last executing test programs: 5m14.571142738s ago: executing program 3 (id=33): r0 = socket(0x15, 0x5, 0x0) connect$can_j1939(r0, &(0x7f0000000040)={0xa, 0x0, 0xffffc102, {0x0, 0x0, 0x4}, 0x2}, 0x76) getsockname$packet(r0, 0x0, &(0x7f00000001c0)) 5m14.464552602s ago: executing program 3 (id=35): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, 0x7}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) 5m14.350999427s ago: executing program 3 (id=37): r0 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x4a, 0x0, 0x84, 0xfffffffe}) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400191809004beafd0d3602028447000b4e230f02000500a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1) 5m14.163486045s ago: executing program 3 (id=39): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x220, &(0x7f0000000440)="$eJzs3c1uElEUAOAzLS1gXHRnYmIyxoWuGvUJakxNjCQmNSx010RWnVXZQDftY/gKvoxP4QOYrrrQjKkzAy1QpA0/Qb9vw2HOPZd7mTDMhkMehe8PvkSjkcTGXuzFRRI7sRGVsxhVGzsCAKyPizyPH3nh9tXuAwBgHc3w/f9ryUsCABbsw8dP7161WvsHadqIOD/rtXvt4rHIv3nb2n+e/rEzrDrv9dqbg/yLdPTe4TK/FffK/MuiPh2ktyOivR3PnhT5y9zr9630en09Pk9Zd3NO+wcAAAAAAAAAAAAAAAAAAAAAgFV4FGllYn+f3d3RfLPMF8+u9Aca6d9Ti4dVe+Bhe6D8dBmbAgAAAAAAAAAAAAAAAAAAgDXT7Z8cHWZZ53gY1CNicGQn69QmjLk5SMqJZxo8U5DMaZ6JwUbcrbxZbjPLOt9+3q48Kd+iRWxnGDQnn9xZgqgtcmHLCNJ5TVivTvN4qhnJlPI8vwyufwqiDKq2GDeWb0fE9IU9Pbjrvi7yPM++Pj7u9iOfOnh4jagv7WoEAAAAAAAAAAAAAAAAAAD/tyu/+h7T2FzFigAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg+br9k+pf/k+ODrOsc9ztzxycRsT9+Ovg6rW2orG6jQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBP+x0AAP//JtMcXQ==") mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x84022, &(0x7f00000002c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35]}}, {@size={'size', 0x3d, [0x67]}}]}) 5m13.83607664s ago: executing program 3 (id=43): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x400, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x11a020, &(0x7f0000000140)={[{@mode={'mode', 0x3d, 0x1000000000005}}]}) 5m13.259614684s ago: executing program 3 (id=51): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x18) unshare(0x2c040000) 5m12.933329128s ago: executing program 32 (id=51): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x18) unshare(0x2c040000) 5m12.028103407s ago: executing program 0 (id=60): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES64=0x0], 0x1, 0x54f4, &(0x7f0000005600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) fadvise64(r0, 0x3ff, 0x8, 0x2) 5m10.536395551s ago: executing program 0 (id=67): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a0000000500040000000000090002"], 0x50}}, 0x20040000) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) 5m9.517112365s ago: executing program 0 (id=70): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8102) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000880)="000000000013", 0x0, 0x0, 0x10010, 0x40002, 0x0}) 5m9.355275002s ago: executing program 0 (id=72): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 5m9.198343518s ago: executing program 0 (id=74): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x210004, &(0x7f0000000140)={[{@usrquota}, {@errors_continue}, {@nodiscard}, {@uid}, {@quota}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@usrquota}, {@usrquota}, {@gid}]}, 0x3, 0x62b5, &(0x7f00000069c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 5m6.323602172s ago: executing program 0 (id=85): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e14", 0x1a}], 0x1}, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x11}}) 5m5.804538285s ago: executing program 33 (id=85): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e14", 0x1a}], 0x1}, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x11}}) 2.143229256s ago: executing program 5 (id=3120): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x4, &(0x7f0000000080)={0x10, 0x2}, 0x10) 2.018799012s ago: executing program 5 (id=3123): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@data_err_ignore}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}]}, 0x1, 0x438, &(0x7f0000000500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x400, 0x0) 1.852162799s ago: executing program 5 (id=3127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.697129536s ago: executing program 5 (id=3131): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x4, 0x0, 0x0, 0x1}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) 1.575385511s ago: executing program 5 (id=3132): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xea, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xb, 0x80, 0x9}}}}}]}}]}}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 1.251807526s ago: executing program 4 (id=3137): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0) 1.219226216s ago: executing program 4 (id=3138): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4431, &(0x7f00000088c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x5) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000380)={0x0, 0x3, 0x1ff, 0x7}) 1.102579312s ago: executing program 1 (id=3139): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000003680), r0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000003800)={0x0, 0x0, &(0x7f00000037c0)={&(0x7f0000000c40)={0x14, r1, 0x1, 0x170bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc084}, 0x40) 820.556044ms ago: executing program 2 (id=3141): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4085, 0xff5}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000000780)=""/174, 0xae}, {&(0x7f0000000200)=""/172, 0xac}, {&(0x7f0000000140)=""/166, 0xa6}, {&(0x7f0000000340)=""/144, 0x90}], 0x6}, 0xc8c0d35c5ac4d2b6) 741.080548ms ago: executing program 1 (id=3142): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004100)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="e24e23"], 0x2c}}, 0x20008000) 711.394349ms ago: executing program 2 (id=3143): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000fcffffff0000000009000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 575.722705ms ago: executing program 1 (id=3144): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000007c0)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}}, 0x0) 575.558285ms ago: executing program 2 (id=3145): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73e, &(0x7f0000000800)="$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") symlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') chdir(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 489.633689ms ago: executing program 1 (id=3146): r0 = syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x40044591, 0x0) ppoll(&(0x7f0000000400)=[{r0, 0x40}], 0x1, 0x0, 0x0, 0x0) 453.77268ms ago: executing program 4 (id=3147): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000001640)=@qipcrtr={0x2a, 0x3, 0x7fff}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000200)="270502001a0014000600a5cbcc19a9905c8647002fb96dbcf706013c9aa1f82fa00956725faf2f61952a03060000d4c6e9c07f0f7b68d90540739b00", 0x3c}, {&(0x7f0000000400)="2b9caa8f", 0x4}, {&(0x7f0000000840)="1c4657bac6978f77555f856780277c1a513a5e3b7811bb30bd3b9f9071ac4fe3c1a1b058222780c5bd6e441e4f9d9d44b263a2b62f39ea91537c79393aa661fbc0ae45997d5ca86c95ac81385e020bbcc5c0f93ec3e23d435e30e5f4db949d551a93df82b4feda16272f3074cd6555a83687fb681931d98765c88d5be636a2506d9d2f19c28d2d09710a867585ce31b63e484f6a66295026dbf41238530000000000000009807ce7bda28be3fa2b9c8d4658b40a7c22c62c1cb9fd65a15b7784dd70f48d30c1062809e64882a61bcdfcfea0228657b3", 0xd6}, {&(0x7f0000000640)="1f20ba1dc71f34c97ec88edfd7203c93df14e46b097c3fe2eced64e8966957b8c5c951c25355f1a91e3e448d4c64f2d3842629", 0x33}, {&(0x7f0000001980)="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", 0xbde}], 0x5}, 0x48081) 299.785977ms ago: executing program 1 (id=3148): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) listen(r0, 0xd3) 299.535267ms ago: executing program 2 (id=3149): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001300)={0x18, 0x16, 0xa01, 0x80000000, 0x25dfdbfe, {0x2}, [@typed={0x4, 0xec}]}, 0x18}}, 0x0) 254.591869ms ago: executing program 4 (id=3150): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2e1, @private1, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="f8", 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000480)}], 0x1}}], 0x2, 0x8000) close(0x3) 203.651981ms ago: executing program 2 (id=3151): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) 75.777127ms ago: executing program 4 (id=3152): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000001}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000010700)=@newtaction={0x18, 0x5a, 0x301, 0x0, 0x0, {0x2}, [{0x4}]}, 0x18}}, 0x2004e080) 75.550237ms ago: executing program 5 (id=3153): syz_mount_image$hfs(&(0x7f0000000680), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x41, 0x2b4, &(0x7f0000000200)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) 75.466707ms ago: executing program 2 (id=3154): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x8001, 0x6, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x1002, 0x1, 0x8, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0x7, 0x8, 0x5, 0x8, 0x4, 0x10000, 0xfffffff8]}) 69.670507ms ago: executing program 1 (id=3155): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 0s ago: executing program 4 (id=3156): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x20, 0x64, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4f}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) kernel console output (not intermixed with test programs): ode 4:3 still has 1 user(s)! [ 315.450728][T12066] XFS (loop1): Ending clean mount [ 315.461328][T12066] XFS (loop1): Quotacheck needed: Please wait. [ 315.520350][T12066] XFS (loop1): Quotacheck: Done. [ 315.579728][ T5784] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 315.654502][T12084] loop5: detected capacity change from 0 to 8192 [ 315.698952][T12084] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 315.737651][T12084] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 315.778281][T12084] REISERFS (device loop5): using journaled data mode [ 315.785006][T12084] reiserfs: using flush barriers [ 315.877423][T12084] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 315.921921][T12084] REISERFS (device loop5): checking transaction log (loop5) [ 315.951767][T12084] REISERFS (device loop5): Using r5 hash to sort names [ 315.967402][T12084] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 316.007428][T12084] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 316.335694][T12095] loop1: detected capacity change from 0 to 4096 [ 316.399578][T12089] loop2: detected capacity change from 0 to 32768 [ 316.423835][T12095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.491390][T12095] EXT4-fs error (device loop1): ext4_get_first_dir_block:3604: inode #12: block 80: comm syz.1.2221: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 316.525025][T12095] EXT4-fs error (device loop1): ext4_get_first_dir_block:3606: inode #12: comm syz.1.2221: directory missing '..' [ 316.572530][T12091] loop4: detected capacity change from 0 to 32768 [ 316.579381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 316.600458][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.638839][T12091] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 316.715836][T12091] XFS (loop4): Ending clean mount [ 316.727783][ T789] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 316.778793][T12091] XFS (loop4): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 316.810234][T12111] loop1: detected capacity change from 0 to 2048 [ 316.838250][T12111] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 316.870514][ T5991] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 316.881870][T12111] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 316.951225][ T789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.997368][ T789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.020740][ T789] usb 6-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 317.056276][ T789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.080557][ T789] usb 6-1: config 0 descriptor?? [ 317.253937][T12109] loop2: detected capacity change from 0 to 32768 [ 317.310037][T12109] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 317.337391][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.344039][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.394019][T12109] XFS (loop2): Ending clean mount [ 317.409088][T12109] XFS (loop2): Quotacheck needed: Please wait. [ 317.467313][T12109] XFS (loop2): Quotacheck: Done. [ 317.498023][ T789] elecom 0003:056E:00FF.0029: item fetching failed at offset 4/5 [ 317.515573][ T789] elecom: probe of 0003:056E:00FF.0029 failed with error -22 [ 317.594352][ T5782] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 317.657909][T12129] loop4: detected capacity change from 0 to 1024 [ 317.709321][ T789] usb 6-1: USB disconnect, device number 20 [ 317.832885][ T2877] hfsplus: b-tree write err: -5, ino 4 [ 317.841063][T12113] loop1: detected capacity change from 0 to 32768 [ 317.908784][T12113] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 317.971909][T12145] loop4: detected capacity change from 0 to 64 [ 317.977000][T12113] XFS (loop1): Ending clean mount [ 318.074493][T12147] comedi comedi3: 8255: I/O port conflict (0x404f26,4) [ 318.082425][T12147] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 318.091752][T12147] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 318.102487][ T5784] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 318.116149][T12147] comedi comedi3: 8255: I/O port conflict (0xd,4) [ 318.129871][T12147] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 318.136543][T12147] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 318.152994][T12147] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 318.172128][T12147] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 318.180985][T12147] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 318.190671][T12147] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 318.203985][T12147] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 318.225207][T12151] loop4: detected capacity change from 0 to 512 [ 318.232901][T12147] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 318.241957][T12147] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 318.254384][T12151] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 318.267683][T12147] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 318.287214][T12147] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 318.307044][T12147] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 318.329774][T12147] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 318.346992][T12147] comedi comedi3: 8255: I/O port conflict (0x402,4) [ 318.377158][T12147] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 318.388984][T12151] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 318.407190][T12147] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 318.407236][T12147] comedi comedi3: 8255: I/O port conflict (0x40,4) [ 318.407273][T12147] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 318.407312][T12147] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 318.407351][T12147] comedi comedi3: 8255: I/O port conflict (0x8000003,4) [ 318.427606][T12151] FAT-fs (loop4): Filesystem has been set read-only [ 318.432021][T12151] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 318.626435][T12159] tipc: Enabling of bearer rejected, failed to enable media [ 318.794484][T12169] loop1: detected capacity change from 0 to 64 [ 319.064971][T12175] loop5: detected capacity change from 0 to 1024 [ 319.121536][T12175] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 319.140428][T12175] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 319.154727][T12175] JBD2: no valid journal superblock found [ 319.165971][T12175] EXT4-fs (loop5): Could not load journal inode [ 319.218343][T12171] loop4: detected capacity change from 0 to 32768 [ 319.229949][T12171] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 319.263764][T12171] XFS (loop4): Ending clean mount [ 319.307388][ T789] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 319.333655][ T5991] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 319.385012][T12193] netlink: 'syz.5.2254': attribute type 15 has an invalid length. [ 319.517711][ T789] usb 2-1: Using ep0 maxpacket: 8 [ 319.524938][ T789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 319.539825][ T789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 319.555227][ T789] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 319.566763][ T789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 319.609536][ T789] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 319.637336][ T789] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 319.646420][ T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.662279][ T789] usb 2-1: config 0 descriptor?? [ 319.668905][T12179] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 319.905581][T12179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.909875][T12211] loop4: detected capacity change from 0 to 2048 [ 319.932959][T12179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.941467][T12213] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 319.955207][ T5795] Bluetooth: hci4: unexpected event 0x12 length: 1 < 8 [ 319.963947][ T5795] Bluetooth: hci4: Malformed Event: 0x02 [ 319.971342][ T5795] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 319.971576][ T5795] Bluetooth: hci4: connection err: -111 [ 319.976584][T12211] syz.4.2262: attempt to access beyond end of device [ 319.976584][T12211] loop4: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 320.011478][T12211] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15) [ 320.021908][T12211] syz.4.2262: attempt to access beyond end of device [ 320.021908][T12211] loop4: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 320.053356][T12211] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15) [ 320.082972][T12211] NILFS (loop4): error -5 truncating bmap (ino=16) [ 320.184840][ T5792] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 320.194871][ T5915] usb 2-1: USB disconnect, device number 26 [ 320.381972][ T789] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 320.569560][ T789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 320.584523][ T789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.596431][ T789] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 320.610311][ T789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.621837][ T789] usb 6-1: config 0 descriptor?? [ 320.789181][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2268'. [ 320.972488][T12228] loop1: detected capacity change from 0 to 512 [ 320.984892][T12228] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 321.006112][T12228] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.2270: iget: bad i_size value: 38620345925642 [ 321.022529][T12228] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.2270: couldn't read orphan inode 15 (err -117) [ 321.043818][T12228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.044507][ T789] isku 0003:1E7D:319C.002A: item fetching failed at offset 5/7 [ 321.084428][ T789] isku 0003:1E7D:319C.002A: parse failed [ 321.087082][T12228] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.2270: bg 0: block 5: invalid block bitmap [ 321.091902][ T789] isku: probe of 0003:1E7D:319C.002A failed with error -22 [ 321.117336][T12228] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 321.179027][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.262354][ T5839] usb 6-1: USB disconnect, device number 21 [ 321.270370][T12234] macsec2: entered promiscuous mode [ 321.472163][T12246] loop1: detected capacity change from 0 to 1024 [ 321.506142][ T3450] hfsplus: b-tree write err: -5, ino 4 [ 321.668233][T12254] loop1: detected capacity change from 0 to 4096 [ 321.684256][T12255] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 321.717372][ T5915] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 321.724033][T12254] overlayfs: upper fs does not support tmpfile. [ 321.736354][T12254] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 321.743654][T12254] overlayfs: failed to set xattr on upper [ 321.749623][T12254] overlayfs: ...falling back to redirect_dir=nofollow. [ 321.756504][T12254] overlayfs: ...falling back to index=off. [ 321.850072][T12257] random: crng reseeded on system resumption [ 321.905006][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.927309][ T5915] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 321.957518][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.980792][ T5915] usb 5-1: config 0 descriptor?? [ 322.029225][T12260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2283'. [ 322.419504][ T5915] hid (null): usage index exceeded [ 322.430392][ T5915] hid-led 0003:1294:1320.002B: ignoring exceeding usage max [ 322.451480][ T5915] hid-led 0003:1294:1320.002B: usage index exceeded [ 322.467362][ T5915] hid-led 0003:1294:1320.002B: item 0 1 2 0 parsing failed [ 322.475438][ T5915] hid-led: probe of 0003:1294:1320.002B failed with error -22 [ 322.629000][ T789] usb 5-1: USB disconnect, device number 17 [ 322.638414][T12258] loop5: detected capacity change from 0 to 32768 [ 322.697796][T12258] XFS (loop5): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 322.825236][ T6124] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 322.899671][T12286] loop1: detected capacity change from 0 to 64 [ 323.128426][T12290] loop1: detected capacity change from 0 to 16 [ 323.140239][T12289] loop5: detected capacity change from 0 to 256 [ 323.141535][T12290] erofs: (device loop1): mounted with root inode @ nid 36. [ 323.201501][T12289] FAT-fs (loop5): Directory bread(block 64) failed [ 323.212538][T12289] FAT-fs (loop5): Directory bread(block 65) failed [ 323.219740][T12289] FAT-fs (loop5): Directory bread(block 66) failed [ 323.226294][T12289] FAT-fs (loop5): Directory bread(block 67) failed [ 323.239465][T12289] FAT-fs (loop5): Directory bread(block 68) failed [ 323.246009][T12289] FAT-fs (loop5): Directory bread(block 69) failed [ 323.254653][T12289] FAT-fs (loop5): Directory bread(block 70) failed [ 323.265111][T12289] FAT-fs (loop5): Directory bread(block 71) failed [ 323.273337][T12289] FAT-fs (loop5): Directory bread(block 72) failed [ 323.280372][T12289] FAT-fs (loop5): Directory bread(block 73) failed [ 323.360167][T12296] sp0: Synchronizing with TNC [ 323.525780][T12304] loop5: detected capacity change from 0 to 8192 [ 323.544153][T12305] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 323.717126][ T5915] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 323.775155][T12312] loop1: detected capacity change from 0 to 512 [ 323.783385][T12312] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 323.795531][T12312] EXT4-fs (loop1): invalid journal inode [ 323.801600][T12312] EXT4-fs (loop1): can't get journal size [ 323.809154][T12312] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 323.819112][T12312] System zones: 1-12, 13-13 [ 323.825767][T12312] EXT4-fs (loop1): 1 truncate cleaned up [ 323.832776][T12312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.874092][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.900534][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 323.914164][ T5915] usb 5-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 323.924897][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.944472][ T5915] usb 5-1: config 0 descriptor?? [ 324.092072][T12321] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2309'. [ 324.259724][T12326] loop1: detected capacity change from 0 to 2048 [ 324.272141][T12326] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 324.283308][T12326] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 324.292272][T12326] UDF-fs: Scanning with blocksize 512 failed [ 324.304326][T12326] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 324.365871][ T5915] wacom 0003:056A:0017.002C: unknown main item tag 0x0 [ 324.373941][ T5915] wacom 0003:056A:0017.002C: unknown main item tag 0x0 [ 324.382971][ T5915] wacom 0003:056A:0017.002C: unknown main item tag 0x0 [ 324.390633][ T5915] wacom 0003:056A:0017.002C: unknown main item tag 0x0 [ 324.400016][ T5915] wacom 0003:056A:0017.002C: unknown main item tag 0x0 [ 324.408932][ T5915] wacom 0003:056A:0017.002C: Unknown device_type for 'HID 056a:0017'. Assuming pen. [ 324.420862][ T5915] wacom 0003:056A:0017.002C: hidraw0: USB HID v0.03 Device [HID 056a:0017] on usb-dummy_hcd.4-1/input0 [ 324.435026][ T5915] input: Wacom BambooFun 4x5 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0017.002C/input/input36 [ 324.502654][ T9] kernel write not supported for file /video36 (pid: 9 comm: kworker/0:1) [ 324.580812][ T5774] usb 5-1: USB disconnect, device number 18 [ 324.666248][T12335] loop1: detected capacity change from 0 to 4096 [ 324.695385][T12335] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 324.708866][T12335] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 324.723968][T12335] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 324.744076][T12335] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 324.763073][T12335] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 324.787652][T12335] ntfs: volume version 3.1. [ 324.794930][T12335] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 324.809444][T12335] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 324.825398][T12335] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 324.838033][T12335] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 324.850377][T12335] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 324.926304][T12333] loop5: detected capacity change from 0 to 32768 [ 324.945082][T12333] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 324.986511][T12345] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2316'. [ 325.004775][T12333] XFS (loop5): Ending clean mount [ 325.065674][ T6124] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 325.297615][T12353] loop1: detected capacity change from 0 to 2048 [ 325.334840][T12352] loop4: detected capacity change from 0 to 8192 [ 325.339427][T12354] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 325.364958][T12353] syz.1.2319: attempt to access beyond end of device [ 325.364958][T12353] loop1: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 325.387847][T12352] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 325.408698][T12353] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 325.437056][T12352] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 325.441436][T12353] syz.1.2319: attempt to access beyond end of device [ 325.441436][T12353] loop1: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 325.453165][T12352] REISERFS (device loop4): using ordered data mode [ 325.462712][T12353] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 325.486941][T12352] reiserfs: using flush barriers [ 325.497311][T12353] NILFS (loop1): error -5 truncating bmap (ino=16) [ 325.537437][T12352] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 325.590210][T12352] REISERFS (device loop4): checking transaction log (loop4) [ 325.630949][T12352] REISERFS (device loop4): Using r5 hash to sort names [ 325.651274][T12352] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 325.921006][T12379] loop5: detected capacity change from 0 to 256 [ 325.943454][T12379] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 325.988309][T12383] loop4: detected capacity change from 0 to 64 [ 326.137078][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 326.175696][T12392] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2337'. [ 326.320030][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 326.345409][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 326.358307][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 326.367963][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.379665][T12375] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 326.404379][ T9] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 326.662981][T12406] loop5: detected capacity change from 0 to 32768 [ 326.669767][ T789] usb 2-1: USB disconnect, device number 27 [ 326.685738][T12406] JBD2: Ignoring recovery information on journal [ 326.715433][T12406] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 326.717309][ T5774] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 326.766195][T12406] syz.5.2344 (12406) used greatest stack depth: 17712 bytes left [ 326.793523][ T6124] ocfs2: Unmounting device (7,5) on (node local) [ 326.917013][ T5774] usb 5-1: Using ep0 maxpacket: 8 [ 326.924866][ T5774] usb 5-1: config 0 interface 0 altsetting 42 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.938632][ T5774] usb 5-1: config 0 interface 0 altsetting 42 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 326.951824][ T5774] usb 5-1: config 0 interface 0 has no altsetting 0 [ 326.960257][ T5774] usb 5-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 326.969676][ T5774] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.992164][ T5774] usb 5-1: config 0 descriptor?? [ 327.078255][T12414] loop5: detected capacity change from 0 to 4096 [ 327.092439][T12414] ntfs: volume version 3.1. [ 327.378032][T12422] loop5: detected capacity change from 0 to 4096 [ 327.407584][T12426] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 327.451451][T12422] overlayfs: upper fs does not support tmpfile. [ 327.459455][T12422] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 327.467346][T12422] overlayfs: failed to set xattr on upper [ 327.473133][T12422] overlayfs: ...falling back to redirect_dir=nofollow. [ 327.480108][T12422] overlayfs: ...falling back to index=off. [ 327.626170][ T9] usb 5-1: USB disconnect, device number 19 [ 328.248054][T12438] loop4: detected capacity change from 0 to 4096 [ 328.261423][T12438] ntfs: volume version 3.1. [ 328.627161][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 328.809523][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 328.821031][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 328.831315][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 328.840845][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.852177][T12444] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 328.863054][ T9] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 329.061710][T12453] loop2: detected capacity change from 0 to 4096 [ 329.124740][T12457] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 329.156562][T12458] macsec1: entered promiscuous mode [ 329.218764][T12453] overlayfs: upper fs does not support tmpfile. [ 329.225477][T12453] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 329.229367][ T9] usb 5-1: USB disconnect, device number 20 [ 329.238146][T12453] overlayfs: failed to set xattr on upper [ 329.244100][T12453] overlayfs: ...falling back to redirect_dir=nofollow. [ 329.256100][T12453] overlayfs: ...falling back to index=off. [ 329.469289][T12466] loop1: detected capacity change from 0 to 512 [ 329.509085][T12470] loop2: detected capacity change from 0 to 512 [ 329.518977][T12468] mkiss: ax0: crc mode is auto. [ 329.529976][T12470] EXT4-fs (loop2): first meta block group too large: 524287 (group descriptor block count 1) [ 329.599545][T12472] loop1: detected capacity change from 0 to 256 [ 329.631715][T12472] FAT-fs (loop1): Directory bread(block 64) failed [ 329.642115][T12472] FAT-fs (loop1): Directory bread(block 65) failed [ 329.652212][T12472] FAT-fs (loop1): Directory bread(block 66) failed [ 329.665311][T12472] FAT-fs (loop1): Directory bread(block 67) failed [ 329.673672][T12472] FAT-fs (loop1): Directory bread(block 68) failed [ 329.684003][T12472] FAT-fs (loop1): Directory bread(block 69) failed [ 329.693474][T12472] FAT-fs (loop1): Directory bread(block 70) failed [ 329.706021][T12472] FAT-fs (loop1): Directory bread(block 71) failed [ 329.714996][T12472] FAT-fs (loop1): Directory bread(block 72) failed [ 329.729539][T12472] FAT-fs (loop1): Directory bread(block 73) failed [ 329.913024][T12484] loop4: detected capacity change from 0 to 4096 [ 329.943815][T12485] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 330.024306][T12484] overlayfs: upper fs does not support tmpfile. [ 330.034055][T12484] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 330.046486][T12484] overlayfs: failed to set xattr on upper [ 330.053441][T12484] overlayfs: ...falling back to redirect_dir=nofollow. [ 330.065600][T12484] overlayfs: ...falling back to index=off. [ 330.097774][T12491] loop2: detected capacity change from 0 to 16 [ 330.110312][ T788] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 330.120348][T12491] erofs: (device loop2): mounted with root inode @ nid 36. [ 330.142116][T12491] syz.2.2383: attempt to access beyond end of device [ 330.142116][T12491] loop2: rw=0, sector=48, nr_sectors = 16 limit=16 [ 330.162454][T12491] syz.2.2383: attempt to access beyond end of device [ 330.162454][T12491] loop2: rw=0, sector=48, nr_sectors = 16 limit=16 [ 330.280384][T12497] loop4: detected capacity change from 0 to 64 [ 330.318767][ T788] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 330.340588][ T788] usb 6-1: config 0 has no interface number 0 [ 330.354065][ T788] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.376010][ T788] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.396877][ T788] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 330.426902][ T788] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 330.450984][ T788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.480552][ T788] usb 6-1: config 0 descriptor?? [ 330.905730][T12527] loop4: detected capacity change from 0 to 16 [ 330.921999][T12527] erofs: (device loop4): mounted with root inode @ nid 36. [ 330.941893][T12527] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 331.102476][ T788] uclogic 0003:28BD:0042.002E: failed retrieving string descriptor #100: -71 [ 331.127008][ T788] uclogic 0003:28BD:0042.002E: failed retrieving pen parameters: -71 [ 331.157052][ T788] uclogic 0003:28BD:0042.002E: pen probing failed: -71 [ 331.167205][ T788] uclogic 0003:28BD:0042.002E: failed probing parameters: -71 [ 331.180975][T12533] loop2: detected capacity change from 0 to 2048 [ 331.189860][ T788] uclogic: probe of 0003:28BD:0042.002E failed with error -71 [ 331.203678][ T788] usb 6-1: USB disconnect, device number 22 [ 331.210121][T12533] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 331.253337][T12537] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 331.327122][T12533] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 331.350027][T12533] Remounting filesystem read-only [ 331.360954][T12533] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 3044605952 [ 331.370680][T12533] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=15) [ 331.380634][T12533] NILFS (loop2): error -5 truncating bmap (ino=15) [ 331.440153][ T5782] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 331.456930][ T5782] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 331.468362][ T5782] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 331.483779][ T5782] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 331.494624][ T5782] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 331.507183][ T5782] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 331.527944][ T5782] NILFS (loop2): discard dirty page: offset=0, ino=15 [ 331.534900][ T5782] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 331.549380][ T5782] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 331.558933][ T5782] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 331.570138][ T5782] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 331.579534][ T5782] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 331.586254][ T5782] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 331.594396][ T5782] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 331.602834][ T5782] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 331.610602][ T5782] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 331.633433][T12547] macsec2: entered promiscuous mode [ 331.637127][ T5782] NILFS (loop2): discard dirty page: offset=229376, ino=3 [ 331.645882][ T5782] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 331.691311][ T5782] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 331.701098][ T5782] NILFS (loop2): discard dirty block: blocknr=50, size=1024 [ 331.714433][ T5782] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 331.770823][T12550] loop5: detected capacity change from 0 to 512 [ 331.784128][T12550] EXT4-fs: Ignoring removed nobh option [ 331.807796][T12550] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.2408: iget: bad i_size value: 38620345925642 [ 331.847475][T12550] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2408: couldn't read orphan inode 15 (err -117) [ 331.905120][T12550] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.002250][T12557] loop1: detected capacity change from 0 to 256 [ 332.104016][T12557] FAT-fs (loop1): Directory bread(block 64) failed [ 332.124883][ T6124] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.137761][T12557] FAT-fs (loop1): Directory bread(block 65) failed [ 332.144440][T12557] FAT-fs (loop1): Directory bread(block 66) failed [ 332.197029][T12557] FAT-fs (loop1): Directory bread(block 67) failed [ 332.241901][T12557] FAT-fs (loop1): Directory bread(block 68) failed [ 332.245433][T12551] loop4: detected capacity change from 0 to 32768 [ 332.255675][T12557] FAT-fs (loop1): Directory bread(block 69) failed [ 332.283698][T12557] FAT-fs (loop1): Directory bread(block 70) failed [ 332.284083][T12561] loop5: detected capacity change from 0 to 64 [ 332.299538][T12557] FAT-fs (loop1): Directory bread(block 71) failed [ 332.306184][T12557] FAT-fs (loop1): Directory bread(block 72) failed [ 332.314246][T12557] FAT-fs (loop1): Directory bread(block 73) failed [ 332.322614][T12551] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 332.449130][T12555] loop2: detected capacity change from 0 to 40427 [ 332.474629][T12555] F2FS-fs (loop2): heap/no_heap options were deprecated [ 332.481768][T12555] F2FS-fs (loop2): build fault injection attr: rate: 19, type: 0x7ffff [ 332.489952][T12551] XFS (loop4): Ending clean mount [ 332.504845][T12555] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x364 [ 332.515110][T12551] XFS (loop4): Quotacheck needed: Please wait. [ 332.532383][T12555] F2FS-fs (loop2): invalid crc value [ 332.555597][T12551] XFS (loop4): Quotacheck: Done. [ 332.584166][T12555] F2FS-fs (loop2): Found nat_bits in checkpoint [ 332.623401][ T5991] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 332.730146][T12555] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x156/0x580 [ 332.782176][T12555] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 333.511341][T12579] loop1: detected capacity change from 0 to 32768 [ 333.547577][T12579] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 333.670936][T12579] XFS (loop1): Ending clean mount [ 333.682712][T12618] netlink: 'syz.5.2431': attribute type 1 has an invalid length. [ 333.809179][ T5784] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 333.870419][T12626] loop5: detected capacity change from 0 to 256 [ 333.939548][T12626] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 334.172171][T12632] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 334.179294][T12632] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 334.185800][T12632] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 334.202810][T12632] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 334.212737][T12632] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 334.229952][T12632] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 334.236760][T12632] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 334.244943][T12632] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 334.255226][T12632] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 334.265537][T12632] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 334.275575][T12632] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 334.283289][T12632] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 334.293944][T12632] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 334.304025][T12632] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 334.320618][T12632] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 334.332469][T12632] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 334.343177][T12632] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 334.352879][T12632] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 334.404631][T12628] loop4: detected capacity change from 0 to 32768 [ 334.428968][T12628] JBD2: Ignoring recovery information on journal [ 334.447601][ T5774] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 334.472291][T12628] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 334.548680][ T5991] ocfs2: Unmounting device (7,4) on (node local) [ 334.653003][ T5774] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 334.661338][ T5774] usb 2-1: config 0 has no interface number 0 [ 334.669456][ T5774] usb 2-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 334.679123][ T5774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.689793][ T5774] usb 2-1: config 0 descriptor?? [ 334.707262][ T788] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 334.904757][ T788] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 334.908302][T12646] loop4: detected capacity change from 0 to 2048 [ 334.922433][T12634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.933892][ T788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.935748][T12634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.946687][ T788] usb 6-1: config 0 descriptor?? [ 334.959039][ T788] cp210x 6-1:0.0: cp210x converter detected [ 334.973631][ T5774] usb 2-1: string descriptor 0 read error: -71 [ 334.974684][T12646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.981546][ T5774] usb-storage 2-1:0.168: USB Mass Storage device detected [ 335.003940][ T5774] usb-storage 2-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 335.033125][ T5991] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.057733][ T5774] usb 2-1: USB disconnect, device number 28 [ 335.369279][ T788] usb 6-1: cp210x converter now attached to ttyUSB0 [ 335.588719][ T9] usb 6-1: USB disconnect, device number 23 [ 335.599941][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 335.610527][ T9] cp210x 6-1:0.0: device disconnected [ 336.755252][T12663] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2447'. [ 336.766615][T12659] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2446'. [ 336.778360][T12659] tipc: Invalid UDP bearer configuration [ 336.778416][T12659] tipc: Enabling of bearer rejected, failed to enable media [ 336.788748][T12658] loop5: detected capacity change from 0 to 2048 [ 336.815147][T12658] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 336.861223][T12666] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 336.937534][T12670] loop1: detected capacity change from 0 to 16 [ 336.954638][T12672] loop4: detected capacity change from 0 to 64 [ 336.955931][T12658] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 336.964569][T12670] erofs: (device loop1): mounted with root inode @ nid 36. [ 337.000679][T12670] syz.1.2450: attempt to access beyond end of device [ 337.000679][T12670] loop1: rw=0, sector=48, nr_sectors = 16 limit=16 [ 337.016102][T12658] Remounting filesystem read-only [ 337.018994][T12670] syz.1.2450: attempt to access beyond end of device [ 337.018994][T12670] loop1: rw=0, sector=48, nr_sectors = 16 limit=16 [ 337.025687][T12658] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 3044605952 [ 337.057639][T12658] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=15) [ 337.065385][T12674] loop2: detected capacity change from 0 to 64 [ 337.067744][T12658] NILFS (loop5): error -5 truncating bmap (ino=15) [ 337.240213][ T6124] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 337.241717][T12679] loop2: detected capacity change from 0 to 2048 [ 337.261610][ T6124] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 337.274099][ T6124] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 337.292273][ T6124] NILFS (loop5): discard dirty block: blocknr=37, size=1024 [ 337.303353][ T6124] NILFS (loop5): discard dirty block: blocknr=38, size=1024 [ 337.308147][T12679] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 337.315111][ T6124] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 337.332577][ T6124] NILFS (loop5): discard dirty page: offset=0, ino=15 [ 337.340005][ T6124] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 337.351389][ T6124] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 337.361018][ T6124] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 337.372337][ T6124] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 337.384898][ T6124] NILFS (loop5): discard dirty page: offset=0, ino=3 [ 337.393310][ T6124] NILFS (loop5): discard dirty block: blocknr=42, size=1024 [ 337.401973][ T6124] NILFS (loop5): discard dirty block: blocknr=43, size=1024 [ 337.413465][ T6124] NILFS (loop5): discard dirty block: blocknr=44, size=1024 [ 337.423930][ T6124] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 337.439089][ T6124] NILFS (loop5): discard dirty page: offset=229376, ino=3 [ 337.448884][ T6124] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 337.458438][ T6124] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 337.467714][ T6124] NILFS (loop5): discard dirty block: blocknr=50, size=1024 [ 337.475148][ T6124] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 337.484259][ T9] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 