free blocks count 0 [ 351.321573][T11282] EXT4-fs (loop3): Free/Dirty block details [ 351.328371][T11282] EXT4-fs (loop3): free_blocks=2415919104 [ 351.352138][T11282] EXT4-fs (loop3): dirty_blocks=64 [ 351.362389][T11282] EXT4-fs (loop3): Block reservation details [ 351.368487][T11282] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 351.475026][ T5777] usb 5-1: Using ep0 maxpacket: 32 [ 351.492842][ T2996] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 351.515992][ T5777] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 351.531867][ T5777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.549132][ T5777] usb 5-1: config 0 descriptor?? [ 351.787704][ T5777] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 351.816423][ T5777] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 351.853854][ T5777] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 351.861099][ T5777] usb 5-1: media controller created [ 351.929553][ T5777] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 352.117583][ T5777] DVB: Unable to find symbol dib7000p_attach() [ 352.133435][ T5777] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 352.311992][ T5777] rc_core: IR keymap rc-dib0700-rc5 not found [ 352.328457][ T5777] Registered IR keymap rc-empty [ 352.342540][ T5777] dvb-usb: could not initialize remote control. [ 352.361828][ T5777] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 352.400535][ T5777] usb 5-1: USB disconnect, device number 12 [ 352.467137][T11298] loop1: detected capacity change from 0 to 40427 [ 352.532953][T11298] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff [ 352.538314][ T5777] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 352.558168][T11298] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe4 [ 352.596784][T11298] F2FS-fs (loop1): invalid crc value [ 352.619477][T11298] F2FS-fs (loop1): Found nat_bits in checkpoint [ 352.699950][T11298] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 352.781768][T11298] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 352.947532][T11298] F2FS-fs (loop1): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x754/0x1c70 [ 353.439159][T11326] vxcan0: tx address claim with dest, not broadcast [ 353.631203][T11332] loop0: detected capacity change from 0 to 256 [ 353.704864][T11332] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 354.055818][T11340] loop1: detected capacity change from 0 to 128 [ 354.084987][T11340] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 354.133347][T11340] ext4 filesystem being mounted at /468/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 354.244731][T11340] fscrypt (loop1, inode 12): Unsupported encryption flags (0xea) [ 354.354467][T11350] loop0: detected capacity change from 0 to 8 [ 354.387202][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 354.405853][T11352] pimreg: entered allmulticast mode [ 354.470068][T11353] pimreg: left allmulticast mode [ 355.200218][T11377] loop1: detected capacity change from 0 to 256 [ 355.276196][T11379] loop4: detected capacity change from 0 to 64 [ 356.005798][T11388] loop4: detected capacity change from 0 to 8 [ 358.922303][T11435] loop1: detected capacity change from 0 to 1024 [ 358.971642][T11435] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 359.077390][T11435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.300576][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.318903][T11459] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1991'. [ 360.481137][T11463] loop0: detected capacity change from 0 to 64 [ 360.741805][T11469] program syz.3.1998 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 361.099230][T11477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2002'. [ 361.559808][T11489] loop0: detected capacity change from 0 to 164 [ 361.733125][T11489] Unsupported NM flag settings (240) [ 361.903852][T11473] loop1: detected capacity change from 0 to 32768 [ 361.963662][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2010'. [ 361.983326][T11473] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 362.128971][T11473] XFS (loop1): Ending clean mount [ 362.533209][ T5773] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 363.176730][T11521] loop1: detected capacity change from 0 to 16 [ 363.242811][T11521] erofs: (device loop1): mounted with root inode @ nid 36. [ 363.244840][T11509] loop3: detected capacity change from 0 to 32768 [ 363.342397][T11521] erofs: (device loop1): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 363.400745][T11509] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 363.553666][T11509] XFS (loop3): Ending clean mount [ 363.919579][ T5774] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 363.939572][T11538] loop0: detected capacity change from 0 to 4096 [ 363.958828][T11538] __ntfs_warning: 4 callbacks suppressed [ 363.958869][T11538] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 363.989163][T11538] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 364.014222][T11538] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 364.023541][T11538] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 364.045075][T11538] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 364.054061][T11538] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 364.074460][T11538] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 364.083268][T11538] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 364.103425][T11538] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 364.117972][T11538] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 364.161260][T11538] ntfs: volume version 3.1. [ 364.221837][ T27] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 364.424830][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 364.453202][ T27] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 364.461405][ T27] usb 2-1: config 0 has no interface number 0 [ 364.494350][ T27] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 364.512672][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.530107][ T27] usb 2-1: Product: syz [ 364.535237][ T27] usb 2-1: Manufacturer: syz [ 364.541716][ T27] usb 2-1: SerialNumber: syz [ 364.562390][ T27] usb 2-1: config 0 descriptor?? [ 364.583982][ T27] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 364.784812][ T27] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 364.794414][T11551] cifs: Bad value for 'source' [ 364.806047][ T27] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 364.894459][T11553] loop4: detected capacity change from 0 to 128 [ 364.912761][T11553] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 365.037558][T11554] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 365.253727][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 365.261318][ T5852] usb 2-1: USB disconnect, device number 24 [ 365.310377][ T5852] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 365.333014][T11558] loop3: detected capacity change from 0 to 128 [ 365.367057][ T5852] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 365.369955][T11558] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 365.389066][ T5852] quatech2 2-1:0.51: device disconnected [ 365.411458][T11558] ext4 filesystem being mounted at /482/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 365.528955][ T5774] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 365.636390][T11562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2032'. [ 365.970769][T11567] loop1: detected capacity change from 0 to 8192 [ 365.998777][T11567] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 366.014311][T11567] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 366.025288][T11567] REISERFS (device loop1): using ordered data mode [ 366.032217][T11567] reiserfs: using flush barriers [ 366.051834][T11567] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 366.068909][T11567] REISERFS (device loop1): checking transaction log (loop1) [ 366.087012][T11567] REISERFS (device loop1): Using r5 hash to sort names [ 366.101929][T11567] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 366.116252][T11567] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 366.157536][T11567] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 366.246152][T11570] loop4: detected capacity change from 0 to 512 [ 366.273864][T11570] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 366.332219][T11570] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.2035: iget: bad i_size value: 38620345925642 [ 366.403636][T11570] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.2035: couldn't read orphan inode 15 (err -117) [ 366.452918][T11570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.532207][T11565] loop3: detected capacity change from 0 to 32768 [ 366.585025][T11565] [ 366.585025][T11565] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 366.585025][T11565] [ 366.633782][ T1081] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm kworker/u4:5: bg 0: block 5: invalid block bitmap [ 366.650716][ T1081] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 366.691524][ T1081] EXT4-fs (loop4): This should not happen!! Data will be lost [ 366.691524][ T1081] [ 366.704596][ T1081] EXT4-fs (loop4): Total free blocks count 0 [ 366.710643][ T1081] EXT4-fs (loop4): Free/Dirty block details [ 366.717321][ T1081] EXT4-fs (loop4): free_blocks=0 [ 366.723034][ T2996] [ 366.723034][ T2996] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 366.723034][ T2996] [ 366.729687][ T1081] EXT4-fs (loop4): dirty_blocks=1 [ 366.736893][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 366.741625][ T5778] Bluetooth: hci4: command 0x1003 tx timeout [ 366.766028][ T1081] EXT4-fs (loop4): Block reservation details [ 366.772440][ T1081] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 366.791190][ T7117] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.819863][ T2996] [ 366.819863][ T2996] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 366.819863][ T2996] [ 366.873630][ T5774] [ 366.873630][ T5774] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 366.873630][ T5774] [ 366.926414][ T113] [ 366.926414][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 366.926414][ T113] [ 366.964110][ T5774] [ 366.964110][ T5774] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 366.964110][ T5774] [ 367.833287][T11600] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2047'. [ 367.861117][T11600] sch_fq: defrate 0 ignored. [ 