last executing test programs: 4.402977523s ago: executing program 0 (id=1230): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)=0x1) 3.644268513s ago: executing program 1 (id=1234): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0x200000, 0x200000}) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 3.333585761s ago: executing program 1 (id=1236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004a0000000160a010100000000000000000a0000000900020073797a30000000000900010073795731000000000900020073797a31000000000900020073797a3100000000240003800800024000000003080001400000000008000240000000000800024000007fff0900010073797a310000000008000740000000020c00054000000000000000040900020073797a32000000000900020073797a32000000002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.214060244s ago: executing program 1 (id=1237): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000180)={[{@pquota}, {@discard}, {@nolargeio}, {@lazytime}, {@nogrpid}, {@bsdgroups}, {@quota}, {@nolazytime}]}, 0x1, 0x97ee, &(0x7f0000012f40)="$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") stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000280)=@loop={'/dev/loop', 0x0}, r0, 0x0) 2.578094101s ago: executing program 2 (id=1240): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x58, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) 2.330750188s ago: executing program 2 (id=1241): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 2.172720722s ago: executing program 2 (id=1243): syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000400)='./file0\x00', 0x4, &(0x7f0000000600)=ANY=[], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r0, 0xfffffffffffffffd, 0xbb) 2.059282056s ago: executing program 3 (id=1244): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r1, r0}, 0xc) 1.863273421s ago: executing program 2 (id=1245): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) 1.808361292s ago: executing program 3 (id=1246): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x7, 0xee6, &(0x7f0000001ec0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000240)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 1.467269301s ago: executing program 2 (id=1247): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.248809987s ago: executing program 1 (id=1248): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x24, r1, 0xe985e4df3848afb5, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x24}}, 0x0) 1.186400269s ago: executing program 0 (id=1249): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x860}, 0x20000000) 1.091524101s ago: executing program 3 (id=1250): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 795.782479ms ago: executing program 0 (id=1251): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x40) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c00b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d788aeeecb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369ed300b94d996fc592adb22c379be070ce5cd806da85a49e7d7199cceb4c5b750222485325cf1073bf87e93bdf7da8af8f5f626541afd142e24ee8f4be9f038453c0edf500deabfe4d1a7a9de51df012bc2f3b767b3c03be6ace8c37ad571323cd363116e01f98a8ff8148d3900a65b788e99ddf9d9a2383f1730c7868d2dd031034bce5a77bd1ef3385105968be7bd830bde788092f657be36f89ea55ced486e18982d01339ed04a934a43c7b3be5e6bd03cbe773a938f621809345ec07cfceb013e3d76d500d97c8bee6ff54980ac3d221fcb35724ba64adb29ae8db909e097d78ff9542196635a14266944b850c9d436e96cc806a88090cbfc9db7ce83231bc043ded67966cfd68b800f6030a85f6bb070a2a5b372be2dacea7884b42e76e164af04e47f90ce0694623dce23cd1471f1a6029f68331317073e1a2d8cfb16f821c867d35a609649cf36aa781fa0a381f934844366d4e3ab8dd239c6ec35c15f307a7ed07869aacec38d787fd9c08e9dda1a28bf1a15b004bb1d88aa429ee8e927f5a1e1445685d8923cad92c90c79726d5e73dfe741de35498842cf51a4f09b97b1c14d33213705b95e84a8853fab4e1ced6faecea9d9203b038594bceb202a9d47f862c4f1853db9a0a7bf98ed9d2e3012358b38d092bd1ed7efb1a9e582ac5ef30c9b476e185f537f40ae8189528b480436122a939967e8d862e01172245ebced9f5251dd302e7e974c1db40be1e9e79799c27384caf6485e7c469b77cd6b28f71e39f84d2adbe074dd2bed6636e6853655adc3d1a47eff697e8edba53e6b281aea94798d82da7d3e86d09d869e5e345316eeeced4e15fc39234a0b0104e0b205c95eda632d0e86b095b284f441a62cb0e7262bc1967ee75f5c2d459011b0c15f4c85b02150a8834eda7f84cc96dde04e4abbdf5985a9c7218797820251b5804cae80c9a726afddf36793ae52cfb38e4e19740d6e07e4ed7c01001ab87b7fb12d5b70a75938d234c83d863b1763aec37b41d204fc319c6e802734ed681ea179fe6cad4857c3ca0e236e7b9867688d8bd7749e919f2d4f57f2249c9ccaf76a23760569b0fbde2db12ca0169e74982c1f4f0494aae13f4838b3f50d9ab0f6e328250d6fc34c0156e4b754c5c648b4ef8af32c91859f9706048f029634cefd0d767e8b7743262cb8a468ad37dfa47a745495e3f03cfa1d4ed71af55453c0a25fa1122a9054bcc4d9960c9a54f36b6db55154ab7dd19890d9f8ff3549e0fbd5a655319566b7f9c72be0242e7ffb59020356c3ffb5b9c43858e69d7b677a9bc5b8a64721a51b75a254e07199a73726834bea05901455ad53b38116b953c970b2002d0d1f91deb73ccb7266fbb21aa8555599daed7585575ef3efbd737f2523018ba4645d862889d5c3d91b12f04166db8bffecde54ee278d0d5351f3bf1f8902ff3f4c24a8c0c8a4e6addc9baadc471813589324d3128a1b193137c15c01be9f367317b1c885301ff8e9df728efa37df27f65eb0464055091f2ed469fdab48f413e3978f73ff9dffeb85453e841f86594612ac91b50add8d14910748bfa903033662f3e735ce6d299ce52338a96035aa89f63bd59d151fb20c38125236cbc0d795ac6f8da4cafc74714ed62a23b017e15adcaade58385b78c6945fb30a2539c42b1e415879433b9fb6966c6d19ed19f9f90cbd360d936a8b9f8e03bca5a83c063651b4636a7783bbda6417c83e470a16dfb115344a527436242ace9341432b5816b5e6609d97d600e142ca3cf74cbc00e1d9ee203cdfad339ce460b294f3931c5bd8ae6da8fc14d66a01bae4a212ef3d914e58c13217c8ad91628636b56257c7ca41b404cc2d4b5d50e26ebefc74656c62b1b4e9b6c5b6cc8d79101460f719d95925630bf99e042018439c50026513d680ea573620132ded57dea9e2da4e16f17dbc171642b1e80a3f41311ee73441302285668792160db6614fdb30d25a5719d2ae03ab98ea167597c48dd8197e7faf6189d801134462027901506c5ff1ae2558d96722217f65131d2f429693ae9fae19c101319473608976d08cc1c0d98f789b0c364e8aca574321ab2857af1015f1588afd313503085db4d99961a9391db06c10477ceb44199f1648594e8f9b452fafdab49b1962d02ee77ebd31b7931174a729fa943cb18102130e7e08eaba77df066069c2c3564fc85881ba0dad12c4f06a9e6dea9fea53931ff85e38505eb7ad60a52e2a8a248b3f4d0d55eee31f75f110c70e3b12409a79a5a98b0156c6d2a5d94604b8fa202b12746a365c708c671316cc0ffff6e9b7139b337953be22672a4910e1eb28cccc023b77028e20a6d377a339372f0dc235069f41c2692b0a3a7e0f315f4aebeef435a46b2e8b8462739293f9184c01b1434e87bf3fd48be54bf437056a1d2cff0c7aa52578013f96b1d5100ca936ff029cfd6f9a093621f684196ed7e1d363a97c647c34fe5f2370e7ab9dc718a1fc317779ab8a04bc12c01b778d17eea0b546bce03475fc6373c860714df0322dde550186c553ebd61ed18c0b80655f0827a63d209117ca23b026c1ad30bac4d43a4611292c7049f855b829a3a17fd2b83c142078beed8ca07b7cb7cd624705ccc160246c81174a4d3a9f2057caffe84b1ac073375e065c1ff4e9e22e7d87b3adb40ff796132e4ed86e5fc9f9616f8e", 0x83f}], 0x3}, 0x0) 467.967848ms ago: executing program 3 (id=1252): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20001) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xa237}) 442.141738ms ago: executing program 0 (id=1253): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x24, r1, 0x201, 0x70bd2e, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x25}}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x4, 0xe}]]}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) 267.235554ms ago: executing program 0 (id=1254): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd2b, 0x2000, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_IIF={0x8}, @RTA_DST={0x8, 0x1, @local}]}, 0x2c}}, 0x20002000) 250.718523ms ago: executing program 3 (id=1255): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000005000000000000000000000085000000270000001801000020646c2500000000402020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="7a7fa22c2aff88d753ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 185.653616ms ago: executing program 1 (id=1256): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x64000080) 7.68673ms ago: executing program 2 (id=1257): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)=0x1) 6.78208ms ago: executing program 0 (id=1265): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)={0x20, r1, 0x1f1179dba23aa3cd, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x24044404}, 0x80c0) 6.19533ms ago: executing program 1 (id=1258): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0xffffff00, 0x2f, 0x66, 0xcc7, 0x5, 0x80007, 0x5, 0x100, 0x9, 0x1, 0x1db, 0x5, 0x0, 0x80000101, 0x5, 0x1a449, 0x3, 0x41020003, 0x208d, 0x2, 0xd27, 0xae, 0x7fff, 0x8, 0x3c, 0x1, 0x6, 0x0, 0x1000000]}) 0s ago: executing program 3 (id=1259): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 04175][ T6507] loop3: detected capacity change from 0 to 512 [ 119.545898][ T6507] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 119.559578][ T6507] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 119.570678][ T6507] System zones: 1-12 [ 119.575820][ T6507] EXT4-fs (loop3): orphan cleanup on readonly fs [ 119.601028][ T6507] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.268: attempt to clear invalid blocks 1024 len 1 [ 119.641800][ T6507] EXT4-fs (loop3): Remounting filesystem read-only [ 119.710276][ T6507] EXT4-fs (loop3): 1 truncate cleaned up [ 119.731997][ T6507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 119.901920][ T6517] loop2: detected capacity change from 0 to 128 [ 119.941742][ T6517] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 119.990989][ T6517] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.054989][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 