last executing test programs: 1m22.788050518s ago: executing program 3 (id=113): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/devices/usb2/power/level\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000700)={'syz1\x00', {0x7, 0x7, 0x8e4, 0x5}, 0x4a, [0x4, 0x6, 0x40, 0x8, 0x344, 0x1, 0x80, 0x4, 0x1f2, 0x7, 0xff, 0x3, 0x6b, 0x4, 0x9, 0x56a6a682, 0xffff, 0x0, 0xc7, 0x4, 0x80000000, 0x2, 0x9, 0x0, 0x8, 0x7, 0x0, 0x400, 0x5, 0x80000000, 0x2, 0x401, 0xc, 0x200, 0x2, 0x2, 0x9, 0x3, 0xfffffff6, 0xc, 0x3ff, 0x3, 0x80, 0x9, 0x4, 0xd5, 0x39, 0x6, 0x5a, 0xffff, 0x650fdaa8, 0x8, 0x6, 0x0, 0x0, 0x4, 0x5, 0x1887, 0x1, 0x8000, 0x5, 0x200, 0x400], [0x9, 0x10, 0xfffffff7, 0x8000, 0x8, 0x3ebc, 0x10000, 0x2, 0xb428, 0x7fff, 0x0, 0xb960, 0x3ff, 0x6, 0x5, 0x6, 0x10000, 0xffff, 0x3, 0x1, 0x5, 0x6, 0x5, 0x0, 0x4f, 0x88, 0xa532, 0x5, 0x4, 0xfffffffb, 0xc5fe, 0x8, 0x0, 0x3, 0x2, 0x3, 0x6689, 0x7, 0xffffffff, 0x4, 0xd8d6, 0x3, 0x2, 0x6, 0x80000001, 0x2, 0x1, 0x1, 0x1, 0x6df, 0xffffffff, 0x2, 0x73, 0x6, 0x1, 0x7ff, 0x6, 0x7e, 0xb9, 0x7, 0xf6ba, 0x7, 0xf1], [0x9, 0x8, 0x7, 0x9, 0x4, 0x100, 0x800, 0x80000001, 0x3, 0x4, 0x9fa, 0x6, 0x80000001, 0x9, 0xd970, 0x0, 0x80000001, 0x7, 0x8, 0x8, 0x5, 0x2, 0x6, 0x3, 0x6, 0xfffffffa, 0x80000001, 0x0, 0x1ff, 0xf, 0xfffffff8, 0x0, 0x6, 0x200, 0x5, 0x413, 0xfffffff8, 0x5, 0x1, 0xde, 0x9, 0x6, 0x6, 0x4, 0x1, 0x2a0e, 0x0, 0x1, 0xe5, 0xfffffff9, 0xc0000000, 0x2, 0x9, 0x80000001, 0x0, 0x7, 0x0, 0x4, 0x3, 0xd, 0x4a7, 0x1, 0x3043, 0x800], [0x6, 0x0, 0x80, 0x5, 0x34, 0x5, 0x8, 0x36fb, 0x0, 0xbe28, 0xfffffff7, 0xa1, 0x100, 0x3, 0x8, 0x3, 0xfffffff9, 0xb92e, 0x6, 0x2, 0x9, 0x7a9, 0x881c, 0x3, 0x665, 0x2, 0x2, 0x81, 0x4b, 0x4099, 0x5, 0x40, 0x7, 0xb, 0xffff, 0x1, 0x8, 0x9, 0xbc, 0xfffffff8, 0x8, 0x4, 0x3ff, 0x2, 0x5, 0x7, 0x7fffffff, 0x1c, 0x6, 0x2, 0x7, 0x4, 0x0, 0xb, 0x8, 0x8670, 0x4, 0x10000, 0x1, 0x8, 0x2, 0xa5f, 0x2000, 0x9]}, 0x45c) 1m22.391005829s ago: executing program 3 (id=119): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYRES64=r1, @ANYRESHEX=r3, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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") utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1m22.046265938s ago: executing program 3 (id=126): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)="5c00000012006bab9a3fe3d96e17aa0a046b876c1d0048007ea60864160af36504001a003800eb0ea3fa01de8eb006000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000000000017a7016306569fa5dad17a91", 0x63}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000004ec0)=""/4063, 0xfdf}, {&(0x7f00000004c0)=""/206, 0xce}, {&(0x7f00000006c0)=""/150, 0x96}, {&(0x7f0000003dc0)=""/197, 0xc5}, {&(0x7f0000001c00)=""/173, 0xad}, {&(0x7f0000001cc0)=""/86, 0x56}, {&(0x7f00000003c0)=""/92, 0x5c}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0x9}, 0x20) recvmsg$kcm(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10000) 1m21.867096162s ago: executing program 3 (id=128): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000007300)={[{@quota}, {@nodiscard}, {@gid}, {@nodiscard}, {@discard_size={'discard', 0x3d, 0x4}}, {@discard_size={'discard', 0x3d, 0x6}}, {@quota}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@discard}]}, 0x21, 0x6182, &(0x7f0000001140)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x1c1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x80086601, 0x0) 1m20.933775858s ago: executing program 3 (id=141): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0xc0010005, 0x0, 0x1}]}) 1m19.499977296s ago: executing program 3 (id=156): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)="313030203180", 0x6) 1m19.266778372s ago: executing program 32 (id=156): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)="313030203180", 0x6) 1m3.766866092s ago: executing program 4 (id=288): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) recvfrom(r0, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) 1m3.676207644s ago: executing program 4 (id=289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '-'}]}], {0x14}}, 0x80}}, 0x40) syz_emit_ethernet(0xfc1, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @broadcast}, "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"}}}}, 0x0) 1m3.621991216s ago: executing program 4 (id=291): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x4, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f00000001c0)='lo\x00', 0x5, 0x0, 0x3}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0xfffd, @empty}, {0x2, 0x4000, @loopback}, {0x2, 0x0, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) 1m3.562045098s ago: executing program 4 (id=292): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000001c0)={[{@nobh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@sysvgroups}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@debug}]}, 0xfc, 0x57d, &(0x7f0000001500)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=""/103, 0x67) 1m2.721820049s ago: executing program 4 (id=299): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x19c, 0x30, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{0x188, 0x1, [@m_connmark={0x70, 0x15, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x10000000, 0x51c86cc0, 0x8}, 0x4004}}]}, {0x21, 0x6, "2e0effe2dc3401cf98dcd68e067373e3a4d2459f025e438fe4508aede8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_tunnel_key={0x60, 0x0, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x4, 0x0}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ct={0xb4, 0x1f, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, {0x75, 0x6, "bb0e3b2d546471684c0626fcc7ca9cb5d81d7529e1e65e581ad4bced5bb1204259e30dcd99ae7be471a01517bb2f91ab1c61c97918adae3fb8ac3ec8c364229aee8931c5fd7fe8b77843cea196fc0009f574d0a66d98e7337311ec9ad3ea9c59a42c899686bfd33ff9bd15aa8dc5f473fc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0xd0}, 0x40804) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 59.795253067s ago: executing program 4 (id=329): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x54, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x22, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @initial, @initial, {0x4, 0x6}, "", @value={0x0, 0x1, 0x3, 0x1, 0xff}, @value=@ver_80211n={0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}}}]}, 0x54}}, 0x800) 59.623511151s ago: executing program 33 (id=329): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x54, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x22, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @initial, @initial, {0x4, 0x6}, "", @value={0x0, 0x1, 0x3, 0x1, 0xff}, @value=@ver_80211n={0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}}}]}, 0x54}}, 0x800) 2.414451037s ago: executing program 6 (id=851): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700000000000000006a0000850000000500000095"], 0x0, 0x7, 0x0, 0x0, 0x100, 0x1c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000072"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 2.350036288s ago: executing program 6 (id=852): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}}, 0x14}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101242, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x2000, 0x1002000}) 2.249660631s ago: executing program 0 (id=853): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) lseek(r0, 0x0, 0x3) 2.085961075s ago: executing program 6 (id=854): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x80840) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x5501, 0x0) 1.935995569s ago: executing program 0 (id=857): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000080)="f5", 0x12, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 1.844905852s ago: executing program 0 (id=858): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f00000004c0)=[{r0, 0x1007}, {r0, 0x4004}], 0x2, 0x0, 0x0, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x21, &(0x7f0000000180)={0x2f, 0x40000020, 0xf2ad}) 1.467850402s ago: executing program 5 (id=865): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000000)={0x2, &(0x7f0000000280)=[{0x40, 0x2, 0xff, 0x91}, {0x6, 0x1, 0xff, 0xb1e8}]}) write(r0, &(0x7f00000002c0)="74ca56", 0x3) 1.347798765s ago: executing program 2 (id=867): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)="230a00bfe06f2eeb728b8aa6941eda556da39859", 0x14) 1.301226786s ago: executing program 5 (id=868): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 1.218108598s ago: executing program 2 (id=870): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x40, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}]}, 0x40}}, 0x4000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1.14384349s ago: executing program 6 (id=871): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000013c0)='./file0\x00', 0x1000a05, &(0x7f0000000300)=ANY=[@ANYBLOB="66696c657365743d3030303030303030303030313032352c726f6f746469723d30303030303030303030303030303030303030332c706172746974696f6e3d30303030303030303030303030303030303030302c6769643d69676e6f7265006e6f6164696e6963622cde6661736b3d30303030303030303030303030303030303030343732302c62733d30303230303030303030303230303030303030362c6769643d69676e6f72652c12e7090021b0d36853f83b3237931f7bf54d593a4b0e2a94b2208a0318c4095a29b12750ca47c7a60cd523accdee2710fd9dc6171d154f9426ce2b8e251b"], 0x1, 0xc56, &(0x7f0000000400)="$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") open(0x0, 0x1c92ff, 0x182) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20fffe82) open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) 1.127720631s ago: executing program 2 (id=872): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) 1.058865033s ago: executing program 5 (id=874): r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x22) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000000c0)=0x31) 919.905146ms ago: executing program 2 (id=875): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4d040, &(0x7f0000001100)={0xa, 0x1, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005100)=""/9, 0x9}, 0x10f}], 0x1, 0x40010162, 0x0) 919.689786ms ago: executing program 5 (id=876): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed4040, &(0x7f0000000300)={[{@noblock_validity}, {@noinit_itable}, {@commit={'commit', 0x3d, 0x200000a9}}, {@errors_continue}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x489}}, {@usrjquota}, {@minixdf}]}, 0xf6, 0x479, &(0x7f00000004c0)="$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") r0 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) 832.220548ms ago: executing program 1 (id=877): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000000)=0x3, 0x4) 788.08922ms ago: executing program 0 (id=878): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x28502, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x1013c1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045503, &(0x7f0000000040)) 787.867069ms ago: executing program 2 (id=879): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x4001) 731.263331ms ago: executing program 1 (id=880): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4d0, 0x0, 0x52af}]}) 543.507166ms ago: executing program 1 (id=881): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x3, @mcast1, 0x1}}, {{0xa, 0x4e23, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000004c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 543.335666ms ago: executing program 5 (id=882): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2800480, &(0x7f00000002c0)={[], [{@euid_gt}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) 542.764316ms ago: executing program 6 (id=883): io_uring_setup(0x68f7, &(0x7f00000002c0)={0x0, 0x48c7, 0x80, 0x0, 0x8100016b}) setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x4, 0x1b}}]}]}, 0xf5}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 482.209897ms ago: executing program 0 (id=884): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000240), 0x7, 0x40102) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) 440.142629ms ago: executing program 1 (id=885): r0 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x28, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @mcast2}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20, 0x0) 363.217961ms ago: executing program 6 (id=886): r0 = syz_open_dev$hiddev(&(0x7f0000000040), 0x900104, 0xc8481) syz_usb_connect(0x2, 0x2f3, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000074ae8440f20c5062bd87010203010902e10201000000000904"], 0x0) ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f0000000000)={0x1, 0x100, 0x7, 0x2, 0x8, 0x3}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x7b, 0xfe, 0x51, 0x8, 0x7ca, 0xb800, 0x1a86, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x87, 0xe0, 0x8, "", [{{0x9, 0x4, 0xab, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8c}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) 299.889433ms ago: executing program 2 (id=887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x4000, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast=0xffff0011}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 280.558863ms ago: executing program 1 (id=888): setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) bind(r0, &(0x7f0000000100)=@generic={0x8, "0000000001002000"}, 0xc) 267.907643ms ago: executing program 0 (id=889): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'lo\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "f1161773518504fa64f1af694b70b3d5193c2bffe4a2b397e698ebb43cc8f22b", "6fd0dc8f06c07702143b68815e35b4c8c68f61d86529730e400ec5208f44d4be", "86b4ac02d89f3b29968d4edcdeef28825cd8590e951bd2bb60732412cf270957", "e86b4d8bfc5af10ab4ee66f49c5ee8e6335a74dd424b283df20293e22d19c944", "fdf8ce2952ae34ecaebe9fb29a810daeb28c2ecdc361334b16e5abeeaf0cf4a9", "4e6d8b1e0a30b6a570ca60fe", 0xfffffff4, 0xa, 0x80000000, 0x7, 0x9}}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0xfefffffa, 0x80) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000140)={0x31, 0x3, 0x80000000, 0x1000, 0x1000, 0x1d7}) 124.963547ms ago: executing program 1 (id=890): set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) 0s ago: executing program 5 (id=891): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)=0xfffffffe) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) read$dsp(r0, &(0x7f0000000280)=""/76, 0x4c) kernel console output (not intermixed with test programs): EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 81.792367][ T5031] loop5: detected capacity change from 0 to 24 [ 81.821588][ T5035] loop0: detected capacity change from 0 to 512 [ 81.879260][ T5031] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 81.912279][ T5035] EXT4-fs (loop0): orphan cleanup on readonly fs [ 81.953467][ T5031] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 81.975053][ T5035] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 82.029104][ T5035] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 82.061541][ T5035] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #13: comm syz.0.237: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 57856(57856) [ 82.155478][ T5035] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.237: couldn't read orphan inode 13 (err -117) [ 82.215171][ T5035] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 82.232543][ T5050] loop2: detected capacity change from 0 to 2048 [ 82.254768][ T5053] loop5: detected capacity change from 0 to 512 [ 82.300773][ T5055] rnbd_client L125: Can't parse path ip:1: -22 [ 82.342091][ T5050] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 