367.889372][T11597] loop4: detected capacity change from 0 to 8192 [ 367.958167][T11597] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 368.009639][T11597] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 368.026699][T11597] REISERFS (device loop4): using ordered data mode [ 368.033747][T11597] reiserfs: using flush barriers [ 368.078863][T11597] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 368.157885][T11597] REISERFS (device loop4): checking transaction log (loop4) [ 368.186055][T11597] REISERFS (device loop4): Using r5 hash to sort names [ 368.205487][T11597] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 368.259659][T11584] loop1: detected capacity change from 0 to 40427 [ 368.316021][T11584] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 368.351734][T11584] F2FS-fs (loop1): Image doesn't support compression [ 368.358543][T11584] F2FS-fs (loop1): Image doesn't support compression [ 368.416723][T11584] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 368.464365][T11584] F2FS-fs (loop1): invalid crc value [ 368.491231][T11584] F2FS-fs (loop1): Found nat_bits in checkpoint [ 368.684704][T11613] loop0: detected capacity change from 0 to 4096 [ 368.724866][T11584] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 368.869904][T11619] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 368.880402][T11584] syz.1.2042: attempt to access beyond end of device [ 368.880402][T11584] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 368.938510][T11584] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 369.681318][T11635] loop4: detected capacity change from 0 to 128 [ 369.753248][T11635] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 369.801855][T11635] hpfs: filesystem error: improperly stopped [ 369.807926][T11635] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 369.841683][T11635] hpfs: You really don't want any checks? You are crazy... [ 369.851059][T11635] hpfs: hpfs_map_sector(): read error [ 369.891743][T11635] hpfs: code page support is disabled [ 369.897449][T11635] hpfs: hpfs_map_4sectors(): unaligned read [ 369.931918][T11635] hpfs: hpfs_map_4sectors(): unaligned read [ 369.937895][T11635] hpfs: filesystem error: unable to find root dir [ 369.995262][T11635] hpfs: hpfs_map_4sectors(): unaligned read [ 370.022947][T11635] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 370.202436][T11642] loop1: detected capacity change from 0 to 1024 [ 370.332857][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 370.332891][ T28] audit: type=1800 audit(1780663488.959:148): pid=11642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2057" name="file1" dev="loop1" ino=3 res=0 errno=0 [ 370.501344][T11648] loop4: detected capacity change from 0 to 128 [ 370.509068][ T39] hfsplus: b-tree write err: -5, ino 3 [ 370.640174][T11648] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 370.730128][T11648] sysv_free_block: trying to free block not in datazone [ 370.944113][ T7117] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 371.353667][T11647] loop3: detected capacity change from 0 to 32768 [ 371.378064][T11647] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2065 (11647) [ 371.399573][T11667] Cannot find add_set index 4 as target [ 371.514572][T11647] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 371.541782][T11647] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 371.559220][T11647] BTRFS info (device loop3): setting nodatasum [ 371.581642][T11647] BTRFS info (device loop3): force zlib compression, level 3 [ 371.611663][T11647] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 371.660378][T11647] BTRFS info (device loop3): use lzo compression, level 0 [ 371.687896][T11647] BTRFS info (device loop3): turning on flush-on-commit [ 371.703937][T11647] BTRFS info (device loop3): enabling auto defrag [ 371.731245][T11647] BTRFS info (device loop3): max_inline at 4096 [ 371.744415][T11647] BTRFS info (device loop3): using free space tree [ 371.963382][T11647] BTRFS info (device loop3): enabling ssd optimizations [ 372.073546][T11655] loop1: detected capacity change from 0 to 40427 [ 372.143267][T11655] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 372.171105][T11655] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 372.227245][T11655] F2FS-fs (loop1): invalid crc value [ 372.352111][T11647] BTRFS error (device loop3: state M): unrecognized mount option 'inode_readahead_blks=0x0000000000800000' [ 372.542077][ T5774] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 372.600831][T11655] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 372.622018][T11655] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 372.817132][T11655] syz.1.2068: attempt to access beyond end of device [ 372.817132][T11655] loop1: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 372.940320][ T5773] syz-executor: attempt to access beyond end of device [ 372.940320][ T5773] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 372.997988][ T5773] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 373.788596][T11715] loop0: detected capacity change from 0 to 4096 [ 374.429576][T11729] batadv0: entered promiscuous mode [ 374.453267][T11729] bond0: entered promiscuous mode [ 374.460466][T11729] bond_slave_0: entered promiscuous mode [ 374.467024][T11729] bond_slave_1: entered promiscuous mode [ 374.479869][T11729] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 374.493254][T11729] Cannot create hsr debugfs directory [ 374.501156][T11729] hsr1: entered allmulticast mode [ 374.514517][T11729] batadv0: entered allmulticast mode [ 374.520146][T11729] bond0: entered allmulticast mode [ 374.535230][T11729] bond_slave_0: entered allmulticast mode [ 374.548288][T11729] bond_slave_1: entered allmulticast mode [ 374.564747][T11729] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 374.593540][T11729] batadv0: left promiscuous mode [ 374.634624][T11729] bond0: left promiscuous mode [ 374.639476][T11729] bond_slave_0: left promiscuous mode [ 374.700362][T11729] bond_slave_1: left promiscuous mode [ 374.891726][T11739] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 374.913713][T11741] loop4: detected capacity change from 0 to 16 [ 374.944072][T11741] erofs: (device loop4): mounted with root inode @ nid 36. [ 375.000888][T11741] erofs: (device loop4): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 375.047627][T11741] erofs: (device loop4): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 375.107797][T11741] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 375.140090][T11746] erofs: (device loop4): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 375.181603][T11741] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 375.186055][T11750] loop1: detected capacity change from 0 to 256 [ 375.201390][T11746] erofs: (device loop4): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 375.213891][T11750] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 375.231726][T11746] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 72 of nid 36 [ 375.273290][T11750] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 375.483548][T11753] loop0: detected capacity change from 0 to 4096 [ 375.517343][T11753] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 376.059681][T11765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2102'. [ 376.087440][T11767] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2105'. [ 376.239929][T11771] loop3: detected capacity change from 0 to 128 [ 376.290720][T11771] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 376.361838][T11771] hpfs: filesystem error: improperly stopped [ 376.400134][T11771] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 376.433093][T11771] hpfs: You really don't want any checks? You are crazy... [ 376.440829][T11771] hpfs: hpfs_map_sector(): read error [ 376.456802][T11771] hpfs: code page support is disabled [ 376.464314][T11771] hpfs: hpfs_map_4sectors(): unaligned read [ 376.470370][T11771] hpfs: hpfs_map_4sectors(): unaligned read [ 376.488254][T11771] hpfs: filesystem error: unable to find root dir [ 376.548490][T11771] hpfs: hpfs_map_4sectors(): unaligned read [ 376.584146][T11771] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 376.630484][T11782] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2112'. [ 377.061706][ T27] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 377.119833][T11799] loop4: detected capacity change from 0 to 512 [ 377.191345][T11799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.237261][T11799] ext4 filesystem being mounted at /425/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 377.251543][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 377.274694][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 377.302392][ T27] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 377.311607][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.338539][ T27] usb 4-1: config 0 descriptor?? [ 377.501301][ T7117] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.784446][ T27] hid (null): global environment stack underflow [ 377.806918][ T27] hid (null): unknown global tag 0xd [ 377.817427][T11806] loop0: detected capacity change from 0 to 256 [ 377.826343][T11794] loop1: detected capacity change from 0 to 40427 [ 377.830501][ T27] steelseries 0003:1038:12B6.0014: unknown main item tag 0xe [ 377.864558][T11794] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff [ 377.866758][ T27] steelseries 0003:1038:12B6.0014: global environment stack underflow [ 377.900934][T11806] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d) [ 377.913294][T11794] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe4 [ 377.936910][T11794] F2FS-fs (loop1): invalid crc value [ 377.937739][ T27] steelseries 0003:1038:12B6.0014: item 0 2 1 11 parsing failed [ 377.969322][T11794] F2FS-fs (loop1): Found nat_bits in checkpoint [ 377.996790][ T27] steelseries: probe of 0003:1038:12B6.0014 failed with error -22 [ 378.042031][ T27] usb 4-1: USB disconnect, device number 20 [ 378.123416][T11794] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 378.263365][T11794] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 378.379378][T11818] loop4: detected capacity change from 0 to 1024 [ 378.449187][T11818] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.463194][T11821] F2FS-fs (loop1): inject no more block in inc_valid_block_count of f2fs_map_blocks+0x111c/0x40f0 [ 378.542580][T11818] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 