last executing test programs: 5.833993323s ago: executing program 2 (id=1188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) 5.730520383s ago: executing program 2 (id=1199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "448ab78bce"}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x24040840) 5.692133956s ago: executing program 2 (id=1190): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32, @ANYRES8=r0, @ANYRES32], 0x0) 3.717675261s ago: executing program 0 (id=1205): setsockopt(0xffffffffffffffff, 0x3, 0x1, &(0x7f00000000c0)="e9b61b6255d2c0ad5bc8bf19059fbb0291d80adf7c39da42d017dca493817aa84407e88dca79ad1ceecb28019cf673c66020af498b1b4aa96afec84191b9b0358f72ac34a7db2e0a", 0x48) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000040)='trans=rdma,') 3.699283712s ago: executing program 2 (id=1206): socket(0x1, 0x803, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x24, 0x5b, 0x8e, 0x40, 0x45e, 0x284, 0x2dad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x31, 0x0, 0x0, 0x2a, 0xeb, 0x86}}]}}]}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 3.666400025s ago: executing program 0 (id=1207): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r0, 0x540b, 0x2000000000000001) 3.457775684s ago: executing program 0 (id=1209): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 1.943920318s ago: executing program 2 (id=1228): syz_emit_ethernet(0x42, &(0x7f00000001c0)={@link_local, @empty, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "062111", 0x8, 0x0, 0x0, @remote, @mcast2, {[@srh={0x0, 0x0, 0x31}]}}}}}, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) 1.783503102s ago: executing program 2 (id=1232): syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwrite64(r0, &(0x7f0000000040)="57e9b03233665ac03bd6e3f0005ebd09711da2700dbfb112c6c87278958b7feb96aeab1451951559ded5d89e163b6d94bad9ac5f1229f5f71e0f", 0x3a, 0x8) 1.200409174s ago: executing program 0 (id=1244): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x12, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x5, 0xa5a, &(0x7f0000000a80)="$eJzs3U1sHFcBAOA3a6/z22ZTHGrS0CYU2vJTu3FM+ImAVM2FqKm4Vaq4RElaIpyASCVI1UOSEzdaVeHK76mX8qNK5IKinrhUopG49FQ4cCAKUiUO0JC48vq99e7zbmbt2J6s9/uk2bdv3tt9b3ZnZmdn5r0XgKFVaz7OzEwUIVy+8saRfz32zy0hXBlfzNFoPo62xeohhCLGR7P3+2BkIbz14asnuoVFmG4+pnh47kbrtdtCCBfC3nA1NMLuy9def3f62WMXj17a996bh66vzdIDAMBw+c7VQzO7/v7Xh3Z+9NbDh8Om1vx0fN6I8e3xuP9wPPBPx/+10Bkv2qZ2Y1m+0TjVsnwjXfK1l1PP8o32KH8se996j3ybSsofaZvXbblhkKX1uBGK2mRHvFabnFz4Tx6a/+vHismzp2dfPFdRRYFV959HQgh7Taahny42N4jq67Gu09yOqvdAAAvy64VLXMjPLNyd1ruN9lf+jadr3V8Pq2C913/lD1b5v71oj8Pq2ahrU1qutB1tj/G26whnQpf7l/Ltby5/42z7T++XX4+o91nPXtcRBuX6Qq96jqxzPVaqV/3z9WKj+kYM0+fwzSy9ffvJv9NB+Y6B7v7r/L/JNLTTkuPbO8jvlQE2tvy+ubkopef39eXpm0rSN5ekbylJ39qRa2n6tpLXwzD748s/C68Vi//z8//0yz0fns6z3RfD+5dZn/x85HLLH7tDbD3Kd4zEIPnT8edPffXkC9cW7v8vWuv/7bi+743xRtyarsYM6Xxhfl69de9/o7OcWo98D2T1ua9L/ubz8c58xfji+4S2/cySekx0vm5Hr3x7OvM1snxb4rQ5q29+fLI1e106/kj71fR5jWbLW8+WYyyrR9qv7IxhXg9YibQ+9rr/P62fE6FevHh69tRTMZ7W07+M1DfNz99fXtTvVrvuwN3pt/3PROhs/7O9Nb9ea98v7FicX7TvFxrZ/Oke8w/EePqd+97Ilub8yRM/mD252gsPQ+7c+Ve+f3x29tSPPPHEE09aT6reMwFrberlMz+cOnf+lSdPnzn+0qmXTp09cPDggenpg187MDPVPK6faj+6BzaSxR/9qmsCAAAAAAAAAAAA9OvHR49c+9s7X3l/of3/Yvu/1P4/3fmb2v//tFho615rmx+6jAOY2gHu7JLezJN1sDqW5avH6RNZfcezcnZlr/tkDFvj+MX2/6m4vF/XVJ8Hs/l5/70pX9adwJL+UsayXkfy8QI/E8NLMfx1gAoVW7rPjmFZ/9ZpXU/9UyyjX4ruBVOJ9L2lLyX1Y5Laf/fq1ynt/3euQx1ZfevRnLDqZQS6+/cQ9//dPHZZw/f/zf3VL+Pm3mmbqq6bqfppbs4oHsC9oerxP9N5zxSe/fO3N89PKduNpzv3l3n/pXA37vXxJ5W/scb/bI1/19f+7+bS0RMaKyv3f7+4/n5bsWF3v/vffPlTP9DjeQl3PhP90Xz5NxcX5fHQX/lzv8rKzy8I9elmXP70+W/ts/wly7+nrKTzb3eb+/9YfvrYnni03/IXalzUOuuRnzdO1//y88bJrWz5T650+Vc4UOPtWD4Ms0EZZ3a5+hj/t6ls/N8lVnn8317y+zC+HONpR5juc8hHOFlm/VuR9DuwK3v/ouT3zfi/g+3rMSzbHtL4v2l9bHSJ19ri9S6f7Ubd18Cg+uDevf63+ENVfV1M/X5f1dfDtIxpbm5ubU9olai0cCr//Kv+n1B1+VV//mXy8X/zY/h8/N88PR//N0/Px//N0/Px9fL0rVl6/nnm4//m6Q9m75uPDzyR/cHO0z9V8vrdJekPlaTvKUn/dEn6vpL0h0vSHylJf6Ak/dGS9M+WpH+uJP2xkvQnStI/X5K+0aX2KMO6/DDM8vZ5tn8YHql9ba/tf7wkHRhcP39r/zMv/OG7jYX2/2Ot8yHpOt7hGK/H/84/ifH8undoi8+nvRPj/8jS7/XzHTBM8v4z8t/3x0vSgcGV7vOyfcMQKrq3k+i336pex/kMli/E8Isx/FIMn4zhZAynYrg/htPrVD/WxjO/f/vQa8Xi//0dWXq/95Pn7YHyfqIO9Fmf/PzAcu/Hz/vxW667LX+FzcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqU2s+zsxMFCFcvvLGkeePnZ6an/OtVo5G83G0LVZvvS6Ep2I4EsNfxie3Pnz1RHt4O4ZFmA5FKFrzw3M3WiVtCyFcCHvD1dAIuy9fe/3d6WePXTx6ad97bx66vnafAAAAAGx8HwcAAP//V88c0Q==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x80186e82, &(0x7f00000004c0)) 1.139172909s ago: executing program 3 (id=1247): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000340)={0xfffff2d4, 0x200ffffe, 0x7, 0x4, 0xff, 'Mk\x00\x00\x00\x003\x00'}) ioctl$TCXONC(r0, 0x540a, 0x2) 1.069371445s ago: executing program 3 (id=1248): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) 960.611964ms ago: executing program 3 (id=1252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x0) 864.962713ms ago: executing program 0 (id=1253): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000a00)={[{@discard}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@uid}, {@errors_continue}, {@discard}, {@usrquota}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@uid}, {@uid}]}, 0x20, 0x61b6, &(0x7f00000075c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') 780.409241ms ago: executing program 3 (id=1255): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000001640)="9b907f66", 0x4}], 0x2}}], 0x1, 0x4040) 741.285104ms ago: executing program 1 (id=1256): clock_gettime(0x0, &(0x7f0000000240)) r0 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0045103, &(0x7f0000000040)) 713.605116ms ago: executing program 3 (id=1257): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x42, &(0x7f0000000000), 0xff7b) 584.017268ms ago: executing program 4 (id=1258): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 583.664338ms ago: executing program 1 (id=1259): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSPTLCK(r0, 0x40087101, &(0x7f0000000000)=0x1) 459.850599ms ago: executing program 3 (id=1260): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x74, 0xd, 0xcf, 0x40, 0xbda, 0x140, 0xda29, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0xff, 0xf0, 0x8, [{{0x9, 0x4, 0x9e, 0x8, 0x1, 0xce, 0xe0, 0xa7, 0x4c, [], [{{0x9, 0x5, 0x1, 0x3, 0x200, 0x7, 0x5, 0x6}}]}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x25, 0x0, 0x28}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$printer(0x1, 0x0, 0x0, 0x0) 459.587449ms ago: executing program 4 (id=1261): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 422.491442ms ago: executing program 1 (id=1262): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 386.301966ms ago: executing program 4 (id=1263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) 283.861934ms ago: executing program 4 (id=1264): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001000), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001080)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4050) 225.39945ms ago: executing program 4 (id=1265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x70, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast2}}, {0x14, 0x2, @in={0x2, 0x0, @rand_addr=0x64010104}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x82}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}]}]}, 0x70}}, 0x0) 193.717042ms ago: executing program 1 (id=1266): r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) syz_clone3(&(0x7f0000000680)={0x4000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r0], 0x1}, 0x58) 127.772988ms ago: executing program 0 (id=1267): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f00000004c0)=ANY=[@ANYBLOB='nodiscard,quota,iocharset=cp950,grpquota,quota,noquota,nointegrity\x00uid=', @ANYRESHEX, @ANYRES64=0x0, @ANYRESHEX=0x0, @ANYBLOB="bf6a8bfcf00ce3cc70200921", @ANYRESHEX=0x0, @ANYRES16, @ANYRES64=0x0, @ANYRES32, @ANYRES64], 0x1, 0x617a, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) 88.968952ms ago: executing program 4 (id=1268): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000005000000850000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="29dd4c808f84a1688ccf6f00f805", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 29.095157ms ago: executing program 1 (id=1269): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') fchdir(r0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1bd) 0s ago: executing program 1 (id=1270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x20, r1, 0x1, 0x470bd2e, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x144}, 0x0) kernel console output (not intermixed with test programs): T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 83.452951][ T5304] loop1: detected capacity change from 0 to 512 [ 83.577430][ T5304] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 83.634682][ T5304] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.671621][ T5304] Quota error (device loop1): find_tree_dqentry: Getting block too big (33554437 >= 6) [ 83.671778][ T5304] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 83.671797][ T5304] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.386: Failed to acquire dquot type 0 [ 83.684578][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 83.696334][ T21] Bluetooth: hci4: command 0x0405 tx timeout [ 83.910058][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.931253][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.959702][ T7] usb 5-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 83.984425][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.007205][ T5326] FAT-fs (loop1): Directory bread(block 64) failed [ 84.013767][ T5326] FAT-fs (loop1): Directory bread(block 65) failed [ 84.039142][ T7] usb 5-1: config 0 descriptor?? [ 84.053056][ T5326] FAT-fs (loop1): Directory bread(block 66) failed [ 84.060188][ T5326] FAT-fs (loop1): Directory bread(block 67) failed [ 84.072942][ T5326] FAT-fs (loop1): Directory bread(block 68) failed [ 84.091514][ T5326] FAT-fs (loop1): Directory bread(block 69) failed [ 84.114466][ T5326] FAT-fs (loop1): Directory bread(block 70) failed [ 84.140645][ T5326] FAT-fs (loop1): Directory bread(block 71) failed [ 84.149936][ T5326] FAT-fs (loop1): Directory bread(block 72) failed [ 84.170102][ T5326] FAT-fs (loop1): Directory bread(block 73) failed [ 84.254071][ T5351] syz.0.409 uses obsolete (PF_INET,SOCK_PACKET) [ 84.444821][ T4226] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 84.480237][ T5357] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.538085][ T7] wacom 0003:056A:0016.0008: unknown main item tag 0x1 [ 84.560559][ T7] wacom 0003:056A:0016.0008: Unknown device_type for 'HID 056a:0016'. Assuming pen. [ 84.572589][ T7] wacom 0003:056A:0016.0008: hidraw0: USB HID v0.00 Device [HID 056a:0016] on usb-dummy_hcd.4-1/input0 [ 84.586999][ T7] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0016.0008/input/input6 [ 84.659879][ T5367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'. [ 84.734421][ T4226] usb 4-1: Using ep0 maxpacket: 16 [ 84.880574][ T7] usb 5-1: USB disconnect, device number 4 [ 84.924604][ T4226] usb 4-1: unable to get BOS descriptor or descriptor too short [ 84.992072][ T5373] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,stripe=0x00000000000077b2,grpquota,,errors=continue. Quota mode: writeback. [ 85.007699][ T5373] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.029244][ T5373] EXT4-fs error (device loop2): ext4_resize_begin:61: comm syz.2.416: resize_inode disabled but reserved GDT blocks non-zero [ 85.054600][ T4226] usb 4-1: config 9 has an invalid interface number: 122 but max is 0 [ 85.083287][ T4226] usb 4-1: config 9 has no interface number 0 [ 85.084650][ T154] hfsplus: b-tree write err: -5, ino 4 [ 85.089621][ T4226] usb 4-1: config 9 interface 122 has no altsetting 0 [ 85.285849][ T4226] usb 4-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=f2.5c [ 85.325071][ T4226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.333104][ T4226] usb 4-1: Product: syz [ 85.350734][ T4226] usb 4-1: Manufacturer: syz [ 85.364347][ T4226] usb 4-1: SerialNumber: syz [ 85.501014][ T5393] hfsplus: found bad thread record in catalog [ 85.554734][ T5206] hfsplus: b-tree write err: -5, ino 4 [ 85.663283][ T5385] XFS (loop1): Mounting V5 Filesystem [ 85.670314][ T4226] etas_es58x 4-1:9.122: Starting syz syz (Serial Number syz) driver version 1.00 [ 85.713564][ T4226] usb 4-1: USB disconnect, device number 3 [ 85.734523][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 85.738465][ T5385] XFS (loop1): Ending clean mount [ 85.862295][ T5385] syz.1.422 (5385) used greatest stack depth: 19152 bytes left [ 85.893085][ T4185] XFS (loop1): Unmounting Filesystem [ 86.016637][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 86.077677][ T5417] set_capacity_and_notify: 7 callbacks suppressed [ 86.077690][ T5417] loop0: detected capacity change from 0 to 32768 [ 86.156780][ T7] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 86.159254][ T5417] XFS (loop0): Mounting V5 Filesystem [ 86.164945][ T7] usb 5-1: config 0 has no interface number 0 [ 86.164984][ T7] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.165007][ T7] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.165039][ T7] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 86.206878][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.216494][ T7] usb 5-1: config 0 descriptor?? [ 86.289017][ T5417] XFS (loop0): Ending clean mount [ 86.348417][ T5417] XFS (loop0): Quotacheck needed: Please wait. [ 86.417467][ T5417] XFS (loop0): Quotacheck: Done. [ 86.482376][ T5440] loop1: detected capacity change from 0 to 1024 [ 86.552552][ T4183] XFS (loop0): Unmounting Filesystem [ 86.620612][ T5440] hfsplus: bad catalog entry type [ 86.716338][ T7] prodikeys 0003:041E:2801.0009: item fetching failed at offset 5/7 [ 86.716726][ T7] prodikeys 0003:041E:2801.0009: hid parse failed [ 86.716786][ T7] prodikeys: probe of 0003:041E:2801.0009 failed with error -22 [ 86.997875][ T5454] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.006417][ T4391] usb 5-1: USB disconnect, device number 5 [ 87.213058][ T5463] loop2: detected capacity change from 0 to 64 [ 87.370358][ T5470] netlink: 40 bytes leftover after parsing attributes in process `syz.0.454'. [ 87.434238][ T5443] loop3: detected capacity change from 0 to 40427 [ 87.514180][ T5443] F2FS-fs (loop3): invalid crc value [ 87.530817][ T5479] bridge0: port 3(hsr0) entered blocking state [ 87.551684][ T5479] bridge0: port 3(hsr0) entered disabled state [ 87.596604][ T5443] F2FS-fs (loop3): Found nat_bits in checkpoint [ 87.620571][ T5479] device hsr0 entered promiscuous mode [ 87.665796][ T5479] bridge0: port 3(hsr0) entered blocking state [ 87.672473][ T5479] bridge0: port 3(hsr0) entered forwarding state [ 87.857377][ T5443] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 87.910268][ T4173] udevd[4173]: symlink '../../loop4' '/dev/disk/by-diskseq/187.tmp-b7:4' failed: Read-only file system [ 87.936257][ T7] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 87.966802][ T4176] udevd[4176]: symlink '../../loop0' '/dev/disk/by-diskseq/212.tmp-b7:0' failed: Read-only file system [ 87.978044][ T4175] udevd[4175]: symlink '../../loop3' '/dev/disk/by-diskseq/214.tmp-b7:3' failed: Read-only file system [ 88.006456][ T4173] udevd[4173]: symlink '../../loop2' '/dev/disk/by-diskseq/215.tmp-b7:2' failed: Read-only file system [ 88.032390][ T5481] attempt to access beyond end of device [ 88.032390][ T5481] loop3: rw=2049, want=45104, limit=40427 [ 88.041189][ T5508] loop0: detected capacity change from 0 to 512 [ 88.058512][ T4175] udevd[4175]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system [ 88.121603][ T5508] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 88.147432][ T4173] udevd[4173]: symlink '../../loop4' '/dev/disk/by-diskseq/187.tmp-b7:4' failed: Read-only file system [ 88.173895][ T4175] udevd[4175]: symlink '../../loop0' '/dev/disk/by-diskseq/216.tmp-b7:0' failed: Read-only file system [ 88.188740][ T5508] EXT4-fs (loop0): orphan cleanup on readonly fs [ 88.221671][ T5510] loop2: detected capacity change from 0 to 4096 [ 88.226075][ T4175] udevd[4175]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 88.230605][ T5508] EXT4-fs error (device loop0): __ext4_iget:4912: inode #11: block 8: comm syz.0.466: invalid block [ 88.258392][ T5508] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.466: couldn't read orphan inode 11 (err -117) [ 88.300293][ T5508] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.361085][ T4175] udevd[4175]: symlink '../../loop0' '/dev/disk/by-diskseq/216.tmp-b7:0' failed: Read-only file system [ 88.372695][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 88.375925][ T5508] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (57259!