82.353410][ T5035] EXT4-fs error (device loop0): ext4_lookup:1858: comm syz.0.237: inode #15: comm syz.0.237: iget: illegal inode # [ 82.423518][ T5050] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.811667][ T5072] program syz.4.249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.151545][ T5090] loop0: detected capacity change from 0 to 8 [ 83.203864][ T5045] loop1: detected capacity change from 0 to 32768 [ 83.286964][ T5045] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.239 (5045) [ 83.337676][ T5090] SQUASHFS error: Unable to read inode 0xa7 [ 83.359816][ T5045] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 83.385188][ T5045] BTRFS info (device loop1): enabling auto defrag [ 83.405250][ T5045] BTRFS info (device loop1): force clearing of disk cache [ 83.425670][ T5045] BTRFS info (device loop1): ignoring data csums [ 83.432053][ T5045] BTRFS info (device loop1): turning on async discard [ 83.473288][ T5045] BTRFS info (device loop1): setting nodatacow, compression disabled [ 83.484469][ T4530] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 83.551464][ T5045] BTRFS info (device loop1): turning off async discard [ 83.582316][ T5045] BTRFS info (device loop1): disabling free space tree [ 83.603361][ T5045] BTRFS info (device loop1): has skinny extents [ 83.691910][ T5114] loop0: detected capacity change from 0 to 256 [ 83.751459][ T5114] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001023f, chksum : 0x0e440cfe, utbl_chksum : 0xe619d30d) [ 83.784246][ T5067] loop5: detected capacity change from 0 to 32768 [ 83.874482][ T4530] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 83.901689][ T4530] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 83.982339][ T5067] XFS (loop5): Mounting V5 Filesystem [ 83.994515][ T4488] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 83.996089][ T5137] erofs: (device loop0): mounted with root inode @ nid 36. [ 84.014996][ T5045] BTRFS error (device loop1): ignoredatacsums must be used with ro mount option [ 84.149604][ T4530] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 84.177152][ T4530] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.217248][ T4530] usb 5-1: Product: syz [ 84.224199][ T4530] usb 5-1: Manufacturer: syz [ 84.231993][ T4530] usb 5-1: SerialNumber: syz [ 84.405101][ T4488] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.420279][ T5067] XFS (loop5): Ending clean mount [ 84.449649][ T4488] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.491066][ T4488] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 84.524650][ T4530] usb 5-1: Limiting number of CPorts to U8_MAX [ 84.527069][ T5157] FS-Cache: Cache "CacheFiles" added (type cachefiles) [ 84.561246][ T5067] XFS (loop5): Quotacheck needed: Please wait. [ 84.561842][ T5157] CacheFiles: File cache on loop0 registered [ 84.599971][ T4379] XFS (loop5): Corruption warning: Metadata has LSN (-1593835519:128) ahead of current LSN (1:640). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 84.634400][ T4379] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 84.646218][ T4379] XFS (loop5): Unmount and run xfs_repair [ 84.651947][ T4379] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 84.660871][ T4379] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 84.670375][ T4379] 00000010: 00 00 00 00 00 00 00 04 a1 00 00 01 00 00 00 80 ................ [ 84.679449][ T4379] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 84.688798][ T4379] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 84.697880][ T4379] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 84.707336][ T4379] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 84.710764][ T5156] CacheFiles: File cache on loop0 unregistering [ 84.716453][ T4379] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 84.731733][ T5156] FS-Cache: Withdrawing cache "CacheFiles" [ 84.741950][ T4379] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 84.753635][ T4488] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 84.780567][ T154] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74 [ 84.796411][ T4488] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.813096][ T5067] XFS (loop5): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 84.813262][ T4488] usb 3-1: Product: syz [ 84.830806][ T4488] usb 3-1: Manufacturer: syz [ 84.841153][ T4488] usb 3-1: SerialNumber: syz [ 84.959860][ T4379] XFS (loop5): Corruption warning: Metadata has LSN (-1593835519:128) ahead of current LSN (1:640). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 85.024799][ T4379] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 85.040625][ T5159] XFS (loop1): Mounting V5 Filesystem [ 85.053677][ T4379] XFS (loop5): Unmount and run xfs_repair [ 85.060096][ T4379] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 85.072667][ T4379] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 85.082854][ T4379] 00000010: 00 00 00 00 00 00 00 04 a1 00 00 01 00 00 00 80 ................ [ 85.096379][ T4379] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 85.108816][ T4379] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 85.118019][ T4379] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 85.127380][ T4379] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 85.140950][ T4379] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 85.151739][ T4379] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 85.160881][ T5067] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74 [ 85.164589][ T4530] usb 5-1: failed to send ARPC request 1: -71 [ 85.192034][ T5067] XFS (loop5): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1540/0x1b30 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 85.206532][ T4530] usb 5-1: failed to execute ARPC: -71 [ 85.212153][ T5067] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 85.226654][ T4530] usb 5-1: failed to set connected state for cport 0: -71 [ 85.237700][ T4735] XFS (loop5): Unmounting Filesystem [ 85.251382][ T4530] greybus greybus1: 0/0:0: failed to set connected state: -71 [ 85.282082][ T5159] XFS (loop1): Ending clean mount [ 85.287401][ T4530] usb 5-1: failed to send ARPC request 3: -71 [ 85.294038][ T4530] usb 5-1: failed to execute ARPC: -71 [ 85.300221][ T4530] usb 5-1: failed to clear cport 0: -71 [ 85.306353][ T4530] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 85.313830][ T5159] XFS (loop1): Quotacheck needed: Please wait. [ 85.367765][ T4530] es2_ap_driver: probe of 5-1:1.0 failed with error -71 [ 85.404587][ T5159] XFS (loop1): Quotacheck: Done. [ 85.440742][ T4530] usb 5-1: USB disconnect, device number 4 [ 85.484686][ T5159] XFS (loop1): User initiated shutdown received. [ 85.505757][ T5159] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 85.562615][ T5165] set_capacity_and_notify: 3 callbacks suppressed [ 85.562628][ T5165] loop0: detected capacity change from 0 to 32768 [ 85.593195][ T5159] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 85.594670][ T4488] usb 3-1: USB disconnect, device number 4 [ 85.607462][ C1] usb 3-1: comm data receiver aborted. [ 85.702389][ T4186] XFS (loop1): Unmounting Filesystem [ 86.013785][ T5178] udevd[5178]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.060185][ T5193] loop4: detected capacity change from 0 to 16 [ 86.105339][ T5193] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 86.524485][ T5152] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 86.761501][ T5207] loop0: detected capacity change from 0 to 32768 [ 86.774616][ T5152] usb 6-1: Using ep0 maxpacket: 32 [ 86.866405][ T5207] XFS (loop0): Mounting V5 Filesystem [ 86.875284][ T5203] loop4: detected capacity change from 0 to 32768 [ 86.904523][ T5152] usb 6-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 86.915930][ T5153] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.926031][ T5152] usb 6-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.939580][ T5152] usb 6-1: config 0 interface 0 has no altsetting 0 [ 86.946264][ T5152] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 86.955847][ T5152] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.966049][ T5152] usb 6-1: config 0 descriptor?? [ 87.000591][ T5207] XFS (loop0): Ending clean mount [ 87.012952][ T5203] XFS (loop4): Mounting V5 Filesystem [ 87.122150][ T5203] XFS (loop4): Ending clean mount [ 87.172508][ T5203] XFS (loop4): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 87.207982][ T4185] XFS (loop4): Unmounting Filesystem [ 87.230400][ T4191] XFS (loop0): Unmounting Filesystem [ 87.279093][ T5153] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 87.289247][ T5153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.301531][ T5153] usb 2-1: config 0 descriptor?? [ 87.452244][ T5152] pyra 0003:1E7D:2C24.0002: hidraw0: USB HID v10.01 Device [HID 1e7d:2c24] on usb-dummy_hcd.5-1/input0 [ 87.672355][ T4530] usb 6-1: USB disconnect, device number 2 [ 87.673092][ T5243] loop4: detected capacity change from 0 to 64 [ 87.810350][ T5153] samsung 0003:0419:0001.0003: unknown main item tag 0xd [ 87.819194][ T5153] samsung 0003:0419:0001.0003: unknown main item tag 0xd [ 87.831359][ T5153] samsung 0003:0419:0001.0003: ignoring exceeding usage max [ 87.870978][ T5153] samsung 0003:0419:0001.0003: hidraw0: USB HID vf0.00 Device [HID 0419:0001] on usb-dummy_hcd.1-1/input0 [ 87.998973][ T5250] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 88.035019][ T5153] usb 2-1: USB disconnect, device number 2 [ 88.196831][ T5259] loop4: detected capacity change from 0 to 1024 [ 88.292665][ T5259] EXT4-fs (loop4): Ignoring removed nobh option [ 88.310306][ T5259] EXT4-fs (loop4): Ignoring removed bh option [ 88.380204][ T5259] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 88.431286][ T5259] System zones: 0-1, 3-12 [ 88.493534][ T5259] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,sysvgroups,errors=remount-ro,stripe=0x0000000000000011,bh,debug,. Quota mode: none. [ 88.806431][ T5274] mmap: syz.0.296 (5274) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 88.863510][ T5255] loop2: detected capacity change from 0 to 131072 [ 88.970022][ T5255] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 88.976951][ T5255] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 89.004864][ T5255] F2FS-fs (loop2): invalid crc value [ 89.082910][ T5255] F2FS-fs (loop2): Found nat_bits in checkpoint [ 89.139771][ T5255] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 89.146967][ T5255] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 89.165407][ T4185] EXT4-fs error (device loop4): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /65/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 89.245372][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 89.254567][ T5261] loop5: detected capacity change from 0 to 32768 [ 89.284638][ T4185] EXT4-fs error (device loop4): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /65/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 89.351171][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 89.402154][ T5261] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 89.411610][ T4185] EXT4-fs error (device loop4): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 89.539771][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 89.560233][ T5295] loop0: detected capacity change from 0 to 8192 [ 89.566863][ T4185] EXT4-fs warning (device loop4): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 89.576469][ T5293] loop2: detected capacity change from 0 to 1024 [ 89.591779][ T4185] EXT4-fs error (device loop4): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /65/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 89.615274][ T25] audit: type=1800 audit(2000000020.309:5): pid=5261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.293" name="file1" dev="loop5" ino=17059 res=0 errno=0 [ 89.667063][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 89.682548][ T4185] EXT4-fs error (device loop4): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /65/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 89.710426][ T5295] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 89.733321][ T5293] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 89.742447][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 89.752443][ T4185] EXT4-fs error (device loop4): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 89.767852][ T5293] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 89.773310][ T5295] REISERFS (device loop0): using ordered data mode [ 89.798094][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 89.808244][ T4735] ocfs2: Unmounting device (7,5) on (node local) [ 89.814994][ T4185] EXT4-fs warning (device loop4): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 89.830165][ T4185] EXT4-fs error (device loop4): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /65/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 89.855105][ T5295] reiserfs: using flush barriers [ 89.861578][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 89.869283][ T5293] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc=0x0000000000000007,noblock_validity,delalloc,quota,errors=remount-ro,nomblk_io_submit,dioread_nolock,mb_optimize_scan=0x0000000000000000,. Quota mode: writeback. [ 89.893362][ T5295] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 89.914415][ T4185] EXT4-fs error (device loop4): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /65/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 89.914627][ T5293] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.950690][ T5295] REISERFS (device loop0): checking transaction log (loop0) [ 89.965013][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 89.971688][ T4185] EXT4-fs error (device loop4): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 90.041644][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 90.051779][ T4185] EXT4-fs warning (device loop4): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 90.180132][ T4185] EXT4-fs error (device loop4): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /65/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 90.212148][ T5293] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.300: bg 0: block 112: padding at end of block bitmap is not set [ 90.275398][ T5305] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 90.304669][ T5293] EXT4-fs (loop2): Remounting filesystem read-only [ 90.330166][ T5305] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.391664][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 90.398791][ T5295] REISERFS (device loop0): Using tea hash to sort names [ 90.447223][ T5295] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 90.492064][ T4185] EXT4-fs warning (device loop4): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 90.536607][ T5295] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 90.601218][ T4185] EXT4-fs warning (device loop4): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 90.667042][ T4185] EXT4-fs warning (device loop4): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 90.710242][ T4185] EXT4-fs warning (device loop4): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 90.724418][ T5316] set_capacity_and_notify: 1 callbacks suppressed [ 90.724431][ T5316] loop2: detected capacity change from 0 to 2048 [ 90.798004][ T5323] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.816771][ T144] bond0: (slave bond_slave_0): interface is now down [ 90.844237][ T4185] EXT4-fs warning (device