623: comm syz.4.2123: Attempting to read directory block (623) that is past i_size (638464) [ 378.783572][ T7117] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.979476][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.986097][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.309259][T11839] loop1: detected capacity change from 0 to 8192 [ 379.340310][T11840] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 379.383610][T11839] NILFS error (device loop1): nilfs_readdir: zero-length directory entry [ 379.402208][T11839] Remounting filesystem read-only [ 379.930973][T11857] loop4: detected capacity change from 0 to 64 [ 379.973897][ T28] audit: type=1800 audit(1780663498.609:149): pid=11857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2135" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 380.088173][T11862] loop0: detected capacity change from 0 to 164 [ 380.918651][T11860] loop3: detected capacity change from 0 to 32768 [ 380.985775][T11860] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 381.106211][ T23] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 381.121363][T11860] (syz.3.2136,11860,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 381.196761][T11881] loop1: detected capacity change from 0 to 64 [ 381.256967][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 381.341709][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 381.356729][ T23] usb 1-1: string descriptor 0 read error: -22 [ 381.376126][ T23] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 381.421574][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.443983][T11875] loop4: detected capacity change from 0 to 32768 [ 381.458921][ T23] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 381.477957][ T23] usb 1-1: MIDIStreaming interface descriptor not found [ 381.491071][T11875] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12 [ 381.770607][ T6074] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12 [ 381.891394][ T5852] usb 1-1: USB disconnect, device number 22 [ 382.031847][ T23] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 382.159749][T11893] loop3: detected capacity change from 0 to 4096 [ 382.222593][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 382.233626][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.245628][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 382.276289][ T23] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 382.289513][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.299048][ T23] usb 2-1: Product: syz [ 382.307129][ T23] usb 2-1: Manufacturer: syz [ 382.313366][ T23] usb 2-1: SerialNumber: syz [ 382.546147][ T23] usb 2-1: 0:2 : does not exist [ 382.570053][ T23] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 382.639219][ T23] usb 2-1: USB disconnect, device number 25 [ 382.776308][T11904] loop3: detected capacity change from 0 to 512 [ 382.785797][T11901] loop4: detected capacity change from 0 to 8192 [ 382.801781][T11904] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 382.854715][T11904] EXT4-fs (loop3): 1 truncate cleaned up [ 382.885522][T11904] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.887959][T11908] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 383.008005][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.051571][T11901] NILFS error (device loop4): nilfs_readdir: zero-length directory entry [ 383.117562][T11901] Remounting filesystem read-only [ 383.230339][T11912] loop0: detected capacity change from 0 to 4096 [ 383.306488][T11915] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 383.430547][T11918] IPv6: NLM_F_CREATE should be specified when creating new route [ 383.441778][T11918] netlink: 'syz.3.2164': attribute type 1 has an invalid length. [ 383.533524][T11912] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean [ 383.771726][ T5852] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 383.971629][ T5852] usb 5-1: Using ep0 maxpacket: 8 [ 383.988863][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 384.029001][ T5852] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 384.040774][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.085430][ T5852] usb 5-1: config 0 descriptor?? [ 384.321074][ T5852] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 384.464308][T11940] loop3: detected capacity change from 0 to 8192 [ 384.549758][T11947] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 384.631706][T11940] NILFS error (device loop3): nilfs_readdir: zero-length directory entry [ 384.654316][T11940] Remounting filesystem read-only [ 384.723491][ T5850] usb 5-1: USB disconnect, device number 13 [ 385.425849][T11963] loop0: detected capacity change from 0 to 64 [ 385.626637][T11970] loop0: detected capacity change from 0 to 256 [ 385.633565][T11972] sctp: [Deprecated]: syz.1.2181 (pid 11972) Use of int in maxseg socket option. [ 385.633565][T11972] Use struct sctp_assoc_value instead [ 385.667645][T11970] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 385.759635][T11970] syz.0.2182: attempt to access beyond end of device [ 385.759635][T11970] loop0: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 385.782594][T11970] syz.0.2182: attempt to access beyond end of device [ 385.782594][T11970] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 385.804150][ T28] audit: type=1800 audit(1780663504.439:150): pid=11970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2182" name="file1" dev="loop0" ino=1048670 res=0 errno=0 [ 385.832213][T11975] exFAT-fs (loop0): error, tried to truncate zeroed cluster. [ 385.839096][T11974] loop3: detected capacity change from 0 to 2048 [ 385.840388][T11975] exFAT-fs (loop0): Filesystem has been set read-only [ 385.896270][T11970] syz.0.2182: attempt to access beyond end of device [ 385.896270][T11970] loop0: rw=2049, sector=34359738488, nr_sectors = 1 limit=256 [ 385.915970][T11974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.937612][T11974] ext4 filesystem being mounted at /514/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 386.078372][T11979] loop0: detected capacity change from 0 to 128 [ 386.136514][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.315630][T11983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2186'. [ 386.547430][T11987] loop4: detected capacity change from 0 to 4096 [ 386.650417][T11997] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 387.397741][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2200'. [ 388.700709][T12039] loop4: detected capacity change from 0 to 128 [ 388.754592][T12039] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 388.786727][T12026] loop0: detected capacity change from 0 to 32768 [ 388.816456][T12039] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 388.885445][T12026] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 389.020390][ T2962] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 389.152973][T12026] XFS (loop0): Ending clean mount [ 389.451793][ T5775] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 390.308269][T12059] loop0: detected capacity change from 0 to 256 [ 391.259654][T12081] loop3: detected capacity change from 0 to 128 [ 391.295311][T12081] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 391.330388][T12081] ext4 filesystem being mounted at /526/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 391.358029][T12081] fscrypt (loop3, inode 12): Can't use IV_INO_LBLK_64 policy on filesystem 'loop3' because it doesn't have stable inode numbers [ 391.408269][ T5774] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 391.482737][T12087] loop3: detected capacity change from 0 to 512 [ 391.489966][T12087] EXT4-fs: Ignoring removed nobh option [ 391.528305][T12087] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.549108][T12087] ext4 filesystem being mounted at /527/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 391.586307][T12087] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 3: comm syz.3.2228: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 391.638749][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.771846][ T5850] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 391.905015][T12093] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 391.951574][ T5850] usb 2-1: Using ep0 maxpacket: 8 [ 391.960606][ T5850] usb 2-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.989773][ T5850] usb 2-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.990835][T12095] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 392.010189][ T5852] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 392.023023][ T5850] usb 2-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 392.039715][ T5850] usb 2-1: config 0 interface 0 has no altsetting 0 [ 392.049934][ T5850] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 392.064479][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.076614][ T5850] usb 2-1: config 0 descriptor?? [ 392.145472][T12097] loop4: detected capacity change from 0 to 128 [ 392.158381][T12097] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 392.203112][T12097] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 392.222922][ T5852] usb 4-1: Using ep0 maxpacket: 32 [ 392.238561][ T5852] usb 4-1: string descriptor 0 read error: -22 [ 392.249770][ T5852] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 392.287086][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.304596][ T5850] usbhid 2-1:0.0: can't add hid device: -71 [ 392.325011][ T5850] usbhid: probe of 2-1:0.0 failed with error -71 [ 392.346050][ T5852] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 392.369108][ T5850] usb 2-1: USB disconnect, device number 26 [ 392.377875][ T5852] usb 4-1: MIDIStreaming interface descriptor not found [ 392.381193][ T39] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 392.650764][T12106] loop0: detected capacity change from 0 to 2048 [ 392.674369][ T788] usb 4-1: USB disconnect, device number 21 [ 392.747231][T12109] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 392.939717][T12109] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 392.962674][T12109] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 392.978730][T12109] Remounting filesystem read-only [ 392.984170][ T2962] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 393.001503][ T2962] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 393.022742][ T2962] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 