=33349) [ 88.414546][ T4176] udevd[4176]: symlink '../../loop4' '/dev/disk/by-diskseq/187.tmp-b7:4' failed: Read-only file system [ 88.425829][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.457405][ T7] usb 2-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 88.479022][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.512014][ T7] usb 2-1: config 0 descriptor?? [ 88.534736][ T5488] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 88.593778][ T5510] ntfs3: loop2: failed to convert "0080" to cp864 [ 88.742552][ T5534] tipc: Started in network mode [ 88.776422][ T5534] tipc: Node identity , cluster identity 4711 [ 88.915433][ T5541] loop4: detected capacity change from 0 to 64 [ 89.008569][ T7] holtek_mouse 0003:04D9:A072.000A: hidraw0: USB HID v51.67 Device [HID 04d9:a072] on usb-dummy_hcd.1-1/input0 [ 89.262523][ T4387] usb 2-1: USB disconnect, device number 3 [ 89.288168][ T5551] fido_id[5551]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 89.343700][ T5559] loop4: detected capacity change from 0 to 64 [ 89.522221][ T5532] loop0: detected capacity change from 0 to 32768 [ 89.660949][ T5532] ea_get: invalid extended attribute [ 89.693916][ T5532] ffff88804e3ed670: 04 00 00 00 .... [ 89.719650][ T5587] loop4: detected capacity change from 0 to 512 [ 89.784112][ T5587] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.490: iget: bad i_size value: 38620345925642 [ 89.829655][ T5587] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.490: couldn't read orphan inode 15 (err -117) [ 89.916155][ T5587] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,init_itable,data_err=ignore,nojournal_checksum,data_err=ignore,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 89.941093][ T5601] netlink: 128 bytes leftover after parsing attributes in process `syz.1.496'. [ 89.984432][ T5601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.496'. [ 90.225201][ T5614] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 90.289708][ T5614] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002] [ 90.302050][ T5614] EXT4-fs (loop0): orphan cleanup on readonly fs [ 90.328012][ T5614] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.493: bg 0: block 361: padding at end of block bitmap is not set [ 90.414459][ T5614] EXT4-fs (loop0): Remounting filesystem read-only [ 90.439926][ T5614] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 90.455533][ T5614] EXT4-fs (loop0): Remounting filesystem read-only [ 90.462155][ T5614] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.493: attempt to clear invalid blocks 33619980 len 1 [ 90.483165][ T5614] EXT4-fs (loop0): Remounting filesystem read-only [ 90.493347][ T5614] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.493: invalid indirect mapped block 1811939328 (level 0) [ 90.510046][ T5614] EXT4-fs (loop0): Remounting filesystem read-only [ 90.523236][ T5614] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.493: invalid indirect mapped block 2185560079 (level 1) [ 90.542762][ T5614] EXT4-fs (loop0): Remounting filesystem read-only [ 90.549916][ T5614] EXT4-fs (loop0): 1 truncate cleaned up [ 90.557391][ T5614] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000000000000. Quota mode: none. [ 90.574555][ T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 90.582123][ T4387] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 90.654671][ T5212] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 90.830436][ T5632] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.509'. [ 90.917042][ T26] audit: type=1800 audit(1771886645.166:5): pid=5634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.510" name="file1" dev="loop0" ino=1048628 res=0 errno=0 [ 90.937629][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.957401][ T5634] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 91.014601][ T5212] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.014656][ T4387] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.035874][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.039265][ T5212] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.060352][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 91.105139][ T4387] usb 2-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00 [ 91.114385][ T7] usb 5-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 91.121639][ T5638] set_capacity_and_notify: 2 callbacks suppressed [ 91.121652][ T5638] loop3: detected capacity change from 0 to 512 [ 91.123513][ T4387] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.159342][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.163774][ T5640] loop0: detected capacity change from 0 to 512 [ 91.171840][ T7] usb 5-1: config 0 descriptor?? [ 91.178917][ T5212] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 91.182500][ T4387] usb 2-1: config 0 descriptor?? [ 91.188467][ T5212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 91.207123][ T5212] usb 3-1: SerialNumber: syz [ 91.275603][ T5638] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 91.279283][ T5640] EXT4-fs (loop0): orphan cleanup on readonly fs [ 91.302602][ T5640] EXT4-fs warning (device loop0): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 91.310908][ T5638] EXT4-fs (loop3): invalid journal inode [ 91.334477][ T5638] EXT4-fs (loop3): can't get journal size [ 91.349105][ T5640] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 91.358456][ T5638] EXT4-fs (loop3): 1 truncate cleaned up [ 91.368207][ T5640] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #13: comm syz.0.513: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 91.373875][ T5638] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,sysvgroups,sysvgroups,sb=0x0000000000000005,,errors=continue. Quota mode: none. [ 91.388354][ T5640] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.513: couldn't read orphan inode 13 (err -117) [ 91.430332][ T5640] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,min_batch_time=0x0000000000000514,grpjquota=,stripe=0x0000000000000007,journal_ioprio=0x0000000000000001,grpid,,errors=continue. Quota mode: writeback. [ 91.486949][ T5212] usb 3-1: 0:2 : does not exist [ 91.543285][ T5640] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 91.585670][ T5640] EXT4-fs warning (device loop0): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 91.711111][ T7] gembird 0003:11FF:3331.000B: item fetching failed at offset 2/5 [ 91.724548][ T5212] usb 3-1: USB disconnect, device number 5 [ 91.726929][ T4387] wacom 0003:056A:00B0.000C: Unknown device_type for 'HID 056a:00b0'. Assuming pen. [ 91.754772][ T7] gembird: probe of 0003:11FF:3331.000B failed with error -22 [ 91.797873][ T4387] wacom 0003:056A:00B0.000C: hidraw0: USB HID v0.00 Device [HID 056a:00b0] on usb-dummy_hcd.1-1/input0 [ 91.829105][ T4387] input: Wacom Intuos3 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B0.000C/input/input9 [ 91.976673][ T4387] usb 5-1: USB disconnect, device number 6 [ 92.084716][ T5212] usb 2-1: USB disconnect, device number 4 [ 92.218882][ T5649] loop3: detected capacity change from 0 to 40427 [ 92.240102][ T5649] F2FS-fs (loop3): Invalid Fs Meta Ino: node(3) meta(0) root(3) [ 92.248478][ T5649] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 92.273607][ T5649] F2FS-fs (loop3): invalid crc value [ 92.301069][ T5649] F2FS-fs (loop3): Found nat_bits in checkpoint [ 92.380365][ T5661] netlink: 536 bytes leftover after parsing attributes in process `syz.0.519'. [ 92.382989][ T5649] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 92.389568][ T5661] netlink: 52 bytes leftover after parsing attributes in process `syz.0.519'. [ 92.400563][ T4226] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 92.418462][ T5649] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 92.588591][ T5669] loop0: detected capacity change from 0 to 8 [ 92.590322][ T4194] attempt to access beyond end of device [ 92.590322][ T4194] loop3: rw=2049, want=45104, limit=40427 [ 92.659371][ T5673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.526'. [ 92.690016][ T5673] netlink: 24 bytes leftover after parsing attributes in process `syz.1.526'. [ 92.713884][ T5673] netlink: 'syz.1.526': attribute type 1 has an invalid length. [ 92.735232][ T5669] SQUASHFS error: xz decompression failed, data probably corrupt [ 92.738405][ T5673] netlink: 24 bytes leftover after parsing attributes in process `syz.1.526'. [ 92.758344][ T5669] SQUASHFS error: Failed to read block 0x108: -5 [ 92.797064][ T5669] SQUASHFS error: Unable to read metadata cache entry [106] [ 92.820556][ T5669] SQUASHFS error: Unable to read inode 0x11f [ 92.825979][ T5677] loop4: detected capacity change from 0 to 128 [ 92.887843][ T5677] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 92.913409][ T5677] hpfs: filesystem error: improperly stopped [ 92.945852][ T4175] udevd[4175]: symlink '../../loop0' '/dev/disk/by-diskseq/238.tmp-b7:0' failed: Read-only file system [ 92.963847][ T5677] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 92.977111][ T4173] udevd[4173]: symlink '../../loop3' '/dev/disk/by-diskseq/237.tmp-b7:3' failed: Read-only file system [ 92.998525][ T5677] hpfs: You really don't want any checks? You are crazy... [ 93.007720][ T4226] usb 3-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 93.022494][ T4176] udevd[4176]: symlink '../../loop1' '/dev/disk/by-diskseq/211.tmp-b7:1' failed: Read-only file system [ 93.025434][ T4175] udevd[4175]: symlink '../../loop0' '/dev/disk/by-diskseq/238.tmp-b7:0' failed: Read-only file system [ 93.054843][ T4226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.061608][ T4173] udevd[4173]: symlink '../../loop3' '/dev/disk/by-diskseq/237.tmp-b7:3' failed: Read-only file system [ 93.063554][ T5677] hpfs: hpfs_map_sector(): read error [ 93.080662][ T4226] usb 3-1: Product: syz [ 93.085024][ T4226] usb 3-1: Manufacturer: syz [ 93.090038][ T4226] usb 3-1: SerialNumber: syz [ 93.096205][ T5677] hpfs: code page support is disabled [ 93.104192][ T4226] usb 3-1: config 0 descriptor?? [ 93.116636][ T5677] hpfs: hpfs_map_4sectors(): unaligned read [ 93.133869][ T4175] udevd[4175]: symlink '../../loop0' '/dev/disk/by-diskseq/240.tmp-b7:0' failed: Read-only file system [ 93.146341][ T5677] hpfs: hpfs_map_4sectors(): unaligned read [ 93.152352][ T5677] hpfs: filesystem error: unable to find root dir [ 93.185164][ T4226] comedi comedi5: This driver needs USB 2.0 to operate. Aborting... [ 93.210586][ T4175] udevd[4175]: symlink '../../loop0' '/dev/disk/by-diskseq/240.tmp-b7:0' failed: Read-only file system [ 93.212093][ T4173] udevd[4173]: symlink '../../loop4' '/dev/disk/by-diskseq/239.tmp-b7:4' failed: Read-only file system [ 93.223059][ T4226] usbduxfast 3-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 93.253832][ T5687] 9pnet_rdma: rdma_create_trans (5687): problem binding to privport: 13 [ 93.269509][ T4726] udevd[4726]: symlink '../../loop3' '/dev/disk/by-diskseq/241.tmp-b7:3' failed: Read-only file system [ 93.280027][ T5689] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.524'. [ 93.293151][ T5689] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 93.370213][ T4175] udevd[4175]: symlink '../../loop3' '/dev/disk/by-diskseq/241.tmp-b7:3' failed: Read-only file system [ 93.462965][ T5695] loop4: detected capacity change from 0 to 1024 [ 93.522208][ T4226] usb 3-1: USB disconnect, device number 6 [ 93.571586][ T5206] hfsplus: b-tree write err: -5, ino 4 [ 93.794597][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 94.054673][ T5729] sp0: Synchronizing with TNC [ 94.111744][ T5733] loop2: detected capacity change from 0 to 164 [ 94.184662][ T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 94.202555][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.240482][ T7] usb 1-1: config 0 descriptor?? [ 94.275655][ T5739] loop4: detected capacity change from 0 to 512 [ 94.365155][ T5739] EXT4-fs (loop4): Ignoring removed nobh option [ 94.374874][ T5739] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 94.389524][ T5739] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 94.421951][ T5738] loop1: detected capacity change from 0 to 4096 [ 94.445711][ T5749] loop2: detected capacity change from 0 to 1024 [ 94.470994][ T5739] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 94.490767][ T5739] EXT4-fs (loop4): 1 truncate cleaned up [ 94.498069][ T5739] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000066,lazytime,data_err=abort,inode_readahead_blks=0x0000000004000000,nobh,,errors=continue. Quota mode: none. [ 94.619007][ T9] hfsplus: b-tree write err: -5, ino 4 [ 94.639564][ T4185] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 94.654363][ T4185] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 94.702125][ T5754] process 'syz.4.565' launched '/dev/fd/3' with NULL argv: empty string added [ 94.754665][ T7] ath6kl: Unsupported hardware version: 0x0 [ 94.998341][ T7] ath6kl: Failed to init ath6kl core: -22 [ 95.034921][ T7] ath6kl_usb: probe of 1-1:0.0 failed with error -22 [ 95.074712][ T7] usb 1-1: USB disconnect, device number 5 [ 95.199088][ T5779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.573'. [ 95.402669][ T5786] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.600411][ T5804] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.600810][ T5789] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 95.661460][ T5789] NILFS (loop1): mounting fs with errors [ 95.692090][ T5797] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 2: comm syz.2.583: lblock 2 mapped to illegal pblock 2 (length 1) [ 95.720606][ T5797] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 95.751229][ T5797] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 48: comm syz.2.583: lblock 0 mapped to illegal pblock 48 (length 1) [ 95.776455][ T5806] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 95.798025][ T5806] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.826377][ T5797] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 95.847801][ T5797] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.583: Failed to acquire dquot type 0 [ 95.933676][ T5797] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 95.971990][ T5797] EXT4-fs error (device loop2): ext4_evict_inode:282: inode #11: comm syz.2.583: mark_inode_dirty error [ 95.997218][ T5816] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 33619980: comm