last executing test programs: 46.191987855s ago: executing program 1 (id=2739): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 45.201235151s ago: executing program 1 (id=2745): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0) 44.593689033s ago: executing program 1 (id=2753): r0 = socket$packet(0x11, 0x2, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) 44.458068966s ago: executing program 1 (id=2756): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 43.174368701s ago: executing program 1 (id=2764): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000600)="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", 0xa01}, {0x0}], 0x2) 41.847011644s ago: executing program 1 (id=2772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a30000000000900020073797a320000000014000000110001"], 0xc0}}, 0x0) close(r0) 41.357806675s ago: executing program 32 (id=2772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a30000000000900020073797a320000000014000000110001"], 0xc0}}, 0x0) close(r0) 4.147887235s ago: executing program 4 (id=3043): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) sendfile(r0, r0, 0x0, 0xe) 3.833179727s ago: executing program 4 (id=3045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8084) 3.507760742s ago: executing program 4 (id=3048): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x41, 0x5f, 0xbc, 0x10, 0xe8d, 0xa7, 0xb531, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa0009058202"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000df713820f0031d58381f010203010902240001000010000904e50002ff0107fe090585"], 0x0) 2.493346512s ago: executing program 0 (id=3058): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000600)=@canfd={{0x3}, 0x33, 0x4, 0x0, 0x0, "acb8b2423328ec419be55b772ad8a1101a4f34a662f8d7ebe52ed28fb62ba62b826fe35600c7f94ed93002be418cf2dc125f21738d1e72d7ee445be5c70f8556"}, 0x48}, 0x1, 0x0, 0x0, 0x4000014}, 0x8001) 2.462486717s ago: executing program 0 (id=3059): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x40) 2.372025702s ago: executing program 3 (id=3060): r0 = syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302", @ANYRESOCT=0x0], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) syz_usb_control_io$lan78xx(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0003630000006303"]}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, &(0x7f0000000100)={0x40, 0x16, 0x2, {0x2, 0x24}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}}, 0x0) 2.321310921s ago: executing program 0 (id=3061): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x13, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x38dd53c5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0xd9, &(0x7f0000000f80)=""/217, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc00}, 0x94) 2.285439657s ago: executing program 0 (id=3062): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f626172726965722c63726561746f723d5c5d07842c63726561746f723dbd3cfff52c6e6c733d63703433372c756d61736b3d30303030303030303030303030303030303030303033372c6e6f6465636f6d706f73652c00"], 0x1, 0x6a4, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/40, 0x28) getdents64(r0, 0xfffffffffffffffe, 0x29) 2.217494268s ago: executing program 2 (id=3063): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) sendmmsg$inet(r0, &(0x7f0000002bc0)=[{{&(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="cf2b5ed4c14344f3", 0x8}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x2, 0x6ef8eb021116b2d8) 2.109357776s ago: executing program 0 (id=3064): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r0, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000180)=@getchain={0x24, 0x66, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3, 0xa}, {0xc02c6a9266be83b, 0x7}, {0xd, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) 2.059415545s ago: executing program 0 (id=3065): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000009c0)={&(0x7f0000000140)=[{0x9, 0x800, 0x0, 0x0}, {0xb393, 0x0, 0x0, 0x0}], 0x2}) 1.141714849s ago: executing program 2 (id=3066): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) 1.033483417s ago: executing program 2 (id=3067): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.015877879s ago: executing program 2 (id=3068): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000001850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 950.310931ms ago: executing program 2 (id=3069): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x22, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000, 0x0, {0x3}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) io_uring_enter(r0, 0x1, 0x21, 0x1, 0x0, 0x0) 861.501085ms ago: executing program 4 (id=3070): syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) 762.130282ms ago: executing program 4 (id=3071): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='veth1_virt_wifi\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0) 703.651252ms ago: executing program 4 (id=3072): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="71756f74612c646973636172642c646973636172642c696f636861727365743d6b6f69382d72752c646973636172642c00f4193eb3ba2a0d5ff2cd7374288ff89ec513a53e007345decb720900f8312da2463eb0edf52fad1a00ebd41c14b3ce75d0cffefd379624b16f7260c835713b263352e03b5cb8fa0c042bd1225ed4ded2b62e12fea4d7e61b738e40781e58d5fff112364ac140f419e5dafecd283b3fab6b142ddbc893b35a81fe9265591ef35fa2928e095fee4c10b22e4212378de59bca0307cc644b9620b63f0000007bbbd422d87856b71348b8f45398b9660b6b3e8ee8a8c32f3234cb46e2cd827ec25c1ca4d046bc004f8df7b1ee690a5e50510700d80c7fa65fa724d0e1b4369f1b64fe249a0312010000004ac983de925f52d735b03fea941b1e948ad8d19cfda5b799325fd69d14fcf6cdde7700a63150eb3699e5314e0827750e244150ec19f3f3f1d8be542c084b5e40bfaa8ad206d2a33b0ddbd7f8e07dc7d17174a4549ffaf5976949cb69658c42ec7cd9fe8ad82852cefb04646edb3a41eb514eb6a772b3ee9f21e25822b54ec33e592d5c040946721101d53aff21f90351c95aa0f73f1853d6afcbf9448b220e988466066fa5c09e6198fc4520d199b93bdedee87c4043815aa05668a06f8da96680ccc1a139ade90f5c79af46208f9762f54e7c29088d9de69bd2d51c6b9c42209ddc3880051303b855853407d959a5777dce25201c5ea1faa084c36e3e349915ebec53435eb2910c59394ee84ba3baf9c440ae5833c23f46b0eaac543ce0c80ba0603213e53ea59755070b18bc10b9224aa082d96700e63d51c5bffa4f712c2d7fafb9cf506c06e1ddad4fc19038407786fedb9afdfb11a5f182676dd84c919f71d5eee2f3b740b68ee7f6518eb9d8baa26f1c3871f863b134ee942eb3af92d19e70d8268839cd7b4637f0627299f99b1873ca165e410f8bd421e1a4859fd9bd6bb34d25c07e1a52b9668a530b10b8585d797124a6975a71aedbe557a17b06bbfe547aa553c3d08b8921a4b0d938c03687bd48a9a387b4c066c056f457fba5738775b900a1e82a89aae1494b05c4bb0fc8ed1a93688bf850a4f7b0942eda1f16ecf043efa6b8c1f9e0fba31f4a58ed0031180fb1b8a00e4a86826b030000002dd1272a3d1609bed545b86ca7a6bf569ed35d0000ca23b0de742f6008fdf20928370d88f8c04bc3b97b9a9e0062e8fc5fd2337d85a66bd20730f3153db2459fb34c134c06c19364e9645e83040dd16ee08f18f0ba69ac9ca3e25e15442b07000000d30d38a64613b535fa808a9b3bae00bc371271d45db200a5cbf433e2f6dd03b7c7fcc040781e5151c9badb787e7e1e2f39d60998919aa8dbd156f31a5b7fa5f9e5ec01e8c799edc322703c7fc4a81ab9bc02dd96714ee9d7e75d28d040ff3566404fd6db547a4b553197c1f316d20ea54f9459cd81351a510d101e90eabe6dc6c6ac3ffa189c073a5fb3fc382df620bf5af9e638819c77a051e6875866a849f6f578c068c0e4c7cfbc15033997efa853c96297b3201dd30ea40dc94d010a0c33da9f63a10b8f813dc789b80be3bb3f00ee58b30d5c03a6ddbf418ac1b3d4a13839e4b273c4f914bed13f8806295495d41609478798396aeec06e8d342efd8ac6b422f6c23a011b1400000000000000bc2a02094e19a1ee8bb3c3c0c088ae8efaf68c85001faf7cf5426fb7c5c367ed93eb25c48a293549d15b91b59f1b574b3f6171f8e56a402ec56bdf51d90312b3ca5398f4050000007504be21456ec953bf06f12fff20c31e7c8b55fee5c49aa939830b09995ff149258118f9aae29206f9731288b56b10de51525665fdb4e289b1c177df97af3085f82045fbd012f1dde94ffecd90b7b63d8197d9c24a6fe5915ac7d7240847f6d0bf9099ee117c83e363f2ad36a4a9f4faa5734afe9770c38c565cae87a408d0acbb2db7db9174acab60a344814ee643fa82ba41706d2360269ed276e13dd83abbc258f07b0d58ab0b65200b18b7f9f871bcb43fec5a2e3789ecd0c1069d2da80b93c86dff8933e70c2108346003ddf6b60379eee63b66e7341cdd8f87ed9f11894c9ae040976321d87405b492f419ebfa77eb367ca6e360b808451102f54893d7d1695c24bcc184b1e7d19940a2b6931ade8638dd2b85a86dc511dbb97f5035d07ca024076e8581db332b1c5f135fe6b2e9d2c18c9d5d5a524d3d5b2657e4b28f1a09696bd5b076a1471c8b2ab2ca3ba57843af1d03590f4e8985e1c463c781bb03ad7ec816ea70bbe06411aae001e0ca72ee7e828ad14bb7a092d883ad000554bf7f00000000000075cc01f8a2e1802192f09e77bc488b3bd3f08a9ce88ba2e2bcc23cf5d7372b339ce1f5003db0ad70fa6e93aa908a2ced81f5514e23e2f94ff03c1c02f5a9195f4735563efd0a1fc7dafcfb3dae043fe0c172ec3a12747d7abf4382bf7453c13df994641017a0f461add956ef8f834b762af30408af6a61f317fd3c7b0816236a768601b7c6606ba52ff126eb13d33c915c5da99d118db488da3f3d7783a608282a93fcbe0910f0389c3ef91de7c84e23daa6554c42b2b3e9f70a9f790f29011a0b5101b23bfeba6e52877ed8a188958e39375dd203d434bef4dc82cc8a21fc40c6e6e6a2475f70bf1503beb9555036e63bdc937f8a4d61b21d06a9d3239d1df6f2e9ef16dee590b15ac028c6d873bb2965374b733d8e11ba763ab157ed91dd871b098c0543dcbba4cf67db8c83c84369dc67735fa4faa0fdcf34b1c6a862ccae9fe4fa28746504643b57f02623a2ef34ea90f2e7f7dd771f8f75217c799d978a3533fcfab6c6f5391b626d61b400f08172fc675e2a062d06c31b85452804f7b125c291f60a02a5d62271e96fe70d64bae36e28b42e197259169ebee8f64355544fb4d8b83c1c8fad02cd1a2e56a6f6e82ec7719a48a1bea803546b8af7a89faf7cef94d8ada45fc0a98a79ba90c95262f0110725c6bf7c81237534dcd6a8a113bd8ac48b7db5526ab762cec103674742476cd6b92b8c7abcfb1f8e08f0a05c1b209187049f3206bd545e8c20f8db6d8a7cdd0c9ecbb9011b611a013cd581521dfcb028d59d5c69d286fb93e4c498b3aaff7e0cdcf1f41fec65ebdbe4c2bf453140251cdd94c32b87c4634d6500000000000000000000000000000000816e6c33f92dca3e03c400"/2303], 0xff, 0x5e9b, &(0x7f000000bc00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x60843, 0x15) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xfc6, 0xfffffffffffffff7, 0x6976}) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000006900)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="0d9435a8af712ba22db08aad61bf52901d77aded910bc7949acdf1a626f568d38938f8ec34f72c1e0b3e6540dc1e44beac32958b12631708d0a5635580b2f9fef13a977211e5d519ab9531321cfb53a9b413ea91f290924482d4007a70a19759dd63f9fc81f2c63fe27bce5e7dddf01fa5c3f09ef226ee04045b0cf0661e3d5a67446c4d93db12c2ac7a15f0265fd7eade1a72cbd696413a03174375c955f8c82a9774c2c8ac5046d59c86dbd5165e6e447586", @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYBLOB="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", @ANYRES16, @ANYRES32, @ANYBLOB="ac2d5b5b8945d57e7869648ebe10b8d2719763b4bf3f6667bf8f722606d2b3593f26218e9a5fba2e7d4166787da71737b380045fb0a682e2915271f214c0112961b73c4638e7ba68deb34826d7682ace7549c83bf52bd9142b6c5adebf82155270d33204c09c07ed4ca2fc932af48646c9624e3e3544d68f61a2b073fb85332599b299a4f441a8e2f74c57aa38b5b596238280c1693bba97ff258679ab84485970b60f81093dda6501baba18a7790ca3e6fcfa12898b9fff3faf613d71f9d64dbd5c2edad8e774fb0da39e532d92164e2d34aff7cae32f3cd7aa9aace000f136323e4808d0c66c0828942def38deb2e1d847555fe0d5ba8084babb3169f9f06246ecd5327758448c9c7e4591da12ff1b084e757d05af4f0f0444ecfcc0c4d2067a98d49fe52412218380bb75e21cd23724e0390b116b9a1c1e3350b3e6f17c5bd1f1adb4ce1d03d5b30eb0690340708f06dfca5c9d74a7c140cabddd0f37d8bcf15e578dde85d7c28ccb1c9633ceeb54bb278d5a097220ca53a2ea4781aca2b70189199938afba9a700a610225311fe8316794ca0ae139a50dbd34d572d6165eaaa94844620045e615d51f5e19c29aadad3539490961135851f15bbfd0604f3926877583d85c45a04c6f155ad6e1966d2004ab6ab51f9beb82dbcdcaaab886564cbf81b581da397eba4fc8fe430ef93ed613cd588e399669b9f4b63481163e6c2b74112538192be9551ca400bc2b947a535fccbc567a68a3ab94554385bb1f2a0e2146310113102a9ffbcbbf44d30e076d363d6201faecf8bbbbc9d7fcd38195860bbc85ee3f5f9b2c990164abc3a7674ab2a631147d708585f52694a46b681cbc623b53a272f21f2aa5597beec8094954541316cc45ec9751fef12369e7272b7bdcb527bac4a19e0bba1b68ef98e3563705e9ca40bb914cece2fd75c2375b81a06dadcdb1c54a175855e30c3d9ca58ca873e43d703b1471526fb3dfe12e140b81df3afae6104e5ffa4e8585b456a7199c75c5abc7afeca743fce310df09062f20b9a99fac5d019338d98606805f4faad9cc81ebf03b7239a340c973828b676af4e594d796689f9823730c5ead8dba256925869ab0d7196a99b75a15f9927852d7813aa5a4cb76764749e882d59c094c5ebd1911153150e8d53aa8abbf360a4045b63e0e296d03158de8aa02b5aeb459dcdc6b9d5aa8c0e455e7cb6a5d9b26ee5420e41d89590a0c04ca8701a6a386716a32e04102f281f66317a21940c0cf83e128f4f83bdf6770170d74d43f3b1f4c0bb5e8c69254e0bfd15c6d02596bf3b547e5b9b8e84390455a9c4b00b633c661616aca4a4158868be21633f343155996eaff00c2c347fea03c6f06e7adcd83cf320e3a446d07dba202e5960632560da8a3b60efe5a814a5cb2a4ff0842fff23897b583b381e5030e506caef8dc97bef9532111e3eb3621870ec39fe2351d3814a02d2f9e38aac1f0897f32ddbffdc6e0acdea95ff7f67865daae1130f68f00985682ecefc43fb6f8521514923b5cf3560be0739aeb4eb00b389d39ebb9b974e054120fcd48c0d6bc09441c2c19f41bdfceed01a3b686921500fae88795f216794d21dd3a98f2fdb5a1590e0cbdc5cd9593b164e255131c21f22ed7e7ed4ec83db91f8bf5f327d7222be1e470a7c0d0a657c73ad606f2ef0c59d3c118c601d23d67ee16ce3658c9153b8131f06c1e4f83c49dbe6dbc3478b1313b9221bc4c5eadebfd16cd07afde509f2e926fcfd5f8feabe836f4080ea5e65c1e4d859f16ac45ad8c804eb9ecce363faf19c1409d8192a644823578ccfd5b643478eb948223676d375f811fffa874f7c2a281104a28baf4da2716ae870abb3e0f05e63466176356728a700fe39ebb62bdbff139fdbf21520022984dc6d3eed1d81b94f28a07cc238ccb64d65e87534c0111bb76212368c6e8e9a536e758fa2f16a2cab9d31984055488b27bcff12bcc5a0fe21a0e44edfb87c681060e6944ff89dce4a9c7122c53acc27913a5fbf15c9ada971df88f0df3f82eb563f63c640ad6e39a1f5c1aad83c364957ec6d645f4243d1fb4ecef275d4c0ca0284064cde0c282d793f290bab5a4dec15f3e2adcc9d455d2e28bd040d6e0f651ac6f20f55d1303d2aaef2104b393afc849e9cd7743ca20a6f092cbf42a67446892493128d38bb0d0f507ffe3fd718ec48eff58df729728bc01ee180d676dfa22c81da0e4e3fda94f4f94195bc82e1f941d8a290ca0d416373d420eba196470e4f25940506061c601f12b3656d6d6b3a47e50d5235b7fd0f82bb0835aee3470b69bf7e59616ece447d9af36c396f687214ff7d7e27961f461c780b4c563aeb47fa9f335cbdade8a06711ba79b6fe8778ac1bc06bb59131c17409c1d1d0cc746aec8c3b1348f9585945192d8e32002c676753ab246a92702fc8e3a3ce89b84661b1b10dcd73fddacd311ca663d483b87a59225f60627eecf409d6188236b198633d47c5f1c0ba0bb4321aac88a6061d5e97883914cd74284ab937b9579ccee6ab5bb39f6274a04e3e7a8c3d033e340357bc15c5f6daa047b1cee448ac380bbde4bf806b0891a04b9e408609b040b7d3a02d2a76d4013756d79244792c543fe2327a3c371852bed5ab54de987bc4699b32ad1c08f7fff7a23069e72bddc9a590b2c707bac3957d46b657a4e17f1914db58fb6436bdd58b86df491016a2b9ebe0c35a859b216f17f4828c8dee30a38ed1fc36347af978999d0c404313cf99c9281c45194abd79475a80ea1486840aad72b1c0c4f17fe35a150fcb574fa9fcc09a7fc5dcd34e15d4bf1bccfa8bf423d2437e2eb0d3ca9324fbfc7e256b862c50ebc8db3fb69f69003d37807af8ddccf2d929ad9d06ebbb7e538d93bb0b7bc828e1639e0b5e89c22badca307ad28183c3083e87c917feb4c882397d397ea2e7ff0e05ebb252940302cdc0f0f7efe40685f7c3e8923e3795d70d69c70d9a071e401cee771f29dcb5316471768464c4659f2c76d11713ab44f4c944a4819deb1248b02457403e9630aaf4a180e9e55bb4d291e9a2bc85a1ed17f906d54935c7e5e8b707ead56284fda0208bd88ab5c3259bd5329c0d26653eb07b6856ad799fd6fa8d2111da3970ff8509bc2ef3a8813d04f36001526b70757646ed4bf25a256751b8ec714f2e62dea19e82aacec389195532bf7f335afae4351adb93c846e22f1f2a3e0d620d81688bd5530e389f2284b3c997d4abab7c30aac1b141425cd9aa315dc5a5e8b04fd503d79896b1494d8be48048c7392fc92c325b76bde4496c49da34c9ff95969bec8f95c356239d5336907957383b12c512fff6d797097a26a5aee9251bae940ef1a19b3f746396300d3baeb476b023f740ed7c1da92fdbf1834c3a882a6079885b933333d0e194cc1f25a06c3a2d370936886cb385d9861d6762c7416a1db5275228b6499cdef9767fb998d43251b963bc4477b2c051b70a0317de5f6ec3158914145bd036ff194df9722d2a3d2ac2397891b573a34ad16236cdc7ca77bc15f0fdbc3cae923d61633a42bab450a80cf3ee6580e792b1617d74fa189d450a64ca12d8c797698208ea61010b6072885b762af598159621f838ebacc00ea11f5924b39b2bbbc5c7d667871ce32e9aa75893a9fa13a2ffe66b360e266446259a8745addb4e186139d86d4e8d48537ac35029b0d87c03e8c1a9b9a422594496feda8bc5502777428fe737198ed896c2128a4f7d552f2eea8fef6e68feaf3cbfd549e622eea7bc988bb16fc49b7ab241426f2e40edcca07d4f947ccb1d3b8c2e9cb14a0c04495dbb75bd9c935f36bfe398455b0e5f927d5726e617c69ca81fe36c3e6ea510c5fe4735161c992f9ebf66727e5a7ded590061d4da3b86b996846a6bb102e47d33465d88a68644c8a76a770d5e0318e6c301e7c7f5575bf15a9589b32cfaa41ee15972488497195a2cb49a6b6f937a8e311e34d311dfd4fe222d3abc095b0b24a1b7193eb3353def0cc1511c8fce9b0a7867ae2fed4db93009646dc91a3745387cbe61b37f749b40d5d38970856b7ab8b6e1e0b81c078c68cb55c57854b8b5863b7a4c87f42e6d6dca2de0326b1b26970168c99f59816877448e7f72626f5354fdb5e033cd6b42e9476665efae66287e656590d1f80b3a09557a57d7de4bade6a122d40a92db1d347463b74151d44a02dbe067259c633b8c84425e77a736fca99f06d0fd66e35365511ec017537f4c212e7f2e23369958c3a7b92feffad9edb12139f1f690f9512725c0a1a164e78b4130c91fd3961df91c1a11783c24b03bcf305fd0e14e6510f4d58cf73326e94f2bc1b1ab295297bee7a98b77afe483a7d66e780d5e111b4202285f580ce571ecc0985501faa0e9f2f5b9848d770d8d8ad7b90a951f83279073e45a0c7abcf89cd6200f7fc320e46ea3de2addee3a984432501063f9928d0897d93dde20fe8fbe4dabc1ac34b0efdb3d7c7b4d49571ea64252d7209ff6d0ae5b95ef35d8160c5976f7ed9c4b69db81a73f6d00fd254c417696d6af694f3688826cc04db8019f2419fa99e47dc436fd76890b5291cd2724717a1e604e6cb5e214235664e8c7148c2bd87996c05bcfe1f29200f40a0d766df3ddc6faef82fb34d385f90b8f0e4bb7ba519e7986735c169cb3546d62fb70fbd49eec4edd70397d2fcbfdb9cd87331fce3c9786b7090501b904c8f925a1dbfa151a18e6c145ebb74da7100de60a627100d6c04ce789a7d4e88692cb090fd9ff2006e5ddb870f5b2aa502081eb7a26744de9a0d29a66ef18eb097e1d396561078e3f9258046a3a3e9b5878964d71b526755084f385d9777b2ab503f9d77c09a46004b5005f69eedee80edd87dd17f2292eba00f71dedb010b7b003a8400f6b44d63559a10bc0052c678ac8ed9658aff4f858778ebb60cbaf53d82248a260c7255f943711e8ac31a4b7a4694dcdace3be25ea43bdc9dfd52d369292d8d7581a6979d1b8ad543baeb9296907e0926025f4c3597e98e2eacd048a5dedd0e9dabc3268ed35a91c6180908af07a95bf374573c7b4f611eb30bbb5f1721a6550f483dcaed51d84fdaa5c6a52d7c4d04ca4edfd2884483c2d5aaebf6f06c6fff8bff813923ac8c6edd0eadefab938442ff09b1b3ff926c963d67a01cccbd86cb69bb5e5a4adca82110f87d3ee7800b14412b48cd94feacbaa9c1921e816d0287ad1198b94fd6de314912b79938a0d00ef5968ca4cb506afa1496ce4886c8c44955a92c9d2395f108a357e240511cc7e6548ac4174e5b52cc1f03ea8fa8268a7283e9cd25518cc71114869537891b64337222f04c111407bc2c8777f1132e1b294ec533610fd1ae3b4aa7e20c315d87aeed3a19151677e04173fbd55e88669f515dea19c8b99f8d7e829734f615a9b95e278fec62cf2d1a37d535ef71996530c62e65bb6fde625447e9122cfd947d7032c7580bfa5286bdde0bd9c4f0c63cbceddc302e1daef7f27bf289f72456802560e4477b27520b45f3a39e787824f169b3fa0ec7fba1c37f4499d43a9cdca7595f3e9ab74223c34819b260130d8a7613653101cc9a6e236ac01965356c90814c632ed421a62654a457ccc66040026451610b94898d13292cf2096fc1744b8fe67cebbcee0a3830be987694e593d732f05e3c6503a71173dc9870c3eca017318b628dd651232ea1c424a98b394188c8b8dbf30d69f1976219fd5b1975f8deebabeca970581f011f428c164bb35e0d6be187a5a2887d6bb0889c41c5c24d0b173f05db5d3a9e50318b448b3c8c", @ANYRESDEC, @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000000000)) 