393.036427][ T2962] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 393.045475][ T2962] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 393.056235][ T2962] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 393.063082][ T2962] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 393.070531][ T2962] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 393.077957][ T2962] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 393.085423][ T2962] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 393.099143][ T2962] NILFS (loop0): discard dirty page: offset=65536, ino=3 [ 393.106267][ T2962] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 393.137894][ T2962] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 393.148249][ T2962] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 393.155675][ T2962] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 393.164705][ T2962] NILFS (loop0): discard dirty page: offset=196608, ino=3 [ 393.171972][ T2962] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 393.180872][ T2962] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 393.189803][ T2962] NILFS (loop0): discard dirty block: blocknr=49, size=1024 [ 393.197196][ T2962] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 393.206266][ T2962] NILFS (loop0): discard dirty page: offset=0, ino=18 [ 393.213215][ T2962] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 393.227347][ T2962] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 393.237398][ T2962] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 393.251546][ T2962] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 393.260487][ T2962] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 393.271732][ T2962] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 393.279263][ T2962] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 393.293600][ T2962] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 393.304940][ T2962] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 393.316151][T12119] loop3: detected capacity change from 0 to 128 [ 393.324228][ T2962] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 393.330938][ T2962] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 393.339972][ T2962] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 393.351869][T12119] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 393.365095][ T2962] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 393.379731][T12119] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 393.388782][ T2962] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 393.399790][ T2962] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 393.406697][ T2962] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 393.414113][ T2962] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 393.425102][ T2962] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 393.436449][ T2962] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 393.457648][ T5775] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 393.475268][ T5775] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 393.485004][ T5775] NILFS (loop0): discard dirty block: blocknr=35, size=1024 [ 393.527597][ T5775] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 393.535615][ T5775] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 393.543419][ T5775] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 393.808863][T12124] mmap: syz.0.2243 (12124) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 394.220892][T12143] loop4: detected capacity change from 0 to 4096 [ 394.231791][ T5850] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 394.256755][T12143] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.419946][ T7117] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.430981][ T5850] usb 2-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 394.442949][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.452258][ T5852] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 394.468006][ T5850] usb-storage 2-1:32.0: USB Mass Storage device detected [ 394.501356][ T5850] usb-storage 2-1:32.0: Quirks match for vid 057b pid 0000: 1 [ 394.633934][ T5852] usb 1-1: config 0 has no interfaces? [ 394.639689][ T5852] usb 1-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 394.660899][ T5852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.696635][ T5852] usb 1-1: config 0 descriptor?? [ 394.729940][ T5852] usb 2-1: USB disconnect, device number 27 [ 394.964590][T12158] loop3: detected capacity change from 0 to 256 [ 394.977356][T12158] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 394.983158][T12141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.999847][T12158] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 395.012258][T12141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.028580][T12158] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 395.072424][ T5850] usb 1-1: USB disconnect, device number 23 [ 395.228084][T12164] pim6reg0: tun_chr_ioctl cmd 1074025694 [ 395.671955][ T5850] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 395.865505][ T5850] usb 1-1: Using ep0 maxpacket: 8 [ 395.875452][ T5850] usb 1-1: config 1 has an invalid interface number: 136 but max is 0 [ 395.893936][ T5850] usb 1-1: config 1 has no interface number 0 [ 395.911763][ T5850] usb 1-1: config 1 interface 136 has no altsetting 0 [ 395.921942][ T5850] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=bf.65 [ 395.931026][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.962046][ T5850] usb 1-1: Product: syz [ 395.969630][ T5850] usb 1-1: Manufacturer: syz [ 395.996731][ T5850] usb 1-1: SerialNumber: syz [ 396.141854][T12182] loop1: detected capacity change from 0 to 256 [ 396.167967][T12182] exfat: Deprecated parameter 'utf8' [ 396.209879][T12182] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 396.288698][ T5850] usb 1-1: USB disconnect, device number 24 [ 396.319471][T12182] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2268'. [ 396.343073][ T5852] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 396.564611][ T5852] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 396.581561][ T5852] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 396.613668][ T5852] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 396.623022][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.631047][ T5852] usb 4-1: Product: syz [ 396.659650][T12186] loop1: detected capacity change from 0 to 2048 [ 396.661498][ T5852] usb 4-1: Manufacturer: syz [ 396.681972][ T5852] usb 4-1: SerialNumber: syz [ 396.693004][ T5852] usb 4-1: config 0 descriptor?? [ 396.708633][ T5852] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 396.716677][T12186] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8802c029, mo2=0003] [ 396.734127][T12186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.836640][T12186] EXT4-fs error (device loop1): ext4_ext_precache:655: inode #2: comm syz.1.2270: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 396.861410][T12186] EXT4-fs (loop1): Remounting filesystem read-only [ 396.999505][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.453788][T12196] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2274'. [ 397.573737][ T5852] gspca_sunplus: reg_r err -71 [ 397.578645][ T5852] sunplus: probe of 4-1:0.0 failed with error -71 [ 397.625807][ T5852] usb 4-1: USB disconnect, device number 22 [ 398.145519][T12194] loop0: detected capacity change from 0 to 32768 [ 398.165182][T12194] XFS: attr2 mount option is deprecated. [ 398.248902][T12194] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 398.455261][T12214] loop1: detected capacity change from 0 to 1024 [ 398.464110][T12194] XFS (loop0): Ending clean mount [ 398.512747][T12214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.530615][T12194] XFS (loop0): Quotacheck needed: Please wait. [ 398.552638][T12214] ext4 filesystem being mounted at /549/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.711854][T12194] XFS (loop0): Quotacheck: Done. [ 398.855477][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 398.929290][ T5775] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 399.181989][ T5850] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 399.391547][ T5850] usb 4-1: Using ep0 maxpacket: 16 [ 399.403651][ T5850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 399.431096][ T5850] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 399.463114][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.486489][ T5850] usb 4-1: Product: syz [ 399.490707][ T5850] usb 4-1: Manufacturer: syz [ 399.508727][ T5850] usb 4-1: SerialNumber: syz [ 399.526502][ T5850] usb 4-1: config 0 descriptor?? [ 399.546539][ T5850] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 399.566020][ T5850] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 399.980718][T12226] loop1: detected capacity change from 0 to 32768 [ 400.000178][T12226] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.2285 (12226) [ 400.029486][T12226] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 400.047482][T12226] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 400.062001][T12226] BTRFS info (device loop1): using free space tree [ 400.161180][T12226] BTRFS info (device loop1): enabling ssd optimizations [ 400.169562][T12226] BTRFS info (device loop1): auto enabling async discard [ 400.177682][ T5850] em28xx 4-1:0.0: chip ID is em2874 [ 400.375427][ T28] audit: type=1800 audit(1780663519.009:151): pid=12226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2285" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 400.464807][ T5850] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 400.500581][ T5850] em28xx 4-1:0.0: board has no eeprom [ 400.621529][ T5850] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 400.629434][ T5850] em28xx 4-1:0.0: dvb set to bulk mode. [ 400.660616][ T8] em28xx 4-1:0.0: Binding DVB extension [ 400.683526][ T5850] usb 4-1: USB disconnect, device number 23 [ 400.718910][ T5850] em28xx 4-1:0.0: Disconnecting em28xx [ 400.757987][T12251] loop0: detected capacity change from 0 to 64 [ 400.776848][T12251] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 400.880830][ T5773] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 400.896047][ T8] em28xx 4-1:0.0: Registering input extension [ 401.035437][ T8] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 401.073778][ T8] Registered IR keymap rc-empty [ 401.141725][ T8] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 401.164998][ T8] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input23 [ 401.181897][T12255] vivid-001: disconnect [ 401.201676][T12254] vivid-001: reconnect [ 401.267215][ T8] em28xx 4-1:0.0: Input extension successfully initialized [ 401.291196][ T5850] em28xx 4-1:0.0: Closing input extension [ 401.346197][T12257] netlink: 'syz.3.2290': attribute type 1 has an invalid length. [ 401.390395][T12257] netlink: 'syz.3.2290': attribute type 2 has an invalid length. [ 401.716433][ T5850] em28xx 4-1:0.0: Freeing device [ 402.041777][ T5777] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 402.261726][ T5777] usb 5-1: Using ep0 maxpacket: 32 [ 402.278656][ T5777] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 402.298181][ T5777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.322571][ T5777] usb 5-1: config 0 descriptor?? [ 402.572941][ T5777] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 402.596764][ T5777] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 402.616329][ T5777] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 402.632039][ T5777] usb 5-1: media controller created [ 402.700790][ T5777] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 402.770288][ T5777] az6027: usb out operation failed. (-71) [ 402.778991][ T5777] az6027: usb out operation failed. (-71) [ 402.785162][ T5777] stb0899_attach: Driver disabled by Kconfig [ 402.791437][ T5777] az6027: no front-end attached [ 402.791437][ T5777] [ 402.799332][ T5777] az6027: usb out operation failed. (-71) [ 402.805761][ T5777] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 402.818550][ T5777] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input24 [ 402.828948][T12294] loop0: detected capacity change from 0 to 2048 [ 402.852622][ T5777] dvb-usb: schedule remote query interval to 400 msecs. [ 402.859625][ T5777] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 402.869507][T12294] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 402.919273][ T5777] usb 5-1: USB disconnect, device number 14 [ 402.963404][ T28] audit: type=1800 audit(1780663521.599:152): pid=12294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2306" name="file1" dev="loop0" ino=1415 res=0 errno=0 [ 403.067938][ T5777] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 403.358034][ T28] audit: type=1326 audit(1780663521.989:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.3.2311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0159ce59 code=0x7ffc0000 [ 403.449163][ T28] audit: type=1326 audit(1780663522.019:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.3.2311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0159ce59 code=0x7ffc0000 [ 403.521731][ T28] audit: type=1326 audit(1780663522.039:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.3.2311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f4c0159ce59 code=0x7ffc0000 [ 403.586303][ T28] audit: type=1326 audit(1780663522.039:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.3.2311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0159ce59 code=0x7ffc0000 [ 403.646730][T12308] loop3: detected capacity change from 0 to 256 [ 403.674107][ T28] audit: type=1326 audit(1780663522.039:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.3.2311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0159ce59 code=0x7ffc0000 [ 403.773468][T12308] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 403.776829][ T28] audit: type=1326 audit(1780663522.109:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.3.2311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f4c0159ce59 code=0x7ffc0000 [ 403.822417][T12308] FAT-fs (loop3): Filesystem has been set read-only [ 403.829423][T12308] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 403.888106][T12308] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 403.898597][ T28] audit: type=1326 audit(1780663522.109:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.3.2311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0159ce59 code=0x7ffc0000 [ 403.946016][T12312] loop4: detected capacity change from 0 to 2048 [ 403.993306][ T28] audit: type=1326 audit(1780663522.109:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.3.2311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0159ce59 code=0x7ffc0000 [ 404.047632][T12312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.088972][T12312] ext4 filesystem being mounted at /475/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 404.183457][T12302] loop0: detected capacity change from 0 to 32768 [ 404.193760][ T788] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 404.251101][T12302] [ 404.251101][T12302] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 404.251101][T12302] [ 404.336185][ T7117] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.353837][T12302] [ 404.353837][T12302] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 404.353837][T12302] [ 404.380342][T12302] [ 404.380342][T12302] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 404.380342][T12302] [ 404.397283][T12302] [ 404.397283][T12302] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 404.397283][T12302] [ 404.412236][ T788] usb 2-1: config index 0 descriptor too short (expected 1572, got 36) [ 404.431997][T12302] [ 404.431997][T12302] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 404.431997][T12302] [ 404.441173][ T788] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.466103][ T113] ERROR: (device loop0): dbFree: error in block map [ 404.466103][ T113] [ 404.511100][ T788] usb 2-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 404.525463][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.534095][T12302] [ 404.534095][T12302] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 404.534095][T12302] [ 404.564997][ T788] usb 2-1: Product: syz [ 404.569311][ T788] usb 2-1: Manufacturer: syz [ 404.594853][ T5775] [ 404.594853][ T5775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 404.594853][ T5775] [ 404.605588][ T788] usb 2-1: SerialNumber: syz [ 404.650890][ T788] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input25 [ 404.679928][ T5775] [ 404.679928][ T5775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 404.679928][ T5775] [ 404.846630][ T788] bcm5974 2-1:1.0: could not read from device [ 404.918562][ T5125] bcm5974 2-1:1.0: could not read from device [ 404.950823][ T788] input: failed to attach handler mousedev to device input25, error: -5 [ 404.979128][ T5125] bcm5974 2-1:1.0: could not read from device [ 404.982966][ T788] usb 2-1: USB disconnect, device number 28 [ 405.028281][ T5125] bcm5974 2-1:1.0: could not read from device [ 405.754789][T12349] loop3: detected capacity change from 0 to 164 [ 405.992876][T12355] loop0: detected capacity change from 0 to 64 [ 406.003408][T12355] MINIX-fs: mounting file system with errors, running fsck is recommended [ 406.795847][T12379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2342'. [ 406.803988][T12378] loop0: detected capacity change from 0 to 512 [ 406.828531][T12379] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.848697][T12378] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.886357][T12378] ext4 filesystem being mounted at /626/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.014525][T12378] EXT4-fs error (device loop0): ext4_validate_inode_bitmap:106: comm syz.0.2341: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 407.177467][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.227859][ T1081] Bluetooth: hci4: Frame reassembly failed (-84) [ 407.255044][T12391] Bluetooth: hci4: Frame reassembly failed (-84) [ 407.464785][T12398] program syz.4.2349 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.583379][T12402] program syz.1.2351 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.646143][T12404] bond1: entered promiscuous mode [ 407.995867][T12409] loop1: detected capacity change from 0 to 4096 [ 408.462407][T12419] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2358'. [ 408.589193][T12411] loop0: detected capacity change from 0 to 32768 [ 408.621057][T12411] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2355 (12411) [ 408.622695][T12421] loop4: detected capacity change from 0 to 2048 [ 408.643498][T12423] loop1: detected capacity change from 0 to 128 [ 408.677046][T12421] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 408.722575][T12411] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 408.732178][T12423] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 408.760161][T12411] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 408.800738][T12411] BTRFS warning (device loop0): excessive commit interval 3581 [ 408.820163][T12411] BTRFS info (device loop0): force zlib compression, level 3 [ 408.840505][T12411] BTRFS info (device loop0): metadata ratio 107050 [ 408.852094][T12411] BTRFS info (device loop0): turning on flush-on-commit [ 408.871603][T12411] BTRFS info (device loop0): max_inline at 4096 [ 408.881792][T12411] BTRFS info (device loop0): using free space tree [ 409.079298][T12411] BTRFS info (device loop0): enabling ssd optimizations [ 409.263826][ T5775] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 409.301063][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 409.301147][ T5778] Bluetooth: hci4: command 0x1003 tx timeout [ 409.557584][T12453] loop3: detected capacity change from 0 to 256 [ 409.576616][T12453] exfat: Deprecated parameter 'utf8' [ 409.594926][T12453] exfat: Deprecated parameter 'namecase' [ 409.613395][T12453] exfat: Deprecated parameter 'namecase' [ 409.620716][T12453] exfat: Deprecated parameter 'utf8' [ 409.729530][T12453] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 410.089605][T12462] loop3: detected capacity change from 0 to 512 [ 410.273053][T12462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.513079][T12455] loop1: detected capacity change from 0 to 32768 [ 410.543473][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.570009][T12455] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 410.747157][T12455] XFS (loop1): Ending clean mount [ 410.775332][T12455] XFS (loop1): Quotacheck needed: Please wait. [ 410.924351][T12455] XFS (loop1): Quotacheck: Done. [ 411.153536][ T5773] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 411.946157][T12507] loop4: detected capacity change from 0 to 4096 [ 