last executing test programs: 6m29.192191893s ago: executing program 0 (id=1479): openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x28102, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) 6m29.088784773s ago: executing program 0 (id=1480): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6000000000000000290000000b0000000008000000000000c910fe8000000000000000000000000000bbc9100000000000000000000000000000000107200000000006000000bb2c0000000000000000000000000000000000000000000000001800000000000000290000000400000000000000000000000801"], 0x180}, 0x50011) 6m28.842931456s ago: executing program 0 (id=1481): io_setup(0x8, &(0x7f0000000540)=0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f00000003c0)="01000000", 0x4, 0x2a25}]) 6m28.436123027s ago: executing program 0 (id=1485): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 6m27.917166956s ago: executing program 0 (id=1490): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xb0}) read(r0, &(0x7f0000000440)=""/5, 0x5) 6m27.124132392s ago: executing program 0 (id=1501): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x3) mmap$dsp(&(0x7f000022d000/0x400000)=nil, 0x400000, 0xb, 0x8012, r0, 0x0) 6m26.714027582s ago: executing program 32 (id=1501): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x3) mmap$dsp(&(0x7f000022d000/0x400000)=nil, 0x400000, 0xb, 0x8012, r0, 0x0) 1m5.72675894s ago: executing program 3 (id=4398): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 1m5.47557104s ago: executing program 3 (id=4401): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 1m5.132237674s ago: executing program 3 (id=4403): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r0, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) 1m4.970871753s ago: executing program 3 (id=4405): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2000002, &(0x7f0000001140)=ANY=[@ANYBLOB="766f6c756d653d3030303030303030303036332c696f636861727365743d6d6163677265656b2c696f636861727365743d6b6f69382d72752c7569643d666f726765742c756d61736b3d30303030303030303030303030303030303030303030322c6e6f7672732c6e6f7672732c66696c657365743d30303030303030303030303030303030303030342c646d6f64653d30303030303030303030303030303030303030303131362c007732be3442cd163f564b8a695afa1b16eefc0b9d590fbf9ab8391b97ea4c0cf06c797f1a493380ce6975738b912f61be3a342f9b9ee8b8bee4aa2b525fd11b2212573ec6e7f3235ad950c58d6bf8d5318071bd000000004c67990370b984f0b3bf4b8ee680536ebf6c9386b8e46872d639e0de679325aa384473cb1be572c732000000000000000020b00e44de83eb12e1addb51edd821f23ab83af360c42a3a64f4e227479c5dd61952d5fcb0bcfee33d3832a050f83cc04ac5025adbf5d9fc1d72fb565aa4734eec868691025f3a382de96d325d0f56d2859781ea76aea7305d7661f8bd5650b7e9dcc1af8c0daef9686f8a1a5637c77b000b423d659049a769bbd8ac3ec13220fb30c2cbcc5f045b71395d17d76da531a330468bfd2dd4b7f6d9991ec27e0485b36bff71689d333fd4b5b6d8dfabb206dd573227856bdd7661d970d01bf6639b3177b0fd9d80ce94358a17b72a27def19e853c337df0e8a1a8f27d44010f9399f8feae412a6c3d07f8f9e24f8948"], 0xfe, 0xc2d, &(0x7f00000001c0)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x1, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m4.39191695s ago: executing program 3 (id=4408): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) 1m3.905123305s ago: executing program 3 (id=4412): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001800)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x4c}}, 0x800) 1m3.31048581s ago: executing program 33 (id=4412): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001800)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x4c}}, 0x800) 4.704691704s ago: executing program 4 (id=4861): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) 4.482163481s ago: executing program 4 (id=4862): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0xfffffffffffffffe, 0x0) 4.37652334s ago: executing program 4 (id=4863): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {}, {@nombcache}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$eJzs3d1rW+UfAPDvSZu9/37rYAz1Qgq7cDKXrq0vE4TNS9HhQO9naLMymi6jScdaB9su3I03MgQRB+If4L2Xw3/Av2KggyGj6IUXVk56smV56Uua2cx8PnC25znnpN/z5DnPk+/JSUgAQ2s8/ScX8XJEfJVEHG7aNhrZxvH1/VYf35hJlyTW1j75PYkkW9fYP8n+P5hVXoqIn7+IOJlrj1tdXpkvlsulxaw+UVu4OlFdXjl1eaE4V5orXZmanj7z1vTUu++83WPL2oO+fuHPbz++/8GZL4+vfvPjwyN3kzgXh7JtTe1IegyYutVcGY/x7I/l41zLjpM7CDKIdvKksXtGsnGej3QOOBwj2agH/vtuRsQaMJxGTAAwrBp5QOPavvl6fiN/Nz32Rfbo/fULoPb2j66/NxL76tdGB1aTZ66M0uvdsT7ET2P89Nu9u+kSLe+ntLrZh3gADbduR8Tp0dH2+S/J5r/ene70JmyL1hhbff0Bdu5+mv+80Sn/yT3Jf6JD/nOww9jtxebjP/ewD2G6SvO/9zrmv0+mrrGRrPa/es6XTy5dLpdOR8T/I+JE5Pem9Y3u55xZfdA1V27O/9Iljd/IBbPjeDi699nHzBZrxZ20udmj2xGvPM1/k2ib//fVc93W/k+fjwtbjHGsdO/Vbts2b3+z/mfAaz9EvNax/5/e0Uo2vj85UT8fJhpnRbs/7hz7pVv87bW//9L+P7Bx+8eS5vu11e3H+H7fX6Vu23o9//ckn9bLe7J114u12uJkxJ7ko/b1U08f26g39k/bf+L4xvNfp/N/f0R8tsX23zl6p+uug9D/s9vq/2cK+bY1HQoPPvz8u27xt9b/b9ZLJ7I1W5n/tnJcvZ3NAAAAAAAAMLhyEXEoklzhSTmXKxTWP99xNA7kypVq7eSlytKV2ah/V3Ys8rnGne7DTZ+HmMw+D9uoT7XUpyPiSER8PbK/Xi/MVMqzu914AAAAAAAAAAAAAAAAAAAAGBAHu3z/P/XryG4fHfDc+clvGF6bjv9+/NITMJC8/sPwMv5heBn/MLyMfxhexj8ML+MfhpfxD8PL+AcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+unD+fLqsrT6+MZPWZ68tL81Xrp2aLVXnCwtLM4WZyuLVwlylMlcuFWYqC5v9vXKlcnVyKpauT9RK1dpEdXnl4kJl6Urt4uWF4lzpYin/r7QKAAAAAAAAAAAAAAAAAAAAXizV5ZX5YrlcWlToWjgbA3EYPReSzXr5bHYy9BRidPcbqPAcCrs8MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAk38CAAD//2iMNWI=") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 3.936664234s ago: executing program 4 (id=4867): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x800, &(0x7f0000000500)=ANY=[@ANYBLOB='iocharset=cp850,dmask=00000000000000000000777,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c666d61736b3d30300000000000000040303030303030303030303031302c757466382c666d61736b3d30303030303030303030303030303030303030303030372c6572726f72733d72476d6f756e742d726f2c6e616d65636173653d312c706c6c6f775f7574696d653d30303030323030303030303030303015303134373037302c00904f5ef6c3660c06b4d7d3172ed33955a22d96c6b58d48d25609fc8fd957db7f4cfb97e98333158a7878aa16963be19155c4a0068007e41cc520b790c6292f5e20dbf5725a2a02670903b3d75dfbb2030d8cdef5210ed5485e27f1d33f67e2d90248d081d098053c"], 0x1, 0x1528, &(0x7f00000037c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000640)=""/140, 0x8c) 2.67636201s ago: executing program 4 (id=4878): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r0, &(0x7f0000000080)=@unlock_all, 0xb) 2.380006052s ago: executing program 4 (id=4882): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc088, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x29, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002209000000a458458da5"], 0x0}, 0x0) 2.040421336s ago: executing program 5 (id=4887): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000240), &(0x7f0000000000)=""/1, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, &(0x7f0000000a80), 0x0}, 0x20) 1.963603441s ago: executing program 5 (id=4888): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=@setlink={0x3c, 0x13, 0xbaa23f3d13f2d1f5, 0x3, 0x0, {0x0, 0x0, 0x0, r1, 0x40000}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x480d1}, 0x4040080) 1.829019075s ago: executing program 5 (id=4889): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x2, 0x9d, 0x18, 0xb, 0x14, 0x6}}]}}]}, 0x148}}, 0x4008010) 1.688630698s ago: executing program 5 (id=4891): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x80002, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) 1.674661105s ago: executing program 2 (id=4892): syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)='mqueue\x00', 0x14, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x1108020, &(0x7f0000000600)=ANY=[], 0x1, 0x0, 0x0) 1.512990914s ago: executing program 5 (id=4893): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./file0\x00', 0xa00004, &(0x7f0000000100)={[{@unhide}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@utf8}, {@uid}, {}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@mode={'mode', 0x3d, 0x1000}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@adinicb}, {@volume}, {@unhide}, {@gid_forget}, {@unhide}]}, 0x1, 0xc63, &(0x7f0000008180)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.454764052s ago: executing program 2 (id=4895): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x20, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x40000) 1.313491705s ago: executing program 2 (id=4897): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) socket$xdp(0x2c, 0x3, 0x0) 1.162729776s ago: executing program 5 (id=4899): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.148844953s ago: executing program 2 (id=4900): io_setup(0x1, &(0x7f0000002500)=0x0) r1 = memfd_create(&(0x7f0000000000)='\xaa\xaa\xaa\xaa\xaa', 0x4) io_submit(r0, 0x1, &(0x7f0000002680)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x1000, r1, 0x0, 0x0, 0x40, 0x0, 0x2}]) 928.21489ms ago: executing program 1 (id=4901): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@rdma_dest={0x18, 0x114, 0x2, {0x4, 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x6, 0x6}, 0x0, 0x0, 0x8, 0x1, 0x1, 0x4, 0x9, 0x3}}], 0x70}, 0x0) 908.326376ms ago: executing program 1 (id=4902): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="07000000000000000000050000000c0003800400020000000400180001801400020073797a5f74756e"], 0x38}}, 0x0) 865.727378ms ago: executing program 2 (id=4903): timer_create(0xb, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000240)) 734.696152ms ago: executing program 2 (id=4904): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x62, 0x104) rename(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./bus\x00') 709.102297ms ago: executing program 1 (id=4905): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000000140)=ANY=[@ANYBLOB='mode=01777777777777']) 451.351507ms ago: executing program 1 (id=4906): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 208.98864ms ago: executing program 1 (id=4907): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="9d", 0x1}], 0x1, &(0x7f00000020c0)=ANY=[], 0xff0}, 0x80) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 1 (id=4908): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2000800, &(0x7f0000000380)=ANY=[@ANYBLOB='umask=00000000000000000000005,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c696f636861727365743d63703836342c6572726f72733d72656d6f756e742d726f2c696f636861727365743d6370313235312c6572726f72733d636f6e74696e75652c756d61736b3d303030303030302c757466382c00be3344178f389d7f080d9fe2915a6ad1dc3095743c"], 0x1, 0x152d, &(0x7f0000001f80)="$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") unshare(0x24040000) unshare(0x2c020400) kernel console output (not intermixed with test programs): ?? [ 516.567863][T15263] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 516.597269][T15263] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 516.603644][T15263] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 516.603644][T15263] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 516.625213][T15263] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô" [ 516.637112][T15263] CUSE: DEVNAME unspecified [ 516.814817][ T1204] waltop 0003:172F:0501.0044: unbalanced delimiter at end of report description [ 516.842826][ T1204] waltop: probe of 0003:172F:0501.0044 failed with error -22 [ 516.949806][ T5760] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 516.957391][ T5760] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 516.983440][ T5760] usb 3-1: cp210x converter now attached to ttyUSB0 [ 517.009978][ T5760] usb 3-1: USB disconnect, device number 31 [ 517.050626][ T5760] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 517.073473][ T27] usb 4-1: USB disconnect, device number 30 [ 517.079923][ T5760] cp210x 3-1:0.0: device disconnected [ 517.749067][T15292] loop2: detected capacity change from 0 to 128 [ 517.825439][T15292] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 517.951632][T15300] netlink: 'syz.3.3905': attribute type 1 has an invalid length. [ 517.960048][T15300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3905'. [ 517.970163][T15292] ext4 filesystem being mounted at /982/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 518.094955][T15302] loop1: detected capacity change from 0 to 1024 [ 518.205338][ T5779] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 518.232265][ T3500] hfsplus: b-tree write err: -5, ino 4 [ 518.327121][T15307] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 519.085299][T15323] loop3: detected capacity change from 0 to 512 [ 519.219428][T15311] loop2: detected capacity change from 0 to 32768 [ 519.271223][T15311] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 519.368645][T15311] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 519.407067][T15334] loop3: detected capacity change from 0 to 16 [ 519.420726][T15334] erofs: (device loop3): mounted with root inode @ nid 36. [ 519.500286][T15334] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 0 of nid 36 [ 519.551236][T15334] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 0 of nid 36 [ 519.600358][T15334] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 519.609453][T15334] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 519.722380][ T5779] ocfs2: Unmounting device (7,2) on (node local) [ 519.742899][T15337] loop4: detected capacity change from 0 to 4096 [ 519.804476][T15337] __ntfs_error: 33 callbacks suppressed [ 519.804495][T15337] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 519.867718][T15337] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 519.929931][T15337] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 519.983242][T15337] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 520.037542][T15337] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 520.092826][T15337] ntfs: volume version 3.1. [ 520.126972][T15337] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 520.178940][T15337] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 520.210129][T15337] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 520.242920][T15337] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 520.320110][T15337] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 520.420944][T15337] ptrace attach of "./syz-executor exec"[9351] was attempted by "Þ¤=éJ:Gþõ!EI\x09R˜”&EHQR˜”!¥H\x09R足™BÉÎlþÜϔՄpAýÃ\x0dõ7æ®ù6Eþó„j„)E\x0bwËÿºõrùh“„éŽV\x09ÓÄåi}ý?q½»MÍí¥¾þÿûó?wÒvh\x22“”×ÿ\x09_‰‹î;áÓEβøèzCH{2\x0c$ý£ýÒ~àÀþER>Ÿ»Ãó‹þöü¢¿w^²š.¨¸¡þá&Ý!ÿéHþ›)ÞÿFuB\x229v»»åžö\x09¹|¹OÂtÈà„iâò´æâzw›F_ÞO’:ÿ‹Þa;ì]·“ØïÄiÊíäÎ~·í‹<þ;Ï3jGTNv?Oâ\x5cåÛðmýN˜Ê$+S%ÒÞŸ£”£Âõ7ù_ÿ³„wxÇènùmdB^V\x1b›|š¸üNùÿÛëå\x0ci–\x22—×»Û´[ŠöÛ—’r¹ éHú’^¤S¤g>Ç%m‡&R½ð¿›!¿›ëxÿ/ÜPÿpCýÃ\x0dõ\x07 €Š°q®IHŒ™ðØ%„Є˜bäQ:r‹ÊB(:ò€‹!„ÄÄÏ+é⛩–7áùTÂr;þÅMxîíˈKÞ œ¤ç)IÏ£N&[FÒ‘ÕÄN¶ý¬¿miªå ð‡Ý~­žüº þ?ªÓ zËÜDJµ<7!d\x0bOÈY#áq:r”ºÓúlôÿn•šDæ¸èÿqÍ\x0a÷™tó(u·)‰Þo@ä„\x09}(2±¤\x0aH’þ¤ú’ÄMR$á~‘t#iÜN\x0a·o§*iO:‘j¤DD–\x0aѯó¤iô§ö§rŠí‘ít'IoÒžô#Bt;íH½´µm0&yû\x5c¤ý¾¤/Hº“^$á¾\x09åö?