589.384111ms ago: executing program 3 (id=3073): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x1200040, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRESOCT=0x0], 0xfe, 0x27f, &(0x7f00000005c0)="$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") keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='id:cb2e') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 491.563917ms ago: executing program 3 (id=3074): r0 = fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x1, 0x101a, r1, 0x0) fanotify_mark(r0, 0x80, 0x8, 0xffffffffffffffff, 0x0) 384.792335ms ago: executing program 3 (id=3075): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) syz_clone3(&(0x7f0000001000)={0x321a08000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 149.398124ms ago: executing program 3 (id=3076): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000800000060066008e8800001c0033"], 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 80.929306ms ago: executing program 3 (id=3077): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 0s ago: executing program 2 (id=3078): r0 = syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0x1, 0xc41, &(0x7f0000001b80)="$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") sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000044}, 0x48885) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc) kernel console output (not intermixed with test programs): d 36 [ 302.367332][ T787] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 302.395092][T11646] loop1: detected capacity change from 0 to 1024 [ 302.417537][T11646] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 302.460535][T11646] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 302.476220][T11646] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 302.496658][T11646] EXT4-fs error (device loop1): ext4_ext_check_inode:530: inode #3: comm syz.1.2294: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 302.520923][T11646] EXT4-fs (loop1): no journal found [ 302.526172][T11646] EXT4-fs (loop1): can't get journal size [ 302.547845][T11646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 302.548030][ T787] usb 3-1: Using ep0 maxpacket: 16 [ 302.561129][ T27] audit: type=1326 audit(1776302712.598:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11649 comm="syz.0.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2119c819 code=0x7ffc0000 [ 302.561178][ T27] audit: type=1326 audit(1776302712.598:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11649 comm="syz.0.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2119c819 code=0x7ffc0000 [ 302.561214][ T27] audit: type=1326 audit(1776302712.598:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11649 comm="syz.0.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ffa2119c819 code=0x7ffc0000 [ 302.590866][ T27] audit: type=1326 audit(1776302712.648:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11649 comm="syz.0.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2119c819 code=0x7ffc0000 [ 302.634593][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.664117][ T27] audit: type=1326 audit(1776302712.698:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11649 comm="syz.0.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ffa2119c819 code=0x7ffc0000 [ 302.719943][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.735471][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.776497][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.786697][ T787] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 302.800903][ T787] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 302.810511][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.821010][ T787] usb 3-1: config 0 descriptor?? [ 303.241182][ T787] microsoft 0003:045E:07DA.0013: No inputs registered, leaving [ 303.250255][ T787] microsoft 0003:045E:07DA.0013: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 303.261781][ T787] microsoft 0003:045E:07DA.0013: no inputs found [ 303.271409][ T787] microsoft 0003:045E:07DA.0013: could not initialize ff, continuing anyway [ 303.470566][ T787] usb 3-1: USB disconnect, device number 14 [ 304.778321][T11661] loop0: detected capacity change from 0 to 32768 [ 304.826123][T11661] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 scanned by syz.0.2307 (11661) [ 304.884546][T11661] BTRFS info (device loop0): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 304.920201][T11661] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 304.957574][T11661] BTRFS info (device loop0): using free space tree [ 305.142340][T11661] BTRFS info (device loop0): enabling ssd optimizations [ 305.187715][T11661] BTRFS info (device loop0): auto enabling async discard [ 305.344906][T11718] loop1: detected capacity change from 0 to 256 [ 305.384377][T11718] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 305.435170][ T5763] BTRFS info (device loop0): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 305.665085][T11726] loop2: detected capacity change from 0 to 128 [ 305.744375][T11726] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 305.845121][T11726] ext4 filesystem being mounted at /586/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.042181][ T5762] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 306.051323][ T5866] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 306.272099][ T5866] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.304050][ T5866] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 306.324844][ T5866] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 306.354592][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.379138][ T5866] usb 4-1: config 0 descriptor?? [ 306.718725][T11742] loop1: detected capacity change from 0 to 32768 [ 306.987659][T11745] loop2: detected capacity change from 0 to 32768 [ 307.003853][ T5866] Bluetooth: Can't get version to change to load ram patch err [ 307.019875][T11745] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop2 scanned by syz.2.2332 (11745) [ 307.035052][ T5866] Bluetooth: Loading sysconfig file failed [ 307.060261][ T5866] ath3k: probe of 4-1:0.0 failed with error -71 [ 307.114411][ T5866] usb 4-1: USB disconnect, device number 11 [ 307.150818][T11745] BTRFS info (device loop2): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 307.180240][T11745] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 307.234534][T11745] BTRFS info (device loop2): using free space tree [ 307.251225][T11760] loop1: detected capacity change from 0 to 1764 [ 307.325327][T11760] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 307.422596][T11745] BTRFS info (device loop2): enabling ssd optimizations [ 307.467062][T11745] BTRFS info (device loop2): auto enabling async discard [ 307.554209][ T5866] IPVS: starting estimator thread 0... [ 307.677079][T11785] IPVS: using max 21 ests per chain, 50400 per kthread [ 307.744268][ T5762] BTRFS info (device loop2): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 308.085929][ T5756] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 10 /dev/loop2 scanned by udevd (5756) [ 308.228539][T11804] loop1: detected capacity change from 0 to 64 [ 308.664036][T11812] loop1: detected capacity change from 0 to 1024 [ 308.690819][T11812] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 308.721920][T11812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.860118][T11812] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 308.930499][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.990196][T11813] loop3: detected capacity change from 0 to 32768 [ 309.000922][T11813] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.2356 (11813) [ 309.027033][T11813] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 309.037733][T11813] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 309.046481][T11813] BTRFS info (device loop3): using free space tree [ 309.084814][T11813] BTRFS info (device loop3): enabling ssd optimizations [ 309.093270][T11813] BTRFS info (device loop3): auto enabling async discard [ 309.203399][ T5765] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 309.225457][T11836] loop1: detected capacity change from 0 to 512 [ 309.355304][T11840] loop0: detected capacity change from 0 to 1024 [ 309.428571][T11840] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 309.486932][T11840] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.523634][T11843] loop1: detected capacity change from 0 to 512 [ 309.627123][T11843] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 309.634972][T11840] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 309.731553][T11843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.779686][T11843] ext4 filesystem being mounted at /584/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.779901][T11853] loop2: detected capacity change from 0 to 136 [ 309.836377][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.984867][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.523909][T11864] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 310.544152][T11864] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 310.554576][T11846] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 310.556956][T11864] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 310.625704][T11864] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 310.754529][ T5756] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 310.882033][T11877] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2376'. [ 311.316624][T11891] NILFS (loop1): invalid segment: Inconsistency found [ 311.346707][T11891] NILFS (loop1): trying rollback from an earlier position [ 311.396987][T11891] NILFS (loop1): recovery complete [ 311.545841][T11902] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 311.652161][T11902] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #17: comm syz.2.2387: inode has both inline data and extents flags [ 311.746212][T11902] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.2387: couldn't read orphan inode 17 (err -117) [ 311.815020][T11902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.942719][ T5762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.159271][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 312.399895][T11936] tipc: Started in network mode [ 312.404916][T11936] tipc: Node identity 00000000000000000040ffffe0000001, cluster identity 4711 [ 312.415046][T11936] tipc: Enabling of bearer rejected, failed to enable media [ 312.712323][T11948] set_capacity_and_notify: 6 callbacks suppressed [ 312.712337][T11948] loop2: detected capacity change from 0 to 2048 [ 312.799290][T11953] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 313.243934][T11966] loop0: detected capacity change from 0 to 1024 [ 313.283528][T11966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 313.341220][T11966] ext4 filesystem being mounted at /605/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.494639][T11975] loop1: detected capacity change from 0 to 512 [ 313.525079][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 313.538813][T11975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.732723][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 313.732736][ T27] audit: type=1326 audit(1776302723.788:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11978 comm="syz.2.2421" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f5db9c819 code=0x0 [ 313.794459][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.861548][T11983] loop1: detected capacity change from 0 to 1024 [ 313.913803][ T4512] hfsplus: b-tree write err: -5, ino 25 [ 313.927513][ T4512] hfsplus: b-tree write err: -5, ino 4 [ 313.933097][ T4512] hfsplus: b-tree write err: -5, ino 2 [ 313.996943][ T787] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 314.209180][ T787] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 314.230059][ T787] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 314.242470][ T787] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 314.253464][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.265048][T11979] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 314.281156][ T787] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 314.493216][ T787] usb 1-1: USB disconnect, device number 15 [ 315.273696][T12012] loop2: detected capacity change from 0 to 32768 [ 315.309127][T12012] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2436 (12012) [ 315.333475][T12012] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 315.345604][T12012] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 315.356088][T12012] BTRFS info (device loop2): enabling auto defrag [ 315.368633][T12012] BTRFS info (device loop2): use no compression [ 315.376492][T12012] BTRFS info (device loop2): max_inline at 4096 [ 315.384824][T12012] BTRFS info (device loop2): using free space tree [ 315.500373][T12012] BTRFS info (device loop2): enabling ssd optimizations [ 315.516837][T12012] BTRFS info (device loop2): auto enabling async discard [ 315.663926][T12017] loop3: detected capacity change from 0 to 40427 [ 315.684237][ T5762] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 315.707664][T12017] F2FS-fs (loop3): invalid crc value [ 315.750039][T12017] F2FS-fs (loop3): Found nat_bits in checkpoint [ 315.938330][T12017] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 316.014527][T12017] syz.3.2438: attempt to access beyond end of device [ 316.014527][T12017] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 316.082889][T12017] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 316.956227][T12052] loop1: detected capacity change from 0 to 32768 [ 317.024280][T12052] JBD2: Ignoring recovery information on journal [ 317.123749][T12052] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 317.132370][T12058] loop2: detected capacity change from 0 to 32768 [ 317.298196][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.306531][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.486305][ T5764] ocfs2: Unmounting device (7,1) on (node local) [ 317.860689][ C1] sd 0:0:1:0: [sda] tag#1904 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 317.871208][ C1] sd 0:0:1:0: [sda] tag#1904 CDB: Write(6) 0a 00 4e 23 00 00 00 06 fe 80 00 00 [ 318.232091][T12103] veth1_macvtap: left promiscuous mode [ 318.243264][T12103] macsec0: entered allmulticast mode [ 318.284395][T12103] veth1_macvtap: entered promiscuous mode [ 318.290372][T12103] veth1_macvtap: entered allmulticast mode [ 318.296469][T12103] macsec0: left allmulticast mode [ 318.307979][T12103] veth1_macvtap: left allmulticast mode [ 318.417865][T12089] loop2: detected capacity change from 0 to 32768 [ 318.454673][T12089] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.2463 (12089) [ 318.505522][T12089] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 318.537134][T12089] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 318.578764][T12089] BTRFS info (device loop2): using free space tree [ 318.707027][T12089] BTRFS info (device loop2): enabling ssd optimizations [ 318.714037][T12089] BTRFS info (device loop2): auto enabling async discard [ 318.722003][T12095] loop1: detected capacity change from 0 to 32768 [ 318.750830][T12095] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.2458 (12095) [ 318.846918][T12095] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 318.876246][T12095] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 318.897356][T12095] BTRFS info (device loop1): using free space tree [ 318.947648][ T5762] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 319.126496][T12095] BTRFS info (device loop1): enabling ssd optimizations [ 319.177344][T12095] BTRFS info (device loop1): auto enabling async discard [ 319.345772][T12129] loop0: detected capacity change from 0 to 32768 [ 319.407244][ T5756] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop2 scanned by udevd (5756) [ 319.455515][T12109] loop3: detected capacity change