337.669181][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 337.687406][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.708344][ T9] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 337.721836][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.734931][ T9] usb 5-1: config 0 descriptor?? [ 337.937246][T12699] loop2: detected capacity change from 0 to 64 [ 338.059325][T12684] loop1: detected capacity change from 0 to 32768 [ 338.120959][T12684] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 338.152158][ T9] bigben 0003:146B:0902.002F: unexpected rdesc, please submit for review [ 338.157562][T12713] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2469'. [ 338.172469][ T9] bigben 0003:146B:0902.002F: unbalanced delimiter at end of report description [ 338.182829][ T9] bigben 0003:146B:0902.002F: parse failed [ 338.189690][ T9] bigben: probe of 0003:146B:0902.002F failed with error -22 [ 338.215000][T12684] XFS (loop1): Ending clean mount [ 338.235136][T12684] XFS (loop1): Quotacheck needed: Please wait. [ 338.310665][T12684] XFS (loop1): Quotacheck: Done. [ 338.355771][ T5790] usb 5-1: USB disconnect, device number 21 [ 338.400802][ T5784] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 338.557419][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 338.664108][T12726] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 338.671690][T12726] macsec2: entered promiscuous mode [ 338.677437][T12726] macsec2: entered allmulticast mode [ 338.682823][T12726] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 338.693906][T12726] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 338.701707][T12726] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 338.740677][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 338.753823][ T9] usb 6-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 338.763477][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.775452][ T9] usb 6-1: config 0 descriptor?? [ 338.951057][T12732] loop4: detected capacity change from 0 to 64 [ 339.058049][T12734] [U] [ 339.058145][T12734] [U] [ 339.058174][T12734] [U] [ 339.058202][T12734] [U] [ 339.058229][T12734] [U] [ 339.058255][T12734] [U] [ 339.058282][T12734] [U] [ 339.058308][T12734] [U] [ 339.058354][T12734] [U] [ 339.058381][T12734] [U] [ 339.058410][T12734] [U] [ 339.060216][T12733] [U] [ 339.091938][ C1] vkms_vblank_simulate: vblank timer overrun [ 339.209178][ T9] wacom 0003:056A:0017.0030: unknown main item tag 0x0 [ 339.229400][ T9] wacom 0003:056A:0017.0030: unknown main item tag 0x0 [ 339.236310][ T9] wacom 0003:056A:0017.0030: unknown main item tag 0x0 [ 339.255838][ T9] wacom 0003:056A:0017.0030: unknown main item tag 0x0 [ 339.282233][ T9] wacom 0003:056A:0017.0030: unknown main item tag 0x0 [ 339.299815][ T9] wacom 0003:056A:0017.0030: Unknown device_type for 'HID 056a:0017'. Assuming pen. [ 339.332975][ T9] wacom 0003:056A:0017.0030: hidraw0: USB HID v0.03 Device [HID 056a:0017] on usb-dummy_hcd.5-1/input0 [ 339.359466][ T9] input: Wacom BambooFun 4x5 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0017.0030/input/input44 [ 339.375558][T12742] loop4: detected capacity change from 0 to 1024 [ 339.413898][T12742] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=802c018, mo2=0002] [ 339.441855][T12742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.464574][ T9] usb 6-1: USB disconnect, device number 24 [ 339.477535][ T27] kauditd_printk_skb: 32 callbacks suppressed [ 339.477548][ T27] audit: type=1800 audit(1763579490.428:45): pid=12742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2483" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 339.519798][T12745] loop2: detected capacity change from 0 to 8192 [ 339.529890][T12745] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 339.545039][T12745] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 339.556783][T12745] REISERFS (device loop2): using journaled data mode [ 339.564487][T12745] reiserfs: using flush barriers [ 339.570136][ T5991] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.587490][T12745] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 339.592049][T12752] loop1: detected capacity change from 0 to 128 [ 339.614498][T12745] REISERFS (device loop2): checking transaction log (loop2) [ 339.633880][T12752] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 339.648807][T12745] REISERFS (device loop2): Using r5 hash to sort names [ 339.657911][T12745] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 339.667720][T12752] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 339.672483][T12745] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 339.702754][T12745] REISERFS error (device loop2): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 339.715998][T12745] REISERFS (device loop2): Remounting filesystem read-only [ 339.955818][ T27] audit: type=1326 audit(1763579490.898:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12761 comm="syz.4.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c9778f749 code=0x7ffc0000 [ 340.013476][ T27] audit: type=1326 audit(1763579490.898:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12761 comm="syz.4.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c9778f749 code=0x7ffc0000 [ 340.039340][ T27] audit: type=1326 audit(1763579490.948:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12761 comm="syz.4.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f2c9778f749 code=0x7ffc0000 [ 340.097377][ T27] audit: type=1326 audit(1763579490.948:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12761 comm="syz.4.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c9778f749 code=0x7ffc0000 [ 340.099388][T12766] loop1: detected capacity change from 0 to 512 [ 340.129930][ T27] audit: type=1326 audit(1763579490.948:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12761 comm="syz.4.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c9778f749 code=0x7ffc0000 [ 340.158177][T12766] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 340.176951][ T27] audit: type=1326 audit(1763579490.948:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12761 comm="syz.4.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f2c9778f749 code=0x7ffc0000 [ 340.226716][T12770] loop5: detected capacity change from 0 to 4096 [ 340.227009][ T27] audit: type=1326 audit(339.975:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12761 comm="syz.4.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c9778f749 code=0x7ffc0000 [ 340.234941][T12766] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.254840][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.295671][T12770] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.318608][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.349604][T12770] EXT4-fs error (device loop5): ext4_empty_dir:3154: inode #12: block 80: comm syz.5.2495: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 340.372678][T12770] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #12: comm syz.5.2495: directory missing '..' [ 340.408095][T12777] can0: slcan on ptm0. [ 340.422439][ T6124] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.473931][T12776] can0 (unregistered): slcan off ptm0. [ 340.587639][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 340.636198][T12783] loop5: detected capacity change from 0 to 8192 [ 340.638134][T12785] loop1: detected capacity change from 0 to 2048 [ 340.651923][T12783] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 340.653334][T12785] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 340.665697][T12783] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 340.676510][T12785] NILFS (loop1): mounting unchecked fs [ 340.691997][T12783] REISERFS (device loop5): using ordered data mode [ 340.699846][T12783] reiserfs: using flush barriers [ 340.710144][T12785] NILFS (loop1): recovery complete [ 340.713580][T12783] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 340.716324][T12787] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 340.743124][T12783] REISERFS (device loop5): checking transaction log (loop5) [ 340.752448][T12783] REISERFS (device loop5): Using r5 hash to sort names [ 340.763045][T12783] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 340.779682][T12783] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 340.787938][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.803508][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 340.824099][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 340.834269][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 340.846015][ T9] usb 5-1: SerialNumber: syz [ 341.087899][ T9] usb 5-1: 0:2 : does not exist [ 341.110822][ T9] usb 5-1: USB disconnect, device number 22 [ 341.222488][T12803] loop5: detected capacity change from 0 to 256 [ 341.741158][T12815] loop5: detected capacity change from 0 to 32768 [ 341.760366][T12815] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 341.799231][T12815] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 341.832219][T12815] XFS (loop5): Starting recovery (logdev: internal) [ 341.866181][T12815] XFS (loop5): Ending recovery (logdev: internal) [ 341.875388][T12815] XFS (loop5): Quotacheck needed: Please wait. [ 341.929891][T12815] XFS (loop5): Quotacheck: Done. [ 342.095477][ T6124] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 342.140357][T12837] loop1: detected capacity change from 0 to 64 [ 342.158373][T12837] hfs: bad catalog entry type 65535 [ 342.285803][T12833] loop4: detected capacity change from 0 to 32768 [ 342.299857][T12833] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 342.325421][T12833] XFS (loop4): Ending clean mount [ 342.364677][ T5991] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 342.517464][ T5790] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 342.707671][ T5790] usb 2-1: Using ep0 maxpacket: 16 [ 342.719199][ T5790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.736621][ T5790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.752376][ T5790] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 342.765551][ T5790] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 342.784334][ T5790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.795444][ T5790] usb 2-1: config 0 descriptor?? [ 343.007813][ T5792] Bluetooth: hci0: command 0x0c1a tx timeout [ 343.170549][T12878] loop2: detected capacity change from 0 to 256 [ 343.178032][T12878] exfat: Deprecated parameter 'namecase' [ 343.191183][T12878] exfat: Deprecated parameter 'namecase' [ 343.198605][T12878] exfat: Deprecated parameter 'namecase' [ 343.204948][T12878] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 343.233474][T12878] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 343.234956][ T5790] microsoft 0003:045E:07DA.0031: item 0 4 0 8 parsing failed [ 343.280957][ T5790] microsoft 0003:045E:07DA.0031: parse failed [ 343.307565][ T5790] microsoft: probe of 0003:045E:07DA.0031 failed with error -22 [ 343.444923][ T5790] usb 2-1: USB disconnect, device number 29 [ 343.562209][T12890] smc: net device bond0 applied user defined pnetid SYZ0 [ 343.674076][T12896] loop5: detected capacity change from 0 to 1024 [ 343.716593][ T3450] hfsplus: b-tree write err: -5, ino 4 [ 344.122279][T12909] loop2: detected capacity change from 0 to 8192 [ 344.142225][T12909] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 344.157250][T12909] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 344.167656][T12909] REISERFS (device loop2): using ordered data mode [ 344.174218][T12909] reiserfs: using flush barriers [ 344.187729][T12909] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 344.205069][T12909] REISERFS (device loop2): checking transaction log (loop2) [ 344.215518][T12909] REISERFS (device loop2): Using r5 hash to sort names [ 344.225281][T12909] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 344.239410][T12909] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 344.260362][T12909] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 344.537685][ T5790] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 344.727459][ T5790] usb 2-1: Using ep0 maxpacket: 32 [ 344.751271][ T5790] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 344.760991][ T5790] usb 2-1: config 0 has no interface number 0 [ 344.781660][ T5790] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 344.801502][ T5790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.815781][ T5790] usb 2-1: Product: syz [ 344.820606][ T5790] usb 2-1: Manufacturer: syz [ 344.825346][ T5790] usb 2-1: SerialNumber: syz [ 344.839212][ T5790] usb 2-1: config 0 descriptor?? [ 344.855145][ T5790] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 344.867686][ T5790] usb 2-1: selecting invalid altsetting 1 [ 344.873944][ T5790] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 344.905610][ T5790] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 344.934548][ T5790] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 344.951932][ T5790] usb 2-1: media controller created [ 345.000386][ T5790] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 345.090279][ T5790] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 345.103181][ T5790] zl10353_read_register: readreg error (reg=127, ret==-71) [ 345.117938][ T5790] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 345.200074][ T5790] usb 2-1: USB disconnect, device number 30 [ 345.245586][T12942] loop5: detected capacity change from 0 to 4096 [ 345.300970][T12945] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 345.514768][T12930] loop4: detected capacity change from 0 to 40427 [ 345.541373][T12930] F2FS-fs (loop4): invalid crc value [ 345.560446][T12930] F2FS-fs (loop4): Found nat_bits in checkpoint [ 345.620312][T12954] loop2: detected capacity change from 0 to 128 [ 345.637723][T12954] EXT4-fs: Ignoring removed nobh option [ 345.679494][T12954] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 345.687453][T12930] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 345.712498][T12954] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 1073745927 (only 1 groups) [ 345.734129][ T27] audit: type=1326 audit(345.695:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12960 comm="syz.1.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d958f749 code=0x7ffc0000 [ 345.792722][ T5782] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 345.866627][ T27] audit: type=1326 audit(345.695:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12960 comm="syz.1.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d958f749 code=0x7ffc0000 [ 345.907713][ T5991] syz-executor: attempt to access beyond end of device [ 345.907713][ T5991] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 345.913677][ T27] audit: type=1326 audit(345.735:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12960 comm="syz.1.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f39d958f749 code=0x7ffc0000 [ 345.939679][ T5991] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 345.957677][ T27] audit: type=1326 audit(345.735:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12960 comm="syz.1.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d958f749 code=0x7ffc0000 [ 345.986753][ T27] audit: type=1326 audit(345.735:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12960 comm="syz.1.