411.974771][T12507] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 412.055109][T12507] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 412.070634][T12507] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 412.951543][ T8] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 413.172311][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 413.180421][T12530] loop1: detected capacity change from 0 to 32768 [ 413.192383][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.198878][T12530] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2395 (12530) [ 413.211559][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 413.240841][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.262229][ T8] usb 4-1: config 0 descriptor?? [ 413.277714][T12530] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 413.279335][ T8] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 413.331695][T12530] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 413.340218][T12528] loop0: detected capacity change from 0 to 32768 [ 413.340449][T12530] BTRFS warning (device loop1): excessive commit interval 3581 [ 413.361822][T12530] BTRFS info (device loop1): force zlib compression, level 3 [ 413.370515][T12530] BTRFS info (device loop1): metadata ratio 107050 [ 413.392308][T12530] BTRFS info (device loop1): turning on flush-on-commit [ 413.403017][T12530] BTRFS info (device loop1): max_inline at 4096 [ 413.426315][T12530] BTRFS info (device loop1): using free space tree [ 413.567128][T12530] BTRFS info (device loop1): enabling ssd optimizations [ 413.790142][T12559] loop0: detected capacity change from 0 to 512 [ 413.860652][T12559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.913893][ T5773] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 414.109157][ T8] gspca_vc032x: reg_w err -71 [ 414.136377][ T8] vc032x: probe of 4-1:0.0 failed with error -71 [ 414.147959][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.162506][ T8] usb 4-1: USB disconnect, device number 24 [ 414.678647][T12566] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 415.185043][T12574] loop0: detected capacity change from 0 to 256 [ 415.211733][ T5777] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 415.251571][T12574] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 415.364570][T12564] loop1: detected capacity change from 0 to 32768 [ 415.417109][T12564] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 415.431633][ T5777] usb 4-1: Using ep0 maxpacket: 16 [ 415.447496][ T5777] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.501727][ T5777] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.504352][T12578] loop0: detected capacity change from 0 to 256 [ 415.554171][T12564] (syz.1.2402,12564,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 415.564451][ T5777] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 415.602146][ T5777] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 415.611256][ T5777] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.625329][T12578] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 415.648628][ T5777] usb 4-1: config 0 descriptor?? [ 415.699301][ T5773] ocfs2: Unmounting device (7,1) on (node local) [ 416.019106][T12582] loop0: detected capacity change from 0 to 128 [ 416.061885][T12582] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 416.092489][ T5777] microsoft 0003:045E:07DA.0015: unbalanced collection at end of report description [ 416.102912][ T5777] microsoft 0003:045E:07DA.0015: parse failed [ 416.109105][ T5777] microsoft: probe of 0003:045E:07DA.0015 failed with error -22 [ 416.134688][T12582] ext4 filesystem being mounted at /647/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 416.339262][ T23] usb 4-1: USB disconnect, device number 25 [ 416.400401][ T5775] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 416.531708][ T5777] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 416.647861][T12592] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2416'. [ 416.657563][T12592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2416'. [ 416.731763][ T5777] usb 2-1: Using ep0 maxpacket: 32 [ 416.745796][ T5777] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 416.761895][ T5777] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.784424][ T5777] usb 2-1: config 0 descriptor?? [ 417.023585][ T5777] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 417.049865][ T5777] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 417.071247][ T5777] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 417.100679][ T5777] usb 2-1: media controller created [ 417.152403][ T5777] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 417.238133][ T5777] az6027: usb out operation failed. (-71) [ 417.252446][ T5777] az6027: usb out operation failed. (-71) [ 417.261547][ T5777] stb0899_attach: Driver disabled by Kconfig [ 417.267586][ T5777] az6027: no front-end attached [ 417.267586][ T5777] [ 417.292274][ T5777] az6027: usb out operation failed. (-71) [ 417.308418][ T5777] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 417.315714][ T8] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 417.335444][ T5777] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input26 [ 417.361372][ T5777] dvb-usb: schedule remote query interval to 400 msecs. [ 417.378846][ T5777] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 417.419596][ T5777] usb 2-1: USB disconnect, device number 29 [ 417.514243][ T8] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 417.524876][ T5777] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 417.533588][ T8] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 417.573807][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 417.600456][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 417.635177][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 417.673881][ T8] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 417.683420][ T8] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 417.698563][ T8] usb 4-1: Product: syz [ 417.704268][ T8] usb 4-1: Manufacturer: syz [ 417.716037][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 417.721300][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 417.750931][ T8] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 417.766872][ T8] cdc_wdm 4-1:1.0: Unknown control protocol [ 418.013882][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 418.020562][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 418.027011][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 418.033649][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 418.035169][T12603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2421'. [ 418.039977][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 418.055300][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 418.062070][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 418.068716][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 418.075041][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 418.081715][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 418.088019][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 418.094645][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 418.102367][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 418.108996][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 418.115459][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 418.122079][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 418.131573][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 418.138190][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 418.144501][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 418.151121][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 418.184969][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 418.193977][ T5777] usb 4-1: USB disconnect, device number 26 [ 418.387552][T12599] loop0: detected capacity change from 0 to 32768 [ 418.439603][T12609] loop4: detected capacity change from 0 to 512 [ 418.448960][T12599] JBD2: Ignoring recovery information on journal [ 418.493299][T12599] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 418.508996][T12609] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2423: invalid indirect mapped block 256 (level 2) [ 418.547958][T12609] EXT4-fs (loop4): 2 truncates cleaned up [ 418.576144][T12609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.673241][T12609] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.2423: bg 0: block 5: invalid block bitmap [ 418.691011][T12609] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 60 with max blocks 1 with error 28 [ 418.704121][T12609] EXT4-fs (loop4): This should not happen!! Data will be lost [ 418.704121][T12609] [ 418.714683][T12609] EXT4-fs (loop4): Total free blocks count 0 [ 418.720789][T12609] EXT4-fs (loop4): Free/Dirty block details [ 418.730021][T12609] EXT4-fs (loop4): free_blocks=0 [ 418.733403][T12612] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 418.735669][T12609] EXT4-fs (loop4): dirty_blocks=2 [ 418.753297][T12609] EXT4-fs (loop4): Block reservation details [ 418.759321][T12609] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 418.775602][ T5775] ocfs2: Unmounting device (7,0) on (node local) [ 419.443881][T12631] binder: Binderfs stats mode cannot be changed during a remount [ 419.741822][T12641] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 419.908625][T12649] loop1: detected capacity change from 0 to 128 [ 419.961001][T12649] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 419.996507][T12649] ext4 filesystem being mounted at /590/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.200913][T12658] loop5: detected capacity change from 0 to 1 [ 420.244866][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 420.276401][ T1081] loop: Write error at byte offset 4, length 512. [ 420.331698][ C1] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 420.341611][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 420.668392][T12670] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2448'. [ 421.295635][T12664] loop4: detected capacity change from 0 to 32768 [ 421.391394][T12664] JBD2: Ignoring recovery information on journal [ 421.560578][T12664] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 421.762809][T12664] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #20 has bad signature [ 421.780136][T12664] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 421.796892][T12664] OCFS2: File system is now read-only. [ 421.802496][T12664] (syz.4.2445,12664,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 421.821547][T12664] (syz.4.2445,12664,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 421.841559][T12664] (syz.4.2445,12664,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 421.850129][T12664] (syz.4.2445,12664,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 421.931543][T12664] (syz.4.2445,12664,0):ocfs2_claim_metadata:2018 ERROR: status = -30 [ 421.939768][T12664] (syz.4.2445,12664,0):ocfs2_claim_metadata:2031 ERROR: status = -30 [ 422.007068][T12664] (syz.4.2445,12664,0):ocfs2_dx_dir_attach_index:2330 ERROR: status = -30 [ 422.022930][T12664] (syz.4.2445,12664,0):ocfs2_expand_inline_dir:3023 ERROR: status = -30 [ 422.042587][T12664] (syz.4.2445,12664,0):ocfs2_extend_dir:3205 ERROR: status = -30 [ 422.059348][T12664] (syz.4.2445,12664,0):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30 [ 422.080625][T12664] (syz.4.2445,12664,0):ocfs2_mknod:298 ERROR: status = -30 [ 422.105350][T12664] (syz.4.2445,12664,0):ocfs2_mknod:502 ERROR: status = -30 [ 422.121533][T12664] (syz.4.2445,12664,0):ocfs2_mkdir:659 ERROR: status = -30 [ 422.286457][ T7117] (syz-executor,7117,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 422.311769][ T7117] (syz-executor,7117,0):_ocfs2_free_suballoc_bits:2489 ERROR: status = -12 [ 422.336685][T12709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2466'. [ 422.345812][ T7117] (syz-executor,7117,0):_ocfs2_free_clusters:2583 ERROR: status = -12 [ 422.364264][ T7117] (syz-executor,7117,0):ocfs2_sync_local_to_main:1001 ERROR: status = -12 [ 422.391539][ T7117] (syz-executor,7117,0):ocfs2_sync_local_to_main:1013 ERROR: status = -12 [ 422.421544][ T7117] (syz-executor,7117,0):ocfs2_shutdown_local_alloc:449 ERROR: status = -12 [ 422.524472][ T7117] ocfs2: Unmounting device (7,4) on (node local) [ 422.926884][T12707] loop3: detected capacity change from 0 to 32768 [ 423.020122][T12707] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 423.153078][T12707] XFS (loop3): Ending clean mount [ 423.247806][T12707] XFS (loop3): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 423.251158][T12703] loop1: detected capacity change from 0 to 32768 [ 423.280808][T12725] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2470'. [ 423.397191][T12703] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 423.605837][ T5774] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 423.692623][T12703] XFS (loop1): Ending clean mount [ 423.704254][T12703] XFS (loop1): Quotacheck needed: Please wait. [ 423.812811][T12703] XFS (loop1): Quotacheck: Done. [ 424.018347][T12739] loop0: detected capacity change from 0 to 2048 [ 424.025867][ T5773] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 424.049060][T12739] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 424.060528][T12739] UDF-fs: Scanning with blocksize 512 failed [ 424.079514][T12739] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 424.409841][T12741] loop0: detected capacity change from 0 to 2048 [ 424.435770][T12741] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 424.456368][T12741] NILFS (loop0): mounting unchecked fs [ 424.499368][T12741] NILFS (loop0): recovery complete [ 424.513584][T12746] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 424.668708][T12750] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.2478'. [ 424.686925][T12750] netlink: zone id is out of range [ 424.701756][T12750] netlink: zone id is out of range [ 424.712476][T12750] netlink: zone id is out of range [ 424.728324][T12750] netlink: zone id is out of range [ 424.734482][T12750] netlink: zone id is out of range [ 424.739770][T12750] netlink: zone id is out of range [ 424.801197][T12752] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2480'. [ 424.801866][T12750] netlink: zone id is out of range [ 424.866947][T12750] netlink: zone id is out of range [ 424.901606][T12750] netlink: zone id is out of range [ 424.906804][T12750] netlink: zone id is out of range [ 425.029420][T12756] loop1: detected capacity change from 0 to 512 [ 425.063527][T12756] EXT4-fs: Ignoring removed i_version option [ 425.081899][T12756] EXT4-fs: Ignoring removed mblk_io_submit option [ 425.214031][T12760] loop4: detected capacity change from 0 to 512 [ 425.221390][T12760] EXT4-fs: Ignoring removed oldalloc option [ 425.232426][T12760] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 425.267471][T12761] loop0: detected capacity change from 0 to 2048 [ 425.270718][T12756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.275029][T12761] EXT4-fs: Ignoring removed bh option [ 425.292070][T12761] EXT4-fs: Ignoring removed mblk_io_submit option [ 425.327549][T12760] EXT4-fs (loop4): 1 truncate cleaned up [ 425.360756][T12761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.382915][T12760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.566575][T12761] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2482: bg 0: block 234: padding at end of block bitmap is not set [ 425.597008][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.624582][T12761] EXT4-fs (loop0): Remounting filesystem read-only [ 425.644617][ T7117] EXT4-fs error (device loop4): mb_free_blocks:1970: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 425.693449][ T7117] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.894733][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.615130][T12771] loop3: detected capacity change from 0 to 131072 [ 426.628940][T12771] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0) [ 426.662225][T12771] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 426.675040][T12771] F2FS-fs (loop3): invalid crc value [ 426.724284][T12771] F2FS-fs (loop3): Found nat_bits in checkpoint [ 426.800809][T12771] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 426.809007][T12771] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 426.922825][T12771] F2FS-fs (loop3): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 427.124611][T12790] loop0: detected capacity change from 0 to 256 [ 427.544504][T12800] loop1: detected capacity change from 0 to 164 [ 427.571753][ T8] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 427.595229][T12796] loop3: detected capacity change from 0 to 8192 [ 427.646435][T12798] kvm: kvm [12797]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x80000000000 [ 427.671816][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 427.671833][ T28] audit: type=1326 audit(1780663802.295:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12795 comm="syz.3.2493" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c0159ce59 code=0x0 [ 427.803403][ T8] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 427.820605][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.849130][ T8] usb 5-1: Product: syz [ 427.859209][ T8] usb 5-1: Manufacturer: syz [ 427.874302][ T8] usb 5-1: SerialNumber: syz [ 427.893950][ T8] usb 5-1: config 0 descriptor?? [ 427.916758][ T8] hub 5-1:0.0: bad descriptor, ignoring hub [ 427.942353][ T8] hub: probe of 5-1:0.0 failed with error -5 [ 427.949789][ T8] f81232 5-1:0.0: f81534a converter detected [ 428.011094][T12806] loop0: detected capacity change from 0 to 64 [ 428.126466][ T8] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 428.149112][ T8] f81534a: probe of ttyUSB0 failed with error -5 [ 428.300239][T12808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2499'. [ 428.432815][ T8] usb 5-1: reset high-speed USB device number 15 using dummy_hcd [ 428.558349][T12813] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 428.615303][T12813] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 428.668926][T12813] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.2501: Failed to acquire dquot type 1 [ 428.716750][T12813] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 428.743042][T12813] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 428.755251][T12813] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.2501: Failed to acquire dquot type 1 [ 428.773069][T12813] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2501: bg 0: block 248: padding at end of block bitmap is not set [ 428.802969][T12813] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 428.833341][T12813] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 428.856228][T12813] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 428.880917][T12813] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.2501: Failed to acquire dquot type 1 [ 428.898356][T12813] EXT4-fs (loop0): 1 orphan inode deleted [ 428.942345][T12813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.972964][T12813] ext4 filesystem being mounted at /676/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.074315][T12813] EXT4-fs (loop0): shut down requested (1) [ 429.139291][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.269701][T12827] set_capacity_and_notify: 1 callbacks suppressed [ 429.269740][T12827] loop1: detected capacity change from 0 to 512 [ 429.295089][T12827] EXT4-fs: Ignoring removed nobh option [ 429.377395][T12827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.400688][T12827] ext4 filesystem being mounted at /609/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 429.558501][T12827] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 3: comm syz.1.2506: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 429.631715][T12837] EXT4-fs error (device loop1): mb_free_blocks:1970: group 0, inode 15: block 44:freeing already freed block (bit 44); block bitmap corrupt. [ 429.652232][T12839] misc userio: Begin command sent, but we're already running [ 429.676002][T12837] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #15: comm syz.1.2506: corrupted inode contents [ 429.696585][T12837] EXT4-fs error (device loop1): ext4_dirty_inode:6143: inode #15: comm syz.1.2506: mark_inode_dirty error [ 429.752797][T12837] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #15: comm syz.1.2506: corrupted inode contents [ 429.790736][T12837] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.2506: mark_inode_dirty error [ 429.818738][T12837] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #15: comm syz.1.2506: corrupted inode contents [ 429.834894][T12843] loop0: detected capacity change from 0 to 1024 [ 429.843735][T12837] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.2506: mark_inode_dirty error [ 