from 0 to 32768 [ 319.501907][T12129] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 319.571021][T12109] (syz.3.2470,12109,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 319.624977][ T5764] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 319.643148][T12129] XFS (loop0): Ending clean mount [ 319.692119][T12109] (syz.3.2470,12109,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 319.711526][T12129] XFS (loop0): Quotacheck needed: Please wait. [ 319.888193][T12109] JBD2: Ignoring recovery information on journal [ 319.947055][T12129] XFS (loop0): Quotacheck: Done. [ 319.971019][ T5757] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 10 /dev/loop1 scanned by udevd (5757) [ 320.052912][T12109] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 320.356640][ T5763] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 320.375828][T12109] (syz.3.2470,12109,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 320.394303][T12109] (syz.3.2470,12109,0):update_backups:188 ERROR: status = -12 [ 320.404912][T12109] ocfs2: Failed to update super blocks on 7,3 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 320.546417][T12166] bond0: option arp_interval: invalid value (18446744073709551615) [ 320.574675][T12166] bond0: option arp_interval: allowed values 0 - 2147483647 [ 320.627292][ T5765] ocfs2: Unmounting device (7,3) on (node local) [ 321.515000][T12191] loop2: detected capacity change from 0 to 4096 [ 321.622506][T12198] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 322.107855][T12215] loop3: detected capacity change from 0 to 64 [ 322.207247][T12217] Bluetooth: MGMT ver 1.22 [ 322.614261][T12207] loop2: detected capacity change from 0 to 32768 [ 322.666633][T12207] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2496 (12207) [ 322.727968][T12207] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 322.762099][T12207] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 322.784762][T12207] BTRFS info (device loop2): setting nodatasum [ 322.829648][T12207] BTRFS info (device loop2): force zlib compression, level 3 [ 322.869983][T12207] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 322.896814][T12207] BTRFS info (device loop2): use lzo compression, level 0 [ 322.904008][T12207] BTRFS info (device loop2): turning on flush-on-commit [ 322.957854][T12207] BTRFS info (device loop2): enabling auto defrag [ 322.976466][T12207] BTRFS info (device loop2): max_inline at 4096 [ 323.002284][T12207] BTRFS info (device loop2): using free space tree [ 323.114122][T12207] BTRFS info (device loop2): enabling ssd optimizations [ 323.256879][ T27] audit: type=1800 audit(1776302733.308:456): pid=12207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2496" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 323.363004][ T5762] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 323.373655][ T5752] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 323.437882][T12269] loop0: detected capacity change from 0 to 512 [ 323.581543][ T5752] usb 4-1: Using ep0 maxpacket: 16 [ 323.593541][T12269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.635540][ T5752] usb 4-1: config 0 has an invalid interface number: 7 but max is 0 [ 323.657034][ T5752] usb 4-1: config 0 has no interface number 0 [ 323.663183][ T5752] usb 4-1: config 0 interface 7 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.718576][ T27] audit: type=1800 audit(1776302733.778:457): pid=12269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2518" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 323.719061][T12269] fs-verity: sha256 using implementation "sha256-avx2" [ 323.743496][ T5752] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 323.763164][ T5752] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.771346][ T5752] usb 4-1: Product: syz [ 323.775591][ T5752] usb 4-1: Manufacturer: syz [ 323.781534][ T5752] usb 4-1: SerialNumber: syz [ 323.788591][ T5752] r8152-cfgselector 4-1: config 0 descriptor?? [ 323.798729][ T5752] r8152 4-1:0.7: Expected endpoints are not found [ 323.837558][T12269] fs-verity (loop0, inode 15): Error -22 reading file data [ 323.852229][T12269] fs-verity (loop0, inode 15): Error -22 building Merkle tree [ 324.015253][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.029034][ T5752] r8152-cfgselector 4-1: config 0 descriptor?? [ 324.217863][ T5752] r8152-cfgselector 4-1: Failed to set configuration 0 [ 324.254600][ T5752] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 324.269870][ T5752] usb 4-1: USB disconnect, device number 12 [ 324.573518][T12301] loop2: detected capacity change from 0 to 256 [ 324.618424][T12303] tipc: Started in network mode [ 324.625649][T12303] tipc: Node identity ac14140f, cluster identity 4711 [ 324.642103][T12303] tipc: Enabled bearer , priority 10 [ 324.914400][T12315] loop0: detected capacity change from 0 to 512 [ 324.986590][T12315] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.999649][T12315] ext4 filesystem being mounted at /642/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 325.073750][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.214857][T12326] program syz.1.2544 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 325.756904][ T5803] tipc: Node number set to 2886997007 [ 326.290857][ T5752] kernel read not supported for file /dsp (pid: 5752 comm: kworker/0:3) [ 326.326442][T12351] loop3: detected capacity change from 0 to 32768 [ 326.387367][T12351] JBD2: Ignoring recovery information on journal [ 326.532454][T12351] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 326.873053][T12383] loop1: detected capacity change from 0 to 16 [ 326.886548][T12383] erofs: (device loop1): mounted with root inode @ nid 36. [ 326.921900][T12383] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 327.088798][ T5765] ocfs2: Unmounting device (7,3) on (node local) [ 327.727545][T12405] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2581'. [ 327.777190][ T5801] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 327.892901][T12412] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2583'. [ 327.986922][ T5801] usb 3-1: Using ep0 maxpacket: 32 [ 328.020231][ T5801] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 328.040965][ T5801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.049342][ T5801] usb 3-1: Product: syz [ 328.053523][ T5801] usb 3-1: Manufacturer: syz [ 328.072149][ T5801] usb 3-1: SerialNumber: syz [ 328.099448][ T5801] usb 3-1: config 0 descriptor?? [ 328.117788][ T5801] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 328.135707][ T5801] dvb-usb: bulk message failed: -22 (4/0) [ 328.145742][ T5801] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 328.206939][ T5801] dvb-usb: bulk message failed: -22 (5/0) [ 328.212758][ T5801] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 328.270631][ T5801] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 328.297783][ T5801] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 328.305861][ T5801] usb 3-1: media controller created [ 328.332347][T12400] ttusb2: i2c wr len=59 too high [ 328.412465][ T5801] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 328.484370][T12408] loop0: detected capacity change from 0 to 32768 [ 328.486476][ T5801] usb 3-1: selecting invalid altsetting 3 [ 328.542582][ T5801] ttusb2: set interface to alts=3 failed [ 328.563711][T12408] JBD2: Ignoring recovery information on journal [ 328.643666][T12408] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 328.748495][ T5801] DVB: Unable to find symbol tda10086_attach() [ 328.754710][ T5801] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 328.800997][T12434] tipc: Cannot configure node identity twice [ 328.827192][ T5801] dvb-usb: bulk message failed: -22 (4/0) [ 328.832970][ T5801] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 328.856969][ T5801] dvb-usb: bulk message failed: -22 (5/0) [ 328.862837][ T5801] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 328.921983][ T5801] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 328.967227][ T5801] usb 3-1: USB disconnect, device number 15 [ 329.048291][ T5763] ocfs2: Unmounting device (7,0) on (node local) [ 329.094562][ T5801] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 329.245751][T12442] loop0: detected capacity change from 0 to 512 [ 329.283608][T12442] EXT4-fs: Ignoring removed i_version option [ 329.305192][T12444] netlink: 'syz.3.2598': attribute type 1 has an invalid length. [ 329.316961][T12442] EXT4-fs: Ignoring removed nomblk_io_submit option [ 329.328058][T12446] loop1: detected capacity change from 0 to 8 [ 329.393737][T12448] loop2: detected capacity change from 0 to 4096 [ 329.398051][T12442] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.2595: bad orphan inode 1 [ 329.415086][T12448] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 329.509662][T12442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.551101][T12446] SQUASHFS error: zstd decompression error: 10 [ 329.565372][T12448] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 329.575239][T12448] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 329.592792][T12446] SQUASHFS error: zstd decompression failed, data probably corrupt [ 329.606314][T12446] SQUASHFS error: Failed to read block 0x62b: -5 [ 329.649181][T12455] SQUASHFS error: Unable to read metadata cache entry [629] [ 329.670333][T12446] SQUASHFS error: Unable to read metadata cache entry [629] [ 329.685491][T12455] SQUASHFS error: Unable to read directory block [629:ff26] [ 329.709952][T12446] SQUASHFS error: Unable to read directory block [629:ff26] [ 329.720424][T12442] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 329.878464][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.989897][T12461] loop1: detected capacity change from 0 to 256 [ 330.032416][T12461] exfat: Deprecated parameter 'utf8' [ 330.090718][T12461] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 330.443237][T12480] loop3: detected capacity change from 0 to 128 [ 330.460637][T12479] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 330.472909][T12480] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 330.486614][T12479] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 330.518524][T12479] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 330.525027][T12479] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 330.537007][T12480] ext4 filesystem being mounted at /650/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 330.611288][T12479] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 330.626944][T12479] comedi comedi3: 8255: I/O port conflict (0x85,4) [ 330.634981][T12479] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 330.650373][ T5765] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 330.660083][T12479] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 330.677304][T12479] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 330.684200][T12479] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 330.699047][T12479] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 330.705708][T12479] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 330.713942][T12479] comedi comedi3: 8255: I/O port conflict (0x78b4042d,4) [ 330.812818][T12490] loop0: detected capacity change from 0 to 64 [ 330.959660][T12494] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2621'. [ 331.203304][T12499] loop2: detected capacity change from 0 to 8192 [ 331.228494][T12499] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 331.254388][T12499] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 331.271579][T12499] REISERFS (device loop2): using ordered data mode [ 331.278953][T12499] reiserfs: using flush barriers [ 331.307604][T12499] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 331.327574][T12499] REISERFS (device loop2): checking transaction log (loop2) [ 331.344719][T12499] REISERFS (device loop2): Using r5 hash to sort names [ 331.363601][T12499] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 331.388428][T12499] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 331.693879][T12517] loop0: detected capacity change from 0 to 128 [ 331.948746][T12525] loop2: detected capacity change from 0 to 128 [ 331.964309][T12525] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 331.982355][T12525] hpfs: filesystem error: improperly stopped [ 331.991896][T12525] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 332.012376][T12525] hpfs: You really don't want any checks? You are crazy... [ 332.023550][T12529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2637'. [ 332.040484][T12525] hpfs: hpfs_map_sector(): read error [ 332.046177][T12525] hpfs: code page support is disabled [ 332.057317][T12525] hpfs: hpfs_map_4sectors(): unaligned read [ 332.098331][T12525] hpfs: hpfs_map_4sectors(): unaligned read [ 332.104378][T12525] hpfs: filesystem error: unable to find root dir [ 332.360804][T12540] exfat: Deprecated parameter 'namecase' [ 332.374926][T12540] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 332.418766][T12540] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 332.564447][T12547] EXT4-fs: Ignoring removed nobh option [ 332.632487][T12547] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 332.648294][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 332.741248][T12547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.792871][T12547] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #12: block 7: comm syz.1.2646: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 332.856631][T12547] EXT4-fs (loop1): Remounting filesystem read-only [ 332.937200][T12561] erofs: (device loop0): mounted with root inode @ nid 36. [ 332.997211][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.005094][T12561] overlayfs: failed to get redirect (-117) [ 333.205661][T12568] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 333.224526][T12568] cramfs: empty filesystem [ 333.412771][T12573] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 333.438523][T12573] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 333.450986][T12573] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 333.465495][T12573] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 333.495316][T12573] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 333.509434][T12575] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 333.526430][T12573] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=a040e01c, mo2=0000] [ 333.555295][T12573] EXT4-fs (loop3): failed to initialize system zone (-117) [ 333.584882][T12552] set_capacity_and_notify: 6 callbacks suppressed [ 333.584896][T12552] loop2: detected capacity change from 0 to 32768 [ 333.587354][T12573] EXT4-fs (loop3): mount failed [ 333.660144][T12552] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 333.866144][T12552] XFS (loop2): Ending clean mount [ 333.872813][T12585] loop0: detected capacity change from 0 to 2048 [ 333.933133][T12585] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 333.963815][T12588] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 334.018108][ T5762] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 334.207786][ T27] audit: type=1326 audit(1776302744.268:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12591 comm="syz.1.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8264d9c819 code=0x7ffc0000 [ 334.207831][ T27] audit: type=1326 audit(1776302744.268:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12591 comm="syz.1.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8264d9c819 code=0x7ffc0000 [ 334.231748][ T27] audit: type=1326 audit(1776302744.298:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12591 comm="syz.1.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8264d9c819 code=0x7ffc0000 [ 334.231791][ T27] audit: type=1326 audit(1776302744.298:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12591 comm="syz.1.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8264d9c819 code=0x7ffc0000 [ 334.231832][ T27] audit: type=1326 audit(1776302744.298:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12591 comm="syz.1.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8264d9c819 code=0x7ffc0000 [ 334.246403][ T27] audit: type=1326 audit(1776302744.308:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12591 comm="syz.1.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8264d9c819 code=0x7ffc0000 [ 334.246633][ T27] audit: type=1326 audit(1776302744.308:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12591 comm="syz.1.