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d958f749 code=0x7ffc0000 [ 346.015313][ T27] audit: type=1326 audit(345.735:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12960 comm="syz.1.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f39d958f749 code=0x7ffc0000 [ 346.082760][ T27] audit: type=1326 audit(345.735:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12960 comm="syz.1.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d958f749 code=0x7ffc0000 [ 346.657132][T12986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2586'. [ 347.451338][ T5792] Bluetooth: hci0: unexpected event for opcode 0x0405 [ 347.728961][T13026] loop4: detected capacity change from 0 to 256 [ 347.746477][T13026] exfat: Deprecated parameter 'utf8' [ 347.768993][T13026] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 347.841358][T13028] loop2: detected capacity change from 0 to 512 [ 347.855844][T13028] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 347.885653][T13028] EXT4-fs (loop2): 1 truncate cleaned up [ 347.898250][T13028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.974369][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.987675][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 348.071140][T13030] loop5: detected capacity change from 0 to 8192 [ 348.127358][T13030] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 348.177327][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 348.184605][ T9] usb 2-1: config 156 has too many interfaces: 43, using maximum allowed: 32 [ 348.194359][ T9] usb 2-1: config 156 has an invalid descriptor of length 1, skipping remainder of the config [ 348.204914][T13030] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 348.205624][T13030] REISERFS (device loop5): using journaled data mode [ 348.235527][ T9] usb 2-1: config 156 has 0 interfaces, different from the descriptor's value: 43 [ 348.249598][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 348.260413][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.269266][ T9] usb 2-1: Product: syz [ 348.273943][ T9] usb 2-1: Manufacturer: syz [ 348.279095][ T9] usb 2-1: SerialNumber: syz [ 348.286258][T13030] reiserfs: using flush barriers [ 348.303915][T13030] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 348.328167][T13030] REISERFS (device loop5): checking transaction log (loop5) [ 348.356351][T13030] REISERFS (device loop5): Using r5 hash to sort names [ 348.378643][T13030] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 348.413318][T13030] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 348.510751][ T9] usb 2-1: USB disconnect, device number 31 [ 348.566442][T13030] REISERFS error (device loop5): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 348.570276][T13048] loop2: detected capacity change from 0 to 1024 [ 348.596372][T13048] EXT4-fs: Ignoring removed oldalloc option [ 348.597395][T13030] REISERFS (device loop5): Remounting filesystem read-only [ 348.615706][T13048] EXT4-fs: Ignoring removed bh option [ 348.632222][T13048] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 348.655691][T13048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.679043][T13054] loop4: detected capacity change from 0 to 8 [ 348.739912][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.200674][T13070] loop4: detected capacity change from 0 to 1024 [ 349.415669][T13079] loop1: detected capacity change from 0 to 2048 [ 349.495947][T13087] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 350.062425][T13091] loop4: detected capacity change from 0 to 32768 [ 350.099912][T13091] jfs_mkdir: dtInsert returned -EIO [ 350.105305][T13091] ERROR: (device loop4): jfs_mkdir: [ 350.105305][T13091] [ 350.117885][T13091] ERROR: (device loop4): remounting filesystem as read-only [ 350.138759][T13091] jfs_lookup: iget failed on inum 4 [ 350.146535][T13091] jfs_lookup: iget failed on inum 4 [ 350.163036][T13091] jfs_lookup: iget failed on inum 4 [ 350.178166][T13091] jfs_lookup: iget failed on inum 4 [ 350.184195][T13099] loop5: detected capacity change from 0 to 4096 [ 350.193299][T13093] loop1: detected capacity change from 0 to 32768 [ 350.225275][T13093] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 350.228587][T13105] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 350.298112][T13093] XFS (loop1): Ending clean mount [ 350.311081][T13093] XFS (loop1): Quotacheck needed: Please wait. [ 350.364169][T13093] XFS (loop1): Quotacheck: Done. [ 350.485795][ T5784] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 350.669572][T13120] loop5: detected capacity change from 0 to 1024 [ 350.676788][T13120] EXT4-fs: Ignoring removed oldalloc option [ 350.691929][T13120] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.732695][T13120] EXT4-fs error (device loop5): ext4_map_blocks:718: inode #15: comm syz.5.2645: lblock 0 mapped to illegal pblock 0 (length 1) [ 350.753275][T13120] EXT4-fs (loop5): Remounting filesystem read-only [ 350.824322][ T6124] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 350.888933][T13116] loop4: detected capacity change from 0 to 32768 [ 350.910890][T13116] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 350.942966][T13116] XFS (loop4): Ending clean mount [ 351.253761][ T5991] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 351.623639][T13139] loop4: detected capacity change from 0 to 64 [ 352.052735][T13149] loop1: detected capacity change from 0 to 512 [ 352.100065][T13149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 352.215164][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 352.634172][T13151] loop5: detected capacity change from 0 to 32768 [ 352.659189][T13151] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.2653 (13151) [ 352.697684][T13151] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 352.716972][T13151] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 352.737662][T13151] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 352.758194][T13151] BTRFS info (device loop5): use zstd compression, level 3 [ 352.765461][T13151] BTRFS info (device loop5): using free space tree [ 352.781994][T13157] loop4: detected capacity change from 0 to 32768 [ 352.863439][T13157] ERROR: (device loop4): dbAllocNext: Corrupt dmap page [ 352.863439][T13157] [ 352.891689][T13157] ERROR: (device loop4): remounting filesystem as read-only [ 352.907705][T13151] BTRFS info (device loop5): enabling ssd optimizations [ 352.914701][T13151] BTRFS info (device loop5): auto enabling async discard [ 352.934731][T13157] ialloc: diAlloc returned -5! [ 353.075416][T13161] loop1: detected capacity change from 0 to 32768 [ 353.091918][ T6124] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 353.096349][T13161] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 353.179326][T13161] XFS (loop1): Ending clean mount [ 353.220535][T13161] XFS (loop1): Quotacheck needed: Please wait. [ 353.300351][T13161] XFS (loop1): Quotacheck: Done. [ 353.424418][ T5784] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 353.433645][T13181] loop2: detected capacity change from 0 to 32768 [ 353.544190][T13181] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 353.633882][T13181] XFS (loop2): Ending clean mount [ 353.658631][T13203] loop4: detected capacity change from 0 to 64 [ 353.738650][ T5782] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 353.787658][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 353.993193][ T9] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 354.031492][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.065616][ T9] usb 6-1: config 0 descriptor?? [ 354.493467][ T9] hackrf 6-1:0.0: Board ID: 00 [ 354.506649][ T9] hackrf 6-1:0.0: Firmware version: [ 354.506914][ T788] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 354.521011][T13213] loop4: detected capacity change from 0 to 40427 [ 354.531962][ T9] hackrf 6-1:0.0: Registered as swradio24 [ 354.537631][T13213] F2FS-fs (loop4): Found nat_bits in checkpoint [ 354.541863][ T9] videodev: could not get a free minor [ 354.550194][ T9] hackrf 6-1:0.0: Failed to register as video device (-23) [ 354.565532][ T9] hackrf: probe of 6-1:0.0 failed with error -23 [ 354.581601][T13213] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 354.605737][T13213] syz.4.2669: attempt to access beyond end of device [ 354.605737][T13213] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 354.640025][ T5991] syz-executor: attempt to access beyond end of device [ 354.640025][ T5991] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 354.654930][ T5991] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 354.711252][ T9] usb 6-1: USB disconnect, device number 25 [ 354.728730][ T788] usb 2-1: Using ep0 maxpacket: 16 [ 354.742783][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.766277][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.786941][ T788] usb 2-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 354.796033][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.830561][ T788] usb 2-1: config 0 descriptor?? [ 354.869819][T13232] loop2: detected capacity change from 0 to 16 [ 354.877396][T13232] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 355.156642][T13236] loop4: detected capacity change from 0 to 8192 [ 355.181883][T13236] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 355.200711][T13236] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 355.211460][T13236] REISERFS (device loop4): using ordered data mode [ 355.219516][T13236] reiserfs: using flush barriers [ 355.256040][ T788] ntrig 0003:1B96:0008.0032: collection stack underflow [ 355.257435][T13236] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 355.277367][ T788] ntrig 0003:1B96:0008.0032: item 0 1 0 12 parsing failed [ 355.296718][T13236] REISERFS (device loop4): checking transaction log (loop4) [ 355.305246][ T788] ntrig 0003:1B96:0008.0032: parse failed [ 355.322292][ T788] ntrig: probe of 0003:1B96:0008.0032 failed with error -22 [ 355.322938][T13236] REISERFS (device loop4): Using r5 hash to sort names [ 355.341986][T13236] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 355.356576][T13236] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 355.418242][T13236] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 355.462407][ T788] usb 2-1: USB disconnect, device number 32 [ 355.756537][T13258] loop4: detected capacity change from 0 to 128 [ 355.765647][T13258] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 355.780513][T13258] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 356.045794][T13256] loop2: detected capacity change from 0 to 32768 [ 356.074834][T13256] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 356.094398][T13268] program syz.1.2689 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 356.188089][T13256] XFS (loop2): Ending clean mount [ 356.273813][T13273] loop4: detected capacity change from 0 to 4096 [ 356.289771][T13275] loop1: detected capacity change from 0 to 8192 [ 356.303325][T13273] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 356.312768][ T5782] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 356.316013][T13278] loop5: detected capacity change from 0 to 64 [ 356.323070][T13275] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 356.365447][T13275] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 356.381518][T13275] REISERFS (device loop1): using ordered data mode [ 356.395129][T13275] reiserfs: using flush barriers [ 356.416947][T13275] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 356.467904][T13275] REISERFS (device loop1): checking transaction log (loop1) [ 356.489114][T13275] REISERFS (device loop1): Using r5 hash to sort names [ 356.496363][T13275] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 356.550937][T13275] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 356.572395][ T27] audit: type=1326 audit(356.515:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13279 comm="syz.5.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88958f749 code=0x7ffc0000 [ 356.609287][ T27] audit: type=1326 audit(356.515:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13279 comm="syz.5.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88958f749 code=0x7ffc0000 [ 356.700171][ T27] audit: type=1326 audit(356.525:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13279 comm="syz.5.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb88958f749 code=0x7ffc0000 [ 356.721831][ C0] vkms_vblank_simulate: vblank timer overrun [ 356.753635][ T27] audit: type=1326 audit(356.525:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13279 comm="syz.5.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88958f749 code=0x7ffc0000 [ 356.775292][ C0] vkms_vblank_simulate: vblank timer overrun [ 356.782826][T13275] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 356.802839][ T27] audit: type=1326 audit(356.525:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13279 comm="syz.5.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88958f749 code=0x7ffc0000 [ 356.824473][ C0] vkms_vblank_simulate: vblank timer overrun [ 356.832405][ T27] audit: type=1326 audit(356.525:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13279 comm="syz.5.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fb88958f749 code=0x7ffc0000 [ 356.887370][ T27] audit: type=1326 audit(356.525:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13279 comm="syz.5.