ùÇÉLì\x0d2„\x0 [ 520.677722][T15356] loop4: detected capacity change from 0 to 1024 [ 520.771216][ C1] vkms_vblank_simulate: vblank timer overrun [ 520.799407][T15357] loop3: detected capacity change from 0 to 4096 [ 520.823878][T15357] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 520.984150][ T62] hfsplus: b-tree write err: -5, ino 4 [ 521.007910][T15347] orangefs_mount: mount request failed with -4 [ 521.047996][T15357] ntfs3: loop3: ino=5, "/" directory corrupted [ 521.598531][T15374] loop3: detected capacity change from 0 to 4096 [ 522.959541][ C1] sched: RT throttling activated [ 523.127250][T15377] loop2: detected capacity change from 0 to 32768 [ 523.293163][T15383] loop3: detected capacity change from 0 to 131072 [ 523.309606][T15383] F2FS-fs (loop3): QUOTA feature is enabled, so ignore qf_name [ 523.317367][T15383] F2FS-fs (loop3): QUOTA feature is enabled, so ignore qf_name [ 523.325708][T15383] F2FS-fs (loop3): QUOTA feature is enabled, so ignore jquota_fmt [ 523.334448][T15383] F2FS-fs (loop3): inline_xattr_size option should be set with inline_xattr option [ 524.389691][ T5818] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 524.594328][ T5818] usb 3-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 524.635253][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.666822][ T5818] usb 3-1: config 0 descriptor?? [ 524.852029][T15426] 9pnet_rdma: rdma_create_trans (15426): problem binding to privport: 13 [ 524.991738][T15430] loop1: detected capacity change from 0 to 512 [ 525.040147][T15430] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #15: comm syz.1.3967: iget: bad i_size value: 38620345925642 [ 525.062648][T15430] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.3967: couldn't read orphan inode 15 (err -117) [ 525.098392][T15430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.122966][ T5818] waltop 0003:172F:0500.0045: unbalanced collection at end of report description [ 525.133917][ T5818] waltop: probe of 0003:172F:0500.0045 failed with error -22 [ 525.215125][T15430] EXT4-fs error (device loop1): ext4_check_all_de:666: inode #12: block 7: comm syz.1.3967: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=124 fake=0 [ 525.296649][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.383389][ T5837] usb 3-1: USB disconnect, device number 32 [ 525.932643][T15440] loop1: detected capacity change from 0 to 40427 [ 525.967706][T15440] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 525.987622][T15440] F2FS-fs (loop1): Image doesn't support compression [ 526.009610][T15440] F2FS-fs (loop1): heap/no_heap options were deprecated [ 526.018646][T15440] F2FS-fs (loop1): Image doesn't support compression [ 526.038867][T15440] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 526.077136][T15440] F2FS-fs (loop1): invalid crc value [ 526.105907][T15440] F2FS-fs (loop1): Found nat_bits in checkpoint [ 526.133792][T15458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.164794][T15458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.182318][T15458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.201057][T15458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.217543][T15458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.233656][T15440] F2FS-fs (loop1): Start checkpoint disabled! [ 526.240541][T15458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.251806][T15458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.263221][T15440] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 526.279600][T15458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.305157][T15458] batadv_slave_1: entered promiscuous mode [ 526.360372][ T27] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 526.506830][ T62] kworker/u4:5: attempt to access beyond end of device [ 526.506830][ T62] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 526.529355][ T62] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 526.544364][ T62] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 526.556372][ T62] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 526.571797][ T27] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 526.587627][ T27] usb 4-1: config 0 has no interface number 0 [ 526.607168][ T27] usb 4-1: config 0 interface 29 has no altsetting 0 [ 526.653700][ T27] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 526.669628][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.699597][ T27] usb 4-1: Product: syz [ 526.703966][ T27] usb 4-1: Manufacturer: syz [ 526.708610][ T27] usb 4-1: SerialNumber: syz [ 526.750891][ T27] usb 4-1: config 0 descriptor?? [ 526.989640][ T27] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 527.190581][ T27] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 527.229948][ T27] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 527.247184][ T27] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 527.268933][T15476] loop2: detected capacity change from 0 to 164 [ 527.346809][T15476] Unsupported NM flag settings (240) [ 527.362169][ T27] peak_usb: probe of 4-1:0.29 failed with error -22 [ 527.405142][ T27] usb 4-1: USB disconnect, device number 31 [ 527.434247][T15481] Unsupported NM flag settings (240) [ 527.491243][T15481] Unsupported NM flag settings (240) [ 527.896487][T15494] loop4: detected capacity change from 0 to 256 [ 528.050011][ T5837] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 528.244218][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 528.260858][ T5837] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 528.272124][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.284464][ T5837] usb 3-1: config 0 descriptor?? [ 528.291375][T15491] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 528.552073][T15512] loop4: detected capacity change from 0 to 512 [ 528.625107][T15512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.718061][T15512] ext4 filesystem being mounted at /608/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.723093][ T5837] razer 0003:1532:010E.0046: hidraw0: USB HID v1.01 Device [HID 1532:010e] on usb-dummy_hcd.2-1/input0 [ 528.930400][ T27] usb 3-1: USB disconnect, device number 33 [ 528.956704][ T9351] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.094335][T15521] fido_id[15521]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 529.203425][T15530] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3999'. [ 529.778967][T15543] loop3: detected capacity change from 0 to 4096 [ 529.820259][T15550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4006'. [ 529.873983][T15543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.212166][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.253425][T15561] Bluetooth: MGMT ver 1.22 [ 530.277022][T15563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4011'. [ 531.140574][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 531.140590][ T28] audit: type=1326 audit(1772208879.638:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15588 comm="syz.2.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b399c799 code=0x7ffc0000 [ 531.179335][ T28] audit: type=1326 audit(1772208879.668:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15588 comm="syz.2.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b399c799 code=0x7ffc0000 [ 531.205880][ T28] audit: type=1326 audit(1772208879.668:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15588 comm="syz.2.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fe9b399c799 code=0x7ffc0000 [ 531.318042][ T28] audit: type=1326 audit(1772208879.668:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15588 comm="syz.2.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b399c799 code=0x7ffc0000 [ 531.355276][T15593] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4026'. [ 531.396364][T15593] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 531.411549][ T28] audit: type=1326 audit(1772208879.668:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15588 comm="syz.2.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fe9b399c799 code=0x7ffc0000 [ 531.442000][T15597] loop4: detected capacity change from 0 to 512 [ 531.488313][ T28] audit: type=1326 audit(1772208879.698:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15588 comm="syz.2.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b399c799 code=0x7ffc0000 [ 531.568501][T15597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback. [ 531.579742][ T28] audit: type=1326 audit(1772208879.698:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15588 comm="syz.2.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b399c799 code=0x7ffc0000 [ 531.625992][T15597] ext4 filesystem being mounted at /618/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.799206][ T9351] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0007-000000000000. [ 531.960756][ T5760] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 532.087399][T15618] vivid-004: disconnect [ 532.093052][T15617] vivid-004: reconnect [ 532.206093][ T5760] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 185, using maximum allowed: 30 [ 532.248257][ T5760] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.264621][ T5760] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.275815][ T5760] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 185 [ 532.309843][ T5760] usb 2-1: config 0 interface 0 has no altsetting 0 [ 532.327130][ T5760] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 532.367916][ T5760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.401585][ T5760] usb 2-1: config 0 descriptor?? [ 532.662024][T15631] loop2: detected capacity change from 0 to 1024 [ 532.876564][ T5760] nintendo 0003:057E:200E.0047: item fetching failed at offset 5/8 [ 532.907424][ T5760] nintendo 0003:057E:200E.0047: HID parse failed [ 532.924701][ T12] hfsplus: b-tree write err: -5, ino 4 [ 532.939705][ T5760] nintendo 0003:057E:200E.0047: probe - fail = -22 [ 532.984730][ T5760] nintendo: probe of 0003:057E:200E.0047 failed with error -22 [ 533.026356][T15620] loop4: detected capacity change from 0 to 32768 [ 533.142655][ T1204] usb 2-1: USB disconnect, device number 36 [ 533.155264][T15620] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 533.383269][T15654] loop2: detected capacity change from 0 to 256 [ 533.423331][T15656] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4056'. [ 533.458004][T15656] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4056'. [ 533.469416][T15656] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4056'. [ 533.508041][T15654] FAT-fs (loop2): Directory bread(block 64) failed [ 533.540111][T15654] FAT-fs (loop2): Directory bread(block 65) failed [ 533.550020][T15654] FAT-fs (loop2): Directory bread(block 66) failed [ 533.571441][T15654] FAT-fs (loop2): Directory bread(block 67) failed [ 533.578739][T15654] FAT-fs (loop2): Directory bread(block 68) failed [ 533.600639][T15654] FAT-fs (loop2): Directory bread(block 69) failed [ 533.616769][T15620] XFS (loop4): Ending clean mount [ 533.624089][T15654] FAT-fs (loop2): Directory bread(block 70) failed [ 533.638919][T15654] FAT-fs (loop2): Directory bread(block 71) failed [ 533.653831][T15620] XFS (loop4): Quotacheck needed: Please wait. [ 533.664412][T15654] FAT-fs (loop2): Directory bread(block 72) failed [ 533.680653][T15654] FAT-fs (loop2): Directory bread(block 73) failed [ 533.806847][T15620] XFS (loop4): Quotacheck: Done. [ 533.843942][T15660] loop1: detected capacity change from 0 to 4096 [ 533.897513][T15660] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.025093][ T9351] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 534.229819][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.433594][T15672] loop3: detected capacity change from 0 to 128 [ 534.462349][T15672] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 534.534551][T15672] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 534.802160][ T12] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 534.922754][T15681] loop2: detected capacity change from 0 to 512 [ 535.053047][T15681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.130713][T15681] ext4 filesystem being mounted at /1014/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.216317][T15688] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 535.224960][T15688] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 535.308994][T15688] vhci_hcd vhci_hcd.0: Device attached [ 535.365277][T15689] usbip_core: unknown command [ 535.392900][T15689] vhci_hcd: unknown pdu 0 [ 535.397624][T15689] usbip_core: unknown command [ 535.407516][ T62] vhci_hcd: stop threads [ 535.412522][ T62] vhci_hcd: release socket [ 535.418103][ T62] vhci_hcd: disconnect device [ 535.503348][T15673] loop1: detected capacity change from 0 to 32768 [ 535.577107][T15696] loop3: detected capacity change from 0 to 512 [ 535.612525][T15673] ERROR: (device loop1): dbAllocAG: unable to allocate blocks [ 535.612525][T15673] [ 535.623511][T15696] EXT4-fs (loop3): orphan cleanup on readonly fs [ 535.623539][T15696] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 535.628576][T15696] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 535.661049][T15673] ERROR: (device loop1): dbDiscardAG: -EIO [ 535.661049][T15673] [ 535.662664][T15696] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.4065: attempt to clear invalid blocks 2 len 1 [ 535.682849][T15696] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.4065: invalid indirect mapped block 1819239214 (level 0) [ 535.702921][T15696] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.4065: invalid indirect mapped block 1819239214 (level 1) [ 535.745090][T15696] EXT4-fs (loop3): 1 truncate cleaned up [ 535.752901][T15696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 535.905017][T15696] EXT4-fs: Ignoring sb option on remount [ 535.913105][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.931806][T15696] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 535.955183][T15696] EXT4-fs error (device loop3): __ext4_remount:6752: comm syz.3.4065: Abort forced by user [ 535.984525][T15696] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 536.142744][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.384682][T15708] loop3: detected capacity change from 0 to 256 [ 536.412828][T15708] exfat: Deprecated parameter 'utf8' [ 536.418241][T15708] exfat: Deprecated parameter 'namecase' [ 536.473746][T15709] loop4: detected capacity change from 0 to 1024 [ 536.506477][T15709] EXT4-fs: Ignoring removed mblk_io_submit option [ 536.528239][T15708] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 536.558656][T15709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.801091][ T9351] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.938098][T15724] loop1: detected capacity change from 0 to 1024 [ 536.954396][T15724] EXT4-fs: Ignoring removed nobh option [ 536.967833][T15724] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 536.984481][T15724] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 537.013554][T15724] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 537.115709][ T5787] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 537.137906][T15728] netlink: 'syz.2.4079': attribute type 8 has an invalid length. [ 537.261774][T15732] netlink: 'syz.4.4081': attribute type 30 has an invalid length. [ 537.622388][T15743] team0: Device ip6tnl5 is of different type [ 537.850862][ T5773] Bluetooth: hci0: unexpected event for opcode 0x0c7a [ 537.900556][T15752] ptrace attach of "./syz-executor exec"[5779] was attempted by ""[15752] [ 538.187570][T15762] loop2: detected capacity change from 0 to 1024 [ 538.400293][ T62] hfsplus: b-tree write err: -5, ino 4 [ 538.425081][T15770] loop3: detected capacity change from 0 to 1024 [ 538.539197][T15773] loop4: detected capacity change from 0 to 512 [ 538.632012][T15773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.680127][T15773] ext4 filesystem being mounted at /634/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.873836][T15781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4104'. [ 539.140535][ T9351] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.260133][T15789] tipc: Enabling of bearer rejected, failed to enable media [ 539.475976][T15795] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4111'. [ 539.984911][T15815] binder: 15812:15815 ioctl c00c620f 200000000500 returned -22 [ 540.028410][T15814] loop3: detected capacity change from 0 to 1024 [ 540.075492][T15814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.231909][T15821] loop2: detected capacity change from 0 to 4096 [ 540.272888][T15826] loop1: detected capacity change from 0 to 256 [ 540.386295][T15826] FAT-fs (loop1): Directory bread(block 64) failed [ 540.412637][T15826] FAT-fs (loop1): Directory bread(block 65) failed [ 540.469763][T15826] FAT-fs (loop1): Directory bread(block 66) failed [ 540.494395][T15826] FAT-fs (loop1): Directory bread(block 67) failed [ 540.496353][T15829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4126'. [ 540.518045][T15826] FAT-fs (loop1): Directory bread(block 68) failed [ 540.528882][T15826] FAT-fs (loop1): Directory bread(block 69) failed [ 540.538015][T15826] FAT-fs (loop1): Directory bread(block 70) failed [ 540.575491][T15826] FAT-fs (loop1): Directory bread(block 71) failed [ 540.597498][T15826] FAT-fs (loop1): Directory bread(block 72) failed [ 540.629427][T15826] FAT-fs (loop1): Directory bread(block 73) failed [ 541.018880][T15837] loop2: detected capacity change from 0 to 256 [ 541.068792][T15837] exfat: Deprecated parameter 'utf8' [ 541.079786][T15837] exfat: Deprecated parameter 'utf8' [ 541.151138][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.169383][T15837] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 541.672196][ T28] audit: type=1326 audit(1772208890.168:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15852 comm="syz.1.