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8264d9c819 code=0x7ffc0000 [ 334.539162][ C0] vkms_vblank_simulate: vblank timer overrun [ 334.846961][ T42] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 334.864257][T12612] loop3: detected capacity change from 0 to 16 [ 334.879090][T12612] erofs: (device loop3): mounted with root inode @ nid 36. [ 335.088554][ T42] usb 3-1: unable to get BOS descriptor or descriptor too short [ 335.106941][ T42] usb 3-1: not running at top speed; connect to a high speed hub [ 335.124850][ T42] usb 3-1: config 1 interface 0 altsetting 204 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 335.166884][ T42] usb 3-1: config 1 interface 0 has no altsetting 0 [ 335.176019][ T42] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 335.201718][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.211834][ T42] usb 3-1: Product: syz [ 335.227108][ T42] usb 3-1: Manufacturer: syz [ 335.231758][ T42] usb 3-1: SerialNumber: syz [ 335.268231][T12604] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 335.430565][T12610] loop1: detected capacity change from 0 to 32768 [ 335.478443][T12610] (syz.1.2673,12610,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 335.509294][ T42] usb 3-1: bad CDC descriptors [ 335.529235][ T42] usb 3-1: USB disconnect, device number 16 [ 335.537093][T12610] (syz.1.2673,12610,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 335.586436][T12610] JBD2: Ignoring recovery information on journal [ 335.682282][T12610] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 335.748344][T12626] loop3: detected capacity change from 0 to 8192 [ 335.827924][T12630] loop0: detected capacity change from 0 to 128 [ 335.857201][T12630] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 335.894546][T12630] hpfs: filesystem error: improperly stopped [ 335.916947][T12630] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 335.942505][T12630] hpfs: You really don't want any checks? You are crazy... [ 335.952549][ T5764] ocfs2: Unmounting device (7,1) on (node local) [ 335.973996][T12630] hpfs: hpfs_map_sector(): read error [ 335.992017][T12630] hpfs: code page support is disabled [ 336.006619][T12630] hpfs: hpfs_map_4sectors(): unaligned read [ 336.024705][T12630] hpfs: hpfs_map_4sectors(): unaligned read [ 336.060169][T12630] hpfs: filesystem error: unable to find root dir [ 336.481452][T12641] loop3: detected capacity change from 0 to 2048 [ 336.539506][T12637] loop2: detected capacity change from 0 to 4096 [ 336.540303][T12641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.577720][T12637] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 336.773851][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.645286][T12648] loop1: detected capacity change from 0 to 40427 [ 337.673455][T12648] F2FS-fs (loop1): invalid crc value [ 337.721100][T12648] F2FS-fs (loop1): Found nat_bits in checkpoint [ 337.790223][T12662] loop2: detected capacity change from 0 to 32768 [ 337.827258][T12660] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 337.832425][T12662] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.2694 (12662) [ 337.887482][T12660] JBD2: Ignoring recovery information on journal [ 337.897185][T12648] F2FS-fs (loop1): Start checkpoint disabled! [ 337.916482][T12662] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 337.938538][T12662] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 337.948908][T12648] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 337.966398][T12662] BTRFS info (device loop2): force zlib compression, level 3 [ 337.985452][T12660] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 338.001310][T12662] BTRFS info (device loop2): force clearing of disk cache [ 338.026902][T12662] BTRFS info (device loop2): use zlib compression, level 3 [ 338.047013][T12662] BTRFS info (device loop2): allowing degraded mounts [ 338.053835][T12662] BTRFS info (device loop2): turning on sync discard [ 338.103934][T12662] BTRFS info (device loop2): using free space tree [ 338.325972][T12659] F2FS-fs (loop3): invalid crc value [ 338.356980][ T5763] ocfs2: Unmounting device (7,0) on (node local) [ 338.423015][T12659] F2FS-fs (loop3): Found nat_bits in checkpoint [ 338.429675][T12662] BTRFS info (device loop2): enabling ssd optimizations [ 338.468213][T12662] BTRFS info (device loop2): rebuilding free space tree [ 338.717168][T12659] F2FS-fs (loop3): Start checkpoint disabled! [ 338.768489][T12659] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 338.870951][T12659] F2FS-fs (loop3): Stopped filesystem due to reason: 0 [ 339.032076][ T5762] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 339.321615][T12676] set_capacity_and_notify: 2 callbacks suppressed [ 339.321629][T12676] loop1: detected capacity change from 0 to 32768 [ 339.429356][T12676] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 339.608322][T12676] XFS (loop1): Ending clean mount [ 339.785637][ T5764] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 340.042628][T12697] loop3: detected capacity change from 0 to 32768 [ 340.129286][T12697] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 340.175659][T12690] loop0: detected capacity change from 0 to 40427 [ 340.204992][T12690] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 340.243987][T12690] F2FS-fs (loop0): invalid crc value [ 340.257049][T12697] XFS (loop3): Ending clean mount [ 340.285361][T12697] XFS (loop3): Quotacheck needed: Please wait. [ 340.299590][T12690] F2FS-fs (loop0): Found nat_bits in checkpoint [ 340.400360][T12697] XFS (loop3): Quotacheck: Done. [ 340.478566][T12702] loop2: detected capacity change from 0 to 32768 [ 340.508939][T12690] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 340.534765][ T5765] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 340.573266][T12702] JBD2: Ignoring recovery information on journal [ 340.738469][T12702] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 340.939274][T12702] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 340.986879][T12702] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 341.041283][T12702] OCFS2: File system is now read-only. [ 341.083706][T12702] (syz.2.2698,12702,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 341.104079][T12702] (syz.2.2698,12702,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 341.136358][T12702] (syz.2.2698,12702,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 341.166315][T12702] (syz.2.2698,12702,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 341.186886][T12702] (syz.2.2698,12702,1):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 341.205574][T12702] (syz.2.2698,12702,1):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 341.224275][T12702] (syz.2.2698,12702,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 341.242441][T12702] (syz.2.2698,12702,1):ocfs2_mknod:385 ERROR: status = -30 [ 341.255455][T12702] (syz.2.2698,12702,1):ocfs2_mknod:502 ERROR: status = -30 [ 341.279861][T12702] (syz.2.2698,12702,1):ocfs2_create:676 ERROR: status = -30 [ 341.300327][T12714] loop1: detected capacity change from 0 to 40427 [ 341.333452][T12714] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff [ 341.351039][T12714] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe4 [ 341.372065][T12714] F2FS-fs (loop1): invalid crc value [ 341.392515][T12714] F2FS-fs (loop1): Found nat_bits in checkpoint [ 341.435604][T12714] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 341.464466][ T5762] ocfs2: Unmounting device (7,2) on (node local) [ 341.490292][T12714] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 341.607524][ T967] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 341.797211][ T967] usb 1-1: Using ep0 maxpacket: 32 [ 341.804567][ T967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 341.826937][ T967] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 341.866838][ T967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 341.904438][ T967] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 341.934877][ T967] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 341.978611][ T967] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 342.017009][ T967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.049538][ T967] usb 1-1: config 0 descriptor?? [ 342.247555][T12735] comedi: valid board names for 8255 driver are: [ 342.264206][T12719] loop3: detected capacity change from 0 to 65536 [ 342.265641][ T967] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 342.292229][T12735] 8255 [ 342.295036][T12735] comedi: valid board names for vmk80xx driver are: [ 342.319056][T12735] vmk80xx [ 342.322153][T12735] comedi: valid board names for usbduxsigma driver are: [ 342.343186][T12735] usbduxsigma [ 342.346704][T12735] comedi: valid board names for usbduxfast driver are: [ 342.354226][T12735] usbduxfast [ 342.355875][T12719] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 342.357712][T12735] comedi: valid board names for usbdux driver are: [ 342.377236][T12735] usbdux [ 342.380282][T12735] comedi: valid board names for ni6501 driver are: [ 342.387088][T12735] ni6501 [ 342.390145][T12735] comedi: valid board names for dt9812 driver are: [ 342.397805][T12735] dt9812 [ 342.400903][T12735] comedi: valid board names for ni_labpc_cs driver are: [ 342.408129][T12735] ni_labpc_cs [ 342.411624][T12735] comedi: valid board names for ni_daq_700 driver are: [ 342.418779][T12735] ni_daq_700 [ 342.422194][T12735] comedi: valid board names for labpc_pci driver are: [ 342.429265][T12735] labpc_pci [ 342.432579][T12735] comedi: valid board names for adl_pci9118 driver are: [ 342.439823][T12735] pci9118dg [ 342.443154][T12735] pci9118hg [ 342.446426][T12735] pci9118hr [ 342.449754][T12735] comedi: valid board names for 8255_pci driver are: [ 342.456641][T12735] 8255_pci [ 342.481396][T12719] XFS (loop3): Ending clean mount [ 342.495447][T12735] comedi: valid board names for s526 driver are: [ 342.509389][T12735] s526 [ 342.512536][T12719] XFS (loop3): Quotacheck needed: Please wait. [ 342.519173][T12735] comedi: valid board names for multiq3 driver are: [ 342.527092][T12735] multiq3 [ 342.530230][T12735] comedi: valid board names for pcmuio driver are: [ 342.542527][T12735] pcmuio48 [ 342.545740][T12735] pcmuio96 [ 342.550704][T12735] comedi: valid board names for pcmmio driver are: [ 342.573862][T12735] pcmmio [ 342.574205][T12719] XFS (loop3): Quotacheck: Done. [ 342.577048][T12735] comedi: valid board names for pcmda12 driver are: [ 342.588906][T12735] pcmda12 [ 342.591957][T12735] comedi: valid board names for pcmad driver are: [ 342.599150][T12735] pcmad12 [ 342.602199][T12735] pcmad16 [ 342.605240][T12735] comedi: valid board names for ni_labpc driver are: [ 342.612077][T12735] lab-pc-1200 [ 342.615556][T12735] lab-pc-1200ai [ 342.619265][T12735] lab-pc+ [ 342.622424][T12735] comedi: valid board names for atmio16 driver are: [ 342.629253][T12735] atmio16 [ 342.632363][T12735] atmio16d [ 342.635651][T12735] comedi: valid board names for ni_at_ao driver are: [ 342.643949][T12735] at-ao-6 [ 342.647155][T12735] at-ao-10 [ 342.650358][T12735] comedi: valid board names for ni_at_a2150 driver are: [ 342.657539][T12735] ni_at_a2150 [ 342.661006][T12735] comedi: valid board names for adq12b driver are: [ 342.668237][T12735] adq12b [ 342.671272][T12735] comedi: valid board names for mpc624 driver are: [ 342.678110][T12735] mpc624 [ 342.681167][T12735] comedi: valid board names for c6xdigio driver are: [ 342.688046][T12735] c6xdigio [ 342.691288][T12735] comedi: valid board names for aio_iiro_16 driver are: [ 342.735238][T12735] aio_iiro_16 [ 342.744946][T12735] comedi: valid board names for aio_aio12_8 driver are: [ 342.756578][T12735] aio_aio12_8 [ 342.762268][T12735] aio_ai12_8 [ 342.768975][T12735] aio_ao12_4 [ 342.776873][T12735] comedi: valid board names for fl512 driver are: [ 342.785742][T12735] fl512 [ 342.789229][T12735] comedi: valid board names for dmm32at driver are: [ 342.795015][ T5765] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 342.795970][T12735] dmm32at [ 342.825838][T12735] comedi: valid board names for dt282x driver are: [ 342.834064][T12735] dt2821 [ 342.837791][T12735] dt2821-f [ 342.841044][T12735] dt2821-g [ 342.844168][T12735] dt2823 [ 342.847766][T12735] dt2824-pgh [ 342.851336][T12735] dt2824-pgl [ 342.879256][T12735] dt2825 [ 342.882252][T12735] dt2827 [ 342.885205][T12735] dt2828 [ 342.905962][T12735] dt2829 [ 342.921397][T12735] dt21-ez [ 342.924693][T12735] dt23-ez [ 342.939501][T12735] dt24-ez [ 342.942718][T12735] dt24-ez-pgl [ 342.946209][T12735] comedi: valid board names for dt2817 driver are: [ 342.953150][T12735] dt2817 [ 342.956203][T12735] comedi: valid board names for dt2815 driver are: [ 342.963578][T12735] dt2815 [ 342.966668][T12735] comedi: valid board names for dt2814 driver are: [ 342.995925][T12735] dt2814 [ 343.003315][T12735] comedi: valid board names for dt2811 driver are: [ 343.025365][T12735] dt2811-pgh [ 343.028925][T12735] dt2811-pgl [ 343.034819][T12735] comedi: valid board names for dt2801 driver are: [ 343.057951][T12735] dt2801 [ 343.062127][T12735] comedi: valid board names for das6402 driver are: [ 343.074788][T12735] das6402-12 [ 343.078368][T12735] das6402-16 [ 343.081782][T12735] comedi: valid board names for das1800 driver are: [ 343.088504][T12735] das-1701st [ 343.091911][T12735] das-1701st-da [ 343.095533][T12735] das-1702st [ 343.098947][T12735] das-1702st-da [ 343.102611][T12735] das-1702hr [ 343.105965][T12735] das-1702hr-da [ 343.111164][T12735] das-1701ao [ 343.114594][T12735] das-1702ao [ 343.118213][T12735] das-1801st [ 343.121579][T12735] das-1801st-da [ 343.125245][T12735] das-1802st [ 343.128776][T12735] das-1802st-da [ 343.132414][T12735] das-1802hr [ 343.135814][T12735] das-1802hr-da [ 343.139535][T12735] das-1801hc [ 343.142894][T12735] das-1802hc [ 343.146283][T12735] das-1801ao [ 343.149730][T12735] das-1802ao [ 343.153095][T12735] comedi: valid board names for das800 driver are: [ 343.159822][T12735] das-800 [ 343.162962][T12735] cio-das800 [ 343.166312][T12735] das-801 [ 343.169770][T12735] cio-das801 [ 343.173184][T12735] das-802 [ 343.176270][T12735] cio-das802 [ 343.179900][T12735] cio-das802/16 [ 343.183565][T12735] comedi: valid board names for isa-das08 driver are: [ 343.187019][ T5866] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 343.190706][T12735] isa-das08 [ 343.204966][T12735] das08-pgm [ 343.208443][T12735] das08-pgh [ 343.213182][T12735] das08-pgl [ 343.216508][T12735] das08-aoh [ 343.220059][T12735] das08-aol [ 343.223436][T12735] das08-aom [ 343.226716][T12735] das08/jr-ao [ 343.230426][T12735] das08jr-16-ao [ 343.234145][T12735] pc104-das08 [ 343.237910][T12735] das08jr/16 [ 343.241331][T12735] comedi: valid board names for das16m1 driver are: [ 343.248139][T12735] das16m1 [ 343.251465][T12735] comedi: valid board names for dac02 driver are: [ 343.258023][T12735] dac02 [ 343.261032][T12735] comedi: valid board names for rti802 driver are: [ 343.267901][T12735] rti802 [ 343.270907][T12735] comedi: valid board names for rti800 driver are: [ 343.277648][T12735] rti800 [ 343.282942][T12735] rti815 [ 343.286027][T12735] comedi: valid board names for pcm3724 driver are: [ 343.297107][T12735] pcm3724 [ 343.300485][T12735] comedi: valid board names for pcl818 driver are: [ 343.310790][T12735] pcl818l [ 343.315977][T12735] pcl818h [ 343.319722][T12735] pcl818hd [ 343.322926][T12735] pcl818hg [ 343.326117][T12735] pcl818 [ 343.329362][T12735] pcl718 [ 343.332500][T12735] pcm3718 [ 343.335608][T12735] comedi: valid board names for pcl816 driver are: [ 343.348349][T12735] pcl816 [ 343.351394][T12735] pcl814b [ 343.354533][T12735] comedi: valid board names for pcl812 driver are: [ 343.361854][T12735] pcl812 [ 343.365443][T12735] pcl812pg [ 343.370687][T12735] acl8112pg [ 343.374035][T12735] acl8112dg [ 343.378151][T12735] acl8112hg [ 343.381383][T12735] a821pgl [ 343.384420][T12735] a821pglnda [ 343.391206][T12735] a821pgh [ 343.394260][T12735] a822pgl [ 343.397444][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 343.402736][T12735] a822pgh [ 343.405810][T12735] a823pgl [ 343.409219][T12735] a823pgh [ 343.412267][T12735] pcl813 [ 343.415191][T12735] pcl813b [ 343.419179][T12735] acl8113 [ 343.422309][T12735] iso813 [ 343.425435][T12735] acl8216 [ 343.429063][T12735] a826pg [ 343.432175][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.443786][T12735] comedi: valid board names for pcl730 driver are: [ 343.450393][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.456827][T12735] pcl730 [ 343.460221][ T5866] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 343.472220][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.473863][T12735] iso730 [ 343.488787][T12735] acl7130 [ 343.489478][ T5866] usb 2-1: config 0 descriptor?? [ 343.491838][T12735] pcm3730 [ 343.491848][T12735] pcl725 [ 343.491854][T12735] p8r8dio [ 343.491860][T12735] acl7225b [ 343.491867][T12735] p16r16dio [ 343.491873][T12735] pcl733 [ 343.516093][T12735] pcl734 [ 343.519850][T12735] opmm-1616-xt [ 343.523331][T12735] pearl-mm-p [ 343.526626][T12735] ir104-pbf [ 343.529915][T12735] comedi: valid board names for pcl726 driver are: [ 343.536426][T12735] pcl726 [ 343.539543][T12735] pcl727 [ 343.542498][T12735] pcl728 [ 343.545442][T12735] acl6126 [ 343.548565][T12735] acl6128 [ 343.551601][T12735] comedi: valid board names for pcl724 driver are: [ 343.558405][T12735] pcl724 [ 343.561366][T12735] pcl722 [ 343.564298][T12735] pcl731 [ 343.567318][T12735] acl7122 [ 343.570356][T12735] acl7124 [ 343.573382][T12735] pet48dio [ 343.576505][T12735] pcmio48 [ 343.579630][T12735] onyx-mm-dio [ 343.583017][T12735] comedi: valid board names for pcl711 driver are: [ 343.590098][T12735] pcl711 [ 343.593086][T12735] pcl711b [ 343.596118][T12735] acl8112hg [ 343.599643][T12735] acl8112dg [ 343.602860][T12735] comedi: valid board names for amplc_pc263 driver are: [ 343.610742][T12735] pc263 [ 343.613705][T12735] comedi: valid board names for amplc_pc236 driver are: [ 343.621289][T12735] pc36at [ 343.624241][T12735] comedi: valid board names for