loop4): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 90.872549][ T144] bond0: (slave bond_slave_1): interface is now down [ 90.912274][ T144] bond0: now running without any active interface! [ 90.943211][ T4185] EXT4-fs warning (device loop4): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 91.013767][ T4185] EXT4-fs warning (device loop4): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 91.111126][ T5334] loop2: detected capacity change from 0 to 256 [ 91.286179][ T5339] netlink: 56 bytes leftover after parsing attributes in process `syz.5.318'. [ 91.746943][ T5362] loop0: detected capacity change from 0 to 2048 [ 91.797137][ T5362] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 91.831218][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.833385][ T5364] netlink: 56 bytes leftover after parsing attributes in process `syz.5.328'. [ 91.865604][ T5362] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 91.891567][ T5362] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 91.901148][ T5364] netlink: 24 bytes leftover after parsing attributes in process `syz.5.328'. [ 91.910646][ T5362] UDF-fs: Scanning with blocksize 512 failed [ 91.921830][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.930293][ T5362] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.032151][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.069773][ T5336] loop1: detected capacity change from 0 to 32768 [ 92.118586][ T25] audit: type=1800 audit(2000000022.839:6): pid=5362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.327" name="file2" dev="loop0" ino=839 res=0 errno=0 [ 92.184464][ T5336] JBD2: Ignoring recovery information on journal [ 92.200235][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.240337][ T5367] loop5: detected capacity change from 0 to 512 [ 92.339848][ T5367] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 92.428297][ T5336] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 92.428949][ T5367] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0102] [ 92.454772][ T5367] EXT4-fs (loop5): orphan cleanup on readonly fs [ 92.470880][ T5367] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #11: comm syz.5.331: attempt to clear invalid blocks 1024 len 1 [ 92.554058][ T5374] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 92.560833][ T5374] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 92.583957][ T5367] EXT4-fs (loop5): Remounting filesystem read-only [ 92.663640][ T5367] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.331: bg 0: block 361: padding at end of block bitmap is not set [ 92.742307][ T5367] EXT4-fs (loop5): Remounting filesystem read-only [ 92.750036][ T5367] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 92.822757][ T5369] chnl_net:caif_netlink_parms(): no params data found [ 92.851496][ T5367] EXT4-fs (loop5): Remounting filesystem read-only [ 92.880482][ T5367] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.331: invalid indirect mapped block 1811939328 (level 0) [ 92.916535][ T5367] EXT4-fs (loop5): Remounting filesystem read-only [ 92.924297][ T5367] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.331: invalid indirect mapped block 2185560079 (level 1) [ 92.941612][ T5367] EXT4-fs (loop5): Remounting filesystem read-only [ 92.949924][ T5367] EXT4-fs (loop5): 1 truncate cleaned up [ 92.978377][ T5367] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,noblock_validity,discard,errors=remount-ro,abort. Quota mode: none. [ 93.067886][ T4186] ocfs2: Unmounting device (7,1) on (node local) [ 93.247124][ T5369] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.254602][ T5369] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.262579][ T5369] device bridge_slave_0 entered promiscuous mode [ 93.358778][ T5406] loop1: detected capacity change from 0 to 128 [ 93.365237][ T5369] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.386452][ T5369] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.432078][ T5369] device bridge_slave_1 entered promiscuous mode [ 93.506582][ T5406] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 93.524524][ T5406] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.551855][ T5369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.653897][ T5369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.779252][ T5369] team0: Port device team_slave_0 added [ 93.823180][ T5426] loop0: detected capacity change from 0 to 4096 [ 93.881178][ T5369] team0: Port device team_slave_1 added [ 93.962360][ T5433] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.962757][ T5426] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 94.022056][ T5369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.053014][ T5369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.101977][ T5426] NILFS (loop0): mounting fs with errors [ 94.134400][ T5369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.205234][ T5369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.227010][ T5369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.295671][ T5422] loop2: detected capacity change from 0 to 32768 [ 94.334889][ T4488] Bluetooth: hci1: command 0x0409 tx timeout [ 94.362001][ T5369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.419237][ T5422] blkno = 8ed2c, nblocks = 1 [ 94.424107][ T5422] ERROR: (device loop2): dbFree: block to be freed is outside the map [ 94.424107][ T5422] [ 94.476988][ T5422] ERROR: (device loop2): remounting filesystem as read-only [ 94.495799][ T5422] ialloc: diAlloc returned -17! [ 94.554674][ T5453] loop5: detected capacity change from 0 to 512 [ 94.573187][ T5422] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 94.573187][ T5422] [ 94.632063][ T5369] device hsr_slave_0 entered promiscuous mode [ 94.639863][ T5455] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 94.664295][ T5369] device hsr_slave_1 entered promiscuous mode [ 94.675766][ T5422] attempt to access beyond end of device [ 94.675766][ T5422] loop2: rw=2049, want=4680040, limit=32768 [ 94.699822][ T5455] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 94.701372][ T5453] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,errors=remount-ro,mb_optimize_scan=0x0000000000000001,delalloc,data_err=ignore,. Quota mode: writeback. [ 94.721079][ T5455] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 94.735184][ T5455] comedi comedi3: 8255: I/O port conflict (0xc9,4) [ 94.773213][ T5453] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.774409][ T5369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.824857][ T5455] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 94.854722][ T5455] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 94.865520][ T5455] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffb,4) [ 94.875258][ T5369] Cannot create hsr debugfs directory [ 94.875697][ T276] blkno = 8ed2c, nblocks = 1 [ 94.884667][ T5455] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 94.924524][ T5455] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 94.931351][ T276] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 94.931351][ T276] [ 94.934467][ T5455] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 94.950250][ T9] device hsr_slave_0 left promiscuous mode [ 94.999128][ T5453] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.358: corrupted inode contents [ 95.009556][ T5455] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 95.018361][ T5455] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 95.026435][ T9] device hsr_slave_1 left promiscuous mode [ 95.033658][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.041699][ T5455] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 95.046540][ T5453] EXT4-fs (loop5): Remounting filesystem read-only [ 95.048919][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.068651][ T5455] comedi comedi3: 8255: I/O port conflict (0x10000002,4) [ 95.075922][ T5453] EXT4-fs error (device loop5): ext4_dirty_inode:6077: inode #2: comm syz.5.358: mark_inode_dirty error [ 95.077688][ T5455] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 95.100410][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.109392][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.124800][ T5453] EXT4-fs (loop5): Remounting filesystem read-only [ 95.131536][ T5453] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.358: corrupted inode contents [ 95.143924][ T9] device bridge_slave_1 left promiscuous mode [ 95.160019][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.177236][ T5453] EXT4-fs (loop5): Remounting filesystem read-only [ 95.199094][ T5453] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.358: mark_inode_dirty error [ 95.210926][ T9] device bridge_slave_0 left promiscuous mode [ 95.225272][ T5453] EXT4-fs (loop5): Remounting filesystem read-only [ 95.234854][ T5473] loop0: detected capacity change from 0 to 1024 [ 95.244799][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.268765][ T9] device veth1_macvtap left promiscuous mode [ 95.274926][ T9] device veth0_macvtap left promiscuous mode [ 95.282177][ T9] device veth1_vlan left promiscuous mode [ 95.291606][ T5473] EXT4-fs (loop0): Ignoring removed oldalloc option [ 95.300416][ T9] device veth0_vlan left promiscuous mode [ 95.428815][ T5473] EXT4-fs (loop0): mounted filesystem without journal. Opts: oldalloc,nodioread_nolock,sb=0x00000000000007ff,bsddf,journal_dev=0x0000000000000005,grpjquota=,noquota,,errors=continue. Quota mode: none. [ 95.567297][ T5473] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.872888][ T5480] loop2: detected capacity change from 0 to 32768 [ 95.940854][ T5480] XFS (loop2): Mounting V5 Filesystem [ 95.992429][ T9] team0 (unregistering): Port device team_slave_1 removed [ 96.015821][ T9] team0 (unregistering): Port device team_slave_0 removed [ 96.035162][ T5483] loop1: detected capacity change from 0 to 32768 [ 96.051186][ T5480] XFS (loop2): Ending clean mount [ 96.057851][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.073979][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.136731][ T4197] XFS (loop2): Unmounting Filesystem [ 96.152367][ T5483] XFS (loop1): Mounting V5 Filesystem [ 96.218662][ T5483] XFS (loop1): Ending clean mount [ 96.272748][ T9] bond0 (unregistering): Released all slaves [ 96.337658][ T4186] XFS (loop1): Unmounting Filesystem [ 96.436206][ T4379] Bluetooth: hci1: command 0x041b tx timeout [ 96.752639][ T5369] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 96.796863][ T5520] bridge0: port 3(syz_tun) entered blocking state [ 96.833925][ T5520] bridge0: port 3(syz_tun) entered disabled state [ 96.854648][ T5523] loop2: detected capacity change from 0 to 512 [ 96.858855][ T5520] device syz_tun entered promiscuous mode [ 96.895494][ T5520] bridge0: port 3(syz_tun) entered blocking state [ 96.902211][ T5520] bridge0: port 3(syz_tun) entered forwarding state [ 96.937236][ T5369] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 96.960816][ T5369] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 96.997706][ T5369] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 97.068828][ T5523] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 97.098072][ T5530] Zero length message leads to an empty skb [ 97.135880][ T5523] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.519956][ T5369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.549535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.595931][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.633457][ T5369] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.670360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.728769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.768679][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.775834][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.875413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.940730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.949478][ T4530] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.006511][ T5565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'. [ 98.025144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.090868][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.098010][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.266405][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.285605][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.303072][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.318267][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.325142][ T4530] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 98.327082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.345922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.365137][ T4530] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 98.391373][ T5369] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.419332][ T4530] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 98.424358][ T5369] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.449623][ T4530] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 98.452518][ T5574] tipc: Started in network mode [ 98.483088][ T5574] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 98.497107][ T5574] tipc: Enabled bearer , priority 0 [ 98.504755][ T4488] Bluetooth: hci1: command 0x040f tx timeout [ 98.523122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.558887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.616435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.637284][ T4530] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 98.655335][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.674584][ T4530] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.701715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.709652][ T4530] usb 2-1: Product: syz [ 98.713815][ T4530] usb 2-1: Manufacturer: syz [ 98.733531][ T4530] usb 2-1: SerialNumber: syz [ 98.736251][ T5582] tipc: Started in network mode [ 98.746734][ T5582] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 98.765888][ T4530] usb 2-1: config 0 descriptor?? [ 98.775048][ T5582] tipc: Enabled bearer , priority 0 [ 98.807962][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.809689][ T4530] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 98.844999][ T5567] loop5: detected capacity change from 0 to 32768 [ 99.024399][ T25] audit: type=1800 audit(2000000029.739:7): pid=5567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.385" name="file1" dev="loop5" ino=7 res=0 errno=0 [ 99.084875][ T4530] scsi host1: usb-storage 2-1:0.0 [ 99.094250][ T4530] usb 2-1: USB disconnect, device number 3 [ 99.373512][ T5369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.440338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.487089][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.528074][ T5610] loop2: detected capacity change from 0 to 256 [ 99.535372][ T4488] tipc: Node number set to 43690 [ 99.600658][ T5610] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 99.772030][ T25] audit: type=1800 audit(2000000030.489:8): pid=5610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.392" name="file1" dev="loop2" ino=1048612 res=0 errno=0 [ 99.793400][ T4488] tipc: Node number set to 43690 [ 99.830720][ T5620] loop1: detected capacity change from 0 to 1024 [ 99.837137][ T4485] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 99.922116][ T5620] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 2: comm syz.1.393: lblock 2 mapped to illegal pblock 2 (length 1) [ 99.953199][ T5620] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 