last executing test programs: 3.505080754s ago: executing program 2 (id=2286): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000240)={0xb, 0x29, 0x1, {0x9}}, 0xb) 3.190039942s ago: executing program 2 (id=2289): mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, &(0x7f0000000300)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x0, 0x0) read(r0, &(0x7f0000000500)=""/200, 0xc8) 3.062717175s ago: executing program 4 (id=2290): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000180)=0x1) 2.900274159s ago: executing program 2 (id=2293): r0 = socket$inet6(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000000340)={0xd, 0xa3cd, 0x6, 0x7, 0x9, 0x9, 0x5, 0x1}, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.797803742s ago: executing program 0 (id=2294): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) 2.704555744s ago: executing program 4 (id=2295): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2a18c56, &(0x7f0000000040)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@rodir}, {@utf8no}, {@uni_xlate}, {@fat=@dmask={'dmask', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@shortname_mixed}, {@utf8no}, {@uni_xlateno}, {@fat=@usefree}]}, 0x7b, 0x2be, &(0x7f0000000100)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) getdents64(r0, &(0x7f0000004440)=""/4096, 0x1000) 2.491383259s ago: executing program 0 (id=2297): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x49) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r1, 0x201, 0x68320}}}}}}]}, 0x48}, 0x1, 0x2000, 0x0, 0x40}, 0x4048800) 2.48076169s ago: executing program 4 (id=2298): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000200010000001800088014000780080005000000a291", @ANYRES64=r0], 0x40}}, 0x0) 2.232263985s ago: executing program 4 (id=2301): capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x3, 0x27, 0x10, 0x25d, 0x40, 0x3}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x46, 0xfffffffffffffffd, 0x100000000007, 0xdb4e, 0x3, 0x2, 0xa2, 0x101, 0x7ffffffffffff, 0x80000004000080, 0x8000000, 0xa, 0x0, 0x4, 0x0, 0x8000], 0xf000, 0x3c5210}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 2.222954366s ago: executing program 0 (id=2302): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x8000}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 2.133109718s ago: executing program 1 (id=2303): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r0, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/191, 0xbf}, {&(0x7f0000004840)=""/215, 0xd7}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f0000000a80)=""/160, 0xa0}, {&(0x7f0000000980)=""/209, 0xd1}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/241, 0xf1}, {&(0x7f0000005d00)=""/215, 0xd7}], 0x8}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 1.975530661s ago: executing program 4 (id=2305): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) read$FUSE(r0, &(0x7f0000004800)={0x2020}, 0x2020) 1.964788042s ago: executing program 0 (id=2306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa20, 0xfff9, 0x81, 0xe, 0x8, 0x7, 0xaa, 0x5]}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) 1.959335822s ago: executing program 3 (id=2307): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280), 0x4, r1}) 1.890534624s ago: executing program 1 (id=2308): syz_mount_image$reiserfs(&(0x7f0000000200), &(0x7f0000000580)='./file1\x00', 0x8488, &(0x7f00000005c0), 0xfe, 0x1101, &(0x7f0000001640)="$eJzs2T+LE0EYB+Df7MZ/VWSvXwQtLOS4I36BKxTSWtuIXOVVl0rx4/hx9AqxP67X4sB+ZU02UQkEkqgcPA8s8+7LO7vvlDMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I2SryU5qJJmyFVJStK2F9OrJO2Qv/+xrlLy4nQ6e3Y+eT5LUv8sL/eGkpKkOX54t5k0k+a4eXpw8ujT7O27N6/Ozk7PlzVtLq/3v5Sy6AcAAAD4Xbezz//5/wAAAMAmeztIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhSN17FzRBUSUrSthfTqyTtmnm3/lF/AAAAwO5Kqrwcr8vPjwFWnuTLuCzz/fi99PFRPqyZv1G1fc8AAABww3V3FsGv9+vl9mo//jij5da5zz3IKIeH8/fFkG8nSZ3k6I+PX16/fz08pav/9loAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAHO3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAGCvAAAA///e69c/") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)='v', 0x1}], 0x1, 0x800fff, 0xc, 0x5) read$FUSE(r0, &(0x7f0000002900)={0x2020}, 0x2020) 1.860331955s ago: executing program 2 (id=2309): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) set_robust_list(&(0x7f0000000080)={0x0, 0x9}, 0x18) 1.711397678s ago: executing program 4 (id=2310): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./bus\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x4431, &(0x7f0000020c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) 1.698700849s ago: executing program 0 (id=2311): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) munlockall() 1.667925409s ago: executing program 3 (id=2312): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.359378446s ago: executing program 3 (id=2313): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000002640)='./file0\x00', 0x208000, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xfd, 0x6a5, &(0x7f0000000f00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r0, &(0x7f0000000080)=""/43, 0x2b) getdents(r0, 0xfffffffffffffffd, 0xbb) 967.670687ms ago: executing program 3 (id=2314): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x12, @local, 0x1}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x171, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 804.014811ms ago: executing program 1 (id=2315): mkdir(&(0x7f0000000000)='my_proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_proc/asound/cards\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0x400) 708.899352ms ago: executing program 3 (id=2316): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x28, r0, 0x1a1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x44000) 559.649416ms ago: executing program 2 (id=2317): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) get_robust_list(r0, 0x0, 0x0) 451.467729ms ago: executing program 1 (id=2318): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/i801_smbus/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='ffffffff f', 0xa) 372.856911ms ago: executing program 1 (id=2319): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0x2, 0xfff, 0x2, 0x1}, 0x0, [0x7fff, 0x8000, 0x7b, 0x200003, 0x1, 0x5, 0x9, 0x5, 0x9, 0x80000001, 0x86, 0x0, 0x3, 0x7ff, 0x8001, 0xf, 0x9, 0x503e47c1, 0xcde, 0x5, 0x3, 0x0, 0x5, 0x0, 0x6, 0x6, 0x498c, 0x2, 0x10, 0x4, 0x0, 0xe, 0x80000001, 0x6, 0x3, 0x2, 0x9e08, 0xc3, 0x8, 0xa, 0x10, 0x4430, 0xfffffffa, 0x5, 0x8, 0x109, 0x25, 0x7, 0x8, 0x1, 0x200, 0x9, 0x0, 0x1, 0x0, 0x8, 0x9, 0xd, 0x0, 0x5, 0x1, 0x5, 0x5a, 0x9], [0x8, 0x5, 0xb54, 0x7, 0x6, 0x3, 0x8, 0xb9, 0x7, 0x7, 0x7fffffff, 0x2, 0x3, 0x7f, 0x2f4, 0x3, 0x0, 0x80000000, 0x6, 0x7fff, 0x0, 0x0, 0xff7, 0x8, 0xb1, 0x4, 0xfffffef9, 0x9, 0x8, 0x15e, 0x6994412a, 0x3, 0x78, 0x8001, 0x0, 0x3, 0xe45e, 0x4000000, 0x6, 0x7f, 0x2, 0x80000001, 0x9, 0x80, 0x0, 0x200, 0x5, 0x5, 0x0, 0x97, 0x8, 0x80000000, 0x8a08, 0x80000000, 0x9, 0xfffff170, 0x6, 0x101, 0x7761, 0x100, 0xfffffff8, 0x3, 0x6, 0x8000], [0x3eda, 0x6, 0x3, 0x20dc, 0x6, 0x4, 0x4, 0x8f4ab43, 0x1, 0x9e6, 0x9, 0x6, 0x31f7, 0x1, 0x5, 0x9, 0xd0, 0xb8b0, 0xb, 0x8000, 0x3, 0x8, 0xffff, 0xf85, 0x8, 0x3, 0x0, 0x6, 0xfffffffc, 0x7, 0xff, 0x5, 0xd, 0x8, 0xb84, 0x7, 0x8, 0x8000, 0x4e501595, 0x3, 0x2, 0x1, 0x6, 0x9, 0x9, 0xfff, 0x3, 0x5, 0x4, 0x5, 0xfff, 0x2, 0x2, 0x400, 0x2, 0x2, 0xfffffff9, 0x631ab3bb, 0x5, 0x5c5b, 0x503, 0x6, 0x1, 0x2], [0x9, 0x0, 0x400, 0x5, 0xffffffff, 0x0, 0x1, 0xb1e, 0x0, 0x47, 0xffffffff, 0x1, 0xfffffffd, 0x8, 0x81, 0x7, 0x0, 0x6, 0xff000000, 0x5, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, 0x0, 0x7, 0x9, 0x8, 0x0, 0x9, 0xf0d, 0x5, 0x2, 0x101, 0x5, 0x9, 0x7fff, 0x0, 0x8, 0xb, 0x3, 0x0, 0x8, 0x2, 0x4, 0x10001, 0x1ff, 0x3ff, 0x6, 0x80, 0x1, 0xb, 0x1ff, 0x0, 0x0, 0x4, 0x6e, 0xdb35, 0x8, 0x5, 0x8001, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 320.858312ms ago: executing program 3 (id=2320): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1004010, &(0x7f0000000500)=ANY=[], 0xfc, 0x6071, &(0x7f0000001f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x3000, 0x2, 0x11, r0, 0x0) truncate(&(0x7f0000000140)='./file1\x00', 0x9) 10.606799ms ago: executing program 2 (id=2321): r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@empty, @in6=@private1, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f24, 0x10, 0x89, 0x0, 0xee01}, {0xfffffffe, 0x2, 0xfffffffffffffffc, 0x1, 0xfffffffffffffffb, 0x3, 0x9, 0x7fff}, {0x4800000, 0xfffffffffffffffe, 0x4, 0x9}, 0xd8, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in=@private=0xa010100, 0x210000, 0x2b}, 0xa, @in=@loopback, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 9.797239ms ago: executing program 1 (id=2331): prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) 0s ago: executing program 0 (id=2322): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf042bbc7000fddbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000008001400", @ANYRES8=r1], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) kernel console output (not intermixed with test programs): filesystem without journal. Quota mode: none. [ 250.895610][ T7826] kAFS: bad VL server IP address [ 250.999001][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 251.857214][ T7853] loop1: detected capacity change from 0 to 8192 [ 251.898179][ T7853] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 251.914508][ T7858] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 251.944088][ T7853] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 251.975006][ T7853] REISERFS (device loop1): using ordered data mode [ 251.999100][ T7853] reiserfs: using flush barriers [ 252.022399][ T7853] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 252.104697][ T7853] REISERFS (device loop1): checking transaction log (loop1) [ 252.404853][ T7853] REISERFS (device loop1): Using tea hash to sort names [ 252.422508][ T7853] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 252.453314][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1370'. [ 252.473177][ T7853] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 252.529600][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1370'. [ 254.083544][ T7895] loop4: detected capacity change from 0 to 40427 [ 254.117823][ T7895] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 254.132804][ T7895] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 254.161728][ T7895] F2FS-fs (loop4): invalid crc value [ 254.250308][ T7895] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 254.276550][ T7902] loop3: detected capacity change from 0 to 32768 [ 254.397289][ T7902] XFS (loop3): Mounting V5 Filesystem [ 254.407772][ T7900] loop1: detected capacity change from 0 to 32768 [ 254.415353][ T7895] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 254.436843][ T7895] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 254.521399][ T7900] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1385 (7900) [ 254.595326][ T7900] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 254.604563][ T7902] XFS (loop3): Ending clean mount [ 254.629117][ T7900] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 254.648582][ T7900] BTRFS info (device loop1): using free space tree [ 254.655458][ T27] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 254.842255][ T4284] syz-executor: attempt to access beyond end of device [ 254.842255][ T4284] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 254.864051][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 254.871786][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 254.974254][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 254.985430][ T7900] BTRFS info (device loop1): enabling ssd optimizations [ 254.999267][ T27] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 255.009761][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 255.022373][ T27] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 255.033281][ T27] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 255.042655][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.071522][ T27] usb 3-1: config 0 descriptor?? [ 255.077468][ T7921] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 255.104206][ T4277] XFS (loop3): Unmounting Filesystem [ 255.419340][ T4274] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 255.431349][ T27] usb 3-1: USB disconnect, device number 13 [ 255.626465][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.706963][ T7948] loop0: detected capacity change from 0 to 8192 [ 255.775117][ T7948] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 255.793772][ T7950] loop5: detected capacity change from 0 to 7 [ 255.797203][ T7948] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 255.827589][ T4465] Dev loop5: unable to read RDB block 7 [ 255.833261][ T4465] loop5: unable to read partition table [ 255.848188][ T4465] loop5: partition table beyond EOD, truncated [ 255.865699][ T7948] REISERFS (device loop0): using ordered data mode [ 255.930143][ T7950] Dev loop5: unable to read RDB block 7 [ 255.944203][ T7948] reiserfs: using flush barriers [ 255.980153][ T7950] loop5: unable to read partition table [ 255.987372][ T7948] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 256.042887][ T7950] loop5: partition table beyond EOD, truncated [ 256.067979][ T4273] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 256.110116][ T7948] REISERFS (device loop0): checking transaction log (loop0) [ 256.114159][ T7950] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 256.523232][ T7948] REISERFS (device loop0): Using tea hash to sort names [ 256.552737][ T7948] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 256.908242][ T7971] netlink: 'syz.3.1402': attribute type 9 has an invalid length. [ 256.995397][ T7971] netlink: 668 bytes leftover after parsing attributes in process `syz.3.1402'. [ 257.113669][ T7977] loop4: detected capacity change from 0 to 128 [ 257.315057][ T26] audit: type=1326 audit(1787499650.259:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.0.1406" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986419e0d9 code=0x7ffc0000 [ 257.364236][ T6835] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 257.397946][ T26] audit: type=1326 audit(1787499650.259:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.0.1406" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986419e0d9 code=0x7ffc0000 [ 257.432661][ T7983] loop3: detected capacity change from 0 to 256 [ 257.508637][ T26] audit: type=1326 audit(1787499650.259:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.0.1406" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f986419e0d9 code=0x7ffc0000 [ 257.566028][ T6835] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 257.588840][ T6835] usb 2-1: config 220 descriptor has 1 excess byte, ignoring [ 257.611778][ T6835] usb 2-1: config 220 has no interface number 2 [ 257.630446][ T26] audit: type=1326 audit(1787499650.259:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.0.1406" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986419e0d9 code=0x7ffc0000 [ 257.672275][ T7988] loop4: detected capacity change from 0 to 256 [ 257.674427][ T6835] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 257.714113][ T6835] usb 2-1: config 220 interface 0 has no altsetting 0 [ 257.721952][ T26] audit: type=1326 audit(1787499650.259:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.0.1406" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986419e0d9 code=0x7ffc0000 [ 257.743120][ T6835] usb 2-1: config 220 interface 76 has no altsetting 0 [ 257.754867][ T7988] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 257.765786][ T6835] usb 2-1: config 220 interface 1 has no altsetting 0 [ 257.848686][ T6835] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 257.861919][ T26] audit: type=1326 audit(1787499650.259:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.0.1406" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f986419e0d9 code=0x7ffc0000 [ 257.906248][ T6835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.936024][ T6835] usb 2-1: Product: syz [ 257.950521][ T6835] usb 2-1: Manufacturer: syz [ 257.971091][ T7993] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.980210][ T7993] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.989068][ T7993] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.997865][ T7993] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.007149][ T6835] usb 2-1: SerialNumber: syz [ 258.020464][ T26] audit: type=1326 audit(1787499650.259:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.0.1406" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986419e0d9 code=0x7ffc0000 [ 258.051364][ T26] audit: type=1326 audit(1787499650.259:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.0.1406" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986419e0d9 