last executing test programs: 1m2.113759979s ago: executing program 4 (id=926): syz_clone(0x48325c80, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="2b6a7cd0") r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) pidfd_send_signal(r0, 0x20003a, &(0x7f0000000180)={0x1b, 0x3, 0x65de}, 0x0) 1m1.932620435s ago: executing program 4 (id=931): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0x80087601, 0x1000000000000) 1m1.414664957s ago: executing program 4 (id=935): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000001300)) 1m1.126351038s ago: executing program 4 (id=938): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x2, 0x222, &(0x7f0000000800)="$eJzsmL9rFEEUx78zu7feiog2KWwsDBjR7GX3UNIcGkGwEiHxV6WHWUPMJieXFUxANNjYaGchpLHwH7BIkcrCzn9A0EIFwcIrLGxsRmZndm9yc3HDcla+TzF8Z9+befPezbziQBDEf8vXL78+Pzs/PXcKwAGMY5/+/t0BGFOaG/6fXt4/+aJ1YfPNx9fvVg4+3B7cTy4RYueH+l/iuwDezjhIi0jF6t9SjOvJHHihr4DjhNbXwBBofQscV7WOwXBD67uG7kj/ILizmMTB7U4yL8WUHEI5RHJoDp6vt8Ewr+dCCMEM++ra+lI7SeKuIVxtG2KqJIpgS2NW/Wrw0JvhaBnnk1W8/vTJhpzntZky6heCI9RJNMEwq79PYzOvjSqJkf8Rt7+/Y+U/JFumLwNQlmRdidbPkRTLFIcnqy2fkOmcs02HUOUY2Lmqhr5JVnK0KVtXJxNu+V08q3/QCrEuDWYhHg1/AM99AP8oU1NUyiIXY73t97bpmxJ81/ssWHkItvf7U9/rmfOHWL1iPmReI/8tgA9bqn+IVwzHjf7kGv2jkS7fa6yurU8uLrcX4oV4JYqaZxjw+HTUyBqRGq2+1+/Pftaf9hv713bx9biHB+007YZq9JgHH2najbJ5ZDyb2a3Oj5t6WYqLAI6piWxpXrGjY8VgnvLhma9UE7YTQRAEQRAEQRAEQRAEQRBEJY6CZf+ClhBdzrz/BAAA//9oglvV") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x60) 1m0.841104444s ago: executing program 4 (id=941): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c013080"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 1m0.198742047s ago: executing program 4 (id=949): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x840, 0x3}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x3e90}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 59.891855676s ago: executing program 32 (id=949): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x840, 0x3}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x3e90}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 4.52788316s ago: executing program 2 (id=1646): open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 4.410554133s ago: executing program 5 (id=1647): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000380)='./file0\x00', 0x804, &(0x7f00000003c0)={[{@uni_xlateno}, {@shortname_winnt}, {@utf8no}, {@rodir}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@uni_xlate}, {@utf8no}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@rodir}, {@utf8no}, {@shortname_lower}, {@numtail}, {@shortname_mixed}, {@uni_xlate}, {@shortname_mixed}, {@shortname_mixed}]}, 0xb, 0x28a, &(0x7f00000004c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 4.126741376s ago: executing program 5 (id=1649): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast1}, 0x1c) 3.790337769s ago: executing program 5 (id=1652): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x71, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000180)={0x0, 0x10, 0x5, {0x5, 0xc, "74f18f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.521017759s ago: executing program 2 (id=1655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x10001}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.375176728s ago: executing program 2 (id=1658): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000480)={0x20, 0x23, 0x7, {0x7, 0x31, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.304089781s ago: executing program 3 (id=1659): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000400000/0xc00000)=nil) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) 3.078191186s ago: executing program 3 (id=1662): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2c, r1, 0x801, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8040) 2.865277058s ago: executing program 3 (id=1666): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 2.22977454s ago: executing program 0 (id=1670): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x4000, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@uuid_off}], [], 0x2c}) 2.211935454s ago: executing program 6 (id=1671): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0) 1.983437189s ago: executing program 6 (id=1673): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001208000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 1.865201958s ago: executing program 5 (id=1675): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001c40)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='discard,keep_last_dots,iocharset=cp1251,utf8,errors=remount-ro,time_offset=0x0000000000000003,fmask=00000000000000000000005,sys_tz,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0x1548, &(0x7f0000000380)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 1.833510189s ago: executing program 3 (id=1676): unshare(0x28000600) semget$private(0x0, 0x4000, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0xffffffffffffffff) 1.831713015s ago: executing program 0 (id=1677): r0 = syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x62f) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0xd5, 0x0, 0x0}) 1.744185079s ago: executing program 6 (id=1679): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1237, &(0x7f00000006c0)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) 1.603481164s ago: executing program 1 (id=1680): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000017c0)=[{&(0x7f0000000240)="86", 0x1}], 0x1, 0x4) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x0) 1.564789994s ago: executing program 3 (id=1681): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="696f636861727365743d6d616363726f617469616e2c646973636172643d3078303030303030303030303030303030332c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d6d6163637972696c6c69632c0067add4ceec7cb8702b1b4a0ff322839e69b507d7478e0706b00408dc59283f5c0159b8e3c0289dcb182504844ef8e6972cdb3f50680fc9602ed27c1f6b47a91f941f154ae205d34a9b7a7c67efa0c0e2a70251d664fce12ae64a5a521aa83080b7672c4e1566a61a0ade4b6c9d78151053d9fb31fd2cfc77f269f873e14e5fe3c46c0acbb22d40391ae31d2025dcd947adf76739ae4ecbe3b630040b37e2b09d7816e0b93981de1147532cf2f46d4d4904f68fb43cd165b9"], 0x1, 0x6213, &(0x7f000000cb40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9) 1.56418278s ago: executing program 0 (id=1682): r0 = syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0x0, 0x702, &(0x7f0000001140)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) futimesat(r0, &(0x7f0000000000)='./file1\x00', 0x0) 1.544372899s ago: executing program 5 (id=1683): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) 1.334695769s ago: executing program 1 (id=1684): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2008800, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x4, 0x1534, &(0x7f0000001f80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.310372976s ago: executing program 2 (id=1685): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54, 0x0, 0x4}, 0x10) write(r0, 0x0, 0x62) 1.236037472s ago: executing program 5 (id=1686): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_ep_write(r0, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1") 1.17507728s ago: executing program 6 (id=1687): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000140), 0x3, 0x4cd, &(0x7f0000000c80)="$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") r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x300, 0xfffff, 0x0, 0xa0) 1.06183256s ago: executing program 2 (id=1688): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000280)={0x20, r1, 0x6337c220fc53de3c, 0x0, 0x0}) 1.060317379s ago: executing program 0 (id=1689): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="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", 0x1dd}], 0x1}, 0x20000044) 899.279893ms ago: executing program 1 (id=1690): prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 811.28758ms ago: executing program 0 (id=1691): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}}, 0x0) 778.136918ms ago: executing program 2 (id=1692): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='./file1\x00', 0x0, &(0x7f0000002740)=ANY=[], 0x3, 0x5f4f, &(0x7f0000009040)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 659.728713ms ago: executing program 1 (id=1693): r0 = creat(&(0x7f00000021c0)='./cgroup.net/devices.allow\x00', 0xc1) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000c80)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 578.370604ms ago: executing program 0 (id=1694): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r0, 0x0, 0x0) 434.519996ms ago: executing program 6 (id=1695): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x240}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04060300c90001"], 0x6) 348.103518ms ago: executing program 1 (id=1696): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {0x54}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4040800) 113.253191ms ago: executing program 3 (id=1697): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r0, &(0x7f00000005c0)='\x00\x00', 0x2, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, 0x5}, 0x1c) 14.715068ms ago: executing program 6 (id=1698): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000300)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x11}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) 0s ago: executing program 1 (id=1699): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): 159.100521][ T8153] F2FS-fs (loop5): QUOTA feature is enabled, so ignore qf_name [ 159.124111][ T8153] F2FS-fs (loop5): invalid crc value [ 159.140142][ T5961] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 159.148801][ T8153] F2FS-fs (loop5): Wrong journal entry on segno 1541 [ 159.156342][ T8153] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-117) [ 159.175072][ T8151] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 159.331840][ T5961] usb 1-1: Using ep0 maxpacket: 8 [ 159.367809][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.419108][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.432664][ T8151] XFS (loop2): Ending clean mount [ 159.442932][ T5961] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 159.461223][ T5961] usb 1-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 159.470604][ T8151] XFS (loop2): Quotacheck needed: Please wait. [ 159.499810][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.514815][ T5961] usb 1-1: config 0 descriptor?? [ 159.539845][ T5960] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 159.552891][ T8151] XFS (loop2): Quotacheck: Done. [ 159.609576][ T5863] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 159.711253][ T5874] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 159.748240][ T5960] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 159.768147][ T5960] usb 4-1: config 0 has no interface number 0 [ 159.778904][ T5863] usb 6-1: Using ep0 maxpacket: 16 [ 159.793034][ T5960] usb 4-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 159.800887][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.851572][ T5960] usb 4-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.855732][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.893481][ T5960] usb 4-1: config 0 interface 2 has no altsetting 0 [ 159.919518][ T5960] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 159.923969][ T5863] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 159.929923][ T8180] loop4: detected capacity change from 0 to 32768 [ 159.952134][ T5961] elecom 0003:056E:00FE.0011: unknown main item tag 0x4 [ 159.963860][ T5960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.972054][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.989452][ T5961] elecom 0003:056E:00FE.0011: unknown main item tag 0x6 [ 159.992538][ T5960] usb 4-1: config 0 descriptor?? [ 160.013187][ T8180] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.877 (8180) [ 160.019829][ T5961] elecom 0003:056E:00FE.0011: unknown main item tag 0x5 [ 160.033629][ T5863] usb 6-1: config 0 descriptor?? [ 160.076544][ T8180] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 160.091664][ T5961] elecom 0003:056E:00FE.0011: unknown main item tag 0x0 [ 160.119480][ T8180] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 160.140207][ T5961] elecom 0003:056E:00FE.0011: unknown main item tag 0x0 [ 160.147229][ T5961] elecom 0003:056E:00FE.0011: unknown main item tag 0x0 [ 160.150191][ T8180] BTRFS info (device loop4): disk space caching is enabled [ 160.195634][ T5961] elecom 0003:056E:00FE.0011: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.0-1/input0 [ 160.216975][ T8180] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 160.262124][ T5961] usb 1-1: USB disconnect, device number 12 [ 160.383831][ T8187] fido_id[8187]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 160.454211][ T8180] BTRFS info (device loop4): rebuilding free space tree [ 160.508240][ T5863] creative-sb0540 0003:041E:3100.0013: item fetching failed at offset 1/5 [ 160.544025][ T8180] BTRFS info (device loop4): disabling free space tree [ 160.572699][ T5863] creative-sb0540 0003:041E:3100.0013: parse failed [ 160.589964][ T8180] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 160.604616][ T5863] creative-sb0540 0003:041E:3100.0013: probe with driver creative-sb0540 failed with error -22 [ 160.621427][ T8180] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 160.650306][ T8211] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 160.662966][ T8211] macsec1: entered promiscuous mode [ 160.704294][ T8211] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 160.711780][ T5960] usb 4-1: USB disconnect, device number 8 [ 160.767140][ T6051] usb 6-1: USB disconnect, device number 7 [ 160.773226][ T30] audit: type=1800 audit(1755323491.418:16): pid=8180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.877" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 160.808112][ T8213] loop2: detected capacity change from 0 to 256 [ 160.944674][ T5860] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 161.435769][ T8233] loop1: detected capacity change from 0 to 512 [ 161.444799][ T8232] loop0: detected capacity change from 0 to 256 [ 161.509205][ T8233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.596977][ T8232] FAT-fs (loop0): Directory bread(block 64) failed [ 161.639525][ T8232] FAT-fs (loop0): Directory bread(block 65) failed [ 161.646174][ T8233] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.667539][ T8232] FAT-fs (loop0): Directory bread(block 66) failed [ 161.691805][ T8232] FAT-fs (loop0): Directory bread(block 67) failed [ 161.725610][ T8232] FAT-fs (loop0): Directory bread(block 68) failed [ 161.747185][ T8232] FAT-fs (loop0): Directory bread(block 69) failed [ 161.766037][ T8233] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 161.793993][ T8232] FAT-fs (loop0): Directory bread(block 70) failed [ 161.812805][ T8228] loop2: detected capacity change from 0 to 32768 [ 161.831410][ T8232] FAT-fs (loop0): Directory bread(block 71) failed [ 161.837998][ T8232] FAT-fs (loop0): Directory bread(block 72) failed [ 161.855125][ T8232] FAT-fs (loop0): Directory bread(block 73) failed [ 161.902545][ T8228] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 161.965996][ T5868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.135416][ T5874] ocfs2: Unmounting device (7,2) on (node local) [ 162.228797][ T8259] loop3: detected capacity change from 0 to 128 [ 162.401526][ T8268] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 162.563680][ T8274] loop0: detected capacity change from 0 to 256 [ 162.571152][ T8272] loop2: detected capacity change from 0 to 1024 [ 162.579975][ T8273] loop5: detected capacity change from 0 to 1024 [ 162.603152][ T8274] exfat: Deprecated parameter 'utf8' [ 162.639545][ T8274] exfat: Deprecated parameter 'utf8' [ 162.667155][ T8273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.696344][ T30] audit: type=1804 audit(1755323493.338:17): pid=8272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.910" name=2F6E6577726F6F742F3134382F66696C65312FE91F7189591E9233614B dev="loop2" ino=25 res=1 errno=0 [ 162.710820][ T8274] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 162.722169][ T8273] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.762549][ T8272] Process accounting resumed [ 162.839962][ T8273] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 162.903547][ T8273] EXT4-fs (loop5): Remounting filesystem read-only [ 163.084625][ T8289] loop3: detected capacity change from 0 to 8 [ 163.099681][ T5857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.150255][ T8294] loop2: detected capacity change from 0 to 8 [ 163.199244][ T8294] SQUASHFS error: zstd decompression error: 10 [ 163.258501][ T6051] IPVS: starting estimator thread 0... [ 163.276744][ T8294] SQUASHFS error: zstd decompression failed, data probably corrupt [ 163.320100][ T8294] SQUASHFS error: Failed to read block 0x60: -5 [ 163.347716][ T8294] SQUASHFS error: zstd decompression error: 10 [ 163.359509][ T8298] IPVS: using max 31 ests per chain, 74400 per kthread [ 163.391599][ T8294] SQUASHFS error: zstd decompression failed, data probably corrupt [ 163.431940][ T8294] SQUASHFS error: Failed to read block 0x60: -5 [ 163.728946][ T8319] loop2: detected capacity change from 0 to 512 [ 163.752521][ T8318] loop5: detected capacity change from 0 to 256 [ 163.765813][ T8313] loop0: detected capacity change from 0 to 4096 [ 163.779857][ T8318] FAT-fs (loop5): Directory bread(block 1285) failed [ 163.785741][ T8321] loop4: detected capacity change from 0 to 512 [ 163.817017][ T8319] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 163.827588][ T8318] FAT-fs (loop5): Directory bread(block 1285) failed [ 163.831272][ T8321] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 163.872863][ T8319] EXT4-fs (loop2): 1 truncate cleaned up [ 163.899296][ T8321] EXT4-fs (loop4): 1 truncate cleaned up [ 163.905927][ T8319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.946435][ T8321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.963697][ T8313] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 164.083947][ T8313] ntfs3(loop0): ino=9, ntfs_sync_fs failed, -22. [ 164.168076][ T8327] loop5: detected capacity change from 0 to 1024 [ 164.198620][ T5874] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.232850][ T5860] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.242384][ T5856] ntfs3(loop0): ino=9, ntfs_sync_fs failed, -22. [ 164.364551][ T8327] hfsplus: bad catalog entry type [ 164.553374][ T8309] loop1: detected capacity change from 0 to 32768 [ 164.596805][ T8309] BTRFS warning: excessive commit interval 2147483647, use with care [ 164.605348][ T8337] loop4: detected capacity change from 0 to 16 [ 164.613967][ T8337] erofs (device loop4): mounted with root inode @ nid 36. [ 164.654983][ T8325] loop3: detected capacity change from 0 to 32768 [ 164.667967][ T8336] loop2: detected capacity change from 0 to 1764 [ 164.706247][ T8309] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.925 (8309) [ 164.723604][ T8336] netlink: 'syz.2.939': attribute type 1 has an invalid length. [ 164.741864][ T8336] netlink: 'syz.2.939': attribute type 2 has an invalid length. [ 164.757647][ T8309] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 164.777317][ T8325] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 164.799207][ T8309] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 164.808622][ T8309] BTRFS info (device loop1): disk space caching is enabled [ 164.816395][ T8309] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 164.875316][ T8325] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 165.036744][ T8309] BTRFS info (device loop1): rebuilding free space tree [ 165.099594][ T8309] BTRFS info (device loop1): disabling free space tree [ 165.129581][ T8309] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 165.163540][ T8309] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 165.241148][ T5870] ocfs2: Unmounting device (7,3) on (node local) [ 165.614803][ T8349] loop0: detected capacity change from 0 to 32768 [ 165.647117][ T5868] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 165.660685][ T8349] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.943 (8349) [ 165.694899][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.763619][ T8349] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 165.842337][ T8378] loop3: detected capacity change from 0 to 128 [ 165.855032][ T8349] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 165.901307][ T8349] BTRFS info (device loop0): using free-space-tree [ 165.908616][ T8378] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 165.919435][ T30] audit: type=1800 audit(1755323496.548:18): pid=8378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.953" name="file2" dev="loop3" ino=1048717 res=0 errno=0 [ 165.954271][ T8378] FAT-fs (loop3): Filesystem has been set read-only [ 165.969068][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.019664][ T8378] syz.3.953: attempt to access beyond end of device [ 166.019664][ T8378] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 166.041362][ T8378] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 166.075845][ T8378] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 166.096625][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.117069][ T8378] syz.3.953: attempt to access beyond end of device [ 166.117069][ T8378] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 166.189625][ T8378] syz.3.953: attempt to access beyond end of device [ 166.189625][ T8378] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 166.279892][ T8378] syz.3.953: attempt to access beyond end of device [ 166.279892][ T8378] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 166.306810][ T8378] syz.3.953: attempt to access beyond end of device [ 166.306810][ T8378] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 166.332750][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.399867][ T8378] syz.3.953: attempt to access beyond end of device [ 166.399867][ T8378] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 166.459721][ T8378] syz.3.953: attempt to access beyond end of device [ 166.459721][ T8378] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 166.475399][ T5856] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 166.499550][ T8378] syz.3.953: attempt to access beyond end of device [ 166.499550][ T8378] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 166.543602][ T8378] syz.3.953: attempt to access beyond end of device [ 166.543602][ T8378] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 166.583580][ T8378] syz.3.953: attempt to access beyond end of device [ 166.583580][ T8378] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 166.606126][ T5880] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 166.616276][ T5880] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 166.623724][ T5880] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 166.633945][ T5880] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 166.642196][ T5880] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 166.670590][ T8391] loop1: detected capacity change from 0 to 32768 [ 166.718028][ T8382] loop5: detected capacity change from 0 to 32768 [ 166.760664][ T8391] [ 166.760664][ T8391] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 166.760664][ T8391] [ 166.799826][ T8382] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 166.861599][ T8391] JFS: metapage_get_blocks failed [ 166.914453][ T8391] ERROR: (device loop1): release_metapage: metapage_write_one() failed [ 166.914453][ T8391] [ 166.975561][ T8391] ERROR: (device loop1): diWrite: ixpxd invalid [ 166.975561][ T8391] [ 166.995394][ T49] bridge_slave_1: left allmulticast mode [ 167.013623][ T49] bridge_slave_1: left promiscuous mode [ 167.045157][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.055026][ T8391] ERROR: (device loop1): txAbort: [ 167.055026][ T8391] [ 167.066010][ T5857] ocfs2: Unmounting device (7,5) on (node local) [ 167.076132][ T49] bridge_slave_0: left allmulticast mode [ 167.094665][ T49] bridge_slave_0: left promiscuous mode [ 167.133591][ T8407] ERROR: (device loop1): diWrite: ixpxd invalid [ 167.133591][ T8407] [ 167.135297][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.189483][ T8407] ERROR: (device loop1): txAbort: [ 167.189483][ T8407] [ 167.246822][ T8417] Bluetooth: MGMT ver 1.23 [ 167.367270][ T8420] loop3: detected capacity change from 0 to 64 [ 167.399078][ T5868] [ 167.399078][ T5868] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.399078][ T5868] [ 167.440269][ T5868] [ 167.440269][ T5868] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.440269][ T5868] [ 167.547876][ T8424] loop5: detected capacity change from 0 to 1024 [ 167.962920][ T8412] loop2: detected capacity change from 0 to 32768 [ 167.973760][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.998859][ T8412] XFS: ikeep mount option is deprecated. [ 168.019452][ T5863] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 168.062857][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.094963][ T8412] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 168.139837][ T49] bond0 (unregistering): Released all slaves [ 168.171840][ T8412] XFS (loop2): Ending clean mount [ 168.196613][ T8412] XFS (loop2): Quotacheck needed: Please wait. [ 168.222815][ T5863] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 168.268154][ T8412] XFS (loop2): Quotacheck: Done. [ 168.291055][ T5863] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 168.399577][ T5863] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 168.408679][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.463827][ T8428] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 168.478520][ T5874] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 168.500488][ T5863] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 168.709540][ T5869] Bluetooth: hci2: command tx timeout [ 168.803018][ T8403] chnl_net:caif_netlink_parms(): no params data found [ 168.835768][ T8466] loop1: detected capacity change from 0 to 32768 [ 168.898856][ T8466] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=yes,norecovery,nojournal_transaction_names,read_only [ 168.898899][ T8466] allowing incompatible features above 0.0: (unknown version) [ 168.898921][ T8466] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 168.917408][ T5863] usb 4-1: USB disconnect, device number 9 [ 168.924855][ T8466] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 168.953668][ T8466] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 168.961793][ T8466] bcachefs (loop1): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 168.961793][ T8466] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 169.025721][ T8466] bcachefs (loop1): btree node read error at btree alloc level 0/0 [ 169.025749][ T8466] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 169.025778][ T8466] loop1 node offset 0/24: got wrong btree node: got [ 169.025798][ T8466] btree=alloc level=0 seq 98dc7e261 1 [ 169.025816][ T8466] min: POS_MIN [ 169.025830][ T8466] max: SPOS_MAX [ 169.025846][ T8466] loop1 btree validate error [ 169.025862][ T8466] flagging btree alloc lost data [ 169.025879][ T8466] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 169.025902][ T8466] running recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 169.025925][ T8466] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 169.025950][ T8466] running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0) [ 169.025973][ T8466] ret btree_node_read_err_bad_node [ 169.122243][ T8466] bcachefs (loop1): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 169.124957][ T8468] loop0: detected capacity change from 0 to 4096 [ 169.143769][ T8466] bcachefs (loop1): btree node read error at btree lru level 0/0 [ 169.143792][ T8466] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key 0:196608:0 durability: 1 ptr: 0:28:0 gen 0 [ 169.143821][ T8466] loop1 node offset 0/16: incorrect min_key: got POS_MIN should be 0:196608:0 [ 169.143843][ T8466] loop1 btree validate error [ 169.143859][ T8466] flagging btree lru lost data [ 169.143875][ T8466] ret btree_node_read_err_bad_node [ 169.191138][ T8466] bcachefs (loop1): error reading btree root btree=lru level=0: btree_node_read_error, fixing [ 169.212729][ T8466] bcachefs (loop1): btree node read error at btree freespace level 0/0 [ 169.212755][ T8466] u64s 11 type btree_ptr_v2 36591746972385279:U64_MAX:U32_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 169.212787][ T8466] loop1 node offset 0/32 bset u64s 0: incorrect max key SPOS_MAX [ 169.212809][ T8466] loop1 btree validate error [ 169.212825][ T8466] flagging btree freespace lost data [ 169.212841][ T8466] ret btree_node_read_err_bad_node [ 169.254712][ T8473] loop2: detected capacity change from 0 to 1024 [ 169.257579][ T8466] bcachefs (loop1): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 169.296687][ T8466] bcachefs (loop1): check_topology... done [ 169.303409][ T8466] bcachefs (loop1): accounting_read... [ 169.308070][ T8473] hfsplus: failed to load root directory [ 169.319617][ T8466] done [ 169.322389][ T8466] bcachefs (loop1): alloc_read... done [ 169.328202][ T8466] bcachefs (loop1): snapshots_read... done [ 169.334712][ T8466] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean [ 169.344442][ T8466] bcachefs (loop1): done starting filesystem [ 169.377179][ T8477] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.622845][ T5868] bcachefs (loop1): shutting down [ 169.707132][ T8403] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.722994][ T8403] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.731862][ T5868] bcachefs (loop1): shutdown complete [ 169.755765][ T8403] bridge_slave_0: entered allmulticast mode [ 169.788956][ T8403] bridge_slave_0: entered promiscuous mode [ 169.795905][ T8493] loop0: detected capacity change from 0 to 256 [ 169.821257][ T8403] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.821683][ T8492] loop2: detected capacity change from 0 to 2048 [ 169.828356][ T8403] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.848363][ T8493] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 169.854775][ T8403] bridge_slave_1: entered allmulticast mode [ 169.870201][ T8492] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 169.911653][ T8403] bridge_slave_1: entered promiscuous mode [ 169.926185][ T8496] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.938017][ T5859] udevd[5859]: incorrect nilfs2 checksum on /dev/loop2 [ 169.949989][ T5960] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 170.059589][ T49] hsr_slave_0: left promiscuous mode [ 170.085724][ T49] hsr_slave_1: left promiscuous mode [ 170.099629][ T5960] usb 4-1: Using ep0 maxpacket: 8 [ 170.121104][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.128558][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.141548][ T5960] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 170.161880][ T5960] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 170.189439][ T5960] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 170.198623][ T5960] usb 4-1: Product: syz [ 170.235726][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.244268][ T5960] usb 4-1: Manufacturer: syz [ 170.254365][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.261541][ T5960] usb 4-1: SerialNumber: syz [ 170.314594][ T49] veth1_macvtap: left promiscuous mode [ 170.329721][ T49] veth0_macvtap: left promiscuous mode [ 170.339759][ T49] veth1_vlan: left promiscuous mode [ 170.345067][ T49] veth0_vlan: left promiscuous mode [ 170.496553][ T5960] usb 4-1: palm_os_3_probe - error -71 getting connection information [ 170.519453][ T5960] visor 4-1:1.0: probe with driver visor failed with error -71 [ 170.530721][ T5960] usb 4-1: USB disconnect, device number 10 [ 170.769497][ T5869] Bluetooth: hci2: command tx timeout [ 171.268728][ T8514] loop3: detected capacity change from 0 to 2048 [ 171.315229][ T8514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.352726][ T49] team0 (unregistering): Port device team_slave_1 removed [ 171.369342][ T8514] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 171.385417][ T8514] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2048 with max blocks 1 with error 28 [ 171.398080][ T8514] EXT4-fs (loop3): This should not happen!! Data will be lost [ 171.398080][ T8514] [ 171.407798][ T8514] EXT4-fs (loop3): Total free blocks count 0 [ 171.414116][ T8514] EXT4-fs (loop3): Free/Dirty block details [ 171.414307][ T49] team0 (unregistering): Port device team_slave_0 removed [ 171.423730][ T8514] EXT4-fs (loop3): free_blocks=2415919104 [ 171.434157][ T8514] EXT4-fs (loop3): dirty_blocks=32 [ 171.439306][ T8514] EXT4-fs (loop3): Block reservation details [ 171.445635][ T8514] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 171.496759][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 171.607915][ T8505] netlink: 28 bytes leftover after parsing attributes in process `syz.5.983'. [ 171.662869][ T8512] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 171.698439][ T8512] macsec1: entered promiscuous mode [ 171.716272][ T8512] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 171.788053][ T8403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.811425][ T8403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.966907][ T8403] team0: Port device team_slave_0 added [ 171.985471][ T8403] team0: Port device team_slave_1 added [ 172.115774][ T8403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.133493][ T8403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.159448][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.183084][ T8534] siw: device registration error -23 [ 172.228417][ T8403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.275386][ T8403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.311521][ T8403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.338877][ T8541] netlink: 100 bytes leftover after parsing attributes in process `syz.3.997'. [ 172.399912][ T8403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.438443][ T8547] netlink: 'syz.0.998': attribute type 21 has an invalid length. [ 172.594941][ T8527] loop2: detected capacity change from 0 to 32768 [ 172.603781][ T8554] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1002'. [ 172.636260][ T8403] hsr_slave_0: entered promiscuous mode [ 172.637422][ T8554] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1002'. [ 172.645063][ T8403] hsr_slave_1: entered promiscuous mode [ 172.669415][ T8527] (syz.2.991,8527,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 172.718515][ T8403] debugfs: 'hsr0' already exists in 'hsr' [ 172.724369][ T8527] (syz.2.991,8527,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 172.740739][ T8403] Cannot create hsr debugfs directory [ 172.783906][ T8527] JBD2: Ignoring recovery information on journal [ 172.809330][ T49] IPVS: stop unused estimator thread 0... [ 172.851514][ T5869] Bluetooth: hci2: command tx timeout [ 172.861947][ T8527] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 172.932664][ T8527] ocfs2: Unmounting device (7,2) on (node local) [ 173.074817][ T8570] loop0: detected capacity change from 0 to 1024 [ 173.138688][ T8570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.166360][ T8570] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.322246][ T8570] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 173.405371][ T8403] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 173.469067][ T8403] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 173.501089][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.540767][ T8403] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 173.557301][ T8403] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 173.847790][ T8403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.897388][ T8567] loop1: detected capacity change from 0 to 32768 [ 173.907479][ T8403] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.950933][ T8565] loop3: detected capacity change from 0 to 40427 [ 173.972984][ T8567] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 173.982611][ T8565] F2FS-fs (loop3): invalid crc value [ 174.015960][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.023110][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.051879][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.059029][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.116442][ T5868] ocfs2: Unmounting device (7,1) on (node local) [ 174.129611][ T5960] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 174.306397][ T8565] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 174.343001][ T5960] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.379714][ T8565] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 174.387267][ T5960] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.438598][ T5960] usb 6-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 174.482323][ T5960] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.536492][ T5960] usb 6-1: config 0 descriptor?? [ 174.686160][ T5870] bio_check_eod: 778 callbacks suppressed [ 174.686185][ T5870] syz-executor: attempt to access beyond end of device [ 174.686185][ T5870] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 174.799486][ T5870] CPU: 1 UID: 0 PID: 5870 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 174.799539][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 174.799560][ T5870] Call Trace: [ 174.799570][ T5870] [ 174.799583][ T5870] dump_stack_lvl+0x16c/0x1f0 [ 174.799635][ T5870] f2fs_handle_critical_error+0x624/0x9f0 [ 174.799686][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.799733][ T5870] ? f2fs_build_fault_attr+0x53/0x1f0 [ 174.799776][ T5870] f2fs_write_end_io+0x958/0xcf0 [ 174.799827][ T5870] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 174.799875][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.799919][ T5870] ? rcu_is_watching+0x12/0xc0 [ 174.799969][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.800013][ T5870] ? lock_release+0x201/0x2f0 [ 174.800074][ T5870] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 174.800122][ T5870] bio_endio+0x70d/0x850 [ 174.800176][ T5870] submit_bio_noacct+0x306/0x1eb0 [ 174.800223][ T5870] __submit_merged_bio+0x33c/0x770 [ 174.800282][ T5870] __submit_merged_write_cond+0x319/0x3f0 [ 174.800340][ T5870] f2fs_write_cache_pages+0x2067/0x2570 [ 174.800412][ T5870] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 174.800473][ T5870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.800514][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.800559][ T5870] ? stack_trace_save+0x8e/0xc0 [ 174.800610][ T5870] ? __pfx_stack_trace_save+0x10/0x10 [ 174.800659][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.800705][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.800757][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.800802][ T5870] ? rcu_is_watching+0x12/0xc0 [ 174.800847][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.800901][ T5870] ? rcu_is_watching+0x12/0xc0 [ 174.800946][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.800991][ T5870] ? lock_release+0x201/0x2f0 [ 174.801065][ T5870] ? rcu_is_watching+0x12/0xc0 [ 174.801110][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.801155][ T5870] ? lock_release+0x201/0x2f0 [ 174.801210][ T5870] ? bpf_ksym_find+0x124/0x1c0 [ 174.801258][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.801312][ T5870] f2fs_write_data_pages+0x4ad/0xd90 [ 174.801374][ T5870] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 174.801437][ T5870] ? rcu_is_watching+0x12/0xc0 [ 174.801480][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.801525][ T5870] ? lock_release+0x201/0x2f0 [ 174.801583][ T5870] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 174.801644][ T5870] do_writepages+0x27a/0x600 [ 174.801695][ T5870] ? __pfx_do_writepages+0x10/0x10 [ 174.801740][ T5870] ? do_raw_spin_unlock+0x172/0x230 [ 174.801781][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.801825][ T5870] ? _raw_spin_unlock+0x28/0x50 [ 174.801868][ T5870] filemap_fdatawrite_wbc+0x104/0x160 [ 174.801918][ T5870] __filemap_fdatawrite_range+0xb9/0x100 [ 174.801980][ T5870] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 174.802070][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.802115][ T5870] ? rcu_is_watching+0x12/0xc0 [ 174.802159][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.802203][ T5870] ? lock_release+0x201/0x2f0 [ 174.802257][ T5870] ? do_raw_spin_unlock+0x172/0x230 [ 174.802303][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.802352][ T5870] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 174.802422][ T5870] block_operations+0x2b0/0xfe0 [ 174.802485][ T5870] ? __pfx___schedule+0x10/0x10 [ 174.802529][ T5870] ? __pfx_block_operations+0x10/0x10 [ 174.802589][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.802660][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.802704][ T5870] ? down_write+0x14d/0x200 [ 174.802757][ T5870] ? __pfx_down_write+0x10/0x10 [ 174.802812][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.802856][ T5870] ? rcu_is_watching+0x12/0xc0 [ 174.802905][ T5870] f2fs_write_checkpoint+0x2b8/0x4c60 [ 174.802971][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.803015][ T5870] ? kfree+0x2b4/0x4d0 [ 174.803060][ T5870] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 174.803106][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.803150][ T5870] ? rcu_is_watching+0x12/0xc0 [ 174.803195][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.803240][ T5870] ? kthread_stop+0x273/0x630 [ 174.803281][ T5870] kill_f2fs_super+0x3c2/0x470 [ 174.803316][ T5870] ? __pfx_kill_f2fs_super+0x10/0x10 [ 174.803361][ T5870] deactivate_locked_super+0xc1/0x1a0 [ 174.803418][ T5870] deactivate_super+0xde/0x100 [ 174.803473][ T5870] cleanup_mnt+0x225/0x450 [ 174.803530][ T5870] task_work_run+0x150/0x240 [ 174.803571][ T5870] ? __pfx_task_work_run+0x10/0x10 [ 174.803609][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.803655][ T5870] ? __pfx___x64_sys_umount+0x10/0x10 [ 174.803693][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.803740][ T5870] exit_to_user_mode_loop+0xeb/0x110 [ 174.803778][ T5870] do_syscall_64+0x3f6/0x4c0 [ 174.803829][ T5870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.803864][ T5870] RIP: 0033:0x7f6243d8ff17 [ 174.803891][ T5870] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 174.803926][ T5870] RSP: 002b:00007ffe238a7548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 174.803961][ T5870] RAX: 0000000000000000 RBX: 00007f6243e11c05 RCX: 00007f6243d8ff17 [ 174.803984][ T5870] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe238a7600 [ 174.804007][ T5870] RBP: 00007ffe238a7600 R08: 0000000000000000 R09: 0000000000000000 [ 174.804029][ T5870] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe238a8690 [ 174.804053][ T5870] R13: 00007f6243e11c05 R14: 000000000002a9dc R15: 00007ffe238a86d0 [ 174.804088][ T5870] [ 174.809043][ T5870] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 174.849955][ T8403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.931568][ T5869] Bluetooth: hci2: command tx timeout [ 175.049983][ T5960] hid_mf 0003:0079:1846.0014: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.5-1/input0 [ 175.109449][ T24] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 175.401877][ T5960] hid_mf 0003:0079:1846.0014: Invalid report, this should never happen! [ 175.442892][ T5960] hid_mf 0003:0079:1846.0014: Force feedback init failed. [ 175.496960][ T5960] usb 6-1: USB disconnect, device number 8 [ 175.566533][ T8609] loop1: detected capacity change from 0 to 32768 [ 175.594666][ T8609] XFS: attr2 mount option is deprecated. [ 175.672860][ T8609] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 175.801789][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.834246][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 175.839438][ T8609] XFS (loop1): Ending clean mount [ 175.874295][ T8609] XFS (loop1): Quotacheck needed: Please wait. [ 175.879437][ T24] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 175.896243][ T8609] XFS (loop1): Quotacheck: Done. [ 175.931842][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.980508][ T24] usb 1-1: config 0 descriptor?? [ 176.017922][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 176.035059][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 176.049769][ T9] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 176.058562][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 176.059723][ T8403] veth0_vlan: entered promiscuous mode [ 176.099320][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 176.121621][ T8403] veth1_vlan: entered promiscuous mode [ 176.128800][ T24] usb 1-1: media controller created [ 176.141081][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 176.186632][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 176.204229][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 176.223674][ T8624] dvb-usb: bulk message failed: -22 (2/0) [ 176.225284][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 176.252543][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 176.270978][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 176.273592][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 176.292468][ T9] usb 6-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 176.294438][ T5868] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 176.301813][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.316702][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 176.324324][ T9] usb 6-1: config 0 descriptor?? [ 176.335275][ T24] usb 1-1: USB disconnect, device number 13 [ 176.342459][ T8403] veth0_macvtap: entered promiscuous mode [ 176.388107][ T8403] veth1_macvtap: entered promiscuous mode [ 176.399827][ T8644] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 176.466646][ T8403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.520389][ T8403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.530085][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 176.601668][ T1335] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.662870][ T1070] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.700363][ T1070] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.722205][ T1070] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.845292][ T9] hid_parser_main: 51 callbacks suppressed [ 176.845321][ T9] lenovo 0003:17EF:6067.0015: unknown main item tag 0x1 [ 176.891695][ T9] lenovo 0003:17EF:6067.0015: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.5-1/input0 [ 176.935448][ T1335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.971771][ T8669] loop3: detected capacity change from 0 to 512 [ 176.983737][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1026'. [ 176.994008][ T1335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.007764][ T8669] EXT4-fs: Ignoring removed oldalloc option [ 177.077820][ T8669] EXT4-fs: inline encryption not supported [ 177.101531][ T1070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.119716][ T8669] EXT4-fs: Ignoring removed mblk_io_submit option [ 177.139216][ T1070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.154179][ T8669] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 177.185544][ T5863] usb 6-1: USB disconnect, device number 9 [ 177.294127][ T8669] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.1024: bg 0: block 64: padding at end of block bitmap is not set [ 177.327602][ T8669] Quota error (device loop3): write_blk: dquota write failed [ 177.338484][ T8669] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 177.359009][ T8669] EXT4-fs error (device loop3): ext4_acquire_dquot:6931: comm syz.3.1024: Failed to acquire dquot type 0 [ 177.388496][ T8687] loop2: detected capacity change from 0 to 256 [ 177.403164][ T8687] exfat: Deprecated parameter 'utf8' [ 177.419712][ T8669] EXT4-fs (loop3): 1 truncate cleaned up [ 177.435792][ T8669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.439658][ T8687] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 177.648137][ T5870] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.935105][ T8700] loop1: detected capacity change from 0 to 4096 [ 177.965439][ T8700] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 178.088381][ T8700] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 178.230424][ T8685] loop0: detected capacity change from 0 to 32768 [ 178.264341][ T1070] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 178.291898][ T8712] loop5: detected capacity change from 0 to 4096 [ 178.301029][ T5868] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 178.307564][ T5868] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 178.321946][ T8685] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 178.330684][ T5868] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 178.337663][ T49] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 178.391319][ T8693] loop6: detected capacity change from 0 to 32768 [ 178.420419][ T8724] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.454842][ T8693] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 178.524862][ T8731] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1041'. [ 178.530655][ T8685] XFS (loop0): Ending clean mount [ 178.586855][ T8403] ocfs2: Unmounting device (7,6) on (node local) [ 178.635934][ T8685] XFS (loop0): Quotacheck needed: Please wait. [ 178.712440][ T8685] XFS (loop0): Quotacheck: Done. [ 178.979502][ T5856] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 179.127107][ T8739] syz.2.1048 (8739) used greatest stack depth: 19976 bytes left [ 179.200350][ T8750] Bluetooth: MGMT ver 1.23 [ 179.308891][ T8755] netlink: 'syz.3.1057': attribute type 4 has an invalid length. [ 179.335910][ T8755] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1057'. [ 179.505006][ T8760] netlink: 'syz.5.1059': attribute type 3 has an invalid length. [ 179.565582][ T8760] netlink: 'syz.5.1059': attribute type 1 has an invalid length. [ 179.594588][ T8760] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.1059'. [ 180.015963][ T8751] loop6: detected capacity change from 0 to 32768 [ 180.036984][ T8785] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 180.043528][ T8785] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 180.066408][ T8785] vhci_hcd vhci_hcd.0: Device attached [ 180.189509][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 180.300709][ T5863] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 180.342784][ T24] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 180.360264][ T8797] loop1: detected capacity change from 0 to 1024 [ 180.361278][ T24] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 180.375821][ T5961] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 180.392520][ T8797] EXT4-fs: Ignoring removed orlov option [ 180.402673][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.468666][ T24] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 180.489959][ T8797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.549447][ T5961] usb 3-1: Using ep0 maxpacket: 16 [ 180.554797][ T8797] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.569956][ T5961] usb 3-1: config 0 has no interfaces? [ 180.575462][ T5961] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 180.590890][ T5961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.610315][ T5961] usb 3-1: config 0 descriptor?? [ 180.730562][ T5868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.825571][ T8793] loop5: detected capacity change from 0 to 32768 [ 180.834577][ T8786] usbip_core: unknown command [ 180.839299][ T8786] vhci_hcd: unknown pdu 0 [ 180.846815][ T5961] usb 3-1: USB disconnect, device number 11 [ 180.854899][ T8793] XFS: attr2 mount option is deprecated. [ 180.874529][ T8786] usbip_core: unknown command [ 180.890921][ T59] vhci_hcd: stop threads [ 180.895202][ T59] vhci_hcd: release socket [ 180.903380][ T59] vhci_hcd: disconnect device [ 180.922323][ T8793] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 180.953456][ T8793] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 181.060422][ T8793] XFS (loop5): Ending clean mount [ 181.093813][ T8793] XFS (loop5): Quotacheck needed: Please wait. [ 181.155111][ T8793] XFS (loop5): Quotacheck: Done. [ 181.215570][ T8825] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 181.222033][ T8825] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 181.253674][ T9] libceph: connect (1)[c::]:6789 error -101 [ 181.261080][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 181.292987][ T5857] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 181.306231][ T8809] loop1: detected capacity change from 0 to 32768 [ 181.520258][ T9] libceph: connect (1)[c::]:6789 error -101 [ 181.526356][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 181.572394][ T24] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 181.609753][ T24] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 181.647772][ T24] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 181.667867][ T8836] loop6: detected capacity change from 0 to 2048 [ 181.708604][ T8836] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.778774][ T8836] [syz.6.1088/8836] FS: loop6 File: /cpu.stat would truncate fibmap result [ 181.889120][ T5961] usb 1-1: USB disconnect, device number 14 [ 182.027405][ T8824] ceph: No mds server is up or the cluster is laggy [ 182.040262][ T43] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 182.082941][ T6051] libceph: connect (1)[c::]:6789 error -101 [ 182.089981][ T6051] libceph: mon0 (1)[c::]:6789 connect error [ 182.230092][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 182.247827][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.262772][ T43] usb 6-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 182.281189][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.289451][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 182.301277][ T8863] loop6: detected capacity change from 0 to 1024 [ 182.308362][ T43] usb 6-1: config 0 descriptor?? [ 182.358575][ T8863] hfsplus: bad catalog entry type [ 182.396382][ T1070] hfsplus: b-tree write err: -5, ino 4 [ 182.449656][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.479525][ T5960] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 182.491735][ T9] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 182.514675][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.548167][ T9] usb 3-1: config 0 descriptor?? [ 182.663895][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.693587][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.709593][ T5961] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 182.709643][ T5960] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 182.758833][ T43] belkin 0003:1020:0006.0016: unknown main item tag 0x1 [ 182.761248][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.785904][ T43] belkin 0003:1020:0006.0016: report_id 0 is invalid [ 182.802758][ T43] belkin 0003:1020:0006.0016: item 0 0 1 8 parsing failed [ 182.810620][ T43] belkin 0003:1020:0006.0016: parse failed [ 182.814976][ T5960] usb 2-1: config 0 descriptor?? [ 182.820408][ T43] belkin 0003:1020:0006.0016: probe with driver belkin failed with error -22 [ 182.882676][ T5961] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 182.922234][ T5961] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.938611][ T5961] usb 7-1: Product: syz [ 182.943200][ T5961] usb 7-1: Manufacturer: syz [ 182.948864][ T5961] usb 7-1: SerialNumber: syz [ 182.989113][ T9] dragonrise 0003:0079:0006.0017: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.2-1/input0 [ 182.989606][ T5961] usb 7-1: config 0 descriptor?? [ 183.012283][ T43] usb 6-1: USB disconnect, device number 10 [ 183.043930][ T9] dragonrise 0003:0079:0006.0017: no inputs found [ 183.062469][ T9] dragonrise 0003:0079:0006.0017: force feedback init failed [ 183.186976][ T9] usb 3-1: USB disconnect, device number 12 [ 183.195113][ T8870] loop3: detected capacity change from 0 to 40427 [ 183.214379][ T8870] F2FS-fs: heap/no_heap options were deprecated [ 183.221954][ T8870] F2FS-fs (loop3): build fault injection rate: 19 [ 183.230821][ T8870] F2FS-fs (loop3): invalid crc value [ 183.267145][ T43] usb 7-1: USB disconnect, device number 2 [ 183.287401][ T5960] elo 0003:04E7:0030.0018: item fetching failed at offset 5/7 [ 183.304570][ T5960] elo 0003:04E7:0030.0018: parse failed [ 183.338754][ T5960] elo 0003:04E7:0030.0018: probe with driver elo failed with error -22 [ 183.341737][ T8870] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 183.370565][ T8870] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 183.521564][ T43] usb 2-1: USB disconnect, device number 8 [ 183.988988][ T8900] loop2: detected capacity change from 0 to 64 [ 184.198303][ T8911] CIFS mount error: No usable UNC path provided in device string! [ 184.198303][ T8911] [ 184.229610][ T9] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 184.276573][ T8911] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 184.432358][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 184.487281][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 184.516631][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.557698][ T9] usb 6-1: config 0 descriptor?? [ 184.567677][ T8901] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 184.619567][ T5961] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 184.795553][ T5961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.831192][ T5961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.863865][ T5961] usb 4-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00 [ 184.896436][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.936853][ T5961] usb 4-1: config 0 descriptor?? [ 185.012349][ T9] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x3 [ 185.060112][ T9] pyra 0003:1E7D:2CF6.0019: hidraw0: USB HID v1.01 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 185.166676][ T8942] loop2: detected capacity change from 0 to 1024 [ 185.193817][ T8946] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 185.267761][ T9] usb 6-1: USB disconnect, device number 11 [ 185.293379][ T8942] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.320295][ T8942] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.392912][ T5961] asus 0003:0B05:1807.001A: hidraw0: USB HID v0.00 Device [HID 0b05:1807] on usb-dummy_hcd.3-1/input0 [ 185.392967][ T5961] asus 0003:0B05:1807.001A: Asus input not registered [ 185.394557][ T8942] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 185.396605][ T5961] asus 0003:0B05:1807.001A: probe with driver asus failed with error -12 [ 185.401547][ T5863] vhci_hcd: vhci_device speed not set [ 185.404953][ T8942] EXT4-fs (loop2): Remounting filesystem read-only [ 185.461264][ T43] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 185.553698][ T5874] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.596928][ T24] usb 4-1: USB disconnect, device number 11 [ 185.630661][ T43] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 185.638868][ T43] usb 2-1: config 0 has no interface number 0 [ 185.654015][ T43] usb 2-1: too many endpoints for config 0 interface 2 altsetting 0: 129, using maximum allowed: 30 [ 185.685890][ T43] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.728455][ T43] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.739545][ T43] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 185.770250][ T43] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 185.784747][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.803369][ T43] usb 2-1: config 0 descriptor?? [ 186.232755][ T43] wacom 0003:056A:0084.001B: unknown main item tag 0x0 [ 186.267249][ T43] wacom 0003:056A:0084.001B: unknown main item tag 0x0 [ 186.319711][ T43] wacom 0003:056A:0084.001B: hidraw0: USB HID vff.ea Device [HID 056a:0084] on usb-dummy_hcd.1-1/input2 [ 186.405153][ T8988] loop2: detected capacity change from 0 to 512 [ 186.501104][ T8988] EXT4-fs: Ignoring removed i_version option [ 186.525055][ T43] usb 2-1: USB disconnect, device number 9 [ 186.557547][ T8988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.576566][ T8989] fido_id[8989]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 186.639981][ T8988] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.790322][ T8988] EXT4-fs: Cannot change journaled quota options when quota turned on [ 186.895969][ T5874] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.406729][ T9023] netlink: 'syz.2.1159': attribute type 2 has an invalid length. [ 187.466812][ T9023] k›*·]‘: entered promiscuous mode [ 187.482543][ T9029] syz.1.1161 uses obsolete (PF_INET,SOCK_PACKET) [ 187.656000][ T8996] loop3: detected capacity change from 0 to 32768 [ 187.747134][ T9036] loop6: detected capacity change from 0 to 1024 [ 187.785298][ T9036] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.820017][ T9047] max out of range [ 187.825905][ T9051] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1166'. [ 187.859704][ T9036] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.882711][ T9040] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1166'. [ 187.944068][ T9054] loop0: detected capacity change from 0 to 256 [ 187.947152][ T8996] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 