syz.4.591: invalid block [ 96.039746][ T5816] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.591: Invalid block bitmap block 0 in block_group 0 [ 96.042068][ T5797] EXT4-fs warning (device loop2): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 96.065107][ T5816] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 96.084683][ T5816] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.591: attempt to clear invalid blocks 983261 len 1 [ 96.098345][ T5797] EXT4-fs (loop2): 1 orphan inode deleted [ 96.104100][ T5797] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 96.127108][ T5816] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.591: invalid indirect mapped block 2683928664 (level 0) [ 96.141929][ T5816] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.591: Invalid inode table block 0 in block_group 0 [ 96.145396][ T5206] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 96.174720][ T5816] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 96.221027][ T5816] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 96.259200][ T5816] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.591: Invalid inode table block 0 in block_group 0 [ 96.303337][ T5206] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 96.324366][ T5211] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 96.332997][ T5816] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 96.368004][ T5206] EXT4-fs error (device loop2): ext4_release_dquot:6270: comm kworker/u4:7: Failed to release dquot type 0 [ 96.397061][ T5816] EXT4-fs error (device loop4): ext4_truncate:4279: inode #13: comm syz.4.591: mark_inode_dirty error [ 96.429948][ T5797] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #2: block 16: comm syz.2.583: lblock 262144 mapped to illegal pblock 16 (length 8) [ 96.451952][ T5816] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 96.473331][ T5831] IPVS: Error connecting to the multicast addr [ 96.496686][ T5816] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.591: Invalid inode table block 0 in block_group 0 [ 96.564834][ T5816] EXT4-fs (loop4): 1 truncate cleaned up [ 96.588893][ T4195] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 96.593209][ T5816] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 96.644563][ T4195] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 96.660709][ T5835] set_capacity_and_notify: 7 callbacks suppressed [ 96.660724][ T5835] loop0: detected capacity change from 0 to 512 [ 96.675493][ T4195] EXT4-fs error (device loop2): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 96.724673][ T5211] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.773943][ T5211] usb 2-1: config 0 interface 0 has no altsetting 0 [ 96.794401][ T5211] usb 2-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 96.794828][ T5835] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 96.813806][ T5211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.826036][ T5211] usb 2-1: config 0 descriptor?? [ 96.993156][ T5843] loop2: detected capacity change from 0 to 4096 [ 96.998790][ T5847] program syz.4.602 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.119681][ T5853] x_tables: ip_tables: DNAT target: only valid in nat table, not syz0 [ 97.141979][ T5854] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.247463][ T5859] netlink: 20 bytes leftover after parsing attributes in process `syz.2.607'. [ 97.326030][ T5211] elecom 0003:056E:011C.000D: unknown main item tag 0x0 [ 97.333037][ T5211] elecom 0003:056E:011C.000D: unknown main item tag 0x0 [ 97.353310][ T5864] loop3: detected capacity change from 0 to 512 [ 97.382869][ T5211] elecom 0003:056E:011C.000D: unknown main item tag 0x0 [ 97.403795][ T5211] elecom 0003:056E:011C.000D: unknown main item tag 0x0 [ 97.449137][ T5211] elecom 0003:056E:011C.000D: unknown main item tag 0x0 [ 97.472968][ T5864] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.509795][ T5211] elecom 0003:056E:011C.000D: hidraw0: USB HID v4.06 Device [HID 056e:011c] on usb-dummy_hcd.1-1/input0 [ 97.524173][ T26] audit: type=1326 audit(1771886651.766:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5873 comm="syz.0.616" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa974226629 code=0x0 [ 97.536066][ T5211] usb 2-1: USB disconnect, device number 5 [ 97.581138][ T5876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.617'. [ 97.750277][ T5880] fido_id[5880]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 97.927369][ T5895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.625'. [ 97.973232][ T4175] udevd[4175]: symlink '../../loop3' '/dev/disk/by-diskseq/272.tmp-b7:3' failed: Read-only file system [ 98.014637][ T4173] udevd[4173]: symlink '../../loop2' '/dev/disk/by-diskseq/270.tmp-b7:2' failed: Read-only file system [ 98.052873][ T4175] udevd[4175]: symlink '../../loop4' '/dev/disk/by-diskseq/267.tmp-b7:4' failed: Read-only file system [ 98.075009][ T4173] udevd[4173]: symlink '../../loop3' '/dev/disk/by-diskseq/272.tmp-b7:3' failed: Read-only file system [ 98.122810][ T5901] loop4: detected capacity change from 0 to 4096 [ 98.133506][ T4175] udevd[4175]: symlink '../../loop2' '/dev/disk/by-diskseq/270.tmp-b7:2' failed: Read-only file system [ 98.352706][ T4175] udevd[4175]: symlink '../../loop4' '/dev/disk/by-diskseq/273.tmp-b7:4' failed: Read-only file system [ 98.392308][ T4175] udevd[4175]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 98.416164][ T4173] udevd[4173]: symlink '../../loop2' '/dev/disk/by-diskseq/270.tmp-b7:2' failed: Read-only file system [ 98.446645][ T4176] udevd[4176]: symlink '../../loop1' '/dev/disk/by-diskseq/263.tmp-b7:1' failed: Read-only file system [ 98.479351][ T4175] udevd[4175]: symlink '../../loop4' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:4' failed: Read-only file system [ 98.848141][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.645'. [ 98.941273][ T5913] loop1: detected capacity change from 0 to 32768 [ 98.964513][ T5913] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.634 (5913) [ 98.991861][ T5913] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 99.010925][ T5913] BTRFS info (device loop1): enabling auto defrag [ 99.017508][ T5913] BTRFS info (device loop1): use no compression [ 99.034163][ T5913] BTRFS info (device loop1): force clearing of disk cache [ 99.041639][ T5913] BTRFS info (device loop1): max_inline at 4096 [ 99.054560][ T5913] BTRFS info (device loop1): disabling free space tree [ 99.066072][ T5913] BTRFS info (device loop1): has skinny extents [ 99.089922][ T4391] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 99.144372][ T5212] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.228194][ T5943] loop2: detected capacity change from 0 to 32768 [ 99.266057][ T5913] BTRFS info (device loop1): enabling ssd optimizations [ 99.283146][ T5913] BTRFS info (device loop1): clearing free space tree [ 99.291432][ T5913] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 99.302478][ T5913] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 99.312967][ T5943] XFS (loop2): Mounting V5 Filesystem [ 99.384357][ T5212] usb 4-1: Using ep0 maxpacket: 16 [ 99.384581][ T4391] usb 1-1: Using ep0 maxpacket: 16 [ 99.421664][ T5943] XFS (loop2): Ending clean mount [ 99.423228][ T5973] bridge: RTM_DELNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 99.446563][ T5943] XFS (loop2): Quotacheck needed: Please wait. [ 99.504584][ T5212] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.525188][ T5212] usb 4-1: config 0 interface 0 has no altsetting 0 [ 99.532601][ T5212] usb 4-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 99.544425][ T5212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.575009][ T4391] usb 1-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.575550][ T5212] usb 4-1: config 0 descriptor?? [ 99.604323][ T4391] usb 1-1: config 0 interface 0 has no altsetting 0 [ 99.619113][ T4391] usb 1-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 99.638310][ T5977] loop4: detected capacity change from 0 to 1024 [ 99.645258][ T4391] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.655860][ T4391] usb 1-1: config 0 descriptor?? [ 99.696636][ T5943] XFS (loop2): Quotacheck: Done. [ 99.795578][ T5977] hfsplus: keylen 65060 too large [ 99.838208][ T5977] hfsplus: xattr searching failed [ 99.871406][ T4195] XFS (loop2): Unmounting Filesystem [ 100.077363][ T5212] apple 0003:05AC:0274.000E: unbalanced delimiter at end of report description [ 100.104031][ T5212] apple 0003:05AC:0274.000E: parse failed [ 100.122309][ T5212] apple: probe of 0003:05AC:0274.000E failed with error -22 [ 100.167015][ T4391] holtek_mouse 0003:04D9:A072.000F: collection stack underflow [ 100.177895][ T4391] holtek_mouse 0003:04D9:A072.000F: item 0 4 0 12 parsing failed [ 100.192510][ T4391] holtek_mouse 0003:04D9:A072.000F: hid parse failed: -22 [ 100.204513][ T4391] holtek_mouse: probe of 0003:04D9:A072.000F failed with error -22 [ 100.251430][ T5991] loop1: detected capacity change from 0 to 8 [ 100.363692][ T4391] usb 4-1: USB disconnect, device number 4 [ 100.387691][ T21] usb 1-1: USB disconnect, device number 6 [ 100.395147][ T5996] device sit0 entered promiscuous mode [ 100.428171][ T5996] netlink: 'syz.2.659': attribute type 1 has an invalid length. [ 100.444061][ T5996] netlink: 9 bytes leftover after parsing attributes in process `syz.2.659'. [ 100.504642][ T4387] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 100.592392][ T6006] loop1: detected capacity change from 0 to 256 [ 100.658995][ T6006] FAT-fs (loop1): Directory bread(block 64) failed [ 100.666078][ T6006] FAT-fs (loop1): Directory bread(block 65) failed [ 100.675947][ T6006] FAT-fs (loop1): Directory bread(block 66) failed [ 100.682566][ T6006] FAT-fs (loop1): Directory bread(block 67) failed [ 100.690869][ T6006] FAT-fs (loop1): Directory bread(block 68) failed [ 100.700237][ T6006] FAT-fs (loop1): Directory bread(block 69) failed [ 100.707219][ T6006] FAT-fs (loop1): Directory bread(block 70) failed [ 100.713880][ T6006] FAT-fs (loop1): Directory bread(block 71) failed [ 100.720499][ T6006] FAT-fs (loop1): Directory bread(block 72) failed [ 100.727680][ T6006] FAT-fs (loop1): Directory bread(block 73) failed [ 100.765505][ T4223] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 100.909913][ T4387] usb 5-1: config 0 interface 0 has no altsetting 0 [ 100.921570][ T6010] loop1: detected capacity change from 0 to 512 [ 100.942595][ T4387] usb 5-1: New USB device found, idVendor=056a, idProduct=0304, bcdDevice= 0.00 [ 100.960759][ T4387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.970963][ T4387] usb 5-1: config 0 descriptor?? [ 100.987808][ T6010] EXT4-fs (loop1): Ignoring removed nobh option [ 100.999881][ T6010] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 101.010660][ T4223] usb 3-1: Using ep0 maxpacket: 16 [ 101.061784][ T6010] EXT4-fs (loop1): 1 truncate cleaned up [ 101.071238][ T6010] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000066,lazytime,data_err=abort,inode_readahead_blks=0x0000000004000000,nobh,,errors=continue. Quota mode: none. [ 101.135995][ T6020] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 101.146615][ T6020] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 101.157058][ T6020] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 101.167024][ T6020] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 101.177092][ T6020] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 101.184628][ T4223] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.187007][ T6020] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 101.207990][ T6020] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 101.220417][ T4223] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.245978][ T6020] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 101.251389][ T4223] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 101.264546][ T6020] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 101.270435][ T4223] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 101.287819][ T4223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.305587][ T4223] usb 3-1: config 0 descriptor?? [ 101.325451][ T6020] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 101.457424][ T4387] wacom 0003:056A:0304.0010: unknown main item tag 0x0 [ 101.473308][ T4387] wacom 0003:056A:0304.0010: unknown main item tag 0x0 [ 101.493236][ T4387] wacom 0003:056A:0304.0010: unknown main item tag 0x0 [ 101.507618][ T4387] wacom 0003:056A:0304.0010: unknown main item tag 0x0 [ 101.522417][ T4387] wacom 0003:056A:0304.0010: unknown main item tag 0x0 [ 101.540355][ T4387] wacom 0003:056A:0304.0010: hidraw0: USB HID v0.04 Device [HID 056a:0304] on usb-dummy_hcd.4-1/input0 [ 101.669930][ T4391] usb 5-1: USB disconnect, device number 7 [ 101.797411][ T4223] microsoft 0003:045E:07DA.0011: ignoring exceeding usage max [ 101.814170][ T4223] microsoft 0003:045E:07DA.0011: unsupported Resolution Multiplier 0 [ 101.824435][ T4223] microsoft 0003:045E:07DA.0011: unsupported Resolution Multiplier 0 [ 101.832896][ T4223] microsoft 0003:045E:07DA.0011: No inputs registered, leaving [ 101.849526][ T4223] microsoft 0003:045E:07DA.0011: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 101.863626][ T4223] microsoft 0003:045E:07DA.0011: no inputs found [ 101.873388][ T4223] microsoft 0003:045E:07DA.0011: could not initialize ff, continuing anyway [ 102.119116][ T4263] usb 3-1: USB disconnect, device number 7 [ 102.161384][ T6032] set_capacity_and_notify: 1 callbacks suppressed [ 102.161399][ T6032] loop0: detected capacity change from 0 to 128 [ 102.178888][ T6030] loop1: detected capacity change from 0 to 4096 [ 102.201642][ T6034] loop3: detected capacity change from 0 to 128 [ 102.225408][ T6032] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.240183][ T6032] ext4 filesystem being mounted at /137/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.301495][ T6040] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.744762][ T5211] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 102.768346][ T4263] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 102.805844][ T6069] loop0: detected capacity change from 0 to 16 [ 102.842730][ T6072] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 102.853443][ T6069] erofs: (device loop0): mounted with root inode @ nid 36. [ 102.863778][ T6074] loop2: detected capacity change from 0 to 512 [ 102.881969][ T6072] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 102.887568][ T6069] attempt to access beyond end of device [ 102.887568][ T6069] loop0: rw=0, want=40, limit=16 [ 102.888933][ T6072] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 102.912607][ T6069] attempt to access beyond end of device [ 102.912607][ T6069] loop0: rw=0, want=40, limit=16 [ 102.929971][ T6072] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 102.943428][ T6074] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 102.959675][ T6072] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 102.966825][ T6072] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 102.973811][ T6072] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 102.990687][ T6072] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 102.993627][ T4175] udevd[4175]: symlink '../../loop2' '/dev/disk/by-diskseq/280.tmp-b7:2' failed: Read-only file system [ 102.998718][ T6072] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 103.020852][ T5211] usb 2-1: Using ep0 maxpacket: 16 [ 103.025359][ T6072] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 103.032519][ T6072] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 103.045519][ T4173] udevd[4173]: symlink '../../loop0' '/dev/disk/by-diskseq/295.tmp-b7:0' failed: Read-only file system [ 103.058488][ T6078] loop0: detected capacity change from 0 to 256 [ 103.067351][ T4175] udevd[4175]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 103.070280][ T6072] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 103.079413][ T4263] usb 5-1: Using ep0 maxpacket: 16 [ 103.098528][ T4175] udevd[4175]: symlink '../../loop2' '/dev/disk/by-diskseq/296.tmp-b7:2' failed: Read-only file system [ 103.112022][ T4175] udevd[4175]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 103.139052][ T6072] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 103.146975][ T6072] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 103.173361][ T6072] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 103.182049][ T5211] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.189561][ T4175] udevd[4175]: symlink '../../loop2' '/dev/disk/by-diskseq/296.tmp-b7:2' failed: Read-only file system [ 103.196946][ T5211] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.214653][ T4263] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 103.219442][ T6072] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 103.233554][ T6072] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 103.248157][ T6072] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 103.254638][ T4263] usb 5-1: config 0 has no interface number 0 [ 103.254678][ T4263] usb 5-1: config 0 interface 29 altsetting 8 endpoint 0xF has invalid maxpacket 608, setting to 64 [ 103.254703][ T4263] usb 5-1: config 0 interface 29 altsetting 8 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 103.254726][ T4263] usb 5-1: config 0 interface 29 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 1023 [ 103.254746][ T4263] usb 5-1: config 0 interface 29 has no altsetting 0 [ 103.258487][ T4173] udevd[4173]: symlink '../../loop0' '/dev/disk/by-diskseq/295.tmp-b7:0' failed: Read-only file system [ 103.275650][ T6082] tipc: Started in network mode [ 103.293925][ T4175] udevd[4175]: symlink '../../loop2' '/dev/disk/by-diskseq/296.tmp-b7:2' failed: Read-only file system [ 103.309473][ T6082] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 103.312185][ T6072] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 103.351315][ T6082] tipc: Enabled bearer , priority 10 [ 103.351784][ T4175] udevd[4175]: symlink '../../loop2' '/dev/disk/by-diskseq/296.tmp-b7:2' failed: Read-only file system [ 103.377239][ T4175] udevd[4175]: symlink '../../loop2' '/dev/disk/by-diskseq/296.tmp-b7:2' failed: Read-only file system [ 103.414563][ T5211] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.439576][ T5211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.457175][ T4263] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=44.da [ 103.472457][ T5211] usb 2-1: Product: syz [ 103.474324][ T4263] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.504326][ T5211] usb 2-1: Manufacturer: syz [ 103.509525][ T4263] usb 5-1: Product: syz [ 103.524787][ T4263] usb 5-1: Manufacturer: syz [ 103.534435][ T4263] usb 5-1: SerialNumber: syz [ 103.544423][ T5211] usb 2-1: SerialNumber: syz [ 103.567468][ T4263] usb 5-1: config 0 descriptor?? [ 103.604863][ T6050] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 103.631975][ T6094] loop0: detected capacity change from 0 to 1024 [ 103.645052][ T4263] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 103.715490][ T6094] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 103.734156][ T6094] EXT4-fs (loop0): group descriptors corrupted! [ 103.864674][ T5211] usb 2-1: 0:2 : does not exist [ 103.893233][ T5211] usb 2-1: USB disconnect, device number 6 [ 103.924904][ T4223] usb 5-1: USB disconnect, device number 8 [ 103.944463][ T4316] usb 5-1: Failed to submit usb control message: -71 [ 103.947250][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.713'. [ 103.961908][ T4316] usb 5-1: unable to send the bmi data to the device: -71 [ 103.970911][ T4316] usb 5-1: unable to get target info from device [ 103.990690][ T4316] usb 5-1: could not get target info (-71) [ 104.004993][ T4316] usb 5-1: could not probe fw (-71) [ 104.029626][ T6119] loop3: detected capacity change from 0 to 1024 [ 104.109243][ T6119] hfsplus: bad catalog entry type [ 104.206000][ T4237] hfsplus: b-tree write err: -5, ino 4 [ 104.461551][ T5212] tipc: Node number set to 10005162 [ 104.546835][ T6118] loop0: detected capacity change from 0 to 32768 [ 104.605977][ T6140] mmap: syz.1.724 (6140) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 104.669601][ T6118] XFS (loop0): Mounting V5 Filesystem [ 104.793328][ T6151] loop2: detected capacity change from 0 to 512 [ 104.802266][ T6118] XFS (loop0): Ending clean mount [ 104.813927][ T6118] XFS (loop0): Quotacheck needed: Please wait. [ 104.862277][ T6118] XFS (loop0): Quotacheck: Done. [ 104.925986][ T6151] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 104.984240][ T6128] JBD2: Ignoring recovery information on journal [ 104.988719][ T6151] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 105.092990][ T6151] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.726: Failed to acquire dquot type 1 [ 105.107601][ T6128] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 105.174779][ T4183] XFS (loop0): Unmounting Filesystem [ 105.180453][ T6151] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 105.221045][ T6151] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 105.252922][ T6128] OCFS2: ERROR (device loop3): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 105.253014][ T6128] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 105.277620][ T6151] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.726: Failed to acquire dquot type 1 [ 105.313347][ T6128] OCFS2: Returning error to the calling process. [ 105.384820][ T6151] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.726: bg 0: block 248: padding at end of block bitmap is not set [ 105.413886][ T4194] ocfs2: Unmounting device (7,3) on (node local) [ 105.429439][ T6151] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 105.452823][ T6136] XFS (loop4): Mounting V5 Filesystem [ 105.462166][ T6151] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 105.484520][ T6174] tipc: Started in network mode [ 105.489424][ T6174] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 105.513340][ T6151] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 105.542633][ T6151] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.726: Failed to acquire dquot type 1 [ 105.544869][ T6174] tipc: Enabled bearer , priority 12 [ 105.565260][ T6151] EXT4-fs (loop2): 1 orphan inode deleted [ 105.629337][ T6151] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.715511][ T6136] XFS (loop4): Ending clean mount [ 105.723412][ T6151] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.800255][ T6184] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.828838][ T6188] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.869797][ T6184] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.914038][ T6181] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 105.934441][ T26] audit: type=1800 audit(1771886660.176:7): pid=6184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.730" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 106.053923][ T6181] NILFS error (device loop1): nilfs_readdir: bad page in #2 [ 106.076728][ T4188] XFS (loop4): Unmounting Filesystem [ 106.191530][ T5212] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 106.384524][ T4391] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 106.444381][ T5212] usb 4-1: Using ep0 maxpacket: 16 [ 106.465091][ T6202] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.544442][ T4387] tipc: Node number set to 15444650 [ 106.579993][ T5212] usb 4-1: config 0 interface 0 has no altsetting 0 [ 106.593954][ T5212] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 106.610963][ T5212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.613344][ T6204] net_ratelimit: 8695 callbacks suppressed [ 106.613358][ T6204] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 106.635931][ T5212] usb 4-1: config 0 descriptor?? [ 106.640104][ T6204] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 106.650817][ T6204] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 106.665040][ T6204] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 106.678075][ T6204] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 106.690387][ T6204] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 106.702004][ T6204] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 106.713206][ T6204] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 106.725388][ T6204] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 106.737466][ T6204] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 106.954691][ T4391] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 106.973926][ T4391] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.984031][ T4391] usb 3-1: Product: syz [ 106.988263][ T4391] usb 3-1: Manufacturer: syz [ 106.992848][ T4391] usb 3-1: SerialNumber: syz [ 107.015785][ T4391] usb 3-1: config 0 descriptor?? [ 107.067949][ T4391] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 107.087721][ T4391] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 107.117076][ T5212] magicmouse 0003:05AC:0265.0012: unknown main item tag 0x2 [ 107.129274][ T5212] magicmouse 0003:05AC:0265.0012: item fetching failed at offset 6/7 [ 107.134604][ T4391] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 107.141622][ T5212] magicmouse 0003:05AC:0265.0012: magicmouse hid parse failed [ 107.154360][ T4391] usb 3-1: media controller created [ 107.166856][ T5212] magicmouse: probe of 0003:05AC:0265.0012 failed with error -22 [ 107.178453][ T4391] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.246996][ T4391] DVB: Unable to find symbol mt352_attach() [ 107.298499][ T4391] DVB: Unable to find symbol nxt6000_attach() [ 107.314351][ T4391] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 107.343431][ T5212] usb 4-1: USB disconnect, device number 5 [ 107.356895][ T4391] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 107.385346][ T4391] dvb-usb: schedule remote query interval to 1000 msecs. [ 107.402768][ T4391] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 107.413387][ T4391] dvb-usb: bulk message failed: -22 (7/0) [ 107.419498][ T4391] dvb-usb: bulk message failed: -22 (7/0) [ 107.438353][ T4391] usb 3-1: USB disconnect, device number 8 [ 107.502896][ T4391] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 107.505990][ T6208] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 107.571500][ T6208] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.586073][ T6206] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,dioread_lock,barrier,journal_ioprio=0x0000000000000007,inode_readahead_blks=0x0000000000002000,. Quota mode: none. [ 107.615936][ T6206] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.695237][ T4387] hid-generic 0000:0000:0000.0013: item fetching failed at offset 0/1 [ 107.724045][ T4387] hid-generic: probe of 0000:0000:0000.0013 failed with error -22 [ 107.957343][ T6234] set_capacity_and_notify: 7 callbacks suppressed [ 107.957359][ T6234] loop3: detected capacity change from 0 to 1024 [ 108.011519][ T4175] udevd[4175]: symlink '../../loop0' '/dev/disk/by-diskseq/323.tmp-b7:0' failed: Read-only file system [ 108.072602][ T4175] udevd[4175]: symlink '../../loop1' '/dev/disk/by-diskseq/317.tmp-b7:1' failed: Read-only file system [ 108.130575][ T6218] udevd[6218]: symlink '../../loop3' '/dev/disk/by-diskseq/324.tmp-b7:3' failed: Read-only file system [ 108.181087][ T4175] udevd[4175]: symlink '../../loop2' '/dev/disk/by-diskseq/315.tmp-b7:2' failed: Read-only file system [ 108.198094][ T4173] udevd[4173]: symlink '../../loop0' '/dev/disk/by-diskseq/323.tmp-b7:0' failed: Read-only file system [ 108.212282][ T6218] udevd[6218]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system [ 108.264053][ T4175] udevd[4175]: symlink '../../loop2' '/dev/disk/by-diskseq/315.tmp-b7:2' failed: Read-only file system [ 108.295751][ T4173] udevd[4173]: symlink '../../loop0' '/dev/disk/by-diskseq/323.tmp-b7:0' failed: Read-only file system [ 108.313574][ T6218] udevd[6218]: symlink '../../loop3' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:3' failed: Read-only file system [ 108.342994][ T6219] udevd[6219]: symlink '../../loop1' '/dev/disk/by-diskseq/317.tmp-b7:1' failed: Read-only file system [ 108.631256][ T6228] loop4: detected capacity change from 0 to 32768 [ 108.688224][ T6267] loop0: detected capacity change from 0 to 64 [ 108.705058][ T6271] netlink: 'syz.1.772': attribute type 1 has an invalid length. [ 108.734547][ T6271] netlink: 144 bytes leftover after parsing attributes in process `syz.1.772'. [ 108.791347][ T6228] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 108.794353][ T6271] netlink: 96 bytes leftover after parsing attributes in process `syz.1.772'. [ 109.043457][ T4188] ocfs2: Unmounting device (7,4) on (node local) [ 109.234051][ T6290] loop4: detected capacity change from 0 to 1024 [ 109.274603][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.781'. [ 109.289865][ T6290] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 109.299176][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.781'. [ 109.325009][ T6295] netlink: 'syz.1.781': attribute type 14 has an invalid length. [ 109.344486][ T6295] netlink: 'syz.1.781': attribute type 13 has an invalid length. [ 109.382284][ T6265] loop3: detected capacity change from 0 to 32768 [ 109.458749][ T6265] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.769 (6265) [ 109.532221][ T6265] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 109.571038][ T6265] BTRFS info (device loop3): allowing degraded mounts [ 109.595831][ T6265] BTRFS info (device loop3): enabling ssd optimizations [ 109.631349][ T6265] BTRFS info (device loop3): allowing degraded mounts [ 109.644379][ T6265] BTRFS info (device loop3): using free space tree [ 109.667328][ T6301] loop1: detected capacity change from 0 to 4096 [ 109.681816][ T6265] BTRFS info (device loop3): has skinny extents [ 109.736352][ T6301] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 109.823729][ T6301] ntfs: volume version 3.1. [ 110.003043][ T6287] loop0: detected capacity change from 0 to 40427 [ 110.032100][ T6332] loop2: detected capacity change from 0 to 64 [ 110.067989][ T6287] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 110.134384][ T6287] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 110.219687][ T6332] Trying to free block not in datazone [ 110.238159][ T6287] F2FS-fs (loop0): invalid crc value [ 110.322286][ T6287] F2FS-fs (loop0): Found nat_bits in checkpoint [ 110.582712][ T6287] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 110.613833][ T6287] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 111.035602][ T4237] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 111.073633][ T4237] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 111.302311][ T6389] loop2: detected capacity change from 0 to 256 [ 111.335430][ T6385] loop1: detected capacity change from 0 to 4096 [ 111.358373][ T6389] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd22393c8, utbl_chksum : 0xe619d30d) [ 111.435339][ T6385] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 111.757258][ T6405] netlink: 104 bytes leftover after parsing attributes in