99.961405][ T5620] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 48: comm syz.1.393: lblock 0 mapped to illegal pblock 48 (length 1) [ 100.004740][ T5620] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 100.017607][ T5620] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.393: Failed to acquire dquot type 0 [ 100.071783][ T5620] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 100.101284][ T5628] loop2: detected capacity change from 0 to 2048 [ 100.114548][ T4485] usb 6-1: Using ep0 maxpacket: 32 [ 100.119955][ T5620] EXT4-fs error (device loop1): ext4_evict_inode:284: inode #11: comm syz.1.393: mark_inode_dirty error [ 100.145566][ T5600] loop0: detected capacity change from 0 to 32768 [ 100.182456][ T5620] EXT4-fs warning (device loop1): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 100.198791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.211307][ T5620] EXT4-fs (loop1): 1 orphan inode deleted [ 100.211912][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.217579][ T5620] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000008001,noblock_validity,nolazytime,max_batch_time=0x0000000000000007,nodiscard,nouid32,noauto_da_alloc,,errors=continue. Quota mode: none. [ 100.255060][ T4485] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 100.256073][ T5628] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.263140][ T4485] usb 6-1: config 0 has no interface number 0 [ 100.274344][ T5369] device veth0_vlan entered promiscuous mode [ 100.280573][ T4373] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 100.292802][ T5369] device veth1_vlan entered promiscuous mode [ 100.323927][ T5369] device veth0_macvtap entered promiscuous mode [ 100.335047][ T5369] device veth1_macvtap entered promiscuous mode [ 100.344875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.388475][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.412818][ T4373] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 100.444643][ T4485] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 100.453686][ T4485] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.462854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.472303][ T4373] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:6: Failed to release dquot type 0 [ 100.483776][ T25] audit: type=1800 audit(2000000031.189:9): pid=5628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.394" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 100.492886][ T5628] EXT4-fs (loop2): Online defrag not supported with bigalloc [ 100.515205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.530114][ T4485] usb 6-1: Product: syz [ 100.535207][ T4485] usb 6-1: Manufacturer: syz [ 100.536659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.542070][ T4485] usb 6-1: SerialNumber: syz [ 100.571892][ T4485] usb 6-1: config 0 descriptor?? [ 100.594780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.608157][ T4488] Bluetooth: hci1: command 0x0419 tx timeout [ 100.620928][ T5588] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 100.645886][ T4485] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 100.651629][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.692964][ T5588] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 100.702301][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.719803][ T5588] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:8: Failed to release dquot type 0 [ 100.741961][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.755252][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.765781][ T4186] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 100.820813][ T5369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.854507][ T4186] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 100.873839][ T5646] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.399'. [ 100.889906][ T4485] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 100.903852][ T4186] EXT4-fs error (device loop1): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 100.919925][ T5369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.922825][ T4485] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 100.971450][ T5369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.013101][ T5646] netlink: zone id is out of range [ 101.018766][ T5369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.059017][ T5646] netlink: zone id is out of range [ 101.064145][ T5646] netlink: zone id is out of range [ 101.091967][ T5646] netlink: zone id is out of range [ 101.106460][ T5646] netlink: zone id is out of range [ 101.109262][ T5369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.111928][ T5646] netlink: zone id is out of range [ 101.177700][ T5369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.208089][ T5646] netlink: zone id is out of range [ 101.217253][ T5369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.221988][ T5646] netlink: zone id is out of range [ 101.233819][ T5646] netlink: zone id is out of range [ 101.242653][ T5646] netlink: zone id is out of range [ 101.247910][ T5369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.259724][ T5369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.272520][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.291137][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.351295][ T5369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.404369][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 101.408182][ T5369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.434672][ T1107] usb 6-1: USB disconnect, device number 3 [ 101.463705][ T5369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.484559][ T1107] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 101.492427][ T5369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.544420][ T5369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.558016][ T1107] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 101.571145][ T5369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.612450][ T1107] quatech2 6-1:0.51: device disconnected [ 101.633244][ T5369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.659742][ T5369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.670945][ T5369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.685165][ T5369] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.693896][ T5369] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.702787][ T5369] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.712288][ T5369] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.752155][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.823304][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.001995][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.054612][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.089670][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.117130][ T4373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.133332][ T5659] loop2: detected capacity change from 0 to 32768 [ 102.140662][ T4373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.159744][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.298626][ T5688] loop6: detected capacity change from 0 to 512 [ 102.313628][ T5659] XFS (loop2): Mounting V5 Filesystem [ 102.350056][ T5664] loop0: detected capacity change from 0 to 32768 [ 102.371856][ T5688] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 102.383250][ T5688] EXT4-fs (loop6): invalid journal inode [ 102.468740][ T5664] XFS (loop0): Mounting V5 Filesystem [ 102.529276][ T5659] XFS (loop2): Ending clean mount [ 102.617904][ T5664] XFS (loop0): Ending clean mount [ 102.645817][ T5659] XFS (loop2): Quotacheck needed: Please wait. [ 102.781593][ T5659] XFS (loop2): Quotacheck: Done. [ 102.859353][ T5659] XFS (loop2): User initiated shutdown received. [ 102.866032][ T4191] XFS (loop0): Unmounting Filesystem [ 102.878224][ T5659] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 102.989845][ T5659] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 103.112822][ T5729] loop5: detected capacity change from 0 to 2048 [ 103.124776][ T4197] XFS (loop2): Unmounting Filesystem [ 103.173294][ T5729] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 103.241300][ T5729] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 103.291482][ T5729] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 103.315528][ T5729] UDF-fs: Scanning with blocksize 512 failed [ 103.348942][ T5729] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.547025][ T25] audit: type=1800 audit(2000000034.269:10): pid=5729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.408" name="file2" dev="loop5" ino=839 res=0 errno=0 [ 103.657496][ T5743] bond0: option arp_interval: invalid value ( ) [ 103.664118][ T5743] bond0: option arp_interval: allowed values 0 - 2147483647 [ 103.707625][ T5746] loop6: detected capacity change from 0 to 512 [ 103.859522][ T5746] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 103.875120][ T5746] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.979795][ T5721] loop1: detected capacity change from 0 to 40427 [ 104.035730][ T5721] F2FS-fs (loop1): invalid crc value [ 104.135530][ T5721] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 104.168604][ T5769] loop2: detected capacity change from 0 to 1024 [ 104.321278][ T5768] loop0: detected capacity change from 0 to 8192 [ 104.442374][ T5769] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,data_err=ignore,init_itable,quota,abort,,errors=continue. Quota mode: writeback. [ 104.460722][ T5768] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 104.488952][ T5768] REISERFS (device loop0): using ordered data mode [ 104.508563][ T5749] loop5: detected capacity change from 0 to 40427 [ 104.536631][ T5768] reiserfs: using flush barriers [ 104.549400][ T5768] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 104.552994][ T5721] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 104.567848][ T5768] REISERFS (device loop0): checking transaction log (loop0) [ 104.600631][ T5749] F2FS-fs (loop5): invalid crc value [ 104.640823][ T5721] attempt to access beyond end of device [ 104.640823][ T5721] loop1: rw=2049, want=45104, limit=40427 [ 104.713127][ T5749] F2FS-fs (loop5): Found nat_bits in checkpoint [ 104.852257][ T4186] attempt to access beyond end of device [ 104.852257][ T4186] loop1: rw=2049, want=45112, limit=40427 [ 104.971156][ T5768] REISERFS (device loop0): Using tea hash to sort names [ 104.976057][ T5792] loop6: detected capacity change from 0 to 256 [ 104.994490][ T5749] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 105.025178][ T5768] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 105.082115][ T5792] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99e017bc, utbl_chksum : 0xe619d30d) [ 105.324058][ T4735] attempt to access beyond end of device [ 105.324058][ T4735] loop5: rw=2049, want=45104, limit=40427 [ 105.381214][ T5800] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 105.413096][ T5800] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 105.464867][ T5800] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 105.472519][ T5800] UDF-fs: Scanning with blocksize 512 failed [ 105.543441][ T5800] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.656985][ T25] audit: type=1800 audit(2000000036.379:11): pid=5800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.426" name="file2" dev="loop2" ino=839 res=0 errno=0 [ 105.864828][ T4485] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 106.043565][ T5821] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 106.144553][ T4485] usb 7-1: Using ep0 maxpacket: 32 [ 106.305961][ T4485] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 106.315479][ T4485] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.325329][ T4485] usb 7-1: config 0 descriptor?? [ 106.450658][ T5839] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.517187][ T5839] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.594514][ T4485] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 106.732570][ T4485] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 106.815019][ T4485] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 106.822445][ T4485] usb 7-1: media controller created [ 107.013428][ T4485] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.308881][ T4379] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 107.424512][ T4485] az6027: usb out operation failed. (-71) [ 107.430772][ T4485] stb0899_attach: Driver disabled by Kconfig [ 107.432972][ T5855] set_capacity_and_notify: 3 callbacks suppressed [ 107.432983][ T5855] loop1: detected capacity change from 0 to 131072 [ 107.456081][ T5855] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 107.462772][ T5855] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 107.472267][ T5855] F2FS-fs (loop1): invalid crc value [ 107.479265][ T4485] az6027: no front-end attached [ 107.479265][ T4485] [ 107.509120][ T5855] F2FS-fs (loop1): Found nat_bits in checkpoint [ 107.511129][ T5863] loop2: detected capacity change from 0 to 32768 [ 107.551413][ T4485] az6027: usb out operation failed. (-71) [ 107.571314][ T5855] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 107.578490][ T5855] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 107.594765][ T4485] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 107.631016][ T5863] JBD2: Ignoring recovery information on journal [ 107.660811][ T4485] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input6 [ 107.734617][ T4485] dvb-usb: schedule remote query interval to 400 msecs. [ 107.741590][ T4485] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 107.754729][ T4379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 107.772493][ T5863] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 107.785335][ T4379] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 107.814501][ T4379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 107.842525][ T4379] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 107.859638][ T4485] usb 7-1: USB disconnect, device number 2 [ 107.966290][ T4485] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 108.034869][ T4379] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 108.043948][ T4379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.065633][ T4379] usb 1-1: Product: syz [ 108.069809][ T4379] usb 1-1: Manufacturer: syz [ 108.075070][ T4379] usb 1-1: SerialNumber: syz [ 108.090151][ T4379] usb 1-1: config 0 descriptor?? [ 108.135375][ T4379] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 108.280601][ T4197] ocfs2: Unmounting device (7,2) on (node local) [ 108.343267][ T5889] loop5: detected capacity change from 0 to 32768 [ 108.393548][ T4379] scsi host1: usb-storage 1-1:0.0 [ 108.422206][ T4379] usb 1-1: USB disconnect, device number 7 [ 108.428129][ T4485] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 108.552239][ T5889] XFS (loop5): Mounting V5 Filesystem [ 108.650314][ T5889] XFS (loop5): Ending clean mount [ 108.685581][ T25] audit: type=1800 audit(2000000039.409:12): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.446" name="file1" dev="loop5" ino=6150 res=0 errno=0 [ 108.765251][ T4735] XFS (loop5): Unmounting Filesystem [ 108.917372][ T4485] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.962504][ T4485] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.015180][ T5929] netlink: 72 bytes leftover after parsing attributes in process `syz.2.453'. [ 109.026481][ T4485] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 