120.087262][ T6520] netlink: 'syz.0.274': attribute type 10 has an invalid length. [ 120.237456][ T6520] team0: Port device netdevsim0 added [ 120.257416][ T6521] netlink: 'syz.0.274': attribute type 10 has an invalid length. [ 120.324558][ T6526] loop3: detected capacity change from 0 to 512 [ 120.334965][ T6521] team0: Port device netdevsim0 removed [ 120.360333][ T6521] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 120.374660][ T6524] warning: `syz.2.276' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 120.394540][ T6526] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.275: invalid indirect mapped block 256 (level 2) [ 120.462869][ T6526] EXT4-fs (loop3): 2 truncates cleaned up [ 120.483130][ T6526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.519401][ T6531] loop2: detected capacity change from 0 to 64 [ 120.549449][ T28] audit: type=1800 audit(1777411477.942:90): pid=6526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.275" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 120.580648][ T6526] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.275: bg 0: block 5: invalid block bitmap [ 120.608480][ T6526] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 120.765643][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.977668][ T6540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.282'. [ 121.231786][ T6546] nbd: must specify a size in bytes for the device [ 121.464938][ T6552] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 121.484672][ T6552] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 121.502922][ T6552] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 121.634844][ T6533] loop1: detected capacity change from 0 to 32768 [ 121.715314][ T6533] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 121.776505][ T6533] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 121.869106][ T6556] loop2: detected capacity change from 0 to 2048 [ 121.875315][ T6538] loop0: detected capacity change from 0 to 40427 [ 121.889203][ T6538] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 121.907502][ T6538] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 121.935037][ T6556] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 121.937503][ T6538] F2FS-fs (loop0): build fault injection attr: rate: 17008, type: 0x7ffff [ 122.019682][ T6556] NILFS (loop2): mounting unchecked fs [ 122.021517][ T6538] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x6 [ 122.043437][ T5948] udevd[5948]: incorrect nilfs2 checksum on /dev/loop2 [ 122.058434][ T6538] F2FS-fs (loop0): invalid crc value [ 122.058517][ T6556] NILFS (loop2): recovery complete [ 122.116458][ T6566] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.136371][ T6538] F2FS-fs (loop0): Found nat_bits in checkpoint [ 122.219464][ T5767] ocfs2: Unmounting device (7,1) on (node local) [ 122.442869][ T6570] netlink: 40 bytes leftover after parsing attributes in process `syz.1.291'. [ 122.481819][ T6538] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 122.517200][ T6538] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 122.745490][ T5769] syz-executor: attempt to access beyond end of device [ 122.745490][ T5769] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 122.798219][ T5769] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 123.301640][ T6592] loop2: detected capacity change from 0 to 1024 [ 123.358375][ T6592] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 123.404765][ T6592] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c801e018, mo2=0000] [ 123.471984][ T6592] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 2: comm syz.2.302: lblock 2 mapped to illegal pblock 2 (length 1) [ 123.597081][ T6592] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 123.633761][ T6592] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 48: comm syz.2.302: lblock 0 mapped to illegal pblock 48 (length 1) [ 123.721770][ T6592] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 123.744256][ T6592] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.302: Failed to acquire dquot type 0 [ 123.800302][ T6592] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 123.848947][ T6592] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.302: mark_inode_dirty error [ 123.883910][ T6592] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 123.905415][ T6592] EXT4-fs (loop2): 1 orphan inode deleted [ 123.913681][ T6592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.922374][ T6603] loop3: detected capacity change from 0 to 4096 [ 123.943853][ T43] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 123.980599][ T43] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 124.002136][ T43] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:3: Failed to release dquot type 0 [ 124.131770][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.160347][ T1087] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 124.210930][ T1087] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 124.232468][ T1087] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 0 [ 124.281374][ T5768] EXT4-fs error (device loop2): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 124.328681][ T5768] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 124.360105][ T5768] EXT4-fs error (device loop2): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 124.565860][ T6614] 9pnet_fd: p9_fd_create_tcp (6614): problem binding to privport [ 124.698825][ T6615] loop2: detected capacity change from 0 to 4096 [ 124.755927][ T6618] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.055001][ T6609] loop0: detected capacity change from 0 to 40427 [ 125.080608][ T6609] F2FS-fs (loop0): invalid crc value [ 125.100408][ T6609] F2FS-fs (loop0): Found nat_bits in checkpoint [ 125.213264][ T6625] loop2: detected capacity change from 0 to 64 [ 125.224928][ T6609] F2FS-fs (loop0): Start checkpoint disabled! [ 125.259879][ T6609] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 125.333829][ T6625] syz.2.314: attempt to access beyond end of device [ 125.333829][ T6625] loop2: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 125.350278][ T6625] Buffer I/O error on dev loop2, logical block 134217734, lost async page write [ 125.385394][ T6628] loop3: detected capacity change from 0 to 512 [ 125.448744][ T6609] F2FS-fs (loop0): Checkpoint should be enabled. [ 125.486412][ T6628] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.316: inode has both inline data and extents flags [ 125.555719][ T6628] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.316: couldn't read orphan inode 15 (err -117) [ 125.639141][ T6628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.747152][ T6628] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 125.852347][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.962088][ T6637] netlink: 104 bytes leftover after parsing attributes in process `syz.3.321'. [ 126.171523][ T6643] sp0: Synchronizing with TNC [ 126.357985][ T788] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 126.425045][ T6651] loop2: detected capacity change from 0 to 64 [ 126.560295][ T788] usb 4-1: Using ep0 maxpacket: 8 [ 126.580823][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.600622][ T788] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 126.650215][ T788] usb 4-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 126.680109][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.708591][ T788] usb 4-1: config 0 descriptor?? [ 126.793769][ T43] tipc: Subscription rejected, illegal request [ 126.950943][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 127.155192][ T788] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 127.187485][ T23] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 127.203225][ T788] logitech 0003:046D:C294.0004: unknown main item tag 0x4 [ 127.220992][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.242246][ T788] logitech 0003:046D:C294.0004: unknown main item tag 0xd [ 127.259853][ T23] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 127.277780][ T788] logitech 0003:046D:C294.0004: item fetching failed at offset 38/41 [ 127.304684][ T23] usb 3-1: config 1 has no interface number 1 [ 127.313837][ T788] logitech 0003:046D:C294.0004: parse failed [ 127.320899][ T23] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 127.335311][ T788] logitech: probe of 0003:046D:C294.0004 failed with error -22 [ 127.358420][ T23] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.378077][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.386516][ T23] usb 3-1: Product: syz [ 127.402724][ T23] usb 3-1: Manufacturer: syz [ 127.412425][ T23] usb 3-1: SerialNumber: syz [ 127.438048][ T8] usb 4-1: USB disconnect, device number 4 [ 127.586289][ T6677] loop1: detected capacity change from 0 to 2048 [ 127.635119][ T6677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 127.666986][ T6677] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #12: comm syz.1.340: corrupted in-inode xattr: invalid size in ea xattr [ 127.685974][ T23] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 127.713338][ T23] usb 3-1: MIDIStreaming interface descriptor not found [ 127.804608][ T23] usb 3-1: USB disconnect, device number 2 [ 127.813641][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 127.972065][ T6682] udevd[6682]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.165744][ T6675] loop0: detected capacity change from 0 to 32768 [ 129.206533][ T6689] loop3: detected capacity