process `syz.0.821'. [ 112.134511][ T4391] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 112.151089][ T6423] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.343138][ T146] Bluetooth: hci4: link tx timeout [ 112.349443][ T146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 112.405878][ T4391] usb 4-1: Using ep0 maxpacket: 16 [ 112.535706][ T4391] usb 4-1: config 0 interface 0 has no altsetting 0 [ 112.542396][ T4391] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 112.574150][ T4391] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.602885][ T144] hfsplus: b-tree write err: -5, ino 4 [ 112.604336][ T4391] usb 4-1: config 0 descriptor?? [ 112.998181][ T6461] x_tables: ip_tables: osf match: only valid for protocol 6 [ 113.015666][ T4175] udevd[4175]: symlink '../../loop4' '/dev/disk/by-diskseq/346.tmp-b7:4' failed: Read-only file system [ 113.046480][ T4173] udevd[4173]: symlink '../../loop1' '/dev/disk/by-diskseq/351.tmp-b7:1' failed: Read-only file system [ 113.093301][ T4175] udevd[4175]: symlink '../../loop2' '/dev/disk/by-diskseq/350.tmp-b7:2' failed: Read-only file system [ 113.117822][ T4391] hid (null): invalid report_count 15316 [ 113.124186][ T4391] hid (null): invalid report_count 33591 [ 113.129922][ T4391] hid (null): unknown global tag 0xd [ 113.135428][ T4391] hid (null): report_id 0 is invalid [ 113.189041][ T6218] udevd[6218]: symlink '../../loop1' '/dev/disk/by-diskseq/351.tmp-b7:1' failed: Read-only file system [ 113.256713][ T6448] set_capacity_and_notify: 4 callbacks suppressed [ 113.256728][ T6448] loop0: detected capacity change from 0 to 32768 [ 113.281458][ T4175] udevd[4175]: symlink '../../loop1' '/dev/disk/by-diskseq/351.tmp-b7:1' failed: Read-only file system [ 113.314412][ T4223] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 113.351224][ T6363] usb 4-1: USB disconnect, device number 6 [ 113.402804][ T6448] XFS (loop0): Mounting V5 Filesystem [ 113.423941][ T6218] udevd[6218]: symlink '../../loop0' '/dev/disk/by-diskseq/352.tmp-b7:0' failed: Read-only file system [ 113.441748][ T6218] udevd[6218]: symlink '../../loop0' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:0' failed: Read-only file system [ 113.507566][ T6448] XFS (loop0): Ending clean mount [ 113.522437][ T6474] loop1: detected capacity change from 0 to 32768 [ 113.563508][ T6474] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.854 (6474) [ 113.564833][ T4183] XFS (loop0): Unmounting Filesystem [ 113.622166][ T4223] usb 5-1: Using ep0 maxpacket: 16 [ 113.640133][ T6474] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 113.669388][ T6474] BTRFS info (device loop1): using free space tree [ 113.671900][ T4175] udevd[4175]: symlink '../../loop1' '/dev/disk/by-diskseq/353.tmp-b7:1' failed: Read-only file system [ 113.684406][ T6474] BTRFS info (device loop1): has skinny extents [ 113.693729][ T4175] udevd[4175]: symlink '../../loop1' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:1' failed: Read-only file system [ 113.720237][ T6218] udevd[6218]: symlink '../../loop0' '/dev/disk/by-diskseq/352.tmp-b7:0' failed: Read-only file system [ 113.763918][ T4223] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.774662][ T4223] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.819903][ T6474] BTRFS info (device loop1): enabling ssd optimizations [ 113.977051][ T4223] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.009522][ T4223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.058411][ T4223] usb 5-1: Product: syz [ 114.097694][ T4223] usb 5-1: Manufacturer: syz [ 114.117439][ T4223] usb 5-1: SerialNumber: syz [ 114.166977][ T6515] loop0: detected capacity change from 0 to 512 [ 114.213383][ T6515] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 114.222707][ T144] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 114.245443][ T6515] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 114.284861][ T6515] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 114.309642][ T6515] System zones: 1-12 [ 114.342589][ T6515] EXT4-fs (loop0): orphan cleanup on readonly fs [ 114.383530][ T6524] loop2: detected capacity change from 0 to 8 [ 114.405193][ T6515] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.860: bg 0: block 361: padding at end of block bitmap is not set [ 114.429814][ T6359] Bluetooth: hci4: command 0x0406 tx timeout [ 114.454237][ T6515] EXT4-fs (loop0): Remounting filesystem read-only [ 114.493139][ T6515] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 114.504911][ T4223] usb 5-1: 0:2 : does not exist [ 114.561495][ T6515] EXT4-fs (loop0): Remounting filesystem read-only [ 114.582581][ T6515] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.860: attempt to clear invalid blocks 33619980 len 1 [ 114.624966][ T4223] usb 5-1: USB disconnect, device number 9 [ 114.650972][ T6515] EXT4-fs (loop0): Remounting filesystem read-only [ 114.703624][ T6515] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.860: invalid indirect mapped block 1811939328 (level 0) [ 114.777680][ T6515] EXT4-fs (loop0): Remounting filesystem read-only [ 114.785707][ T6515] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.860: invalid indirect mapped block 2 (level 2) [ 114.810003][ T6515] EXT4-fs (loop0): Remounting filesystem read-only [ 114.867605][ T6522] loop3: detected capacity change from 0 to 32768 [ 114.876349][ T6515] EXT4-fs (loop0): 1 truncate cleaned up [ 114.902873][ T6515] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv1,init_itable=0x0000000000000005,errors=remount-ro,mblk_io_submit. Quota mode: none. [ 115.011649][ T6515] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #2: block 5: comm syz.0.860: lblock 0 mapped to illegal pblock 5 (length 1) [ 115.038701][ T6522] XFS (loop3): Mounting V5 Filesystem [ 115.053524][ T6541] loop4: detected capacity change from 0 to 16 [ 115.079989][ T6538] loop1: detected capacity change from 0 to 256 [ 115.104695][ T6515] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.860: error -117 reading directory block [ 115.111924][ T6522] XFS (loop3): Ending clean mount [ 115.134893][ T6541] erofs: (device loop4): mounted with root inode @ nid 36. [ 115.157985][ T26] audit: type=1800 audit(1771886669.406:8): pid=6541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.869" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 115.208843][ T6538] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x22932667, utbl_chksum : 0xe619d30d) [ 115.357817][ T4194] XFS (loop3): Unmounting Filesystem [ 115.371600][ T6552] loop0: detected capacity change from 0 to 64 [ 115.376465][ T6550] netdevsim netdevsim4: Firmware load for '/../file0' refused, path contains '..' component [ 115.662090][ T6563] netlink: 32 bytes leftover after parsing attributes in process `syz.0.877'. [ 115.863392][ T6567] loop1: detected capacity change from 0 to 4096 [ 115.908279][ T6567] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 115.950744][ T6573] program syz.2.882 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.049795][ T6575] net_ratelimit: 10782 callbacks suppressed [ 116.049810][ T6575] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 116.074370][ T4387] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 116.095196][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 116.141991][ T6575] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 116.169705][ T6575] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 116.200656][ T6575] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 116.217059][ T6575] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 116.240840][ T6566] loop4: detected capacity change from 0 to 32768 [ 116.242221][ T6575] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 116.270185][ T6581] device wlan1 entered promiscuous mode [ 116.278507][ T6575] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 116.278566][ T6581] device macvtap1 entered promiscuous mode [ 116.289112][ T6575] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 116.304583][ T6575] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 116.354349][ T4387] usb 1-1: Using ep0 maxpacket: 16 [ 116.474452][ T4387] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.492344][ T4387] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.674782][ T4387] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.684138][ T4387] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.692570][ T4387] usb 1-1: Product: syz [ 116.698045][ T4387] usb 1-1: Manufacturer: syz [ 116.702715][ T4387] usb 1-1: SerialNumber: syz [ 116.906250][ T6581] device wlan1 left promiscuous mode [ 117.000136][ T6566] [ 117.000136][ T6566] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 117.000136][ T6566] [ 117.006627][ T21] Bluetooth: hci4: command 0x0405 tx timeout [ 117.045611][ T4387] usb 1-1: 0:2 : does not exist [ 117.069753][ T6566] ERROR: (device loop4): diWrite: ixpxd invalid [ 117.069753][ T6566] [ 117.096686][ T4387] usb 1-1: USB disconnect, device number 7 [ 117.122032][ T6566] ERROR: (device loop4): remounting filesystem as read-only [ 117.151063][ T6566] ERROR: (device loop4): txCommit: [ 117.151063][ T6566] [ 117.245274][ T6566] ERROR: (device loop4): dtSearch: stack overrun! [ 117.245274][ T6566] [ 117.264435][ T6566] btstack dump: [ 117.267925][ T6566] bn = 0, index = 0 [ 117.271754][ T6566] bn = 0, index = 0 [ 117.299575][ T6566] bn = 0, index = 0 [ 117.308633][ T6596] netlink: 'syz.3.895': attribute type 30 has an invalid length. [ 117.314690][ T6590] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 117.317348][ T6566] bn = 0, index = 0 [ 117.346546][ T6566] bn = 0, index = 0 [ 117.350476][ T6566] bn = 0, index = 0 [ 117.369017][ T6566] bn = 0, index = 0 [ 117.379176][ T6566] bn = 0, index = 0 [ 117.407798][ T6566] jfs_lookup: dtSearch returned -5 [ 117.598384][ T6604] netlink: 'syz.1.899': attribute type 8 has an invalid length. [ 117.744473][ T4387] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 117.896684][ T6609] isofs: isofs_export_get_parent(): child directory not normalized! [ 117.900461][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.905'. [ 117.969858][ T6597] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 117.984477][ T6597] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 118.002086][ T6597] F2FS-fs (loop2): Found nat_bits in checkpoint [ 118.034189][ T6622] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 118.049484][ T4175] udevd[4175]: symlink '../../loop1' '/dev/disk/by-diskseq/374.tmp-b7:1' failed: Read-only file system [ 118.058735][ T6624] FAT-fs (loop0): bogus logical sector size 4 [ 118.075249][ T6622] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 118.087252][ T6624] FAT-fs (loop0): Can't find a valid FAT filesystem [ 118.125623][ T6622] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.907: Invalid block bitmap block 0 in block_group 0 [ 118.139769][ T4175] udevd[4175]: symlink '../../loop4' '/dev/disk/by-diskseq/373.tmp-b7:4' failed: Read-only file system [ 118.144005][ T6597] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 118.158012][ T4175] udevd[4175]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 118.159339][ T6622] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 118.177987][ T6597] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 118.181676][ T6622] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.907: attempt to clear invalid blocks 983261 len 1 [ 118.216021][ T6622] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.907: Invalid inode table block 0 in block_group 0 [ 118.252292][ T6622] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 118.271690][ T4173] udevd[4173]: symlink '../../loop0' '/dev/disk/by-diskseq/366.tmp-b7:0' failed: Read-only file system [ 118.287153][ T6622] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 118.297251][ T4176] udevd[4176]: symlink '../../loop1' '/dev/disk/by-diskseq/374.tmp-b7:1' failed: Read-only file system [ 118.305739][ T4173] udevd[4173]: symlink '../../loop0' '/dev/disk/by-diskseq/377.tmp-b7:0' failed: Read-only file system [ 118.314522][ T6218] udevd[6218]: symlink '../../loop4' '/dev/disk/by-diskseq/373.tmp-b7:4' failed: Read-only file system [ 118.319520][ T6622] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.907: Invalid inode table block 0 in block_group 0 [ 118.344188][ T4387] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 118.356102][ T4387] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.364782][ T4387] usb 4-1: Product: syz [ 118.369030][ T4387] usb 4-1: Manufacturer: syz [ 118.373632][ T4387] usb 4-1: SerialNumber: syz [ 118.388683][ T6219] udevd[6219]: symlink '../../loop1' '/dev/disk/by-diskseq/374.tmp-b7:1' failed: Read-only file system [ 118.412682][ T6218] udevd[6218]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 118.414809][ T4387] usb 4-1: config 0 descriptor?? [ 118.431048][ T4173] udevd[4173]: symlink '../../loop0' '/dev/disk/by-diskseq/377.tmp-b7:0' failed: Read-only file system [ 118.443105][ T6633] netlink: 116 bytes leftover after parsing attributes in process `syz.0.910'. [ 118.453894][ T4195] attempt to access beyond end of device [ 118.453894][ T4195] loop2: rw=2049, want=45104, limit=40427 [ 118.464776][ T6622] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 118.483363][ T6622] EXT4-fs error (device loop4): ext4_truncate:4279: inode #11: comm syz.4.907: mark_inode_dirty error [ 118.508301][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.910'. [ 118.519208][ T4387] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 118.535913][ T6622] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 118.557156][ T4387] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 118.604936][ T6622] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.907: Invalid inode table block 0 in block_group 0 [ 118.644686][ T6622] EXT4-fs (loop4): 1 truncate cleaned up [ 118.655663][ T4387] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 118.670302][ T6622] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none. [ 118.694614][ T4387] usb 4-1: media controller created [ 118.711168][ T4387] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.804428][ T4387] DVB: Unable to find symbol mt352_attach() [ 118.899473][ T4387] DVB: Unable to find symbol nxt6000_attach() [ 118.908751][ T4387] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 119.015563][ T4387] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17 [ 119.045378][ T4387] dvb-usb: schedule remote query interval to 1000 msecs. [ 119.061663][ T4387] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 119.072007][ T4387] dvb-usb: bulk message failed: -22 (7/0) [ 119.077872][ T4387] dvb-usb: bulk message failed: -22 (7/0) [ 119.087670][ T4387] usb 4-1: USB disconnect, device number 7 [ 119.156718][ T6651] team0: Device ipip0 is of different type [ 119.187874][ T6654] set_capacity_and_notify: 5 callbacks suppressed [ 119.187889][ T6654] loop0: detected capacity change from 0 to 512 [ 119.194184][ T6657] netlink: 16 bytes leftover after parsing attributes in process `syz.4.921'. [ 119.222635][ T4387] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 119.231405][ T6654] EXT4-fs (loop0): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 119.242606][ T6654] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 119.252568][ T6654] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 119.262242][ T6654] EXT4-fs (loop0): The Hurd can't support 64-bit file systems [ 119.318424][ T26] audit: type=1326 audit(1771886673.566:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.2.922" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1ad6883629 