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9401b9c799 code=0x7ffc0000 [ 541.771235][ T28] audit: type=1326 audit(1772208890.168:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15852 comm="syz.1.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9401b9c799 code=0x7ffc0000 [ 541.880020][ T28] audit: type=1326 audit(1772208890.198:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15852 comm="syz.1.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f9401b9c799 code=0x7ffc0000 [ 541.902879][ C1] vkms_vblank_simulate: vblank timer overrun [ 541.936679][ T28] audit: type=1326 audit(1772208890.198:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15852 comm="syz.1.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9401b9c799 code=0x7ffc0000 [ 541.948680][T15861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4140'. [ 542.036356][ T28] audit: type=1326 audit(1772208890.198:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15852 comm="syz.1.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9401b9c799 code=0x7ffc0000 [ 542.051330][T15861] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 542.096509][ T28] audit: type=1326 audit(1772208890.198:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15852 comm="syz.1.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f9401b9c799 code=0x7ffc0000 [ 542.119162][ C1] vkms_vblank_simulate: vblank timer overrun [ 542.181900][ T28] audit: type=1326 audit(1772208890.198:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15852 comm="syz.1.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9401b9c799 code=0x7ffc0000 [ 542.312619][T15869] loop3: detected capacity change from 0 to 128 [ 542.361337][T15869] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 542.420110][ T787] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 542.428812][T15869] hpfs: filesystem error: improperly stopped [ 542.450461][T15869] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 542.458474][T15869] hpfs: You really don't want any checks? You are crazy... [ 542.496818][T15869] hpfs: hpfs_map_sector(): read error [ 542.506937][T15869] hpfs: code page support is disabled [ 542.515412][T15869] hpfs: hpfs_map_4sectors(): unaligned read [ 542.531143][T15869] hpfs: hpfs_map_4sectors(): unaligned read [ 542.537527][T15869] hpfs: filesystem error: unable to find root dir [ 542.609941][ T787] usb 3-1: Using ep0 maxpacket: 32 [ 542.623794][ T787] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 542.656333][ T787] usb 3-1: config 0 has no interface number 0 [ 542.711602][ T787] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 542.740989][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.752364][ T787] usb 3-1: Product: syz [ 542.756598][ T787] usb 3-1: Manufacturer: syz [ 542.779603][ T787] usb 3-1: SerialNumber: syz [ 542.826723][ T787] usb 3-1: config 0 descriptor?? [ 542.848986][ T5773] Bluetooth: hci3: unexpected event for opcode 0x2002 [ 542.870936][ T787] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 542.909743][ T787] usb 3-1: selecting invalid altsetting 1 [ 542.930479][ T787] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 542.960233][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 542.986908][T15857] loop4: detected capacity change from 0 to 40427 [ 542.997787][ T787] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 543.014370][ T787] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 543.059343][ T787] usb 3-1: media controller created [ 543.061681][T15857] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 543.114178][T15865] usb 3-1: dvb_usb_ce6230: I2C read not implemented [ 543.119947][T15857] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 543.169731][T15857] F2FS-fs (loop4): heap/no_heap options were deprecated [ 543.188258][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 543.221555][T15857] F2FS-fs (loop4): invalid crc value [ 543.278013][T15857] F2FS-fs (loop4): Found nat_bits in checkpoint [ 543.288713][ T787] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 543.319698][ T787] zl10353_read_register: readreg error (reg=127, ret==-71) [ 543.340350][ T787] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 543.507736][T15857] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 543.514257][ T787] usb 3-1: USB disconnect, device number 34 [ 543.542245][T15857] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 543.701174][ T9351] syz-executor: attempt to access beyond end of device [ 543.701174][ T9351] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 543.722579][ T9351] F2FS-fs (loop4): Remounting filesystem read-only [ 544.120098][T15898] ubi31: attaching mtd0 [ 544.125589][T15898] ubi31 error: ubi_attach_mtd_dev: bad VID header (262144) or data offsets (262208) [ 544.162523][T15900] loop1: detected capacity change from 0 to 256 [ 544.214043][T15900] exfat: Deprecated parameter 'utf8' [ 544.484892][T15900] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 544.655639][T15908] netlink: 'syz.4.4154': attribute type 9 has an invalid length. [ 544.684798][T15908] netlink: 399 bytes leftover after parsing attributes in process `syz.4.4154'. [ 544.955589][T15914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4165'. [ 545.836792][T15912] loop4: detected capacity change from 0 to 32768 [ 545.860555][T15940] loop3: detected capacity change from 0 to 512 [ 545.906379][T15936] loop1: detected capacity change from 0 to 4096 [ 545.967143][T15940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.986502][T15936] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 546.081321][T15940] ext4 filesystem being mounted at /1063/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.376930][T15936] ntfs: volume version 3.1. [ 546.521852][T15936] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set macinuit. You might want to try to use the mount option nls=utf8. [ 546.608267][T15936] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 546.672034][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.785073][T15951] loop2: detected capacity change from 0 to 512 [ 546.831462][T15951] EXT4-fs: Ignoring removed i_version option [ 546.866658][T15951] EXT4-fs error (device loop2): __ext4_iget:5071: inode #11: block 1: comm syz.2.4181: invalid block [ 546.904787][T15951] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.4181: couldn't read orphan inode 11 (err -117) [ 547.036043][T15951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 547.209450][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.494338][ T5773] Bluetooth: hci0: unexpected event for opcode 0x2005 [ 547.617763][T15966] loop3: detected capacity change from 0 to 512 [ 547.723737][T15966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.825121][T15966] ext4 filesystem being mounted at /1066/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 548.093939][ C1] sd 0:0:1:0: [sda] tag#4539 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 548.104620][ C1] sd 0:0:1:0: [sda] tag#4539 CDB: Read(6) 08 00 00 00 00 00 [ 548.119287][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.428667][T15981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4194'. [ 548.895429][T15996] loop4: detected capacity change from 0 to 512 [ 548.939967][T15996] FAT-fs (loop4): Directory bread(block 199916) failed [ 548.956563][T15996] FAT-fs (loop4): Directory bread(block 199917) failed [ 548.980687][T15996] FAT-fs (loop4): Directory bread(block 199918) failed [ 548.998091][T15996] FAT-fs (loop4): Directory bread(block 199919) failed [ 549.022413][T15996] FAT-fs (loop4): Directory bread(block 199920) failed [ 549.033293][T15996] FAT-fs (loop4): Directory bread(block 199921) failed [ 549.044123][T15996] FAT-fs (loop4): Directory bread(block 199922) failed [ 549.055147][T15996] FAT-fs (loop4): Directory bread(block 199923) failed [ 549.322787][T15998] loop4: detected capacity change from 0 to 764 [ 549.433303][T15998] rock: directory entry would overflow storage [ 549.449860][T15998] rock: sig=0x4f50, size=4, remaining=3 [ 549.471326][T15998] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 549.869953][T15991] loop3: detected capacity change from 0 to 32768 [ 549.950759][T15991] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 550.026919][T15991] XFS (loop3): Ending clean mount [ 550.035874][T15991] XFS (loop3): Quotacheck needed: Please wait. [ 550.240074][T15991] XFS (loop3): Quotacheck: Done. [ 550.316555][T16023] loop4: detected capacity change from 0 to 8192 [ 550.377911][T16023] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 550.407267][T16023] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 550.418652][T16023] REISERFS (device loop4): using ordered data mode [ 550.425903][T16023] reiserfs: using flush barriers [ 550.433878][T16023] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 550.454373][T16023] REISERFS (device loop4): checking transaction log (loop4) [ 550.477094][T16023] REISERFS (device loop4): Using r5 hash to sort names [ 550.486381][T16023] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 550.523744][ T5774] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 551.176025][T16010] loop2: detected capacity change from 0 to 32768 [ 551.244310][T16028] loop1: detected capacity change from 0 to 2048 [ 551.265619][T16010] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 551.315426][T16010] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 551.343715][T16010] BTRFS info (device loop2): using free space tree [ 551.396235][T16028] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 551.529738][T16010] BTRFS info (device loop2): enabling ssd optimizations [ 551.560949][T16010] BTRFS info (device loop2): auto enabling async discard [ 551.876172][ T5779] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 552.813182][T16077] loop4: detected capacity change from 0 to 1024 [ 552.918741][T16077] hfsplus: failed to extend attributes file [ 553.319659][ T5818] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 553.509976][ T5818] usb 3-1: Using ep0 maxpacket: 32 [ 553.521057][ T5818] usb 3-1: config 0 has an invalid interface number: 76 but max is 0 [ 553.540470][ T5818] usb 3-1: config 0 has no interface number 0 [ 553.551416][ T5818] usb 3-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 553.568300][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.589557][ T5818] usb 3-1: Product: syz [ 553.594087][ T5818] usb 3-1: Manufacturer: syz [ 553.619228][ T5818] usb 3-1: SerialNumber: syz [ 553.630566][ T5818] usb 3-1: config 0 descriptor?? [ 553.652379][ T5818] dw2102: su3000_identify_state [ 553.667176][ T5818] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 553.690605][ T5818] dw2102: su3000_power_ctrl: 1, initialized 0 [ 553.697066][ T5818] dvb-usb: bulk message failed: -22 (2/0) [ 553.722142][ T5818] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 553.740548][ T5818] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 553.754219][ T5818] usb 3-1: media controller created [ 553.763159][ T5818] dvb-usb: bulk message failed: -22 (6/0) [ 553.769279][ T5818] dw2102: i2c transfer failed. [ 553.774411][ T5760] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 553.782972][ T5818] dvb-usb: bulk message failed: -22 (6/0) [ 553.800334][ T5818] dw2102: i2c transfer failed. [ 553.807190][ T5818] dvb-usb: bulk message failed: -22 (6/0) [ 553.819659][ T5818] dw2102: i2c transfer failed. [ 553.824645][ T5818] dvb-usb: bulk message failed: -22 (6/0) [ 553.836975][ T5818] dw2102: i2c transfer failed. [ 553.850489][ T5818] dvb-usb: bulk message failed: -22 (6/0) [ 553.856461][ T5818] dw2102: i2c transfer failed. [ 553.869552][ T5818] dvb-usb: bulk message failed: -22 (6/0) [ 553.877613][ T5818] dw2102: i2c transfer failed. [ 553.899832][ T5818] dvb-usb: MAC address: 02:02:02:02:02:02 [ 553.901732][T16085] dvb-usb: bulk message failed: -22 (4/0) [ 553.917584][T16085] dw2102: i2c transfer failed. [ 553.930150][T16085] dvb-usb: bulk message failed: -22 (4/0) [ 553.946498][T16085] dw2102: i2c transfer failed. [ 553.956925][T16085] dvb-usb: bulk message failed: -22 (4/0) [ 553.973782][T16085] dw2102: i2c transfer failed. [ 553.991801][ T5760] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.006713][ T5818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 554.027366][ T5760] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 554.070513][ T5760] usb 4-1: config 0 interface 0 has no altsetting 0 [ 554.077311][ T5760] usb 4-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 554.089234][ T5760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.098031][ T5818] dvb-usb: bulk message failed: -22 (3/0) [ 554.106163][ T5818] dw2102: command 0x0e transfer failed. [ 554.112187][ T5818] dvb-usb: bulk message failed: -22 (3/0) [ 554.117986][ T5818] dw2102: command 0x0e transfer failed. [ 554.138616][ T5760] usb 4-1: config 0 descriptor?? [ 554.158240][T16106] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4242'. [ 554.188416][T16106] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4242'. [ 554.208425][T16106] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4242'. [ 554.440013][ T5818] dvb-usb: bulk message failed: -22 (3/0) [ 554.446073][ T5818] dw2102: command 0x0e transfer failed. [ 554.459991][ T5818] dvb-usb: bulk message failed: -22 (3/0) [ 554.471980][ T5818] dw2102: command 0x0e transfer failed. [ 554.515172][ T5818] dvb-usb: bulk message failed: -22 (1/0) [ 554.529781][ T5818] dw2102: command 0x51 transfer failed. [ 554.567911][ T5760] hid_mf 0003:0079:1843.0048: unknown main item tag 0x3 [ 554.578483][T16113] loop4: detected capacity change from 0 to 4096 [ 554.599986][ T5760] hid_mf 0003:0079:1843.0048: item fetching failed at offset 4/5 [ 554.608594][ T5760] hid_mf 0003:0079:1843.0048: HID parse failed. [ 554.608831][T16113] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 554.660659][ T5760] hid_mf: probe of 0003:0079:1843.0048 