change from 0 to 32768 [ 129.340223][ T6689] JBD2: Ignoring recovery information on journal [ 129.464813][ T6689] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 129.767794][ T5770] ocfs2: Unmounting device (7,3) on (node local) [ 129.923714][ T6730] loop1: detected capacity change from 0 to 24 [ 129.953565][ T6730] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 129.976738][ T6730] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 130.134468][ T6734] loop1: detected capacity change from 0 to 512 [ 130.731559][ T6748] netlink: 44 bytes leftover after parsing attributes in process `syz.1.368'. [ 131.086802][ T6764] loop2: detected capacity change from 0 to 16 [ 131.117127][ T6764] erofs: (device loop2): mounted with root inode @ nid 36. [ 131.332561][ T6769] loop0: detected capacity change from 0 to 256 [ 131.378089][ T6769] exfat: Deprecated parameter 'utf8' [ 131.384792][ T6769] exfat: Deprecated parameter 'utf8' [ 131.436625][ T6769] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 131.484328][ T6770] loop2: detected capacity change from 0 to 4096 [ 131.711807][ T6770] ntfs: volume version 3.1. [ 131.830288][ T6776] netem: change failed [ 131.957731][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 132.021328][ T6780] loop0: detected capacity change from 0 to 8 [ 132.198955][ T23] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 132.215226][ T23] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 132.224737][ T23] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 132.265395][ T23] usb 2-1: config 220 has no interface number 2 [ 132.276990][ T23] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 132.315070][ T23] usb 2-1: config 220 interface 0 has no altsetting 0 [ 132.336113][ T6788] loop3: detected capacity change from 0 to 64 [ 132.347087][ T23] usb 2-1: config 220 interface 76 has no altsetting 0 [ 132.367128][ T23] usb 2-1: config 220 interface 1 has no altsetting 0 [ 132.381721][ T23] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 132.404710][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.449323][ T23] usb 2-1: Product: syz [ 132.468039][ T23] usb 2-1: Manufacturer: syz [ 132.472948][ T23] usb 2-1: SerialNumber: syz [ 132.589402][ T6792] loop0: detected capacity change from 0 to 512 [ 132.611294][ T788] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 132.617745][ T6792] EXT4-fs: Ignoring removed nobh option [ 132.629375][ T6794] loop3: detected capacity change from 0 to 256 [ 132.652415][ T6792] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 132.687049][ T6792] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.391: invalid indirect mapped block 256 (level 1) [ 132.706375][ T23] usb 2-1: selecting invalid altsetting 0 [ 132.731992][ T6794] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x5bae174d, utbl_chksum : 0xe619d30d) [ 132.738753][ T23] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 132.756988][ T23] usb 2-1: No valid video chain found. [ 132.775627][ T6792] EXT4-fs (loop0): Remounting filesystem read-only [ 132.784729][ T23] usb 2-1: selecting invalid altsetting 0 [ 132.791694][ T23] usbtest: probe of 2-1:220.1 failed with error -22 [ 132.793414][ T6794] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 132.803762][ T23] usb 2-1: USB disconnect, device number 2 [ 132.809747][ T6792] EXT4-fs (loop0): 1 truncate cleaned up [ 132.817998][ T788] usb 3-1: Using ep0 maxpacket: 16 [ 132.840666][ T6792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.854293][ T788] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.871047][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 132.919482][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 132.942664][ T788] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 132.953144][ T788] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.968717][ T788] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 132.978764][ T788] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 132.997169][ T788] usb 3-1: Manufacturer: syz [ 133.007363][ T788] usb 3-1: config 0 descriptor?? [ 133.081332][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.154517][ T6798] loop3: detected capacity change from 0 to 64 [ 133.221761][ T6798] hfs: request for non-existent node 327680 in B*Tree [ 133.235545][ T6798] hfs: request for non-existent node 327680 in B*Tree [ 133.377404][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'. [ 133.406812][ T788] rc_core: IR keymap rc-hauppauge not found [ 133.412981][ T788] Registered IR keymap rc-empty [ 133.417428][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.424672][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.431922][ T788] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 133.502655][ T788] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 133.551221][ T788] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 133.568928][ T788] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 133.597013][ T788] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 133.646854][ T788] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 133.707663][ T788] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 133.756870][ T788] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 133.798743][ T788] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 133.876845][ T788] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 133.933161][ T788] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 133.934633][ T6818] loop1: detected capacity change from 0 to 128 [ 133.982145][ T788] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 134.030950][ T6818] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 134.046800][ T788] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 134.096945][ T6818] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 134.112775][ T788] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 134.164300][ T788] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 134.227626][ T788] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 134.260991][ T788] usb 3-1: USB disconnect, device number 3 [ 134.335742][ T6826] loop3: detected capacity change from 0 to 1024 [ 134.381251][ T5767] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.436396][ T6826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.647987][ T6826] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 134.818415][ T6835] netlink: 27 bytes leftover after parsing attributes in process `syz.0.406'. [ 134.833050][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.426748][ T788] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 135.616784][ T788] usb 4-1: Using ep0 maxpacket: 32 [ 135.646436][ T788] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 135.670967][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.704807][ T788] usb 4-1: Product: syz [ 135.714981][ T788] usb 4-1: Manufacturer: syz [ 135.720352][ T788] usb 4-1: SerialNumber: syz [ 135.747932][ T788] usb 4-1: config 0 descriptor?? [ 135.779462][ T788] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 135.807143][ T788] dvb-usb: bulk message failed: -22 (4/0) [ 135.821966][ T788] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 135.853208][ T788] dvb-usb: bulk message failed: -22 (5/0) [ 135.866747][ T788] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 135.940384][ T788] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 135.973162][ T788] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 135.993308][ T6842] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 136.033580][ T788] usb 4-1: media controller created [ 136.040179][ T6842] dvb-usb: bulk message failed: -22 (7/0) [ 136.066805][ T6842] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 136.108008][ T6842] ttusb2: i2c transfer failed. [ 136.118219][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 136.138615][ T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 136.211608][ T788] usb 4-1: selecting invalid altsetting 3 [ 136.231015][ T788] ttusb2: set interface to alts=3 failed [ 136.366979][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 136.384045][ T788] DVB: Unable to find symbol tda10086_attach() [ 136.394368][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.398434][ T788] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 136.436474][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 136.444185][ T788] dvb-usb: bulk message failed: -22 (4/0) [ 136.456792][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 136.468286][ T788] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 136.470075][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 136.493802][ T788] dvb-usb: bulk message failed: -22 (5/0) [ 136.506756][ T788] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 136.516703][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.527163][ T788] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 136.562832][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 136.571210][ T788] usb 4-1: USB disconnect, device number 5 [ 136.615754][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 136.636023][ T9] usb 1-1: Manufacturer: syz [ 136.669470][ T9] usb 1-1: config 0 descriptor?? [ 136.705633][ T5807] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 136.749540][ T788] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 136.929068][ T5807] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 136.949457][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.983572][ T5807] usb 2-1: config 0 