amplc_dio200 driver are: [ 343.631342][T12735] pc212e [ 343.634294][T12735] pc214e [ 343.637591][T12735] pc215e [ 343.640539][T12735] pc218e [ 343.643469][T12735] pc272e [ 343.646420][T12735] comedi: valid board names for comedi_parport driver are: [ 343.655496][T12735] comedi_parport [ 343.659268][ T967] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 343.667154][T12735] comedi: valid board names for comedi_test driver are: [ 343.674394][T12735] comedi_test [ 343.678416][T12735] comedi: valid board names for comedi_bond driver are: [ 343.685383][T12735] comedi_bond [ 343.806286][ T27] audit: type=1326 audit(1776302753.858:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12760 comm="syz.2.2714" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7f5db9c819 code=0x0 [ 343.856837][ T967] usb 4-1: Using ep0 maxpacket: 16 [ 343.864343][ T967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.875728][ T967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.885604][ T967] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 343.899023][ T967] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 343.908207][ T967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.924112][ T967] usb 4-1: config 0 descriptor?? [ 343.924293][ T5866] bigben 0003:146B:0902.0014: unexpected rdesc, please submit for review [ 343.945686][ T5866] bigben 0003:146B:0902.0014: unknown main item tag 0x0 [ 343.954939][ T5866] bigben 0003:146B:0902.0014: unknown main item tag 0x0 [ 343.965706][ T5866] bigben 0003:146B:0902.0014: unknown main item tag 0x0 [ 343.973019][ T5866] bigben 0003:146B:0902.0014: unknown main item tag 0x0 [ 343.983583][ T5866] bigben 0003:146B:0902.0014: item fetching failed at offset 4/5 [ 343.992185][ T5866] bigben 0003:146B:0902.0014: parse failed [ 343.998430][ T5866] bigben: probe of 0003:146B:0902.0014 failed with error -22 [ 344.165554][ T5866] usb 2-1: USB disconnect, device number 16 [ 344.334905][ T42] usb 1-1: USB disconnect, device number 16 [ 344.355930][ T967] microsoft 0003:045E:07DA.0015: unknown main item tag 0x6 [ 344.374197][ T967] microsoft 0003:045E:07DA.0015: unknown main item tag 0x3 [ 344.377369][ T42] usblp0: removed [ 344.391153][ T967] microsoft 0003:045E:07DA.0015: unbalanced collection at end of report description [ 344.417000][ T967] microsoft 0003:045E:07DA.0015: parse failed [ 344.423727][ T967] microsoft: probe of 0003:045E:07DA.0015 failed with error -22 [ 344.588840][ T967] usb 4-1: USB disconnect, device number 13 [ 344.621271][T12768] loop0: detected capacity change from 0 to 256 [ 344.669719][T12768] FAT-fs (loop0): Directory bread(block 64) failed [ 344.676317][T12768] FAT-fs (loop0): Directory bread(block 65) failed [ 344.729906][T12768] FAT-fs (loop0): Directory bread(block 66) failed [ 344.736489][T12768] FAT-fs (loop0): Directory bread(block 67) failed [ 344.756319][T12770] loop2: detected capacity change from 0 to 128 [ 344.763251][T12768] FAT-fs (loop0): Directory bread(block 68) failed [ 344.776698][T12768] FAT-fs (loop0): Directory bread(block 69) failed [ 344.784491][T12768] FAT-fs (loop0): Directory bread(block 70) failed [ 344.823796][T12768] FAT-fs (loop0): Directory bread(block 71) failed [ 344.846946][T12768] FAT-fs (loop0): Directory bread(block 72) failed [ 344.873099][T12768] FAT-fs (loop0): Directory bread(block 73) failed [ 345.276116][T12782] loop3: detected capacity change from 0 to 512 [ 345.308320][T12782] FAT-fs (loop3): Unrecognized mount option "appraise" or missing value [ 345.789024][T12778] loop0: detected capacity change from 0 to 32768 [ 345.803541][T12778] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2722 (12778) [ 345.846522][T12778] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 345.864721][T12778] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 345.876135][T12778] BTRFS info (device loop0): setting nodatacow, compression disabled [ 345.886493][T12778] BTRFS info (device loop0): enabling auto defrag [ 345.895006][T12778] BTRFS info (device loop0): max_inline at 0 [ 345.901696][T12778] BTRFS info (device loop0): using free space tree [ 346.002456][T12778] BTRFS info (device loop0): auto enabling async discard [ 346.026606][T12784] loop2: detected capacity change from 0 to 32768 [ 346.526599][ T5763] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 347.494320][T12821] loop3: detected capacity change from 0 to 32768 [ 347.551565][T12821] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 347.596515][T12821] XFS (loop3): Ending clean mount [ 347.726715][ T5765] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 347.827781][T12825] loop2: detected capacity change from 0 to 32768 [ 347.907234][T12825] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 347.998788][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 348.056912][T12825] XFS (loop2): Ending clean mount [ 348.079434][T12855] loop0: detected capacity change from 0 to 128 [ 348.088130][T12855] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 348.096377][T12825] XFS (loop2): Quotacheck needed: Please wait. [ 348.130874][T12855] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 348.193465][T12825] XFS (loop2): Quotacheck: Done. [ 348.211796][ T27] audit: type=1800 audit(1776302758.268:466): pid=12855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2744" name="file1" dev="loop0" ino=1048721 res=0 errno=0 [ 348.264484][ T27] audit: type=1800 audit(1776302758.318:467): pid=12825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2731" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 348.362591][ T5762] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 348.456909][ T11] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 348.835263][ T27] audit: type=1326 audit(1776302758.878:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12870 comm="syz.0.2751" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa2119c819 code=0x0 [ 348.967115][T12876] cifs: Bad value for 'source' [ 349.222351][T12884] loop3: detected capacity change from 0 to 4096 [ 349.249846][T12884] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 349.313285][T12884] ntfs: volume version 3.1. [ 349.342220][T12884] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp775. You might want to try to use the mount option nls=utf8. [ 349.369431][T12884] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 349.775268][T12882] loop1: detected capacity change from 0 to 40427 [ 349.816474][T12882] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 349.838339][T12882] F2FS-fs (loop1): invalid crc value [ 349.884718][T12882] F2FS-fs (loop1): Found nat_bits in checkpoint [ 350.017575][T12882] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 350.206669][T12882] F2FS-fs (loop1): inject checkpoint error in f2fs_balance_fs of f2fs_setxattr+0x1b2/0x310 [ 350.234680][T12882] F2FS-fs (loop1): Stopped filesystem due to reason: 1 [ 350.268234][T12882] overlayfs: failed to create directory ./bus/index (errno: 5); mounting read-only [ 350.280910][T12882] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 350.334948][ T5764] syz-executor: attempt to access beyond end of device [ 350.334948][ T5764] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 350.746892][ T5804] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 350.948015][ T5804] usb 3-1: Using ep0 maxpacket: 32 [ 350.983503][ T5804] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 351.004706][ T5804] usb 3-1: config 0 has no interface number 0 [ 351.035722][ T5804] usb 3-1: config 0 interface 12 has no altsetting 0 [ 351.060502][ T5804] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 351.081651][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.115534][ T5804] usb 3-1: Product: syz [ 351.124808][ T5804] usb 3-1: Manufacturer: syz [ 351.129793][ T5804] usb 3-1: SerialNumber: syz [ 351.151676][ T5804] usb 3-1: config 0 descriptor?? [ 351.420892][T12920] loop0: detected capacity change from 0 to 128 [ 351.731862][ T6133] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 352.011785][ T5804] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 352.022125][ T5804] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 352.030573][ T5804] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 352.039349][ T5804] f81534: probe of 3-1:0.12 failed with error -71 [ 352.099501][ T5804] usb 3-1: USB disconnect, device number 17 [ 352.360123][T12929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2777'. [ 352.389694][T12929] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2777'. [ 352.416925][T12929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2777'. [ 352.431712][T12929] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2777'. [ 352.441211][T12929] netlink: 'syz.3.2777': attribute type 6 has an invalid length. [ 352.574439][T12931] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 352.637673][ T967] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 352.792241][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 352.793732][ T72] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.814652][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 352.825126][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 352.848990][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 352.851681][ T967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.874922][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 352.883320][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 352.894181][ T967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.937299][ T967] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 352.947346][ T967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.968581][ T967] usb 1-1: config 0 descriptor?? [ 353.150616][ T72] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.323546][ T72] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.427750][ T967] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 353.455563][ T967] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 353.482308][ T967] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 353.510658][ T967] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 353.552480][ T967] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 353.563937][ T72] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.584581][ T967] playstation 0003:054C:0DF2.0016: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 353.730414][T12936] chnl_net:caif_netlink_parms(): no params data found [ 353.870311][ T967] playstation 0003:054C:0DF2.0016: Failed to retrieve feature with reportID 32: -71 [ 353.889494][ T967] playstation 0003:054C:0DF2.0016: Failed to retrieve DualSense firmware info: -71 [ 353.899745][ T967] playstation 0003:054C:0DF2.0016: Failed to get firmware info from DualSense [ 353.908813][ T967] playstation 0003:054C:0DF2.0016: Failed to create dualsense. [ 353.928076][ T967] playstation: probe of 0003:054C:0DF2.0016 failed with error -71 [ 353.953182][ T967] usb 1-1: USB disconnect, device number 17 [ 354.073889][ T72] tipc: Left network mode [ 354.074586][T12936] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.107343][T12936] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.131741][T12936] bridge_slave_0: entered allmulticast mode [ 354.152008][T12936] bridge_slave_0: entered promiscuous mode [ 354.314756][T12936] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.330296][T12936] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.347414][T12936] bridge_slave_1: entered allmulticast mode [ 354.361338][T12936] bridge_slave_1: entered promiscuous mode [ 354.595239][T12936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.635568][T12936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.720113][T12982] loop0: detected capacity change from 0 to 128 [ 354.957064][ T5775] Bluetooth: hci0: command tx timeout [ 355.245233][T12936] team0: Port device team_slave_0 added [ 355.287737][T12936] team0: Port device team_slave_1 added [ 355.471658][T12936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.479482][T12936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.525380][T12936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.527222][ T5866] kernel write not supported for file /input/mouse0 (pid: 5866 comm: kworker/1:4) [ 355.538457][T12936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.558341][T12936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.594730][T12936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.686055][T12936] hsr_slave_0: entered promiscuous mode [ 355.701909][T12936] hsr_slave_1: entered promiscuous mode [ 355.709416][T12936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.717241][T12936] Cannot create hsr debugfs directory [ 355.877975][ T5866] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 356.097963][ T5866] usb 4-1: Using ep0 maxpacket: 16 [ 356.107639][ T5866] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 356.129406][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.163670][ T5866] usb 4-1: Product: syz [ 356.181583][ T5866] usb 4-1: Manufacturer: syz [ 356.186238][ T5866] usb 4-1: SerialNumber: syz [ 356.236961][ T5801] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 356.359258][ T72] hsr_slave_0: left promiscuous mode [ 356.371773][ T72] hsr_slave_1: left promiscuous mode [ 356.379445][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.387285][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.396026][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.404450][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.414063][ T72] bridge_slave_1: left allmulticast mode [ 356.425574][ T72] bridge_slave_1: left promiscuous mode [ 356.427912][ T5866] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 356.436016][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.458721][ T5801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 356.466067][ T5866] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 356.475040][ T5801] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 356.491241][ T5866] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 356.508045][ T72] bridge_slave_0: left allmulticast mode [ 356.508353][ T5801] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 356.522994][ T5866] usb 4-1: media controller created [ 356.530447][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.531233][ T5801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.554107][ T5801] usb 3-1: config 0 descriptor?? [ 356.610590][ T5866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 356.633807][ T72] batadv_slave_1: left promiscuous mode [ 356.646533][ T5866] zl10353_read_register: readreg error (reg=127, ret==-71) [ 356.646633][ T72] team_slave_0: left promiscuous mode [ 356.659666][ T72] team_slave_1: left promiscuous mode [ 356.674964][ T72] veth1_macvtap: left promiscuous mode [ 356.683881][ T72] veth0_macvtap: left promiscuous mode [ 356.683882][ T5866] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5 [ 356.688079][ T5866] usb 4-1: USB disconnect, device number 14 [ 356.689727][ T72] veth1_vlan: left promiscuous mode [ 356.708724][ T72] veth0_vlan: left promiscuous mode [ 356.974350][ T5801] saitek 0003:06A3:0621.0017: ignoring exceeding usage max [ 356.982806][ T5801] saitek 0003:06A3:0621.0017: unknown main item tag 0x1 [ 356.989972][ T5801] saitek 0003:06A3:0621.0017: collection stack underflow [ 356.997165][ T5801] saitek 0003:06A3:0621.0017: item 0 4 0 12 parsing failed [ 357.005083][ T5801] saitek 0003:06A3:0621.0017: parse failed [ 357.011104][ T5801] saitek: probe of 0003:06A3:0621.0017 failed with error -22 [ 357.038194][ T5775] Bluetooth: hci0: command tx timeout [ 357.194761][ T5801] usb 3-1: USB disconnect, device number 18 [ 357.425942][T13027] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2806'. [ 357.440780][ T5771] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 357.447070][ T5775] Bluetooth: hci4: command 0x1003 tx timeout [ 357.743140][T13033] 9p: Unknown access argument : -22 [ 358.103813][T13039] loop3: detected capacity change from 0 to 128 [ 358.109380][ T72] team0 (unregistering): Port device team_slave_1 removed [ 358.180501][T13039] syz.3.2812: attempt to access beyond end of device [ 358.180501][T13039] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 358.288551][ T72] team0 (unregistering): Port device team_slave_0 removed [ 358.458209][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.500728][T13035] loop2: detected capacity change from 0 to 32768 [ 358.565265][T13035] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 358.574771][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.607669][T13035] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 358.715349][T13035] XFS (loop2): Ending clean mount [ 358.765391][T13035] XFS (loop2): Quotacheck needed: Please wait. [ 358.918306][T13035] XFS (loop2): Quotacheck: Done. [ 358.958442][ T27] audit: type=1800 audit(1776302769.018:469): pid=13035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2810" name="file2" dev="loop2" ino=4423 res=0 errno=0 [ 359.070999][ T5762] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 359.131512][ T5771] Bluetooth: hci0: command tx timeout [ 359.312698][ T72] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 359.473775][ T72] bond0 (unregistering): Released all slaves [ 