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88958f749 code=0x7ffc0000 [ 356.909030][ C0] vkms_vblank_simulate: vblank timer overrun [ 357.015690][T13293] ax25_connect(): syz.2.2701 uses autobind, please contact jreuter@yaina.de [ 357.203206][T13302] tipc: Enabling of bearer rejected, failed to enable media [ 357.439986][ T27] audit: type=1326 audit(357.405:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13313 comm="syz.1.2709" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39d958f749 code=0x0 [ 357.720802][T13325] loop2: detected capacity change from 0 to 512 [ 357.728337][T13325] EXT4-fs: Ignoring removed i_version option [ 357.734495][T13325] EXT4-fs: Ignoring removed bh option [ 357.760506][T13325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.773507][T13309] loop5: detected capacity change from 0 to 32768 [ 357.832155][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.987706][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 358.167796][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 358.180125][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.218356][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.238161][T13343] loop2: detected capacity change from 0 to 512 [ 358.246272][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 358.262541][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.274042][ T9] usb 5-1: config 0 descriptor?? [ 358.277230][T13343] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.2723: invalid block [ 358.316397][T13343] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2723: invalid indirect mapped block 10 (level 1) [ 358.365334][T13343] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2723: invalid indirect mapped block 8 (level 1) [ 358.388304][T13343] EXT4-fs (loop2): 1 truncate cleaned up [ 358.401471][T13343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.503477][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.705226][ T9] mcp2200 0003:04D8:00DF.0033: unknown main item tag 0x3 [ 358.722020][ T9] mcp2200 0003:04D8:00DF.0033: unknown main item tag 0x2 [ 358.730882][ T9] mcp2200 0003:04D8:00DF.0033: item fetching failed at offset 4/5 [ 358.740641][ T9] mcp2200 0003:04D8:00DF.0033: can't parse reports [ 358.748148][ T9] mcp2200: probe of 0003:04D8:00DF.0033 failed with error -22 [ 358.815416][T13361] loop2: detected capacity change from 0 to 8192 [ 358.838573][T13361] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 358.867111][T13361] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 358.892318][T13361] REISERFS (device loop2): using journaled data mode [ 358.918414][ T788] usb 5-1: USB disconnect, device number 23 [ 358.943920][T13361] reiserfs: using flush barriers [ 358.983217][T13361] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 359.019132][T13361] REISERFS (device loop2): checking transaction log (loop2) [ 359.040690][T13361] REISERFS (device loop2): Using r5 hash to sort names [ 359.054046][T13361] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 359.075132][T13361] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 359.222773][T13360] loop5: detected capacity change from 0 to 32768 [ 359.261862][T13360] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 359.289653][T13380] loop1: detected capacity change from 0 to 512 [ 359.296431][T13384] loop2: detected capacity change from 0 to 47 [ 359.298046][T13380] EXT4-fs: Ignoring removed i_version option [ 359.315576][T13380] EXT4-fs (loop1): 1 truncate cleaned up [ 359.338422][T13380] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.390808][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.463254][T13389] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 359.488969][T13360] XFS (loop5): Ending clean mount [ 359.500419][T13360] XFS (loop5): Quotacheck needed: Please wait. [ 359.545438][T13360] XFS (loop5): Quotacheck: Done. [ 359.600535][ T6124] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 359.744013][T13395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2747'. [ 360.263783][T13418] loop1: detected capacity change from 0 to 512 [ 360.304046][T13420] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2753'. [ 360.305912][T13418] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.2752: inode has both inline data and extents flags [ 360.332420][T13418] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.2752: couldn't read orphan inode 15 (err -117) [ 360.353820][T13418] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.402981][T13418] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 360.494030][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.518838][T13412] loop4: detected capacity change from 0 to 32768 [ 360.574331][T13412] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 360.700829][T13412] XFS (loop4): Ending clean mount [ 360.713935][T13412] XFS (loop4): Quotacheck needed: Please wait. [ 360.781987][T13412] XFS (loop4): Quotacheck: Done. [ 360.787726][T13443] loop5: detected capacity change from 0 to 256 [ 360.839502][T13443] FAT-fs (loop5): Directory bread(block 64) failed [ 360.846556][T13443] FAT-fs (loop5): Directory bread(block 65) failed [ 360.864802][ T5991] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 360.873696][T13443] FAT-fs (loop5): Directory bread(block 66) failed [ 360.882949][T13443] FAT-fs (loop5): Directory bread(block 67) failed [ 360.890321][T13443] FAT-fs (loop5): Directory bread(block 68) failed [ 360.898010][T13443] FAT-fs (loop5): Directory bread(block 69) failed [ 360.904851][T13443] FAT-fs (loop5): Directory bread(block 70) failed [ 360.919302][T13443] FAT-fs (loop5): Directory bread(block 71) failed [ 360.926250][T13443] FAT-fs (loop5): Directory bread(block 72) failed [ 360.937530][T13443] FAT-fs (loop5): Directory bread(block 73) failed [ 361.194474][T13455] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2764'. [ 361.267452][ T788] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 361.364734][T13463] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2768'. [ 361.429616][T13465] loop4: detected capacity change from 0 to 128 [ 361.442286][T13465] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 361.467065][ T788] usb 2-1: Using ep0 maxpacket: 8 [ 361.477811][ T788] usb 2-1: config 0 interface 0 altsetting 42 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.498535][ T788] usb 2-1: config 0 interface 0 altsetting 42 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 361.517218][ T788] usb 2-1: config 0 interface 0 has no altsetting 0 [ 361.517375][ T42] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 361.523996][ T788] usb 2-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 361.543644][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.556172][ T788] usb 2-1: config 0 descriptor?? [ 361.710261][T13461] loop5: detected capacity change from 0 to 32768 [ 362.108984][T13483] loop5: detected capacity change from 0 to 64 [ 362.315629][ T9] usb 2-1: USB disconnect, device number 33 [ 362.513464][T13481] loop4: detected capacity change from 0 to 32768 [ 362.535515][T13481] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 362.573022][T13481] XFS (loop4): Ending clean mount [ 362.583980][T13481] XFS (loop4): Quotacheck needed: Please wait. [ 362.641571][T13481] XFS (loop4): Quotacheck: Done. [ 362.765978][ T5991] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 362.972582][T13516] loop5: detected capacity change from 0 to 128 [ 363.090076][T13518] loop1: detected capacity change from 0 to 1024 [ 363.129055][T13518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.188222][T13510] loop2: detected capacity change from 0 to 32768 [ 363.199483][T13518] EXT4-fs error (device loop1): ext4_xattr_inode_iget:444: comm syz.1.2792: inode #398253073: comm syz.1.2792: iget: illegal inode # [ 363.235149][T13510] JBD2: Ignoring recovery information on journal [ 363.249253][T13518] EXT4-fs error (device loop1): ext4_xattr_inode_iget:449: comm syz.1.2792: error while reading EA inode 398253073 err=-117 [ 363.290338][T13510] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 363.321083][T13510] (syz.2.2787,13510,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10 [ 363.360821][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.382940][ T5782] ocfs2: Unmounting device (7,2) on (node local) [ 363.494569][T13531] loop5: detected capacity change from 0 to 512 [ 363.509472][T13531] EXT4-fs: Ignoring removed orlov option [ 363.527370][T13531] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 363.569855][T13531] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2249: inode #15: comm syz.5.2798: corrupted in-inode xattr: e_value size too large [ 363.584020][T13536] vivid-000: disconnect [ 363.584371][T13535] vivid-000: reconnect [ 363.594842][T13533] loop1: detected capacity change from 0 to 4096 [ 363.609889][T13531] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2798: couldn't read orphan inode 15 (err -117) [ 363.626143][T13531] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.642267][T13533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.673363][T13533] fs-verity (loop1, inode 16): Unknown hash algorithm number: 3 [ 363.726378][ T6124] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.758729][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.194340][T13547] loop1: detected capacity change from 0 to 4096 [ 364.235199][T13547] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 364.273379][T13547] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 364.297206][T13547] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 364.327349][T13547] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 364.385425][T13557] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2807'. [ 364.437310][T13547] ntfs: volume version 3.1. [ 364.532127][T13541] loop2: detected capacity change from 0 to 40427 [ 364.544591][T13561] genirq: Flags mismatch irq 10. 00000000 (pcl812) vs. 00000080 (virtio2) [ 364.560554][T13541] F2FS-fs (loop2): invalid crc value [ 364.607196][T13541] F2FS-fs (loop2): Found nat_bits in checkpoint [ 364.658260][T13566] loop5: detected capacity change from 0 to 1024 [ 364.671640][T13570] netlink: 'syz.4.2812': attribute type 2 has an invalid length. [ 364.700049][T13541] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 364.707678][T13566] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=802c018, mo2=0002] [ 364.725066][T13566] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.795191][T13576] loop1: detected capacity change from 0 to 764 [ 364.811494][ T27] audit: type=1800 audit(364.775:68): pid=13566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2811" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 364.823291][T13577] loop4: detected capacity change from 0 to 2048 [ 364.870150][ T6124] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.883412][T13577] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 364.896036][T13576] Symlink component flag not implemented [ 364.897672][T13577] NILFS (loop4): mounting unchecked fs [ 364.910118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 364.910214][T13576] Symlink component flag not implemented (116) [ 364.984347][T13577] NILFS (loop4): recovery complete [ 364.997488][T13579] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 365.224030][T13586] loop2: detected capacity change from 0 to 2048 [ 365.263432][T13586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.316107][T13586] MPI: mpi too large (113288 bits) [ 365.417538][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.469772][ T27] audit: type=1326 audit(365.425:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13596 comm="syz.1.2822" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39d958f749 code=0x0 [ 365.490909][ C0] vkms_vblank_simulate: vblank timer overrun [ 365.847364][ T27] audit: type=1326 audit(365.815:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13606 comm="syz.2.2826" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fb9cbb865e7 code=0x0 [ 366.269156][T13614] loop4: detected capacity change from 0 to 4096 [ 366.307864][T13616] loop5: detected capacity change from 0 to 64 [ 366.324426][T13617] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 366.528123][T13624] CIFS mount error: No usable UNC path provided in device string! [ 366.528123][T13624] [ 366.538949][T13624] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 367.077154][ T5774] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 367.096943][ T788] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 367.256926][ T5774] usb 6-1: Using ep0 maxpacket: 8 [ 367.263700][ T5774] usb 6-1: config 0 interface 0 altsetting 42 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.273748][ T5774] usb 6-1: config 0 interface 0 altsetting 42 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 367.287036][ T5774] usb 6-1: config 0 interface 0 has no altsetting 0 [ 367.293811][ T5774] usb 6-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 367.303926][ T5774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.313546][ T5774] usb 6-1: config 0 descriptor?? [ 367.320416][ T788] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 367.331941][ T788] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 367.344905][ T788] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 367.354133][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.362420][ T788] usb 2-1: Product: syz [ 367.366678][ T788] usb 2-1: Manufacturer: syz [ 367.371529][ T788] usb 2-1: SerialNumber: syz [ 367.378548][ T788] usb 2-1: config 0 descriptor?? [ 367.385946][ T788] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 367.967325][ T5832] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 367.968175][ T789] usb 6-1: USB disconnect, device number 26 [ 367.990220][ T788] gspca_sunplus: reg_r err -71 [ 367.995058][ T788] sunplus: probe of 2-1:0.0 failed with error -71 [ 368.003206][ T788] usb 2-1: USB disconnect, device number 34 [ 368.157002][ T5832] usb 5-1: Using ep0 maxpacket: 16 [ 368.164322][ T5832] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 368.172805][ T5832] usb 5-1: config 0 has no interface number 0 [ 368.181849][ T5832] usb 5-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 368.190996][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.199325][ T5832] usb 5-1: Product: syz [ 368.203577][ T5832] usb 5-1: Manufacturer: syz [ 368.208286][ T5832] usb 5-1: SerialNumber: syz [ 368.214443][ T5832] usb 5-1: config 0 descriptor?? [ 368.224331][ T5832] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.69/input/input53 [ 368.424212][ T5144] bcm5974 5-1:0.69: could not read from device [ 368.435319][ T5832] usb 5-1: USB disconnect, device number 24 [ 368.436114][ T5144] bcm5974 5-1:0.69: could not read from device [ 368.450285][ T5144] bcm5974 5-1:0.69: could not read from device [ 368.706724][T13657] xt_l2tp: unknown flags: 10 [ 368.876737][ T27] audit: type=1326 audit(368.835:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13663 comm="syz.1.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d958f749 code=0x7ffc0000 [ 368.899907][ T27] audit: type=1326 audit(368.835:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13663 comm="syz.1.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d958f749 code=0x7ffc0000 [ 368.922214][ T5774] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 368.932274][ T27] audit: type=1326 audit(368.845:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13663 comm="syz.1.