187.972979][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.013233][ T9054] exfat: Deprecated parameter 'utf8' [ 188.025039][ T9036] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 188.039048][ T9054] exfat: Deprecated parameter 'namecase' [ 188.095009][ T8996] allowing incompatible features above 0.0: (unknown version) [ 188.106439][ T9054] exfat: Deprecated parameter 'utf8' [ 188.122387][ T8996] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 188.157040][ T8996] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 188.167542][ T9036] EXT4-fs (loop6): Remounting filesystem read-only [ 188.194665][ T8996] bcachefs (loop3): initializing new filesystem [ 188.225147][ T9054] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 188.257509][ T8996] bcachefs (loop3): going read-write [ 188.305091][ T8996] bcachefs (loop3): marking superblocks [ 188.328592][ T8996] bcachefs (loop3): initializing freespace [ 188.339283][ T8996] bcachefs (loop3): done initializing freespace [ 188.367130][ T8403] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.392095][ T8996] bcachefs (loop3): reading snapshots table [ 188.398032][ T8996] bcachefs (loop3): reading snapshots done [ 188.516531][ T8996] bcachefs (loop3): done starting filesystem [ 188.591877][ T9079] loop0: detected capacity change from 0 to 1024 [ 188.677773][ T9079] hfsplus: bad catalog entry type [ 188.691692][ T8996] syz.3.1150 (8996) used greatest stack depth: 18936 bytes left [ 188.902172][ T5870] bcachefs (loop3): shutting down [ 188.912368][ T9088] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1178'. [ 188.921620][ T5870] bcachefs (loop3): going read-only [ 188.930142][ T1335] hfsplus: b-tree write err: -5, ino 4 [ 188.942420][ T9088] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1178'. [ 188.944240][ T5870] bcachefs (loop3): finished waiting for writes to stop [ 188.951590][ T9088] tipc: Invalid UDP bearer configuration [ 188.951624][ T9088] tipc: Enabling of bearer rejected, failed to enable media [ 189.011633][ T5870] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3 [ 189.099703][ T43] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 189.111844][ T5870] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 189.132395][ T5870] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 189.171776][ T5870] bcachefs (loop3): marking filesystem clean [ 189.223987][ T5870] bcachefs (loop3): shutdown complete [ 189.235504][ T9104] loop5: detected capacity change from 0 to 512 [ 189.249516][ T5961] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 189.300751][ T43] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 189.311286][ T43] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 189.323954][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 189.324923][ T9104] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1186: iget: bad i_size value: 38620345925642 [ 189.354336][ T43] usb 2-1: config 1 has no interface number 0 [ 189.371438][ T43] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 189.405608][ T43] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 189.422054][ T9104] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.1186: couldn't read orphan inode 15 (err -117) [ 189.440042][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 189.453859][ T43] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 189.465363][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.483060][ T9104] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.490565][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.506013][ T5961] usb 3-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 189.529421][ T5961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.559050][ T43] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 189.582674][ T5961] usb 3-1: config 0 descriptor?? [ 189.599519][ T9104] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz.5.1186: bg 0: block 5: invalid block bitmap [ 189.694782][ T5857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.010921][ T9107] loop6: detected capacity change from 0 to 32768 [ 190.114038][ T43] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 190.253209][ T43] usb 3-1: USB disconnect, device number 13 [ 190.350684][ T5946] usb 2-1: USB disconnect, device number 10 [ 190.377401][ T5946] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 191.082494][ T9169] random: crng reseeded on system resumption [ 191.177621][ T9166] loop1: detected capacity change from 0 to 4096 [ 191.253518][ T9166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.328854][ T30] audit: type=1800 audit(1755323521.968:19): pid=9180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1209" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 191.533127][ T5868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.707343][ T9192] loop2: detected capacity change from 0 to 1024 [ 191.739867][ T9193] dvmrp5: entered allmulticast mode [ 191.763176][ T9187] loop5: detected capacity change from 0 to 4096 [ 191.778803][ T9193] dvmrp5: left allmulticast mode [ 191.820801][ T9187] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 192.095896][ T9203] loop2: detected capacity change from 0 to 128 [ 192.161289][ T9203] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 192.241715][ T9203] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.493632][ T9220] loop0: detected capacity change from 0 to 2048 [ 192.634470][ T9220] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.754096][ T9220] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.792891][ T9240] loop6: detected capacity change from 0 to 256 [ 192.887588][ T9237] loop2: detected capacity change from 0 to 4096 [ 192.894689][ T9240] exfat: Deprecated parameter 'namecase' [ 192.948033][ T9240] exfat: Deprecated parameter 'utf8' [ 192.955669][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.027267][ T9240] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 193.242475][ T9219] loop3: detected capacity change from 0 to 32768 [ 193.317964][ T9219] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 193.432618][ T9219] XFS (loop3): Ending clean mount [ 193.438932][ T9219] XFS (loop3): Quotacheck needed: Please wait. [ 193.473822][ T9219] XFS (loop3): Quotacheck: Done. [ 193.640113][ T43] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 193.726211][ T9276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1249'. [ 193.778942][ T5870] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 193.829483][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 193.852716][ T43] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 193.891989][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.928002][ T43] usb 3-1: Product: syz [ 193.938060][ T43] usb 3-1: Manufacturer: syz [ 193.951838][ T43] usb 3-1: SerialNumber: syz [ 193.979898][ T1070] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 194.003376][ T1070] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 194.011217][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 194.052306][ T43] usb 3-1: config 0 descriptor?? [ 194.087836][ T43] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 194.156323][ T9286] loop1: detected capacity change from 0 to 4096 [ 194.194557][ T9286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.210684][ T9289] loop3: detected capacity change from 0 to 4096 [ 194.219219][ T9289] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 194.290688][ T9289] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 194.364259][ T5868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.383221][ T9289] ntfs3: Cannot use different iocharset when remounting! [ 194.438608][ T9272] loop5: detected capacity change from 0 to 32768 [ 194.445198][ T5946] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 194.494707][ T9272] (syz.5.1247,9272,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 194.553364][ T9272] (syz.5.1247,9272,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 194.599621][ T5946] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 194.642821][ T9272] JBD2: Ignoring recovery information on journal [ 194.692957][ T43] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 194.708278][ T43] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 194.723981][ T43] usb 3-1: USB disconnect, device number 14 [ 194.800936][ T9272] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 194.855709][ T9295] loop3: detected capacity change from 0 to 4096 [ 194.939702][ T9295] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 194.947299][ T9288] loop6: detected capacity change from 0 to 32768 [ 194.949120][ T9300] loop1: detected capacity change from 0 to 256 [ 194.991786][ T9295] ntfs3(loop3): Failed to load $Extend (-22). [ 195.010063][ T9295] ntfs3(loop3): Failed to initialize $Extend. [ 195.024056][ T9300] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 195.048385][ T5946] IPVS: starting estimator thread 0... [ 195.072403][ T9288] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 195.139454][ T9303] IPVS: using max 31 ests per chain, 74400 per kthread [ 195.224212][ T30] audit: type=1800 audit(1755323525.858:20): pid=9295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1257" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 195.224621][ T5857] ocfs2: Unmounting device (7,5) on (node local) [ 195.322673][ T8403] ocfs2: Unmounting device (7,6) on (node local) [ 195.782583][ T9324] loop0: detected capacity change from 0 to 512 [ 195.847540][ T9324] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1270: iget: bad i_size value: 38620345925642 [ 196.029435][ T9324] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.1270: couldn't read orphan inode 15 (err -117) [ 196.078389][ T9324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.128120][ T9338] vivid-000: disconnect [ 196.142478][ T9332] vivid-000: reconnect [ 196.161720][ T9324] EXT4-fs error (device loop0): ext4_validate_block_bitmap:431: comm syz.0.1270: bg 0: block 5: invalid block bitmap [ 196.311141][ T9313] loop1: detected capacity change from 0 to 32768 [ 196.338200][ T9313] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1266 (9313) [ 196.375531][ T9313] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 196.387322][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.407203][ T9313] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 196.426764][ T9313] BTRFS info (device loop1): using free-space-tree [ 196.579616][ T43] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 196.635014][ T9321] loop2: detected capacity change from 0 to 32768 [ 196.673080][ T9321] BTRFS info: device /dev/loop2 (7:2) using temp-fsid 48ca120b-390a-4023-b538-3602f4fcbda2 [ 196.687632][ T9346] loop6: detected capacity change from 0 to 4096 [ 196.727802][ T9321] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1269 (9321) [ 196.740764][ T43] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 196.786904][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.804498][ T9346] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 196.814326][ T5868] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 196.843827][ T9321] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 196.866195][ T43] usb 6-1: config 0 descriptor?? [ 196.888965][ T9346] ntfs3(loop6): Failed to load $Extend (-22). [ 196.890298][ T43] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 196.921350][ T9346] ntfs3(loop6): Failed to initialize $Extend. [ 196.945449][ T9321] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 196.989577][ T9321] BTRFS info (device loop2): using free-space-tree [ 197.025610][ T30] audit: type=1800 audit(1755323527.668:21): pid=9346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1280" name="file1" dev="loop6" ino=30 res=0 errno=0 [ 197.093607][ T9383] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 197.339485][ T43] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 197.389465][ T43] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 197.401960][ T9398] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1290'. [ 197.458228][ T9400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1291'. [ 197.481831][ T9402] loop6: detected capacity change from 0 to 8 [ 197.537854][ T9402] SQUASHFS error: lzo decompression failed, data probably corrupt [ 197.549304][ T9402] SQUASHFS error: Failed to read block 0x71: -5 [ 197.557427][ T5874] BTRFS info (device loop2): last unmount of filesystem 48ca120b-390a-4023-b538-3602f4fcbda2 [ 197.588226][ T9402] SQUASHFS error: lzo decompression failed, data probably corrupt [ 197.603204][ T43] usb 6-1: USB disconnect, device number 12 [ 197.609906][ T9402] SQUASHFS error: Failed to read block 0x71: -5 [ 197.671573][ T30] audit: type=1800 audit(1755323528.318:22): pid=9402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1289" name="file0" dev="loop6" ino=3 res=0 errno=0 [ 197.889520][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 198.277221][ T9429] loop3: detected capacity change from 0 to 1024 [ 198.380857][ T9429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.387446][ T9437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1307'. [ 198.544535][ T5870] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.830815][ T9453] loop2: detected capacity change from 0 to 128 [ 198.832166][ T9452] loop6: detected capacity change from 0 to 1024 [ 198.846368][ T9417] loop1: detected capacity change from 0 to 32768 [ 198.860673][ T9417] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1297 (9417) [ 198.886804][ T9453] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 198.907296][ T9453] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.935839][ T9452] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.955081][ T9417] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 199.002156][ T9452] EXT4-fs error (device loop6): mb_free_blocks:2014: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 199.017192][ T9417] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 199.026468][ T9417] BTRFS info (device loop1): using free-space-tree [ 199.064391][ T9452] EXT4-fs (loop6): Remounting filesystem read-only [ 199.106830][ T9476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1320'. [ 199.180059][ T9483] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 199.305150][ T8403] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.415257][ T5868] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 199.680293][ T9503] loop5: detected capacity change from 0 to 64 [ 199.856461][ T9512] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 199.902698][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1333'. [ 200.031927][ T9518] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1336'. [ 200.093741][ T9520] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 200.699428][ T43] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 200.760225][ T9554] loop0: detected capacity change from 0 to 512 [ 200.779482][ T9554] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 200.819265][ T9554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.879299][ T9554] ext4 filesystem being mounted at /213/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.897568][ T43] usb 7-1: Using ep0 maxpacket: 8 [ 200.902368][ T9567] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1357'. [ 200.967400][ T43] usb 7-1: unable to get BOS descriptor or descriptor too short [ 200.981741][ T43] usb 7-1: config 4 interface 0 has no altsetting 0 [ 201.031168][ T43] usb 7-1: string descriptor 0 read error: -22 [ 201.037377][ T43] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 201.066860][ T43] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 201.136865][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.138481][ T9575] loop1: detected capacity change from 0 to 2048 [ 201.169046][ T9575] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.189436][ T5960] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 201.197253][ T43] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 201.230054][ T43] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 201.276569][ T43] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 201.310531][ T43] usb 7-1: media controller created [ 201.342848][ T5960] usb 3-1: Using ep0 maxpacket: 32 [ 201.342847][ T9541] usb 7-1: dvb_usb_au6610: wlen=0, aborting [ 201.386429][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.401569][ T5960] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 201.441098][ T43] zl10353_read_register: readreg error (reg=127, ret==0) [ 201.448358][ T5960] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 201.498465][ T5960] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 201.548090][ T5960] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 201.552531][ T43] usb 7-1: USB disconnect, device number 3 [ 201.612866][ T5960] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 201.653737][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.689591][ T5960] usb 3-1: Product: syz [ 201.693757][ T5960] usb 3-1: Manufacturer: syz [ 201.698347][ T5960] usb 3-1: SerialNumber: syz [ 201.775641][ T5960] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input16 [ 201.801213][ T9593] loop3: detected capacity change from 0 to 256 [ 201.861215][ T9595] loop0: detected capacity change from 0 to 256 [ 201.917686][ T9597] loop5: detected capacity change from 0 to 764 [ 202.006070][ T9595] FAT-fs (loop0): Directory bread(block 64) failed [ 202.049282][ T9595] FAT-fs (loop0): Directory bread(block 65) failed [ 202.101178][ T9569] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 202.102153][ T9595] FAT-fs (loop0): Directory bread(block 66) failed [ 202.107699][ T9569] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 202.127853][ T9601] loop3: detected capacity change from 0 to 256 [ 202.188823][ T9595] FAT-fs (loop0): Directory bread(block 67) failed [ 202.199526][ T9569] vhci_hcd vhci_hcd.0: Device attached [ 202.235527][ T9601] FAT-fs (loop3): Directory bread(block 64) failed [ 202.245677][ T9595] FAT-fs (loop0): Directory bread(block 68) failed [ 202.272880][ T9601] FAT-fs (loop3): Directory bread(block 65) failed [ 202.275367][ T5960] imon:send_packet: packet tx failed (-71) [ 202.279453][ T9602] vhci_hcd: connection closed [ 202.288904][ T9595] FAT-fs (loop0): Directory bread(block 69) failed [ 202.302985][ T49] vhci_hcd: stop threads [ 202.307229][ T49] vhci_hcd: release socket [ 202.319932][ T5960] imon 3-1:155.0: panel buttons/knobs setup failed [ 202.329921][ T9601] FAT-fs (loop3): Directory bread(block 66) failed [ 202.336542][ T9601] FAT-fs (loop3): Directory bread(block 67) failed [ 202.337500][ T49] vhci_hcd: disconnect device [ 202.354581][ T9595] FAT-fs (loop0): Directory bread(block 70) failed [ 202.359132][ T5960] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 202.394873][ T9595] FAT-fs (loop0): Directory bread(block 71) failed [ 202.400617][ T9] vhci_hcd: vhci_device speed not set [ 202.418729][ T9609] mkiss: ax0: crc mode is auto. [ 202.419091][ T9595] FAT-fs (loop0): Directory bread(block 72) failed [ 202.431211][ T9601] FAT-fs (loop3): Directory bread(block 68) failed [ 202.444150][ T5960] (id 0x00) [ 202.459020][ T9601] FAT-fs (loop3): Directory bread(block 69) failed [ 202.492374][ T9601] FAT-fs (loop3): Directory bread(block 70) failed [ 202.503311][ T9595] FAT-fs (loop0): Directory bread(block 73) failed [ 202.518074][ T9601] FAT-fs (loop3): Directory bread(block 71) failed [ 202.552241][ T9601] FAT-fs (loop3): Directory bread(block 72) failed [ 202.561160][ T9601] FAT-fs (loop3): Directory bread(block 73) failed [ 202.579912][ T5960] rc_core: IR keymap rc-imon-pad not found [ 202.585798][ T5960] Registered IR keymap rc-empty [ 202.639624][ T5960] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 202.673335][ T5960] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 202.699808][ T5960] imon:send_packet: packet tx failed (-71) [ 202.735483][ T5960] imon 3-1:155.0: remote input dev register failed [ 202.783595][ T5960] imon 3-1:155.0: imon_init_intf0: rc device setup failed [ 202.794733][ T9619] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 202.886485][ T5960] imon 3-1:155.0: unable to initialize intf0, err 0 [ 202.899449][ T5960] imon:imon_probe: failed to initialize context! [ 202.960294][ T5960] imon 3-1:155.0: unable to register, err -19 [ 203.050557][ T5960] usb 3-1: USB disconnect, device number 15 [ 203.317420][ T9628] loop5: detected capacity change from 0 to 8192 [ 203.636439][ T9656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1400'. [ 203.638412][ T9654] loop5: detected capacity change from 0 to 1024 [ 203.709339][ T9654] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.816719][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.825296][ T9654] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 203.905616][ T9668] loop1: detected capacity change from 0 to 256 [ 204.020459][ T5857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.562327][ T9697] tipc: Enabling of bearer rejected, failed to enable media [ 204.583624][ T9701] loop1: detected capacity change from 0 to 256 [ 204.619460][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 204.642106][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1421'. [ 204.651537][ T9701] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 204.809774][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 204.843587][ T9] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 204.875892][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.904201][ T9] usb 6-1: Product: syz [ 204.908377][ T9] usb 6-1: Manufacturer: syz [ 204.944069][ T9] usb 6-1: SerialNumber: syz [ 204.981981][ T9] usb 6-1: config 0 descriptor?? [ 204.993732][ T9] radio-usb-si4713 6-1:0.0: Si4713 development board discovered: (10C4:8244) [ 205.240306][ T9729] netlink: 'syz.1.1435': attribute type 1 has an invalid length. [ 205.248163][ T9729] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1435'. [ 205.290886][ T9729] netlink: 'syz.1.1435': attribute type 1 has an invalid length. [ 205.334484][ T9727] loop2: detected capacity change from 0 to 4096 [ 205.413993][ T9727] ntfs3(loop2): failed to convert "0080" to cp857 [ 205.443118][ T9727] ntfs3(loop2): failed to convert name for inode 1e. [ 205.459150][ T9727] ntfs3(loop2): ino=1f, mi_enum_attr [ 205.590828][ T9738] PKCS8: Unsupported PKCS#8 version [ 205.612358][ T9] radio-usb-si4713 6-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 205.654518][ T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 205.678495][ T9] usb 6-1: USB disconnect, device number 13 [ 205.893774][ T9723] loop0: detected capacity change from 0 to 32768 [ 205.913329][ T9750] netlink: 192 bytes leftover after parsing attributes in process `syz.6.1443'. [ 205.981373][ T9752] loop2: detected capacity change from 0 to 2048 [ 206.038267][ T9752] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 206.059428][ T9752] UDF-fs: Scanning with blocksize 512 failed [ 206.092386][ T9756] netlink: 'syz.3.1448': attribute type 10 has an invalid length. [ 206.109068][ T9752] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.119718][ T5960] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 206.157465][ T9756] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 206.172488][ T9758] tipc: MTU too low for tipc bearer [ 206.215595][ T9755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.312528][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.357082][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.369517][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 206.407954][ T5960] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 206.427461][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.440791][ T5960] usb 2-1: config 0 descriptor?? [ 206.709953][ T9779] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1458'. [ 206.871011][ T5960] samsung 0003:0419:0600.001D: item fetching failed at offset 5/7 [ 206.895998][ T5960] samsung 0003:0419:0600.001D: parse failed [ 206.920896][ T5960] samsung 0003:0419:0600.001D: probe with driver samsung failed with error -22 [ 207.046055][ T9791] loop0: detected capacity change from 0 to 512 [ 207.108530][ T5960] usb 2-1: USB disconnect, device number 11 [ 207.548565][ T9789] loop6: detected capacity change from 0 to 32768 [ 207.576547][ T9789] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1462 (9789) [ 207.655190][ T9789] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 207.680167][ T9789] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 207.688701][ T9789] BTRFS info (device loop6): disk space caching is enabled [ 207.750778][ T9789] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 207.920345][ T9789] BTRFS info (device loop6): rebuilding free space tree [ 207.964504][ T9821] loop1: detected capacity change from 0 to 4096 [ 207.984594][ T9789] BTRFS info (device loop6): disabling free space tree [ 207.994490][ T9842] loop2: detected capacity change from 0 to 512 [ 208.009499][ T9789] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 208.019149][ T9789] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 208.035208][ T9821] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 208.321181][ T30] audit: type=1800 audit(1755323538.968:23): pid=9789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1462" name="bus" dev="loop6" ino=263 res=0 errno=0 [ 208.339095][ T5225] udevd[5225]: worker [6762] terminated by signal 33 (Unknown signal 33) [ 208.343410][ T5960] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 208.381071][ T9852] netlink: 'syz.2.1486': attribute type 5 has an invalid length. [ 208.390817][ T5225] udevd[5225]: worker [6762] failed while handling '/devices/virtual/block/loop1' [ 208.498965][ T8403] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 208.539512][ T5960] usb 4-1: Using ep0 maxpacket: 16 [ 208.550032][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.581734][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.620794][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 208.633265][ T5960] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 208.649106][ T9863] loop0: detected capacity change from 0 to 512 [ 208.660511][ T5960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.684280][ T5960] usb 4-1: config 0 descriptor?? [ 208.711541][ T9863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.729815][ T9863] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.802045][ T9] usb 2-1: config 0 has an invalid interface number: 183 but max is 0 [ 208.819455][ T9] usb 2-1: config 0 has no interface number 0 [ 208.830262][ T9] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=26.3d [ 208.846724][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.893990][ T9] usb 2-1: config 0 descriptor?? [ 208.951697][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.131475][ T5960] gt683r_led 0003:1770:FF00.001E: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.3-1/input0 [ 209.323193][ T9] airspy 2-1:0.183: Board ID: 00 [ 209.331241][ T6051] usb 4-1: USB disconnect, device number 12 [ 209.351416][ T9] airspy 2-1:0.183: Firmware version: [ 209.357701][ T5946] gt683r_led 0003:1770:FF00.001E: failed to send set report request: -19 [ 209.368790][ T9875] fido_id[9875]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 209.387580][ T5946] gt683r_led 0003:1770:FF00.001E: failed to send set report request: -19 [ 209.525462][ T9] airspy 2-1:0.183: usb_control_msg() failed -71 request 11 [ 209.553088][ T9861] loop2: detected capacity change from 0 to 32768 [ 209.562782][ T9] airspy 2-1:0.183: Registered as swradio24 [ 209.588984][ T9] airspy 2-1:0.183: SDR API is still slightly experimental and functionality changes may follow [ 209.609011][ T9865] loop5: detected capacity change from 0 to 32768 [ 209.622983][ T9] usb 2-1: USB disconnect, device number 12 [ 209.623920][ T9861] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 209.687129][ T9861] (syz.2.1491,9861,0):ocfs2_verify_group_and_input:428 ERROR: add a group which is in the current volume. [ 209.720564][ T9861] (syz.2.1491,9861,1):ocfs2_group_add:511 ERROR: status = -22 [ 209.735717][ T9865] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 209.832395][ T9865] XFS (loop5): Ending clean mount [ 209.857022][ T9865] XFS (loop5): Quotacheck needed: Please wait. [ 209.906382][ T9865] XFS (loop5): Quotacheck: Done. [ 210.013031][ T5874] ocfs2: Unmounting device (7,2) on (node local) [ 210.090666][ T9879] loop0: detected capacity change from 0 to 32768 [ 210.101814][ T5857] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 210.164689][ T9879] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 210.179993][ T9898] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 210.292735][ T9879] XFS (loop0): Ending clean mount [ 210.314612][ T9879] XFS (loop0): Quotacheck needed: Please wait. [ 210.384119][ T9879] XFS (loop0): Quotacheck: Done. [ 210.665731][ T5856] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 210.729678][ T9924] loop6: detected capacity change from 0 to 2048 [ 210.760699][ T9928] loop5: detected capacity change from 0 to 1024 [ 210.807070][ T9929] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.846327][ T5861] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 210.863913][ T5861] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 211.012985][ T5861] Bluetooth: hci3: command 0x0406 tx timeout [ 211.019349][ T5861] Bluetooth: hci1: command 0x0406 tx timeout [ 211.021607][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 211.070265][ T36] hfsplus: b-tree write err: -5, ino 4 [ 211.351383][ T9947] loop2: detected capacity change from 0 to 2048 [ 211.430188][ T9952] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 211.464301][ T9946] loop5: detected capacity change from 0 to 4096 [ 211.514596][ T9955] loop0: detected capacity change from 0 to 512 [ 211.529688][ T9955] EXT4-fs (loop0): Test dummy encryption mode enabled [ 211.543722][ T9957] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 211.568690][ T9955] EXT4-fs error (device loop0): __ext4_iget:5464: inode #11: block 1: comm syz.0.1524: invalid block [ 211.583030][ T9955] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.1524: couldn't read orphan inode 11 (err -117) [ 211.609905][ T9955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.677413][ T9955] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.1524: Directory hole found for htree leaf block 0 [ 211.946760][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.969029][ T9969] loop2: detected capacity change from 0 to 1024 [ 212.084546][ T9971] loop1: detected capacity change from 0 to 2048 [ 212.135293][ T9971] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 212.207548][ T9980] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.254907][ T1070] hfsplus: b-tree write err: -5, ino 4 [ 212.370044][ T9] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 212.508169][ T9992] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1540'. [ 212.550864][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 212.582167][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.612410][ T9] usb 1-1: config 0 descriptor?? [ 212.630510][ T9] cp210x 1-1:0.0: cp210x converter detected [ 212.669463][ T43] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 212.838797][ T43] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 212.872648][ T43] usb 4-1: config 0 has no interface number 0 [ 212.908892][ T43] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 212.933056][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.954972][ T43] usb 4-1: Product: syz [ 212.969576][ T43] usb 4-1: Manufacturer: syz [ 212.976432][ T43] usb 4-1: SerialNumber: syz [ 212.988495][ T43] usb 4-1: config 0 descriptor?? [ 212.998067][T10012] ieee802154 phy0 wpan0: encryption failed: -22 [ 213.045228][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 213.066484][T10017] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1553'. [ 213.216122][ T43] peak_usb 4-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 213.263455][ T9] usb 1-1: USB disconnect, device number 15 [ 213.300210][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 213.320842][ T9] cp210x 1-1:0.0: device disconnected [ 213.416894][ T43] peak_usb 4-1:0.56 can0: sending command failure: -8 [ 213.436218][ T43] peak_usb 4-1:0.56 can0: sending command failure: -8 [ 213.473520][ T43] peak_usb 4-1:0.56 can0: sending command failure: -8 [ 213.520766][ T43] peak_usb 4-1:0.56: probe with driver peak_usb failed with error -8 [ 213.572187][T10035] loop1: detected capacity change from 0 to 512 [ 213.609604][T10035] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #11: comm syz.1.1561: invalid indirect mapped block 4294967295 (level 1) [ 213.643236][T10035] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #11: comm syz.1.1561: invalid indirect mapped block 4294967295 (level 1) [ 213.664980][ T5946] usb 4-1: USB disconnect, device number 13 [ 213.707240][T10035] EXT4-fs (loop1): 2 truncates cleaned up [ 213.718675][T10035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.862266][ T5868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.888524][T10028] loop2: detected capacity change from 0 to 32768 [ 213.919533][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 214.043075][T10046] loop1: detected capacity change from 0 to 2048 [ 214.099409][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 214.114468][T10047] loop6: detected capacity change from 0 to 4096 [ 214.135515][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 214.161482][T10046] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.181891][T10047] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 214.228690][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 166, setting to 64 [ 214.263795][T10047] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.280438][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 214.298691][ T9] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 214.310775][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.318773][ T9] usb 6-1: Product: syz [ 214.323315][ T9] usb 6-1: Manufacturer: syz [ 214.327913][ T9] usb 6-1: SerialNumber: syz [ 214.335857][ T9] usb 6-1: config 0 descriptor?? [ 214.348034][ T9] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 214.546539][ T8403] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.572007][ T9] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 214.601689][ T9] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 214.658542][ T49] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 214.685637][T10059] loop0: detected capacity change from 0 to 1024 [ 214.689552][ T43] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 214.694409][ T49] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 786 with error 28 [ 214.753005][ T49] EXT4-fs (loop1): This should not happen!! Data will be lost [ 214.753005][ T49] [ 214.770943][T10061] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 214.802829][ T49] EXT4-fs (loop1): Total free blocks count 0 [ 214.808825][ T49] EXT4-fs (loop1): Free/Dirty block details [ 214.828075][ T9] usb 6-1: USB disconnect, device number 14 [ 214.851994][T10063] loop2: detected capacity change from 0 to 64 [ 214.860621][ T49] EXT4-fs (loop1): free_blocks=4096 [ 214.866202][ T49] EXT4-fs (loop1): dirty_blocks=800 [ 214.883972][ T49] EXT4-fs (loop1): Block reservation details [ 214.884871][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 214.895763][ T49] EXT4-fs (loop1): i_reserved_data_blocks=50 [ 214.930150][ T5880] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 214.938510][ T5880] Bluetooth: hci4: Injecting HCI hardware error event [ 214.946338][ T5880] Bluetooth: hci4: hardware error 0x00 [ 214.959464][ T43] usb 4-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 214.968728][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.989545][ T43] usb 4-1: config 0 descriptor?? [ 215.013921][ T5868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.199333][T10077] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1577'. [ 215.367717][T10083] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1582'. [ 215.433844][ T43] logitech 0003:046D:C294.001F: unknown main item tag 0x0 [ 215.459454][ T5863] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 215.467278][ T43] logitech 0003:046D:C294.001F: unknown main item tag 0x0 [ 215.487322][ T43] logitech 0003:046D:C294.001F: unknown main item tag 0x0 [ 215.497002][ T43] logitech 0003:046D:C294.001F: unknown main item tag 0x0 [ 215.538782][ T43] logitech 0003:046D:C294.001F: unknown main item tag 0x0 [ 215.573662][ T43] logitech 0003:046D:C294.001F: unknown main item tag 0x0 [ 215.599852][ T43] logitech 0003:046D:C294.001F: unknown main item tag 0x0 [ 215.627948][ T43] logitech 0003:046D:C294.001F: hidraw0: USB HID v0.06 Device [HID 046d:c294] on usb-dummy_hcd.3-1/input0 [ 215.664872][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.689466][ T43] logitech 0003:046D:C294.001F: no inputs found [ 215.696022][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.719469][ T43] usb 4-1: USB disconnect, device number 14 [ 215.727894][ T5863] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 215.780278][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.824516][ T5863] usb 2-1: config 0 descriptor?? [ 215.862525][T10094] fido_id[10094]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 216.102414][T10111] netlink: 'syz.6.1594': attribute type 21 has an invalid length. [ 216.208068][T10115] loop6: detected capacity change from 0 to 64 [ 216.239478][ T43] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 216.267948][ T5863] steelseries 0003:1038:1410.0020: unknown main item tag 0x0 [ 216.287798][ T5863] steelseries 0003:1038:1410.0020: unknown main item tag 0x0 [ 216.326007][ T5863] steelseries 0003:1038:1410.0020: unknown main item tag 0x0 [ 216.356973][ T5863] steelseries 0003:1038:1410.0020: missing HID_OUTPUT_REPORT 0 [ 216.429468][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 216.436477][ T43] usb 6-1: unable to get BOS descriptor or descriptor too short [ 216.453842][ T43] usb 6-1: config 4 interface 0 has no altsetting 0 [ 216.481035][ T43] usb 6-1: string descriptor 0 read error: -22 [ 216.499481][ T43] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 216.518212][ T43] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 216.526621][ T5863] usb 2-1: USB disconnect, device number 13 [ 216.552412][ T43] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 216.572074][ T43] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 216.597358][ T43] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 216.621538][ T43] usb 6-1: media controller created [ 216.656198][T10124] loop6: detected capacity change from 0 to 128 [ 216.670173][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 216.711816][T10124] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 216.765883][T10109] loop0: detected capacity change from 0 to 32768 [ 216.774628][T10124] ext4 filesystem being mounted at /113/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 216.796748][T10117] loop2: detected capacity change from 0 to 32768 [ 216.818109][T10109] [ 216.818109][T10109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.818109][T10109] [ 216.881993][T10109] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 0 [ 216.881993][T10109] [ 216.902482][ T8403] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 216.927469][T10109] JFS: Invalid stbl[1] = -128 for inode 2, block = 0 [ 217.009905][ T5880] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 217.026153][T10128] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1601'. [ 217.051170][ T49] [ 217.051170][ T49] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.051170][ T49] [ 217.072123][T10128] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1601'. [ 217.102848][ T49] [ 217.102848][ T49] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.102848][ T49] [ 217.130879][ T111] [ 217.130879][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.130879][ T111] [ 217.145532][T10130] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1605'. [ 217.146791][ T5856] [ 217.146791][ T5856] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.146791][ T5856] [ 217.188864][ T5856] [ 217.188864][ T5856] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.188864][ T5856] [ 217.734182][ T43] zl10353_read_register: readreg error (reg=127, ret==0) [ 217.743332][T10107] usb 6-1: dvb_usb_au6610: wlen=0, aborting [ 217.765710][ T30] audit: type=1326 audit(1755323548.408:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10144 comm="syz.2.1611" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8277b8ebe9 code=0x0 [ 217.850457][ T43] usb 6-1: USB disconnect, device number 15 [ 218.040982][T10134] loop6: detected capacity change from 0 to 32768 [ 218.057677][T10134] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1606 (10134) [ 218.106918][T10134] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 218.140196][T10134] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 218.167072][T10134] BTRFS info (device loop6): using free-space-tree [ 218.428769][ T8403] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 218.444924][T10178] loop0: detected capacity change from 0 to 512 [ 218.507844][T10178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.552898][T10178] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.594927][T10185] loop5: detected capacity change from 0 to 512 [ 218.647967][T10185] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 218.673584][T10152] loop3: detected capacity change from 0 to 32768 [ 218.717444][T10185] EXT4-fs (loop5): 1 truncate cleaned up [ 218.728690][T10152] JBD2: Ignoring recovery information on journal [ 218.750881][T10178] EXT4-fs error (device loop0): ext4_xattr_block_list:762: inode #12: comm syz.0.1618: corrupted xattr block 6: invalid header [ 218.765883][T10185] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.767965][T10152] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 218.816095][T10185] EXT4-fs warning (device loop5): ext4_block_to_path:105: block 1969368878 > max in inode 18 [ 218.961625][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.978898][ T5870] ocfs2: Unmounting device (7,3) on (node local) [ 219.138036][ T5857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.173035][T10202] loop6: detected capacity change from 0 to 512 [ 219.244904][T10202] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #11: comm syz.6.1620: missing EA_INODE flag [ 219.292506][T10202] EXT4-fs error (device loop6): ext4_xattr_inode_iget:440: comm syz.6.1620: error while reading EA inode 11 err=-117 [ 219.339611][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 219.403927][T10202] EXT4-fs (loop6): 1 orphan inode deleted [ 219.415244][T10202] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.515005][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 219.535953][ T9] usb 4-1: config 6 has an invalid interface number: 200 but max is 0 [ 219.560338][ T8403] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.564521][ T9] usb 4-1: config 6 has no interface number 0 [ 219.598601][ T9] usb 4-1: config 6 interface 200 has no altsetting 0 [ 219.650359][ T9] usb 4-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 219.689751][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.722550][ T9] usb 4-1: Product: syz [ 219.726718][ T9] usb 4-1: Manufacturer: syz [ 219.737194][T10196] loop1: detected capacity change from 0 to 32768 [ 219.752790][ T9] usb 4-1: SerialNumber: syz [ 219.843337][T10196] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 219.952704][T10196] (syz.1.1625,10196,1):ocfs2_verify_group_and_input:428 ERROR: add a group which is in the current volume. [ 219.953885][T10221] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1636'. [ 219.982587][T10221] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1636'. [ 219.992305][T10221] netlink: 'syz.0.1636': attribute type 5 has an invalid length. [ 220.000704][T10221] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1636'. [ 220.009768][T10196] (syz.1.1625,10196,0):ocfs2_group_add:511 ERROR: status = -22 [ 220.031056][T10223] loop6: detected capacity change from 0 to 8 [ 220.085636][T10223] SQUASHFS error: Unable to read directory block [249:c] [ 220.187066][ T5868] ocfs2: Unmounting device (7,1) on (node local) [ 220.315146][T10204] loop2: detected capacity change from 0 to 32768 [ 220.346091][T10204] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 220.465303][T10204] XFS (loop2): Ending clean mount [ 220.583107][T10204] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x26/0xe0, xfs_rmapbt block 0x14 [ 220.605387][T10204] XFS (loop2): Unmount and run xfs_repair [ 220.634689][T10204] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 220.671641][T10204] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 220.704812][T10204] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 10 ................ [ 220.738269][T10204] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 220.750233][T10204] 00000030: 00 00 00 00 6c 4b dc c9 00 00 00 00 00 00 00 01 ....lK.......... [ 220.759641][ T6051] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 220.773419][T10215] loop5: detected capacity change from 0 to 32768 [ 220.812455][T10204] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 220.824003][ T30] audit: type=1800 audit(1755323551.468:25): pid=10215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1633" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 220.827228][T10215] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt [ 220.827228][T10215] [ 220.854845][T10204] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 220.870700][T10204] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 220.872306][T10246] loop6: detected capacity change from 0 to 4096 [ 220.879970][T10204] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 220.900926][T10246] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 220.902177][T10204] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x23f/0x4f0" at daddr 0x14 len 4 error 74 [ 220.909973][T10215] ERROR: (device loop5): remounting filesystem as read-only [ 220.909993][T10215] xtLookup: xtSearch returned -5 [ 220.910014][T10215] ERROR: (device loop5): xtTruncate: xt_getpage: xtree page corrupt [ 220.910014][T10215] [ 220.952803][ T6051] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 220.980065][ T5946] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 221.014926][ T6051] usb 1-1: config 0 interface 0 has no altsetting 0 [ 221.024539][ T6051] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 221.046484][T10250] binder: 10249:10250 ioctl c0306201 200000000380 returned -14 [ 221.050211][ T6051] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.065216][T10246] ntfs3(loop6): failed to convert "c46c" to iso8859-13 [ 221.091807][T10246] ntfs3(loop6): ino=20, mi_enum_attr [ 221.099326][ T5874] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 221.105196][ T6051] usb 1-1: config 0 descriptor?? [ 221.122289][T10246] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 221.173802][ T5946] usb 2-1: Using ep0 maxpacket: 8 [ 221.179120][ T5874] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 221.190648][ T5946] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 221.209791][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.246344][ T5946] usb 2-1: config 0 descriptor?? [ 221.323617][T10252] loop6: detected capacity change from 0 to 128 [ 221.363150][T10254] loop5: detected capacity change from 0 to 256 [ 221.569352][ T6051] uclogic 0003:5543:0042.0021: hidraw0: USB HID v2.07 Device [HID 5543:0042] on usb-dummy_hcd.0-1/input0 [ 221.675766][ T5946] prodikeys 0003:041E:2801.0022: hidraw1: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input0 [ 221.866594][ T5946] usb 1-1: USB disconnect, device number 16 [ 221.922712][ T6051] usb 2-1: USB disconnect, device number 14 [ 222.087711][T10270] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1654'. [ 222.141574][ T9] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 222.179759][ T9] dvb-usb: bulk message failed: -71 (3/0) [ 222.189594][ T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 222.195986][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 222.229337][ T9] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 222.238189][ T9] usb 4-1: media controller created [ 222.267623][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 222.315177][ T9] dvb-usb: bulk message failed: -71 (6/0) [ 222.350844][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.353424][ T9] dvb-usb: bulk message failed: -71 (6/0) [ 222.372311][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.387072][ T9] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 222.394159][ T24] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 222.407969][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18 [ 222.434319][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.439645][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 222.459532][ T9] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 222.463622][ T24] usb 6-1: config 0 descriptor?? [ 222.529636][ T9] usb 4-1: USB disconnect, device number 15 [ 222.559529][ T43] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 222.571592][T10285] loop6: detected capacity change from 0 to 64 [ 222.644343][ T9] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 222.731251][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.772580][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.824959][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.879260][ T43] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 222.900164][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.930941][ T24] uclogic 0003:28BD:0071.0023: interface is invalid, ignoring [ 222.945520][ T43] usb 3-1: config 0 descriptor?? [ 223.009545][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 223.159468][ T24] usb 6-1: USB disconnect, device number 16 [ 223.200656][T10288] loop0: detected capacity change from 0 to 32768 [ 223.233257][T10288] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 223.288910][T10290] loop1: detected capacity change from 0 to 32768 [ 223.386156][ T43] hid-udraw 0003:20D6:CB17.0024: item fetching failed at offset 5/7 [ 223.421092][ T5856] ocfs2: Unmounting device (7,0) on (node local) [ 223.421589][ T43] hid-udraw 0003:20D6:CB17.0024: parse failed [ 223.460833][ T43] hid-udraw 0003:20D6:CB17.0024: probe with driver hid-udraw failed with error -22 [ 223.681647][ T9] usb 3-1: USB disconnect, device number 16 [ 223.843184][T10315] loop5: detected capacity change from 0 to 256 [ 223.869028][T10315] exfat: Deprecated parameter 'utf8' [ 223.894744][T10315] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 224.180633][T10330] loop0: detected capacity change from 0 to 164 [ 224.189320][T10322] loop6: detected capacity change from 0 to 8192 [ 224.207287][T10330] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 224.235628][T10322] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 224.281968][T10330] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 224.338982][T10330] Symlink component flag not implemented [ 224.345928][T10334] loop1: detected capacity change from 0 to 256 [ 224.370989][T10330] Symlink component flag not implemented [ 224.376670][T10330] Symlink component flag not implemented (7) [ 224.419144][T10334] exfat: Deprecated parameter 'utf8' [ 224.431877][T10330] Symlink component flag not implemented (116) [ 224.469474][T10334] exfat: Deprecated parameter 'utf8' [ 224.524178][T10334] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 224.579154][T10340] loop6: detected capacity change from 0 to 512 [ 224.614010][T10340] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.1687: iget: bad i_size value: 38620345925642 [ 224.657548][T10340] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.1687: couldn't read orphan inode 15 (err -117) [ 224.681029][T10340] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.730593][ T43] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 224.794130][T10340] EXT4-fs error (device loop6): ext4_validate_block_bitmap:431: comm syz.6.1687: bg 0: block 5: invalid block bitmap [ 224.876252][T10340] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 1023 with max blocks 1 with error 28 [ 224.912268][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 224.926003][T10350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1691'. [ 224.932728][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 224.956256][T10340] EXT4-fs (loop6): This should not happen!! Data will be lost [ 224.956256][T10340] [ 224.994563][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.009768][T10340] EXT4-fs (loop6): Total free blocks count 0 [ 225.030151][ T43] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.040144][T10340] EXT4-fs (loop6): Free/Dirty block details [ 225.049764][T10340] EXT4-fs (loop6): free_blocks=0 [ 225.061734][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 225.079600][T10340] EXT4-fs (loop6): dirty_blocks=1 [ 225.096070][T10340] EXT4-fs (loop6): Block reservation details [ 225.105225][ T43] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 225.118284][T10340] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 225.126632][ T43] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 225.144255][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.154423][T10327] loop3: detected capacity change from 0 to 32768 [ 225.181859][ T43] usb 6-1: config 0 descriptor?? [ 225.195378][T10327] [ 225.195378][T10327] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.195378][T10327] [ 225.210556][T10338] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 225.222958][ T8403] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.261600][T10327] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 0 [ 225.261600][T10327] [ 225.359948][T10327] JFS: Invalid stbl[1] = -128 for inode 2, block = 0 [ 225.369524][ T5961] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 225.476251][ T5878] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 225.483398][ T5878] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 225.494250][ T5878] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 225.501892][ T5878] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 225.508834][ T5878] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 225.516177][ T5878] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 225.523497][ T5878] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 225.530524][ T5878] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 225.537675][ T5878] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 225.544824][ T5878] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 225.551885][ T5961] usb 1-1: Using ep0 maxpacket: 8 [ 225.557322][ T5878] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 225.564746][ T5878] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 225.572577][ T5878] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 225.580124][ T5878] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 225.580738][ T12] [ 225.580738][ T12] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.580738][ T12] [ 225.587005][ T5878] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 225.605369][ T5878] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 225.612478][ T5878] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 225.620056][ T5878] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 225.626954][ T5878] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 225.634185][ T5878] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 225.641206][ T5878] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 225.648506][ T5878] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 225.655592][ T5878] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 225.662728][ T5878] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 225.669796][ T5878] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 225.677103][ T5878] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 225.684181][ T5878] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 225.687740][ T5946] usb 6-1: USB disconnect, device number 17 [ 225.691365][ T5878] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 225.691420][ T5878] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 225.691482][ T5880] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 225.691778][ T12] [ 225.691778][ T12] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.691778][ T12] [ 225.691953][ T5870] [ 225.691953][ T5870] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.691953][ T5870] [ 225.745494][ T5870] [ 225.745494][ T5870] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.745494][ T5870] [ 225.756725][ T5961] usb 1-1: unable to get BOS descriptor or descriptor too short [ 225.766819][ T110] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN NOPTI [ 225.778984][ T110] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 225.787405][ T110] CPU: 0 UID: 0 PID: 110 Comm: jfsCommit Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 225.799228][ T110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 225.809294][ T110] RIP: 0010:write_special_inodes+0xa9/0x170 [ 225.815216][ T110] Code: 2e e8 db 73 4b 08 48 8d 7b 28 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 b1 00 00 00 4c 8b 6b 28 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 8e 00 00 00 49 8b 7d 30 2e e8 a3 73 4b 08 48 8d [ 225.834841][ T110] RSP: 0018:ffffc90002717bd8 EFLAGS: 00010216 [ 225.840916][ T110] RAX: 0000000000000006 RBX: ffff8880319c7000 RCX: ffffffff81f138ce [ 225.848891][ T110] RDX: 0000000000000000 RSI: ffffffff81f13881 RDI: 0000000000000030 [ 225.856861][ T110] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 225.864831][ T110] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff81f20a80 [ 225.872798][ T110] R13: 0000000000000000 R14: ffff88807b12c800 R15: ffffc90002719222 [ 225.880768][ T110] FS: 0000000000000000(0000) GS:ffff8881246bd000(0000) knlGS:0000000000000000 [ 225.889701][ T110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.896286][ T110] CR2: 0000001b30922ff8 CR3: 0000000035ab2000 CR4: 0000000000350ef0 [ 225.904255][ T110] Call Trace: [ 225.907530][ T110] [ 225.910454][ T110] lmLogSync+0xd2/0x820 [ 225.914632][ T110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.920287][ T110] ? __pfx_lmLogSync+0x10/0x10 [ 225.925069][ T110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.930719][ T110] jfs_syncpt+0x89/0xa0 [ 225.934888][ T110] txEnd+0x30a/0x5a0 [ 225.938801][ T110] jfs_lazycommit+0x783/0xb30 [ 225.943500][ T110] ? __pfx_jfs_lazycommit+0x10/0x10 [ 225.948743][ T110] ? __pfx_default_wake_function+0x10/0x10 [ 225.954565][ T110] ? lockdep_hardirqs_on+0x7c/0x110 [ 225.959778][ T110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.965421][ T110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.971061][ T110] ? __kthread_parkme+0x19e/0x250 [ 225.976108][ T110] ? __pfx_jfs_lazycommit+0x10/0x10 [ 225.981320][ T110] kthread+0x3c5/0x780 [ 225.985394][ T110] ? __pfx_kthread+0x10/0x10 [ 225.989989][ T110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.995635][ T110] ? rcu_is_watching+0x12/0xc0 [ 226.000413][ T110] ? __pfx_kthread+0x10/0x10 [ 226.005008][ T110] ret_from_fork+0x5d7/0x6f0 [ 226.009604][ T110] ? __pfx_kthread+0x10/0x10 [ 226.014197][ T110] ret_from_fork_asm+0x1a/0x30 [ 226.018989][ T110] [ 226.022000][ T110] Modules linked in: [ 226.026814][ T5961] usb 1-1: config 4 interface 0 has no altsetting 0 [ 226.027835][ T110] ---[ end trace 0000000000000000 ]--- [ 226.036529][ T5961] usb 1-1: string descriptor 0 read error: -22 [ 226.061511][ T5961] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 226.077790][T10352] loop2: detected capacity change from 0 to 32768 [ 226.095959][ T110] RIP: 0010:write_special_inodes+0xa9/0x170 [ 226.113154][ T110] Code: 2e e8 db 73 4b 08 48 8d 7b 28 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 b1 00 00 00 4c 8b 6b 28 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 8e 00 00 00 49 8b 7d 30 2e e8 a3 73 4b 08 48 8d [ 226.133266][ T5961] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 226.134061][ T110] RSP: 0018:ffffc90002717bd8 EFLAGS: 00010216 [ 226.168211][ T110] RAX: 0000000000000006 RBX: ffff8880319c7000 RCX: ffffffff81f138ce [ 226.177335][ T110] RDX: 0000000000000000 RSI: ffffffff81f13881 RDI: 0000000000000030 [ 226.186732][ T110] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 226.206756][ T110] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff81f20a80 [ 226.219208][ T5961] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 226.228110][ T110] R13: 0000000000000000 R14: ffff88807b12c800 R15: ffffc90002719222 [ 226.237618][ T110] FS: 0000000000000000(0000) GS:ffff8881247bd000(0000) knlGS:0000000000000000 [ 226.247289][ T5961] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 226.258155][ T5961] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 226.265491][ T110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.272226][ T110] CR2: 0000555577aba5c8 CR3: 000000007d645000 CR4: 0000000000350ef0 [ 226.280321][ T5961] usb 1-1: media controller created [ 226.289508][ T110] Kernel panic - not syncing: Fatal exception [ 226.295756][ T110] Kernel Offset: disabled [ 226.300084][ T110] Rebooting in 86400 seconds..