359.611240][T13056] loop2: detected capacity change from 0 to 1024 [ 359.733271][ T12] hfsplus: b-tree write err: -5, ino 25 [ 359.761992][T12936] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 359.769185][ T12] hfsplus: b-tree write err: -5, ino 4 [ 359.774753][ T12] hfsplus: b-tree write err: -5, ino 2 [ 359.792396][ T12] hfsplus: b-tree write err: -5, ino 26 [ 359.846484][T12936] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 359.899684][T12936] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 359.937386][T12936] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 360.063266][T13064] loop3: detected capacity change from 0 to 64 [ 360.304327][T13064] syz.3.2820: attempt to access beyond end of device [ 360.304327][T13064] loop3: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 360.389159][T13064] Buffer I/O error on dev loop3, logical block 134217734, lost async page write [ 360.422452][T12936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.526381][T12936] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.565117][ T4512] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.572346][ T4512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.661665][ T3417] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.670744][ T3417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.735835][ T72] IPVS: stop unused estimator thread 0... [ 361.488594][T12936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.527495][T13110] loop0: detected capacity change from 0 to 8192 [ 361.614447][T13110] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 361.679315][T13091] loop2: detected capacity change from 0 to 32768 [ 361.694657][T13110] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 361.727009][T13110] REISERFS (device loop0): using ordered data mode [ 361.736434][T13110] reiserfs: using flush barriers [ 361.763877][T13091] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 361.796953][T13110] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 361.833044][T13110] REISERFS (device loop0): checking transaction log (loop0) [ 361.900087][T13110] REISERFS (device loop0): Using r5 hash to sort names [ 362.055011][T13110] reiserfs: enabling write barrier flush mode [ 362.078549][T13091] XFS (loop2): Ending clean mount [ 362.120048][T13110] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 362.184076][T13110] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 362.219925][T13110] REISERFS (device loop0): Remounting filesystem read-only [ 362.228217][ T5762] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 362.266895][T13110] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 362.311993][T13110] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 362.366887][T13110] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 362.389320][T13110] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error [ 362.414920][T13110] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 362.443053][T12936] veth0_vlan: entered promiscuous mode [ 362.518584][T13110] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 362.562091][T12936] veth1_vlan: entered promiscuous mode [ 362.592988][T13110] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 362.658328][T13110] REISERFS warning (device loop0): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 362.670395][T12936] veth0_macvtap: entered promiscuous mode [ 362.710032][T12936] veth1_macvtap: entered promiscuous mode [ 362.748931][T13110] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 362.784267][T13110] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 362.788949][T12936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.806270][T13110] REISERFS (device loop0): Remounting filesystem read-only [ 362.877522][T12936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.906814][T12936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.941744][T12936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.964652][T12936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.980230][T13128] loop3: detected capacity change from 0 to 32768 [ 362.987108][T12936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.038803][T12936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.091651][T12936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.112960][T13128] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 363.170208][T12936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.229579][T12936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.240209][T12936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.250151][T12936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.260739][T12936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.272055][T12936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.289529][T12936] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.302917][T12936] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.314076][T12936] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.322869][T12936] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.564654][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.594547][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.604283][T13128] XFS (loop3): Starting recovery (logdev: internal) [ 363.672142][ T3417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.684489][T13128] XFS (loop3): Ending recovery (logdev: internal) [ 363.698483][ T3417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.856182][ T5765] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 363.897188][ T5866] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 364.023248][T13178] loop2: detected capacity change from 0 to 64 [ 364.088066][ T5866] usb 1-1: Using ep0 maxpacket: 32 [ 364.134074][ T5866] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 364.165940][ T5866] usb 1-1: config 0 interface 0 has no altsetting 0 [ 364.198610][ T5866] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 364.243572][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.274302][ T5866] usb 1-1: config 0 descriptor?? [ 364.415761][T13185] loop4: detected capacity change from 0 to 22 [ 364.446554][T13188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2846'. [ 364.468017][T13188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2846'. [ 364.479532][T13185] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 364.546238][T13185] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 364.689103][T13195] loop2: detected capacity change from 0 to 256 [ 364.868030][T13199] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2849'. [ 364.906001][T13199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2849'. [ 364.924052][ T5866] usbhid 1-1:0.0: can't add hid device: -71 [ 364.943630][ T5866] usbhid: probe of 1-1:0.0 failed with error -71 [ 364.977249][ T5866] usb 1-1: USB disconnect, device number 18 [ 365.161434][ T787] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 365.366884][ T787] usb 5-1: Using ep0 maxpacket: 8 [ 365.386079][ T787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 365.416964][ T787] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 365.457172][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.476219][T13218] loop3: detected capacity change from 0 to 8192 [ 365.478474][ T787] usb 5-1: config 0 descriptor?? [ 365.540144][T13218] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 365.584482][T13224] loop0: detected capacity change from 0 to 256 [ 365.605652][T13218] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 365.630324][T13224] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 365.633850][T13218] REISERFS (device loop3): using ordered data mode [ 365.653268][T13218] reiserfs: using flush barriers [ 365.663155][T13218] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 365.680704][T13218] REISERFS (device loop3): checking transaction log (loop3) [ 365.701121][T13224] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 365.713477][ T787] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 365.788769][T13224] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 365.870858][T13218] REISERFS (device loop3): Using r5 hash to sort names [ 365.884706][T13218] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 365.916517][ T23] usb 5-1: USB disconnect, device number 2 [ 366.113535][T13212] loop2: detected capacity change from 0 to 32768 [ 366.191192][T13212] (syz.2.2853,13212,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 366.235205][T13212] (syz.2.2853,13212,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 366.331621][T13212] JBD2: Ignoring recovery information on journal [ 366.511560][T13212] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 366.855610][ T5762] ocfs2: Unmounting device (7,2) on (node local) [ 367.034732][T13236] loop3: detected capacity change from 0 to 32768 [ 367.105517][T13236] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 367.105517][T13236] [ 367.117396][ T5801] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 367.129853][T13236] xtLookup: xtSearch returned -5 [ 367.134832][T13236] add_index: get/read_metapage failed! [ 367.141173][T13236] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 367.141173][T13236] [ 367.152700][T13236] xtLookup: xtSearch returned -5 [ 367.161814][T13236] free_index: error reading directory table [ 367.184645][T13236] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 367.184645][T13236] [ 367.221270][T13233] loop0: detected capacity change from 0 to 32768 [ 367.237403][T13236] xtLookup: xtSearch returned -5 [ 367.257539][T13236] free_index: error reading directory table [ 367.271421][T13236] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 367.271421][T13236] [ 367.304446][T13233] syz.0.2856: attempt to access beyond end of device [ 367.304446][T13233] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 367.319387][T13236] xtLookup: xtSearch returned -5 [ 367.324367][T13236] free_index: error reading directory table [ 367.331275][ T5801] usb 5-1: Using ep0 maxpacket: 16 [ 367.342907][T13233] lbmIODone: I/O error in JFS log [ 367.366262][ T5801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.385647][T13236] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 367.385647][T13236] [ 367.386428][T13233] *** Log Format Error ! *** [ 367.407139][ T5801] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 367.416216][ T5801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.440228][T13236] xtLookup: xtSearch returned -5 [ 367.449139][T13233] lmLogInit: exit(-22) [ 367.450289][T13236] free_index: error reading directory table [ 367.464284][T13233] lmLogOpen: exit(-22) [ 367.469677][T13236] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 367.469677][T13236] [ 367.491089][ T5801] usb 5-1: config 0 descriptor?? [ 367.500086][T13236] xtLookup: xtSearch returned -5 [ 367.520092][T13236] free_index: error reading directory table [ 367.543006][T13233] ERROR: (device loop0): jfs_link: read-only filesystem [ 367.543006][T13233] [ 367.627070][T13233] ERROR: (device loop0): remounting filesystem as read-only [ 367.785443][T13258] loop2: detected capacity change from 0 to 256 [ 367.937682][T13258] FAT-fs (loop2): Directory bread(block 64) failed [ 367.946924][T13258] FAT-fs (loop2): Directory bread(block 65) failed [ 367.961171][ T5801] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 367.968869][T13258] FAT-fs (loop2): Directory bread(block 66) failed [ 367.975421][T13258] FAT-fs (loop2): Directory bread(block 67) failed [ 368.003474][ T5801] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 368.026886][ T5801] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 368.033987][ T5801] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 368.041310][T13258] FAT-fs (loop2): Directory bread(block 68) failed [ 368.066392][T13258] FAT-fs (loop2): Directory bread(block 69) failed [ 368.074659][ T5801] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 368.087998][T13258] FAT-fs (loop2): Directory bread(block 70) failed [ 368.095000][T13258] FAT-fs (loop2): Directory bread(block 71) failed [ 368.107636][ T5801] mcp2221 0003:04D8:00DD.0018: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 368.124325][T13258] FAT-fs (loop2): Directory bread(block 72) failed [ 368.131315][T13258] FAT-fs (loop2): Directory bread(block 73) failed [ 368.154159][ C0] usb 5-1: input irq status -75 received [ 368.373950][ T5804] usb 5-1: USB disconnect, device number 3 [ 368.627538][ T787] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 368.839175][ T787] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.869934][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.903388][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.942111][ T787] usb 4-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 368.956648][T13291] kAFS: unable to lookup cell '' [ 368.976855][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.989315][ T787] usb 4-1: config 0 descriptor?? [ 369.147233][T13297] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2874'. [ 369.232612][T13303] loop0: detected capacity change from 0 to 512 [ 369.254639][T13303] EXT4-fs: Ignoring removed bh option [ 369.280863][T13303] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 369.424731][ T787] wacom 0003:056A:0010.0019: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 369.449763][T13303] EXT4-fs (loop0): 1 truncate cleaned up [ 369.459164][T13303] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.503600][ T787] wacom 0003:056A:0010.0019: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.3-1/input0 [ 369.574341][ T787] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0010.0019/input/input24 [ 369.635147][T13314] loop2: detected capacity change from 0 to 256 [ 369.784911][T13314] FAT-fs (loop2): Directory bread(block 64) failed [ 369.791574][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.806813][T13314] FAT-fs (loop2): Directory bread(block 65) failed [ 369.845868][T13314] FAT-fs (loop2): Directory bread(block 66) failed [ 369.855376][ T787] usb 4-1: USB disconnect, device number 15 [ 369.876932][T13314] FAT-fs (loop2): Directory bread(block 67) failed [ 369.894250][T13314] FAT-fs (loop2): Directory bread(block 68) failed [ 369.922909][T13314] FAT-fs (loop2): Directory bread(block 69) failed [ 369.952202][T13314] FAT-fs (loop2): Directory bread(block 70) failed [ 369.970835][T13314] FAT-fs (loop2): Directory bread(block 71) failed [ 369.987029][T13314] FAT-fs (loop2): Directory bread(block 72) failed [ 370.012543][T13314] FAT-fs (loop2): Directory bread(block 73) failed [ 370.097124][ T5804] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 370.114111][ T27] audit: type=1800 audit(1776302780.168:470): pid=13314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2879" name="bus" dev="loop2" ino=1048749 res=0 errno=0 [ 370.152703][T13314] syz.2.2879: attempt to access beyond end of device [ 370.152703][T13314] loop2: rw=2049, sector=1224, nr_sectors = 76 limit=256 [ 370.287349][ T5803] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 370.299797][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.320031][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.341047][ T5804] usb 5-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 370.362555][ T5804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.385505][ T5804] usb 5-1: config 0 descriptor?? [ 370.494977][ T5803] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 370.519663][ T5803] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 370.539698][ T5803] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 370.556991][ T787] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 370.567922][ T5803] usb 1-1: config 0 interface 0 has no altsetting 0 [ 370.576125][ T5803] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 370.591203][ T5803] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 370.605528][ T5803] usb 1-1: config 0 interface 0 has no altsetting 0 [ 370.627290][ T5803] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 370.659194][ T5803] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 370.673551][ T5803] usb 1-1: config 0 interface 0 has no altsetting 0 [ 370.682555][ T5803] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 370.697262][ T5803] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 370.722916][ T5803] usb 1-1: config 0 interface 0 has no altsetting 0 [ 370.737092][ T5803] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 370.746247][ T5803] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 370.757749][ T5803] usb 1-1: config 0 interface 0 has no altsetting 0 [ 370.769147][ T787] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 370.769151][ T5803] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 370.769191][ T5803] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 370.786612][ T787] usb 4-1: config 0 has no interface number 0 [ 370.786700][ T787] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 370.786737][ T787] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 370.824448][ T5803] usb 1-1: config 0 interface 0 has no altsetting 0 [ 370.854693][ T5803] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 370.856588][ T5804] lg-g15 0003:046D:0A07.001A: unknown main item tag 0x1 [ 370.868979][ T5803] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 