429.905954][T12837] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #15: comm syz.1.2506: corrupted inode contents [ 429.948840][T12837] EXT4-fs error (device loop1): ext4_truncate:4301: inode #15: comm syz.1.2506: mark_inode_dirty error [ 429.964611][T12847] netlink: 752 bytes leftover after parsing attributes in process `syz.3.2516'. [ 429.973828][T12847] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 430.021781][ T28] audit: type=1804 audit(1780663804.655:167): pid=12848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2514" name="/newroot/680/file0/file1" dev="loop0" ino=20 res=1 errno=0 [ 430.097685][T12850] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2517'. [ 430.406577][T12860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2522'. [ 430.417896][T12857] loop3: detected capacity change from 0 to 2048 [ 430.420292][T12860] tipc: Started in network mode [ 430.432012][ T5852] usb 5-1: USB disconnect, device number 15 [ 430.438719][ T5852] f81232 5-1:0.0: device disconnected [ 430.443958][T12860] tipc: Node identity 7, cluster identity 4711 [ 430.453956][T12857] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 430.463030][T12860] tipc: Node number set to 7 [ 430.514634][T12862] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 430.652887][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.679515][T12864] program syz.4.2523 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 430.874630][T12873] loop1: detected capacity change from 0 to 256 [ 430.965943][T12873] FAT-fs (loop1): Directory bread(block 64) failed [ 431.003053][T12873] FAT-fs (loop1): Directory bread(block 65) failed [ 431.009884][T12873] FAT-fs (loop1): Directory bread(block 66) failed [ 431.063922][T12873] FAT-fs (loop1): Directory bread(block 67) failed [ 431.096396][T12873] FAT-fs (loop1): Directory bread(block 68) failed [ 431.121742][T12873] FAT-fs (loop1): Directory bread(block 69) failed [ 431.134101][T12873] FAT-fs (loop1): Directory bread(block 70) failed [ 431.140719][T12873] FAT-fs (loop1): Directory bread(block 71) failed [ 431.148079][T12873] FAT-fs (loop1): Directory bread(block 72) failed [ 431.155345][T12873] FAT-fs (loop1): Directory bread(block 73) failed [ 431.196744][T12873] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 431.633665][T12896] loop4: detected capacity change from 0 to 1024 [ 431.641094][T12896] EXT4-fs: Ignoring removed mblk_io_submit option [ 431.670633][T12896] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 431.670633][T12896] [ 431.769940][ T6276] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 431.896750][T12905] loop3: detected capacity change from 0 to 256 [ 432.042943][T12905] FAT-fs (loop3): Directory bread(block 64) failed [ 432.049554][T12905] FAT-fs (loop3): Directory bread(block 65) failed [ 432.078307][T12910] loop0: detected capacity change from 0 to 1024 [ 432.087559][T12905] FAT-fs (loop3): Directory bread(block 66) failed [ 432.095532][T12910] EXT4-fs: Ignoring removed orlov option [ 432.128464][T12905] FAT-fs (loop3): Directory bread(block 67) failed [ 432.138749][T12905] FAT-fs (loop3): Directory bread(block 68) failed [ 432.147686][T12905] FAT-fs (loop3): Directory bread(block 69) failed [ 432.168301][T12905] FAT-fs (loop3): Directory bread(block 70) failed [ 432.180293][T12905] FAT-fs (loop3): Directory bread(block 71) failed [ 432.189061][T12910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.250155][T12905] FAT-fs (loop3): Directory bread(block 72) failed [ 432.291603][T12905] FAT-fs (loop3): Directory bread(block 73) failed [ 432.313146][T12910] EXT4-fs error (device loop0): __ext4_new_inode:1290: comm syz.0.2542: failed to insert inode 12: doubly allocated? [ 432.376038][T12910] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 432.430686][T12915] loop4: detected capacity change from 0 to 1024 [ 432.522011][T12915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.541868][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.567218][T12915] ext4 filesystem being mounted at /528/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.800920][T12907] loop1: detected capacity change from 0 to 32768 [ 432.833633][ T7117] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 432.886405][T12907] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 433.192887][T12907] XFS (loop1): Ending clean mount [ 433.217361][T12907] XFS (loop1): Quotacheck needed: Please wait. [ 433.264271][T12942] loop4: detected capacity change from 0 to 256 [ 433.337767][T12907] XFS (loop1): Quotacheck: Done. [ 433.437480][T12942] FAT-fs (loop4): Directory bread(block 64) failed [ 433.444220][T12942] FAT-fs (loop4): Directory bread(block 65) failed [ 433.464880][T12942] FAT-fs (loop4): Directory bread(block 66) failed [ 433.489203][T12942] FAT-fs (loop4): Directory bread(block 67) failed [ 433.508541][T12942] FAT-fs (loop4): Directory bread(block 68) failed [ 433.519233][T12942] FAT-fs (loop4): Directory bread(block 69) failed [ 433.554250][T12942] FAT-fs (loop4): Directory bread(block 70) failed [ 433.561282][T12942] FAT-fs (loop4): Directory bread(block 71) failed [ 433.589874][T12942] FAT-fs (loop4): Directory bread(block 72) failed [ 433.602036][T12942] FAT-fs (loop4): Directory bread(block 73) failed [ 433.637262][T12942] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 433.666616][ T5773] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 434.504459][T12958] set_capacity_and_notify: 1 callbacks suppressed [ 434.504476][T12958] loop3: detected capacity change from 0 to 32768 [ 434.599675][ T28] audit: type=1800 audit(1780663809.235:168): pid=12958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2558" name="file2" dev="loop3" ino=5 res=0 errno=0 [ 434.620547][T12958] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 434.620547][T12958] [ 434.639021][T12958] ERROR: (device loop3): remounting filesystem as read-only [ 434.639569][T12958] syz.3.2558: attempt to access beyond end of device [ 434.639569][T12958] loop3: rw=2049, sector=2621792, nr_sectors = 8 limit=32768 [ 434.723570][ T5774] ------------[ cut here ]------------ [ 434.724435][ T5774] kernel BUG at fs/jfs/inode.c:175! [ 434.724460][ T5774] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 434.724627][ T5774] CPU: 1 PID: 5774 Comm: syz-executor Not tainted syzkaller #0 [ 434.724644][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 434.724653][ T5774] RIP: 0010:jfs_evict_inode+0x431/0x440 [ 434.724701][ T5774] Code: df fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 79 84 df fe e9 16 fe ff ff e8 6f 44 87 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 41 57 41 [ 434.724738][ T5774] RSP: 0018:ffffc9000440fac0 EFLAGS: 00010293 [ 434.724777][ T5774] RAX: ffffffff82ffe721 RBX: ffff88805a33b270 RCX: ffff8880292b3c00 [ 434.724790][ T5774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805a33b270 [ 434.724801][ T5774] RBP: 0000000000000002 R08: ffffffff911cd62f R09: 1ffffffff2239ac5 [ 434.724812][ T5774] R10: dffffc0000000000 R11: fffffbfff2239ac6 R12: dffffc0000000000 [ 434.724824][ T5774] R13: dffffc0000000000 R14: ffff88805a33aef8 R15: ffff88805a33b2a8 [ 434.724836][ T5774] FS: 00005555634be500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 434.724851][ T5774] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 434.724863][ T5774] CR2: 00007fd9fd4cdd58 CR3: 000000006282f000 CR4: 00000000003506e0 [ 434.724879][ T5774] Call Trace: [ 434.724909][ T5774] [ 434.724957][ T5774] ? evict+0x4c4/0x8d0 [ 434.725046][ T5774] ? jfs_write_inode+0x220/0x220 [ 434.725068][ T5774] evict+0x4ca/0x8d0 [ 434.725090][ T5774] ? proc_nr_inodes+0x230/0x230 [ 434.725110][ T5774] ? do_raw_spin_unlock+0x121/0x230 [ 434.725135][ T5774] ? do_raw_spin_unlock+0x121/0x230 [ 434.725159][ T5774] evict_inodes+0x606/0x6a0 [ 434.725179][ T5774] ? clear_inode+0x150/0x150 [ 434.725200][ T5774] generic_shutdown_super+0x97/0x2b0 [ 434.725228][ T5774] kill_block_super+0x44/0x90 [ 434.725246][ T5774] deactivate_locked_super+0x97/0x100 [ 434.725264][ T5774] cleanup_mnt+0x43b/0x4d0 [ 434.725287][ T5774] task_work_run+0x1d4/0x260 [ 434.725332][ T5774] ? task_work_cancel+0x220/0x220 [ 434.725359][ T5774] ? exit_to_user_mode_loop+0x3b/0x110 [ 434.725387][ T5774] exit_to_user_mode_loop+0xe6/0x110 [ 434.725413][ T5774] exit_to_user_mode_prepare+0xee/0x180 [ 434.725440][ T5774] syscall_exit_to_user_mode+0x1a/0x50 [ 434.725548][ T5774] do_syscall_64+0x61/0xb0 [ 434.725569][ T5774] ? clear_bhb_loop+0x40/0x90 [ 434.725632][ T5774] ? clear_bhb_loop+0x40/0x90 [ 434.725650][ T5774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 434.725717][ T5774] RIP: 0033:0x7f4c0159e097 [ 434.725735][ T5774] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 434.725751][ T5774] RSP: 002b:00007fffb6cae728 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 434.725773][ T5774] RAX: 0000000000000000 RBX: 00007f4c016321ca RCX: 00007f4c0159e097 [ 434.725787][ T5774] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffb6cae7e0 [ 434.725799][ T5774] RBP: 00007fffb6cae7e0 R08: 00007fffb6caf7e0 R09: 00000000ffffffff [ 434.725812][ T5774] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb6caf870 [ 434.725825][ T5774] R13: 00007f4c016321ca R14: 000000000006a1b2 R15: 00007fffb6caf8b0 [ 434.725846][ T5774] [ 434.725853][ T5774] Modules linked in: [ 434.725867][ T5774] ---[ end trace 0000000000000000 ]--- [ 434.725876][ T5774] RIP: 0010:jfs_evict_inode+0x431/0x440 [ 434.725904][ T5774] Code: df fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 79 84 df fe e9 16 fe ff ff e8 6f 44 87 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 41 57 41 [ 434.725920][ T5774] RSP: 0018:ffffc9000440fac0 EFLAGS: 00010293 [ 434.725938][ T5774] RAX: ffffffff82ffe721 RBX: ffff88805a33b270 RCX: ffff8880292b3c00 [ 434.725953][ T5774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805a33b270 [ 434.725966][ T5774] RBP: 0000000000000002 R08: ffffffff911cd62f R09: 1ffffffff2239ac5 [ 434.725979][ T5774] R10: dffffc0000000000 R11: fffffbfff2239ac6 R12: dffffc0000000000 [ 434.725994][ T5774] R13: dffffc0000000000 R14: ffff88805a33aef8 R15: ffff88805a33b2a8 [ 434.726010][ T5774] FS: 00005555634be500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 434.726027][ T5774] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 434.726042][ T5774] CR2: 00007fd9fd4cdd58 CR3: 000000006282f000 CR4: 00000000003506e0 [ 434.726088][ T5774] Kernel panic - not syncing: Fatal exception [ 434.726223][ T5774] Kernel Offset: disabled