code=0x0 [ 119.501894][ T6666] loop4: detected capacity change from 0 to 8 [ 119.692843][ T6680] loop1: detected capacity change from 0 to 256 [ 119.783173][ T6680] exfat: Deprecated parameter 'utf8' [ 119.874041][ T6680] exfat: Deprecated parameter 'namecase' [ 119.894667][ T6690] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 119.948655][ T6695] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.977454][ T6680] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 120.088133][ T6701] loop0: detected capacity change from 0 to 8 [ 120.168516][ T6703] netlink: 822 bytes leftover after parsing attributes in process `syz.4.944'. [ 120.220731][ T6703] bridge: RTM_NEWNEIGH with unconfigured vlan 265 on bridge0 [ 120.467814][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.953'. [ 120.588952][ T6729] loop4: detected capacity change from 0 to 512 [ 120.639432][ T6732] loop0: detected capacity change from 0 to 2048 [ 120.652937][ T6729] EXT4-fs (loop4): Invalid default hash set in the superblock [ 120.730953][ T6732] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.753274][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.960'. [ 120.771083][ T6739] loop1: detected capacity change from 0 to 256 [ 120.792923][ T6697] loop3: detected capacity change from 0 to 32768 [ 120.909277][ T6739] FAT-fs (loop1): Directory bread(block 64) failed [ 120.980616][ T6739] FAT-fs (loop1): Directory bread(block 65) failed [ 121.021555][ T6697] XFS (loop3): Mounting V5 Filesystem [ 121.034028][ T6739] FAT-fs (loop1): Directory bread(block 66) failed [ 121.041103][ T6739] FAT-fs (loop1): Directory bread(block 67) failed [ 121.048147][ T6739] FAT-fs (loop1): Directory bread(block 68) failed [ 121.055479][ T6739] FAT-fs (loop1): Directory bread(block 69) failed [ 121.062197][ T6739] FAT-fs (loop1): Directory bread(block 70) failed [ 121.069352][ T6739] FAT-fs (loop1): Directory bread(block 71) failed [ 121.076454][ T6739] FAT-fs (loop1): Directory bread(block 72) failed [ 121.083310][ T6739] FAT-fs (loop1): Directory bread(block 73) failed [ 121.221777][ T6697] XFS (loop3): Ending clean mount [ 121.294408][ T6764] netlink: 'syz.4.969': attribute type 9 has an invalid length. [ 121.349359][ T6766] loop1: detected capacity change from 0 to 512 [ 121.388444][ T4194] XFS (loop3): Unmounting Filesystem [ 121.412910][ T6749] loop0: detected capacity change from 0 to 32768 [ 121.505757][ T26] audit: type=1800 audit(1771886675.756:10): pid=6749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.964" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 121.533025][ T6768] hfsplus: bad catalog entry type [ 121.584808][ T6766] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 121.633261][ T6766] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.834172][ T5206] hfsplus: b-tree write err: -5, ino 4 [ 122.030050][ T6783] netlink: 'syz.4.974': attribute type 1 has an invalid length. [ 122.059027][ T6785] erofs: (device loop1): mounted with root inode @ nid 36. [ 122.096080][ T4911] Bluetooth: hci4: command 0x0411 tx timeout [ 122.131089][ T6785] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel [ 122.198342][ T6785] erofs: (device loop1): z_erofs_readahead: readahead error at page 3600 @ nid 36 [ 122.229689][ T6785] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel [ 122.249447][ T6785] erofs: (device loop1): z_erofs_readahead: readahead error at page 3599 @ nid 36 [ 122.479240][ T4391] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 122.508606][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.985'. [ 122.538741][ T6781] F2FS-fs (loop3): Invalid log_blocksize (64), supports only 12 [ 122.546714][ T6781] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 122.769118][ T6813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.989'. [ 122.899734][ T4391] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.000457][ T6820] FAT-fs (loop1): Directory bread(block 64) failed [ 123.021188][ T6820] FAT-fs (loop1): Directory bread(block 65) failed [ 123.044539][ T4387] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 123.053628][ T6798] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop0 scanned by syz.0.983 (6798) [ 123.066324][ T6820] FAT-fs (loop1): Directory bread(block 66) failed [ 123.072864][ T6820] FAT-fs (loop1): Directory bread(block 67) failed [ 123.085323][ T4391] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 123.086313][ T6820] FAT-fs (loop1): Directory bread(block 68) failed [ 123.102719][ T4391] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 123.107502][ T4175] udevd[4175]: symlink '../../loop3' '/dev/disk/by-diskseq/407.tmp-b7:3' failed: Read-only file system [ 123.117591][ T4391] usb 5-1: Product: syz [ 123.129984][ T6820] FAT-fs (loop1): Directory bread(block 69) failed [ 123.138723][ T4391] usb 5-1: Manufacturer: syz [ 123.143005][ T6218] udevd[6218]: symlink '../../loop1' '/dev/disk/by-diskseq/408.tmp-b7:1' failed: Read-only file system [ 123.148880][ T4391] usb 5-1: SerialNumber: syz [ 123.161023][ T6820] FAT-fs (loop1): Directory bread(block 70) failed [ 123.171143][ T6820] FAT-fs (loop1): Directory bread(block 71) failed [ 123.180963][ T6820] FAT-fs (loop1): Directory bread(block 72) failed [ 123.202640][ T6820] FAT-fs (loop1): Directory bread(block 73) failed [ 123.213083][ T6218] udevd[6218]: symlink '../../loop3' '/dev/disk/by-diskseq/407.tmp-b7:3' failed: Read-only file system [ 123.215987][ T4391] usb 5-1: config 0 descriptor?? [ 123.242019][ T6798] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 123.243846][ T4175] udevd[4175]: symlink '../../loop1' '/dev/disk/by-diskseq/408.tmp-b7:1' failed: Read-only file system [ 123.255430][ T4173] udevd[4173]: symlink '../../loop0' '/dev/disk/by-diskseq/409.tmp-b7:0' failed: Read-only file system [ 123.280441][ T6798] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 123.290445][ T6798] BTRFS info (device loop0): use lzo compression, level 0 [ 123.306136][ T4391] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 123.314899][ T6798] BTRFS info (device loop0): using free space tree [ 123.325796][ T4173] udevd[4173]: symlink '../../loop0' '/dev/disk/by-uuid/c6b85f58-0c7e-41ca-a553-c8d9f94f6663.tmp-b7:0' failed: Read-only file system [ 123.338911][ T4175] udevd[4175]: symlink '../../loop1' '/dev/disk/by-diskseq/408.tmp-b7:1' failed: Read-only file system [ 123.350246][ T4391] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 123.354624][ T6798] BTRFS info (device loop0): has skinny extents [ 123.371232][ T4391] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 88 [ 123.394706][ T4391] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 123.457409][ T4175] udevd[4175]: symlink '../../loop3' '/dev/disk/by-diskseq/407.tmp-b7:3' failed: Read-only file system [ 123.474754][ T4391] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 123.484654][ T4387] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 123.493074][ T4387] usb 3-1: config 1 has no interface number 0 [ 123.519090][ T6218] udevd[6218]: symlink '../../loop1' '/dev/disk/by-diskseq/408.tmp-b7:1' failed: Read-only file system [ 123.540603][ T4387] usb 3-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 123.561683][ T6218] udevd[6218]: symlink '../../loop1' '/dev/disk/by-diskseq/408.tmp-b7:1' failed: Read-only file system [ 123.578881][ T4391] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 123.597036][ T4387] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.614867][ T4391] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 123.633257][ T6798] BTRFS info (device loop0): enabling ssd optimizations [ 123.635987][ T4391] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 123.670522][ T4391] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 123.708505][ T4391] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 123.734691][ T4391] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 123.846005][ T4391] usb 5-1: USB disconnect, device number 10 [ 123.854719][ T4387] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 123.892017][ T4387] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.925317][ T4391] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 123.935126][ T4387] usb 3-1: Product: syz [ 123.939387][ T4387] usb 3-1: Manufacturer: syz [ 123.943991][ T4387] usb 3-1: SerialNumber: syz [ 123.963669][ T144] hfsplus: b-tree write err: -5, ino 4 [ 123.979435][ T4391] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 124.011496][ T4391] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 124.021439][ T6811] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 124.045540][ T4387] usb 3-1: Expected 3 endpoints, found: 2 [ 124.086542][ T4391] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 124.144714][ T4391] keyspan 5-1:0.0: device disconnected [ 124.223522][ T6867] tipc: Started in network mode [ 124.239877][ T6867] tipc: Node identity 00000000000000000000ffffe0000002, cluster identity 4711 [ 124.304848][ T6867] tipc: Enabling of bearer rejected, failed to enable media [ 124.513449][ T6880] set_capacity_and_notify: 6 callbacks suppressed [ 124.513465][ T6880] loop1: detected capacity change from 0 to 1024 [ 124.559929][ T6884] loop3: detected capacity change from 0 to 512 [ 124.639236][ T6884] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 124.708303][ T6880] hfsplus: bad catalog entry type [ 124.810726][ T239] hfsplus: b-tree write err: -5, ino 4 [ 124.976032][ T6903] [U] [ 125.104024][ T6920] loop0: detected capacity change from 0 to 22 [ 125.152603][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1030'. [ 125.171662][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1030'. [ 125.185525][ T6920] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 125.206162][ T6920] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 125.223138][ T6922] netlink: 'syz.4.1030': attribute type 15 has an invalid length. [ 125.560725][ T6914] loop3: detected capacity change from 0 to 32768 [ 125.623969][ T6914] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1026 (6914) [ 125.687196][ T6914] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 125.700869][ T6943] loop0: detected capacity change from 0 to 128 [ 125.733683][ T6914] BTRFS info (device loop3): force zlib compression, level 3 [ 125.756684][ T4387] usb 3-1: USB disconnect, device number 9 [ 125.762630][ T6914] BTRFS info (device loop3): turning on flush-on-commit [ 125.787384][ T6914] BTRFS info (device loop3): max_inline at 4096 [ 125.793669][ T6914] BTRFS info (device loop3): using free space tree [ 125.850540][ T6943] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.864383][ T6914] BTRFS info (device loop3): has skinny extents [ 125.882261][ T6943] ext4 filesystem being mounted at /221/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.974392][ T26] audit: type=1800 audit(1771886680.216:11): pid=6950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.1043" name="/newroot/195/bus/#1027//deleted" dev="tmpfs" ino=1027 res=0 errno=0 [ 126.010482][ T6924] loop1: detected capacity change from 0 to 32768 [ 126.147400][ T6976] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.157422][ T6976] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.166213][ T6976] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.175206][ T6976] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.175773][ T6924] XFS (loop1): Mounting V5 Filesystem [ 126.339924][ T6914] BTRFS info (device loop3): enabling ssd optimizations [ 126.348454][ T6924] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 126.460507][ T6924] XFS (loop1): Starting recovery (logdev: internal) [ 126.571887][ T6924] XFS (loop1): Ending recovery (logdev: internal) [ 126.639274][ T6924] XFS (loop1): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 126.669863][ T6924] XFS (loop1): Failed to initialize disk quotas. [ 126.701360][ T6914] BTRFS info (device loop3): balance: start -d -m [ 126.766638][ T6924] XFS (loop1): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 126.785716][ T7006] loop4: detected capacity change from 0 to 2048 [ 126.809925][ T6914] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata [ 126.860736][ T4185] XFS (loop1): Unmounting Filesystem [ 126.882484][ T7006] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 126.896625][ T6914] BTRFS info (device loop3): balance: canceled [ 126.911988][ T7006] NILFS (loop4): mounting unchecked fs [ 127.017947][ T7006] NILFS (loop4): recovery complete [ 127.023014][ T6994] loop2: detected capacity change from 0 to 32768 [ 127.054679][ T7007] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.070870][ T6994] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1050 (6994) [ 127.138347][ T6994] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 127.187088][ T6994] BTRFS info (device loop2): turning off barriers [ 127.220728][ T6994] BTRFS info (device loop2): setting nodatasum [ 127.237772][ T6994] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 127.274403][ T6994] BTRFS info (device loop2): use zstd compression, level 3 [ 127.291943][ T6994] BTRFS info (device loop2): using free space tree [ 127.310134][ T7011] netlink: 'syz.4.1059': attribute type 2 has an invalid length. [ 127.322979][ T6994] BTRFS info (device loop2): has skinny extents [ 127.568354][ T7004] loop0: detected capacity change from 0 to 32768 [ 127.702016][ T7004] [ 127.702016][ T7004] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 127.702016][ T7004] [ 127.786828][ T7004] ERROR: (device loop0): diWrite: ixpxd invalid [ 127.786828][ T7004] [ 127.811246][ T7004] ERROR: (device loop0): txCommit: [ 127.811246][ T7004] [ 127.983029][ T6218] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (6218) [ 128.204714][ T4175] udevd[4175]: symlink '../../loop3' '/dev/disk/by-diskseq/427.tmp-b7:3' failed: Read-only file system [ 128.234734][ T4183] [ 128.234734][ T4183] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 128.234734][ T4183] [ 128.279355][ T7045] bridge_slave_0: default FDB implementation only supports local addresses [ 128.287416][ T4183] [ 128.287416][ T4183] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 128.287416][ T4183] [ 128.303634][ T4175] udevd[4175]: symlink '../../loop1' '/dev/disk/by-diskseq/429.tmp-b7:1' failed: Read-only file system [ 128.505930][ T4175] udevd[4175]: symlink '../../loop0' '/dev/disk/by-diskseq/428.tmp-b7:0' failed: Read-only file system [ 128.531478][ T7057] loop2: detected capacity change from 0 to 256 [ 128.539294][ T4173] udevd[4173]: symlink '../../loop3' '/dev/disk/by-diskseq/427.tmp-b7:3' failed: Read-only file system [ 128.562371][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1072'. [ 128.597461][ T7034] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 128.624633][ T7034] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 128.650957][ T4173] udevd[4173]: symlink '../../loop1' '/dev/disk/by-diskseq/429.tmp-b7:1' failed: Read-only file system [ 128.655904][ T7034] F2FS-fs (loop4): invalid crc value [ 128.670584][ T6218] udevd[6218]: symlink '../../loop0' '/dev/disk/by-diskseq/428.tmp-b7:0' failed: Read-only file system [ 128.716055][ T7034] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9160181678897038821) [ 128.737099][ T4175] udevd[4175]: symlink '../../loop2' '/dev/disk/by-diskseq/425.tmp-b7:2' failed: Read-only file system [ 128.761636][ T4173] udevd[4173]: symlink '../../loop1' '/dev/disk/by-diskseq/429.tmp-b7:1' failed: Read-only file system [ 128.791553][ T6218] udevd[6218]: symlink '../../loop0' '/dev/disk/by-diskseq/431.tmp-b7:0' failed: Read-only file system [ 128.864461][ T6219] udevd[6219]: symlink '../../loop4' '/dev/disk/by-diskseq/433.tmp-b7:4' failed: Read-only file system [ 128.967376][ T7034] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 128.975159][ T7075] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1077'. [ 129.005302][ T7034] F2FS-fs (loop4): Start checkpoint disabled! [ 129.100175][ T7034] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 129.109939][ T7034] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 129.195159][ T7085] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1081'. [ 129.243355][ T7034] F2FS-fs (loop4): switch discard_unit option is not allowed [ 129.605520][ T7102] set_capacity_and_notify: 1 callbacks suppressed [ 129.605534][ T7102] loop2: detected capacity change from 0 to 4096 [ 129.664378][ T7102] EXT4-fs (loop2): Ignoring removed nobh option [ 129.668832][ T7104] loop3: detected capacity change from 0 to 4096 [ 129.677814][ T7102] EXT4-fs (loop2): Test dummy encryption mode enabled [ 129.855264][ T7102] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,nobh,dioread_nolock,test_dummy_encryption,nodelalloc,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 129.934985][ T7120] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1097'. [ 130.266043][ T7131] netlink: 'syz.2.1102': attribute type 2 has an invalid length. [ 130.340723][ T7134] netlink: 'syz.3.1104': attribute type 1 has an invalid length. [ 130.590480][ T7110] loop1: detected capacity change from 0 to 32768 [ 130.664588][ T7110] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 scanned by syz.1.1094 (7110) [ 130.727701][ T7110] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 130.727758][ T7110] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 130.727828][ T7110] BTRFS info (device loop1): use lzo compression, level 0 [ 130.727846][ T7110] BTRFS info (device loop1): using free space tree [ 130.727860][ T7110] BTRFS info (device loop1): has skinny extents [ 130.824812][ T4390] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 130.904149][ T7110] BTRFS info (device loop1): enabling ssd optimizations [ 131.094386][ T4390] usb 4-1: Using ep0 maxpacket: 16 [ 131.284666][ T4390] usb 4-1: unable to get BOS descriptor or descriptor too short [ 131.324460][ T6876] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 131.333448][ T7189] loop4: detected capacity change from 0 to 256 [ 131.360015][ T7189] exfat: Deprecated parameter 'namecase' [ 131.404874][ T4390] usb 4-1: config 1 has an invalid interface descriptor of length 3, skipping [ 131.414812][ T7189] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 131.437295][ T4390] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.484323][ T4390] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 131.540990][ T7185] loop2: detected capacity change from 0 to 32768 [ 131.562624][ T7194] IPVS: ip_vs_edit_dest(): server weight less than zero [ 131.617037][ T7185] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.1120 (7185) [ 131.666886][ T7185] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 131.689584][ T6876] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 131.694139][ T7185] BTRFS info (device loop2): force zlib compression, level 3 [ 131.714709][ T4390] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 131.716557][ T6876] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 131.729937][ T4390] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.763782][ T4390] usb 4-1: Product: syz [ 131.768416][ T7185] BTRFS info (device loop2): turning on flush-on-commit [ 131.773713][ T6876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.776116][ T4390] usb 4-1: Manufacturer: syz [ 131.794389][ T7185] BTRFS info (device loop2): max_inline at 4096 [ 131.797951][ T6876] usb 1-1: config 0 descriptor?? [ 131.812158][ T4390] usb 4-1: SerialNumber: syz [ 131.817417][ T7185] BTRFS info (device loop2): using free space tree [ 131.837169][ T7185] BTRFS info (device loop2): has skinny extents [ 131.940655][ T7185] BTRFS info (device loop2): enabling ssd optimizations [ 132.081541][ T7185] BTRFS info (device loop2): balance: start -d -m [ 132.090636][ T7185] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata [ 132.094856][ T7226] device veth1_macvtap left promiscuous mode [ 132.110819][ T154] BTRFS info (device loop2): space_info 5 has 602112 free, is not full [ 132.120403][ T154] BTRFS info (device loop2): space_info total=3276800, used=61440, pinned=0, reserved=8192, may_use=978944, readonly=1626112 zone_unusable=0 [ 132.135012][ T154] BTRFS info (device loop2): global_block_rsv: size 851968 reserved 851968 [ 132.144103][ T154] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0 [ 132.147259][ T5978] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 132.151842][ T154] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0 [ 132.167331][ T7227] device veth1_macvtap entered promiscuous mode [ 132.167757][ T154] BTRFS info (device loop2): delayed_block_rsv: size 0 reserved 0 [ 132.181613][ T154] BTRFS info (device loop2): delayed_refs_rsv: size 262144 reserved 126976 [ 132.182961][ T4390] usb 4-1: USB disconnect, device number 8 [ 132.201872][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 132.288363][ T6876] kone 0003:1E7D:2CED.0015: hidraw0: USB HID v10.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.0-1/input0 [ 132.306954][ T7185] BTRFS info (device loop2): relocating block group 5242880 flags data|metadata [ 132.353989][ T7185] BTRFS info (device loop2): balance: canceled [ 132.496296][ T6876] kone 0003:1E7D:2CED.0015: couldn't init struct kone_device [ 132.507981][ T6876] kone 0003:1E7D:2CED.0015: couldn't install mouse [ 132.522480][ T6876] kone: probe of 0003:1E7D:2CED.0015 failed with error -5 [ 132.551063][ T7238] loop1: detected capacity change from 0 to 256 [ 132.558461][ T6876] usb 1-1: USB disconnect, device number 8 [ 132.584725][ T5978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.595638][ T7238] exfat: Deprecated parameter 'utf8' [ 132.600962][ T7238] exfat: Deprecated parameter 'namecase' [ 132.624330][ T5978] usb 5-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 132.654550][ T5978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.673110][ T7239] fido_id[7239]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 132.695213][ T5978] usb 5-1: config 0 descriptor?? [ 132.722938][ T7238] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 132.747601][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.754899][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.827842][ T7241] loop3: detected capacity change from 0 to 64 [ 133.192464][ T7253] trusted_key: encrypted_key: key trusted:syz not found [ 133.216780][ T5978] uclogic 0003:28BD:0055.0016: unknown main item tag 0x3 [ 133.229644][ T6218] udevd[6218]: symlink '../../loop0' '/dev/disk/by-diskseq/431.tmp-b7:0' failed: Read-only file system [ 133.273530][ T7259] loop3: detected capacity change from 0 to 8 [ 133.275177][ T5978] uclogic 0003:28BD:0055.0016: No inputs registered, leaving [ 133.302516][ T4173] udevd[4173]: symlink '../../loop2' '/dev/disk/by-diskseq/445.tmp-b7:2' failed: Read-only file system [ 133.354564][ T5978] uclogic 0003:28BD:0055.0016: hidraw0: USB HID v0.07 Device [HID 28bd:0055] on usb-dummy_hcd.4-1/input0 [ 133.479275][ T6218] udevd[6218]: symlink '../../loop3' '/dev/disk/by-diskseq/450.tmp-b7:3' failed: Read-only file system [ 133.480276][ T5978] usb 5-1: USB disconnect, device number 11 [ 133.597790][ T6218] udevd[6218]: symlink '../../loop3' '/dev/disk/by-diskseq/450.tmp-b7:3' failed: Read-only file system [ 133.611029][ T7275] loop2: detected capacity change from 0 to 128 [ 133.624080][ T7276] loop3: detected capacity change from 0 to 512 [ 133.641612][ T7276] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 133.685803][ T7276] EXT4-fs (loop3): 1 truncate cleaned up [ 133.753874][ T7276] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,bsdgroups,noload,,errors=continue. Quota mode: none. [ 133.759252][ T7284] fido_id[7284]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 133.870639][ T26] audit: type=1800 audit(1771886688.116:12): pid=7275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1152" name="bus" dev="loop2" ino=1048670 res=0 errno=0 [ 133.924145][ T6218] udevd[6218]: symlink '../../loop1' '/dev/disk/by-diskseq/448.tmp-b7:1' failed: Read-only file system [ 133.953361][ T144] hfsplus: b-tree write err: -5, ino 4 [ 134.022337][ T6218] udevd[6218]: symlink '../../loop1' '/dev/disk/by-label/untitled.tmp-b7:1' failed: Read-only file system [ 134.108271][ T6218] udevd[6218]: symlink '../../loop1' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:1' failed: Read-only file system [ 134.158598][ T4173] udevd[4173]: symlink '../../loop3' '/dev/disk/by-diskseq/450.tmp-b7:3' failed: Read-only file system [ 134.372190][ T4175] udevd[4175]: symlink '../../loop0' '/dev/disk/by-diskseq/431.tmp-b7:0' failed: Read-only file system [ 134.420996][ T7303] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 134.440700][ T7313] netlink: 'syz.0.1168': attribute type 1 has an invalid length. [ 134.465229][ T7313] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1168'. [ 134.466316][ T4175] udevd[4175]: symlink '../../loop2' '/dev/disk/by-diskseq/445.tmp-b7:2' failed: Read-only file system [ 134.604611][ T7317] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 134.622824][ T7317] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 134.631289][ T7315] set_capacity_and_notify: 4 callbacks suppressed [ 134.631305][ T7315] loop1: detected capacity change from 0 to 4096 [ 134.672338][ T7317] System zones: 1-12 [ 134.680448][ T7317] EXT4-fs (loop4): orphan cleanup on readonly fs [ 134.688615][ T7302] loop2: detected capacity change from 0 to 32768 [ 134.693926][ T7317] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.1171: Directory hole found for htree index block 0 [ 134.784803][ T7302] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 134.789534][ T7315] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 134.802527][ T7317] EXT4-fs (loop4): Remounting filesystem read-only [ 134.810217][ T7317] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 134.820609][ T7317] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.1171: Directory hole found for htree index block 0 [ 134.842496][ T7317] EXT4-fs (loop4): Remounting filesystem read-only [ 134.849242][ T7317] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 134.857483][ T7317] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 134.861618][ T7315] ntfs3: loop1: Failed to load $Extend. [ 134.881445][ T4911] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 134.975006][ T7302] JBD2: Ignoring recovery information on journal [ 135.141075][ T7302] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 135.150258][ T4911] usb 1-1: Using ep0 maxpacket: 16 [ 135.217771][ T7330] loop3: detected capacity change from 0 to 256 [ 135.311990][ T7332] loop4: detected capacity change from 0 to 1024 [ 135.360882][ T7332] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 135.369228][ T4195] ocfs2: Unmounting device (7,2) on (node local) [ 135.369394][ T7332] EXT4-fs (loop4): mount failed [ 135.422728][ T7330] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 135.434609][ T4911] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 135.465310][ T4911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.495567][ T4911] usb 1-1: Product: syz [ 135.499931][ T4911] usb 1-1: Manufacturer: syz [ 135.520439][ T4911] usb 1-1: SerialNumber: syz [ 135.552130][ T4911] usb 1-1: config 0 descriptor?? [ 135.606707][ T4911] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 135.683290][ T7339] loop1: detected capacity change from 0 to 512 [ 135.761097][ T7339] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 135.871208][ T7348] loop2: detected capacity change from 0 to 1024 [ 135.986348][ T7348] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,resuid=0x0000000000000000,barrier=0x0000000000000003,delalloc,journal_dev=0x0000000000000009,nodioread_nolock,,errors=continue. Quota mode: none. [ 136.044419][ T7348] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.046506][ T4911] usb 1-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 136.082776][ T7348] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1184: bg 0: block 112: padding at end of block bitmap is not set [ 136.106429][ T5978] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 136.133106][ T7353] loop4: detected capacity change from 0 to 64 [ 136.144671][ T4390] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 136.246976][ T154] attempt to access beyond end of device [ 136.246976][ T154] loop4: rw=1, want=268435470, limit=64 [ 136.283236][ T154] Buffer I/O error on dev loop4, logical block 134217734, lost async page write [ 136.310827][ T4911] usb 1-1: USB disconnect, device number 9 [ 136.337204][ T4911] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 136.346499][ T4911] visor 1-1:0.0: device disconnected [ 136.504911][ T5978] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.524330][ T5978] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 136.543420][ T5978] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 136.562673][ T5978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.571055][ T4390] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 136.587333][ T4390] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.605151][ T5978] usb 2-1: config 0 descriptor?? [ 136.618527][ T4390] usb 4-1: config 0 has no interface number 0 [ 136.634332][ T4390] usb 4-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 136.663700][ T4390] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.677215][ T4390] usb 4-1: config 0 descriptor?? [ 136.690801][ T7361] loop4: detected capacity change from 0 to 32768 [ 136.710043][ T7361] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.1189 (7361) [ 136.723444][ T4390] usb 4-1: bad CDC descriptors [ 136.748762][ T7361] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 136.758656][ T7361] BTRFS info (device loop4): force zlib compression, level 3 [ 136.766184][ T7361] BTRFS info (device loop4): turning on flush-on-commit [ 136.774014][ T7361] BTRFS info (device loop4): max_inline at 4096 [ 136.781674][ T7361] BTRFS info (device loop4): using free space tree [ 136.789613][ T7361] BTRFS info (device loop4): has skinny extents [ 136.834408][ T4385] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 136.864655][ T5978] Bluetooth: Can't get state to change to load ram patch err [ 136.883356][ T5978] Bluetooth: Loading patch file failed [ 136.893749][ T5978] ath3k: probe of 2-1:0.0 failed with error -71 [ 136.912924][ T5978] usb 2-1: USB disconnect, device number 7 [ 136.964721][ T4390] usb 4-1: USB disconnect, device number 9 [ 137.083677][ T7361] BTRFS info (device loop4): enabling ssd optimizations [ 137.131282][ T7361] BTRFS info (device loop4): balance: start -d -m [ 137.138564][ T7361] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 137.150669][ T154] BTRFS info (device loop4): space_info 5 has 602112 free, is not full [ 137.159170][ T154] BTRFS info (device loop4): space_info total=3276800, used=61440, pinned=0, reserved=8192, may_use=978944, readonly=1626112 zone_unusable=0 [ 137.173572][ T154] BTRFS info (device loop4): global_block_rsv: size 851968 reserved 851968 [ 137.182213][ T154] BTRFS info (device loop4): trans_block_rsv: size 0 reserved 0 [ 137.189908][ T154] BTRFS info (device