code=0x7ffc0000 [ 258.081023][ T26] audit: type=1326 audit(1787499650.299:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.0.1406" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f986419e0d9 code=0x7ffc0000 [ 258.175201][ T26] audit: type=1326 audit(1787499650.299:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.0.1406" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986419e0d9 code=0x7ffc0000 [ 258.231528][ T6835] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 258.262021][ T6835] usb 2-1: No valid video chain found. [ 258.269270][ T6835] usb 2-1: selecting invalid altsetting 0 [ 258.332057][ T6835] usb 2-1: selecting invalid altsetting 0 [ 258.350546][ T6835] usbtest: probe of 2-1:220.1 failed with error -22 [ 258.369520][ T6835] usb 2-1: USB disconnect, device number 11 [ 258.825477][ T8017] loop2: detected capacity change from 0 to 256 [ 258.849825][ T8018] loop0: detected capacity change from 0 to 512 [ 258.903012][ T8017] exFAT-fs (loop2): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 258.919667][ T8018] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 258.951884][ T8018] EXT4-fs (loop0): #blocks per group too big: 65535 [ 258.979199][ T8017] exFAT-fs (loop2): failed to load alloc-bitmap [ 259.006508][ T8017] exFAT-fs (loop2): failed to recognize exfat type [ 259.406519][ T8028] loop2: detected capacity change from 0 to 512 [ 259.429383][ T8029] kAFS: bad VL server IP address [ 259.626084][ T8019] loop4: detected capacity change from 0 to 32768 [ 259.646490][ T8019] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.1423 (8019) [ 259.681861][ T8019] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 259.704960][ T8019] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 259.719418][ T8019] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 259.768325][ T8019] BTRFS info (device loop4): use zstd compression, level 3 [ 259.814828][ T8019] BTRFS info (device loop4): force clearing of disk cache [ 259.843463][ T8019] BTRFS info (device loop4): enabling disk space caching [ 259.863793][ T8019] BTRFS info (device loop4): disk space caching is enabled [ 260.122468][ T8019] BTRFS info (device loop4): enabling ssd optimizations [ 260.153168][ T8019] BTRFS info (device loop4): rebuilding free space tree [ 260.229518][ T8067] tap0: tun_chr_ioctl cmd 1074025680 [ 260.236617][ T8019] BTRFS info (device loop4): disabling free space tree [ 260.243585][ T8019] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 260.298498][ T8019] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 260.329902][ T8071] device bond_slave_0 entered promiscuous mode [ 260.336757][ T8071] device bond_slave_1 entered promiscuous mode [ 260.357279][ T8071] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 260.404322][ T8071] device bond_slave_0 left promiscuous mode [ 260.410451][ T8071] device bond_slave_1 left promiscuous mode [ 260.554667][ T8075] loop0: detected capacity change from 0 to 256 [ 260.617672][ T8075] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 260.655644][ T8077] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 260.674361][ T4315] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 260.725671][ T8077] EXT4-fs (loop1): #blocks per group too big: 65535 [ 260.792807][ T4284] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 260.884240][ T4315] usb 4-1: Using ep0 maxpacket: 8 [ 260.897536][ T4315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 260.930395][ T4315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 260.948482][ T4315] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 260.980175][ T4315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 261.023278][ T4315] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 261.053440][ T4315] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 261.121287][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.156380][ T4315] usb 4-1: config 0 descriptor?? [ 261.163926][ T8073] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 261.443207][ T4274] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 261.453920][ T27] usb 4-1: USB disconnect, device number 6 [ 261.568158][ T8089] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1446'. [ 261.687716][ T7249] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop4 scanned by udevd (7249) [ 262.343344][ T8087] set_capacity_and_notify: 1 callbacks suppressed [ 262.343362][ T8087] loop0: detected capacity change from 0 to 131072 [ 262.366789][ T8087] F2FS-fs (loop0): invalid crc value [ 262.484872][ T8087] F2FS-fs (loop0): Found nat_bits in checkpoint [ 262.526233][ T8087] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 262.547994][ T8087] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 262.640931][ T8087] F2FS-fs (loop0): sanity_check_inode: inode (ino=7, mode=33261) should not have inline_data, run fsck to fix [ 263.549062][ T8133] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 263.574223][ T8133] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 264.089804][ T8121] loop4: detected capacity change from 0 to 40427 [ 264.123597][ T8124] loop0: detected capacity change from 0 to 32768 [ 264.134431][ T8121] F2FS-fs (loop4): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 264.165904][ T8121] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 264.205620][ T8121] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 264.241494][ T8121] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 264.307033][ T8121] F2FS-fs (loop4): invalid crc value [ 264.351386][ T8121] F2FS-fs (loop4): Found nat_bits in checkpoint [ 264.418337][ T8137] loop1: detected capacity change from 0 to 32768 [ 264.513100][ T8137] JBD2: Ignoring recovery information on journal [ 264.555142][ T8121] F2FS-fs (loop4): Start checkpoint disabled! [ 264.629143][ T8121] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 264.639818][ T8121] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 264.688416][ T8121] F2FS-fs (loop4) : inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fa/0x5c0 [ 264.710976][ T8121] syz.4.1460: attempt to access beyond end of device [ 264.710976][ T8121] loop4: rw=2049, sector=53248, nr_sectors = 360 limit=40427 [ 264.750913][ T8137] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 265.035088][ T4273] ocfs2: Unmounting device (7,1) on (node local) [ 265.109685][ T4315] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 265.207995][ T4323] kworker/u4:6: attempt to access beyond end of device [ 265.207995][ T4323] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 265.333740][ T4315] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 265.363400][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.402212][ T4315] usb 4-1: config 0 descriptor?? [ 265.446851][ T4315] cp210x 4-1:0.0: cp210x converter detected [ 265.610878][ T8165] loop0: detected capacity change from 0 to 1024 [ 265.714289][ T8165] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 265.849126][ T4315] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 265.886187][ T8156] loop2: detected capacity change from 0 to 40427 [ 265.900834][ T8156] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 265.903742][ T4315] usb 4-1: cp210x converter now attached to ttyUSB0 [ 265.913535][ T8156] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 265.924918][ T8156] F2FS-fs (loop2): invalid crc value [ 265.933080][ T8156] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 266.056931][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 266.073288][ T4312] usb 4-1: USB disconnect, device number 7 [ 266.119159][ T4312] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 266.158527][ T4312] cp210x 4-1:0.0: device disconnected [ 266.256234][ T8156] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 266.263375][ T8156] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 266.467062][ T4281] syz-executor: attempt to access beyond end of device [ 266.467062][ T4281] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 266.834880][ T8188] loop4: detected capacity change from 0 to 128 [ 266.875293][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 266.875309][ T26] audit: type=1807 audit(1787499659.819:77): action=measure func=F res=0 [ 266.890853][ T8190] ima: policy update failed [ 266.914120][ T26] audit: type=1802 audit(1787499659.829:78): pid=8194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.1488" res=0 errno=0 [ 267.001217][ T8188] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 267.061904][ T8188] ext4 filesystem being mounted at /325/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 267.085936][ T26] audit: type=1802 audit(1787499659.839:79): pid=8190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1488" res=0 errno=0 [ 267.171497][ T8188] fscrypt (loop4, inode 12): Unsupported encryption flags (0x7b) [ 267.300174][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 267.452123][ T8208] loop0: detected capacity change from 0 to 256 [ 267.656293][ T8212] loop5: detected capacity change from 0 to 7 [ 267.718963][ T8212] Dev loop5: unable to read RDB block 7 [ 267.729529][ T8212] loop5: unable to read partition table [ 267.746413][ T8212] loop5: partition table beyond EOD, truncated [ 267.792556][ T8219] raw_sendmsg: syz.0.1499 forgot to set AF_INET. Fix it! [ 267.804151][ T8212] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 268.130950][ T4345] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 268.266345][ T8231] clocksource: Switched to clocksource acpi_pm [ 268.375297][ T4345] usb 5-1: Using ep0 maxpacket: 8 [ 268.382500][ T4345] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 268.414598][ T4345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.439873][ T4345] pvrusb2: Hardware description: Terratec Grabster AV400 [ 268.475181][ T4345] pvrusb2: ********** [ 268.479241][ T4345] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 268.518672][ T4345] pvrusb2: Important functionality might not be entirely working. [ 268.531704][ T4345] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 268.544743][ T4345] pvrusb2: ********** [ 268.647378][ T2314] pvrusb2: Invalid write control endpoint [ 268.790886][ T8229] loop0: detected capacity change from 0 to 32768 [ 268.813092][ T8245] mkiss: ax0: crc mode is auto. [ 268.861455][ T4345] usb 5-1: USB disconnect, device number 9 [ 268.886877][ T8229] JBD2: Ignoring recovery information on journal [ 268.944635][ T2314] pvrusb2: Invalid write control endpoint [ 268.950426][ T2314] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 269.013838][ T2314] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 269.026464][ T8229] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 269.047238][ T2314] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 269.071988][ T8255] loop1: detected capacity change from 0 to 512 [ 269.141880][ T8255] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 269.192458][ T2314] pvrusb2: Device being rendered inoperable [ 269.199058][ T2314] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 269.206899][ T2314] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 269.216792][ T4283] ocfs2: Unmounting device (7,0) on (node local) [ 269.268537][ T2314] pvrusb2: Attached sub-driver cx25840 [ 269.317765][ T2314] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 269.346057][ T8255] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 269.374088][ T2314] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 269.395474][ T8255] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 269.427339][ T8255] EXT4-fs (loop1): changing journal_checksum during remount not supported; ignoring [ 269.469319][ T8255] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 269.487334][ T26] audit: type=1326 audit(1787499662.422:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8260 comm="syz.3.1517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=228 compat=0 ip=0x7ffe9ad6fa88 code=0x0 [ 269.571621][ T8261] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 269.596074][ T8261] ext4 filesystem being remounted at /281/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 269.782127][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 269.958730][ T8272] loop4: detected capacity change from 0 to 512 [ 269.989103][ T8272] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 270.031174][ T8272] EXT4-fs (loop4): #blocks per group too big: 65535 [ 271.708293][ T8321] loop2: detected capacity change from 0 to 256 [ 271.766855][ T8321] exfat: Deprecated parameter 'namecase' [ 271.772614][ T8321] exfat: Deprecated parameter 'namecase' [ 271.924587][ T8321] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 272.199043][ T8307] loop1: detected capacity change from 0 to 40427 [ 272.240208][ T8307] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 272.272706][ T8307] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 272.301524][ T8307] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 272.334675][ T8307] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 272.351053][ T8327] [ 272.400811][ T8307] F2FS-fs (loop1): invalid crc value [ 272.458388][ T8307] F2FS-fs (loop1): Found nat_bits in checkpoint [ 272.614376][ T8316] loop0: detected capacity change from 0 to 40427 [ 272.655279][ T8316] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 272.663232][ T8307] F2FS-fs (loop1): Start checkpoint disabled! [ 272.681849][ T8316] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 272.743087][ T8316] F2FS-fs (loop0): invalid crc value [ 272.752442][ T8307] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 272.765995][ T8307] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 272.839360][ T8316] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 272.965776][ T8307] F2FS-fs (loop1) : inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fa/0x5c0 [ 273.046756][ T8307] syz.1.1535: attempt to access beyond end of device [ 273.046756][ T8307] loop1: rw=2049, sector=53248, nr_sectors = 360 limit=40427 [ 273.164481][ T8316] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 273.184618][ T8316] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 273.368885][ T11] kworker/u4:1: attempt to access beyond end of device [ 273.368885][ T11] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 273.511701][ T4283] syz-executor: attempt to access beyond end of device [ 273.511701][ T4283] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 274.322120][ T8361] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 274.371676][ T8351] loop4: detected capacity change from 0 to 40427 [ 274.426407][ T8364] loop2: detected capacity change from 0 to 512 [ 274.436423][ T8351] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 274.459350][ T8351] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 274.518101][ T8351] F2FS-fs (loop4): invalid crc value [ 274.551789][ T8351] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 274.571127][ T8364] FAT-fs (loop2): error, clusters badly computed (1 != 0) [ 274.887864][ T8351] F2FS-fs (loop4): Start checkpoint disabled! [ 274.977837][ T8374] netem: incorrect gi model size [ 274.998886][ T8374] netem: change failed [ 275.011517][ T8351] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 275.027260][ T8351] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 275.081882][ T8379] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 275.211848][ T11] kworker/u4:1: attempt to access beyond end of device [ 275.211848][ T11] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 275.434755][ T8390] loop0: detected capacity change from 0 to 16 [ 275.501211][ T8390] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 143300) [ 275.833554][ T27] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 276.018480][ T8403] device-mapper: ioctl: Invalid ioctl structure: name o, dev 6f70796d00000000 [ 276.043554][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 276.054207][ T27] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 276.079726][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 276.117580][ T27] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 276.144126][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.183061][ T27] usb 3-1: config 0 descriptor?? [ 276.220846][ T8386] loop3: detected capacity change from 0 to 40427 [ 276.296042][ T8386] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 276.302452][ T8386] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 276.368846][ T8386] F2FS-fs (loop3): invalid crc value [ 276.439736][ T8386] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 276.818884][ T8386] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 276.838472][ T8386] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 276.943386][ T8421] loop4: detected capacity change from 0 to 4096 [ 