370.900671][ T5804] lg-g15 0003:046D:0A07.001A: item fetching failed at offset 2/5 [ 370.900924][ T5803] usb 1-1: config 0 interface 0 has no altsetting 0 [ 370.915764][ T787] usb 4-1: config 0 interface 255 has no altsetting 0 [ 370.920952][ T5803] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 370.923952][ T5804] lg-g15: probe of 0003:046D:0A07.001A failed with error -22 [ 370.934748][ T5803] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 370.940285][ T787] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 370.966472][ T5803] usb 1-1: config 0 interface 0 has no altsetting 0 [ 370.974862][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.980446][ T5803] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 370.992748][ T787] usb 4-1: config 0 descriptor?? [ 370.993366][ T5803] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 371.004461][ T787] ums-realtek 4-1:0.255: USB Mass Storage device detected [ 371.011293][ T5803] usb 1-1: Product: syz [ 371.018084][ T5803] usb 1-1: Manufacturer: syz [ 371.022967][ T5803] usb 1-1: SerialNumber: syz [ 371.033276][ T5803] usb 1-1: config 0 descriptor?? [ 371.042620][ T5803] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 371.062675][ T5803] usb 5-1: USB disconnect, device number 4 [ 371.085237][ T5866] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 371.211012][ T967] usb 4-1: USB disconnect, device number 16 [ 371.278636][ T5866] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 371.287125][ T5866] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 371.296034][ T5866] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 371.306408][ T5866] usb 3-1: config 220 has no interface number 2 [ 371.313596][ T5866] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 371.314049][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 371.326854][ T5866] usb 3-1: config 220 interface 0 has no altsetting 0 [ 371.343912][ T5866] usb 3-1: config 220 interface 76 has no altsetting 0 [ 371.346279][ T5803] usb 1-1: USB disconnect, device number 19 [ 371.350852][ T5866] usb 3-1: config 220 interface 1 has no altsetting 0 [ 371.353297][ T5866] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 371.375111][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.376222][ T5803] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 371.388381][ T5866] usb 3-1: Product: syz [ 371.393994][ T5866] usb 3-1: Manufacturer: syz [ 371.400710][ T5866] usb 3-1: SerialNumber: syz [ 371.629857][ T5866] uvcvideo 3-1:220.1: Unknown video format 047d4302-0000-0000-0000-00a5e2000004 [ 371.641984][ T5866] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 371.648881][ T5866] usb 3-1: No valid video chain found. [ 371.654576][ T5866] usb 3-1: selecting invalid altsetting 0 [ 371.703657][ T5866] usb 3-1: selecting invalid altsetting 0 [ 371.710268][ T5866] usbtest: probe of 3-1:220.1 failed with error -22 [ 371.712961][T13353] overlayfs: upper fs does not support file handles, falling back to index=off. [ 371.733666][T13353] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 371.740451][ T5866] usb 3-1: USB disconnect, device number 19 [ 372.359786][T13372] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 372.614014][T13377] loop0: detected capacity change from 0 to 8192 [ 372.659085][T13377] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 372.689147][T13377] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 372.700561][T13377] REISERFS (device loop0): using ordered data mode [ 372.708862][T13377] reiserfs: using flush barriers [ 372.717361][T13377] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 372.735071][T13377] REISERFS (device loop0): checking transaction log (loop0) [ 372.951865][T13377] REISERFS (device loop0): Using tea hash to sort names [ 372.977587][T13377] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 373.355489][T13370] loop2: detected capacity change from 0 to 32768 [ 373.437373][T13370] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 373.685001][T13370] XFS (loop2): Ending clean mount [ 373.710032][T13370] XFS (loop2): Quotacheck needed: Please wait. [ 373.817182][ T5803] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 373.866108][T13370] XFS (loop2): Quotacheck: Done. [ 373.882236][T13414] loop4: detected capacity change from 0 to 512 [ 374.005192][ T5762] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 374.056849][ T5803] usb 1-1: Using ep0 maxpacket: 8 [ 374.097281][ T5803] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 374.106699][ T5803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.131332][ T5803] usb 1-1: Product: syz [ 374.135718][ T5803] usb 1-1: Manufacturer: syz [ 374.145432][ T5803] usb 1-1: SerialNumber: syz [ 374.164953][ T5803] usb 1-1: config 0 descriptor?? [ 374.454061][ T5803] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 374.623692][T13430] loop2: detected capacity change from 0 to 16 [ 374.661818][T13430] erofs: (device loop2): mounted with root inode @ nid 36. [ 374.780490][T13435] loop3: detected capacity change from 0 to 64 [ 375.046238][ T5803] usb write operation failed. (-71) [ 375.064769][ T5803] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 375.096657][ T5803] dvbdev: DVB: registering new adapter (Terratec H7) [ 375.117331][ T5803] usb 1-1: media controller created [ 375.132771][ T5803] usb read operation failed. (-71) [ 375.146924][ T5803] usb write operation failed. (-71) [ 375.162113][ T5803] dvb_usb_az6007: probe of 1-1:0.0 failed with error -5 [ 375.184274][ T5803] usb 1-1: USB disconnect, device number 20 [ 375.220907][T13449] loop4: detected capacity change from 0 to 1024 [ 375.265693][T13449] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 375.280632][T13449] System zones: 0-1, 3-36 [ 375.286694][T13449] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.2926: bad orphan inode 134217728 [ 375.304369][T13449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.385326][T12936] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.547144][ T23] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 375.757134][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 375.771061][ T23] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 375.791365][ T23] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 375.824259][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 375.849556][ T23] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 375.874220][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.914600][ T23] usb 3-1: Product: syz [ 375.934847][ T23] usb 3-1: Manufacturer: syz [ 375.953439][ T23] usb 3-1: SerialNumber: syz [ 375.976345][ T23] usb 3-1: config 0 descriptor?? [ 376.421586][ T23] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 376.621059][T13507] loop4: detected capacity change from 0 to 128 [ 376.823459][ T23] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 376.867046][ T23] usb 3-1: USB disconnect, device number 20 [ 377.518736][T13517] loop0: detected capacity change from 0 to 1024 [ 377.736850][ T5804] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 377.783689][T13521] program syz.0.2948 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 377.936155][T13524] loop0: detected capacity change from 0 to 512 [ 377.958543][ T5804] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.987345][ T5804] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 378.008052][ T5804] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 378.029476][T13524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.067333][ T5804] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 378.092837][T13519] loop3: detected capacity change from 0 to 32768 [ 378.106610][ T5804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.144355][T13515] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 378.154179][ T5804] hub 5-1:1.0: bad descriptor, ignoring hub [ 378.160254][ T5804] hub: probe of 5-1:1.0 failed with error -5 [ 378.160409][T13519] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 378.166731][ T5804] cdc_wdm 5-1:1.0: skipping garbage [ 378.180237][ T5804] cdc_wdm 5-1:1.0: skipping garbage [ 378.187728][ T5804] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 378.193758][ T5804] cdc_wdm 5-1:1.0: Unknown control protocol [ 378.255803][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.394644][T13519] XFS (loop3): Ending clean mount [ 378.493642][ T5765] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 378.580999][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 378.587912][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 378.597030][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 378.603658][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 378.616866][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 378.623519][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 378.629719][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 378.638416][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.726102][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.737148][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.849339][T13548] loop3: detected capacity change from 0 to 1024 [ 378.962008][T13548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.114872][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.315248][T13565] netlink: 'syz.3.2957': attribute type 9 has an invalid length. [ 379.959965][T13585] loop0: detected capacity change from 0 to 4096 [ 380.033054][T13586] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 380.076370][ T27] audit: type=1800 audit(1776302790.128:471): pid=13585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2965" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 380.629532][ T5804] usb 5-1: USB disconnect, device number 5 [ 381.081945][T13604] pim6reg0: tun_chr_ioctl cmd 2147767521 [ 381.102661][T13606] loop4: detected capacity change from 0 to 7 [ 381.126223][T13588] loop0: detected capacity change from 0 to 32768 [ 381.169202][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 381.174837][T13588] [ 381.174837][T13588] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 381.174837][T13588] [ 381.191441][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.200712][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 381.211101][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.220349][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 381.244058][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.253301][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 381.266988][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.276201][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 381.309358][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.318560][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 381.383032][ T72] ERROR: (device loop0): diWrite: ixpxd invalid [ 381.383032][ T72] [ 381.415844][ T72] ERROR: (device loop0): txCommit: [ 381.415844][ T72] [ 381.441030][ T72] jfs_write_inode: jfs_commit_inode failed! [ 381.450370][ T5763] [ 381.450370][ T5763] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 381.450370][ T5763] [ 381.465980][ T5763] [ 381.465980][ T5763] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 381.465980][ T5763] [ 381.568387][T13618] loop4: detected capacity change from 0 to 64 [ 381.625055][T13620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2979'. [ 381.696895][ T967] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 381.722524][T13618] syz.4.2980: attempt to access beyond end of device [ 381.722524][T13618] loop4: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 381.787652][T13618] Buffer I/O error on dev loop4, logical block 134217734, async page read [ 381.830634][T13618] syz.4.2980: attempt to access beyond end of device [ 381.830634][T13618] loop4: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 381.867180][T13618] Buffer I/O error on dev loop4, logical block 134217734, async page read [ 381.924305][ T967] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 381.946822][ T967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.977614][ T967] usb 3-1: config 0 descriptor?? [ 381.996491][ T967] cp210x 3-1:0.0: cp210x converter detected [ 382.077295][ T5804] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 382.279033][ T5804] usb 1-1: unable to get BOS descriptor or descriptor too short [ 382.297696][ T5804] usb 1-1: not running at top speed; connect to a high speed hub [ 382.308498][ T5804] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.336991][ T5804] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 382.356677][ T5804] usb 1-1: string descriptor 0 read error: -22 [ 382.363434][ T5804] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 382.390444][ T5804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.406950][ T967] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 382.426398][ T5804] usb 1-1: 0:2 : does not exist [ 382.477454][ T967] usb 3-1: cp210x converter now attached to ttyUSB0 [ 382.621840][ T5866] usb 3-1: USB disconnect, device number 21 [ 382.646438][ T5866] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 382.705819][ T5866] cp210x 3-1:0.0: device disconnected [ 382.931716][T13637] loop3: detected capacity change from 0 to 40427 [ 382.969242][T13637] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 382.980281][T13637] F2FS-fs (loop3): invalid crc value [ 383.010701][T13637] F2FS-fs (loop3): Found nat_bits in checkpoint [ 383.110460][T13662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2991'. [ 383.130229][T13662] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2991'. [ 383.164373][T13637] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 383.321349][ T5804] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 383.335297][T13668] program syz.4.2992 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 383.355879][ T5765] syz-executor: attempt to access beyond end of device [ 383.355879][ T5765] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 383.359651][ T5804] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 383.407436][T13670] loop2: detected capacity change from 0 to 128 [ 383.408110][ T5765] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 383.437635][ T5804] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 383.453811][T13670] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 383.505386][ T5804] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 383.516903][T13670] hpfs: filesystem error: improperly stopped [ 383.555274][T13670] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 383.577234][ T5804] usb 1-1: USB disconnect, device number 21 [ 383.605403][T13670] hpfs: You really don't want any checks? You are crazy... [ 383.674691][T13670] hpfs: Code page index out of array [ 383.684545][T13670] hpfs: code page support is disabled [ 383.701119][T13670] hpfs: hpfs_map_4sectors(): unaligned read [ 383.713519][T13670] hpfs: hpfs_map_4sectors(): unaligned read [ 383.723986][T13670] hpfs: filesystem error: unable to find root dir [ 383.765488][T13670] hpfs: hpfs_map_sector(): read error [ 383.773708][T13670] hpfs: hpfs_map_sector(): read error [ 383.962153][T13681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2996'. [ 384.256158][T13692] binder: 13691:13692 ioctl c0306201 0 returned -14 [ 384.330766][T13695] loop0: detected capacity change from 0 to 128 [ 384.360569][T13695] EXT4-fs: Ignoring removed nobh option [ 384.388271][T13695] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 384.409905][T13695] ext4 filesystem being mounted at /762/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 384.522957][ T5763] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 384.747709][T13709] loop6: detected capacity change from 0 to 7 [ 384.806483][T13709] Dev loop6: unable to read RDB block 7 [ 384.837686][T13709] loop6: unable to read partition table [ 384.845943][T13714] tipc: Enabling of bearer rejected, already enabled [ 384.875419][T13709] loop6: partition table beyond EOD, truncated [ 384.905837][T13709] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 385.114208][T13690] loop2: detected capacity change from 0 to 32768 [ 385.150319][T13690] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 385.203614][T13724] loop3: detected capacity change from 0 to 4096 [ 385.211226][T13724] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 385.231626][T13690] JBD2: Ignoring recovery information on journal [ 385.362614][T13724] ntfs: volume version 3.1. [ 385.371673][T13690] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 385.589510][T13690] (syz.2.2999,13690,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 385.701159][T13740] loop3: detected capacity change from 0 to 256 [ 385.804336][T13740] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 385.830998][ T5762] ocfs2: Unmounting device (7,2) on (node local) [ 385.916524][T13745] loop0: detected capacity change from 0 to 2048 [ 385.970723][T13745] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 386.015045][T13745] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 386.354820][T13756] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3022'. [ 386.386132][T13759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3020'. [ 386.702856][T13773] loop3: detected capacity change from 0 to 