failed with error -22 [ 554.709652][ T5818] DVB: Unable to find symbol ds3000_attach() [ 554.715857][ T5818] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 554.773373][ T787] usb 4-1: USB disconnect, device number 32 [ 554.799364][T16113] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 554.961304][ T5818] rc_core: IR keymap rc-su3000 not found [ 554.973620][ T5818] Registered IR keymap rc-empty [ 554.993256][ T5818] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 555.029015][ T5818] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input65 [ 555.062174][ T5818] dvb-usb: schedule remote query interval to 150 msecs. [ 555.076343][ T5818] dw2102: su3000_power_ctrl: 0, initialized 1 [ 555.084473][ T5818] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 555.101055][ T9351] ntfs3: loop4: ino=1a, ntfs_sync_fs failed, -22. [ 555.110445][ T5818] usb 3-1: USB disconnect, device number 35 [ 555.122889][ T9351] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 555.281084][ T5818] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 555.722358][T16136] loop1: detected capacity change from 0 to 512 [ 555.773165][T16136] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 555.955885][T16136] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.4255: bg 0: block 255: padding at end of block bitmap is not set [ 556.117841][T16136] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 556.165871][T16136] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.4255: invalid indirect mapped block 1 (level 1) [ 556.238528][T16136] EXT4-fs (loop1): 1 truncate cleaned up [ 556.288940][T16136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.563159][ T28] audit: type=1800 audit(1772208905.058:294): pid=16136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4255" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 556.845553][T16150] loop2: detected capacity change from 0 to 512 [ 556.917212][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.956114][T16150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.015274][T16150] ext4 filesystem being mounted at /1064/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 557.163633][T16150] EXT4-fs error (device loop2): ext4_group_add:1745: inode #7: comm syz.2.4260: iget: checksum invalid [ 557.235290][T16150] EXT4-fs warning (device loop2): ext4_group_add:1747: Error opening resize inode [ 557.404409][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.259894][T16134] loop3: detected capacity change from 0 to 262144 [ 558.283977][T16134] F2FS-fs (loop3): invalid crc value [ 558.335349][T16134] F2FS-fs (loop3): Found nat_bits in checkpoint [ 558.404423][T16134] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 558.445058][T16174] devpts: called with bogus options [ 558.690249][T16180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4271'. [ 558.923526][T16184] loop1: detected capacity change from 0 to 512 [ 559.027361][T16184] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.4275: couldn't read orphan inode 26 (err -116) [ 559.077165][T16184] EXT4-fs (loop1): Remounting filesystem read-only [ 559.101080][T16184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.138385][T16184] ext4 filesystem being mounted at /1085/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 559.345817][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.991447][T16219] mkiss: ax0: crc mode is auto. [ 560.458523][T16233] loop2: detected capacity change from 0 to 256 [ 560.593932][T16233] FAT-fs (loop2): Directory bread(block 64) failed [ 560.620198][T16233] FAT-fs (loop2): Directory bread(block 65) failed [ 560.626963][T16233] FAT-fs (loop2): Directory bread(block 66) failed [ 560.693106][T16233] FAT-fs (loop2): Directory bread(block 67) failed [ 560.721520][T16233] FAT-fs (loop2): Directory bread(block 68) failed [ 560.728242][T16233] FAT-fs (loop2): Directory bread(block 69) failed [ 560.771303][T16233] FAT-fs (loop2): Directory bread(block 70) failed [ 560.778028][T16233] FAT-fs (loop2): Directory bread(block 71) failed [ 560.830707][T16233] FAT-fs (loop2): Directory bread(block 72) failed [ 560.837618][T16233] FAT-fs (loop2): Directory bread(block 73) failed [ 560.917567][T16241] loop4: detected capacity change from 0 to 512 [ 560.967940][T16241] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 561.077236][T16241] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.4299: bg 0: block 255: padding at end of block bitmap is not set [ 561.167995][T16241] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 561.195267][T16241] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.4299: invalid indirect mapped block 1 (level 1) [ 561.218855][T16246] mkiss: ax0: crc mode is auto. [ 561.310566][T16241] EXT4-fs (loop4): 1 truncate cleaned up [ 561.347617][T16241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 561.519311][ T28] audit: type=1800 audit(1772208909.998:295): pid=16241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4299" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 561.657044][ T9351] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.886588][T16259] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4308'. [ 561.906455][T16259] netlink: 'syz.1.4308': attribute type 2 has an invalid length. [ 561.995927][T16257] Invalid ELF header magic: != ELF [ 562.558940][T16281] loop4: detected capacity change from 0 to 512 [ 562.639249][T16281] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 562.668514][T16283] pimreg3: entered allmulticast mode [ 562.731813][T16281] EXT4-fs (loop4): 1 truncate cleaned up [ 562.771448][T16281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.028665][T16293] ptrace attach of "./syz-executor exec"[5774] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  "[16293] [ 563.079080][ T9351] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.184228][T16275] loop2: detected capacity change from 0 to 32768 [ 563.286653][T16298] loop4: detected capacity change from 0 to 8 [ 563.326426][T16298] SQUASHFS error: zlib decompression failed, data probably corrupt [ 563.349690][T16298] SQUASHFS error: Failed to read block 0x9b: -5 [ 563.369878][T16298] SQUASHFS error: Unable to read metadata cache entry [99] [ 563.377941][T16298] SQUASHFS error: Unable to read inode 0x127 [ 563.445955][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.453871][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.956453][T16294] loop1: detected capacity change from 0 to 32768 [ 563.994857][T16294] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop1 scanned by syz.1.4322 (16294) [ 564.020368][T16294] BTRFS info (device loop1): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 564.040629][T16294] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 564.052419][T16294] BTRFS info (device loop1): using free space tree [ 564.116949][T16294] BTRFS info (device loop1): enabling ssd optimizations [ 564.134812][T16294] BTRFS info (device loop1): auto enabling async discard [ 564.262960][ T28] audit: type=1800 audit(1772208912.758:296): pid=16294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4322" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 564.333613][ T5780] BTRFS info (device loop1): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 564.665928][T16332] loop2: detected capacity change from 0 to 1024 [ 564.920537][ T62] hfsplus: b-tree write err: -5, ino 4 [ 565.114210][T16340] loop1: detected capacity change from 0 to 512 [ 565.158109][T16340] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 565.208981][T16340] EXT4-fs (loop1): 1 truncate cleaned up [ 565.225214][T16340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.470525][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.070586][T16369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4351'. [ 566.246762][T16373] loop2: detected capacity change from 0 to 4096 [ 566.257947][T16373] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 566.330577][T16373] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 566.400432][T16373] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 566.459866][T16373] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 566.549655][T16373] ntfs: (device loop2): check_mft_mirror(): Failed to read $MFTMirr. [ 566.558411][T16373] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 566.574378][T16373] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 566.605847][T16373] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 566.658571][T16373] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 566.701995][T16373] ntfs: volume version 3.1. [ 567.342048][T16396] loop4: detected capacity change from 0 to 2048 [ 567.420658][T16396] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 567.450172][T16402] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4366'. [ 567.683716][T16381] loop1: detected capacity change from 0 to 40427 [ 567.728041][T16381] F2FS-fs (loop1): invalid crc value [ 567.745824][T16381] F2FS-fs (loop1): Found nat_bits in checkpoint [ 567.964400][T16381] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 568.067072][T16416] loop4: detected capacity change from 0 to 2048 [ 568.134797][T16416] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c018, mo2=0002] [ 568.153918][T16416] System zones: 0-4 [ 568.177541][T16416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.191509][T16416] ext4 filesystem being mounted at /700/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.216092][T16424] loop3: detected capacity change from 0 to 256 [ 568.239229][T16416] fs-verity: sha256 using implementation "sha256-avx2" [ 568.252478][T16420] loop2: detected capacity change from 0 to 1764 [ 568.287846][T16416] fs-verity (loop4, inode 18): fs-verity keyring is empty, rejecting signed file! [ 568.342046][T16420] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 568.435219][ T5780] syz-executor: attempt to access beyond end of device [ 568.435219][ T5780] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 568.481815][ T9351] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.491325][ T5780] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 568.730105][T16431] sp0: Synchronizing with TNC [ 568.792852][T16431] sp0: Found TNC [ 569.436698][T16451] futex_wake_op: syz.3.4387 tries to shift op by 32; fix this program [ 569.569667][ T787] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 569.652809][T16457] loop1: detected capacity change from 0 to 512 [ 569.681400][T16457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.695490][T16457] ext4 filesystem being mounted at /1111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 569.744171][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.778000][ T787] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 569.819698][ T787] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 569.849643][ T787] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 569.886194][ T787] usb 3-1: config 0 interface 0 has no altsetting 0 [ 569.904809][ T787] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 569.936062][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.958086][ T787] usb 3-1: config 0 descriptor?? [ 569.970503][ T5818] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 569.991412][T16444] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 570.111809][T16468] loop1: detected capacity change from 0 to 256 [ 570.147075][T16468] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 570.164180][ T5818] usb 4-1: Using ep0 maxpacket: 8 [ 570.173912][ T5818] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 570.193117][ T5818] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 570.213105][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.241886][ T5818] usb 4-1: Product: syz [ 570.246541][ T5818] usb 4-1: Manufacturer: syz [ 570.255809][ T5818] usb 4-1: SerialNumber: syz [ 570.263967][ T5818] usb 4-1: config 0 descriptor?? [ 570.273265][ T5818] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 570.288148][ T5818] usb 4-1: setting power ON [ 570.294033][ T5818] dvb-usb: bulk message failed: -22 (2/0) [ 570.323109][ T5818] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 570.343565][ T5818] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 570.361032][ T5818] usb 4-1: media controller created [ 570.393020][ T5818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 570.452730][ T5818] usb 4-1: selecting invalid altsetting 6 [ 570.468001][ T5818] usb 4-1: digital interface selection failed (-22) [ 570.490388][ T787] uclogic 0003:28BD:0094.0049: interface is invalid, ignoring [ 570.490599][ T5818] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 570.519201][T16459] dvb-usb: bulk message failed: -22 (3/0) [ 570.530197][T16459] cxusb: i2c wr: len=80 is too big! [ 570.530197][T16459] [ 570.555772][ T5818] usb 4-1: setting power OFF [ 570.571697][ T5818] dvb-usb: bulk message failed: -22 (2/0) [ 570.578699][ T5818] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 570.609342][ T5818] (NULL device *): no alternate interface [ 570.665707][ T5818] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 570.692084][ T5818] usb 4-1: USB disconnect, device number 33 [ 570.748555][ T787] usb 3-1: USB disconnect, device number 36 [ 571.013532][T16472] loop1: detected capacity change from 0 to 32768 [ 571.044828][T16472] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 571.115479][T16472] XFS (loop1): Ending clean mount [ 571.195787][ T5780] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 571.402973][T16482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4398'. [ 571.598790][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 571.598808][ T28] audit: type=1326 audit(1772208920.088:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.2.4400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b399c799 code=0x7ffc0000 [ 571.642039][ T28] audit: type=1326 audit(1772208920.088:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.2.4400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b399c799 code=0x7ffc0000 [ 571.670388][ T28] audit: type=1326 audit(1772208920.148:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.2.4400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fe9b399c799 code=0x7ffc0000 [ 571.697005][ T28] audit: type=1326 audit(1772208920.148:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.2.4400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b399c799 code=0x7ffc0000 [ 571.751455][ T28] audit: type=1326 audit(1772208920.148:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.2.4400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b399c799 code=0x7ffc0000 [ 571.777788][ T28] audit: type=1326 audit(1772208920.168:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.2.4400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fe9b399c799 code=0x7ffc0000 [ 571.825590][ T28] audit: type=1326 audit(1772208920.168:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.2.4400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b399c799 code=0x7ffc0000 [ 572.077816][T16498] loop3: detected capacity change from 0 to 2048 [ 572.127811][T16498] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 572.131499][T16500] loop2: detected capacity change from 0 to 1024 [ 572.184947][ T5837] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 572.256988][T16498] overlayfs: upper fs needs to support d_type. [ 572.271448][T16498] overlayfs: cleanup of 'work/#10' failed (-2) [ 572.329910][T16498] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 572.361627][ T3481] hfsplus: b-tree write err: -5, ino 4 [ 572.366279][T16498] overlayfs: failed to set xattr on upper [ 572.387104][T16498] overlayfs: ...falling back to redirect_dir=nofollow. [ 572.399986][ T5837] usb 2-1: Using ep0 maxpacket: 8 [ 572.425779][T16498] overlayfs: ...falling back to index=off. [ 572.440658][ T5837] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 572.464519][T16498] overlayfs: ...falling back to uuid=null. [ 572.474252][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.517871][ T5837] usb 2-1: Product: syz [ 572.528870][ T5837] usb 2-1: Manufacturer: syz [ 572.544580][ T5837] usb 2-1: SerialNumber: syz [ 572.571125][ T5837] usb 2-1: config 0 descriptor?? [ 572.625597][ T5774] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 572.644391][ T5774] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 572.688093][T16503] loop4: detected capacity change from 0 to 4096 [ 572.714020][T16503] EXT4-fs: Ignoring removed bh option [ 572.756233][T16507] binder: 16506:16507 ioctl c0306201 0 returned -14 [ 572.828820][T16503] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.833302][ T5837] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 572.935298][ T28] audit: type=1800 audit(1772208921.428:304): pid=16503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4407" name="file3" dev="loop4" ino=16 res=0 errno=0 [ 573.093494][ T9351] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.209849][ T5837] gspca_sunplus: reg_w_riv err -71 [ 573.229907][ T5837] sunplus: probe of 2-1:0.0 failed with error -71 [ 573.274287][ T5837] usb 2-1: USB disconnect, device number 37 [ 573.487132][ T3481] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.732384][ T3481] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.042606][ T3481] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.291723][ T3481] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.425555][T16540] loop1: detected capacity change from 0 to 256 [ 574.476165][T16540] FAT-fs (loop1): Directory bread(block 1285) failed [ 574.527929][T16540] FAT-fs (loop1): Directory bread(block 1285) failed [ 574.763601][T16545] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 574.782285][T16545] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 574.792134][T16545] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 574.806471][T16545] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 574.825264][T16545] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 574.838884][T16545] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 574.916544][T16544] lo speed is unknown, defaulting to 1000 [ 574.968995][ T3481] tipc: Left network mode [ 575.424608][T16566] program syz.1.4431 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 575.427986][ C0] vkms_vblank_simulate: vblank timer overrun [ 575.485478][T16570] binder: BINDER_SET_CONTEXT_MGR already set [ 575.518164][T16570] binder: 16568:16570 ioctl 40046207 0 returned -16 [ 575.763182][T16578] netlink: 'syz.2.4433': attribute type 10 has an invalid length. [ 575.902235][T16578] dummy0: entered promiscuous mode [ 575.933256][T16578] dummy0: entered allmulticast mode [ 575.948363][T16578] team0: Port device dummy0 added [ 576.144915][T16590] loop4: detected capacity change from 0 to 4096 [ 576.173694][T16590] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 576.187892][T16581] netlink: 'syz.2.4433': attribute type 10 has an invalid length. [ 576.221368][T16581] dummy0: left promiscuous mode [ 576.244941][T16581] dummy0: left allmulticast mode [ 576.322703][T16581] team0: Port device dummy0 removed [ 576.473853][ T5837] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 576.623430][T16599] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 576.641765][T16596] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 576.659302][T16544] chnl_net:caif_netlink_parms(): no params data found [ 576.721238][ T5837] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 576.756156][ T5837] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 576.772122][ T5837] usb 2-1: config 220 has no interface number 2 [ 576.778638][ T5837] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 576.799077][ T5837] usb 2-1: config 220 interface 0 has no altsetting 0 [ 576.806867][ T5837] usb 2-1: config 220 interface 76 has no altsetting 0 [ 576.819833][ T5837] usb 2-1: config 220 interface 1 has no altsetting 0 [ 576.852460][ T5837] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 576.866658][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.879380][ T5837] usb 2-1: Product: syz [ 576.883894][T16545] Bluetooth: hci1: command tx timeout [ 576.908944][ T5837] usb 2-1: Manufacturer: syz [ 576.927334][ T5837] usb 2-1: SerialNumber: syz [ 577.198465][ T5837] usb 2-1: selecting invalid altsetting 0 [ 577.244776][ C0] vkms_vblank_simulate: vblank timer overrun [ 577.252553][ T5837] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 577.259238][ T5837] usb 2-1: No valid video chain found. [ 577.293820][ T5837] usb 2-1: selecting invalid altsetting 0 [ 577.307151][ T5837] usbtest: probe of 2-1:220.1 failed with error -22 [ 577.329096][ T5837] usb 2-1: USB disconnect, device number 38 [ 577.940093][T16544] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.951506][T16618] loop1: detected capacity change from 0 to 512 [ 577.958415][T16544] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.973320][T16544] bridge_slave_0: entered allmulticast mode [ 577.988301][T16544] bridge_slave_0: entered promiscuous mode [ 578.030964][T16544] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.048943][T16544] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.080565][T16544] bridge_slave_1: entered allmulticast mode [ 578.084731][T16618] FAT-fs (loop1): error, clusters badly computed (1 != 0) [ 578.101394][T16544] bridge_slave_1: entered promiscuous mode [ 578.144345][T16618] FAT-fs (loop1): error, clusters badly computed (2 != 1) [ 578.491366][T16544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.810838][T16544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.980087][T16545] Bluetooth: hci1: command tx timeout [ 579.023066][T16636] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 579.047371][T16544] team0: Port device team_slave_0 added [ 579.247618][ C1] vkms_vblank_simulate: vblank timer overrun [ 579.381391][ T3481] bond0: (slave wlan1): Releasing backup interface [ 579.513544][ C1] vkms_vblank_simulate: vblank timer overrun [ 579.614896][T16544] team0: Port device team_slave_1 added [ 579.772097][T16654] netlink: 'syz.4.4457': attribute type 10 has an invalid length. [ 579.877862][T16654] dummy0: entered promiscuous mode [ 579.888729][T16654] dummy0: entered allmulticast mode [ 579.897995][T16654] team0: Port device dummy0 added [ 579.906044][T16656] netlink: 'syz.4.4457': attribute type 10 has an invalid length. [ 579.940573][T16656] dummy0: left promiscuous mode [ 579.946212][T16656] dummy0: left allmulticast mode [ 579.975557][T16656] team0: Port device dummy0 removed [ 580.152308][T16544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.192088][T16544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.218621][ C1] vkms_vblank_simulate: vblank timer overrun [ 580.277869][T16544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.383985][T16544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.457195][T16544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.483542][ C1] vkms_vblank_simulate: vblank timer overrun [ 580.520458][T16544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.549764][T16667] loop1: detected capacity change from 0 to 4096 [ 580.585215][ T3481] hsr_slave_0: left promiscuous mode [ 580.596936][ T3481] hsr_slave_1: left promiscuous mode [ 580.611688][ T3481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.630818][ T3481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.644121][ T3481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.657468][ T3481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.679359][ T3481] bridge_slave_1: left allmulticast mode [ 580.692977][ T3481] bridge_slave_1: left promiscuous mode [ 580.708930][ T3481] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.735891][ T3481] bridge_slave_0: left allmulticast mode [ 580.751122][ T3481] bridge_slave_0: left promiscuous mode [ 580.769918][ T3481] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.886013][ T3481] veth1_macvtap: left promiscuous mode [ 580.894483][ T3481] veth0_macvtap: left promiscuous mode [ 580.914267][ T3481] veth1_vlan: left promiscuous mode [ 580.927288][ T3481] veth0_vlan: left promiscuous mode [ 581.051207][T16545] Bluetooth: hci1: command tx timeout [ 581.342053][ T3481] pimreg3 (unregistering): left allmulticast mode [ 581.353842][T16685] loop1: detected capacity change from 0 to 1024 [ 581.554423][ T1305] hfsplus: b-tree write err: -5, ino 4 [ 581.711722][T16691] loop1: detected capacity change from 0 to 512 [ 581.771437][T16691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.784830][T16691] ext4 filesystem being mounted at /1135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 582.025564][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.776041][ T3481] team0 (unregistering): Port device team_slave_1 removed [ 582.870003][ T3481] team0 (unregistering): Port device team_slave_0 removed [ 582.953592][ T3481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.051600][ T3481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.122035][T16545] Bluetooth: hci1: command tx timeout [ 583.756269][ T3481] smc: removing net device bond0 with user defined pnetid SYZ2 [ 583.766856][ T3481] bond0 (unregistering): Released all slaves [ 583.963139][T16687] syz.2.4472: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 584.001188][T16687] CPU: 1 PID: 16687 Comm: syz.2.4472 Not tainted syzkaller #0 [ 584.008758][T16687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 584.018968][T16687] Call Trace: [ 584.022392][T16687] [ 584.025367][T16687] dump_stack_lvl+0x18c/0x250 [ 584.030191][T16687] ? show_regs_print_info+0x20/0x20 [ 584.035522][T16687] ? load_image+0x400/0x400 [ 584.040266][T16687] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 584.046839][T16687] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 584.053592][T16687] warn_alloc+0x246/0x340 [ 584.057990][T16687] ? zone_watermark_ok_safe+0x230/0x230 [ 584.063692][T16687] ? _raw_spin_unlock+0x28/0x40 [ 584.068601][T16687] __vmalloc_node_range+0x662/0x1330 [ 584.073958][T16687] ? __asan_memset+0x22/0x40 [ 584.078725][T16687] ? free_vm_area+0x50/0x50 [ 584.083348][T16687] ? kvmalloc_node+0x70/0x180 [ 584.088167][T16687] ? kvmalloc_node+0x70/0x180 [ 584.092953][T16687] ? trace_kmalloc+0x1f/0x90 [ 584.097693][T16687] kvmalloc_node+0x13f/0x180 [ 584.102345][T16687] ? fq_pie_init+0x436/0x830 [ 584.106979][T16687] fq_pie_init+0x436/0x830 [ 584.111431][T16687] ? qdisc_peek_dequeued+0x200/0x200 [ 584.116835][T16687] qdisc_create+0x90b/0x1070 [ 584.121473][T16687] ? qdisc_notify+0x370/0x370 [ 584.126186][T16687] ? nla_strcmp+0xe2/0x140 [ 584.130636][T16687] tc_modify_qdisc+0xb63/0x1d10 [ 584.135722][T16687] ? qdisc_offload_query_caps+0x150/0x150 [ 584.141846][T16687] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 584.147081][T16687] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 584.152401][T16687] ? qdisc_offload_query_caps+0x150/0x150 [ 584.158518][T16687] rtnetlink_rcv_msg+0x869/0xfa0 [ 584.163592][T16687] ? lockdep_hardirqs_on+0x98/0x150 [ 584.168830][T16687] ? rtnetlink_bind+0x80/0x80 [ 584.173562][T16687] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 584.179666][T16687] ? __dev_queue_xmit+0x26b/0x36b0 [ 584.184989][T16687] ? lock_chain_count+0x20/0x20 [ 584.189975][T16687] ? __local_bh_enable_ip+0x13a/0x1c0 [ 584.195475][T16687] ? lockdep_hardirqs_on+0x98/0x150 [ 584.200808][T16687] ? __local_bh_enable_ip+0x13a/0x1c0 [ 584.206217][T16687] ? _local_bh_enable+0xa0/0xa0 [ 584.211119][T16687] ? __dev_queue_xmit+0x26b/0x36b0 [ 584.216273][T16687] ? __dev_queue_xmit+0x26b/0x36b0 [ 584.221514][T16687] ? __dev_queue_xmit+0x124f/0x36b0 [ 584.226747][T16687] ? __dev_queue_xmit+0x26b/0x36b0 [ 584.232089][T16687] ? ref_tracker_free+0x690/0x840 [ 584.237329][T16687] netlink_rcv_skb+0x241/0x4d0 [ 584.242144][T16687] ? rtnetlink_bind+0x80/0x80 [ 584.246854][T16687] ? netlink_ack+0x1180/0x1180 [ 584.251748][T16687] ? __lock_acquire+0x7d40/0x7d40 [ 584.257097][T16687] ? netlink_deliver_tap+0x2e/0x1b0 [ 584.262447][T16687] netlink_unicast+0x751/0x8d0 [ 584.267414][T16687] netlink_sendmsg+0x8d0/0xbf0 [ 584.272289][T16687] ? netlink_getsockopt+0x590/0x590 [ 584.277702][T16687] ? aa_sock_msg_perm+0x94/0x150 [ 584.282736][T16687] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 584.288072][T16687] ? security_socket_sendmsg+0x80/0xa0 [ 584.293661][T16687] ? netlink_getsockopt+0x590/0x590 [ 584.298917][T16687] ____sys_sendmsg+0x5ba/0x960 [ 584.303725][T16687] ? __asan_memset+0x22/0x40 [ 584.308484][T16687] ? __sys_sendmsg_sock+0x30/0x30 [ 584.313826][T16687] ? __import_iovec+0x5f2/0x850 [ 584.319174][T16687] ? import_iovec+0x73/0xa0 [ 584.323842][T16687] ___sys_sendmsg+0x2a6/0x360 [ 584.328748][T16687] ? __sys_sendmsg+0x2a0/0x2a0 [ 584.333920][T16687] __se_sys_sendmsg+0x1c2/0x2b0 [ 584.338997][T16687] ? __x64_sys_sendmsg+0x80/0x80 [ 584.344695][T16687] ? lockdep_hardirqs_on+0x98/0x150 [ 584.350266][T16687] do_syscall_64+0x55/0xa0 [ 584.354983][T16687] ? clear_bhb_loop+0x40/0x90 [ 584.359699][T16687] ? clear_bhb_loop+0x40/0x90 [ 584.364510][T16687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 584.370537][T16687] RIP: 0033:0x7fe9b399c799 [ 584.374992][T16687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.395049][T16687] RSP: 002b:00007fe9b490e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 584.403889][T16687] RAX: ffffffffffffffda RBX: 00007fe9b3c15fa0 RCX: 00007fe9b399c799 [ 584.411900][T16687] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000003 [ 584.420000][T16687] RBP: 00007fe9b3a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 584.428385][T16687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.436394][T16687] R13: 00007fe9b3c16038 R14: 00007fe9b3c15fa0 R15: 00007ffc19effa08 [ 584.444426][T16687] [ 584.447573][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.517950][T16687] Mem-Info: [ 584.522993][T16687] active_anon:6716 inactive_anon:1 isolated_anon:0 [ 584.522993][T16687] active_file:11396 inactive_file:40939 isolated_file:0 [ 584.522993][T16687] unevictable:768 dirty:304 writeback:0 [ 584.522993][T16687] slab_reclaimable:11195 slab_unreclaimable:93416 [ 584.522993][T16687] mapped:25122 shmem:1380 pagetables:768 [ 584.522993][T16687] sec_pagetables:0 bounce:0 [ 584.522993][T16687] kernel_misc_reclaimable:0 [ 584.522993][T16687] free:1345718 free_pcp:11026 free_cma:0 [ 584.570035][T16687] Node 0 active_anon:26664kB inactive_anon:4kB active_file:45520kB inactive_file:163548kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100436kB dirty:1216kB writeback:0kB shmem:3984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10696kB pagetables:3072kB sec_pagetables:0kB all_unreclaimable? no [ 584.604706][T16687] Node 1 active_anon:0kB inactive_anon:0kB active_file:64kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 584.636813][T16687] Node 0 DMA free:15264kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:0kB free_cma:0kB [ 584.667851][T16687] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 584.682642][T16687] Node 0 DMA32 free:1474328kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:26624kB inactive_anon:4kB