276.977700][ T27] corsair-cpro 0003:1B1C:0C10.000E: unknown main item tag 0x0 [ 277.003366][ T27] corsair-cpro 0003:1B1C:0C10.000E: unknown main item tag 0x0 [ 277.017587][ T8421] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 277.036127][ T27] corsair-cpro 0003:1B1C:0C10.000E: unknown main item tag 0x0 [ 277.049471][ T27] corsair-cpro 0003:1B1C:0C10.000E: unknown main item tag 0x0 [ 277.070137][ T27] corsair-cpro 0003:1B1C:0C10.000E: unknown main item tag 0x0 [ 277.097243][ T27] corsair-cpro 0003:1B1C:0C10.000E: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 277.174784][ T4277] syz-executor: attempt to access beyond end of device [ 277.174784][ T4277] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 277.199337][ T8428] EXT4-fs error (device loop4): ext4_get_first_dir_block:3603: inode #12: block 80: comm syz.4.1580: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 277.460899][ T8428] EXT4-fs error (device loop4): ext4_get_first_dir_block:3605: inode #12: comm syz.4.1580: directory missing '..' [ 277.537020][ T27] corsair-cpro: probe of 0003:1B1C:0C10.000E failed with error -110 [ 277.586312][ T27] usb 3-1: USB disconnect, device number 14 [ 277.703349][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 277.743811][ T8416] loop1: detected capacity change from 0 to 40427 [ 277.825104][ T8416] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 277.832294][ T8416] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 277.869767][ T8416] F2FS-fs (loop1): invalid crc value [ 277.935694][ T8416] F2FS-fs (loop1): Found nat_bits in checkpoint [ 278.027825][ T8431] fido_id[8431]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 278.223077][ T8416] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 278.230182][ T8416] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 278.357308][ T8449] loop3: detected capacity change from 0 to 1024 [ 278.439831][ T4347] blk_print_req_error: 9 callbacks suppressed [ 278.439850][ T4347] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 278.439905][ T4273] syz-executor: attempt to access beyond end of device [ 278.439905][ T4273] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 279.099817][ T8464] loop3: detected capacity change from 0 to 128 [ 279.215022][ T8464] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 279.313598][ T8464] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.583699][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 279.811711][ T8482] loop3: detected capacity change from 0 to 1024 [ 279.858918][ T8482] hfsplus: Filesystem is marked locked, mounting read-only. [ 279.974420][ T8482] hfsplus: filesystem is marked locked, leaving read-only. [ 280.089183][ T8488] loop1: detected capacity change from 0 to 4096 [ 280.119946][ T8488] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 280.608997][ T8501] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1613'. [ 280.644337][ T8501] infiniband syz0: set active [ 280.694169][ T8504] loop1: detected capacity change from 0 to 1024 [ 281.630919][ T8538] loop0: detected capacity change from 0 to 512 [ 281.697120][ T8538] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 281.735006][ T8538] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 281.753047][ T8538] System zones: 0-1, 15-15, 18-18, 34-34 [ 281.797365][ T8538] EXT4-fs (loop0): orphan cleanup on readonly fs [ 281.812997][ T8538] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 281.846735][ T8538] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 281.875888][ T8538] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 281.930784][ T8538] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.1629: bad orphan inode 16 [ 281.977150][ T8538] ext4_test_bit(bit=15, block=18) = 1 [ 281.993673][ T8538] is_bad_inode(inode)=0 [ 282.003355][ T8538] NEXT_ORPHAN(inode)=0 [ 282.007473][ T8538] max_ino=32 [ 282.051540][ T8538] i_nlink=2 [ 282.061833][ T8538] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 282.135997][ T8538] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 282.172712][ T8538] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 282.338444][ T8561] loop3: detected capacity change from 0 to 512 [ 282.338869][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 282.459423][ T8561] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 282.472970][ T8561] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.643420][ T8570] i2c i2c-0: new_device: Can't parse I2C address [ 282.755135][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 283.104264][ T8575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.220951][ T8563] loop1: detected capacity change from 0 to 32768 [ 283.289040][ T26] audit: type=1800 audit(1787499676.222:81): pid=8563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1639" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 283.753128][ T8597] device hsr0 entered promiscuous mode [ 284.679669][ T8605] syz.4.1659 (8605): /proc/8604/oom_adj is deprecated, please use /proc/8604/oom_score_adj instead. [ 285.012388][ T27] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 285.192166][ T8625] loop4: detected capacity change from 0 to 512 [ 285.221703][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 285.238526][ T8626] loop9: detected capacity change from 0 to 7 [ 285.252481][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.299617][ T4347] Dev loop9: unable to read RDB block 7 [ 285.325698][ T27] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 285.341968][ T8625] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 285.364431][ T4347] loop9: unable to read partition table [ 285.371001][ T4347] loop9: partition table beyond EOD, truncated [ 285.390181][ T8633] loop0: detected capacity change from 0 to 8 [ 285.395874][ T27] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 285.441424][ T8626] Dev loop9: unable to read RDB block 7 [ 285.461968][ T8626] loop9: unable to read partition table [ 285.469433][ T27] usb 3-1: Manufacturer: syz [ 285.490474][ T8626] loop9: partition table beyond EOD, truncated [ 285.505407][ T27] usb 3-1: config 0 descriptor?? [ 285.512782][ T8633] SQUASHFS error: Failed to read block 0x26067d: -5 [ 285.520167][ T8633] SQUASHFS error: Unable to read metadata cache entry [26067d] [ 285.541596][ T8626] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 285.589423][ T8633] SQUASHFS error: Unable to read directory block [26067d:1fff] [ 285.708474][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 285.969515][ T27] cougar 0003:060B:700A.000F: unknown main item tag 0x0 [ 285.994104][ T27] cougar 0003:060B:700A.000F: unknown main item tag 0x0 [ 286.011551][ T27] cougar 0003:060B:700A.000F: unknown main item tag 0x0 [ 286.029737][ T27] cougar 0003:060B:700A.000F: unknown main item tag 0x0 [ 286.043211][ T27] cougar 0003:060B:700A.000F: unknown main item tag 0x0 [ 286.070720][ T8641] loop0: detected capacity change from 0 to 128 [ 286.092761][ T27] cougar 0003:060B:700A.000F: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 286.146490][ T8641] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 286.184752][ T27] usb 3-1: USB disconnect, device number 15 [ 286.211206][ T8648] loop1: detected capacity change from 0 to 512 [ 286.222819][ T8641] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.309278][ T8647] fido_id[8647]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 286.375223][ T8648] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.1676: bad orphan inode 17 [ 286.407397][ T8648] ext4_test_bit(bit=16, block=4) = 1 [ 286.417250][ T8648] is_bad_inode(inode)=0 [ 286.432499][ T8648] NEXT_ORPHAN(inode)=0 [ 286.440762][ T8648] max_ino=32 [ 286.448464][ T8648] i_nlink=1 [ 286.452065][ T8648] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 286.505564][ T8651] program syz.4.1677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 286.521610][ T8653] loop3: detected capacity change from 0 to 64 [ 286.581931][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 286.630623][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 286.643916][ T8653] hfs: walked past end of dir [ 286.839284][ T8657] loop1: detected capacity change from 0 to 64 [ 287.068906][ T8656] loop0: detected capacity change from 0 to 8192 [ 287.262906][ T8666] loop1: detected capacity change from 0 to 256 [ 287.330737][ T8672] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 287.402750][ T8672] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 287.407244][ T8666] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 287.453506][ T8672] EXT4-fs error (device loop3): ext4_get_journal_inode:5762: inode #5: comm syz.3.1684: unexpected bad inode w/o EXT4_IGET_BAD [ 287.548961][ T8672] EXT4-fs (loop3): no journal found [ 287.594892][ T26] audit: type=1800 audit(1787499680.532:82): pid=8666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1685" name="file2" dev="loop1" ino=1048686 res=0 errno=0 [ 287.624177][ T8672] EXT4-fs (loop3): can't get journal size [ 287.694744][ T8672] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 287.780489][ T8672] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1458: inode #12: block 16: comm syz.3.1684: path /323/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 288.121688][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 288.548524][ T8696] set_capacity_and_notify: 1 callbacks suppressed [ 288.548543][ T8696] loop2: detected capacity change from 0 to 4096 [ 288.679224][ T8703] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 288.690625][ T8696] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 288.752223][ T8696] NILFS (loop2): mounting fs with errors [ 288.891400][ T8696] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 288.924937][ T8707] tipc: Started in network mode [ 288.962247][ T8707] tipc: Node identity ac14140f, cluster identity 4711 [ 288.996070][ T8707] tipc: New replicast peer: 255.255.255.255 [ 289.033824][ T8707] tipc: Enabled bearer , priority 10 [ 289.242354][ T14] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 289.319717][ T8718] loop1: detected capacity change from 0 to 256 [ 289.370299][ T8718] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x596330fe, utbl_chksum : 0xe619d30d) [ 289.443456][ T14] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 289.475357][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.502050][ T4315] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 289.512106][ T14] usb 1-1: Product: syz [ 289.516321][ T14] usb 1-1: Manufacturer: syz [ 289.531272][ T14] usb 1-1: SerialNumber: syz [ 289.548168][ T14] usb 1-1: config 0 descriptor?? [ 289.564652][ T8700] loop3: detected capacity change from 0 to 32768 [ 289.707791][ T4315] usb 3-1: Using ep0 maxpacket: 8 [ 289.719694][ T4315] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 289.827892][ T4315] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 289.897689][ T4315] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 289.946570][ T4315] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 289.966885][ T4315] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.002172][ T4315] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 290.011393][ T4315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.053742][ T14] usb 1-1: USB disconnect, device number 9 [ 290.136063][ T8700] XFS (loop3): Mounting V5 Filesystem [ 290.212395][ T5086] tipc: Node number set to 2886997007 [ 290.251225][ T4315] usb 3-1: GET_CAPABILITIES returned 0 [ 290.257106][ T4315] usbtmc 3-1:16.0: can't read capabilities [ 290.331920][ T8700] XFS (loop3): Ending clean mount [ 290.370603][ T8700] XFS (loop3): Quotacheck needed: Please wait. [ 290.497029][ T8715] usbtmc 3-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 290.509923][ T4315] usb 3-1: USB disconnect, device number 16 [ 290.528877][ T8700] XFS (loop3): Quotacheck: Done. [ 290.739015][ T8746] loop4: detected capacity change from 0 to 4096 [ 290.841945][ T8750] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 290.844400][ T8746] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 290.870409][ T8749] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1718'. [ 290.902317][ T8749] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1718'. [ 290.926760][ T8746] NILFS (loop4): mounting fs with errors [ 290.948780][ T4277] XFS (loop3): Unmounting Filesystem [ 290.969206][ T8751] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1718'. [ 290.978883][ T8751] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1718'. [ 291.091025][ T8746] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 291.243343][ T8755] program syz.1.1721 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.495187][ T8761] loop4: detected capacity change from 0 to 128 [ 291.518813][ T8761] FAT-fs (loop4): Directory bread(block 1048) failed [ 291.537233][ T8761] FAT-fs (loop4): Directory bread(block 1049) failed [ 291.564404][ T8761] FAT-fs (loop4): Directory bread(block 1050) failed [ 291.597128][ T8761] FAT-fs (loop4): Directory bread(block 1051) failed [ 291.621994][ T8761] FAT-fs (loop4): Directory bread(block 1052) failed [ 291.628989][ T8761] FAT-fs (loop4): Directory bread(block 1053) failed [ 291.655153][ T8767] WARNING! power/level is deprecated; use power/control instead [ 291.681777][ T8761] FAT-fs (loop4): Directory bread(block 1054) failed [ 291.688542][ T8761] FAT-fs (loop4): Directory bread(block 1055) failed [ 291.749095][ T8761] FAT-fs (loop4): Directory bread(block 1048) failed [ 291.771439][ T8761] FAT-fs (loop4): Directory bread(block 1049) failed [ 291.864564][ T8763] loop2: detected capacity change from 0 to 4096 [ 291.898635][ T8763] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 292.480659][ T8789] loop3: detected capacity change from 0 to 512 [ 292.516089][ T8789] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 292.666039][ T8789] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1733: bg 0: block 104: invalid block bitmap [ 292.685503][ T8789] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 292.696087][ T8789] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1733: invalid indirect mapped block 1 (level 1) [ 292.715928][ T8789] EXT4-fs (loop3): 1 truncate cleaned up [ 292.723093][ T8789] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 292.952047][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 293.168344][ T8809] loop2: detected capacity change from 0 to 128 [ 293.258615][ T8810] loop1: detected capacity change from 0 to 4096 [ 293.408717][ T8810] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 293.475841][ T8817] program syz.4.1746 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.709146][ T4273] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 293.954021][ T8826] ip_tables: iptables: counters copy to user failed while replacing table [ 294.819181][ T8843] tipc: Started in network mode [ 294.844771][ T8843] tipc: Node identity 0010000000000000002, cluster identity 1 [ 294.849551][ T8832] loop3: detected capacity change from 0 to 32768 [ 294.927451][ T26] audit: type=1800 audit(1787499943.867:83): pid=8832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1752" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 295.148602][ T8834] loop1: detected capacity change from 0 to 40427 [ 295.189306][ T8834] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 295.227815][ T8834] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 295.268971][ T8834] F2FS-fs (loop1): invalid crc value [ 295.310119][ T8834] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 295.577756][ T8834] F2FS-fs (loop1): Start checkpoint disabled! [ 295.701436][ T8834] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 295.725002][ T8834] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 295.941096][ T30] kworker/u4:2: attempt to access beyond end of device [ 295.941096][ T30] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 296.003177][ T8870] loop4: detected capacity change from 0 to 128 [ 296.076498][ T8870] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 296.114701][ T8870] ext4 filesystem being mounted at /387/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.130504][ T8876] netlink: 'syz.0.1766': attribute type 1 has an invalid length. [ 296.327289][ T8878] device veth0 entered promiscuous mode [ 296.348662][ T8877] device veth0 left promiscuous mode [ 296.490329][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 296.643866][ T8882] loop2: detected capacity change from 0 to 1024 [ 296.690432][ T8882] EXT4-fs: Ignoring removed i_version option [ 296.752423][ T8882] EXT4-fs (loop2): orphan cleanup on readonly fs [ 296.812389][ T8882] Quota error (device loop2): v2_read_file_info: Free block number 131072 out of range (1, 6). [ 296.914150][ T8882] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 296.980598][ T8882] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 296.998437][ T8882] EXT4-fs error (device loop2): ext4_free_blocks:6220: comm syz.2.1771: Freeing blocks not in datazone - block = 0, count = 4096 [ 297.093276][ T8882] EXT4-fs (loop2): 1 orphan inode deleted [ 297.110533][ T8897] tap0: tun_chr_ioctl cmd 2147767506 [ 297.116096][ T8882] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 297.168762][ T8882] EXT4-fs (loop2): shut down requested (0) [ 297.380029][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 297.580446][ T8910] loop4: detected capacity change from 0 to 1024 [ 297.627352][ T8913] device-mapper: ioctl: Invalid ioctl structure: name c, dev 2 [ 297.681300][ T27] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 297.855730][ T5086] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 297.865205][ T27] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 297.881887][ T27] usb 2-1: config 0 has no interface number 0 [ 297.891821][ T27] usb 2-1: config 0 interface 41 has no altsetting 0 [ 297.914181][ T8920] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 297.934337][ T27] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 297.952891][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.962729][ T27] usb 2-1: Product: syz [ 297.966958][ T27] usb 2-1: Manufacturer: syz [ 297.973844][ T27] usb 2-1: SerialNumber: syz [ 298.035918][ T27] usb 2-1: config 0 descriptor?? [ 298.099968][ T5086] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 298.120191][ T5086] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.161183][ T5086] usb 3-1: Product: syz [ 298.171555][ T5086] usb 3-1: Manufacturer: syz [ 298.176217][ T5086] usb 3-1: SerialNumber: syz [ 298.221833][ T5086] usb 3-1: config 0 descriptor?? [ 298.519314][ T5086] usb 3-1: USB disconnect, device number 17 [ 298.887196][ T27] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 298.917882][ T27] CoreChips: probe of 2-1:0.41 failed with error -71 [ 298.949031][ T27] usb 2-1: USB disconnect, device number 12 [ 299.103598][ T8946] loop4: detected capacity change from 0 to 8 [ 299.112046][ T8946] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 299.148173][ T7249] udevd[7249]: incorrect cramfs checksum on /dev/loop4 [ 299.190951][ T5086] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 299.211860][ T7249] udevd[7249]: incorrect cramfs checksum on /dev/loop4 [ 299.344054][ T8950] loop4: detected capacity change from 0 to 128 [ 299.358953][ T8952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1802'. [ 299.395153][ T5086] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.427266][ T5086] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 299.482309][ T5086] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 299.566071][ T5086] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 299.596122][ T5086] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.626762][ T5086] usb 4-1: Product: syz [ 299.631754][ T5086] usb 4-1: Manufacturer: syz [ 299.636402][ T5086] usb 4-1: SerialNumber: syz [ 299.647285][ T8956] program syz.1.1804 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 299.954427][ T8958] loop4: detected capacity change from 0 to 2048 [ 300.037526][ T8958] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 300.072568][ T8942] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 300.090520][ T8958] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 300.384707][ T8965] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 300.440457][ T8965] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 300.507912][ T5086] ATM dev 0: failed to start ADSL synchronisation: -71 [ 300.526506][ C0] ATM dev 0: usbatm_complete: urb 0xffff88807a1f3c00 failed (-71)! [ 300.534539][ C0] ATM dev 0: usbatm_complete: urb 0xffff88807a1f3800 failed (-71)! [ 300.542551][ C0] ATM dev 0: usbatm_complete: urb 0xffff88807a1f3300 failed (-71)! [ 300.550509][ C0] ATM dev 0: usbatm_complete: urb 0xffff88807a1f3a00 failed (-71)! [ 300.564333][ T5086] usb 4-1: USB disconnect, device number 8 [ 300.625303][ T8967] IPv6: addrconf: prefix option has invalid lifetime [ 300.979022][ T8962] loop1: detected capacity change from 0 to 32768 [ 301.072126][ T4315] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 301.078419][ T8962] ialloc: diAlloc returned -28! [ 301.280971][ T4315] usb 3-1: Using ep0 maxpacket: 8 [ 301.289796][ T4315] usb 3-1: unable to get BOS descriptor or descriptor too short [ 301.330406][ T4315] usb 3-1: config 4 interface 0 has no altsetting 0 [ 301.339543][ T8978] loop4: detected capacity change from 0 to 8192 [ 301.358136][ T4315] usb 3-1: string descriptor 0 read error: -22 [ 301.397646][ T4315] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 301.420964][ T4315] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 301.451080][ T8978] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 301.504462][ T4315] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 301.560356][ T8978] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 301.592684][ T4315] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 301.630819][ T8978] REISERFS (device loop4): using ordered data mode [ 301.644904][ T8978] reiserfs: using flush barriers [ 301.662798][ T4315] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 301.672492][ T8978] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 301.677275][ T8976] loop0: detected capacity change from 0 to 32768 [ 301.705838][ T8970] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 301.723596][ T4315] usb 3-1: media controller created [ 301.775693][ T8978] REISERFS (device loop4): checking transaction log (loop4) [ 301.788682][ T4315] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 301.814543][ T8978] REISERFS (device loop4): Using r5 hash to sort names [ 301.862030][ T8978] REISERFS (device loop4): using 3.5.x disk format [ 301.871509][ T8978] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 301.894212][ T8976] JBD2: Ignoring recovery information on journal [ 301.933395][ T8976] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 301.968750][ T4315] zl10353_read_register: readreg error (reg=127, ret==0) [ 301.984076][ T8976] JBD2: bad block at offset 32 [ 302.005812][ T8976] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 302.085042][ T8976] (syz.0.1813,8976,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=3344, inode=0, rec_len=0, name_len=0 [ 302.163936][ T4315] usb 3-1: USB disconnect, device number 18 [ 302.255659][ T8994] kAFS: Invalid Command on /proc/fs/afs/cells file [ 302.279284][ T4283] ocfs2: Unmounting device (7,0) on (node local) [ 302.290742][ T4312] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 302.492963][ T4312] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 302.514137][ T4312] usb 4-1: config 220 has an invalid descriptor of length 69, skipping remainder of the config [ 302.559080][ T4312] usb 4-1: config 220 has no interface number 2 [ 302.581872][ T4312] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 302.619519][ T4312] usb 4-1: config 220 interface 0 has no altsetting 0 [ 302.637337][ T4312] usb 4-1: config 220 interface 76 has no altsetting 0 [ 302.649183][ T4312] usb 4-1: config 220 interface 1 has no altsetting 0 [ 302.690847][ T4312] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 302.709997][ T4312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.728784][ T4312] usb 4-1: Product: syz [ 302.738953][ T4312] usb 4-1: Manufacturer: syz [ 302.749109][ T4312] usb 4-1: SerialNumber: syz [ 302.950602][ T27] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 302.976538][ T4312] uvcvideo 4-1:220.1: Unknown video format 448b07f5-fe05-ffff-ffff-030000ffffff [ 303.007026][ T4312] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 303.025161][ T4312] usb 4-1: No valid video chain found. [ 303.040677][ T4312] usb 4-1: selecting invalid altsetting 0 [ 303.084627][ T4312] usb 4-1: selecting invalid altsetting 0 [ 303.091947][ T4312] usbtest: probe of 4-1:220.1 failed with error -22 [ 303.102181][ T4312] usb 4-1: USB disconnect, device number 9 [ 303.172867][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.210617][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.230568][ T27] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 303.239799][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.278756][ T27] usb 5-1: config 0 descriptor?? [ 303.589904][ T9002] loop2: detected capacity change from 0 to 40427 [ 303.661718][ T9002] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 303.720665][ T27] arvo 0003:1E7D:30D4.0010: unknown main item tag 0x0 [ 303.727585][ T27] arvo 0003:1E7D:30D4.0010: unknown main item tag 0x0 [ 303.731968][ T9002] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 303.760509][ T27] arvo 0003:1E7D:30D4.0010: unknown main item tag 0x0 [ 303.780594][ T27] arvo 0003:1E7D:30D4.0010: unknown main item tag 0x0 [ 303.793465][ T9002] F2FS-fs (loop2): invalid crc value [ 303.808470][ T27] arvo 0003:1E7D:30D4.0010: unknown main item tag 0x0 [ 303.826005][ T27] arvo 0003:1E7D:30D4.0010: unknown main item tag 0x0 [ 303.838563][ T9002] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 303.843461][ T27] arvo 0003:1E7D:30D4.0010: unknown main item tag 0x0 [ 303.891031][ T9011] loop1: detected capacity change from 0 to 32768 [ 303.901524][ T27] arvo 0003:1E7D:30D4.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 303.931854][ T27] arvo 0003:1E7D:30D4.0010: couldn't init struct arvo_device [ 303.955786][ T27] arvo 0003:1E7D:30D4.0010: couldn't install keyboard [ 303.966817][ T9011] XFS (loop1): Mounting V5 Filesystem [ 303.973547][ T27] arvo: probe of 0003:1E7D:30D4.0010 failed with error -71 [ 304.011803][ T27] usb 5-1: USB disconnect, device number 10 [ 304.151822][ T9011] XFS (loop1): Ending clean mount [ 304.209345][ T9027] fido_id[9027]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 304.292600][ T9002] F2FS-fs (loop2): Start checkpoint disabled! [ 304.377951][ T4273] XFS (loop1): Unmounting Filesystem [ 304.410901][ T9002] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 304.418000][ T9002] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 304.549631][ T9033] loop3: detected capacity change from 0 to 1024 [ 304.640394][ T66] kworker/u4:4: attempt to access beyond end of device [ 304.640394][ T66] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 305.178755][ T9043] loop4: detected capacity change from 0 to 512 [ 305.215988][ T9043] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 305.275854][ T9043] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e028, mo2=0002] [ 305.301700][ T9043] System zones: 1-12 [ 305.306805][ T9043] EXT4-fs (loop4): orphan cleanup on readonly fs [ 305.329458][ T9043] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1837: bg 0: block 361: padding at end of block bitmap is not set [ 305.452765][ T9043] EXT4-fs (loop4): Remounting filesystem read-only [ 305.459349][ T9043] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 305.494127][ T9050] loop3: detected capacity change from 0 to 1024 [ 305.555745][ T9043] EXT4-fs (loop4): Remounting filesystem read-only [ 305.592284][ T9043] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.1837: attempt to clear invalid blocks 33619980 len 1 [ 305.695911][ T9043] EXT4-fs (loop4): Remounting filesystem read-only [ 305.720850][ T9043] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1837: invalid indirect mapped block 1811939328 (level 0) [ 305.756966][ T9043] EXT4-fs (loop4): Remounting filesystem read-only [ 305.774261][ T9043] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1837: invalid indirect mapped block 2 (level 2) [ 305.820644][ T9043] EXT4-fs (loop4): Remounting filesystem read-only [ 305.827492][ T9043] EXT4-fs (loop4): 1 truncate cleaned up [ 305.839277][ T9043] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 305.897617][ T9043] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #2: block 5: comm syz.4.1837: lblock 0 mapped to illegal pblock 5 (length 1) [ 305.940443][ T6828] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 305.969928][ T9043] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.1837: error -117 reading directory block [ 306.010281][ T9065] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #2: block 5: comm syz.4.1837: lblock 0 mapped to illegal pblock 5 (length 1) [ 306.057767][ T9065] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.1837: error -117 reading directory block [ 306.145007][ T6828] usb 3-1: Using ep0 maxpacket: 32 [ 306.162907][ T6828] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 306.182049][ T6828] usb 3-1: config 0 has no interface number 0 [ 306.201228][ T6828] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 306.218108][ T6828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.248369][ T6828] usb 3-1: Product: syz [ 306.256651][ T6828] usb 3-1: Manufacturer: syz [ 306.268045][ T6828] usb 3-1: SerialNumber: syz [ 306.273432][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 306.282685][ T6828] usb 3-1: config 0 descriptor?? [ 306.303779][ T6828] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 306.513323][ T6828] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 306.571312][ T6828] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 306.963748][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 306.974298][ T6828] usb 3-1: USB disconnect, device number 19 [ 306.998220][ T6828] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 307.078647][ T6828] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 307.107849][ T6828] quatech2 3-1:0.51: device disconnected [ 307.361291][ T9092] loop1: detected capacity change from 0 to 128 [ 307.435729][ T9092] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 307.470327][ T9092] ext4 filesystem being mounted at /347/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 307.756454][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 308.071200][ T9111] device erspan0 entered promiscuous mode [ 308.096465][ T9112] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.103743][ T9112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.111453][ T9112] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.118611][ T9112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.232720][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 308.400217][ T9122] loop3: detected capacity change from 0 to 64 [ 308.607692][ T4315] hid-generic 0000:0000:0001.0011: unknown main item tag 0x0 [ 308.640005][ T4315] hid-generic 0000:0000:0001.0011: unknown main item tag 0x0 [ 308.671166][ T4315] hid-generic 0000:0000:0001.0011: unknown main item tag 0x0 [ 308.719993][ T4315] hid-generic 0000:0000:0001.0011: unknown main item tag 0x0 [ 308.740965][ T4315] hid-generic 0000:0000:0001.0011: unknown main item tag 0x0 [ 308.768989][ T4315] hid-generic 0000:0000:0001.0011: unknown main item tag 0x0 [ 308.799518][ T4315] hid-generic 0000:0000:0001.0011: unknown main item tag 0x0 [ 308.829994][ T4315] hid-generic 0000:0000:0001.0011: unknown main item tag 0x0 [ 308.896143][ T4315] hid-generic 0000:0000:0001.0011: hidraw0: HID v0.10 Device [syz0] on syz1 [ 309.256978][ T9119] loop4: detected capacity change from 0 to 32768 [ 309.387188][ T9119] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 309.405341][ T9151] loop0: detected capacity change from 0 to 256 [ 309.436919][ T9142] fido_id[9142]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 309.655589][ T26] audit: type=1800 audit(1787499958.597:84): pid=9119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1865" name="file2" dev="loop4" ino=17058 res=0 errno=0 [ 309.883057][ T4284] ocfs2: Unmounting device (7,4) on (node local) [ 310.077680][ T9168] loop1: detected capacity change from 0 to 512 [ 310.265439][ T9168] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.1883: corrupted inode contents [ 310.344233][ T9168] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 310.390511][ T9168] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.1883: corrupted inode contents [ 310.413512][ T9168] EXT4-fs error (device loop1): ext4_evict_inode:329: inode #15: comm syz.1.1883: mark_inode_dirty error [ 310.468211][ T9168] EXT4-fs (loop1): 1 orphan inode deleted [ 310.481084][ T9168] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 310.888924][ T9184] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1886'. [ 310.910106][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 310.936454][ T9185] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1886'. [ 311.305152][ T9200] program syz.2.1890 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 311.589773][ T6827] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 311.747556][ T6829] kernel write not supported for file /input/mice (pid: 6829 comm: kworker/1:10) [ 311.789833][ T6827] usb 1-1: Using ep0 maxpacket: 32 [ 311.800303][ T6827] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 311.838037][ T6827] usb 1-1: config 0 has no interface number 0 [ 311.857836][ T6827] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 311.908700][ T6827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.929038][ T6827] usb 1-1: Product: syz [ 311.939215][ T6827] usb 1-1: Manufacturer: syz [ 312.006683][ T6827] usb 1-1: SerialNumber: syz [ 312.037926][ T6827] usb 1-1: config 0 descriptor?? [ 312.084165][ T6827] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 312.287251][ T6827] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 312.341102][ T6827] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 312.664168][ T9233] loop4: detected capacity change from 0 to 512 [ 312.706427][ T9233] EXT4-fs (loop4): Test dummy encryption mode enabled [ 312.716950][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 312.729028][ T6829] usb 1-1: USB disconnect, device number 10 [ 312.749748][ T9233] EXT4-fs (loop4): bad geometry: block count 4294967294 exceeds size of device (256 blocks) [ 312.752034][ T6829] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 312.848605][ T6829] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 312.895533][ T6829] quatech2 1-1:0.51: device disconnected [ 312.989525][ T6827] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 313.181776][ T6827] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 313.199688][ T5086] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 313.210503][ T6827] usb 4-1: config 0 has no interface number 0 [ 313.216666][ T6827] usb 4-1: config 0 interface 41 has no altsetting 0 [ 313.273447][ T6827] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 313.293242][ T6827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.323784][ T6827] usb 4-1: Product: syz [ 313.328002][ T6827] usb 4-1: Manufacturer: syz [ 313.349677][ T6827] usb 4-1: SerialNumber: syz [ 313.373846][ T6827] usb 4-1: config 0 descriptor?? [ 313.391897][ T5086] usb 5-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 313.419619][ T5086] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 313.471166][ T5086] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 313.529556][ T5086] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 313.537749][ T5086] usb 5-1: SerialNumber: syz [ 313.670884][ T9248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1907'. [ 313.821569][ T5086] usb 5-1: 0:2 : does not exist [ 313.831932][ T9250] loop0: detected capacity change from 0 to 64 [ 313.924725][ T5086] usb 5-1: USB disconnect, device number 11 [ 314.186131][ T9250] overlayfs: upper fs needs to support d_type. [ 314.201268][ T4347] udevd[4347]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.259677][ T6827] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 314.299784][ T6827] CoreChips: probe of 4-1:0.41 failed with error -71 [ 314.318346][ T6827] usb 4-1: USB disconnect, device number 10 [ 314.347471][ T9250] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 314.388391][ T9250] overlayfs: failed to set xattr on upper [ 314.399908][ T9250] overlayfs: ...falling back to index=off,metacopy=off. [ 314.425671][ T9264] loop1: detected capacity change from 0 to 256 [ 314.473986][ T9264] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 314.489545][ T5086] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 314.497482][ T9250] Trying to free block not in datazone [ 314.689473][ T5086] usb 3-1: Using ep0 maxpacket: 16 [ 314.697807][ T5086] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.779377][ T5086] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.807015][ T5086] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 314.829315][ T5086] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 314.842237][ T5086] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.871786][ T5086] usb 3-1: config 0 descriptor?? [ 315.024849][ T9273] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 315.051575][ T9273] syzkaller1: group set to 0 [ 315.297496][ T5086] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0012/input/input26 [ 315.409747][ T5086] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 315.456836][ T9274] loop0: detected capacity change from 0 to 8192 [ 315.530461][ T5086] usb 3-1: USB disconnect, device number 20 [ 315.566121][ T9287] loop1: detected capacity change from 0 to 512 [ 315.585738][ T9290] loop3: detected capacity change from 0 to 512 [ 315.599394][ T9274] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 315.640456][ T9274] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 315.651608][ T9274] REISERFS (device loop0): using ordered data mode [ 315.665770][ T9274] reiserfs: using flush barriers [ 315.672638][ T9274] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 315.690395][ T9274] REISERFS (device loop0): checking transaction log (loop0) [ 315.701370][ T9274] REISERFS (device loop0): Using r5 hash to sort names [ 315.708286][ T9274] REISERFS (device loop0): using 3.5.x disk format [ 315.720206][ T9274] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 315.764849][ T9290] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 315.765058][ T9287] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 315.789414][ T9290] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.864551][ T9287] ext4 filesystem being mounted at /361/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.917152][ T9290] EXT4-fs (loop3): shut down requested (2) [ 316.122752][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 316.164533][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 316.188348][ T9293] fido_id[9293]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 316.421141][ T9304] loop2: detected capacity change from 0 to 512 [ 316.520430][ T9304] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 316.560121][ C0] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000001) at rIP: 0xffffffff813292c2 (__mcheck_cpu_init_clear_banks+0x102/0x1e0) [ 316.575526][ C0] Call Trace: [ 316.578833][ C0] [ 316.581713][ C0] mce_cpu_restart+0xca/0x1a0 [ 316.586414][ C0] __flush_smp_call_function_queue+0x2f0/0xd50 [ 316.592597][ C0] ? mce_restart+0x1a0/0x1a0 [ 316.597211][ C0] __sysvec_call_function_single+0xba/0x350 [ 316.603133][ C0] sysvec_call_function_single+0x98/0xc0 [ 316.608788][ C0] [ 316.611735][ C0] [ 316.614683][ C0] asm_sysvec_call_function_single+0x16/0x20 [ 316.620694][ C0] RIP: 0010:seqcount_lockdep_reader_access+0x144/0x190 [ 316.627579][ C0] Code: 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 42 41 f7 c5 00 02 00 00 74 01 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 27 00 00 00 00 43 c7 44 27 08 00 00 00 00 65 48 8b 04 25 [ 316.647211][ C0] RSP: 0018:ffffc900049367c0 EFLAGS: 00000206 [ 316.653302][ C0] RAX: dffffc0000000004 RBX: ffff88813fffa7c8 RCX: d72f7713a3b5f600 [ 316.661292][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1820 RDI: ffffffff8adf6120 [ 316.669282][ C0] RBP: ffffc90004936870 R08: ffffffff90b122e7 R09: 1ffffffff216245c [ 316.677284][ C0] R10: dffffc0000000000 R11: fffffbfff216245d R12: dffffc0000000000 [ 316.685277][ C0] R13: 0000000000000a02 R14: ffffffff81c8d099 R15: 1ffff92000926cf8 [ 316.693274][ C0] ? bad_range+0x79/0x2c0 [ 316.697640][ C0] ? bad_range+0x2c0/0x2c0 [ 316.702077][ C0] ? get_page_from_freelist+0x73a/0x2180 [ 316.707742][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 316.712794][ C0] ? do_raw_spin_trylock+0xae/0x190 [ 316.718012][ C0] bad_range+0x79/0x2c0 [ 316.722200][ C0] get_page_from_freelist+0x2052/0x2180 [ 316.727801][ C0] ? __alloc_pages+0x130/0x4f0 [ 316.732621][ C0] __alloc_pages+0x1ec/0x4f0 [ 316.737238][ C0] ? zone_statistics+0x170/0x170 [ 316.742207][ C0] ? __lock_acquire+0x1465/0x7c40 [ 316.747261][ C0] ? verify_lock_unused+0x140/0x140 [ 316.752489][ C0] __folio_alloc+0xe/0x30 [ 316.756846][ C0] vma_alloc_folio+0x499/0x900 [ 316.761643][ C0] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 316.767479][ C0] shmem_alloc_and_acct_folio+0x463/0xbd0 [ 316.773230][ C0] ? shmem_replace_folio+0xdc0/0xdc0 [ 316.778558][ C0] ? xas_load+0x127/0x140 [ 316.782912][ C0] ? __filemap_get_folio+0x10f/0xde0 [ 316.788221][ C0] ? __filemap_get_folio+0xb43/0xde0 [ 316.793528][ C0] ? __filemap_get_folio+0x10f/0xde0 [ 316.798837][ C0] ? page_cache_prev_miss+0x380/0x380 [ 316.804269][ C0] ? mark_lock+0x94/0x320 [ 316.808628][ C0] shmem_get_folio_gfp+0x1439/0x35e0 [ 316.813959][ C0] shmem_write_begin+0xee/0x3f0 [ 316.818836][ C0] generic_perform_write+0x2fa/0x5c0 [ 316.824181][ C0] ? generic_file_direct_write+0x330/0x330 [ 316.830018][ C0] ? __file_remove_privs+0x5f0/0x5f0 [ 316.835329][ C0] ? rwsem_write_trylock+0x135/0x1c0 [ 316.840643][ C0] ? clear_nonspinnable+0x60/0x60 [ 316.845694][ C0] ? generic_write_checks_count+0x363/0x440 [ 316.851881][ C0] __generic_file_write_iter+0x148/0x2a0 [ 316.857543][ C0] generic_file_write_iter+0xab/0x2e0 [ 316.862961][ C0] __kernel_write_iter+0x298/0x690 [ 316.868105][ C0] ? vfs_read+0x960/0x960 [ 316.872459][ C0] ? _raw_spin_unlock+0x24/0x40 [ 316.877338][ C0] ? generic_file_llseek_size+0x344/0x390 [ 316.883094][ C0] ? iov_iter_bvec+0x4a/0x1f0 [ 316.887815][ C0] dump_user_range+0x40a/0x840 [ 316.892616][ C0] ? dump_skip+0x40/0x40 [ 316.896891][ C0] ? dump_emit+0x74/0xe0 [ 316.901171][ C0] ? dump_emit+0xa2/0xe0 [ 316.905435][ C0] ? elf_core_dump+0x2aa9/0x3630 [ 316.910393][ C0] elf_core_dump+0x30ca/0x3630 [ 316.915190][ C0] ? load_elf_binary+0x2820/0x2820 [ 316.920330][ C0] ? dump_vma_snapshot+0xaea/0xe40 [ 316.925471][ C0] ? verify_lock_unused+0x140/0x140 [ 316.930702][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 316.935748][ C0] ? mas_next_entry+0xe03/0xe90 [ 316.940644][ C0] ? rcu_read_lock_any_held+0xb0/0x130 [ 316.946130][ C0] ? 0xffffffffff600000 [ 316.950304][ C0] ? getname_kernel+0x142/0x2f0 [ 316.955279][ C0] do_coredump+0x16c1/0x2480 [ 316.959908][ C0] ? nfs_stat_to_errno+0x170/0x170 [ 316.965054][ C0] ? lock_chain_count+0x20/0x20 [ 316.969931][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 316.975154][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 316.980378][ C0] get_signal+0x1093/0x1340 [ 316.984922][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 316.990934][ C0] arch_do_signal_or_restart+0xc4/0x1310 [ 316.996593][ C0] ? __send_signal_locked+0xb38/0xde0 [ 317.001992][ C0] ? get_sigframe_size+0x10/0x10 [ 317.006968][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 317.012995][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 317.018479][ C0] exit_to_user_mode_loop+0x70/0x110 [ 317.023791][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 317.029372][ C0] irqentry_exit_to_user_mode+0x5/0x30 [ 317.034856][ C0] exc_page_fault+0x88/0x100 [ 317.039492][ C0] asm_exc_page_fault+0x22/0x30 [ 317.044367][ C0] RIP: 0033:0x7f986419e0e1 [ 317.048803][ C0] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 317.068438][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 317.074532][ C0] RAX: 0000000000000000 RBX: 00007f9864425fa0 RCX: 00007f986419e0d9 [ 317.082523][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 317.090512][ C0] RBP: 00007f9864235024 R08: 0000000000000000 R09: 0000000000000000 [ 317.098523][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 317.106519][ C0] R13: 00007f9864426038 R14: 00007f9864425fa0 R15: 00007ffed2875418 [ 317.114519][ C0] [ 317.122409][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.216473][ T9304] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.1923: bad orphan inode 131083 [ 317.281294][ T9304] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 317.353545][ T26] audit: type=1800 audit(1787499966.297:85): pid=9304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1923" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 317.772508][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 317.865482][ T9322] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1928'. [ 318.542493][ T9315] loop4: detected capacity change from 0 to 32768 [ 318.598672][ T9315] JBD2: Ignoring recovery information on journal [ 318.739256][ T9315] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 318.862456][ T4284] ocfs2: Unmounting device (7,4) on (node local) [ 319.216662][ T9363] loop1: detected capacity change from 0 to 512 [ 319.266625][ T9363] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 319.397855][ T9363] EXT4-fs (loop1): 1 truncate cleaned up [ 319.538961][ T9363] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 319.645281][ T9363] fscrypt (loop1, inode 18): Direct key flag not allowed with different contents and filenames modes [ 319.730085][ T9380] loop2: detected capacity change from 0 to 1024 [ 319.926751][ T26] audit: type=1800 audit(1787500288.867:86): pid=9380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1949" name="file0" dev="loop2" ino=27 res=0 errno=0 [ 319.970208][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 320.720832][ T9412] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 321.201572][ T9431] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 512 [ 321.351509][ T9437] loop2: detected capacity change from 0 to 64 [ 321.437935][ T9437] overlayfs: upper fs needs to support d_type. [ 321.457298][ T9437] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 321.528324][ T9437] overlayfs: failed to set xattr on upper [ 321.595722][ T9437] overlayfs: ...falling back to index=off,metacopy=off. [ 321.651464][ T9437] Trying to free block not in datazone [ 322.281561][ T9467] device netdevsim0 entered promiscuous mode [ 322.310714][ T9467] device netdevsim0 left promiscuous mode [ 323.033585][ T9469] loop3: detected capacity change from 0 to 32768 [ 323.077918][ T9469] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.1980 (9469) [ 323.141065][ T9469] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 323.198251][ T9469] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 323.244583][ T9469] BTRFS info (device loop3): setting nodatasum [ 323.264360][ T9469] BTRFS info (device loop3): using free space tree [ 323.707866][ T9469] BTRFS info (device loop3): enabling ssd optimizations [ 323.878629][ T6827] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 324.043677][ T4277] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 324.112585][ T6827] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.154835][ T6827] usb 3-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 324.235870][ T6827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 324.268392][ T6827] usb 3-1: Product: syz [ 324.272643][ T6827] usb 3-1: Manufacturer: syz [ 324.322361][ T6827] navman 3-1:1.0: navman converter detected [ 324.344256][ T6827] usb 3-1: navman converter now attached to ttyUSB0 [ 324.564012][ T6827] usb 3-1: USB disconnect, device number 21 [ 324.589803][ T6827] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 324.618852][ T6827] navman 3-1:1.0: device disconnected [ 324.911463][ T9538] loop1: detected capacity change from 0 to 128 [ 324.955831][ T9538] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 325.004420][ T9538] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 325.182235][ T9543] loop0: detected capacity change from 0 to 4096 [ 325.255241][ T9543] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 325.313630][ T6829] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 325.414395][ T9551] ntfs3: loop0: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size [ 325.442629][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.515975][ T6829] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 325.535700][ T6829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.572440][ T6829] usb 4-1: config 0 descriptor?? [ 325.598945][ T6829] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 326.212218][ T9561] netlink: 1060 bytes leftover after parsing attributes in process `syz.0.2011'. [ 326.220765][ T6829] gspca_stv06xx: vv6410 sensor detected [ 326.279019][ T9561] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 326.494908][ T6829] STV06xx: probe of 4-1:0.0 failed with error -71 [ 326.501187][ T6829] usb 4-1: USB disconnect, device number 11 [ 326.984503][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.005575][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.014251][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.021918][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.037117][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.056652][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.076825][ T9583] loop2: detected capacity change from 0 to 64 [ 