4096 [ 386.713477][T13773] EXT4-fs: Ignoring removed nobh option [ 386.722309][T13773] EXT4-fs (loop3): Test dummy encryption mode enabled [ 386.735699][T13773] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 386.806501][T13773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.867153][ T5804] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 386.946446][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.047090][ T787] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 387.076969][ T5804] usb 3-1: Using ep0 maxpacket: 32 [ 387.091330][ T5804] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 387.101090][ T5804] usb 3-1: config 0 has no interface number 0 [ 387.114578][ T5804] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 387.143330][ T5804] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 387.170757][ T5804] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 387.197581][ T5804] usb 3-1: config 0 interface 196 has no altsetting 0 [ 387.217164][ T5804] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 387.232299][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.242358][ T787] usb 1-1: Using ep0 maxpacket: 16 [ 387.257146][ T787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.275777][ T5804] usb 3-1: Product: syz [ 387.280734][ T5804] usb 3-1: Manufacturer: syz [ 387.285359][ T5804] usb 3-1: SerialNumber: syz [ 387.290285][ T787] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 387.309290][ T5804] usb 3-1: config 0 descriptor?? [ 387.314842][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.335808][T13772] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 387.347270][ T787] usb 1-1: config 0 descriptor?? [ 387.370853][ T787] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input27 [ 387.472597][T13767] loop4: detected capacity change from 0 to 32768 [ 387.523199][T13767] JBD2: Ignoring recovery information on journal [ 387.585914][T13767] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 387.625037][ T5122] bcm5974 1-1:0.0: could not read from device [ 387.643384][ T5122] bcm5974 1-1:0.0: could not read from device [ 387.658345][T13767] JBD2: bad block at offset 32 [ 387.676368][T13777] bcm5974 1-1:0.0: could not read from device [ 387.718949][ T787] usb 1-1: USB disconnect, device number 22 [ 387.765092][T13767] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 388.013166][T12936] ocfs2: Unmounting device (7,4) on (node local) [ 388.020436][ T5804] ipheth 3-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 388.067272][ T5804] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached [ 388.212266][T13799] loop3: detected capacity change from 0 to 32768 [ 388.237278][ T5804] usb 3-1: USB disconnect, device number 22 [ 388.255544][T13799] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.3031 (13799) [ 388.314226][T13799] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 388.358640][ T5804] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected [ 388.366966][T13799] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 388.423146][T13799] BTRFS info (device loop3): using free space tree [ 388.621090][T13799] BTRFS info (device loop3): enabling ssd optimizations [ 388.634712][T13823] loop0: detected capacity change from 0 to 2048 [ 388.667303][T13799] BTRFS info (device loop3): auto enabling async discard [ 388.770804][T13823] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 389.231308][ T5765] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 389.511261][T13858] : renamed from vlan0 (while UP) [ 389.757370][ T787] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 389.980042][ T787] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 390.030399][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.055672][ T787] usb 3-1: config 0 descriptor?? [ 390.088394][ T787] cp210x 3-1:0.0: cp210x converter detected [ 390.377066][ T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 390.502412][ T787] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 390.528321][ T787] usb 3-1: cp210x converter now attached to ttyUSB0 [ 390.577091][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 390.588842][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.600930][ T23] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 390.614163][ T23] usb 5-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31 [ 390.633521][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.651962][ T23] usb 5-1: Product: syz [ 390.662070][ T23] usb 5-1: Manufacturer: syz [ 390.672182][ T23] usb 5-1: SerialNumber: syz [ 390.687434][ T23] usb 5-1: config 0 descriptor?? [ 390.749120][ T23] usb 3-1: USB disconnect, device number 23 [ 390.762202][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 390.804206][ T23] cp210x 3-1:0.0: device disconnected [ 390.891622][T13900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3056'. [ 390.927950][T13875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.955279][T13875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.987815][ T967] usb 5-1: USB disconnect, device number 6 [ 391.260212][T13913] loop0: detected capacity change from 0 to 1024 [ 391.348432][ T3417] hfsplus: b-tree write err: -5, ino 25 [ 391.354295][ T3417] hfsplus: b-tree write err: -5, ino 4 [ 391.361926][ T3417] hfsplus: b-tree write err: -5, ino 2 [ 391.447064][ T5801] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 391.566925][ T967] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 391.639498][ T5801] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 391.648036][ T5801] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 391.658752][ T5801] usb 4-1: config 0 has no interface number 0 [ 391.667547][ T5801] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 391.676604][ T5801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.684671][ T5801] usb 4-1: Product: syz [ 391.688897][ T5801] usb 4-1: Manufacturer: syz [ 391.693494][ T5801] usb 4-1: SerialNumber: syz [ 391.700515][ T5801] usb 4-1: config 0 descriptor?? [ 391.737004][ T5803] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 391.759538][ T967] usb 5-1: config 0 has an invalid interface number: 229 but max is 0 [ 391.767890][ T967] usb 5-1: config 0 has no interface number 0 [ 391.774033][ T967] usb 5-1: config 0 interface 229 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 391.786085][ T967] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 391.795181][ T967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.803252][ T967] usb 5-1: Product: syz [ 391.807505][ T967] usb 5-1: Manufacturer: syz [ 391.812124][ T967] usb 5-1: SerialNumber: syz [ 391.819645][ T967] usb 5-1: config 0 descriptor?? [ 391.921931][ T5803] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 391.933450][ T5803] usb 1-1: config 0 has no interface number 0 [ 391.942766][ T5803] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 391.951931][ T5803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.960607][ T5803] usb 1-1: Product: syz [ 391.964822][ T5803] usb 1-1: Manufacturer: syz [ 391.969553][ T5803] usb 1-1: SerialNumber: syz [ 391.976327][ T5803] usb 1-1: config 0 descriptor?? [ 392.041341][ T967] usb 5-1: USB disconnect, device number 7 [ 392.114646][ T5801] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 392.121218][ T5801] usb 4-1: No valid video chain found. [ 392.188560][ T5803] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 392.200322][ T5803] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 392.210974][ T5803] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 392.219121][ T5803] usb 1-1: media controller created [ 392.238775][ T5803] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 392.319596][ T5866] usb 4-1: USB disconnect, device number 17 [ 392.921163][T13935] loop3: detected capacity change from 0 to 128 [ 393.241187][T13933] loop4: detected capacity change from 0 to 32768 [ 393.281420][T13933] ERROR: (device loop4): dbAdjCtl: the maximum free buddy is not the old root [ 393.281420][T13933] [ 393.298957][T13933] ERROR: (device loop4): remounting filesystem as read-only [ 393.367860][ T5803] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 393.533369][ T5803] usb 1-1: USB disconnect, device number 23 [ 393.633480][T13947] loop2: detected capacity change from 0 to 2048 [ 393.663509][ T113] BUG: Bad page state in process jfsCommit pfn:642f8 [ 393.670512][ T113] page:ffffea000190be00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x642f8 [ 393.684483][T13947] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 393.693978][ T113] flags: 0xfff0800000820d(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 393.707299][ T113] page_type: 0xffffffff() [ 393.721252][ T113] raw: 00fff0800000820d dead000000000100 dead000000000122 0000000000000000 [ 393.738797][ T113] raw: 000000000000001c ffff88805e5390f8 00000000ffffffff 0000000000000000 [ 393.760171][ T113] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 393.770627][ T113] page_owner tracks the page as allocated [ 393.776372][ T113] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 13933, tgid 13932 (syz.4.3072), ts 393260175739, free_ts 392791648820 [ 393.795536][ T113] post_alloc_hook+0x1c1/0x200 [ 393.800894][ T113] get_page_from_freelist+0x1951/0x19e0 [ 393.806470][ T113] __alloc_pages+0x1f0/0x460 [ 393.811191][ T113] folio_alloc+0x1e/0x30 [ 393.815449][ T113] filemap_alloc_folio+0xdf/0x490 [ 393.820546][ T113] do_read_cache_folio+0x364/0x7d0 [ 393.825681][ T113] do_read_cache_page+0x32/0x250 [ 393.830795][ T113] __get_metapage+0x31a/0xfa0 [ 393.835493][ T113] diRead+0x6d3/0xb90 [ 393.839762][ T113] jfs_iget+0x90/0x440 [ 393.843859][ T113] jfs_fill_super+0x712/0xad0 [ 393.848663][ T113] mount_bdev+0x221/0x2d0 [ 393.853002][ T113] legacy_get_tree+0xea/0x180 [ 393.857797][ T113] vfs_get_tree+0x8c/0x280 [ 393.862225][ T113] do_new_mount+0x24b/0xa40 [ 393.866723][ T113] __se_sys_mount+0x2e7/0x3d0 [ 393.871668][ T113] page last free stack trace: [ 393.876361][ T113] free_unref_page_prepare+0x7b2/0x8c0 [ 393.881992][ T113] free_unref_page_list+0xbe/0x860 [ 393.887232][ T113] release_pages+0x1f7a/0x2200 [ 393.892102][ T113] tlb_flush_mmu+0x379/0x510 [ 393.896692][ T113] tlb_finish_mmu+0xf9/0x220 [ 393.913330][ T113] exit_mmap+0x428/0xb90 [ 393.917806][ T113] __mmput+0x118/0x3c0 [ 393.921903][ T113] exit_mm+0x1f2/0x2c0 [ 393.926001][ T113] do_exit+0x8dd/0x2460 [ 393.930310][ T113] do_group_exit+0x21b/0x2d0 [ 393.934934][ T113] __x64_sys_exit_group+0x3f/0x40 [ 393.940288][ T113] do_syscall_64+0x55/0xa0 [ 393.944823][ T113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 393.951023][ T113] Modules linked in: [ 393.955056][ T113] CPU: 0 PID: 113 Comm: jfsCommit Not tainted syzkaller #0 [ 393.962276][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 393.972344][ T113] Call Trace: [ 393.975630][ T113] [ 393.978555][ T113] dump_stack_lvl+0x18c/0x250 [ 393.983236][ T113] ? show_regs_print_info+0x20/0x20 [ 393.988431][ T113] ? swiotlb_print_info+0x70/0x70 [ 393.993454][ T113] ? dump_page+0xba3/0x14a0 [ 393.997963][ T113] bad_page+0x14b/0x170 [ 394.002120][ T113] free_unref_page_prepare+0x85f/0x8c0 [ 394.007591][ T113] free_unref_page+0x32/0x2e0 [ 394.012264][ T113] ? __folio_put+0xef/0x210 [ 394.016765][ T113] txUnlock+0x27e/0xcb0 [ 394.020929][ T113] ? lockdep_hardirqs_on+0x98/0x150 [ 394.026121][ T113] jfs_lazycommit+0x56e/0xa70 [ 394.030796][ T113] ? txFreelock+0x5a0/0x5a0 [ 394.035295][ T113] ? do_task_dead+0xd0/0xd0 [ 394.039806][ T113] ? __kthread_parkme+0x7a/0x1c0 [ 394.044747][ T113] kthread+0x2fa/0x390 [ 394.048812][ T113] ? txFreelock+0x5a0/0x5a0 [ 394.053314][ T113] ? kthread_blkcg+0xd0/0xd0 [ 394.057895][ T113] ret_from_fork+0x48/0x80 [ 394.062303][ T113] ? kthread_blkcg+0xd0/0xd0 [ 394.066884][ T113] ret_from_fork_asm+0x11/0x20 [ 394.071649][ T113] [ 394.085306][ T787] kernel read not supported for file /dsp1 (pid: 787 comm: kworker/1:2) [ 394.095683][ T113] Disabling lock debugging due to kernel taint [ 394.116720][ T113] page:ffffea000190be00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x642f8 [ 394.136902][ T113] flags: 0xfff0800000820d(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 394.148138][ T113] page_type: 0xffffffff() [ 394.156824][ T113] raw: 00fff0800000820d dead000000000100 dead000000000122 0000000000000000 [ 394.165437][ T113] raw: 000000000000001c ffff88805e5390f8 00000000ffffffff 0000000000000000 [ 394.175545][ T113] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 394.185939][ T113] page_owner tracks the page as allocated [ 394.191738][ T113] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 13933, tgid 13932 (syz.4.3072), ts 393260175739, free_ts 392791648820 [ 394.210682][ T113] post_alloc_hook+0x1c1/0x200 [ 394.215486][ T113] get_page_from_freelist+0x1951/0x19e0 [ 394.221057][ T113] __alloc_pages+0x1f0/0x460 [ 394.225654][ T113] folio_alloc+0x1e/0x30 [ 394.229949][ T113] filemap_alloc_folio+0xdf/0x490 [ 394.234977][ T113] do_read_cache_folio+0x364/0x7d0 [ 394.240131][ T113] do_read_cache_page+0x32/0x250 [ 394.245068][ T113] __get_metapage+0x31a/0xfa0 [ 394.249783][ T113] diRead+0x6d3/0xb90 [ 394.253762][ T113] jfs_iget+0x90/0x440 [ 394.257866][ T113] jfs_fill_super+0x712/0xad0 [ 394.262542][ T113] mount_bdev+0x221/0x2d0 [ 394.266936][ T113] legacy_get_tree+0xea/0x180 [ 394.271614][ T113] vfs_get_tree+0x8c/0x280 [ 394.276020][ T113] do_new_mount+0x24b/0xa40 [ 394.280554][ T113] __se_sys_mount+0x2e7/0x3d0 [ 394.285258][ T113] page last free stack trace: [ 394.289980][ T113] free_unref_page_prepare+0x7b2/0x8c0 [ 394.295446][ T113] free_unref_page_list+0xbe/0x860 [ 394.300680][ T113] release_pages+0x1f7a/0x2200 [ 394.305448][ T113] tlb_flush_mmu+0x379/0x510 [ 394.310655][ T113] tlb_finish_mmu+0xf9/0x220 [ 394.315258][ T113] exit_mmap+0x428/0xb90 [ 394.319541][ T113] __mmput+0x118/0x3c0 [ 394.323608][ T113] exit_mm+0x1f2/0x2c0 [ 394.327720][ T113] do_exit+0x8dd/0x2460 [ 394.331885][ T113] do_group_exit+0x21b/0x2d0 [ 394.336464][ T113] __x64_sys_exit_group+0x3f/0x40 [ 394.341513][ T113] do_syscall_64+0x55/0xa0 [ 394.345938][ T113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 394.352080][ T113] ------------[ cut here ]------------ [ 394.357584][ T113] kernel BUG at include/linux/mm.h:1458! [ 394.363231][ T113] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 394.369286][ T113] CPU: 1 PID: 113 Comm: jfsCommit Tainted: G B syzkaller #0 [ 394.377939][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 394.387998][ T113] RIP: 0010:put_metapage+0x253/0x340 [ 394.393299][ T113] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 b7 78 d9 fe e9 25 ff ff ff e8 2d 41 81 fe 48 8b 3c 24 48 c7 c6 80 09 04 8b e8 dd aa c1 fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 46 45 81 [ 394.412901][ T113] RSP: 0018:ffffc90002d07cc0 EFLAGS: 00010246 [ 394.418967][ T113] RAX: 5f5a21f5acd32600 RBX: ffff88805e5390f8 RCX: 5f5a21f5acd32600 [ 394.426948][ T113] RDX: 0000000000000000 RSI: ffffffff8b1c8e40 RDI: ffffffff8b1c8e00 [ 394.434910][ T113] RBP: 000000000000007f R08: ffffffff8e8b14ef R09: 1ffffffff1d1629d [ 394.442870][ T113] R10: dffffc0000000000 R11: fffffbfff1d1629e R12: ffff88805e539120 [ 394.450831][ T113] R13: ffffea000190be34 R14: 1ffff1100bca7224 R15: 1ffff1100bca7231 [ 394.458793][ T113] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 394.467708][ T113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 394.474275][ T113] CR2: 000000110c3e869e CR3: 000000002eb86000 CR4: 00000000003506e0 [ 394.482237][ T113] Call Trace: [ 394.485505][ T113] [ 394.488426][ T113] txUnlock+0x427/0xcb0 [ 394.492580][ T113] jfs_lazycommit+0x56e/0xa70 [ 394.497249][ T113] ? txFreelock+0x5a0/0x5a0 [ 394.501748][ T113] ? do_task_dead+0xd0/0xd0 [ 394.506243][ T113] ? __kthread_parkme+0x7a/0x1c0 [ 394.511169][ T113] kthread+0x2fa/0x390 [ 394.515224][ T113] ? txFreelock+0x5a0/0x5a0 [ 394.519724][ T113] ? kthread_blkcg+0xd0/0xd0 [ 394.524314][ T113] ret_from_fork+0x48/0x80 [ 394.528721][ T113] ? kthread_blkcg+0xd0/0xd0 [ 394.533302][ T113] ret_from_fork_asm+0x11/0x20 [ 394.538060][ T113] [ 394.541065][ T113] Modules linked in: [ 394.549519][ T113] ---[ end trace 0000000000000000 ]--- [ 394.555010][ T113] RIP: 0010:put_metapage+0x253/0x340 [ 394.561465][ T113] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 b7 78 d9 fe e9 25 ff ff ff e8 2d 41 81 fe 48 8b 3c 24 48 c7 c6 80 09 04 8b e8 dd aa c1 fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 46 45 81 [ 394.581216][ T113] RSP: 0018:ffffc90002d07cc0 EFLAGS: 00010246 [ 394.587412][ T113] RAX: 5f5a21f5acd32600 RBX: ffff88805e5390f8 RCX: 5f5a21f5acd32600 [ 394.595497][ T113] RDX: 0000000000000000 RSI: ffffffff8b1c8e40 RDI: ffffffff8b1c8e00 [ 394.603580][ T113] RBP: 000000000000007f R08: ffffffff8e8b14ef R09: 1ffffffff1d1629d [ 394.611585][ T113] R10: dffffc0000000000 R11: fffffbfff1d1629e R12: ffff88805e539120 [ 394.619969][ T113] R13: ffffea000190be34 R14: 1ffff1100bca7224 R15: 1ffff1100bca7231 [ 394.627988][ T113] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 394.636969][ T113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 394.643558][ T113] CR2: 00007f8b087e92f8 CR3: 000000002eb86000 CR4: 00000000003506f0 [ 394.651743][ T113] Kernel panic - not syncing: Fatal exception [ 394.658144][ T113] Kernel Offset: disabled [ 394.662459][ T113] Rebooting in 86400 seconds..