active_file:45520kB inactive_file:162716kB unevictable:1536kB writepending:1212kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:17800kB local_pcp:13628kB free_cma:0kB [ 584.724667][T16687] lowmem_reserve[]: 0 0 0 0 0 [ 584.734571][T16687] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 584.769846][T16687] lowmem_reserve[]: 0 0 0 0 0 [ 584.775935][T16687] Node 1 Normal free:3893280kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:64kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:26756kB local_pcp:10948kB free_cma:0kB [ 584.808313][T16687] lowmem_reserve[]: 0 0 0 0 0 [ 584.813362][T16687] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15264kB [ 584.827758][T16687] Node 0 DMA32: 582*4kB (ME) 1032*8kB (UME) 560*16kB (M) 408*32kB (UM) 273*64kB (M) 265*128kB (UM) 95*256kB (UM) 76*512kB (UME) 36*1024kB (UME) 14*2048kB (UME) 308*4096kB (UM) = 1474328kB [ 584.847633][T16687] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 584.860046][T16687] Node 1 Normal: 192*4kB (UE) 62*8kB (UME) 37*16kB (UME) 137*32kB (UME) 33*64kB (UME) 5*128kB (UM) 1*256kB (M) 0*512kB 1*1024kB (E) 4*2048kB (UME) 946*4096kB (UM) = 3893280kB [ 584.880872][T16687] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 584.893939][T16687] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 584.904435][T16687] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 584.914805][T16687] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 584.930065][T16687] 52934 total pagecache pages [ 584.935181][T16687] 1 pages in swap cache [ 584.939874][T16687] Free swap = 124472kB [ 584.948734][T16687] Total swap = 124996kB [ 584.955626][T16687] 2097051 pages RAM [ 584.963558][T16687] 0 pages HighMem/MovableOnly [ 584.968576][T16687] 416922 pages reserved [ 584.975335][T16687] 0 pages cma reserved [ 585.208056][T16544] hsr_slave_0: entered promiscuous mode [ 585.258760][T16544] hsr_slave_1: entered promiscuous mode [ 585.936773][ T3481] IPVS: stop unused estimator thread 0... [ 586.000122][T16733] netlink: 'syz.2.4485': attribute type 4 has an invalid length. [ 586.382066][T16544] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 586.423328][T16544] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 586.449280][T16544] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 586.474366][T16544] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 586.754038][T16544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.787678][T16544] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.835806][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.843131][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.896416][ T1305] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.903829][ T1305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.763866][T16544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.310590][T16761] loop2: detected capacity change from 0 to 40427 [ 588.354059][T16761] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 588.377485][T16761] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 588.416930][T16761] F2FS-fs (loop2): heap/no_heap options were deprecated [ 588.440638][T16761] F2FS-fs (loop2): invalid crc value [ 588.501541][T16761] F2FS-fs (loop2): Found nat_bits in checkpoint [ 588.727665][T16761] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 588.739625][T16761] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 588.855071][T16544] veth0_vlan: entered promiscuous mode [ 588.939790][T16544] veth1_vlan: entered promiscuous mode [ 589.058547][ T5779] syz-executor: attempt to access beyond end of device [ 589.058547][ T5779] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 589.092598][T16544] veth0_macvtap: entered promiscuous mode [ 589.117176][ T5779] F2FS-fs (loop2): Remounting filesystem read-only [ 589.147317][T16544] veth1_macvtap: entered promiscuous mode [ 589.219077][T16544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.305783][T16544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.339750][T16544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.382447][T16544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.419992][T16544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.459626][T16544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.491259][T16544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.528030][T16544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.579671][T16544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.600153][T16544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.629638][T16544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.680151][T16544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.739596][T16544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.757081][T16815] loop1: detected capacity change from 0 to 1024 [ 589.781521][T16544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.897102][T16544] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.918025][T16544] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.949717][T16544] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.958609][T16544] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.135453][ T12] hfsplus: b-tree write err: -5, ino 8 [ 590.276363][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.319774][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.416168][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.440989][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.685352][T16830] netlink: 'syz.2.4510': attribute type 11 has an invalid length. [ 590.776859][T16827] loop1: detected capacity change from 0 to 4096 [ 590.986152][T16827] ntfs3: loop1: ino=21, "file1" fallocate(0x10) is not supported [ 592.177304][T16860] loop1: detected capacity change from 0 to 512 [ 592.242242][T16842] loop5: detected capacity change from 0 to 32768 [ 592.247587][T16860] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 592.269005][T16842] (syz.5.4513,16842,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 592.283554][T16842] (syz.5.4513,16842,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 592.343829][T16860] EXT4-fs (loop1): orphan cleanup on readonly fs [ 592.370958][T16860] EXT4-fs (loop1): 1 truncate cleaned up [ 592.375512][T16842] JBD2: Ignoring recovery information on journal [ 592.383794][T16860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 592.608097][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.631827][T16842] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 592.956392][T16870] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4520'. [ 593.039946][ T5773] Bluetooth: hci0: command 0x0405 tx timeout [ 593.041497][T16545] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 593.105383][T16544] ocfs2: Unmounting device (7,5) on (node local) [ 593.487810][T16783] syz.4.4500 (16783): drop_caches: 1 [ 593.924151][T16896] loop1: detected capacity change from 0 to 512 [ 593.960491][T16896] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 594.067585][T16896] EXT4-fs (loop1): 1 truncate cleaned up [ 594.100735][T16904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4533'. [ 594.101442][T16896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 594.355048][T16911] loop2: detected capacity change from 0 to 136 [ 594.463621][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.613246][T16951] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 595.659337][T16947] loop5: detected capacity change from 0 to 4096 [ 595.717083][T16947] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 595.875774][T16947] ntfs3: loop5: Failed to load $Extend (-22). [ 595.900526][T16947] ntfs3: loop5: Failed to initialize $Extend. [ 596.133198][T16966] loop1: detected capacity change from 0 to 4096 [ 596.158047][T16967] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 596.240343][ T5773] Bluetooth: hci0: command 0x0405 tx timeout [ 596.377747][T16972] loop4: detected capacity change from 0 to 64 [ 596.928445][T16987] bridge0: port 4(syz_tun) entered blocking state [ 596.953651][T16987] bridge0: port 4(syz_tun) entered disabled state [ 596.978329][T16987] syz_tun: entered allmulticast mode [ 596.993676][T16989] loop1: detected capacity change from 0 to 1024 [ 597.013431][T16987] syz_tun: entered promiscuous mode [ 597.034161][T16987] bridge0: port 4(syz_tun) entered blocking state [ 597.041980][T16987] bridge0: port 4(syz_tun) entered forwarding state [ 597.271064][ T1305] hfsplus: b-tree write err: -5, ino 4 [ 597.575687][T16977] loop5: detected capacity change from 0 to 32768 [ 597.638601][T17000] loop2: detected capacity change from 0 to 4096 [ 597.686719][T16977] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 597.702761][T17000] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 597.731744][T17007] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4569'. [ 597.891270][T17000] ntfs3: loop2: Failed to load $Extend (-22). [ 597.920602][T17000] ntfs3: loop2: Failed to initialize $Extend. [ 598.053984][T17013] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4571'. [ 598.200432][T16544] ocfs2: Unmounting device (7,5) on (node local) [ 599.174110][T17044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4582'. [ 599.682725][T17029] loop4: detected capacity change from 0 to 32768 [ 599.873195][T17029] ERROR: (device loop4): diWrite: ixpxd invalid [ 599.873195][T17029] [ 599.903764][T17029] ERROR: (device loop4): remounting filesystem as read-only [ 599.932189][T17029] ERROR: (device loop4): txCommit: [ 599.932189][T17029] [ 600.035680][T17066] tipc: MTU too low for tipc bearer [ 600.167457][T17070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4593'. [ 600.216639][T17070] ipvlan2: entered promiscuous mode [ 600.745262][T17091] loop1: detected capacity change from 0 to 16 [ 600.764243][T17091] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 600.964064][T17098] loop1: detected capacity change from 0 to 164 [ 601.008809][T17098] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 601.060995][T17098] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 601.647129][T17110] loop1: detected capacity change from 0 to 4096 [ 601.694447][T17110] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 601.726947][T17110] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 601.780891][T17110] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 601.819998][T17110] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 601.846800][T17110] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 601.858074][T17089] loop2: detected capacity change from 0 to 40427 [ 601.879770][T17089] F2FS-fs (loop2): invalid crc value [ 601.911797][T17089] F2FS-fs (loop2): Found nat_bits in checkpoint [ 601.954842][T17110] ntfs: volume version 3.1. [ 602.001877][T17110] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 602.050290][T17110] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 602.058541][T17089] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 602.125266][T17110] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 602.164593][T17110] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 602.224701][T17110] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 602.827546][T17133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4620'. [ 603.253897][T17125] loop5: detected capacity change from 0 to 32768 [ 603.267735][T17125] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.4615 (17125) [ 603.293191][T17125] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 603.316596][T17125] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 603.341444][T17125] BTRFS info (device loop5): using free space tree [ 603.349422][T17144] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 603.359784][T17144] comedi comedi3: 8255: I/O port conflict (0xffffffffffffff00,4) [ 603.384249][T17144] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 603.420099][T17144] comedi comedi3: 8255: I/O port conflict (0x80007,4) [ 603.427104][T17144] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 603.475187][T17144] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 603.493888][T17144] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 603.530079][T17144] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 603.579902][T17125] BTRFS info (device loop5): enabling ssd optimizations [ 603.619647][T17125] BTRFS info (device loop5): auto enabling async discard [ 603.777603][T17135] loop1: detected capacity change from 0 to 32768 [ 603.896821][T16544] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 603.903477][T17135] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 604.282032][ T5780] ocfs2: Unmounting device (7,1) on (node local) [ 604.424411][T17160] loop2: detected capacity change from 0 to 32768 [ 604.455024][T17160] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.4625 (17160) [ 604.538708][T17160] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 604.577380][T17160] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 604.629959][T17160] BTRFS info (device loop2): force zlib compression, level 3 [ 604.637448][T17160] BTRFS info (device loop2): enabling ssd optimizations [ 604.696097][T17160] BTRFS info (device loop2): allowing degraded mounts [ 604.722238][T17160] BTRFS info (device loop2): force clearing of disk cache [ 604.779555][T17160] BTRFS info (device loop2): using free space tree [ 605.125619][T17160] BTRFS info (device loop2): rebuilding free space tree [ 605.294197][T17205] loop4: detected capacity change from 0 to 2048 [ 605.311750][T17160] BTRFS info (device loop2): checking UUID tree [ 605.401175][T17205] Alternate GPT is invalid, using primary GPT. [ 605.435278][T17205] loop4: p2 p3 p7 [ 605.814355][ T5779] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 605.931030][T17223] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 606.109030][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 606.135360][ T6445] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop2 scanned by udevd (6445) [ 606.150446][ T5771] udevd[5771]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 606.165192][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 606.652415][T17237] loop4: detected capacity change from 0 to 128 [ 606.757289][T17237] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 606.914970][ T9351] sysv_free_block: trying to free block not in datazone [ 606.936152][ T9351] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 607.103293][T17221] loop5: detected capacity change from 0 to 32768 [ 607.212652][T17221] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 607.406740][T17221] XFS (loop5): Ending clean mount [ 607.445760][T17221] XFS (loop5): Quotacheck needed: Please wait. [ 607.610774][T17221] XFS (loop5): Quotacheck: Done. [ 607.906329][T16544] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 608.453817][T17275] Dead loop on virtual device ip6_vti0, fix it urgently! [ 608.560287][T17279] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4659'. [ 608.777393][T17285] bridge0: entered promiscuous mode [ 608.820952][T17285] bridge0: port 6(macsec2) entered blocking state [ 608.850214][T17285] bridge0: port 6(macsec2) entered disabled state [ 608.880327][T17285] macsec2: entered allmulticast mode [ 608.886009][T17285] bridge0: entered allmulticast mode [ 608.915931][T17285] macsec2: left allmulticast mode [ 608.929623][T17285] bridge0: left allmulticast mode [ 608.968486][T17285] bridge0: left promiscuous mode [ 608.976809][T17263] loop1: detected capacity change from 0 to 40427 [ 609.008181][T17263] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 