327.083207][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.091074][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.108243][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.116097][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.133410][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.151571][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.188095][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.195658][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.225669][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.245900][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.276188][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.295347][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.325526][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.338618][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.356541][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.374646][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.391908][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.406289][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.424462][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.442615][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.458317][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.465895][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.477568][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.486081][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.493963][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.503055][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.511068][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.519330][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.526852][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.534866][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.544424][ T5084] hid-generic 0005:0010:10000.0013: unknown main item tag 0x0 [ 327.553635][ T5084] hid-generic 0005:0010:10000.0013: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on syz0 [ 327.694305][ T9599] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 327.858385][ T5084] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 327.935489][ T9604] mmap: syz.2.2033 (9604) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 328.070232][ T5084] usb 1-1: unable to get BOS descriptor or descriptor too short [ 328.108240][ T5084] usb 1-1: no configurations [ 328.124866][ T5084] usb 1-1: can't read configurations, error -22 [ 328.379551][ T9611] fido_id[9611]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 329.043011][ T9642] tipc: New replicast peer: 172.30.0.5 [ 329.089232][ T9642] tipc: Enabled bearer , priority 10 [ 329.096285][ T9646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2048'. [ 329.146202][ T9646] tipc: Disabling bearer [ 329.189375][ T9645] loop0: detected capacity change from 0 to 4096 [ 329.279224][ T9645] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 329.389278][ T26] audit: type=1800 audit(1787500298.317:87): pid=9645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2049" name="file0" dev="loop0" ino=0 res=0 errno=0 [ 329.409588][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.625195][ T9659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2055'. [ 329.673593][ T9660] loop3: detected capacity change from 0 to 2048 [ 329.718332][ T9660] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 329.795266][ T9638] loop2: detected capacity change from 0 to 32768 [ 329.821216][ T9638] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2046 (9638) [ 329.853544][ T9663] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 329.943628][ T9666] netlink: 'syz.1.2057': attribute type 2 has an invalid length. [ 329.957551][ T9638] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 330.008139][ T9666] netlink: 'syz.1.2057': attribute type 1 has an invalid length. [ 330.027791][ T9638] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 330.036627][ T9638] BTRFS info (device loop2): using free space tree [ 330.043497][ T9666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2057'. [ 330.076765][ T9666] netlink: 'syz.1.2057': attribute type 2 has an invalid length. [ 330.170833][ T9666] netlink: 'syz.1.2057': attribute type 1 has an invalid length. [ 330.202466][ T9666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2057'. [ 330.268826][ T9666] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 330.363244][ T9638] BTRFS info (device loop2): enabling ssd optimizations [ 330.581349][ T9696] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2063'. [ 330.774850][ T4281] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 331.185767][ T9693] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 331.345374][ T4312] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 331.557698][ T4312] usb 5-1: Using ep0 maxpacket: 16 [ 331.565527][ T4312] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 331.619770][ T4312] usb 5-1: config 0 has no interface number 0 [ 331.644786][ T4312] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 331.684214][ T4312] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 331.728026][ T4312] usb 5-1: config 0 interface 41 has no altsetting 0 [ 331.749457][ T4312] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 331.787659][ T4312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.821526][ T4312] usb 5-1: Product: syz [ 331.835267][ T4312] usb 5-1: Manufacturer: syz [ 331.853542][ T4312] usb 5-1: SerialNumber: syz [ 331.869773][ T4312] usb 5-1: config 0 descriptor?? [ 331.883440][ T9704] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 331.896229][ T9704] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 332.009926][ T9719] loop3: detected capacity change from 0 to 2048 [ 332.084932][ T9719] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 332.140800][ T9704] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 332.146270][ T9719] NILFS (loop3): mounting unchecked fs [ 332.187935][ T9704] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 332.221562][ T9719] NILFS (loop3): recovery complete [ 332.233398][ T9725] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 332.287747][ T9709] zswap: compressor _ not available [ 332.864396][ T9734] i2c i2c-0: new_device: Invalid device name [ 332.961657][ T4312] sr9700 5-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.4-1, CoreChip SR9700 USB Ethernet, 2a:24:af:11:4e:b8 [ 332.996687][ T4312] usb 5-1: USB disconnect, device number 12 [ 333.023997][ T4312] sr9700 5-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.4-1, CoreChip SR9700 USB Ethernet [ 333.680814][ T9749] loop4: detected capacity change from 0 to 164 [ 333.732872][ T9750] loop2: detected capacity change from 0 to 2048 [ 333.814620][ T9754] loop0: detected capacity change from 0 to 512 [ 333.829082][ T9755] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 333.845803][ T9749] rock: directory entry would overflow storage [ 333.872220][ T9749] rock: sig=0x5252, size=5, remaining=3 [ 333.936877][ T9754] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 334.000498][ T9754] ext4 filesystem being mounted at /429/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 334.297640][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 335.197384][ T27] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 335.310256][ T9794] loop1: detected capacity change from 0 to 4096 [ 335.387326][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 335.397945][ T27] usb 3-1: config 8 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.419514][ T27] usb 3-1: config 8 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.446117][ T9794] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 335.472484][ T27] usb 3-1: config 8 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 335.532675][ T27] usb 3-1: config 8 interface 0 has no altsetting 0 [ 335.545706][ T26] audit: type=1800 audit(1787500304.487:88): pid=9794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2102" name="file0" dev="loop1" ino=0 res=0 errno=0 [ 335.554375][ T27] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 335.606734][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.917718][ T9810] loop3: detected capacity change from 0 to 512 [ 336.021983][ T9810] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 336.030558][ T9810] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 336.055654][ T9810] EXT4-fs (loop3): 1 truncate cleaned up [ 336.061861][ T9810] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 336.065402][ T27] elan 0003:04F3:074D.0014: failed to start in urb: -90 [ 336.112132][ T9810] EXT4-fs (loop3): shut down requested (1) [ 336.152835][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 336.199004][ T27] input: HID 04f3:074d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.0/0003:04F3:074D.0014/input/input30 [ 336.258464][ T27] elan 0003:04F3:074D.0014: input,hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.2-1/input0 [ 336.333413][ T27] usb 3-1: USB disconnect, device number 22 [ 336.566173][ T9827] loop3: detected capacity change from 0 to 16 [ 336.622435][ T9827] erofs: (device loop3): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 336.662990][ T9823] fido_id[9823]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 336.687604][ T9827] erofs: (device loop3): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 336.761611][ T9827] erofs: (device loop3): mounted with root inode @ nid 36. [ 336.833114][ T9827] syz.3.2114: attempt to access beyond end of device [ 336.833114][ T9827] loop3: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 336.874249][ T9827] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 336.886687][ T9830] syz.3.2114: attempt to access beyond end of device [ 336.886687][ T9830] loop3: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 336.963214][ T9832] loop0: detected capacity change from 0 to 512 [ 337.012492][ T9832] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 337.056617][ T9818] loop4: detected capacity change from 0 to 40427 [ 337.091156][ T9818] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 337.099842][ T9818] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 337.118972][ T9818] F2FS-fs (loop4): invalid crc value [ 337.176783][ T9832] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 337.235981][ T9818] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 337.253776][ T9832] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.2116: Corrupt directory, running e2fsck is recommended [ 337.335682][ T9832] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 337.390538][ T9841] "syz.3.2118" (9841) uses obsolete ecb(arc4) skcipher [ 337.396080][ T9832] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.2116: corrupted in-inode xattr [ 337.453099][ T9832] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.2116: couldn't read orphan inode 15 (err -117) [ 337.500200][ T9832] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 337.515937][ T9818] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 337.545100][ T9818] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 337.834075][ T4284] syz-executor: attempt to access beyond end of device [ 337.834075][ T4284] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 337.928080][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 338.400053][ T5084] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 338.428566][ T9859] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2128'. [ 338.447539][ T9859] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2128'. [ 338.474755][ T9859] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22) [ 338.591397][ T9849] loop2: detected capacity change from 0 to 32768 [ 338.599612][ T9849] gfs2: Invalid block size shift [ 338.619701][ T5084] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.651572][ T5084] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 338.696993][ T5084] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 338.716831][ T5084] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 338.746923][ T5084] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 338.766568][ T5084] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.806955][ T7249] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 338.876116][ T9853] loop0: detected capacity change from 0 to 32768 [ 339.221977][ T5084] gud 2-1:1.0: Unexpected status OK for failed transfer [ 339.243075][ T5084] gud: probe of 2-1:1.0 failed with error -32 [ 339.377635][ T9871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2134'. [ 339.434487][ T5084] usb 2-1: USB disconnect, device number 13 [ 339.885488][ T9887] loop7: detected capacity change from 0 to 7 [ 339.910182][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 339.935526][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.944785][ C0] buffer_io_error: 8 callbacks suppressed [ 339.944798][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 340.025766][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 340.035064][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 340.099759][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 340.109058][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 340.119092][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 340.128375][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 340.144049][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 340.153319][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 340.411633][ T9900] autofs4:pid:9900:autofs_fill_super: pipe file descriptor does not contain proper ops [ 340.481245][ T5084] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 340.488529][ T9903] loop0: detected capacity change from 0 to 512 [ 340.584302][ T9903] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 340.661969][ T9903] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.2149: invalid indirect mapped block 4294967295 (level 0) [ 340.679190][ T5084] usb 2-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 340.696698][ T5084] usb 2-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.707073][ T5084] usb 2-1: config 2 interface 0 has no altsetting 0 [ 340.713738][ T5084] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 340.723347][ T5084] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.758184][ T9907] loop4: detected capacity change from 0 to 2048 [ 340.780812][ T9903] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.2149: invalid indirect mapped block 4294967295 (level 1) [ 340.799816][ T9903] EXT4-fs (loop0): 1 orphan inode deleted [ 340.806676][ T9903] EXT4-fs (loop0): 1 truncate cleaned up [ 340.812657][ T9903] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 340.826740][ T9907] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 340.836386][ T9907] NILFS (loop4): mounting unchecked fs [ 340.856880][ T9903] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.2149: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 340.983112][ T9907] NILFS (loop4): recovery complete [ 341.035700][ T4347] udevd[4347]: incorrect nilfs2 checksum on /dev/loop4 [ 341.046869][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 341.053195][ T9910] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 341.149214][ T5084] elo 0003:04E7:0009.0015: unknown main item tag 0x0 [ 341.177079][ T5084] elo 0003:04E7:0009.0015: unknown main item tag 0x0 [ 341.183839][ T5084] elo 0003:04E7:0009.0015: item fetching failed at offset 4/5 [ 341.247174][ T5084] elo 0003:04E7:0009.0015: parse failed [ 341.273530][ T5084] elo: probe of 0003:04E7:0009.0015 failed with error -22 [ 341.409581][ T14] usb 2-1: USB disconnect, device number 14 [ 341.699840][ T9905] loop3: detected capacity change from 0 to 40427 [ 341.712520][ T9920] MTRR 1 not used [ 341.733651][ T9905] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 341.754435][ T9905] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 341.783213][ T9905] F2FS-fs (loop3): invalid crc value [ 341.796912][ T5084] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 341.856944][ T9905] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 341.881763][ T9925] loop4: detected capacity change from 0 to 512 [ 341.982629][ T9925] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 341.997905][ T5084] usb 3-1: Using ep0 maxpacket: 32 [ 342.014886][ T5084] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 342.026668][ T9925] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 342.061997][ T9925] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2157: Corrupt directory, running e2fsck is recommended [ 342.080439][ T5084] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.114431][ T5084] usb 3-1: Product: syz [ 342.133138][ T5084] usb 3-1: Manufacturer: syz [ 342.143545][ T9925] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 342.165435][ T5084] usb 3-1: SerialNumber: syz [ 342.175604][ T9905] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 342.183578][ T5084] usb 3-1: config 0 