109.054790][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.453'. [ 109.066195][ T4485] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.077581][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.453'. [ 109.115103][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.453'. [ 109.278128][ T5938] loop0: detected capacity change from 0 to 1024 [ 109.346824][ T4485] usb 7-1: GET_CAPABILITIES returned 0 [ 109.352500][ T5938] EXT4-fs (loop0): Ignoring removed orlov option [ 109.369632][ T4485] usbtmc 7-1:16.0: can't read capabilities [ 109.432907][ T5938] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,minixdf,norecovery,,errors=continue. Quota mode: none. [ 109.515641][ T5924] loop1: detected capacity change from 0 to 32768 [ 109.577254][ T5950] loop2: detected capacity change from 0 to 4096 [ 109.583647][ T5152] usb 7-1: USB disconnect, device number 3 [ 109.589102][ T5924] (syz.1.452,5924,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 109.634493][ T5924] (syz.1.452,5924,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 109.655654][ T5950] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 109.793122][ T5950] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 109.798914][ T5924] JBD2: Ignoring recovery information on journal [ 109.899710][ T5924] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 109.970170][ T5950] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 109.980140][ T5924] (syz.1.452,5924,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 110.003270][ T5950] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 110.029795][ T5950] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 110.093288][ T5950] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 110.184507][ T5950] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 110.193236][ T5950] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 110.225297][ T4186] ocfs2: Unmounting device (7,1) on (node local) [ 110.336040][ T5950] ntfs: volume version 3.1. [ 110.799449][ T5967] loop6: detected capacity change from 0 to 40427 [ 110.806053][ T4485] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 110.834121][ T5964] loop0: detected capacity change from 0 to 32768 [ 110.872148][ T5967] F2FS-fs (loop6): invalid crc value [ 110.913720][ T5964] XFS (loop0): Mounting V5 Filesystem [ 110.936241][ T5967] F2FS-fs (loop6): Found nat_bits in checkpoint [ 111.039783][ T5964] XFS (loop0): Ending clean mount [ 111.047190][ T5964] XFS (loop0): Quotacheck needed: Please wait. [ 111.091252][ T5967] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 111.111528][ T5964] XFS (loop0): Quotacheck: Done. [ 111.194654][ T4485] usb 2-1: config 0 has no interfaces? [ 111.200200][ T4485] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 111.219637][ T4485] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.232256][ T4191] XFS (loop0): Unmounting Filesystem [ 111.232985][ T4485] usb 2-1: config 0 descriptor?? [ 111.276213][ T5369] attempt to access beyond end of device [ 111.276213][ T5369] loop6: rw=2049, want=45104, limit=40427 [ 111.520561][ T4485] usb 2-1: USB disconnect, device number 4 [ 111.585783][ T4486] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 111.746000][ T5152] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 111.953545][ T6040] loop0: detected capacity change from 0 to 1024 [ 112.027767][ T4486] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.038735][ T4486] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.057618][ T4486] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 112.082613][ T4486] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.312789][ T5152] usb 6-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 112.327914][ T5152] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.341067][ T5152] usb 6-1: Product: syz [ 112.346539][ T5152] usb 6-1: Manufacturer: syz [ 112.353552][ T5152] usb 6-1: SerialNumber: syz [ 112.387494][ T4486] usb 3-1: GET_CAPABILITIES returned 0 [ 112.392993][ T4486] usbtmc 3-1:16.0: can't read capabilities [ 112.611361][ T6052] loop0: detected capacity change from 0 to 32768 [ 112.644021][ T6006] usb 3-1: usbtmc_ioctl_clear_in_halt returned -32 [ 112.664518][ T25] kauditd_printk_skb: 13 callbacks suppressed [ 112.664529][ T25] audit: type=1800 audit(2000000043.300:13): pid=6052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.475" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 112.667014][ T4486] usb 3-1: USB disconnect, device number 5 [ 112.718887][ T5152] usb 6-1: Found UVC 0.00 device syz (093a:2476) [ 112.726556][ T5152] usb 6-1: No valid video chain found. [ 112.736392][ T5152] gspca_main: pac207-2.14.0 probing 093a:2476 [ 112.763348][ T5152] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 112.767588][ T6057] loop1: detected capacity change from 0 to 32768 [ 112.776975][ T5152] usb 6-1: USB disconnect, device number 4 [ 112.820252][ T6057] XFS (loop1): Mounting V5 Filesystem [ 112.919610][ T6057] XFS (loop1): Ending clean mount [ 112.935821][ T6057] XFS (loop1): Quotacheck needed: Please wait. [ 112.974859][ T6057] XFS (loop1): Quotacheck: Done. [ 113.028994][ T4186] XFS (loop1): Unmounting Filesystem [ 113.051904][ T6071] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 113.336439][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.483'. [ 113.614586][ T6085] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 113.780997][ T6090] loop2: detected capacity change from 0 to 1024 [ 113.872953][ T6092] loop0: detected capacity change from 0 to 1024 [ 113.903930][ T6074] loop6: detected capacity change from 0 to 32768 [ 113.920520][ T6076] loop5: detected capacity change from 0 to 32768 [ 114.066474][ T6092] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,grpquota,journal_ioprio=0x0000000000000002,block_validity,nodioread_nolock,nodelalloc,resuid=0x0000000000000000,inode_readahead_blks=0x0000000000200000,,errors=continue. Quota mode: writeback. [ 114.087171][ T6074] blkno = 8ed2c, nblocks = 1 [ 114.098448][ T6092] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.130626][ T6080] loop1: detected capacity change from 0 to 40427 [ 114.162333][ T6092] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: comm syz.0.488: lblock 0 mapped to illegal pblock 0 (length 1) [ 114.163238][ T6074] ERROR: (device loop6): dbFree: block to be freed is outside the map [ 114.163238][ T6074] [ 114.188303][ T6074] ERROR: (device loop6): remounting filesystem as read-only [ 114.198301][ T6074] ialloc: diAlloc returned -17! [ 114.209501][ T6092] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: comm syz.0.488: lblock 0 mapped to illegal pblock 0 (length 1) [ 114.240794][ T6080] F2FS-fs (loop1): invalid crc value [ 114.258570][ T6074] ERROR: (device loop6): dbAlloc: the hint is outside the map [ 114.258570][ T6074] [ 114.265896][ T6092] EXT4-fs error (device loop0): ext4_ext_remove_space:2944: inode #15: comm syz.0.488: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 114.268552][ T6074] attempt to access beyond end of device [ 114.268552][ T6074] loop6: rw=2049, want=4680040, limit=32768 [ 114.312560][ T6080] F2FS-fs (loop1): Found nat_bits in checkpoint [ 114.408676][ T277] blkno = 8ed2c, nblocks = 1 [ 114.413483][ T277] ERROR: (device loop6): dbUpdatePMap: blocks are outside the map [ 114.413483][ T277] [ 114.498074][ T6080] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 114.665786][ T4186] attempt to access beyond end of device [ 114.665786][ T4186] loop1: rw=2049, want=45104, limit=40427 [ 114.943418][ T6098] loop2: detected capacity change from 0 to 32768 [ 115.195931][ T6119] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.497'. [ 115.252097][ T6121] loop5: detected capacity change from 0 to 1024 [ 115.419569][ T6125] loop0: detected capacity change from 0 to 512 [ 115.522547][ T6125] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 115.626367][ T6125] EXT4-fs (loop0): mounted filesystem without journal. Opts: nomblk_io_submit,quota,quota,stripe=0x0000000000000003,i_version,,errors=continue. Quota mode: writeback. [ 115.658747][ T6125] ext4 filesystem being mounted at /115/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.311641][ T6154] program syz.0.511 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.508200][ T6136] blkno = 8ed2c, nblocks = 1 [ 116.512834][ T6136] ERROR: (device loop1): dbFree: block to be freed is outside the map [ 116.512834][ T6136] [ 116.557399][ T6136] ERROR: (device loop1): remounting filesystem as read-only [ 116.564713][ T6136] ialloc: diAlloc returned -17! [ 116.596037][ T6136] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 116.596037][ T6136] [ 116.617571][ T6136] attempt to access beyond end of device [ 116.617571][ T6136] loop1: rw=2049, want=4680040, limit=32768 [ 116.680684][ T6134] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 116.685045][ T5152] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 116.714555][ T6134] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 116.755158][ T6134] F2FS-fs (loop5): invalid crc value [ 116.801175][ T6161] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 116.814676][ T6134] F2FS-fs (loop5): Found nat_bits in checkpoint [ 116.846154][ T6161] ntfs3: loop2: Failed to load $Extend. [ 116.897743][ T6134] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 116.925724][ T6134] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 116.973562][ T5152] usb 7-1: Using ep0 maxpacket: 16 [ 116.980935][ T25] audit: type=1800 audit(2000000047.340:14): pid=6134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.502" name="file1" dev="loop5" ino=455 res=0 errno=0 [ 117.131789][ T277] blkno = 8ed2c, nblocks = 1 [ 117.136719][ T5152] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.148531][ T277] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 117.148531][ T277] [ 117.152654][ T9] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 117.162293][ T5152] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.180497][ T5152] usb 7-1: config 0 interface 0 has no altsetting 0 [ 117.187135][ T5152] usb 7-1: New USB device found, idVendor=056a, idProduct=08b1, bcdDevice= 0.00 [ 117.196735][ T5152] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.233689][ T9] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 117.244349][ T5152] usb 7-1: config 0 descriptor?? [ 117.331526][ T6173] netlink: 56 bytes leftover after parsing attributes in process `syz.2.519'. [ 117.636447][ T5152] usbhid 7-1:0.0: can't add hid device: -71 [ 117.677843][ T5152] usbhid: probe of 7-1:0.0 failed with error -71 [ 117.720791][ T5152] usb 7-1: USB disconnect, device number 4 [ 117.837647][ T6191] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 117.875158][ T6191] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 117.893362][ T6191] System zones: 1-12 [ 117.917442][ T6191] EXT4-fs (loop1): 1 truncate cleaned up [ 117.923467][ T6191] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 118.119856][ T6202] set_capacity_and_notify: 4 callbacks suppressed [ 118.119871][ T6202] loop2: detected capacity change from 0 to 1024 [ 118.209153][ T6205] netem: change failed [ 118.296278][ T6202] FS-Cache: Cache "CacheFiles" added (type cachefiles) [ 118.316471][ T6208] loop5: detected capacity change from 0 to 4096 [ 118.328075][ T6202] CacheFiles: File cache on loop2 registered [ 118.346570][ T6200] CacheFiles: File cache on loop2 unregistering [ 118.355714][ T6200] FS-Cache: Withdrawing cache "CacheFiles" [ 118.450028][ T6213] loop0: detected capacity change from 0 to 512 [ 118.651962][ T6215] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.928360][ T6233] loop0: detected capacity change from 0 to 256 [ 119.011002][ T6233] exfat: Deprecated parameter 'utf8' [ 119.068588][ T6233] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 119.295508][ T25] audit: type=1400 audit(2000000049.501:15): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name=":" pid=6241 comm="syz.6.542" name=":" offset=33 [ 119.385341][ T6242] loop1: detected capacity change from 0 to 4096 [ 119.450002][ T6247] loop6: detected capacity change from 0 to 1024 [ 119.457229][ T6242] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 119.529958][ T6247] FS-Cache: Cache "CacheFiles" added (type cachefiles) [ 119.560689][ T6247] CacheFiles: File cache on loop6 registered [ 119.589469][ T6246] CacheFiles: File cache on loop6 unregistering [ 119.624821][ T6246] FS-Cache: Withdrawing cache "CacheFiles" [ 119.680801][ T4488] Bluetooth: hci1: command 0x0c24 tx timeout [ 119.743887][ T6228] loop2: detected capacity change from 0 to 32768 [ 119.788001][ T6258] loop6: detected capacity change from 0 to 512 [ 119.853607][ T6228] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.538 (6228) [ 119.906432][ T6258] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 119.933688][ T6264] ieee802154 phy0 wpan0: encryption failed: -22 [ 119.937421][ T6228] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 119.956431][ T6258] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 119.991809][ T6228] BTRFS info (device loop2): force clearing of disk cache [ 119.999364][ T6228] BTRFS info (device loop2): metadata ratio 0 [ 120.008713][ T6228] BTRFS info (device loop2): enabling ssd optimizations [ 120.016728][ T6228] BTRFS info (device loop2): using spread ssd allocation scheme [ 120.024663][ T6228] BTRFS info (device loop2): using free space tree [ 120.031532][ T6228] BTRFS info (device loop2): has skinny extents [ 120.038168][ T6258] System zones: 1-12 [ 120.045525][ T6258] EXT4-fs (loop6): 1 truncate cleaned up [ 120.051688][ T6258] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 120.182317][ T6228] BTRFS info (device loop2): clearing free space tree [ 120.200093][ T6228] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 120.223539][ T6228] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 120.309686][ T6228] BTRFS info (device loop2): creating free space tree [ 120.329004][ T6228] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 120.339632][ T6228] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 120.379887][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.566'. [ 120.398663][ T6297] loop5: detected capacity change from 0 to 256 [ 120.420787][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.566'. [ 120.569816][ T6297] exfat: Deprecated parameter 'utf8' [ 120.621542][ T6297] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 120.805635][ T6302] loop1: detected capacity change from 0 to 1024 [ 120.925757][ T6302] FS-Cache: Cache "CacheFiles" added (type cachefiles) [ 120.948735][ T6302] CacheFiles: File cache on loop1 registered [ 121.009102][ T6301] CacheFiles: File cache on loop1 unregistering [ 121.019861][ T6301] FS-Cache: Withdrawing cache "CacheFiles" [ 121.755530][ T6320] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 121.856721][ T6320] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 122.015688][ T6320] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 122.041378][ T6320] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 122.117428][ T6320] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 122.149822][ T6320] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 122.170221][ T6320] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 122.179480][ T6320] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 122.200369][ T6320] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 122.239650][ T6320] ntfs: volume version 3.1. [ 122.440845][ T6342] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 122.538959][ T6342] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 122.590606][ T6342] System zones: 1-12 [ 122.647535][ T6342] EXT4-fs (loop2): 1 truncate cleaned up [ 122.669893][ T6342] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 122.949799][ T4231] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 123.345494][ T4231] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.388489][ T4231] usb 7-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.00 [ 123.398246][ T4231] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.430723][ T6353] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.573 (6353) [ 123.478585][ T4231] usb 7-1: config 0 descriptor?? [ 123.483696][ T6353] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 123.500432][ T6353] BTRFS info (device loop1): force clearing of disk cache [ 123.551501][ T4231] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input7 [ 123.552134][ T6353] BTRFS info (device loop1): metadata ratio 0 [ 123.640061][ T6353] BTRFS info (device loop1): enabling ssd optimizations [ 123.652014][ T6393] set_capacity_and_notify: 4 callbacks suppressed [ 123.652028][ T6393] loop2: detected capacity change from 0 to 1024 [ 123.675823][ T6353] BTRFS info (device loop1): using spread ssd allocation scheme [ 123.707502][ T6353] BTRFS info (device loop1): using free space tree [ 123.732527][ T6353] BTRFS info (device loop1): has skinny extents [ 123.775226][ T3543] bcm5974 7-1:0.0: could not read from device [ 123.794372][ T4231] bcm5974 7-1:0.0: could not read from device [ 123.846475][ T6393] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,grpquota,journal_ioprio=0x0000000000000002,block_validity,nodioread_nolock,nodelalloc,resuid=0x0000000000000000,inode_readahead_blks=0x0000000000200000,,errors=continue. Quota mode: writeback. [ 123.873442][ T3543] bcm5974 7-1:0.0: could not read from device [ 123.902675][ T4231] input: failed to attach handler mousedev to device input7, error: -5 [ 123.948561][ T6393] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.951932][ T4231] usb 7-1: USB disconnect, device number 5 [ 123.965429][ T3543] bcm5974 7-1:0.0: could not read from device [ 123.980920][ T6390] loop0: detected capacity change from 0 to 32768 [ 124.049442][ T6393] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: comm syz.2.585: lblock 0 mapped to illegal pblock 0 (length 1) [ 124.070722][ T6353] BTRFS info (device loop1): clearing free space tree [ 124.094128][ T6353] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 124.104635][ T6353] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 124.107508][ T6427] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 124.128434][ T6393] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: comm syz.2.585: lblock 0 mapped to illegal pblock 0 (length 1) [ 124.183911][ T6390] XFS (loop0): Mounting V5 Filesystem [ 124.192259][ T6393] EXT4-fs error (device loop2): ext4_ext_remove_space:2944: inode #15: comm syz.2.585: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 124.210743][ T6353] BTRFS info (device loop1): creating free space tree [ 124.224357][ T6353] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 124.270910][ T6353] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 124.302562][ T6390] XFS (loop0): Ending clean mount [ 124.349483][ T6390] XFS (loop0): Quotacheck needed: Please wait. [ 124.537947][ T4379] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 124.596624][ T6390] XFS (loop0): Quotacheck: Done. [ 124.682926][ T4191] XFS (loop0): Unmounting Filesystem [ 124.893838][ T6449] loop2: detected capacity change from 0 to 4096 [ 124.915979][ T6451] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 125.006334][ T4379] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 125.021083][ T6449] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 125.055630][ T4379] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 125.067130][ T6449] NILFS (loop2): mounting unchecked fs [ 125.095925][ T4379] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 125.136561][ T6449] NILFS (loop2): recovery complete [ 125.138476][ T5176] udevd[5176]: incorrect nilfs2 checksum on /dev/loop2 [ 125.147591][ T4379] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 125.178682][ T6456] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.196435][ T4379] usb 6-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 125.232047][ T4379] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.301912][ T6433] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 125.309300][ T6433] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 125.333523][ T6443] loop6: detected capacity change from 0 to 32768 [ 125.334239][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 125.363238][ T4379] pl2303 6-1:1.0: pl2303 converter detected [ 125.384056][ T4379] usb 6-1: pl2303 converter now attached to ttyUSB0 [ 125.409007][ T6443] (syz.6.594,6443,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 125.463402][ T6443] (syz.6.594,6443,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 125.491002][ T6460] net_ratelimit: 110 callbacks suppressed [ 125.491012][ T6460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.514401][ T6443] JBD2: Ignoring recovery information on journal [ 125.596186][ T6443] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 125.625333][ T6443] (syz.6.594,6443,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 125.642785][ T6462] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 125.679722][ T6462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.750653][ T6433] pl2303 6-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 125.755446][ T6476] netlink: 'syz.2.601': attribute type 3 has an invalid length. [ 125.804109][ T6433] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 125.841589][ T6433] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 125.854439][ T5369] ocfs2: Unmounting device (7,6) on (node local) [ 125.894538][ T6433] pl2303 6-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 125.917647][ T6433] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 125.973515][ T21] usb 6-1: USB disconnect, device number 5 [ 126.044742][ T6453] loop1: detected capacity change from 0 to 32768 [ 126.056606][ T21] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 126.127079][ T21] pl2303 6-1:1.0: device disconnected [ 126.284047][ T6453] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 126.303272][ T6491] loop6: detected capacity change from 0 to 1024 [ 126.327860][ T25] kauditd_printk_skb: 12 callbacks suppressed [ 126.327872][ T25] audit: type=1800 audit(2000000056.077:16): pid=6453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.599" name="file1" dev="loop1" ino=17059 res=0 errno=0 [ 126.455464][ T6497] loop0: detected capacity change from 0 to 128 [ 126.482401][ T6491] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier,nodioread_nolock,grpquota,journal_ioprio=0x0000000000000002,block_validity,nodioread_nolock,nodelalloc,resuid=0x0000000000000000,inode_readahead_blks=0x0000000000200000,,errors=continue. Quota mode: writeback. [ 126.513364][ T4186] ocfs2: Unmounting device (7,1) on (node local) [ 126.669815][ T6497] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 126.758745][ T6491] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.915847][ T6350] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 126.936276][ T6497] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.258387][ T6512] tap0: tun_chr_ioctl cmd 2147767520 [ 127.728166][ T6538] loop1: detected capacity change from 0 to 1024 [ 127.985745][ T6538] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,grpquota,journal_ioprio=0x0000000000000002,block_validity,nodioread_nolock,nodelalloc,resuid=0x0000000000000000,inode_readahead_blks=0x0000000000200000,,errors=continue. Quota mode: writeback. [ 128.115901][ T6538] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.116768][ T6559] loop0: detected capacity change from 0 to 512 [ 128.149681][ T6538] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: comm syz.1.621: lblock 0 mapped to illegal pblock 0 (length 1) [ 128.206779][ T6538] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.621: lblock 0 mapped to illegal pblock 0 (length 1) [ 128.238248][ T6525] loop2: detected capacity change from 0 to 32768 [ 128.248004][ T6538] EXT4-fs error (device loop1): ext4_ext_remove_space:2944: inode #15: comm syz.1.621: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 128.271081][ T6559] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 128.364192][ T6559] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.379267][ T6525] (syz.2.613,6525,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 128.402109][ T6574] scsi_strcpy_devinfo: model string '¡w|a•¥ä‹Áæu“‘¤NÀÓ¤1žœópEwõ‰zdz' is too long [ 128.421202][ T6525] (syz.2.613,6525,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 128.430238][ T6559] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.638: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 128.540600][ T6579] syz.1.630 uses obsolete (PF_INET,SOCK_PACKET) [ 128.602025][ T6561] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.627 (6561) [ 128.602483][ T6525] JBD2: Ignoring recovery information on journal [ 128.750652][ T6525] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 128.776065][ T6561] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 128.819020][ T6561] BTRFS info (device loop5): metadata ratio 0 [ 128.825124][ T6561] BTRFS info (device loop5): turning on sync discard [ 128.840757][ T6559] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 12: comm syz.0.638: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 128.855200][ T6525] (syz.2.613,6525,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 128.906466][ T6588] MTRR 1 not used [ 128.913835][ T6561] BTRFS info (device loop5): using free space tree [ 128.946478][ T5150] logitech-hidpp-device 0003:046D:C082.0004: Device not connected [ 128.955367][ T6561] BTRFS info (device loop5): has skinny extents [ 128.963916][ T6559] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 13: comm syz.0.638: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 129.162262][ T4197] ocfs2: Unmounting device (7,2) on (node local) [ 129.351387][ T6620] set_capacity_and_notify: 1 callbacks suppressed [ 129.351402][ T6620] loop0: detected capacity change from 0 to 256 [ 129.426592][ T6620] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 129.551357][ T6561] BTRFS info (device loop5): enabling ssd optimizations [ 129.669384][ T25] audit: type=1800 audit(2000000059.211:17): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.627" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 129.748350][ T6561] BTRFS error (device loop5): unable to set label with more than 255 bytes [ 129.915422][ T6658] loop1: detected capacity change from 0 to 1024 [ 130.047537][ T6661] loop2: detected capacity change from 0 to 512 [ 130.277330][ T6661] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.652: inode has both inline data and extents flags [ 130.316051][ T6661] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.652: couldn't read orphan inode 15 (err -117) [ 130.422046][ T6661] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.475652][ T6656] loop0: detected capacity change from 0 to 32768 [ 130.579016][ T6656] JBD2: Ignoring recovery information on journal [ 130.674046][ T25] audit: type=1400 audit(2000000060.146:18): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6675 comm="syz.2.655" name="p" offset=43 [ 130.678679][ T6656] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 130.717942][ T6669] loop1: detected capacity change from 0 to 8192 [ 130.797395][ T6656] JBD2: bad block at offset 32 [ 130.857020][ T6669] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 130.891249][ T6666] loop5: detected capacity change from 0 to 32768 [ 130.904860][ T6656] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 130.909310][ T6669] REISERFS (device loop1): using ordered data mode [ 130.924908][ T6669] reiserfs: using flush barriers [ 130.938266][ T6669] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 130.968872][ T6669] REISERFS (device loop1): checking transaction log (loop1) [ 131.030364][ T6656] (syz.0.650,6656,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=3344, inode=0, rec_len=0, name_len=0 [ 131.058865][ T5153] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 131.076934][ T6666] (syz.5.651,6666,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 131.170803][ T6666] (syz.5.651,6666,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 131.255249][ T6669] REISERFS (device loop1): Using tea hash to sort names [ 131.277509][ T6666] JBD2: Ignoring recovery information on journal [ 131.282104][ T4191] ocfs2: Unmounting device (7,0) on (node local) [ 131.302603][ T6669] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 131.316608][ T6669] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 131.361749][ T6666] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 131.400018][ T6666] (syz.5.651,6666,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 131.510887][ T6669] REISERFS error (device loop1): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 131.576985][ T5153] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 131.584657][ T5153] usb 7-1: can't read configurations, error -71 [ 131.595140][ T6669] REISERFS (device loop1): Remounting filesystem read-only [ 131.662087][ T4735] ocfs2: Unmounting device (7,5) on (node local) [ 132.343743][ T6745] program syz.1.674 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.699572][ T4234] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 132.732237][ T6737] loop5: detected capacity change from 0 to 32768 [ 132.782600][ T6765] loop1: detected capacity change from 0 to 512 [ 132.802228][ T6737] JBD2: Ignoring recovery information on journal [ 132.816363][ T6737] jbd2_journal_bmap: journal block not found at offset 32 on loop5-75 [ 132.833451][ T6737] JBD2: bad block at offset 32 [ 132.841572][ T6768] loop6: detected capacity change from 0 to 256 [ 132.864620][ T6737] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 132.878431][ T6765] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,errors=continue,acl,,errors=continue. Quota mode: none. [ 132.882893][ T6768] exfat: Deprecated parameter 'utf8' [ 132.897548][ T6768] exfat: Deprecated parameter 'utf8' [ 132.903471][ T6768] exfat: Deprecated parameter 'utf8' [ 132.930816][ T6768] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 132.956088][ T6765] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #2: block 3: comm syz.1.682: lblock 0 mapped to illegal pblock 3 (length 1) [ 132.997238][ T6765] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.682: error -117 reading directory block [ 133.020558][ T4735] ocfs2: Unmounting device (7,5) on (node local) [ 133.026764][ T6768] process 'syz.6.683' launched '/dev/fd/4' with NULL argv: empty string added [ 133.058519][ T6775] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #2: block 3: comm syz.1.682: lblock 0 mapped to illegal pblock 3 (length 1) [ 133.118094][ T6775] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.682: error -117 reading directory block [ 133.148592][ T4234] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 133.156688][ T4234] usb 3-1: config 0 has no interface number 0 [ 133.189750][ T4234] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.308138][ T6783] loop1: detected capacity change from 0 to 128 [ 133.342382][ T25] audit: type=1800 audit(2000000062.644:19): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.688" name="file2" dev="loop1" ino=1048628 res=0 errno=0 [ 133.396330][ T6783] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 133.417450][ T4234] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 133.442297][ T6783] FAT-fs (loop1): Filesystem has been set read-only [ 133.449446][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.457445][ T4234] usb 3-1: Product: syz [ 133.473354][ T6783] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 133.483843][ T5153] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 133.519803][ T6783] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 133.544930][ T4234] usb 3-1: Manufacturer: syz [ 133.549550][ T4234] usb 3-1: SerialNumber: syz [ 133.580085][ T6783] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 133.600355][ T4234] usb 3-1: config 0 descriptor?? [ 133.626619][ T6783] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 133.651028][ T6783] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 133.661132][ T6783] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 133.682491][ T6783] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 133.699563][ T4234] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 133.711738][ T6783] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 133.751460][ T6783] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 134.032967][ T5153] usb 1-1: Using ep0 maxpacket: 16 [ 134.040510][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.047695][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.153373][ C1] usb 3-1: yurex_control_callback - control failed: -2 [ 134.165122][ T5153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.250267][ T5153] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 134.322293][ T5153] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 134.338520][ T5153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.350976][ T4530] usb 3-1: USB disconnect, device number 6 [ 134.363821][ T5153] usb 1-1: config 0 descriptor?? [ 134.389923][ T4530] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 134.403410][ T6792] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.691: bg 0: block 5: invalid block bitmap [ 134.420337][ T6792] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 134.435792][ T6796] netlink: 24 bytes leftover after parsing attributes in process `syz.6.692'. [ 134.452179][ T6792] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.691: invalid indirect mapped block 3 (level 2) [ 134.574431][ T6792] EXT4-fs (loop1): 1 orphan inode deleted [ 134.580182][ T6792] EXT4-fs (loop1): 1 truncate cleaned up [ 134.608784][ T6792] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: writeback. [ 134.723317][ T25] audit: type=1804 audit(2000000063.934:20): pid=6792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.691" name="/newroot/160/file0/bus" dev="loop1" ino=11 res=1 errno=0 [ 134.730660][ T6803] set_capacity_and_notify: 2 callbacks suppressed [ 134.730672][ T6803] loop6: detected capacity change from 0 to 4096 [ 134.895116][ T5153] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0005/input/input8 [ 134.962434][ T6803] ntfs3: loop6: failed to convert "0080" to cp852 [ 134.992058][ T5153] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Mouse [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 135.015390][ T6803] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 135.080999][ T6803] ntfs3: loop6: failed to convert name for inode 1e. [ 135.466765][ T6822] netdevsim netdevsim14 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.642212][ T6815] loop2: detected capacity change from 0 to 32768 [ 135.682789][ T6812] loop1: detected capacity change from 0 to 32768 [ 135.701380][ T6815] XFS (loop2): Mounting V5 Filesystem [ 135.781887][ T6812] XFS (loop1): Mounting V5 Filesystem [ 135.798901][ T6826] loop6: detected capacity change from 0 to 32768 [ 135.827780][ T6815] XFS (loop2): Ending clean mount [ 135.859593][ T6815] XFS (loop2): Quotacheck needed: Please wait. [ 135.925554][ T4234] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 135.937630][ T6815] XFS (loop2): Quotacheck: Done. [ 135.977648][ T6812] XFS (loop1): Ending clean mount [ 136.047343][ T4197] XFS (loop2): Unmounting Filesystem [ 136.169718][ T4186] XFS (loop1): Unmounting Filesystem [ 136.217220][ T4234] usb 6-1: Using ep0 maxpacket: 32 [ 136.235105][ T4231] usb 1-1: USB disconnect, device number 8 [ 136.380714][ T4234] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.398401][ T4234] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.418879][ T4234] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 136.439438][ T4234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.458224][ T4234] usb 6-1: config 0 descriptor?? [ 136.538654][ T4234] hub 6-1:0.0: USB hub found [ 136.681581][ T6847] loop6: detected capacity change from 0 to 40427 [ 136.717571][ T6847] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 136.734869][ T6847] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 136.747901][ T6847] F2FS-fs (loop6): invalid crc value [ 136.787149][ T6847] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 136.852478][ T6862] loop0: detected capacity change from 0 to 64 [ 136.879968][ T4234] hub 6-1:0.0: 13 ports detected [ 136.922420][ T4234] hub 6-1:0.0: insufficient power available to use all downstream ports [ 136.980302][ T6847] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 136.997146][ T6847] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 137.026938][ T25] audit: type=1800 audit(2000000066.086:21): pid=6847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.710" name="file0" dev="loop6" ino=10 res=0 errno=0 [ 137.093699][ T6853] loop2: detected capacity change from 0 to 40427 [ 137.109972][ T5369] attempt to access beyond end of device [ 137.109972][ T5369] loop6: rw=2049, want=45104, limit=40427 [ 137.125428][ T4234] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 137.132100][ T4234] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 137.181952][ T6853] F2FS-fs (loop2): invalid crc value [ 137.228664][ T6867] netlink: 'syz.1.719': attribute type 1 has an invalid length. [ 137.243215][ T4234] usbhid 6-1:0.0: can't add hid device: -71 [ 137.243696][ T6853] F2FS-fs (loop2): Found nat_bits in checkpoint [ 137.249513][ T4234] usbhid: probe of 6-1:0.0 failed with error -71 [ 137.351384][ T4234] usb 6-1: USB disconnect, device number 6 [ 137.415040][ T6875] loop0: detected capacity change from 0 to 256 [ 137.421064][ T6853] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 137.523752][ T6875] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 137.656394][ T4197] attempt to access beyond end of device [ 137.656394][ T4197] loop2: rw=2049, want=45112, limit=40427 [ 137.954068][ T6894] loop0: detected capacity change from 0 to 256 [ 137.968782][ T6895] loop1: detected capacity change from 0 to 512 [ 138.054459][ T6895] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 138.089782][ T6897] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 138.125821][ T6897] REISERFS (device loop5): using ordered data mode [ 138.133014][ T6897] reiserfs: using flush barriers [ 138.161238][ T6895] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 138.171659][ T6897] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 138.188629][ T5153] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 138.200303][ T6897] REISERFS (device loop5): checking transaction log (loop5) [ 138.320710][ T6895] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.730: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 138.420516][ T6905] EXT4-fs (loop0): Ignoring removed oldalloc option [ 138.428228][ T6895] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 12: comm syz.1.730: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 138.468864][ T6895] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz.1.730: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 138.473624][ T6897] REISERFS (device loop5): Using tea hash to sort names [ 138.508837][ T6905] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 138.527935][ T6897] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 138.542601][ T6895] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 14: comm syz.1.730: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 138.600839][ T5153] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 138.611853][ T5153] usb 7-1: config 0 has no interface number 0 [ 138.618235][ T5153] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 138.629319][ T5153] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 138.640191][ T5153] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 138.649311][ T5153] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.650055][ T6895] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 15: comm syz.1.730: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 138.658987][ T5153] usb 7-1: config 0 descriptor?? [ 138.684010][ T6895] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 16: comm syz.1.730: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 138.707902][ T6891] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 138.713671][ T6895] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 17: comm syz.1.730: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 138.749881][ T6895] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #2: block 18: comm syz.1.730: lblock 23 mapped to illegal pblock 18 (length 1) [ 138.752804][ T5153] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 138.801353][ T6895] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 19: comm syz.1.730: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=2, size=2048 fake=0 [ 138.963242][ T6895] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 20: comm syz.1.730: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 139.115413][ T26] usb 7-1: USB disconnect, device number 8 [ 139.288427][ T6933] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 139.321096][ T6933] hfsplus: failed to load root directory [ 139.563463][ T6953] exfat: Deprecated parameter 'utf8' [ 139.577318][ T6953] exfat: Deprecated parameter 'namecase' [ 139.643051][ T6953] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 139.876536][ T4198] Bluetooth: hci1: link tx timeout [ 139.882010][ T4198] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.967726][ T4198] Bluetooth: hci1: link tx timeout [ 139.972949][ T4198] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.024454][ T4198] Bluetooth: hci1: link tx timeout [ 140.029599][ T4198] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.247652][ T6942] set_capacity_and_notify: 5 callbacks suppressed [ 140.247666][ T6942] loop5: detected capacity change from 0 to 32768 [ 140.376890][ T4198] Bluetooth: hci1: link tx timeout [ 140.382067][ T4198] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.398181][ T6963] loop6: detected capacity change from 0 to 32768 [ 140.488373][ T6942] XFS (loop5): Mounting V5 Filesystem [ 140.575615][ T6963] XFS (loop6): Mounting V5 Filesystem [ 140.630658][ T4198] Bluetooth: hci1: link tx timeout [ 140.635819][ T4198] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.661089][ T6981] loop0: detected capacity change from 0 to 8192 [ 140.835489][ T6981] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 140.863661][ T6963] XFS (loop6): Ending clean mount [ 140.880909][ T6963] XFS (loop6): Quotacheck needed: Please wait. [ 140.891550][ T6981] REISERFS (device loop0): using ordered data mode [ 140.898073][ T6981] reiserfs: using flush barriers [ 140.911630][ T6942] XFS (loop5): Ending clean mount [ 140.966237][ T6963] XFS (loop6): Quotacheck: Done. [ 141.007159][ T6981] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 141.059866][ T6981] REISERFS (device loop0): checking transaction log (loop0) [ 141.172258][ T4735] XFS (loop5): Unmounting Filesystem [ 141.174180][ T5369] XFS (loop6): Unmounting Filesystem [ 141.320441][ T7023] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 141.372174][ T6981] REISERFS (device loop0): Using tea hash to sort names [ 141.379392][ T6981] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 141.442461][ T6981] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 141.480187][ T4198] Bluetooth: hci1: link tx timeout [ 141.485326][ T4198] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.521718][ T7030] netlink: 87 bytes leftover after parsing attributes in process `syz.1.763'. [ 141.545746][ T4198] Bluetooth: hci1: link tx timeout [ 141.550888][ T4198] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.551863][ T7028] loop2: detected capacity change from 0 to 164 [ 141.705118][ T6981] REISERFS error (device loop0): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 141.771197][ T6981] REISERFS (device loop0): Remounting filesystem read-only [ 141.774107][ T7036] loop1: detected capacity change from 0 to 736 [ 141.898781][ T7040] loop2: detected capacity change from 0 to 64 [ 141.968209][ T4229] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 142.062487][ T26] kernel read not supported for file /video9 (pid: 26 comm: kworker/1:1) [ 142.140896][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 142.166687][ T7042] loop6: detected capacity change from 0 to 4096 [ 142.180692][ T4198] Bluetooth: hci1: link tx timeout [ 142.186110][ T4198] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.239020][ T7042] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512) [ 142.277628][ T4198] Bluetooth: hci1: link tx timeout [ 142.282854][ T4198] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.348502][ T7042] ntfs3: loop6: Failed to load $BadClus. [ 142.612880][ T4229] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 142.635287][ T4229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.637556][ T7053] loop1: detected capacity change from 0 to 32768 [ 142.670324][ T4229] usb 6-1: Product: syz [ 142.681820][ T4229] usb 6-1: Manufacturer: syz [ 142.690019][ T7060] loop6: detected capacity change from 0 to 128 [ 142.691936][ T4229] usb 6-1: SerialNumber: syz [ 142.738899][ T25] audit: type=1800 audit(2000000071.436:22): pid=7060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.776" name="file2" dev="loop6" ino=1048633 res=0 errno=0 [ 142.739990][ T7060] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 142.771292][ T7060] FAT-fs (loop6): Filesystem has been set read-only [ 142.778611][ T7060] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 142.802855][ T7060] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 142.829568][ T7060] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 142.840692][ T7060] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 142.866982][ T7060] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 142.877951][ T7060] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 142.911287][ T7060] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 142.913162][ T7053] XFS (loop1): Mounting V5 Filesystem [ 142.928526][ T7060] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 142.941677][ T7059] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 142.997471][ T7069] loop0: detected capacity change from 0 to 8192 [ 143.179964][ T7069] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 143.194199][ T7053] XFS (loop1): Ending clean mount [ 143.197797][ T7069] REISERFS (device loop0): using ordered data mode [ 143.208929][ T7069] reiserfs: using flush barriers [ 143.209108][ T7053] XFS (loop1): Quotacheck needed: Please wait. [ 143.220823][ T4229] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 143.233425][ T7069] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 143.250497][ T7069] REISERFS (device loop0): checking transaction log (loop0) [ 143.259253][ T7069] REISERFS (device loop0): Using r5 hash to sort names [ 143.266542][ T7069] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 143.323888][ T7053] XFS (loop1): Quotacheck: Done. [ 143.390201][ T21] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 143.462290][ T4186] XFS (loop1): Unmounting Filesystem [ 143.512819][ T4229] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -71 [ 143.529504][ T4229] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 143.553055][ T4229] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 143.562327][ T4229] lan78xx: probe of 6-1:1.0 failed with error -71 [ 143.584985][ T4229] usb 6-1: USB disconnect, device number 7 [ 143.817986][ T21] usb 3-1: config 127 has an invalid interface number: 57 but max is 0 [ 143.826261][ T21] usb 3-1: config 127 has no interface number 0 [ 143.860605][ T21] usb 3-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 255, setting to 64 [ 143.919773][ T7083] Falling back ldisc for ttyS3. [ 144.096892][ T21] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 144.121565][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.149246][ T21] usb 3-1: Product: syz [ 144.153433][ T21] usb 3-1: Manufacturer: syz [ 144.158030][ T21] usb 3-1: SerialNumber: syz [ 144.213824][ T7075] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 144.464241][ T7111] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 144.529686][ T25] audit: type=1800 audit(2000000073.111:23): pid=7111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.793" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 144.679180][ T7125] exfat: Deprecated parameter 'utf8' [ 144.690569][ T7075] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 144.700266][ T7125] exfat: Deprecated parameter 'utf8' [ 144.711266][ T7125] exfat: Deprecated parameter 'utf8' [ 145.208473][ T21] asix 3-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 145.247110][ T21] asix 3-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 145.269536][ T21] asix: probe of 3-1:127.57 failed with error -71 [ 145.288811][ T21] usb 3-1: USB disconnect, device number 7 [ 145.335092][ T7096] ERROR: (device loop1): dtSearch: DT_GETPAGE: dtree page corrupt [ 145.335092][ T7096] [ 145.399422][ T7096] ERROR: (device loop1): remounting filesystem as read-only [ 145.434300][ T7096] jfs_lookup: dtSearch returned -5 [ 145.448309][ T7125] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 145.468235][ T7142] ERROR: (device loop1): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 145.468235][ T7142] [ 145.860207][ T7156] set_capacity_and_notify: 4 callbacks suppressed [ 145.860222][ T7156] loop2: detected capacity change from 0 to 8 [ 145.955548][ T7162] kAFS: bad VL server IP address [ 145.993908][ T7153] loop0: detected capacity change from 0 to 4096 [ 146.047995][ T7156] SQUASHFS error: Unable to read directory block [629:fe] [ 146.166661][ T7153] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 146.179181][ T4198] Bluetooth: hci1: link tx timeout [ 146.184428][ T4198] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 146.300761][ T7176] loop2: detected capacity change from 0 to 256 [ 146.454327][ T4198] Bluetooth: hci1: link tx timeout [ 146.459640][ T4198] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 146.829045][ T4198] Bluetooth: hci1: link tx timeout [ 146.834278][ T4198] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.019355][ T4234] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 147.170531][ T26] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 147.318634][ T4234] usb 6-1: Using ep0 maxpacket: 16 [ 147.443449][ T7205] loop6: detected capacity change from 0 to 1024 [ 147.491034][ T7208] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 147.613278][ T26] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 147.621313][ T26] usb 3-1: config 0 has no interface number 0 [ 147.661393][ T26] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 147.677099][ T4234] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 147.685117][ T7217] netlink: 8 bytes leftover after parsing attributes in process `syz.6.830'. [ 147.689348][ T4234] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.713307][ T26] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 147.729474][ T4234] usb 6-1: Product: syz [ 147.734172][ T26] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 147.743606][ T4234] usb 6-1: Manufacturer: syz [ 147.748204][ T4234] usb 6-1: SerialNumber: syz [ 147.753150][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.763117][ T4234] usb 6-1: config 0 descriptor?? [ 147.769785][ T26] usb 3-1: config 0 descriptor?? [ 147.816817][ T7191] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 147.825220][ T4234] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 147.864898][ T4198] Bluetooth: hci1: link tx timeout [ 147.870515][ T4198] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.882186][ T26] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 148.055411][ T4530] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 148.118217][ T26] usb 3-1: USB disconnect, device number 8 [ 148.226809][ T7235] netlink: 104 bytes leftover after parsing attributes in process `syz.0.838'. [ 148.269631][ T4234] usb 6-1: clie_3_5_startup: get interface number failed: -71 [ 148.281435][ T4234] visor: probe of 6-1:0.0 failed with error -71 [ 148.311027][ T4234] usb 6-1: USB disconnect, device number 8 [ 148.457610][ T4530] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 148.477354][ T4530] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 148.651049][ T4530] usb 2-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 148.662272][ T4530] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.670814][ T4530] usb 2-1: Product: syz [ 148.747830][ T4530] usb 2-1: Manufacturer: syz [ 148.776954][ T4530] usb 2-1: SerialNumber: syz [ 149.119923][ T7248] loop0: detected capacity change from 0 to 4096 [ 149.128593][ T4530] kaweth 2-1:1.0: Firmware present in device. [ 149.251030][ T7248] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 149.270742][ T4198] Bluetooth: hci1: link tx timeout [ 149.275878][ T4198] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 149.289331][ T7263] loop5: detected capacity change from 0 to 256 [ 149.345392][ T4530] kaweth 2-1:1.0: Statistics collection: 0 [ 149.351344][ T4530] kaweth 2-1:1.0: Multicast filter limit: 0 [ 149.358025][ T7263] exfat: Deprecated parameter 'utf8' [ 149.374527][ T7263] exfat: Deprecated parameter 'utf8' [ 149.383109][ T4530] kaweth 2-1:1.0: MTU: 0 [ 149.387382][ T4530] kaweth 2-1:1.0: Read MAC address 00:00:00:00:00:00 [ 149.387745][ T7263] exfat: Deprecated parameter 'utf8' [ 149.404641][ T25] audit: type=1800 audit(2000000077.666:24): pid=7248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.844" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 149.473001][ T7263] exfat: Deprecated parameter 'namecase' [ 149.505112][ T7263] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 149.569431][ T4530] kaweth: probe of 2-1:1.0 failed with error -5 [ 149.590997][ T4530] usb 2-1: USB disconnect, device number 5 [ 149.784842][ T7274] loop2: detected capacity change from 0 to 4096 [ 149.820610][ T7274] EXT4-fs (loop2): Test dummy encryption mode enabled [ 149.843085][ T7274] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003] [ 149.867213][ T7274] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,min_batch_time=0x0000000000000004,noblock_validity,test_dummy_encryption,errors=continue,nolazytime,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 149.920139][ T7274] EXT4-fs (loop2): Test dummy encryption mode enabled [ 150.000877][ T7274] EXT4-fs (loop2): re-mounted. Opts: debug,min_batch_time=0x0000000000000004,noblock_validity,test_dummy_encryption,errors=continue,nolazytime,delalloc,barrier,. Quota mode: writeback. [ 150.057474][ T7274] EXT4-fs (loop2): Remounting file system with no journal so ignoring journalled data option [ 150.082188][ T7274] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0003] [ 150.101940][ T7274] System zones: 0-5 [ 150.113008][ T7274] EXT4-fs (loop2): re-mounted. Opts: journal_ioprio=0x0000000000000001,delalloc,init_itable,grpjquota=,data=writeback,noblock_validity,minixdf,block_validity,acl,max_batch_time=0x0000000000000006,. Quota mode: writeback. [ 150.385825][ T7297] netlink: 5 bytes leftover after parsing attributes in process `syz.1.866'. [ 150.738179][ T4198] Bluetooth: hci1: link tx timeout [ 150.743371][ T4198] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 150.755128][ T7315] loop6: detected capacity change from 0 to 2048 [ 150.793570][ T7320] loop5: detected capacity change from 0 to 512 [ 150.845711][ T7315] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 150.876666][ T7320] EXT4-fs (loop5): Invalid commit interval 536871081, must be smaller than 21474836 [ 150.932848][ T7315] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.076570][ T7315] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field [ 151.117708][ T7327] loop2: detected capacity change from 0 to 4096 [ 151.225231][ T7336] jffs2: notice: (7336) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 151.248128][ T7338] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.265739][ T25] audit: type=1800 audit(2000000079.406:25): pid=7327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.879" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 151.362886][ T7342] loop5: detected capacity change from 0 to 2048 [ 151.397247][ T25] audit: type=1800 audit(2000000079.425:26): pid=7327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.879" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 151.424708][ T4198] Bluetooth: hci1: link tx timeout [ 151.429965][ T4198] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 151.512042][ T7342] EXT4-fs (loop5): Unrecognized mount option "euid>00000000000000000000" or missing value [ 151.648763][ T7357] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 151.674757][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.887'. [ 151.722528][ T4735] ------------[ cut here ]------------ [ 151.729384][ T4735] kernel BUG at fs/jffs2/nodelist.c:462! [ 151.736833][ T4735] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 151.742917][ T4735] CPU: 0 PID: 4735 Comm: syz-executor Not tainted syzkaller #0 [ 151.750459][ T4735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.760527][ T4735] RIP: 0010:jffs2_del_ino_cache+0x2a9/0x2b0 [ 151.766429][ T4735] Code: 18 ff e9 60 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 5a fe ff ff 4c 89 e7 e8 81 fc 18 ff e9 4d fe ff ff e8 67 d4 d3 fe <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 10 48 [ 151.786072][ T4735] RSP: 0018:ffffc9000329fb38 EFLAGS: 00010293 [ 151.792139][ T4735] RAX: ffffffff82a53b39 RBX: ffff8880254f0000 RCX: ffff88802a8b3b80 [ 151.800111][ T4735] RDX: 0000000000000000 RSI: ffff8880254f0000 RDI: ffff888077cd2000 [ 151.808082][ T4735] RBP: 0000000000000006 R08: ffff888077cd236b R09: 1ffff1100ef9a46d [ 151.816086][ T4735] R10: dffffc0000000000 R11: ffffed100ef9a46e R12: ffff8880254f0000 [ 151.824054][ T4735] R13: dffffc0000000000 R14: ffff8880254f0020 R15: ffff888077cd2000 [ 151.832025][ T4735] FS: 0000555562c68500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 151.840953][ T4735] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.847537][ T4735] CR2: 00007f9fe9df07c0 CR3: 000000005fce6000 CR4: 00000000003506f0 [ 151.855510][ T4735] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 151.863481][ T4735] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 151.871450][ T4735] Call Trace: [ 151.874726][ T4735] [ 151.877658][ T4735] ? jffs2_do_clear_inode+0x310/0x390 [ 151.883038][ T4735] jffs2_do_clear_inode+0x31b/0x390 [ 151.888250][ T4735] ? jffs2_statfs+0x370/0x370 [ 151.892932][ T4735] evict+0x4b6/0x8b0 [ 151.896831][ T4735] ? evict_inodes+0x577/0x6e0 [ 151.901510][ T4735] ? proc_nr_inodes+0x320/0x320 [ 151.906376][ T4735] ? do_raw_spin_unlock+0x11d/0x230 [ 151.911577][ T4735] evict_inodes+0x650/0x6e0 [ 151.916085][ T4735] ? clear_inode+0x150/0x150 [ 151.920675][ T4735] ? jffs2_sync_fs+0x93/0xa0 [ 151.925267][ T4735] generic_shutdown_super+0x93/0x300 [ 151.930555][ T4735] kill_mtd_super+0x1f/0x60 [ 151.935063][ T4735] jffs2_kill_sb+0x92/0xb0 [ 151.939483][ T4735] deactivate_locked_super+0x93/0xf0 [ 151.944766][ T4735] cleanup_mnt+0x426/0x4d0 [ 151.949167][ T4735] task_work_run+0x125/0x1a0 [ 151.953748][ T4735] exit_to_user_mode_loop+0x10f/0x130 [ 151.959116][ T4735] exit_to_user_mode_prepare+0xee/0x180 [ 151.964641][ T4735] syscall_exit_to_user_mode+0x16/0x40 [ 151.970080][ T4735] do_syscall_64+0x58/0xa0 [ 151.974475][ T4735] ? clear_bhb_loop+0x30/0x80 [ 151.979135][ T4735] ? clear_bhb_loop+0x30/0x80 [ 151.983789][ T4735] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.989659][ T4735] RIP: 0033:0x7f837fce2317 [ 151.994072][ T4735] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 152.013655][ T4735] RSP: 002b:00007fffec56ed68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 152.022046][ T4735] RAX: 0000000000000000 RBX: 00007f837fd77474 RCX: 00007f837fce2317 [ 152.029998][ T4735] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffec56ee20 [ 152.037948][ T4735] RBP: 00007fffec56ee20 R08: 00007fffec56fe20 R09: 00000000ffffffff [ 152.045909][ T4735] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffec56feb0 [ 152.053860][ T4735] R13: 00007f837fd77474 R14: 0000000000024628 R15: 00007fffec56fef0 [ 152.061814][ T4735] [ 152.064828][ T4735] Modules linked in: [ 152.072250][ T4530] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 152.080744][ T5153] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 152.090559][ T4735] ---[ end trace 6c3f927d385071d3 ]--- [ 152.096227][ T4735] RIP: 0010:jffs2_del_ino_cache+0x2a9/0x2b0 [ 152.102236][ T4735] Code: 18 ff e9 60 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 5a fe ff ff 4c 89 e7 e8 81 fc 18 ff e9 4d fe ff ff e8 67 d4 d3 fe <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 10 48 [ 152.122157][ T4735] RSP: 0018:ffffc9000329fb38 EFLAGS: 00010293 [ 152.130186][ T4735] RAX: ffffffff82a53b39 RBX: ffff8880254f0000 RCX: ffff88802a8b3b80 [ 152.138687][ T4735] RDX: 0000000000000000 RSI: ffff8880254f0000 RDI: ffff888077cd2000 [ 152.148467][ T4735] RBP: 0000000000000006 R08: ffff888077cd236b R09: 1ffff1100ef9a46d [ 152.156666][ T4735] R10: dffffc0000000000 R11: ffffed100ef9a46e R12: ffff8880254f0000 [ 152.164717][ T4735] R13: dffffc0000000000 R14: ffff8880254f0020 R15: ffff888077cd2000 [ 152.173671][ T4735] FS: 0000555562c68500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 152.182855][ T4735] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.191692][ T4735] CR2: 00007f9fe9df07c0 CR3: 000000005fce6000 CR4: 00000000003506f0 [ 152.199946][ T4735] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 152.207930][ T4735] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 152.217339][ T4735] Kernel panic - not syncing: Fatal exception [ 152.223610][ T4735] Kernel Offset: disabled [ 152.227924][ T4735] Rebooting in 86400 seconds..