609.023542][T17263] F2FS-fs (loop1): heap/no_heap options were deprecated [ 609.064900][T17263] F2FS-fs (loop1): invalid crc value [ 609.077559][T17263] F2FS-fs (loop1): Found nat_bits in checkpoint [ 609.164423][T17263] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 609.427540][ T5780] syz-executor: attempt to access beyond end of device [ 609.427540][ T5780] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 609.449222][T17302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4672'. [ 609.463654][ T5780] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 609.970324][T17317] loop5: detected capacity change from 0 to 512 [ 610.042858][T17317] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.132101][T17317] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 610.288597][T17317] EXT4-fs warning (device loop5): ext4_resize_fs:2025: can't read last block, resize aborted [ 610.425201][T16544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.795483][T17340] loop5: detected capacity change from 0 to 128 [ 610.881065][T17340] FAT-fs (loop5): Directory bread(block 162) failed [ 610.913582][T17340] FAT-fs (loop5): Directory bread(block 163) failed [ 610.949777][T17340] FAT-fs (loop5): Directory bread(block 164) failed [ 610.972028][T17340] FAT-fs (loop5): Directory bread(block 165) failed [ 610.999756][T17340] FAT-fs (loop5): Directory bread(block 166) failed [ 611.006492][T17340] FAT-fs (loop5): Directory bread(block 167) failed [ 611.039654][T17340] FAT-fs (loop5): Directory bread(block 168) failed [ 611.059639][T17340] FAT-fs (loop5): Directory bread(block 169) failed [ 611.089260][T17340] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 611.151154][T17340] FAT-fs (loop5): Directory bread(block 162) failed [ 611.169938][T17340] FAT-fs (loop5): Directory bread(block 163) failed [ 611.196615][T17340] syz.5.4684: attempt to access beyond end of device [ 611.196615][T17340] loop5: rw=3, sector=226, nr_sectors = 6 limit=128 [ 611.253139][T17340] syz.5.4684: attempt to access beyond end of device [ 611.253139][T17340] loop5: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 611.887282][ T1204] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 611.947239][T17347] loop2: detected capacity change from 0 to 32768 [ 612.019725][T17347] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 612.119955][ T1204] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 612.159858][ T1204] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 612.197012][ T1204] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 612.238444][ T1204] usb 2-1: config 220 has no interface number 2 [ 612.238545][T17347] XFS (loop2): Ending clean mount [ 612.268712][ T1204] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 612.304644][T17347] XFS (loop2): Quotacheck needed: Please wait. [ 612.308501][ T1204] usb 2-1: config 220 interface 0 has no altsetting 0 [ 612.368115][ T1204] usb 2-1: config 220 interface 76 has no altsetting 0 [ 612.385591][ T1204] usb 2-1: config 220 interface 1 has no altsetting 0 [ 612.436643][ T1204] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 612.459710][ T1204] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.514157][ T1204] usb 2-1: Product: syz [ 612.524725][T17347] XFS (loop2): Quotacheck: Done. [ 612.532665][ T1204] usb 2-1: Manufacturer: syz [ 612.537573][ T1204] usb 2-1: SerialNumber: syz [ 612.791151][ T1204] usb 2-1: selecting invalid altsetting 0 [ 612.829917][ T1204] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 612.837494][ T1204] usb 2-1: No valid video chain found. [ 612.887200][ T5779] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 612.896453][ T1204] usb 2-1: selecting invalid altsetting 0 [ 612.914029][ T1204] usbtest: probe of 2-1:220.1 failed with error -22 [ 612.965661][ T1204] usb 2-1: USB disconnect, device number 39 [ 613.257841][T17401] loop4: detected capacity change from 0 to 1024 [ 613.396887][T17401] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 613.535414][T17401] ext4 filesystem being mounted at /778/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 613.808902][T17413] loop2: detected capacity change from 0 to 4096 [ 613.848369][T17416] syz.1.4702 (17416): drop_caches: 2 [ 613.861235][T17413] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 613.891633][ T9351] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.265590][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 614.265611][ T28] audit: type=1800 audit(1772208962.758:305): pid=17413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4701" name="file3" dev="loop2" ino=31 res=0 errno=0 [ 614.667023][T17437] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 614.697983][T17437] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 614.721405][T17437] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 614.746530][T17437] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 614.768160][T17437] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 614.785584][T17437] comedi comedi3: 8255: I/O port conflict (0x85,4) [ 614.807804][T17437] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 614.824994][T17437] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 614.836787][T17437] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 614.860091][T17437] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 614.885017][T17437] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 614.920830][T17437] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 614.931207][T17437] comedi comedi3: 8255: I/O port conflict (0x78b4042d,4) [ 615.061231][T17448] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4712'. [ 615.077172][T17450] loop1: detected capacity change from 0 to 512 [ 615.120728][T17450] EXT4-fs (loop1): Test dummy encryption mode enabled [ 615.138053][T17448] nbd: illegal input index -1113835520 [ 615.204316][T17450] EXT4-fs error (device loop1): __ext4_iget:5071: inode #11: block 1: comm syz.1.4713: invalid block [ 615.282487][T17450] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.4713: couldn't read orphan inode 11 (err -117) [ 615.290050][T17450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 615.452672][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.510055][T17459] netlink: 328 bytes leftover after parsing attributes in process `syz.5.4715'. [ 615.715285][T17440] loop4: detected capacity change from 0 to 40427 [ 615.732390][T17462] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 615.785745][T17440] F2FS-fs (loop4): Found nat_bits in checkpoint [ 615.834545][T17464] loop5: detected capacity change from 0 to 1764 [ 615.877128][T17464] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 615.937496][T17464] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 616.045458][T17440] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 616.353057][ T9351] syz-executor: attempt to access beyond end of device [ 616.353057][ T9351] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 616.398768][ T9351] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 616.681154][T17491] loop2: detected capacity change from 0 to 2048 [ 616.701567][T17491] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 616.740917][T17491] NILFS (loop2): mounting unchecked fs [ 616.793335][T17491] NILFS (loop2): recovery complete [ 616.816897][T17496] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 617.413255][T17507] loop2: detected capacity change from 0 to 128 [ 617.435729][T17507] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 617.511701][T17507] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 617.559226][T17507] ext2 filesystem being mounted at /1191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 617.577285][T17513] loop1: detected capacity change from 0 to 512 [ 617.637499][T17513] EXT4-fs (loop1): Test dummy encryption mode enabled [ 617.682243][T17513] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 617.683197][ T5779] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 617.711537][T17513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 618.002549][ T28] audit: type=1326 audit(1772208966.488:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17520 comm="syz.2.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b399c799 code=0x7ffc0000 [ 618.018793][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.037550][T17489] loop5: detected capacity change from 0 to 32768 [ 618.084257][ T28] audit: type=1326 audit(1772208966.538:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17520 comm="syz.2.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe9b399c799 code=0x7ffc0000 [ 618.152080][T17489] ERROR: (device loop5): xtTruncate: XT_GETPAGE: xtree page corrupt [ 618.152080][T17489] [ 618.175561][ T28] audit: type=1326 audit(1772208966.548:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17520 comm="syz.2.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe9b399c502 code=0x7ffc0000 [ 618.214308][T17489] ERROR: (device loop5): remounting filesystem as read-only [ 618.278871][ T28] audit: type=1326 audit(1772208966.548:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17520 comm="syz.2.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b399c799 code=0x7ffc0000 [ 618.331818][ T28] audit: type=1326 audit(1772208966.548:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17520 comm="syz.2.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b399c799 code=0x7ffc0000 [ 618.442158][ T28] audit: type=1326 audit(1772208966.548:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17520 comm="syz.2.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe9b399c799 code=0x7ffc0000 [ 618.539258][ T28] audit: type=1326 audit(1772208966.568:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17520 comm="syz.2.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b399c799 code=0x7ffc0000 [ 618.630348][ T28] audit: type=1326 audit(1772208966.568:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17520 comm="syz.2.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe9b399c799 code=0x7ffc0000 [ 618.733977][ T28] audit: type=1326 audit(1772208966.568:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17520 comm="syz.2.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe9b399c799 code=0x7ffc0000 [ 618.882397][T17540] loop5: detected capacity change from 0 to 512 [ 618.935851][T17540] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.4742: EA inode hash validation failed [ 618.971850][T17540] EXT4-fs error (device loop5): ext4_do_update_inode:5248: inode #15: comm syz.5.4742: corrupted inode contents [ 619.032465][T17540] EXT4-fs (loop5): Remounting filesystem read-only [ 619.073697][T17540] EXT4-fs warning (device loop5): ext4_evict_inode:272: xattr delete (err -5) [ 619.109671][T17540] EXT4-fs (loop5): 1 orphan inode deleted [ 619.116840][T17540] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 619.177113][T17550] loop1: detected capacity change from 0 to 128 [ 619.299565][ T28] audit: type=1800 audit(1772208967.788:315): pid=17550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4744" name="file1" dev="loop1" ino=1048981 res=0 errno=0 [ 619.357096][T17550] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 619.375022][T17550] FAT-fs (loop1): Filesystem has been set read-only [ 619.402457][T16544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.642358][T17574] loop1: detected capacity change from 0 to 65536 [ 620.677785][T17587] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 620.706555][T17574] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 620.816711][ T1204] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 620.842691][T17574] XFS (loop1): Internal error !xlog_verify_bno(log, 0, nbblks) at line 81 of file fs/xfs/xfs_log_recover.c. Caller xlog_alloc_buffer+0x118/0x200 [ 620.858359][T17574] CPU: 0 PID: 17574 Comm: syz.1.4753 Not tainted syzkaller #0 [ 620.865961][T17574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 620.876257][T17574] Call Trace: [ 620.879602][T17574] [ 620.882595][T17574] dump_stack_lvl+0x18c/0x250 [ 620.887375][T17574] ? show_regs_print_info+0x20/0x20 [ 620.892657][T17574] ? __phys_addr+0xba/0x170 [ 620.897510][T17574] ? __kasan_kmalloc_large+0x8b/0xa0 [ 620.903262][T17574] xfs_corruption_error+0x122/0x170 [ 620.908627][T17574] ? xlog_alloc_buffer+0x118/0x200 [ 620.913911][T17574] xlog_alloc_buffer+0x159/0x200 [ 620.919021][T17574] ? xlog_alloc_buffer+0x118/0x200 [ 620.924216][T17574] xlog_do_recovery_pass+0x1de/0xdb0 [ 620.929863][T17574] ? lock_chain_count+0x20/0x20 [ 620.934872][T17574] ? xlog_do_io+0x360/0x360 [ 620.939729][T17574] ? xlog_verify_head+0xea/0x430 [ 620.944921][T17574] ? __kmem_cache_free+0xba/0x1e0 [ 620.950038][T17574] xlog_verify_head+0x137/0x430 [ 620.955167][T17574] xlog_find_tail+0x6c4/0xa00 [ 620.960128][T17574] xlog_recover+0x4c/0x440 [ 620.964729][T17574] xfs_log_mount+0x2c2/0x470 [ 620.969483][T17574] xfs_mountfs+0xc58/0x1d40 [ 620.974180][T17574] ? lockdep_softirqs_off+0x430/0x430 [ 620.979750][T17574] ? xfs_default_resblks+0x70/0x70 [ 620.985035][T17574] ? init_timer_key+0x161/0x2a0 [ 620.990161][T17574] ? rcu_is_watching+0x15/0xb0 [ 620.995031][T17574] ? trace_xfs_inode_timestamp_range+0x84/0x1d0 [ 621.001357][T17574] xfs_fs_fill_super+0x112f/0x13a0 [ 621.006735][T17574] get_tree_bdev+0x3f3/0x520 [ 621.011553][T17574] ? vfs_parse_fs_string+0x170/0x170 [ 621.017034][T17574] ? xfs_mount_set_dax_mode+0x100/0x100 [ 621.022822][T17574] ? setup_bdev_super+0x660/0x660 [ 621.028355][T17574] ? apparmor_capable+0x137/0x1a0 [ 621.033569][T17574] ? bpf_lsm_capable+0x9/0x10 [ 621.038422][T17574] ? security_capable+0x89/0xb0 [ 621.043441][T17574] vfs_get_tree+0x8c/0x280 [ 621.048298][T17574] do_new_mount+0x24b/0xa40 [ 621.053271][T17574] __se_sys_mount+0x2e7/0x3d0 [ 621.058199][T17574] ? __x64_sys_mount+0xc0/0xc0 [ 621.063052][T17574] ? lockdep_hardirqs_on+0x98/0x150 [ 621.068489][T17574] ? __x64_sys_mount+0x20/0xc0 [ 621.073497][T17574] do_syscall_64+0x55/0xa0 [ 621.078147][T17574] ? clear_bhb_loop+0x40/0x90 [ 621.082885][T17574] ? clear_bhb_loop+0x40/0x90 [ 621.087741][T17574] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 621.093783][T17574] RIP: 0033:0x7f9401b9da0a [ 621.098270][T17574] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.118214][T17574] RSP: 002b:00007f9402a31e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 621.126790][T17574] RAX: ffffffffffffffda RBX: 00007f9402a31ee0 RCX: 00007f9401b9da0a [ 621.134912][T17574] RDX: 0000200000000800 RSI: 0000200000000000 RDI: 00007f9402a31ea0 [ 621.142960][T17574] RBP: 0000200000000800 R08: 00007f9402a31ee0 R09: 0000000003000010 [ 621.151011][T17574] R10: 0000000003000010 R11: 0000000000000246 R12: 0000200000000000 [ 621.159048][T17574] R13: 00007f9402a31ea0 R14: 000000000000b9aa R15: 0000200000000040 [ 621.167222][T17574] [ 621.172147][T17574] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 621.180929][T17574] XFS (loop1): Invalid block length (0x20040) for buffer [ 621.188897][T17574] XFS (loop1): failed to locate log tail [ 621.195143][T17574] XFS (loop1): log mount/recovery failed: error -12 [ 621.242332][T17574] XFS (loop1): log mount failed [ 621.429764][ T1204] usb 6-1: Using ep0 maxpacket: 32 [ 621.458406][ T1204] usb 6-1: config 0 has an invalid interface number: 76 but max is 0 [ 621.505753][ T1204] usb 6-1: config 0 has no interface number 0 [ 621.518685][ T1204] usb 6-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 621.563723][ T1204] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.572302][ T1204] usb 6-1: Product: syz [ 621.576548][ T1204] usb 6-1: Manufacturer: syz [ 621.592333][ T1204] usb 6-1: SerialNumber: syz [ 621.634808][ T1204] usb 6-1: config 0 descriptor?? [ 621.644991][ T1204] dw2102: su3000_identify_state [ 621.658564][ T1204] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 621.699844][ T1204] dw2102: su3000_power_ctrl: 1, initialized 0 [ 621.713684][ T1204] dvb-usb: bulk message failed: -22 (2/0) [ 621.744287][ T1204] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 621.765340][ T1204] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 621.819647][ T1204] usb 6-1: media controller created [ 621.825174][ T1204] dvb-usb: bulk message failed: -22 (6/0) [ 621.862272][ T1204] dw2102: i2c transfer failed. [ 621.867228][ T1204] dvb-usb: bulk message failed: -22 (6/0) [ 621.899948][ T1204] dw2102: i2c transfer failed. [ 621.915141][T17572] dw2102: i2c wr: len=66 is too big! [ 621.915141][T17572] [ 621.935334][ T1204] dvb-usb: bulk message failed: -22 (6/0) [ 621.956133][ T1204] dw2102: i2c transfer failed. [ 621.982999][ T1204] dvb-usb: bulk message failed: -22 (6/0) [ 622.009835][ T1204] dw2102: i2c transfer failed. [ 622.014749][ T1204] dvb-usb: bulk message failed: -22 (6/0) [ 622.052417][ T1204] dw2102: i2c transfer failed. [ 622.057415][ T1204] dvb-usb: bulk message failed: -22 (6/0) [ 622.103819][ T1204] dw2102: i2c transfer failed. [ 622.123765][ T1204] dvb-usb: MAC address: 02:02:02:02:02:02 [ 622.199871][ T1204] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 622.288974][ T1204] dvb-usb: bulk message failed: -22 (3/0) [ 622.326384][ T1204] dw2102: command 0x0e transfer failed. [ 622.338318][ T1204] dvb-usb: bulk message failed: -22 (3/0) [ 622.352423][ T1204] dw2102: command 0x0e transfer failed. [ 622.692498][ T1204] dvb-usb: bulk message failed: -22 (3/0) [ 622.698514][ T1204] dw2102: command 0x0e transfer failed. [ 622.721915][ T1204] dvb-usb: bulk message failed: -22 (3/0) [ 622.727858][ T1204] dw2102: command 0x0e transfer failed. [ 622.754621][ T1204] dvb-usb: bulk message failed: -22 (1/0) [ 622.776819][ T1204] dw2102: command 0x51 transfer failed. [ 623.024110][ T1204] DVB: Unable to find symbol ds3000_attach() [ 623.041989][ T1204] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 623.202301][ T1204] rc_core: IR keymap rc-su3000 not found [ 623.224568][ T1204] Registered IR keymap rc-empty [ 623.241318][ T1204] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 623.283623][ T1204] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input66 [ 623.317039][ T1204] dvb-usb: schedule remote query interval to 150 msecs. [ 623.349551][ T1204] dw2102: su3000_power_ctrl: 0, initialized 1 [ 623.355798][ T1204] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 623.425306][ T1204] usb 6-1: USB disconnect, device number 2 [ 623.611138][ T1204] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 624.355367][T17652] loop1: detected capacity change from 0 to 32768 [ 624.520156][T17627] syz.2.4768 (17627): drop_caches: 2 [ 624.583490][T17652] JBD2: Ignoring recovery information on journal [ 624.815542][T17652] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 624.884399][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.891767][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.989545][ T28] audit: type=1800 audit(1772208973.468:316): pid=17652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4774" name="file2" dev="loop1" ino=17058 res=0 errno=0 [ 625.265112][T17688] loop2: detected capacity change from 0 to 4096 [ 625.320682][ T5780] ocfs2: Unmounting device (7,1) on (node local) [ 625.469123][T17696] loop5: detected capacity change from 0 to 22 [ 625.497242][T17696] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 625.550006][T17696] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 625.813746][T17702] netlink: 'syz.5.4794': attribute type 27 has an invalid length. [ 626.019972][ T8] kernel write not supported for file /uhid (pid: 8 comm: kworker/0:0) [ 626.102182][T17714] loop2: detected capacity change from 0 to 64 [ 626.596570][T17726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4805'. [ 627.006119][T17740] loop2: detected capacity change from 0 to 128 [ 627.038687][T17740] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 627.057047][T17740] ext4 filesystem being mounted at /1213/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 627.147999][ T5779] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 627.544770][T17755] tmpfs: Cannot disable swap on remount [ 627.568122][T17756] loop4: detected capacity change from 0 to 256 [ 627.615765][T17756] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 628.491642][ T27] kernel write not supported for file /zero (pid: 27 comm: kworker/1:1) [ 628.795808][T17760] syz.5.4821 (17760): drop_caches: 2 [ 628.836969][T17785] loop4: detected capacity change from 0 to 512 [ 628.895098][T17785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 629.101087][ T9351] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.292278][T17795] loop2: detected capacity change from 0 to 64 [ 629.612596][T17803] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4841'. [ 629.839778][T16545] Bluetooth: hci1: command tx timeout [ 629.957283][T17779] loop1: detected capacity change from 0 to 40427 [ 630.087384][T17809] syz.4.4843 (17809): drop_caches: 2 [ 630.115015][T17779] F2FS-fs (loop1): invalid crc value [ 630.147469][T17779] F2FS-fs (loop1): Found nat_bits in checkpoint [ 630.326110][T17779] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 630.439029][T17819] loop4: detected capacity change from 0 to 2048 [ 630.493184][T17819] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 630.618425][ T5780] syz-executor: attempt to access beyond end of device [ 630.618425][ T5780] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 630.664462][ T5780] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 630.742124][T17813] loop5: detected capacity change from 0 to 32768 [ 630.768141][T17813] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.4845 (17813) [ 630.828149][T17813] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 630.855579][T17813] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 630.871003][T17813] BTRFS info (device loop5): using free space tree [ 630.980946][T17831] vlan2: entered promiscuous mode [ 630.986105][T17831] dummy0: entered promiscuous mode [ 631.090846][T17813] BTRFS info (device loop5): enabling ssd optimizations [ 631.098073][T17813] BTRFS info (device loop5): auto enabling async discard [ 631.392259][T16544] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 631.513321][T17849] loop4: detected capacity change from 0 to 512 [ 631.716527][ T28] audit: type=1326 audit(1772208980.208:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17850 comm="syz.5.4855" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a6cb9c799 code=0x0 [ 632.073262][T17858] lo speed is unknown, defaulting to 1000 [ 632.206762][T17865] loop2: detected capacity change from 0 to 512 [ 632.275740][T17865] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 632.406003][T17865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.459736][T17865] ext4 filesystem being mounted at /1227/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 632.636732][T17875] loop4: detected capacity change from 0 to 1024 [ 632.651468][T17865] EXT4-fs (loop2): resizing filesystem from 128 to 1 blocks [ 632.664325][T17875] EXT4-fs: Ignoring removed orlov option [ 632.678033][T17865] EXT4-fs warning (device loop2): ext4_resize_fs:2048: can't shrink FS - resize aborted [ 632.762030][T17875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 632.856409][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.901021][T17875] EXT4-fs error (device loop4): ext4_free_inode:356: comm syz.4.4863: bit already cleared for inode 13 [ 632.959717][T17875] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 633.777619][ T9351] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.047534][T17896] loop4: detected capacity change from 0 to 256 [ 634.091032][T17896] exfat: Deprecated parameter 'namecase' [ 634.156883][T17896] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 634.812220][T17921] loop1: detected capacity change from 0 to 1024 [ 634.825765][T17921] EXT4-fs: inline encryption not supported [ 634.859993][T17921] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 634.938269][T17921] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.263293][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.655733][T17948] loop5: detected capacity change from 0 to 2048 [ 635.683812][T17948] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 635.741318][T17948] UDF-fs: error (device loop5): udf_fiiter_advance_blk: extent after position 188 not allocated in directory (ino 1376) [ 635.904367][T17955] netlink: 'syz.1.4898': attribute type 11 has an invalid length. [ 635.926012][T17955] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4898'. [ 636.161509][T17963] netlink: 'syz.1.4902': attribute type 2 has an invalid length. [ 636.186556][T17959] loop5: detected capacity change from 0 to 8192 [ 636.227480][T17959] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 636.311925][T17959] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 636.387251][T17959] REISERFS (device loop5): using ordered data mode [ 636.409292][T17959] reiserfs: using flush barriers [ 636.431911][T17959] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 636.484811][T17959] REISERFS (device loop5): checking transaction log (loop5) [ 636.506122][T17959] REISERFS (device loop5): Using r5 hash to sort names [ 636.545896][T17959] reiserfs: enabling write barrier flush mode [ 636.583162][T17959] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 636.629551][T17959] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 636.659040][T17959] REISERFS (device loop5): Remounting filesystem read-only [ 636.689610][T17959] REISERFS error (device loop5): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 636.734287][T17959] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 636.784001][T17959] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 636.811817][T17959] REISERFS error (device loop5): zam-7001 reiserfs_find_entry: io error [ 636.829566][T17959] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 636.861956][T17959] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 636.876370][T17959] REISERFS error (device loop5): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 636.921504][T17959] REISERFS warning (device loop5): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 637.020069][T17968] loop2: detected capacity change from 0 to 32768 [ 637.060411][T16544] ------------[ cut here ]------------ [ 637.066119][T16544] kernel BUG at fs/reiserfs/journal.c:1916! [ 637.077678][T17976] loop1: detected capacity change from 0 to 256 [ 637.085365][T16544] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 637.091784][T16544] CPU: 0 PID: 16544 Comm: syz-executor Not tainted syzkaller #0 [ 637.093491][T17976] exfat: Deprecated parameter 'utf8' [ 637.099720][T16544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 637.099735][T16544] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 637.099772][T16544] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 c4 de b5 ff e9 f9 fc ff ff e8 4a af 5d ff <0f> 0b e8 43 af 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 637.099789][T16544] RSP: 0018:ffffc900047afb00 EFLAGS: 00010293 [ 637.147196][T16544] RAX: ffffffff822965c6 RBX: 1ffff920008f5f64 RCX: ffff888029775a00 [ 637.155399][T16544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 637.163467][T16544] RBP: ffffc900047afbf8 R08: ffffc900047afb77 R09: 0000000000000000 [ 637.172014][T16544] R10: ffffc900047afb40 R11: fffff520008f5f6f R12: ffffc9000e5a7000 [ 637.180040][T16544] R13: dffffc0000000000 R14: ffff88807ef5a630 R15: 0000000000000000 [ 637.188079][T16544] FS: 0000555594fd3500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 637.197083][T16544] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 637.203736][T16544] CR2: 00007f38d855d000 CR3: 0000000023db4000 CR4: 00000000003506f0 [ 637.211736][T17976] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe649ead, utbl_chksum : 0xe619d30d) [ 637.211975][T16544] Call Trace: [ 637.227508][T16544] [ 637.230506][T16544] ? journal_release+0x30/0x30 [ 637.235354][T16544] journal_release+0x1f/0x30 [ 637.240017][T16544] reiserfs_put_super+0x26b/0x510 [ 637.245197][T16544] ? hook_inode_free_security+0xb0/0xb0 [ 637.250809][T16544] ? evict_inodes+0x63c/0x6a0 [ 637.255742][T16544] ? reiserfs_dirty_inode+0x270/0x270 [ 637.261268][T16544] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 637.267427][T16544] ? reiserfs_dirty_inode+0x270/0x270 [ 637.272861][T16544] generic_shutdown_super+0x134/0x2b0 [ 637.278328][T16544] kill_block_super+0x44/0x90 [ 637.283161][T16544] deactivate_locked_super+0x97/0x100 [ 637.288700][T16544] cleanup_mnt+0x43b/0x4d0 [ 637.293288][T16544] task_work_run+0x1d4/0x260 [ 637.297960][T16544] ? task_work_cancel+0x220/0x220 [ 637.303231][T16544] ? exit_to_user_mode_loop+0x3b/0x110 [ 637.308783][T16544] exit_to_user_mode_loop+0xe6/0x110 [ 637.314146][T16544] exit_to_user_mode_prepare+0xee/0x180 [ 637.319861][T16544] syscall_exit_to_user_mode+0x1a/0x50 [ 637.325493][T16544] do_syscall_64+0x61/0xa0 [ 637.330089][T16544] ? clear_bhb_loop+0x40/0x90 [ 637.335093][T16544] ? clear_bhb_loop+0x40/0x90 [ 637.340102][T16544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 637.346166][T16544] RIP: 0033:0x7f6a6cb9d9d7 [ 637.350843][T16544] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 637.371117][T16544] RSP: 002b:00007ffd23775988 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 637.379698][T16544] RAX: 0000000000000000 RBX: 00007f6a6cc31f90 RCX: 00007f6a6cb9d9d7 [ 637.387812][T16544] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd23775a40 [ 637.396094][T16544] RBP: 00007ffd23775a40 R08: 00007ffd23776a40 R09: 00000000ffffffff [ 637.404292][T16544] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd23776ad0 [ 637.412576][T16544] R13: 00007f6a6cc31f90 R14: 000000000009b80b R15: 00007ffd23776b10 [ 637.420696][T16544] [ 637.423771][T16544] Modules linked in: [ 637.437031][T16544] ---[ end trace 0000000000000000 ]--- [ 637.443292][T16544] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 637.449373][T16544] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 c4 de b5 ff e9 f9 fc ff ff e8 4a af 5d ff <0f> 0b e8 43 af 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 637.470253][T16544] RSP: 0018:ffffc900047afb00 EFLAGS: 00010293 [ 637.472985][T17968] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 637.476411][T16544] RAX: ffffffff822965c6 RBX: 1ffff920008f5f64 RCX: ffff888029775a00 [ 637.494369][T16544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 637.503599][T16544] RBP: ffffc900047afbf8 R08: ffffc900047afb77 R09: 0000000000000000 [ 637.513608][T16544] R10: ffffc900047afb40 R11: fffff520008f5f6f R12: ffffc9000e5a7000 [ 637.522267][T16544] R13: dffffc0000000000 R14: ffff88807ef5a630 R15: 0000000000000000 [ 637.530933][T16544] FS: 0000555594fd3500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 637.541540][T16544] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 637.548282][T16544] CR2: 00007f38d855d000 CR3: 0000000023db4000 CR4: 00000000003506f0 [ 637.556939][T16544] Kernel panic - not syncing: Fatal exception [ 637.563738][T16544] Kernel Offset: disabled [ 637.568367][T16544] Rebooting in 86400 seconds..