loop4): chunk_block_rsv: size 0 reserved 0 [ 137.197589][ T154] BTRFS info (device loop4): delayed_block_rsv: size 0 reserved 0 [ 137.205445][ T154] BTRFS info (device loop4): delayed_refs_rsv: size 262144 reserved 126976 [ 137.261981][ T7396] loop0: detected capacity change from 0 to 512 [ 137.274454][ T4385] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 137.287564][ T4385] usb 3-1: config 0 has no interface number 0 [ 137.297337][ T7361] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata [ 137.306550][ T4385] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 137.320670][ T7396] EXT4-fs error (device loop0): ext4_iget_extra_inode:4566: inode #15: comm syz.0.1195: corrupted in-inode xattr [ 137.322738][ T4385] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 137.341822][ T7396] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1195: couldn't read orphan inode 15 (err -117) [ 137.361461][ T7396] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 137.362027][ T4385] usb 3-1: config 0 interface 255 has no altsetting 0 [ 137.401054][ T7361] BTRFS info (device loop4): balance: canceled [ 137.418259][ T7396] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1457: inode #12: block 7: comm syz.0.1195: path /247/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 137.433391][ T4385] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 137.495800][ T4385] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.530841][ T4385] usb 3-1: config 0 descriptor?? [ 137.562883][ T7401] tipc: Enabling not permitted [ 137.600455][ T7401] tipc: Enabling of bearer rejected, failed to enable media [ 137.736150][ T7407] loop1: detected capacity change from 0 to 256 [ 137.824427][ T7407] FAT-fs (loop1): Directory bread(block 64) failed [ 137.844000][ T7407] FAT-fs (loop1): Directory bread(block 65) failed [ 137.855164][ T4385] usb 3-1: string descriptor 0 read error: -71 [ 137.863057][ T4385] ums-realtek 3-1:0.255: USB Mass Storage device detected [ 137.866756][ T7407] FAT-fs (loop1): Directory bread(block 66) failed [ 137.897365][ T7407] FAT-fs (loop1): Directory bread(block 67) failed [ 137.917310][ T7407] FAT-fs (loop1): Directory bread(block 68) failed [ 137.923897][ T7407] FAT-fs (loop1): Directory bread(block 69) failed [ 137.933277][ T7407] FAT-fs (loop1): Directory bread(block 70) failed [ 137.953950][ T7407] FAT-fs (loop1): Directory bread(block 71) failed [ 137.976137][ T4385] usb 3-1: USB disconnect, device number 10 [ 137.978924][ T7407] FAT-fs (loop1): Directory bread(block 72) failed [ 138.014661][ T7407] FAT-fs (loop1): Directory bread(block 73) failed [ 138.240657][ T6218] udevd[6218]: symlink '../../loop0' '/dev/disk/by-diskseq/480.tmp-b7:0' failed: Read-only file system [ 138.254164][ T7416] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 138.282671][ T4175] udevd[4175]: symlink '../../loop4' '/dev/disk/by-diskseq/483.tmp-b7:4' failed: Read-only file system [ 138.303419][ T7416] hpfs: filesystem error: improperly stopped [ 138.312789][ T7416] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 138.337091][ T7416] hpfs: You really don't want any checks? You are crazy... [ 138.360070][ T7416] hpfs: hpfs_map_sector(): read error [ 138.369550][ T4175] udevd[4175]: symlink '../../loop4' '/dev/disk/by-diskseq/483.tmp-b7:4' failed: Read-only file system [ 138.381303][ T7416] hpfs: code page support is disabled [ 138.387158][ T7403] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 138.393689][ T7403] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 138.403956][ T7416] hpfs: hpfs_map_4sectors(): unaligned read [ 138.457305][ T7416] hpfs: hpfs_map_4sectors(): unaligned read [ 138.468615][ T4173] udevd[4173]: symlink '../../loop1' '/dev/disk/by-diskseq/482.tmp-b7:1' failed: Read-only file system [ 138.483206][ T7416] hpfs: filesystem error: unable to find root dir [ 138.498132][ T7403] F2FS-fs (loop3): invalid crc value [ 138.502906][ T4175] udevd[4175]: symlink '../../loop0' '/dev/disk/by-diskseq/480.tmp-b7:0' failed: Read-only file system [ 138.549170][ T7403] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 138.631185][ T6218] udevd[6218]: symlink '../../loop3' '/dev/disk/by-diskseq/484.tmp-b7:3' failed: Read-only file system [ 138.633931][ T4175] udevd[4175]: symlink '../../loop0' '/dev/disk/by-diskseq/480.tmp-b7:0' failed: Read-only file system [ 138.682595][ T4173] udevd[4173]: symlink '../../loop2' '/dev/disk/by-diskseq/476.tmp-b7:2' failed: Read-only file system [ 138.708051][ T6219] udevd[6219]: symlink '../../loop4' '/dev/disk/by-diskseq/483.tmp-b7:4' failed: Read-only file system [ 138.735384][ T6218] udevd[6218]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system [ 138.768613][ T7403] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 138.777019][ T7403] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 138.835046][ T4385] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 138.930454][ T4194] attempt to access beyond end of device [ 138.930454][ T4194] loop3: rw=2049, want=45104, limit=40427 [ 139.023071][ T7432] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 139.038883][ T7432] REISERFS (device loop4): using ordered data mode [ 139.046133][ T7432] reiserfs: using flush barriers [ 139.057049][ T7432] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 139.078064][ T7432] REISERFS (device loop4): checking transaction log (loop4) [ 139.091494][ T7432] REISERFS (device loop4): Using r5 hash to sort names [ 139.124605][ T7432] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 139.204544][ T7411] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 139.264550][ T4385] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 139.272691][ T4385] usb 3-1: config 0 has no interface number 0 [ 139.285769][ T4385] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=2d.ad [ 139.289092][ T4911] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 139.294873][ T4385] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.334412][ T4385] usb 3-1: config 0 descriptor?? [ 139.358721][ T7448] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.1217'. [ 139.381578][ T7448] net_ratelimit: 13287 callbacks suppressed [ 139.381594][ T7448] openvswitch: netlink: Tunnel attr 159 out of range max 16 [ 139.484441][ T7411] usb 1-1: Using ep0 maxpacket: 8 [ 139.551394][ T7456] FAT-fs (loop3): Directory bread(block 64) failed [ 139.558722][ T7456] FAT-fs (loop3): Directory bread(block 65) failed [ 139.567380][ T7456] FAT-fs (loop3): Directory bread(block 66) failed [ 139.574772][ T7456] FAT-fs (loop3): Directory bread(block 67) failed [ 139.581619][ T7456] FAT-fs (loop3): Directory bread(block 68) failed [ 139.584136][ T4385] usb 3-1: USB disconnect, device number 11 [ 139.588801][ T7456] FAT-fs (loop3): Directory bread(block 69) failed [ 139.603503][ T7456] FAT-fs (loop3): Directory bread(block 70) failed [ 139.610372][ T7456] FAT-fs (loop3): Directory bread(block 71) failed [ 139.620728][ T7456] FAT-fs (loop3): Directory bread(block 72) failed [ 139.627588][ T7456] FAT-fs (loop3): Directory bread(block 73) failed [ 139.634566][ T7411] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 139.634591][ T7411] usb 1-1: config 179 has no interface number 0 [ 139.634619][ T7411] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 139.634644][ T7411] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 139.634669][ T7411] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 139.634694][ T7411] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 139.634717][ T7411] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 139.634752][ T7411] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 139.634773][ T7411] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.744785][ T4911] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 139.760253][ T4911] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c08, bcdDevice= 0.00 [ 139.788279][ T4911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.805357][ T4911] usb 2-1: config 0 descriptor?? [ 139.847216][ T7462] set_capacity_and_notify: 5 callbacks suppressed [ 139.847232][ T7462] loop4: detected capacity change from 0 to 4096 [ 139.894666][ T7430] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 140.061532][ T7464] loop3: detected capacity change from 0 to 1764 [ 140.122069][ T7464] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 140.309775][ T4911] corsair-psu 0003:1B1C:1C08.0017: item fetching failed at offset 0/1 [ 140.351732][ T4911] corsair-psu: probe of 0003:1B1C:1C08.0017 failed with error -22 [ 140.429758][ T4914] usb 1-1: USB disconnect, device number 10 [ 140.434316][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 140.472427][ T7481] loop4: detected capacity change from 0 to 1024 [ 140.494684][ T7484] program syz.3.1235 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.534165][ T7486] loop3: detected capacity change from 0 to 128 [ 140.541739][ T4385] usb 2-1: USB disconnect, device number 8 [ 140.597399][ T7486] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 140.630358][ T7486] hpfs: filesystem error: improperly stopped [ 140.639696][ T7486] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 140.655224][ T7486] hpfs: You really don't want any checks? You are crazy... [ 140.686331][ T7486] hpfs: hpfs_map_sector(): read error [ 140.704368][ T7411] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 140.710781][ T7486] hpfs: code page support is disabled [ 140.740557][ T7486] hpfs: hpfs_map_4sectors(): unaligned read [ 140.767099][ T7486] hpfs: hpfs_map_4sectors(): unaligned read [ 140.777540][ T7486] hpfs: filesystem error: unable to find root dir [ 140.994738][ T7411] usb 3-1: Using ep0 maxpacket: 8 [ 141.118768][ T7507] loop0: detected capacity change from 0 to 2048 [ 141.211980][ T7507] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 141.252408][ T7517] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.278309][ T7516] overlayfs: bad mount option "redirect_dir=off:/" [ 141.364668][ T7411] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 141.373777][ T7411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.392715][ T146] Bluetooth: hci4: link tx timeout [ 141.398012][ T146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.427230][ T7411] usb 3-1: Product: syz [ 141.431439][ T7411] usb 3-1: Manufacturer: syz [ 141.470563][ T7411] usb 3-1: SerialNumber: syz [ 141.482815][ T7528] sock: sock_set_timeout: `syz.3.1257' (pid 7528) tries to set negative timeout [ 141.521748][ T7411] usb 3-1: config 0 descriptor?? [ 141.615177][ T7411] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 141.653976][ T7411] pctv452e: pctv452e_power_ctrl: 1 [ 141.653976][ T7411] [ 141.674790][ T7411] usb 3-1: selecting invalid altsetting 3 [ 141.680535][ T7411] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 141.680535][ T7411] [ 141.723814][ T7411] dvb-usb: bulk message failed: -22 (5/0) [ 141.754568][ T7411] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 141.794129][ T7523] loop0: detected capacity change from 0 to 32768 [ 141.814736][ T7411] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 141.833373][ T7411] usb 3-1: media controller created [ 141.842680][ T7411] dvb-usb: bulk message failed: -22 (8/0) [ 141.865033][ T7411] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 141.895292][ T7523] read_mapping_page failed! [ 141.903713][ T7411] dvb-usb: MAC address reading failed. [ 141.904574][ T7523] ERROR: (device loop0): txCommit: [ 141.904574][ T7523] [ 141.969769][ T7411] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.986707][ T7545] tipc: New replicast peer: 100.1.1.4 [ 142.005662][ T7545] tipc: Enabled bearer , priority 17 [ 142.050881][ T276] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0) [ 142.064789][ T276] ------------[ cut here ]------------ [ 142.104400][ T276] kernel BUG at fs/jfs/jfs_txnmgr.c:932! [ 142.110096][ T276] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 142.116184][ T276] CPU: 0 PID: 276 Comm: jfsCommit Not tainted syzkaller #0 [ 142.123374][ T276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 142.133436][ T276] RIP: 0010:txUnlock+0xc87/0xcb0 [ 142.138374][ T276] Code: ff 77 de 06 0f 0b e8 68 18 a6 fe 48 c7 c7 80 6a 62 8a 48 c7 c6 79 66 62 8a ba a4 03 00 00 48 c7 c1 40 75 62 8a e8 d9 77 de 06 <0f> 0b e8 42 18 a6 fe 48 c7 c7 80 6a 62 8a 48 c7 c6 79 66 62 8a ba [ 142.157991][ T276] RSP: 0018:ffffc9000304fd28 EFLAGS: 00010246 [ 142.164072][ T276] RAX: 0000000000000037 RBX: 0000000000001000 RCX: f6722869b34d3200 [ 142.172047][ T276] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 142.180102][ T276] RBP: ffffc90002bb20d8 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 142.188079][ T276] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff8880749fb8b8 [ 142.196048][ T276] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90002991220 [ 142.204103][ T276] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 142.213029][ T276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.219597][ T276] CR2: 00007f68d59536b8 CR3: 000000006510d000 CR4: 00000000003506f0 [ 142.227644][ T276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 142.235602][ T276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 142.243556][ T276] Call Trace: [ 142.246816][ T276] [ 142.249729][ T276] ? lockdep_hardirqs_on+0x94/0x140 [ 142.254911][ T276] jfs_lazycommit+0x581/0xb40 [ 142.259587][ T276] ? txFreelock+0x5a0/0x5a0 [ 142.264090][ T276] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 142.269985][ T276] ? sched_dynamic_update+0x210/0x210 [ 142.275432][ T276] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 142.281303][ T276] ? __kthread_parkme+0x157/0x1b0 [ 142.286411][ T276] kthread+0x436/0x520 [ 142.290548][ T276] ? txFreelock+0x5a0/0x5a0 [ 142.295029][ T276] ? kthread_blkcg+0xd0/0xd0 [ 142.299595][ T276] ret_from_fork+0x1f/0x30 [ 142.304003][ T276] [ 142.307027][ T276] Modules linked in: [ 142.311705][ T7411] DVB: Unable to find symbol stb0899_attach() [ 142.320297][ T7411] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 142.323589][ T276] ---[ end trace 3b54e93c4b91beb0 ]--- [ 142.338085][ T276] RIP: 0010:txUnlock+0xc87/0xcb0 [ 142.343361][ T276] Code: ff 77 de 06 0f 0b e8 68 18 a6 fe 48 c7 c7 80 6a 62 8a 48 c7 c6 79 66 62 8a ba a4 03 00 00 48 c7 c1 40 75 62 8a e8 d9 77 de 06 <0f> 0b e8 42 18 a6 fe 48 c7 c7 80 6a 62 8a 48 c7 c6 79 66 62 8a ba [ 142.368398][ T276] RSP: 0018:ffffc9000304fd28 EFLAGS: 00010246 [ 142.375171][ T276] RAX: 0000000000000037 RBX: 0000000000001000 RCX: f6722869b34d3200 [ 142.383241][ T276] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 142.393267][ T276] RBP: ffffc90002bb20d8 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 142.394564][ T4385] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 142.402918][ T276] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff8880749fb8b8 [ 142.428818][ T276] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90002991220 [ 142.437140][ T276] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 142.447091][ T276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.453669][ T276] CR2: 00007f8384edfe9c CR3: 000000000c08e000 CR4: 00000000003506f0 [ 142.461721][ T276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 142.470200][ T276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 142.478236][ T7411] rc_core: IR keymap rc-tt-1500 not found [ 142.483943][ T7411] Registered IR keymap rc-empty [ 142.488825][ T276] Kernel panic - not syncing: Fatal exception [ 142.495198][ T276] Kernel Offset: disabled [ 142.499515][ T276] Rebooting in 86400 seconds..