descriptor?? [ 342.193665][ T9905] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 342.200435][ T9925] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.2157: corrupted in-inode xattr [ 342.224192][ T9925] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.2157: couldn't read orphan inode 15 (err -117) [ 342.287170][ T9925] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 342.548998][ T4277] syz-executor: attempt to access beyond end of device [ 342.548998][ T4277] loop3: rw=2049, sector=40960, nr_sectors = 40 limit=40427 [ 342.659128][ T5084] airspy 3-1:0.0: Board ID: 00 [ 342.670535][ T5084] airspy 3-1:0.0: Firmware version: [ 342.817902][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 342.865689][ T5084] airspy 3-1:0.0: usb_control_msg() failed -71 request 11 [ 342.913722][ T5084] airspy 3-1:0.0: Registered as swradio24 [ 342.960640][ T5084] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 343.016653][ T5084] usb 3-1: USB disconnect, device number 23 [ 343.055825][ T9940] loop4: detected capacity change from 0 to 512 [ 343.214512][ T9940] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 343.261753][ T9940] ext4 filesystem being mounted at /474/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.438459][ T9940] EXT4-fs error (device loop4): ext4_get_first_dir_block:3583: inode #12: comm syz.4.2163: Directory hole found for htree leaf block 0 [ 343.470721][ T9949] loop0: detected capacity change from 0 to 512 [ 343.544197][ T9949] EXT4-fs error (device loop0): __ext4_iget:5102: inode #17: block 1803188595: comm syz.0.2166: invalid block [ 343.562451][ T9951] loop1: detected capacity change from 0 to 1024 [ 343.572232][ T9940] EXT4-fs (loop4): Remounting filesystem read-only [ 343.605001][ T9949] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.2166: couldn't read orphan inode 17 (err -117) [ 343.617941][ T9949] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 343.683467][ T9951] hfsplus: invalid length 32517 has been corrected to 255 [ 343.687961][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 343.785692][ T9951] hfsplus: invalid length 32517 has been corrected to 255 [ 343.843340][ T9957] hfsplus: invalid length 32517 has been corrected to 255 [ 343.896366][ T4312] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 343.954285][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 344.008629][ T66] hfsplus: b-tree write err: -5, ino 2 [ 344.014474][ T66] hfsplus: b-tree write err: -5, ino 4 [ 344.090035][ T4312] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 344.107422][ T4312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.127864][ T4312] usb 4-1: config 0 descriptor?? [ 344.165878][ T4312] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 344.506578][ T6827] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 344.515508][ T9974] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2176'. [ 344.543996][ T4312] cpia1 4-1:0.0: unexpected state after lo power cmd: 01 [ 344.646527][ T27] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 344.709355][ T6827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.733317][ T6827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.760760][ T6827] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 344.770912][ T6827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.797610][ T6827] usb 1-1: config 0 descriptor?? [ 344.846680][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 344.855702][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 344.870537][ T27] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 344.880603][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.917767][ T27] usb 3-1: config 0 descriptor?? [ 344.948044][ T4312] gspca_cpia1: usb_control_msg 02, error -71 [ 344.987426][ T4312] gspca_cpia1: usb_control_msg 05, error -71 [ 344.993651][ T4312] cpia1 4-1:0.0: unexpected systemstate: 01 [ 345.017950][ T4312] usb 4-1: USB disconnect, device number 12 [ 345.056351][ T5084] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 345.137007][ T27] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 345.256457][ T5084] usb 2-1: Using ep0 maxpacket: 32 [ 345.264694][ T5084] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 345.283499][ T5084] usb 2-1: config 0 has no interface number 0 [ 345.293948][ T5084] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 345.314253][ T5084] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.342459][ T5084] usb 2-1: Product: syz [ 345.357580][ T5084] usb 2-1: Manufacturer: syz [ 345.362422][ T5084] usb 2-1: SerialNumber: syz [ 345.381553][ T4312] usb 3-1: USB disconnect, device number 24 [ 345.401146][ T5084] usb 2-1: config 0 descriptor?? [ 345.420977][ T5084] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 345.513703][ T9986] tap0: tun_chr_ioctl cmd 1074812118 [ 345.626903][ T6827] hid-led: probe of 0003:27B8:01ED.0016 failed with error -71 [ 345.646629][ T6827] usb 1-1: USB disconnect, device number 13 [ 345.653608][ T5084] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 345.692879][ T5084] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 345.887518][ T9990] device gretap0 entered promiscuous mode [ 345.924057][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 37 [ 345.961373][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2184'. [ 345.996701][ T9990] device gretap0 left promiscuous mode [ 346.126773][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 346.135881][ T4316] usb 2-1: USB disconnect, device number 15 [ 346.157916][ T4316] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 346.216633][ T4316] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 346.257355][ T4316] quatech2 2-1:0.51: device disconnected [ 346.551609][T10001] loop4: detected capacity change from 0 to 2048 [ 346.567348][T10005] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2189'. [ 346.583682][T10005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2189'. [ 346.662973][T10006] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 346.760100][T10006] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 346.802500][T10006] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 346.856291][T10006] Remounting filesystem read-only [ 346.862677][T10001] NILFS (loop4): mounting fs with errors [ 347.003297][T10006] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 347.034984][T10006] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 347.058775][T10006] Remounting filesystem read-only [ 347.072087][T10018] loop0: detected capacity change from 0 to 16 [ 347.081045][ T4284] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 347.095548][T10018] erofs: (device loop0): mounted with root inode @ nid 36. [ 347.341888][T10020] loop4: detected capacity change from 0 to 512 [ 347.387099][T10022] Invalid ELF header magic: != ELF [ 347.418601][T10020] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 347.460892][T10024] loop2: detected capacity change from 0 to 256 [ 347.483105][T10020] EXT4-fs (loop4): orphan cleanup on readonly fs [ 347.519352][T10020] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.2196: bad orphan inode 15 [ 347.606546][T10020] ext4_test_bit(bit=14, block=18) = 1 [ 347.612229][T10020] is_bad_inode(inode)=0 [ 347.616947][T10020] NEXT_ORPHAN(inode)=1023 [ 347.621331][T10020] max_ino=32 [ 347.624794][T10020] i_nlink=0 [ 347.632985][T10020] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2918: inode #15: comm syz.4.2196: corrupted xattr block 19 [ 347.664140][T10020] EXT4-fs warning (device loop4): ext4_evict_inode:301: xattr delete (err -117) [ 347.675399][T10020] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 347.985605][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 348.849889][T10064] loop3: detected capacity change from 0 to 512 [ 348.885115][T10064] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 348.896854][T10038] loop2: detected capacity change from 0 to 32768 [ 348.929887][T10064] EXT4-fs (loop3): orphan cleanup on readonly fs [ 348.981725][T10064] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.2216: bad orphan inode 15 [ 348.994740][T10064] ext4_test_bit(bit=14, block=18) = 1 [ 349.015021][T10064] is_bad_inode(inode)=0 [ 349.022957][T10064] NEXT_ORPHAN(inode)=1023 [ 349.027490][T10064] max_ino=32 [ 349.030748][T10064] i_nlink=0 [ 349.038441][T10064] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2918: inode #15: comm syz.3.2216: corrupted xattr block 19 [ 349.052132][T10064] EXT4-fs warning (device loop3): ext4_evict_inode:301: xattr delete (err -117) [ 349.062103][T10064] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 349.076048][ T7963] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 349.087359][T10038] XFS (loop2): Mounting V5 Filesystem [ 349.179737][T10074] 8021q: adding VLAN 0 to HW filter on device bond1 [ 349.188060][T10074] bridge0: port 3(bond1) entered blocking state [ 349.194636][T10074] bridge0: port 3(bond1) entered disabled state [ 349.204112][T10074] device bond1 entered promiscuous mode [ 349.210738][T10074] bridge0: port 3(bond1) entered blocking state [ 349.217251][T10074] bridge0: port 3(bond1) entered forwarding state [ 349.242207][ T11] bridge0: port 3(bond1) entered disabled state [ 349.285820][ T7963] usb 2-1: Using ep0 maxpacket: 8 [ 349.293988][ T7963] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 349.332371][T10080] loop0: detected capacity change from 0 to 164 [ 349.357102][T10038] XFS (loop2): Ending clean mount [ 349.358205][T10082] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2220'. [ 349.375477][ T7963] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 349.410565][ T7963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.424265][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 349.452030][T10082] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2220'. [ 349.468086][ T7963] usb 2-1: Product: syz [ 349.472555][ T7963] usb 2-1: Manufacturer: syz [ 349.487943][ T7963] usb 2-1: SerialNumber: syz [ 349.515816][ T7963] usb 2-1: config 0 descriptor?? [ 349.568970][ T7963] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 349.597196][ T7963] usb 2-1: setting power ON [ 349.609890][ T7963] dvb-usb: bulk message failed: -22 (2/0) [ 349.650571][ T4281] XFS (loop2): Unmounting Filesystem [ 349.656861][ T7963] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 349.671472][ T7963] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 349.687577][ T7963] usb 2-1: media controller created [ 349.764520][ T7963] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 349.764550][T10063] dvb-usb: bulk message failed: -22 (3/0) [ 349.832067][T10063] dvb-usb: bulk message failed: -22 (3/0) [ 349.855123][T10063] dvb-usb: bulk message failed: -22 (5/0) [ 349.921230][ T7963] usb 2-1: selecting invalid altsetting 6 [ 349.965343][ T7963] usb 2-1: digital interface selection failed (-22) [ 350.002220][ T7963] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 350.038690][ T7963] usb 2-1: setting power OFF [ 350.044102][ T7963] dvb-usb: bulk message failed: -22 (2/0) [ 350.052656][ T7963] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 350.062770][ T7963] (NULL device *): no alternate interface [ 350.149108][ T7963] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 350.196370][ T7963] usb 2-1: USB disconnect, device number 16 [ 350.528435][T10097] ÿ [ 350.905400][T10108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2232'. [ 351.147564][T10114] loop2: detected capacity change from 0 to 16 [ 351.150270][T10110] loop4: detected capacity change from 0 to 2048 [ 351.210229][T10114] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 351.243565][T10110] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 351.256552][T10110] ext4 filesystem being mounted at /496/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.427248][T10126] loop0: detected capacity change from 0 to 256 [ 351.527851][ T26] audit: type=1800 audit(1787500320.477:89): pid=10126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2238" name="file1" dev="loop0" ino=1048709 res=0 errno=0 [ 351.616742][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 351.934064][ T26] audit: type=1400 audit(1787500320.877:90): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=10137 comm="syz.3.2245" [ 352.349203][T10151] loop2: detected capacity change from 0 to 16 [ 352.401533][T10151] erofs: (device loop2): mounted with root inode @ nid 36. [ 352.639311][T10157] loop1: detected capacity change from 0 to 128 [ 352.675254][T10157] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 352.685404][T10157] ext4 filesystem being mounted at /430/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 352.717446][ C0] vkms_vblank_simulate: vblank timer overrun [ 352.941150][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 353.143267][T10167] loop1: detected capacity change from 0 to 256 [ 353.219659][T10167] FAT-fs (loop1): Directory bread(block 64) failed [ 353.255886][T10167] FAT-fs (loop1): Directory bread(block 65) failed [ 353.283103][T10167] FAT-fs (loop1): Directory bread(block 66) failed [ 353.303558][T10167] FAT-fs (loop1): Directory bread(block 67) failed [ 353.321428][T10167] FAT-fs (loop1): Directory bread(block 68) failed [ 353.334447][T10167] FAT-fs (loop1): Directory bread(block 69) failed [ 353.341832][T10171] netem: change failed [ 353.353260][T10167] FAT-fs (loop1): Directory bread(block 70) failed [ 353.370471][T10167] FAT-fs (loop1): Directory bread(block 71) failed [ 353.408655][T10167] FAT-fs (loop1): Directory bread(block 72) failed [ 353.439106][T10167] FAT-fs (loop1): Directory bread(block 73) failed [ 353.684854][T10178] loop2: detected capacity change from 0 to 8 [ 353.715492][ T4312] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 353.805775][T10161] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x3ffff [ 353.848209][T10161] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0xe4 [ 353.882508][T10161] F2FS-fs (loop3): invalid crc value [ 353.911643][T10161] F2FS-fs (loop3): Found nat_bits in checkpoint [ 353.918172][ T4312] usb 5-1: Using ep0 maxpacket: 16 [ 353.927471][ T4312] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.962112][ T4312] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 353.994466][ T4312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.045480][ T4312] usb 5-1: config 0 descriptor?? [ 354.072829][T10161] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x42b/0xa00 [ 354.216048][T10161] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 354.253028][T10192] set_capacity_and_notify: 1 callbacks suppressed [ 354.253045][T10192] loop0: detected capacity change from 0 to 512 [ 354.276688][T10173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.292530][T10173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.310809][T10192] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 354.333429][ T14] usb 5-1: USB disconnect, device number 13 [ 354.450965][T10161] F2FS-fs (loop3) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x84f/0x1c20 [ 354.487809][T10192] EXT4-fs (loop0): 1 truncate cleaned up [ 354.493530][T10192] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 354.567286][T10196] sctp: [Deprecated]: syz.1.2269 (pid 10196) Use of int in max_burst socket option deprecated. [ 354.567286][T10196] Use struct sctp_assoc_value instead [ 354.746005][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 354.982438][T10207] loop4: detected capacity change from 0 to 256 [ 355.026572][T10207] exfat: Deprecated parameter 'utf8' [ 355.032005][T10207] exfat: Deprecated parameter 'namecase' [ 355.134196][T10207] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0232f1a3, utbl_chksum : 0xe619d30d) [ 355.553332][T10215] loop4: detected capacity change from 0 to 4096 [ 355.683956][T10223] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 355.712353][ T26] audit: type=1800 audit(1787500324.657:91): pid=10215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2278" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 355.987404][T10231] loop2: detected capacity change from 0 to 128 [ 356.022069][T10232] loop0: detected capacity change from 0 to 256 [ 356.142054][T10232] exfat: Deprecated parameter 'utf8' [ 356.179878][T10232] exfat: Deprecated parameter 'namecase' [ 356.211738][T10232] exfat: Deprecated parameter 'namecase' [ 356.235373][T10232] exfat: Deprecated parameter 'utf8' [ 356.289913][T10232] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 356.919377][T10248] loop1: detected capacity change from 0 to 256 [ 356.967617][T10248] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7fdff6b1, utbl_chksum : 0xe619d30d) [ 357.095870][T10253] loop4: detected capacity change from 0 to 256 [ 357.107992][ T26] audit: type=1800 