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f39d958f749 code=0x7ffc0000 [ 369.115272][T13672] loop4: detected capacity change from 0 to 2048 [ 369.134596][T13672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 369.160443][ T5774] usb 6-1: Using ep0 maxpacket: 8 [ 369.169935][ T5774] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 369.179263][ T5774] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 369.187687][ T5774] usb 6-1: Product: syz [ 369.192305][ T5774] usb 6-1: Manufacturer: syz [ 369.197293][ T5774] usb 6-1: SerialNumber: syz [ 369.213518][ T5774] usb 6-1: config 0 descriptor?? [ 369.228536][ T5991] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 369.233831][ T5774] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 369.361292][T13685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2862'. [ 369.833312][ T5774] gspca_zc3xx: reg_w_i err -71 [ 369.838325][ T5774] gspca_zc3xx: probe of 6-1:0.0 failed with error -71 [ 369.864966][ T5774] usb 6-1: USB disconnect, device number 27 [ 370.040334][T13687] loop1: detected capacity change from 0 to 40427 [ 370.056324][T13687] F2FS-fs (loop1): invalid crc value [ 370.080122][T13687] F2FS-fs (loop1): Found nat_bits in checkpoint [ 370.171223][T13687] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 370.506211][T13704] loop5: detected capacity change from 0 to 512 [ 370.562928][T13704] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 2: comm syz.5.2869: invalid block [ 370.574425][T13696] loop4: detected capacity change from 0 to 32768 [ 370.606636][T13696] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 370.622785][T13704] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2869: invalid indirect mapped block 10 (level 1) [ 370.670759][T13704] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2869: invalid indirect mapped block 8 (level 1) [ 370.696527][T13698] loop2: detected capacity change from 0 to 40427 [ 370.710200][T13704] EXT4-fs (loop5): 1 truncate cleaned up [ 370.725429][T13704] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.726730][T13698] F2FS-fs (loop2): Found nat_bits in checkpoint [ 370.811379][ T5991] ocfs2: Unmounting device (7,4) on (node local) [ 370.813667][T13698] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 370.886424][T13698] syz.2.2867: attempt to access beyond end of device [ 370.886424][T13698] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 370.911231][ T6124] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.018211][ T5782] syz-executor: attempt to access beyond end of device [ 371.018211][ T5782] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 371.046769][ T5782] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 371.842782][T13752] loop2: detected capacity change from 0 to 512 [ 371.858143][T13752] EXT4-fs: Ignoring removed orlov option [ 371.877144][T13752] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 371.912477][T13752] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2249: inode #15: comm syz.2.2888: corrupted in-inode xattr: e_value size too large [ 371.947135][T13752] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2888: couldn't read orphan inode 15 (err -117) [ 371.978503][T13752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.031014][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.100188][T13760] loop1: detected capacity change from 0 to 64 [ 372.152772][T13760] hfs: small file entry [ 372.156601][T13762] loop4: detected capacity change from 0 to 1024 [ 372.209634][T13762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 372.332680][T13753] loop5: detected capacity change from 0 to 32768 [ 372.343480][T13753] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.2896 (13753) [ 372.369457][T13753] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 372.380711][T13753] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 372.389855][T13753] BTRFS info (device loop5): using free space tree [ 372.391151][ T5991] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 372.420299][T13773] loop1: detected capacity change from 0 to 8 [ 372.458533][T13773] SQUASHFS error: Failed to read block 0xdfa: -5 [ 372.465643][T13773] SQUASHFS error: Unable to read metadata cache entry [dfa] [ 372.502565][T13773] SQUASHFS error: Failed to read block 0x4e8: -5 [ 372.525433][T13773] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 372.553210][T13753] BTRFS info (device loop5): enabling ssd optimizations [ 372.556995][T13773] SQUASHFS error: Failed to read block 0x4de: -5 [ 372.570664][T13753] BTRFS info (device loop5): auto enabling async discard [ 372.593495][T13773] SQUASHFS error: Failed to read block 0x4de: -5 [ 372.612822][T13773] SQUASHFS error: Failed to read block 0x4de: -5 [ 372.619802][T13773] SQUASHFS error: Failed to read block 0x4de: -5 [ 372.629985][T13773] SQUASHFS error: Failed to read block 0x4de: -5 [ 372.636726][T13773] SQUASHFS error: Failed to read block 0x4de: -5 [ 372.643870][T13773] SQUASHFS error: Failed to read block 0x4e8: -5 [ 372.652907][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 372.652921][ T27] audit: type=1800 audit(372.615:78): pid=13773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2898" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 372.723060][ T6124] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 373.101454][T13807] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2903'. [ 373.364638][T13817] loop4: detected capacity change from 0 to 764 [ 373.391707][T13817] Symlink component flag not implemented [ 373.403013][T13817] Symlink component flag not implemented (116) [ 373.497117][ T5774] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 373.504838][T13803] loop1: detected capacity change from 0 to 40427 [ 373.521717][T13803] F2FS-fs (loop1): Found nat_bits in checkpoint [ 373.571931][T13803] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 373.620897][T13803] syz.1.2906: attempt to access beyond end of device [ 373.620897][T13803] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 373.654865][ T5784] syz-executor: attempt to access beyond end of device [ 373.654865][ T5784] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 373.671206][ T5784] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 373.715614][ T5774] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.726955][ T5774] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.738645][ T5774] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 373.753534][ T5774] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 373.762948][ T5774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.777885][ T5774] usb 6-1: config 0 descriptor?? [ 374.129444][T13835] loop1: detected capacity change from 0 to 1024 [ 374.136604][T13835] EXT4-fs: Ignoring removed oldalloc option [ 374.142979][T13835] EXT4-fs: Ignoring removed bh option [ 374.149961][T13835] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 374.174423][T13835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.204529][T13835] EXT4-fs: Ignoring removed orlov option [ 374.210881][T13835] EXT4-fs: Ignoring removed nobh option [ 374.212930][ T5774] plantronics 0003:047F:FFFF.0036: item 0 0 0 9 parsing failed [ 374.216512][T13835] EXT4-fs: can't change dax mount option while remounting [ 374.227419][ T5774] plantronics 0003:047F:FFFF.0036: parse failed [ 374.243296][ T5774] plantronics: probe of 0003:047F:FFFF.0036 failed with error -22 [ 374.258434][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.422725][ T5774] usb 6-1: USB disconnect, device number 28 [ 374.425168][T13826] orangefs_mount: mount request failed with -4 [ 374.513588][T13848] loop1: detected capacity change from 0 to 1024 [ 374.517222][T13850] loop4: detected capacity change from 0 to 512 [ 374.529009][T13850] EXT4-fs (loop4): Test dummy encryption mode enabled [ 374.541038][T13850] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.566050][T13850] EXT4-fs error (device loop4): htree_dirblock_to_tree:1083: inode #2: comm syz.4.2924: Directory hole found for htree leaf block 0 [ 374.581412][ T3450] hfsplus: b-tree write err: -5, ino 4 [ 374.606698][ T5991] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 374.754739][T13860] CUSE: unknown device info "" [ 374.760730][T13860] CUSE: zero length info key specified [ 374.804810][T13862] loop1: detected capacity change from 0 to 1024 [ 374.831648][T13864] loop4: detected capacity change from 0 to 512 [ 374.858200][ T79] hfsplus: b-tree write err: -5, ino 4 [ 375.104948][T13875] loop4: detected capacity change from 0 to 4096 [ 375.105249][T13877] loop1: detected capacity change from 0 to 1024 [ 375.114070][T13875] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 375.123505][T13877] EXT4-fs: Ignoring removed nobh option [ 375.133647][T13877] EXT4-fs: Ignoring removed bh option [ 375.143763][T13877] ext4: Unknown parameter 'noacl' [ 375.152996][T13875] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 375.576425][T13900] binder: 13899:13900 ioctl c0306201 0 returned -14 [ 375.954630][T13904] loop2: detected capacity change from 0 to 32768 [ 375.974665][T13904] ERROR: (device loop2): dtSearch: stack overrun! [ 375.974665][T13904] [ 375.986409][T13904] ERROR: (device loop2): remounting filesystem as read-only [ 375.994124][T13904] btstack dump: [ 375.998077][T13904] bn = 0, index = 0 [ 376.001905][T13904] bn = 72c, index = 96 [ 376.007130][T13904] bn = 0, index = 0 [ 376.011046][T13904] bn = 72c, index = 96 [ 376.015130][T13904] bn = 0, index = 0 [ 376.019445][T13904] bn = 72c, index = 96 [ 376.023523][T13904] bn = 0, index = 0 [ 376.027467][T13904] bn = 0, index = 0 [ 376.094453][T13910] loop5: detected capacity change from 0 to 512 [ 376.111244][T13910] EXT4-fs: Ignoring removed nomblk_io_submit option [ 376.136983][T13910] EXT4-fs: Ignoring removed bh option [ 376.161490][T13913] loop4: detected capacity change from 0 to 4096 [ 376.165671][T13910] EXT4-fs error (device loop5): mb_free_blocks:1938: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 376.187729][T13910] EXT4-fs error (device loop5): ext4_do_update_inode:5244: inode #11: comm syz.5.2960: corrupted inode contents [ 376.200557][T13910] EXT4-fs error (device loop5): ext4_dirty_inode:6120: inode #11: comm syz.5.2960: mark_inode_dirty error [ 376.220380][T13910] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2960: invalid indirect mapped block 1 (level 1) [ 376.234612][T13910] EXT4-fs error (device loop5): ext4_do_update_inode:5244: inode #11: comm syz.5.2960: corrupted inode contents [ 376.248228][T13910] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 376.262248][T13910] EXT4-fs error (device loop5): ext4_do_update_inode:5244: inode #11: comm syz.5.2960: corrupted inode contents [ 376.274962][T13913] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 376.289898][T13910] EXT4-fs error (device loop5): ext4_truncate:4294: inode #11: comm syz.5.2960: mark_inode_dirty error [ 376.292022][T13913] ntfs3: loop4: Failed to load $Extend (-22). [ 376.308358][T13913] ntfs3: loop4: Failed to initialize $Extend. [ 376.312017][T13910] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 376.327680][T13913] ntfs3: loop4: ino=5, "/" directory corrupted [ 376.331708][T13910] EXT4-fs (loop5): 1 truncate cleaned up [ 376.337479][T13913] ntfs3: loop4: ino=5, "/" directory corrupted [ 376.342833][T13910] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.442243][T13910] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz.5.2960: path /733/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 376.515726][ T6124] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.652961][T13921] loop4: detected capacity change from 0 to 1024 [ 376.678890][T13914] loop1: detected capacity change from 0 to 32768 [ 376.694770][T13921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.750682][T13914] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 376.785860][ T5991] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.886778][T13914] XFS (loop1): Ending clean mount [ 377.003341][ T5784] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 377.304631][T13945] loop2: detected capacity change from 0 to 136 [ 377.329288][T13945] Attempt to read inode for relocated directory [ 377.373843][T13947] loop4: detected capacity change from 0 to 512 [ 377.396350][T13947] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.2966: iget: bad i_size value: 38620345925642 [ 377.431354][T13919] loop5: detected capacity change from 0 to 32768 [ 377.454823][T13947] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2966: couldn't read orphan inode 15 (err -117) [ 377.471178][T13950] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2967'. [ 377.486439][T13947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.522572][T13919] JBD2: Ignoring recovery information on journal [ 377.598386][T13919] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 377.625590][ T5991] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.630610][T13919] (syz.5.2954,13919,1):ocfs2_reflink_ioctl:4427 ERROR: status = -14 [ 377.732540][ T6124] ocfs2: Unmounting device (7,5) on (node local) [ 378.091612][T13969] loop1: detected capacity change from 0 to 164 [ 378.150096][T13969] rock: directory entry would overflow storage [ 378.166947][T13969] rock: sig=0x4f50, size=4, remaining=3 [ 378.182686][T13969] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 378.367970][ T789] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 378.373219][T13958] loop2: detected capacity change from 0 to 32768 [ 378.388171][T13958] gfs2: fsid=localflocks: Trying to join cluster "lock_nolock", "localflocks" [ 378.401813][T13958] gfs2: fsid=localflocks: Now mounting FS (format 1801)... [ 378.416893][T13958] gfs2: fsid=localflocks.s: journal 0 mapped with 5 extents in 0ms [ 378.467525][T13958] gfs2: fsid=localflocks.s: first mount done, others may mount [ 378.550489][ T789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.577511][ T789] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 378.586659][ T789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.604809][ T789] usb 5-1: config 0 descriptor?? [ 378.774074][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.780737][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.032827][ T789] hid (null): bogus close delimiter [ 379.051269][ T789] itetech 0003:06CB:73F4.0037: bogus close delimiter [ 379.067437][ T789] itetech 0003:06CB:73F4.0037: item 0 1 2 10 parsing failed [ 379.076144][ T789] itetech: probe of 0003:06CB:73F4.0037 failed with error -22 [ 379.239752][ T5774] usb 5-1: USB disconnect, device number 25 [ 379.398110][ T27] audit: type=1326 audit(379.355:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13991 comm="syz.1.2984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d958f749 code=0x7ffc0000 [ 379.447681][ T27] audit: type=1326 audit(379.415:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13991 comm="syz.1.2984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d958f749 code=0x7ffc0000 [ 379.880676][T14012] loop2: detected capacity change from 0 to 1024 [ 379.923278][T14012] hfsplus: invalid length 32517 has been corrected to 255 [ 379.962555][T14012] hfsplus: invalid length 32517 has been corrected to 255 [ 380.000374][T14012] hfsplus: invalid length 32517 has been corrected to 255 [ 380.023635][T14017] hfsplus: invalid length 32517 has been corrected to 255 [ 380.062704][ T27] audit: type=1800 audit(380.025:81): pid=14012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2994" name="file2" dev="loop2" ino=22 res=0 errno=0 [ 380.127701][ T2955] hfsplus: b-tree write err: -5, ino 4 [ 380.328431][T14021] loop2: detected capacity change from 0 to 4096 [ 380.341297][T14021] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 380.363767][T14021] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 380.363837][T14021] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 380.366235][T14021] ntfs: volume version 3.1. [ 380.389074][T14023] program syz.1.2999 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 380.528155][T14010] loop5: detected capacity change from 0 to 32768 [ 380.537872][ T5782] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 380.553543][T14010] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 380.627655][T14010] XFS (loop5): Ending clean mount [ 380.804460][ T6124] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 381.291439][T14049] loop2: detected capacity change from 0 to 128 [ 381.386865][T14049] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 381.493183][T14049] hpfs: filesystem error: improperly stopped [ 381.528298][T14049] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 381.577205][T14049] hpfs: You really don't want any checks? You are crazy... [ 381.614120][T14049] hpfs: hpfs_map_sector(): read error [ 381.648356][T14049] hpfs: code page support is disabled [ 381.676936][T14049] hpfs: hpfs_map_4sectors(): unaligned read [ 381.683330][T14049] hpfs: hpfs_map_4sectors(): unaligned read [ 381.727789][T14049] hpfs: filesystem error: unable to find root dir [ 381.915642][T14042] loop1: detected capacity change from 0 to 131072 [ 381.929291][T14042] F2FS-fs (loop1): Test dummy encryption mode enabled [ 381.961503][T14042] F2FS-fs (loop1): invalid crc value [ 381.983337][T14042] F2FS-fs (loop1): Found nat_bits in checkpoint [ 382.027869][T14042] F2FS-fs (loop1): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 382.052395][T14042] F2FS-fs (loop1): Failed to read root inode [ 382.063110][T14060] loop2: detected capacity change from 0 to 1024 [ 382.096696][T14060] EXT4-fs: Ignoring removed oldalloc option [ 382.111721][T14062] loop4: detected capacity change from 0 to 1024 [ 382.118902][T14060] EXT4-fs: Ignoring removed bh option [ 382.125669][T14062] EXT4-fs: Ignoring removed nomblk_io_submit option [ 382.137948][T14060] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 382.157935][T14062] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 382.211723][T14062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.229431][T14060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.364773][ T5991] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.403124][T14060] EXT4-fs: Ignoring removed orlov option [ 382.440288][T14060] EXT4-fs: Ignoring removed nobh option [ 382.470319][T14060] EXT4-fs: can't change dax mount option while remounting [ 382.575262][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.696277][T14076] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3016'. [ 382.856588][T14079] loop4: detected capacity change from 0 to 2048 [ 382.871859][T14079] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 382.909538][T14081] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 383.206680][T14090] loop4: detected capacity change from 0 to 1024 [ 383.233421][T14090] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.251706][T14074] loop1: detected capacity change from 0 to 32768 [ 383.268859][T14074] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 383.293409][ T5991] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.304197][T14074] XFS (loop1): Ending clean mount [ 383.384700][ T5784] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 383.424989][T14106] loop4: detected capacity change from 0 to 1024 [ 383.461972][ T2877] hfsplus: b-tree write err: -5, ino 8 [ 383.684827][T14112] loop4: detected capacity change from 0 to 512 [ 383.828548][T14118] comedi: No check for data length of config insn id 1003 is implemented [ 383.841845][T14118] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 383.867316][T14118] comedi: Assuming n=15 is correct [ 384.215695][T14134] loop1: detected capacity change from 0 to 64 [ 384.550651][T14142] loop1: detected capacity change from 0 to 4096 [ 384.579656][T14144] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 384.984250][T14162] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma? [ 385.262497][T14176] loop1: detected capacity change from 0 to 1024 [ 385.346192][ T2877] hfsplus: b-tree write err: -5, ino 4 [ 385.600507][T14187] loop4: detected capacity change from 0 to 8192 [ 385.786456][T14179] loop5: detected capacity change from 0 to 32768 [ 385.794172][T14179] XFS (loop5): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 385.899109][T14197] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3070'. [ 386.031361][T14201] program syz.1.3072 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 386.154905][T14205] sp0: Synchronizing with TNC [ 386.155727][T14208] loop1: detected capacity change from 0 to 256 [ 386.169919][T14208] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 386.171230][T14209] loop4: detected capacity change from 0 to 64 [ 386.194576][T14204] [U] è [ 386.206037][T14209] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 386.463347][T14221] loop1: detected capacity change from 0 to 16 [ 386.481317][T14221] erofs: (device loop1): mounted with root inode @ nid 36. [ 386.519226][T14221] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 386.547570][T14221] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 386.572672][T14221] erofs: (device loop1): z_erofs_read_folio: read error -95 @ 0 of nid 36 [ 386.702708][T14228] loop4: detected capacity change from 0 to 256 [ 386.869754][T14239] loop1: detected capacity change from 0 to 1024 [ 386.885539][T14239] hfsplus: bad catalog entry type [ 386.972938][T14243] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3092'. [ 387.117122][ T789] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 387.297677][ T789] usb 5-1: Using ep0 maxpacket: 32 [ 387.306574][ T789] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 387.315486][ T789] usb 5-1: config 0 has no interface number 0 [ 387.322616][ T789] usb 5-1: config 0 interface 184 has no altsetting 0 [ 387.333571][ T789] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 387.343672][ T789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.367504][ T789] usb 5-1: Product: syz [ 387.374660][ T789] usb 5-1: Manufacturer: syz [ 387.386750][ T789] usb 5-1: SerialNumber: syz [ 387.395839][ T789] usb 5-1: config 0 descriptor?? [ 387.404374][ T789] smsc75xx v1.0.0 [ 387.408917][ T789] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 387.421451][ T789] smsc75xx: probe of 5-1:0.184 failed with error -22 [ 387.467339][T14256] loop5: detected capacity change from 0 to 64 [ 387.501462][T14256] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 387.642054][ T789] usb 5-1: USB disconnect, device number 26 [ 387.725936][T14262] comedi: No check for data length of config insn id 1003 is implemented [ 387.734728][T14262] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 387.748874][T14262] comedi: Assuming n=15 is correct [ 387.822130][ T27] audit: type=1326 audit(387.785:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14263 comm="syz.5.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88958f749 code=0x7ffc0000 [ 387.845071][ T27] audit: type=1326 audit(387.785:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14263 comm="syz.5.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88958f749 code=0x7ffc0000 [ 387.866699][ C1] vkms_vblank_simulate: vblank timer overrun [ 387.879335][ T27] audit: type=1326 audit(387.795:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14263 comm="syz.5.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb88958f749 code=0x7ffc0000 [ 387.900972][ C1] vkms_vblank_simulate: vblank timer overrun [ 387.909372][ T27] audit: type=1326 audit(387.795:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14263 comm="syz.5.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88958f749 code=0x7ffc0000 [ 387.930993][ C1] vkms_vblank_simulate: vblank timer overrun [ 387.937707][ T27] audit: type=1326 audit(387.795:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14263 comm="syz.5.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88958f749 code=0x7ffc0000 [ 387.959822][ T27] audit: type=1326 audit(387.795:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14263 comm="syz.5.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fb88958f749 code=0x7ffc0000 [ 387.981357][ C1] vkms_vblank_simulate: vblank timer overrun [ 387.990876][ T27] audit: type=1326 audit(387.795:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14263 comm="syz.5.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88958f749 code=0x7ffc0000 [ 388.064465][T14270] loop1: detected capacity change from 0 to 1024 [ 388.080271][T14270] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 388.533572][T14288] loop4: detected capacity change from 0 to 4096 [ 388.619514][T14288] ntfs3: loop4: failed to convert "0000" to iso8859-7 [ 388.641585][T14288] ntfs3: loop4: failed to convert name for inode 1e. [ 388.755633][T14304] loop5: detected capacity change from 0 to 512 [ 388.765590][T14304] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 388.794953][T14304] EXT4-fs (loop5): 1 truncate cleaned up [ 388.816000][T14304] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.931474][ T6124] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.947620][T14316] loop4: detected capacity change from 0 to 8 [ 388.965461][T14316] SQUASHFS error: lzo decompression failed, data probably corrupt [ 388.973684][T14316] SQUASHFS error: Failed to read block 0x0: -5 [ 388.981067][T14316] SQUASHFS error: lzo decompression failed, data probably corrupt [ 388.989230][T14316] SQUASHFS error: Failed to read block 0x0: -5 [ 388.995715][ T27] audit: type=1800 audit(388.955:89): pid=14316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3128" name="file2" dev="loop4" ino=3 res=0 errno=0 [ 389.014555][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.482805][T14324] loop1: detected capacity change from 0 to 32768 [ 389.489962][ T789] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 389.507099][T14324] JBD2: Ignoring recovery information on journal [ 389.538485][T14324] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 389.620883][T14324] (syz.1.3130,14324,1):ocfs2_reflink_ioctl:4427 ERROR: status = -14 [ 389.674270][ T5784] ocfs2: Unmounting device (7,1) on (node local) [ 389.678690][ T789] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 389.689477][ T789] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 389.713100][ T789] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 389.723822][ T789] usb 6-1: config 220 has no interface number 2 [ 389.735625][ T789] usb 6-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 64 [ 389.751165][ T789] usb 6-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 389.764787][ T789] usb 6-1: config 220 interface 0 has no altsetting 0 [ 389.776315][ T789] usb 6-1: config 220 interface 76 has no altsetting 0 [ 389.784288][ T789] usb 6-1: config 220 interface 1 has no altsetting 0 [ 389.799440][ T789] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 389.819169][ T789] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.841226][ T789] usb 6-1: Product: syz [ 389.845434][ T789] usb 6-1: Manufacturer: syz [ 389.867033][ T789] usb 6-1: SerialNumber: syz [ 390.094946][T14340] loop4: detected capacity change from 0 to 32768 [ 390.102052][ T789] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 390.113908][ T789] usb 6-1: No valid video chain found. [ 390.120746][ T789] usb 6-1: selecting invalid altsetting 0 [ 390.171042][T14340] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 390.171075][ T789] usb 6-1: selecting invalid altsetting 0 [ 390.195864][ T789] usbtest: probe of 6-1:220.1 failed with error -22 [ 390.219148][ T789] usb 6-1: USB disconnect, device number 29 [ 390.238371][T14354] loop2: detected capacity change from 0 to 2048 [ 390.245685][T14340] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 390.310600][T14354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.331140][ T5991] ocfs2: Unmounting device (7,4) on (node local) [ 390.435407][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.713843][T14374] netlink: 'syz.4.3152': attribute type 1 has an invalid length. [ 390.750943][T14376] loop5: detected capacity change from 0 to 64 [ 390.771631][T14380] comedi comedi3: pcl818: I/O port conflict (0x8001,16) [ 390.787026][T14376] hfs: unable to locate alternate MDB [ 390.792427][T14376] hfs: continuing without an alternate MDB [ 390.799194][T14380] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 390.809744][T14382] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3156'. [ 390.810914][T14380] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 390.828272][T14380] CPU: 1 PID: 14380 Comm: syz.2.3154 Not tainted syzkaller #0 [ 390.835738][T14380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 390.845822][T14380] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 390.851384][T14380] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 59 96 df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 38 96 df f9 4d 8b 24 24 48 83 c3 [ 390.870997][T14380] RSP: 0018:ffffc9000bb2fa18 EFLAGS: 00010206 [ 390.877069][T14380] RAX: 0000000000000005 RBX: ffff888141a6de00 RCX: 0000000000080000 [ 390.885028][T14380] RDX: ffffc9000cf79000 RSI: 00000000000031fa RDI: 00000000000031fb [ 390.892995][T14380] RBP: 0000000000000001 R08: ffff88802b42f12f R09: 1ffff11005685e25 [ 390.900976][T14380] R10: dffffc0000000000 R11: ffffed1005685e26 R12: 0000000000000028 [ 390.908961][T14380] R13: dffffc0000000000 R14: ffff88802b42f000 R15: dffffc0000000000 [ 390.916920][T14380] FS: 00007fb9cca456c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 390.925849][T14380] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 390.932435][T14380] CR2: 00007fb889572a60 CR3: 000000002e274000 CR4: 00000000003506e0 [ 390.940415][T14380] Call Trace: [ 390.943695][T14380] [ 390.946623][T14380] pcl818_detach+0x66/0xd0 [ 390.951043][T14380] comedi_device_detach_locked+0x172/0x710 [ 390.956855][T14380] comedi_device_attach+0x5cd/0x710 [ 390.962067][T14380] comedi_unlocked_ioctl+0x606/0xfe0 [ 390.967353][T14380] ? tomoyo_path_number_perm+0x477/0x590 [ 390.972979][T14380] ? comedi_poll+0x8c0/0x8c0 [ 390.977586][T14380] ? __fget_files+0x28/0x4d0 [ 390.982172][T14380] ? bpf_lsm_file_ioctl+0x9/0x10 [ 390.987111][T14380] ? security_file_ioctl+0x80/0xa0 [ 390.992226][T14380] ? comedi_poll+0x8c0/0x8c0 [ 390.996817][T14380] __se_sys_ioctl+0xfd/0x170 [ 391.001412][T14380] do_syscall_64+0x55/0xb0 [ 391.005823][T14380] ? clear_bhb_loop+0x40/0x90 [ 391.010490][T14380] ? clear_bhb_loop+0x40/0x90 [ 391.015156][T14380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 391.021067][T14380] RIP: 0033:0x7fb9cbb8f749 [ 391.025515][T14380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.045109][T14380] RSP: 002b:00007fb9cca45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 391.053536][T14380] RAX: ffffffffffffffda RBX: 00007fb9cbde5fa0 RCX: 00007fb9cbb8f749 [ 391.061506][T14380] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 391.069483][T14380] RBP: 00007fb9cbc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 391.077460][T14380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.085426][T14380] R13: 00007fb9cbde6038 R14: 00007fb9cbde5fa0 R15: 00007ffc31fc1578 [ 391.093400][T14380] [ 391.096416][T14380] Modules linked in: [ 391.110942][T14380] ---[ end trace 0000000000000000 ]--- [ 391.116484][T14380] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 391.122770][T14380] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 59 96 df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 38 96 df f9 4d 8b 24 24 48 83 c3 [ 391.142904][T14380] RSP: 0018:ffffc9000bb2fa18 EFLAGS: 00010206 [ 391.149747][T14380] RAX: 0000000000000005 RBX: ffff888141a6de00 RCX: 0000000000080000 [ 391.158945][T14380] RDX: ffffc9000cf79000 RSI: 00000000000031fa RDI: 00000000000031fb [ 391.167654][T14380] RBP: 0000000000000001 R08: ffff88802b42f12f R09: 1ffff11005685e25 [ 391.175686][T14380] R10: dffffc0000000000 R11: ffffed1005685e26 R12: 0000000000000028 [ 391.183918][T14380] R13: dffffc0000000000 R14: ffff88802b42f000 R15: dffffc0000000000 [ 391.191959][T14380] FS: 00007fb9cca456c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 391.201278][T14380] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 391.208959][T14380] CR2: 00007f39d97b7198 CR3: 000000002e274000 CR4: 00000000003506e0 [ 391.217268][T14380] Kernel panic - not syncing: Fatal exception [ 391.223565][T14380] Kernel Offset: disabled [ 391.227872][T14380] Rebooting in 86400 seconds..