audit(1787500326.056:92): pid=10248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2292" name="file1" dev="loop1" ino=1048736 res=0 errno=0 [ 357.361812][ T7963] kernel read not supported for file /video9 (pid: 7963 comm: kworker/0:19) [ 358.210105][T10286] loop1: detected capacity change from 0 to 8192 [ 358.248893][T10286] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 358.285283][T10286] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 358.294585][T10286] REISERFS (device loop1): using ordered data mode [ 358.305007][T10286] reiserfs: using flush barriers [ 358.320430][T10286] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 358.453540][T10286] REISERFS (device loop1): checking transaction log (loop1) [ 358.486453][T10286] REISERFS (device loop1): Using r5 hash to sort names [ 358.493716][T10286] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 358.605640][T10286] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 358.635743][T10298] loop3: detected capacity change from 0 to 1024 [ 358.653234][T10286] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 358.735441][T10286] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 359.178081][T10290] loop4: detected capacity change from 0 to 32768 [ 359.310340][T10290] JBD2: Ignoring recovery information on journal [ 359.562419][T10290] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 359.693548][ T26] audit: type=1800 audit(1787500328.636:93): pid=10290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2310" name="bus" dev="loop4" ino=17058 res=0 errno=0 [ 359.993575][T10290] [ 359.995974][T10290] ====================================================== [ 360.003032][T10290] WARNING: possible circular locking dependency detected [ 360.010102][T10290] syzkaller #0 Not tainted [ 360.014571][T10290] ------------------------------------------------------ [ 360.021660][T10290] syz.4.2310/10290 is trying to acquire lock: [ 360.027767][T10290] ffff8880535fa990 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x1a6/0x270 [ 360.037411][T10290] [ 360.037411][T10290] but task is already holding lock: [ 360.044820][T10290] ffff8880562068e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0 [ 360.055199][T10290] [ 360.055199][T10290] which lock already depends on the new lock. [ 360.055199][T10290] [ 360.065640][T10290] [ 360.065640][T10290] the existing dependency chain (in reverse order) is: [ 360.074695][T10290] [ 360.074695][T10290] -> #5 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 360.083272][T10290] down_read+0x42/0x2d0 [ 360.088040][T10290] ocfs2_start_trans+0x3a4/0x6f0 [ 360.093564][T10290] ocfs2_reserve_suballoc_bits+0x7dd/0x4810 [ 360.100042][T10290] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 360.106949][T10290] ocfs2_extend_dir+0xd70/0x4c40 [ 360.112473][T10290] ocfs2_prepare_dir_for_insert+0x3217/0x5600 [ 360.119122][T10290] ocfs2_mknod+0xb46/0x2580 [ 360.124183][T10290] ocfs2_mkdir+0x1b6/0x4b0 [ 360.129156][T10290] vfs_mkdir+0x386/0x570 [ 360.133967][T10290] do_mkdirat+0x1d8/0x440 [ 360.138858][T10290] __x64_sys_mkdirat+0x85/0x90 [ 360.144189][T10290] do_syscall_64+0x4c/0xa0 [ 360.149186][T10290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.155661][T10290] [ 360.155661][T10290] -> #4 (sb_internal#7){.+.+}-{0:0}: [ 360.163194][T10290] ocfs2_start_trans+0x2a5/0x6f0 [ 360.168712][T10290] ocfs2_acquire_dquot+0x69a/0xb80 [ 360.174433][T10290] dqget+0x713/0xbb0 [ 360.178897][T10290] dquot_set_dqblk+0x27/0xfb0 [ 360.184174][T10290] quota_setquota+0x4d6/0x590 [ 360.189431][T10290] __se_sys_quotactl+0x28b/0x6f0 [ 360.194935][T10290] do_syscall_64+0x4c/0xa0 [ 360.199939][T10290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.206410][T10290] [ 360.206410][T10290] -> #3 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 360.215364][T10290] down_write+0x36/0x60 [ 360.220117][T10290] ocfs2_create_local_dquot+0x19a/0x1900 [ 360.226323][T10290] ocfs2_acquire_dquot+0x7e6/0xb80 [ 360.232005][T10290] dqget+0x713/0xbb0 [ 360.236467][T10290] dquot_set_dqblk+0x27/0xfb0 [ 360.241712][T10290] quota_setquota+0x4d6/0x590 [ 360.246955][T10290] __se_sys_quotactl+0x28b/0x6f0 [ 360.252466][T10290] do_syscall_64+0x4c/0xa0 [ 360.257457][T10290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.263931][T10290] [ 360.263931][T10290] -> #2 (&dquot->dq_lock){+.+.}-{3:3}: [ 360.271633][T10290] __mutex_lock+0x12d/0xae0 [ 360.276714][T10290] dquot_commit+0x5a/0x410 [ 360.281713][T10290] ext4_write_dquot+0x1f0/0x360 [ 360.287171][T10290] mark_all_dquot_dirty+0xf9/0x400 [ 360.292860][T10290] __dquot_free_space+0x7f8/0xbc0 [ 360.298467][T10290] ext4_free_blocks+0x1be5/0x26a0 [ 360.304102][T10290] ext4_ext_remove_space+0x1e82/0x43d0 [ 360.310129][T10290] ext4_ext_truncate+0x213/0x370 [ 360.315651][T10290] ext4_truncate+0xa5b/0x12a0 [ 360.320891][T10290] ext4_evict_inode+0xb21/0x10e0 [ 360.326410][T10290] evict+0x4b6/0x8b0 [ 360.330873][T10290] __dentry_kill+0x412/0x630 [ 360.336030][T10290] dentry_kill+0xb8/0x290 [ 360.340934][T10290] dput+0xfa/0x1d0 [ 360.345228][T10290] do_renameat2+0x8bc/0xc80 [ 360.350288][T10290] __x64_sys_rename+0x82/0x90 [ 360.355526][T10290] do_syscall_64+0x4c/0xa0 [ 360.360509][T10290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.366968][T10290] [ 360.366968][T10290] -> #1 (&ei->i_data_sem){++++}-{3:3}: [ 360.374681][T10290] down_read+0x42/0x2d0 [ 360.379411][T10290] ext4_map_blocks+0x338/0x1a90 [ 360.384829][T10290] ext4_append+0x22d/0x560 [ 360.389835][T10290] ext4_init_new_dir+0x2b8/0x550 [ 360.395344][T10290] ext4_mkdir+0x4c3/0xc90 [ 360.400240][T10290] vfs_mkdir+0x386/0x570 [ 360.405049][T10290] do_mkdirat+0x1d8/0x440 [ 360.409953][T10290] __x64_sys_mkdir+0x6a/0x80 [ 360.415107][T10290] do_syscall_64+0x4c/0xa0 [ 360.420111][T10290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.426596][T10290] [ 360.426596][T10290] -> #0 (jbd2_handle){++++}-{0:0}: [ 360.433981][T10290] __lock_acquire+0x2d18/0x7c40 [ 360.439409][T10290] lock_acquire+0x1bb/0x4a0 [ 360.444494][T10290] wait_transaction_locked+0x1bf/0x270 [ 360.450535][T10290] start_this_handle+0x7e7/0x2240 [ 360.456173][T10290] jbd2__journal_start+0x2b7/0x5a0 [ 360.461848][T10290] jbd2_journal_start+0x26/0x30 [ 360.467259][T10290] ocfs2_start_trans+0x3b0/0x6f0 [ 360.472772][T10290] ocfs2_del_inode_from_orphan+0x169/0x7b0 [ 360.479187][T10290] ocfs2_dio_end_io+0x10ed/0x1400 [ 360.484786][T10290] dio_complete+0x249/0x710 [ 360.489867][T10290] __blockdev_direct_IO+0x2e15/0x34c0 [ 360.495995][T10290] ocfs2_direct_IO+0x233/0x2a0 [ 360.501334][T10290] generic_file_direct_write+0x112/0x330 [ 360.507543][T10290] __generic_file_write_iter+0x15f/0x2a0 [ 360.513743][T10290] ocfs2_file_write_iter+0x1731/0x1fc0 [ 360.519784][T10290] do_iter_write+0x638/0xb10 [ 360.524947][T10290] iter_file_splice_write+0x6be/0xcf0 [ 360.530891][T10290] direct_splice_actor+0xe1/0x130 [ 360.536496][T10290] splice_direct_to_actor+0x4b8/0xbd0 [ 360.542447][T10290] do_splice_direct+0x1ce/0x2f0 [ 360.547873][T10290] do_sendfile+0x51b/0xe20 [ 360.552866][T10290] __se_sys_sendfile64+0x141/0x1a0 [ 360.558536][T10290] do_syscall_64+0x4c/0xa0 [ 360.563523][T10290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.569996][T10290] [ 360.569996][T10290] other info that might help us debug this: [ 360.569996][T10290] [ 360.580253][T10290] Chain exists of: [ 360.580253][T10290] jbd2_handle --> sb_internal#7 --> &journal->j_trans_barrier [ 360.580253][T10290] [ 360.593751][T10290] Possible unsafe locking scenario: [ 360.593751][T10290] [ 360.601230][T10290] CPU0 CPU1 [ 360.606623][T10290] ---- ---- [ 360.612048][T10290] lock(&journal->j_trans_barrier); [ 360.617400][T10290] lock(sb_internal#7); [ 360.624245][T10290] lock(&journal->j_trans_barrier); [ 360.632088][T10290] lock(jbd2_handle); [ 360.636204][T10290] [ 360.636204][T10290] *** DEADLOCK *** [ 360.636204][T10290] [ 360.644394][T10290] 5 locks held by syz.4.2310/10290: [ 360.649628][T10290] #0: ffff888022fe0460 (sb_writers#25){.+.+}-{0:0}, at: do_sendfile+0x4f6/0xe20 [ 360.658880][T10290] #1: ffff888077ef1808 (&sb->s_type->i_mutex_key#47){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x45a/0x1fc0 [ 360.667264][T10317] loop3: detected capacity change from 0 to 32768 [ 360.670242][T10290] #2: ffff888075b5a648 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}, at: ocfs2_del_inode_from_orphan+0x12b/0x7b0 [ 360.690151][T10290] #3: ffff888022fe0650 (sb_internal#7){.+.+}-{0:0}, at: ocfs2_del_inode_from_orphan+0x169/0x7b0 [ 360.700773][T10290] #4: ffff8880562068e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0 [ 360.711551][T10290] [ 360.711551][T10290] stack backtrace: [ 360.717473][T10290] CPU: 0 PID: 10290 Comm: syz.4.2310 Not tainted syzkaller #0 [ 360.724982][T10290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.735111][T10290] Call Trace: [ 360.738439][T10290] [ 360.741412][T10290] dump_stack_lvl+0x188/0x24e [ 360.746161][T10290] ? load_image+0x410/0x410 [ 360.750719][T10290] ? show_regs_print_info+0x12/0x12 [ 360.756016][T10290] ? print_circular_bug+0x12b/0x1a0 [ 360.761283][T10290] check_noncircular+0x296/0x330 [ 360.766289][T10290] ? add_chain_block+0x9b0/0x9b0 [ 360.771315][T10290] ? lockdep_lock+0xf1/0x1f0 [ 360.776110][T10290] ? _find_first_zero_bit+0xd2/0x100 [ 360.781477][T10290] __lock_acquire+0x2d18/0x7c40 [ 360.786496][T10290] ? __lock_acquire+0x1465/0x7c40 [ 360.791579][T10290] ? verify_lock_unused+0x140/0x140 [ 360.796835][T10290] ? mark_lock+0x94/0x320 [ 360.801237][T10290] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 360.802160][ T26] audit: type=1800 audit(1787500329.746:94): pid=10317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2320" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 360.807284][T10290] lock_acquire+0x1bb/0x4a0 [ 360.807329][T10290] ? wait_transaction_locked+0x1a6/0x270 [ 360.807372][T10290] ? __lock_acquire+0x7c40/0x7c40 [ 360.807416][T10290] ? read_lock_is_recursive+0x10/0x10 [ 360.807448][T10290] ? prepare_to_wait_exclusive+0x7d/0x210 [ 360.854304][T10290] ? wait_transaction_locked+0x1a6/0x270 [ 360.860018][T10290] wait_transaction_locked+0x1bf/0x270 [ 360.865566][T10290] ? wait_transaction_locked+0x1a6/0x270 [ 360.871255][T10290] ? jbd2_journal_begin_ordered_truncate+0x150/0x150 [ 360.877992][T10290] ? stack_trace_save+0xa6/0xf0 [ 360.882909][T10290] ? wake_bit_function+0x200/0x200 [ 360.888090][T10290] start_this_handle+0x7e7/0x2240 [ 360.893165][T10290] ? slab_post_alloc_hook+0x4b/0x490 [ 360.898503][T10290] ? kmem_cache_alloc+0x18b/0x2f0 [ 360.903584][T10290] ? jbd2__journal_start+0x13c/0x5a0 [ 360.908926][T10290] ? do_sendfile+0x51b/0xe20 [ 360.913575][T10290] ? jbd2__journal_start+0x5a0/0x5a0 [ 360.918935][T10290] ? __kasan_slab_alloc+0x6b/0x80 [ 360.924044][T10290] ? slab_post_alloc_hook+0x67/0x490 [ 360.929403][T10290] ? slab_pre_alloc_hook+0x59/0x300 [ 360.934658][T10290] ? rcu_is_watching+0x11/0xa0 [ 360.939515][T10290] ? kmem_cache_alloc+0x1b2/0x2f0 [ 360.944601][T10290] ? jbd2__journal_start+0x13c/0x5a0 [ 360.949956][T10290] jbd2__journal_start+0x2b7/0x5a0 [ 360.955124][T10290] jbd2_journal_start+0x26/0x30 [ 360.960019][T10290] ocfs2_start_trans+0x3b0/0x6f0 [ 360.965022][T10290] ? ocfs2_recovery_exit+0x50/0x50 [ 360.970220][T10290] ocfs2_del_inode_from_orphan+0x169/0x7b0 [ 360.976100][T10290] ? ocfs2_add_inode_to_orphan+0x7b0/0x7b0 [ 360.981959][T10290] ? __lock_acquire+0x7c40/0x7c40 [ 360.987048][T10290] ? sb_end_intwrite+0xe9/0x1c0 [ 360.991988][T10290] ? ocfs2_commit_trans+0x130/0x240 [ 360.997277][T10290] ? sb_end_intwrite+0x1c0/0x1c0 [ 361.002288][T10290] ? up_write+0x1b6/0x410 [ 361.006685][T10290] ocfs2_dio_end_io+0x10ed/0x1400 [ 361.011769][T10290] ? ocfs2_dio_wr_get_block+0x1810/0x1810 [ 361.017549][T10290] ? mark_lock+0x94/0x320 [ 361.021956][T10290] ? ocfs2_allocate_extend_trans+0x670/0x670 [ 361.028002][T10290] ? __lock_acquire+0x7c40/0x7c40 [ 361.033082][T10290] ? lock_chain_count+0x20/0x20 [ 361.038010][T10290] ? mark_lock+0x94/0x320 [ 361.042395][T10290] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 361.048437][T10290] ? __lock_acquire+0x7c40/0x7c40 [ 361.053519][T10290] ? lock_chain_count+0x20/0x20 [ 361.058426][T10290] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 361.064369][T10290] ? lockdep_hardirqs_on+0x94/0x140 [ 361.069619][T10290] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 361.075565][T10290] ? ocfs2_dio_wr_get_block+0x1810/0x1810 [ 361.081342][T10290] dio_complete+0x249/0x710 [ 361.085909][T10290] __blockdev_direct_IO+0x2e15/0x34c0 [ 361.091445][T10290] ? sb_init_dio_done_wq+0x80/0x80 [ 361.096624][T10290] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 361.102664][T10290] ? ocfs2_lock_get_block+0x50/0x50 [ 361.107935][T10290] ? ktime_get_coarse_real_ts64+0x2b/0x120 [ 361.113818][T10290] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 361.120113][T10290] ? ktime_get_real_ts64+0x440/0x440 [ 361.125466][T10290] ? filemap_read+0x3150/0x3150 [ 361.130367][T10290] ? current_time+0x19b/0x2c0 [ 361.135092][T10290] ? cap_inode_need_killpriv+0x4d/0x60 [ 361.140607][T10290] ? bpf_lsm_inode_need_killpriv+0x5/0x10 [ 361.146389][T10290] ? __file_remove_privs+0x40d/0x5f0 [ 361.151725][T10290] ? ocfs2_lock_get_block+0x50/0x50 [ 361.156971][T10290] ocfs2_direct_IO+0x233/0x2a0 [ 361.161786][T10290] generic_file_direct_write+0x112/0x330 [ 361.167475][T10290] ? do_raw_spin_unlock+0x11d/0x230 [ 361.172719][T10290] __generic_file_write_iter+0x15f/0x2a0 [ 361.178402][T10290] ocfs2_file_write_iter+0x1731/0x1fc0 [ 361.183920][T10290] ? ocfs2_file_read_iter+0xbb0/0xbb0 [ 361.189354][T10290] ? aa_file_perm+0x3ea/0xf00 [ 361.194079][T10290] ? aa_file_perm+0x112/0xf00 [ 361.198832][T10290] ? kasan_set_track+0x60/0x70 [ 361.203651][T10290] ? aa_path_link+0x8a0/0x8a0 [ 361.208383][T10290] ? iter_file_splice_write+0x1a0/0xcf0 [ 361.213976][T10290] ? direct_splice_actor+0xe1/0x130 [ 361.219228][T10290] ? splice_direct_to_actor+0x4b8/0xbd0 [ 361.224832][T10290] ? do_splice_direct+0x1ce/0x2f0 [ 361.229913][T10290] ? do_sendfile+0x51b/0xe20 [ 361.234548][T10290] ? __se_sys_sendfile64+0x141/0x1a0 [ 361.239872][T10290] ? do_syscall_64+0x4c/0xa0 [ 361.244547][T10290] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.250663][T10290] ? end_current_label_crit_section+0x14b/0x170 [ 361.256961][T10290] ? common_file_perm+0x171/0x1c0 [ 361.262044][T10290] do_iter_write+0x638/0xb10 [ 361.266693][T10290] ? vfs_iter_write+0xa0/0xa0 [ 361.271437][T10290] ? vfs_iter_write+0x67/0xa0 [ 361.276169][T10290] iter_file_splice_write+0x6be/0xcf0 [ 361.281608][T10290] ? splice_from_pipe+0x180/0x180 [ 361.286708][T10290] ? splice_shrink_spd+0xc0/0xc0 [ 361.291706][T10290] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 361.298356][T10290] ? splice_from_pipe+0x180/0x180 [ 361.303441][T10290] direct_splice_actor+0xe1/0x130 [ 361.308552][T10290] splice_direct_to_actor+0x4b8/0xbd0 [ 361.313993][T10290] ? direct_file_splice_eof+0xa0/0xa0 [ 361.319428][T10290] ? pipe_to_sendpage+0x320/0x320 [ 361.324519][T10290] ? common_file_perm+0x171/0x1c0 [ 361.329821][T10290] ? fsnotify_perm+0x5a/0x550 [ 361.334583][T10290] ? security_file_permission+0x75/0xa0 [ 361.340220][T10290] do_splice_direct+0x1ce/0x2f0 [ 361.345145][T10290] ? splice_direct_to_actor+0xbd0/0xbd0 [ 361.350751][T10290] ? rcu_read_lock_any_held+0xb0/0x130 [ 361.356358][T10290] ? do_splice_direct+0x2f0/0x2f0 [ 361.361453][T10290] ? common_file_perm+0x171/0x1c0 [ 361.366542][T10290] do_sendfile+0x51b/0xe20 [ 361.371031][T10290] ? do_pwritev+0x3a0/0x3a0 [ 361.375578][T10290] ? put_timespec64+0xd5/0x120 [ 361.380396][T10290] ? get_timespec64+0x1b0/0x1b0 [ 361.385273][T10290] __se_sys_sendfile64+0x141/0x1a0 [ 361.390413][T10290] ? lock_chain_count+0x20/0x20 [ 361.395304][T10290] ? __x64_sys_sendfile64+0xa0/0xa0 [ 361.400551][T10290] ? lockdep_hardirqs_on+0x94/0x140 [ 361.405797][T10290] do_syscall_64+0x4c/0xa0 [ 361.410284][T10290] ? clear_bhb_loop+0x60/0xb0 [ 361.415045][T10290] ? clear_bhb_loop+0x60/0xb0 [ 361.419818][T10290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.425774][T10290] RIP: 0033:0x7fb41c19e0d9 [ 361.430243][T10290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.449922][T10290] RSP: 002b:00007fb41d0c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 361.458391][T10290] RAX: ffffffffffffffda RBX: 00007fb41c425fa0 RCX: 00007fb41c19e0d9 [ 361.466412][T10290] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 361.474434][T10290] RBP: 00007fb41c235024 R08: 0000000000000000 R09: 0000000000000000 [ 361.482466][T10290] R10: 0000000020fffe82 R11: 0000000000000246 R12: 0000000000000000 [ 361.490485][T10290] R13: 00007fb41c426038 R14: 00007fb41c425fa0 R15: 00007ffde6958418 [ 361.498511][T10290] [ 361.501795][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.551864][T10290] syz.4.2310 (10290) used greatest stack depth: 18496 bytes left [ 361.576580][ T4284] ocfs2: Unmounting device (7,4) on (node local)