descriptor?? [ 137.019332][ T5807] cp210x 2-1:0.0: cp210x converter detected [ 137.137172][ T9] rc_core: IR keymap rc-hauppauge not found [ 137.143405][ T9] Registered IR keymap rc-empty [ 137.177146][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 137.240855][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 137.287902][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 137.337743][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 137.374101][ T6882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.429'. [ 137.392550][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 137.411230][ T6882] netlink: 36 bytes leftover after parsing attributes in process `syz.3.429'. [ 137.437158][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 137.462016][ T6882] 8021q: VLANs not supported on gre0 [ 137.497146][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 137.545352][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 137.586914][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 137.637187][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 137.664915][ T5807] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 137.677686][ T5807] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 137.696984][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 137.734422][ T5807] usb 2-1: cp210x converter now attached to ttyUSB0 [ 137.757924][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 137.775553][ T5807] usb 2-1: USB disconnect, device number 3 [ 137.834675][ T5807] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 137.847887][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 137.860812][ T5807] cp210x 2-1:0.0: device disconnected [ 137.917138][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 137.979465][ T9] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 138.010421][ T9] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 138.050868][ T9] usb 1-1: USB disconnect, device number 3 [ 138.247258][ T6895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.435'. [ 138.312355][ T6897] loop2: detected capacity change from 0 to 4096 [ 138.406928][ T6898] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.660759][ T6897] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean [ 139.014099][ T6913] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 139.067736][ T6913] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 139.082888][ T6913] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 139.082888][ T6913] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 139.126836][ T6913] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô" [ 139.178407][ T6915] netlink: 'syz.1.445': attribute type 1 has an invalid length. [ 139.186732][ T6913] CUSE: DEVNAME unspecified [ 139.447127][ T6924] netlink: 'syz.3.448': attribute type 10 has an invalid length. [ 140.450886][ T6951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.461'. [ 140.706954][ T6958] netlink: 'syz.1.464': attribute type 2 has an invalid length. [ 140.736975][ T6935] loop2: detected capacity change from 0 to 32768 [ 140.847646][ T6935] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 141.101071][ T6935] XFS (loop2): Ending clean mount [ 141.426928][ T5768] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 141.883057][ T6989] loop0: detected capacity change from 0 to 256 [ 141.926359][ T6989] exfat: Deprecated parameter 'utf8' [ 141.946951][ T6989] exfat: Deprecated parameter 'utf8' [ 142.215444][ T6989] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acb235, utbl_chksum : 0xe619d30d) [ 142.299220][ T6981] loop3: detected capacity change from 0 to 32768 [ 142.324781][ T6981] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.472 (6981) [ 142.398249][ T6981] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 142.417486][ T6981] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 142.429415][ T6981] BTRFS info (device loop3): setting nodatacow, compression disabled [ 142.438336][ T6981] BTRFS info (device loop3): setting datasum, datacow enabled [ 142.444878][ T7001] loop2: detected capacity change from 0 to 128 [ 142.446313][ T6981] BTRFS info (device loop3): force clearing of disk cache [ 142.476754][ T6981] BTRFS info (device loop3): enabling ssd optimizations [ 142.496751][ T6981] BTRFS info (device loop3): using spread ssd allocation scheme [ 142.513430][ T6981] BTRFS info (device loop3): turning on sync discard [ 142.517945][ T7001] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.526996][ T6981] BTRFS info (device loop3): enabling disk space caching [ 142.541143][ T5807] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 142.546885][ T6981] BTRFS info (device loop3): enabling auto defrag [ 142.559597][ T7001] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 142.572630][ T6981] BTRFS info (device loop3): turning off barriers [ 142.606858][ T6981] BTRFS info (device loop3): not using ssd optimizations [ 142.645123][ T6981] BTRFS info (device loop3): not using spread ssd allocation scheme [ 142.698677][ T6981] BTRFS info (device loop3): disk space caching is enabled [ 142.737227][ T5807] usb 2-1: Using ep0 maxpacket: 8 [ 142.748814][ T5807] usb 2-1: config 0 has an invalid descriptor of length 233, skipping remainder of the config [ 142.767114][ T5807] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 142.775116][ T5768] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.780375][ T5807] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.802608][ T5807] usb 2-1: config 0 interface 0 has no altsetting 0 [ 142.810526][ T5807] usb 2-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 142.826734][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.843642][ T5807] usb 2-1: config 0 descriptor?? [ 142.920879][ T6981] BTRFS info (device loop3): rebuilding free space tree [ 143.011781][ T6981] BTRFS info (device loop3): disabling free space tree [ 143.028536][ T6981] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 143.041684][ T6981] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 143.065295][ T7023] loop2: detected capacity change from 0 to 128 [ 143.115645][ T7023] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 143.133033][ T7023] hpfs: filesystem error: improperly stopped [ 143.139948][ T7023] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 143.150159][ T7023] hpfs: You really don't want any checks? You are crazy... [ 143.158210][ T7023] hpfs: Code page index out of array [ 143.165210][ T7023] hpfs: code page support is disabled [ 143.173111][ T7023] hpfs: hpfs_map_4sectors(): unaligned read [ 143.186298][ T7023] hpfs: hpfs_map_4sectors(): unaligned read [ 143.236503][ T7023] hpfs: filesystem error: unable to find root dir [ 143.249347][ T28] audit: type=1800 audit(1777411500.642:91): pid=6981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.472" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 143.339234][ T5770] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 143.351336][ T5807] wacom 0003:056A:00F4.0005: unknown main item tag 0x2 [ 143.387218][ T5807] wacom 0003:056A:00F4.0005: unknown main item tag 0x0 [ 143.408233][ T7023] hpfs: hpfs_map_4sectors(): unaligned read [ 143.477006][ T5807] wacom 0003:056A:00F4.0005: hidraw0: USB HID vff.fc Device [HID 056a:00f4] on usb-dummy_hcd.1-1/input0 [ 143.738224][ T788] usb 2-1: USB disconnect, device number 4 [ 143.911713][ T7029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.486'. [ 143.952809][ T7029] nbd: illegal input index -1113835520 [ 144.491738][ T7040] loop1: detected capacity change from 0 to 8 [ 144.549596][ T7040] SQUASHFS error: zlib decompression failed, data probably corrupt [ 144.578553][ T7040] SQUASHFS error: Failed to read block 0x9b: -5 [ 144.584898][ T7040] SQUASHFS error: Unable to read metadata cache entry [99] [ 144.621361][ T7042] bridge0: port 3(vlan2) entered blocking state [ 144.632041][ T7040] SQUASHFS error: Unable to read inode 0x127 [ 144.642438][ T7042] bridge0: port 3(vlan2) entered disabled state [ 144.660491][ T7015] loop0: detected capacity change from 0 to 32768 [ 144.670627][ T7042] vlan2: entered allmulticast mode [ 144.676130][ T7042] bridge0: entered allmulticast mode [ 144.707329][ T7042] vlan2: left allmulticast mode [ 144.712362][ T7042] bridge0: left allmulticast mode [ 144.817878][ T7015] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 144.966823][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 145.008492][ T5769] ocfs2: Unmounting device (7,0) on (node local) [ 145.121370][ T7050] program syz.3.496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.121596][ T7048] loop2: detected capacity change from 0 to 256 [ 145.176927][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 145.211440][ T23] usb 2-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 145.212103][ T7048] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d) [ 145.253219][ T23] usb 2-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 145.308137][ T23] usb 2-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 145.335991][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.352458][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 145.379848][ T23] usb 2-1: SerialNumber: syz [ 145.505864][ T7056] loop0: detected capacity change from 0 to 2048 [ 145.587320][ T7057] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.635673][ T788] usb 2-1: USB disconnect, device number 5 [ 146.516453][ T7077] loop1: detected capacity change from 0 to 4096 [ 146.566787][ T7077] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 146.839171][ T7069] loop0: detected capacity change from 0 to 32768 [ 147.493865][ T7081] loop2: detected capacity change from 0 to 32768 [ 147.527502][ T7081] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop2 scanned by syz.2.510 (7081) [ 147.564197][ T7081] BTRFS info (device loop2): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 147.587677][ T7081] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 147.603853][ T7081] BTRFS info (device loop2): turning on async discard [ 147.611364][ T7081] BTRFS info (device loop2): using free space tree [ 147.775964][ T7081] BTRFS info (device loop2): enabling ssd optimizations [ 147.824943][ T7084] loop1: detected capacity change from 0 to 32768 [ 147.986145][ T7106] vlan2: entered promiscuous mode [ 148.004602][ T7106] macvtap0: entered promiscuous mode [ 148.098213][ T5768] BTRFS info (device loop2): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 148.743691][ T23] hid-generic 0004:0004:FFFF0001.0006: unknown main item tag 0x0 [ 148.784326][ T23] hid-generic 0004:0004:FFFF0001.0006: unknown main item tag 0x0 [ 148.840795][ T23] hid-generic 0004:0004:FFFF0001.0006: unknown main item tag 0x0 [ 148.889490][ T23] hid-generic 0004:0004:FFFF0001.0006: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 148.940925][ T7122] xt_HMARK: proto mask must be zero with L3 mode [ 149.004771][ T7125] loop0: detected capacity change from 0 to 256 [ 149.047835][ T7125] exfat: Deprecated parameter 'utf8' [ 149.053534][ T7125] exfat: Deprecated parameter 'utf8' [ 149.096894][ T7125] exfat: Deprecated parameter 'utf8' [ 149.160788][ T7125] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 149.166041][ T7124] fido_id[7124]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 149.583373][ T7129] loop1: detected capacity change from 0 to 4096 [ 149.591730][ T7135] sch_fq: defrate 36451 ignored. [ 149.619993][ T7129] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 149.986757][ T7142] loop3: detected capacity change from 0 to 128 [ 150.039497][ T7142] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 150.068167][ T7144] Zero length message leads to an empty skb [ 150.092458][ T7142] hpfs: filesystem error: improperly stopped [ 150.114527][ T7142] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 150.184036][ T7142] hpfs: You really don't want any checks? You are crazy... [ 150.252564][ T7142] hpfs: Code page index out of array [ 150.277078][ T7142] hpfs: code page support is disabled [ 150.284210][ T7142] hpfs: hpfs_map_4sectors(): unaligned read [ 150.316915][ T7142] hpfs: hpfs_map_4sectors(): unaligned read [ 150.323163][ T7142] hpfs: filesystem error: unable to find root dir [ 150.428100][ T7142] hpfs: hpfs_map_4sectors(): unaligned read [ 150.486279][ T7129] ntfs3: Cannot use different iocharset when remounting! [ 150.613495][ T7146] loop2: detected capacity change from 0 to 4096 [ 150.713558][ T7146] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 150.738959][ T7146] ntfs3: loop2: Failed to load $Extend (-22). [ 150.745129][ T7146] ntfs3: loop2: Failed to initialize $Extend. [ 150.816861][ T7146] ntfs3: loop2: ino=9, ntfs_sync_fs failed, -22. [ 150.842867][ T7155] Cannot find set identified by id 0 to match [ 150.879200][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 150.906846][ T5768] ntfs3: loop2: ino=9, ntfs_sync_fs failed, -22. [ 151.118974][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 151.156872][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.174883][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 151.191533][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 151.211260][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.244781][ T9] usb 1-1: config 0 descriptor?? [ 151.546932][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 151.702177][ T9] hid (null): invalid report_count -1471370603 [ 151.717528][ T9] hid (null): unknown global tag 0xe [ 151.725671][ T9] hid (null): invalid report_count 15657 [ 151.739825][ T9] magicmouse 0003:05AC:0265.0007: unexpected long global item [ 151.746767][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 151.758294][ T9] magicmouse 0003:05AC:0265.0007: magicmouse hid parse failed [ 151.764714][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.766933][ T9] magicmouse: probe of 0003:05AC:0265.0007 failed with error -22 [ 151.784781][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.796186][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 151.822392][ T23] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 151.837579][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.872611][ T23] usb 3-1: config 0 descriptor?? [ 151.977533][ T8] usb 1-1: USB disconnect, device number 4 [ 152.048135][ T7180] netlink: 36 bytes leftover after parsing attributes in process `syz.3.550'. [ 152.375481][ T23] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0008/input/input10 [ 152.446538][ T23] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 152.799884][ T9] usb 3-1: USB disconnect, device number 4 [ 152.988253][ T7202] netlink: 32 bytes leftover after parsing attributes in process `syz.0.559'. [ 153.170432][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.561'. [ 153.254353][ T7192] loop1: detected capacity change from 0 to 32768 [ 153.280525][ T7208] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 153.335607][ T7192] JBD2: Ignoring recovery information on journal [ 153.437628][ T7192] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 153.644441][ T7192] (syz.1.554,7192,1):ocfs2_verify_group_and_input:429 ERROR: the add group should be in chain 1 [ 153.671612][ T7192] (syz.1.554,7192,1):ocfs2_group_add:507 ERROR: status = -22 [ 153.926480][ T5767] ocfs2: Unmounting device (7,1) on (node local) [ 154.137158][ T7229] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 154.143830][ T7229] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 154.383757][ T7235] loop1: detected capacity change from 0 to 64 [ 154.588847][ T7222] loop3: detected capacity change from 0 to 32768 [ 154.670846][ T7222] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 154.765088][ T7222] XFS (loop3): Ending clean mount [ 154.801301][ T7222] XFS (loop3): Quotacheck needed: Please wait. [ 154.975891][ T7222] XFS (loop3): Quotacheck: Done. [ 155.127696][ T5770] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 155.424911][ T7231] loop0: detected capacity change from 0 to 32768 [ 155.537253][ T7231] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 155.546453][ T7231] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 155.677523][ T7262] loop2: detected capacity change from 0 to 512 [ 155.723946][ T7262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.770957][ T7231] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 155.828437][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 155.844925][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 155.859345][ T7262] EXT4-fs error (device loop2): ext4_lookup:1858: inode #14: comm syz.2.583: casefold flag without casefold feature [ 155.950420][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 105ms [ 155.992400][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 156.013934][ T7231] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 156.073847][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.165988][ T7251] loop1: detected capacity change from 0 to 40427 [ 156.183914][ T7251] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 156.217081][ T7251] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 156.313780][ T7251] F2FS-fs (loop1): invalid crc value [ 156.555399][ T7273] loop3: detected capacity change from 0 to 4096 [ 156.570785][ T7251] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 156.602806][ T7251] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 156.611955][ T7277] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.703420][ T7231] gfs2: fsid=syz:syz.0: found 1 quota changes [ 157.152925][ T5769] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 157.152925][ T5769] inode = 11 2339 [ 157.152925][ T5769] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421 [ 157.207213][ T5769] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 157.250276][ T5769] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5769 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 157.306712][ T5769] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 157.315472][ T5769] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 157.368705][ T5769] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 157.406758][ T5769] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 157.418763][ T5769] gfs2: fsid=syz:syz.0: File system withdrawn [ 157.425198][ T5769] CPU: 0 PID: 5769 Comm: syz-executor Not tainted syzkaller #0 [ 157.432804][ T5769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 157.443738][ T5769] Call Trace: [ 157.447304][ T5769] [ 157.450556][ T5769] dump_stack_lvl+0x18c/0x250 [ 157.455442][ T5769] ? kobject_uevent_env+0x363/0x8b0 [ 157.460759][ T5769] ? show_regs_print_info+0x20/0x20 [ 157.466195][ T5769] ? load_image+0x420/0x420 [ 157.471971][ T5769] ? kobject_uevent_env+0x363/0x8b0 [ 157.477311][ T5769] gfs2_withdraw+0xb24/0x13d0 [ 157.482298][ T5769] ? gfs2_lm+0x240/0x240 [ 157.486663][ T5769] ? queue_delayed_work_on+0x114/0x200 [ 157.492252][ T5769] ? gfs2_consist_inode_i+0xf5/0x110 [ 157.497695][ T5769] gfs2_inode_refresh+0xc50/0x1160 [ 157.502841][ T5769] ? gfs2_inode_metasync+0xf0/0xf0 [ 157.508155][ T5769] ? gfs2_glock_nq+0xd4f/0x1420 [ 157.513032][ T5769] gfs2_instantiate+0x162/0x220 [ 157.517994][ T5769] gfs2_glock_wait+0x1d4/0x2a0 [ 157.522836][ T5769] do_sync+0x4c6/0xe50 [ 157.526924][ T5769] ? gfs2_quota_sync+0x411/0x5a0 [ 157.531880][ T5769] ? bh_get+0x760/0x760 [ 157.536054][ T5769] ? __lock_acquire+0x7d40/0x7d40 [ 157.541272][ T5769] ? do_raw_spin_lock+0x11f/0x2c0 [ 157.546511][ T5769] ? gfs2_quota_sync+0x411/0x5a0 [ 157.551576][ T5769] ? do_raw_spin_unlock+0x121/0x230 [ 157.557009][ T5769] gfs2_quota_sync+0x411/0x5a0 [ 157.561832][ T5769] gfs2_sync_fs+0x4c/0xb0 [ 157.566269][ T5769] sync_filesystem+0xea/0x220 [ 157.571226][ T5769] generic_shutdown_super+0x6f/0x2b0 [ 157.577057][ T5769] kill_block_super+0x44/0x90 [ 157.582017][ T5769] deactivate_locked_super+0x97/0x100 [ 157.587679][ T5769] cleanup_mnt+0x43b/0x4d0 [ 157.592346][ T5769] task_work_run+0x1d4/0x260 [ 157.597075][ T5769] ? task_work_cancel+0x220/0x220 [ 157.602600][ T5769] ? exit_to_user_mode_loop+0x3b/0x110 [ 157.608427][ T5769] exit_to_user_mode_loop+0xe6/0x110 [ 157.614083][ T5769] exit_to_user_mode_prepare+0xee/0x180 [ 157.620138][ T5769] syscall_exit_to_user_mode+0x1a/0x50 [ 157.625626][ T5769] do_syscall_64+0x61/0xa0 [ 157.630322][ T5769] ? clear_bhb_loop+0x40/0x90 [ 157.635107][ T5769] ? clear_bhb_loop+0x40/0x90 [ 157.640074][ T5769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.646168][ T5769] RIP: 0033:0x7f9c4f19e017 [ 157.650949][ T5769] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 157.671420][ T5769] RSP: 002b:00007fff06cbf0a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 157.679865][ T5769] RAX: 0000000000000000 RBX: 00007f9c4f232120 RCX: 00007f9c4f19e017 [ 157.688062][ T5769] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff06cbf160 [ 157.696753][ T5769] RBP: 00007fff06cbf160 R08: 00007fff06cc0160 R09: 00000000ffffffff [ 157.704861][ T5769] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff06cc01f0 [ 157.713130][ T5769] R13: 00007f9c4f232120 R14: 00000000000264c9 R15: 00007fff06cc0230 [ 157.721773][ T5769] [ 157.817610][ T7287] netlink: 36 bytes leftover after parsing attributes in process `syz.3.593'. [ 158.556402][ T7311] loop3: detected capacity change from 0 to 1024 [ 158.576796][ T5807] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 158.634307][ T28] audit: type=1800 audit(1777411516.022:92): pid=7311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.602" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 158.791327][ T5807] usb 1-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 158.826758][ T5807] usb 1-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.837525][ T5807] usb 1-1: config 2 interface 0 has no altsetting 0 [ 158.844621][ T5807] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 158.880773][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.005998][ T7322] loop2: detected capacity change from 0 to 512 [ 159.027370][ T7322] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 159.050925][ T7322] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 159.179338][ T7322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.234956][ T7322] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.238536][ T7328] sctp: [Deprecated]: syz.3.608 (pid 7328) Use of int in max_burst socket option. [ 159.238536][ T7328] Use struct sctp_assoc_value instead [ 159.327219][ T7322] EXT4-fs error (device loop2): ext4_get_first_dir_block:3592: inode #12: block 32: comm syz.2.607: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 159.363202][ T7322] EXT4-fs (loop2): Remounting filesystem read-only [ 159.387302][ T5807] elo 0003:04E7:0009.0009: hidraw0: USB HID vff.ff Device [HID 04e7:0009] on usb-dummy_hcd.0-1/input0 [ 159.494859][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.652871][ T8] usb 1-1: USB disconnect, device number 5 [ 159.712954][ T7338] openvswitch: netlink: Actions may not be safe on all matching packets [ 159.899015][ T7342] loop2: detected capacity change from 0 to 512 [ 159.973734][ T7342] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 160.045287][ T7342] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #17: comm syz.2.615: inode has both inline data and extents flags [ 160.076545][ T7342] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.615: couldn't read orphan inode 17 (err -117) [ 160.113089][ T7342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.154113][ T7349] loop1: detected capacity change from 0 to 4096 [ 160.166967][ T7349] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 160.358523][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.554412][ T7356] loop3: detected capacity change from 0 to 1764 [ 160.729113][ T968] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 160.900595][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.627'. [ 160.909623][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.627'. [ 160.919351][ T7369] netlink: 'syz.1.627': attribute type 15 has an invalid length. [ 160.929992][ T7369] netlink: 'syz.1.627': attribute type 18 has an invalid length. [ 160.937089][ T968] usb 1-1: Using ep0 maxpacket: 8 [ 160.949785][ T968] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 160.965245][ T968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.975423][ T968] usb 1-1: Product: syz [ 160.984612][ T968] usb 1-1: Manufacturer: syz [ 160.991391][ T968] usb 1-1: SerialNumber: syz [ 161.000430][ T968] usb 1-1: config 0 descriptor?? [ 161.022042][ T968] gspca_main: se401-2.14.0 probing 047d:5003 [ 161.051098][ T7371] QAT: Invalid ioctl 21531 [ 161.124804][ T7373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.629'. [ 161.534348][ T7375] loop1: detected capacity change from 0 to 32768 [ 161.583241][ T7375] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 161.648377][ T968] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 161.666987][ T7375] XFS (loop1): Ending clean mount [ 161.725253][ T968] usb 1-1: USB disconnect, device number 6 [ 161.726776][ T7375] XFS (loop1): Quotacheck needed: Please wait. [ 161.929974][ T7375] XFS (loop1): Quotacheck: Done. [ 162.059620][ T5767] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 162.077822][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 162.299314][ T9] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 162.310572][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.324398][ T9] usb 3-1: config 0 descriptor?? [ 162.777533][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 162.825351][ T7400] netlink: 'syz.3.638': attribute type 4 has an invalid length. [ 162.851439][ T9] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 162.866746][ T7400] netlink: 17 bytes leftover after parsing attributes in process `syz.3.638'. [ 162.887060][ T9] [drm] Initialized udl on minor 2 [ 162.922028][ T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 162.943735][ T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 162.970975][ T968] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 162.984678][ T9] usb 3-1: USB disconnect, device number 5 [ 163.002728][ T968] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 163.253200][ T7392] loop1: detected capacity change from 0 to 32768 [ 163.293874][ T7392] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 163.384418][ T7392] XFS (loop1): Ending clean mount [ 163.587333][ T5767] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 163.641871][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.644'. [ 163.662859][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.644'. [ 164.303895][ T7407] loop3: detected capacity change from 0 to 40427 [ 164.343260][ T7407] F2FS-fs (loop3): Found nat_bits in checkpoint [ 164.394554][ T7433] loop1: detected capacity change from 0 to 256 [ 164.447500][ T7433] exfat: Deprecated parameter 'namecase' [ 164.476178][ T7433] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x31c160c0, utbl_chksum : 0xe619d30d) [ 164.507132][ T7407] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 164.630081][ T7407] syz.3.641: attempt to access beyond end of device [ 164.630081][ T7407] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 164.656947][ T7407] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 164.749332][ T7437] loop2: detected capacity change from 0 to 8 [ 165.147624][ T7447] netlink: 6 bytes leftover after parsing attributes in process `syz.0.656'. [ 165.943515][ T7445] loop2: detected capacity change from 0 to 32768 [ 165.971139][ T7445] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.654 (7445) [ 166.054541][ T7445] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 166.086838][ T7445] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 166.095711][ T7445] BTRFS info (device loop2): using free space tree [ 166.126761][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 166.250590][ T7445] BTRFS info (device loop2): enabling ssd optimizations [ 166.276028][ T7445] BTRFS info (device loop2): auto enabling async discard [ 166.329298][ T23] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.356743][ T23] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.387494][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 166.394506][ T23] usb 1-1: New USB device found, idVendor=1a34, idProduct=08fb, bcdDevice= 0.00 [ 166.455507][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.504765][ T23] usb 1-1: config 0 descriptor?? [ 166.514471][ T5768] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 166.555286][ T7487] loop1: detected capacity change from 0 to 128 [ 166.673483][ T7487] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 166.728297][ T7487] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.891329][ T7463] loop3: detected capacity change from 0 to 40427 [ 166.925645][ T5762] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (5762) [ 166.955142][ T7463] F2FS-fs (loop3): build fault injection attr: rate: 684, type: 0x7ffff [ 166.965277][ T23] hid-generic 0003:1A34:08FB.000A: item fetching failed at offset 0/1 [ 166.970113][ T7463] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 166.996927][ T23] hid-generic: probe of 0003:1A34:08FB.000A failed with error -22 [ 167.014467][ T5767] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.027325][ T5807] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 167.030667][ T7463] F2FS-fs (loop3): Image doesn't support compression [ 167.121569][ T7463] F2FS-fs (loop3): invalid crc value [ 167.171709][ T7463] F2FS-fs (loop3): Found nat_bits in checkpoint [ 167.235027][ T5807] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 167.246945][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.262317][ T9] usb 1-1: USB disconnect, device number 7 [ 167.316161][ T5807] usb 3-1: config 0 descriptor?? [ 167.363341][ T5807] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 167.388259][ T7463] F2FS-fs (loop3): Start checkpoint disabled! [ 167.407920][ T7463] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 167.673370][ T12] kworker/u4:1: attempt to access beyond end of device [ 167.673370][ T12] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 167.691522][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 167.715950][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 167.793946][ T5807] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 167.826260][ T5807] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 168.014093][ T7504] loop0: detected capacity change from 0 to 512 [ 168.051408][ T5807] usb 3-1: USB disconnect, device number 6 [ 168.099544][ T7504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.155961][ T28] audit: type=1800 audit(1777411525.542:93): pid=7504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.674" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 168.159869][ T7504] fs-verity: sha256 using implementation "sha256-avx2" [ 168.206485][ T7504] fs-verity (loop0, inode 15): Error -22 reading file data [ 168.215066][ T7504] fs-verity (loop0, inode 15): Error -22 building Merkle tree [ 168.384129][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.443823][ T7514] loop3: detected capacity change from 0 to 256 [ 168.646567][ T7514] FAT-fs (loop3): Directory bread(block 64) failed [ 168.657645][ T7514] FAT-fs (loop3): Directory bread(block 65) failed [ 168.665165][ T7514] FAT-fs (loop3): Directory bread(block 66) failed [ 168.707944][ T7514] FAT-fs (loop3): Directory bread(block 67) failed [ 168.715468][ T7514] FAT-fs (loop3): Directory bread(block 68) failed [ 168.742227][ T7514] FAT-fs (loop3): Directory bread(block 69) failed [ 168.773968][ T7514] FAT-fs (loop3): Directory bread(block 70) failed [ 168.791214][ T7514] FAT-fs (loop3): Directory bread(block 71) failed [ 168.816916][ T7514] FAT-fs (loop3): Directory bread(block 72) failed [ 168.834356][ T7514] FAT-fs (loop3): Directory bread(block 73) failed [ 168.992094][ T7528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.684'. [ 169.316997][ T7536] usb usb8: usbfs: process 7536 (syz.1.688) did not claim interface 0 before use [ 169.420737][ T7540] loop0: detected capacity change from 0 to 736 [ 169.573995][ T7545] loop2: detected capacity change from 0 to 164 [ 169.869274][ T7549] loop2: detected capacity change from 0 to 512 [ 169.903021][ T7549] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.695: invalid indirect mapped block 4294967295 (level 1) [ 169.904908][ T7552] loop3: detected capacity change from 0 to 128 [ 169.934399][ T7549] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.695: invalid indirect mapped block 4294967295 (level 1) [ 169.959409][ T7549] EXT4-fs (loop2): 2 truncates cleaned up [ 169.968699][ T7552] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 169.971982][ T7549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.029966][ T7556] loop0: detected capacity change from 0 to 8 [ 170.042485][ T7552] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 170.099670][ T5770] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.139336][ T7556] SQUASHFS error: Failed to read block 0x2d0: -5 [ 170.146207][ T7556] SQUASHFS error: Unable to read metadata cache entry [2ce] [ 170.155854][ T7556] SQUASHFS error: Unable to read directory block [2ce:0] [ 170.338321][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.445399][ T7563] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 170.546247][ T7566] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 170.553438][ T7566] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 170.615502][ T7566] vhci_hcd vhci_hcd.0: Device attached [ 170.839448][ T7580] netdevsim netdevsim3: Firmware load for '/../file0' refused, path contains '..' component [ 170.876828][ T5757] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 170.927322][ T5807] usb 38-1: SetAddress Request (2) to port 0 [ 170.939041][ T5807] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 171.088143][ T5757] usb 3-1: Using ep0 maxpacket: 32 [ 171.127710][ T5757] usb 3-1: config 0 has no interfaces? [ 171.136963][ T5757] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 171.157078][ T5757] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 171.165780][ T5757] usb 3-1: Product: syz [ 171.200781][ T5757] usb 3-1: Manufacturer: syz [ 171.205557][ T5757] usb 3-1: SerialNumber: syz [ 171.248142][ T5757] usb 3-1: config 0 descriptor?? [ 171.275504][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'. [ 171.299062][ T7594] set_capacity_and_notify: 1 callbacks suppressed [ 171.299079][ T7594] loop1: detected capacity change from 0 to 256 [ 171.299789][ T7592] netlink: 'syz.0.712': attribute type 2 has an invalid length. [ 171.493601][ T7568] vhci_hcd: cannot find a urb of seqnum 9 max seqnum 1 [ 171.509725][ T5757] usb 3-1: USB disconnect, device number 7 [ 171.571233][ T12] vhci_hcd: stop threads [ 171.577405][ T12] vhci_hcd: release socket [ 171.601965][ T12] vhci_hcd: disconnect device [ 171.670250][ T7596] loop0: detected capacity change from 0 to 4096 [ 171.692016][ T7596] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 171.724192][ T7598] loop1: detected capacity change from 0 to 4096 [ 171.802986][ T7596] ntfs: volume version 3.1. [ 171.866963][ T7598] ntfs: volume version 3.1. [ 171.911878][ T7596] ntfs: (device loop0): parse_options(): Unrecognized mount option ÿÿÿÿÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿš@­LqE:†‹ á艞Õt}²0ü$‰. [ 171.972162][ T7586] loop3: detected capacity change from 0 to 32768 [ 171.995262][ T7596] ntfs: (device loop0): parse_options(): Unrecognized mount option ÿÿÿÿÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿš@­LqE:†‹ á艞Õt}²0ü$‰. [ 172.033709][ T7598] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 172.066011][ T7598] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 172.107442][ T7598] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to map page. [ 172.133747][ T7586] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 172.157065][ T7598] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 172.198571][ T7598] ntfs: (device loop1): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x44, attribute type 0x80, because the allocation of clusters failed with error code -5. [ 172.229861][ T7610] loop2: detected capacity change from 0 to 512 [ 172.293324][ T7610] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0002] [ 172.308717][ T7610] System zones: 1-20 [ 172.328309][ T7610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.361412][ T7586] XFS (loop3): Ending clean mount [ 172.402206][ T7586] XFS (loop3): Quotacheck needed: Please wait. [ 172.537158][ T7610] EXT4-fs: Cannot change journaled quota options when quota turned on [ 172.610773][ T7586] XFS (loop3): Quotacheck: Done. [ 172.715499][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.903541][ T5770] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 173.139429][ T7627] loop0: detected capacity change from 0 to 8 [ 173.636346][ T7615] loop1: detected capacity change from 0 to 32768 [ 173.701107][ T7615] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 173.856764][ T5757] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 173.985282][ T7615] XFS (loop1): Ending clean mount [ 174.074031][ T5757] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 174.091196][ T7646] syz.0.728 (7646): /proc/7645/oom_adj is deprecated, please use /proc/7645/oom_score_adj instead. [ 174.106276][ T5757] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 174.131413][ T5757] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 174.177409][ T5757] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 174.206920][ T5757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.256017][ T5757] usb 4-1: config 0 descriptor?? [ 174.267157][ T7629] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 174.316076][ T5767] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.586762][ T7654] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 174.593661][ T7654] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 174.645999][ T7654] vhci_hcd vhci_hcd.0: Device attached [ 174.661843][ T7655] vhci_hcd: connection closed [ 174.682672][ T4549] vhci_hcd: stop threads [ 174.701667][ T4549] vhci_hcd: release socket [ 174.712580][ T4549] vhci_hcd: disconnect device [ 174.742845][ T5757] petalynx 0003:18B1:0037.000B: unknown main item tag 0x7 [ 174.750848][ T5757] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 174.758798][ T5757] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 174.766178][ T5757] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 174.774211][ T5757] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 174.782943][ T5757] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 174.792880][ T5757] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 174.800699][ T5757] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 174.808921][ T5757] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 174.832554][ T5757] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 174.842151][ T5757] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 174.855273][ T5757] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 174.865250][ T5757] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 174.873938][ T5757] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 174.882344][ T5757] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 174.891982][ T5757] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 174.899706][ T5757] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 174.907518][ T5757] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 174.914923][ T5757] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 174.924351][ T5757] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 174.936445][ T5757] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 174.944382][ T5757] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 174.953396][ T5757] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 174.965754][ T5757] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 174.982965][ T5757] petalynx 0003:18B1:0037.000B: hidraw0: USB HID vff.ff Device [HID 18b1:0037] on usb-dummy_hcd.3-1/input0 [ 175.004552][ T5757] usb 4-1: USB disconnect, device number 6 [ 175.105863][ T7665] fido_id[7665]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 175.151530][ T7667] loop1: detected capacity change from 0 to 1024 [ 175.354624][ T7669] loop2: detected capacity change from 0 to 1024 [ 175.406888][ T7669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.628507][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.670938][ T7680] ptrace attach of "./syz-executor exec"[5769] was attempted by "\x22"[7680] [ 176.039842][ T5807] usb 38-1: device descriptor read/8, error -110 [ 176.077145][ T7688] loop1: detected capacity change from 0 to 4096 [ 176.266999][ T23] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 176.319028][ T7688] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 176.493253][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.504767][ T5807] usb usb38-port1: attempt power cycle [ 176.543987][ T23] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 176.564219][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.589435][ T23] usb 4-1: Product: syz [ 176.593948][ T23] usb 4-1: Manufacturer: syz [ 176.604209][ T23] usb 4-1: SerialNumber: syz [ 176.642200][ T23] usb 4-1: config 0 descriptor?? [ 176.663286][ T23] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 176.717332][ T7692] syz.0.748 (7692): drop_caches: 2 [ 176.755496][ T7703] netlink: 40 bytes leftover after parsing attributes in process `syz.2.753'. [ 176.921540][ T7705] loop1: detected capacity change from 0 to 1024 [ 176.932555][ T7705] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 176.946437][ T7705] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 176.976987][ T7705] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 177.007289][ T7705] EXT4-fs error (device loop1): ext4_ext_check_inode:530: inode #3: comm syz.1.754: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 177.095861][ T7705] EXT4-fs (loop1): no journal found [ 177.117335][ T7705] EXT4-fs (loop1): can't get journal size [ 177.135515][ T7705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 177.187288][ T5807] usb usb38-port1: unable to enumerate USB device [ 177.267935][ T23] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 177.275227][ T23] gspca_pac7302: probe of 4-1:0.0 failed with error -71 [ 177.330251][ T23] usb 4-1: USB disconnect, device number 7 [ 177.353739][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.544232][ T7719] loop1: detected capacity change from 0 to 2048 [ 177.577848][ T7719] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 177.590566][ T7719] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 177.599155][ T7719] UDF-fs: Scanning with blocksize 512 failed [ 177.634056][ T7719] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.924182][ T7728] loop3: detected capacity change from 0 to 512 [ 178.036818][ T7728] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.762: invalid indirect mapped block 4294967295 (level 1) [ 178.185474][ T7728] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.762: invalid indirect mapped block 4294967295 (level 1) [ 178.267972][ T7728] EXT4-fs (loop3): 2 truncates cleaned up [ 178.275260][ T7728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.425143][ T7722] loop0: detected capacity change from 0 to 32768 [ 178.484221][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.552153][ T23] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 178.597308][ T7722] JBD2: Ignoring recovery information on journal [ 178.749526][ T23] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 178.769976][ T23] usb 3-1: config 0 has no interface number 0 [ 178.782593][ T7722] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 178.799348][ T23] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 178.817010][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.845725][ T23] usb 3-1: Product: syz [ 178.856018][ T23] usb 3-1: Manufacturer: syz [ 178.874038][ T23] usb 3-1: SerialNumber: syz [ 178.884397][ T23] usb 3-1: config 0 descriptor?? [ 178.904693][ T23] usb 3-1: selecting invalid altsetting 1 [ 178.918245][ T23] dvb_ttusb_budget: ttusb_init_controller: error [ 178.935254][ T23] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 178.969710][ T5769] ocfs2: Unmounting device (7,0) on (node local) [ 179.100768][ T23] DVB: Unable to find symbol stv0299_attach() [ 179.157269][ T7757] loop0: detected capacity change from 0 to 256 [ 179.184270][ T7757] FAT-fs (loop0): "posix" option is obsolete, not supported now [ 179.237940][ T23] DVB: Unable to find symbol tda8083_attach() [ 179.256403][ T23] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 179.285275][ T23] usb 3-1: USB disconnect, device number 8 [ 179.574690][ T7764] loop3: detected capacity change from 0 to 256 [ 179.645617][ T7764] FAT-fs (loop3): Directory bread(block 64) failed [ 179.662686][ T7766] bridge0: entered promiscuous mode [ 179.663209][ T7764] FAT-fs (loop3): Directory bread(block 65) failed [ 179.702266][ T7764] FAT-fs (loop3): Directory bread(block 66) failed [ 179.717249][ T7764] FAT-fs (loop3): Directory bread(block 67) failed [ 179.727897][ T7764] FAT-fs (loop3): Directory bread(block 68) failed [ 179.734721][ T7764] FAT-fs (loop3): Directory bread(block 69) failed [ 179.788072][ T7764] FAT-fs (loop3): Directory bread(block 70) failed [ 179.795042][ T7764] FAT-fs (loop3): Directory bread(block 71) failed [ 179.831602][ T7764] FAT-fs (loop3): Directory bread(block 72) failed [ 179.860317][ T7764] FAT-fs (loop3): Directory bread(block 73) failed [ 180.037447][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.784'. [ 180.225905][ T7780] loop3: detected capacity change from 0 to 512 [ 180.262929][ T7780] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 180.315165][ T7780] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 180.377053][ T7780] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.786: Invalid block bitmap block 0 in block_group 0 [ 180.394422][ T7780] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 180.426917][ T7780] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.786: attempt to clear invalid blocks 983261 len 1 [ 180.449170][ T7780] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz.3.786: Invalid inode table block 0 in block_group 0 [ 180.533908][ T7780] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 180.587252][ T7780] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 180.607790][ T7794] loop1: detected capacity change from 0 to 512 [ 180.655966][ T7794] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 180.657137][ T7780] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz.3.786: Invalid inode table block 0 in block_group 0 [ 180.693059][ T7794] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 180.724594][ T7780] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 180.734682][ T7794] EXT4-fs (loop1): 1 truncate cleaned up [ 180.744934][ T7794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.771539][ T7780] EXT4-fs error (device loop3): ext4_truncate:4301: inode #11: comm syz.3.786: mark_inode_dirty error [ 180.806015][ T7780] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 180.845960][ T7780] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz.3.786: Invalid inode table block 0 in block_group 0 [ 180.887214][ T7780] EXT4-fs (loop3): 1 truncate cleaned up [ 180.894546][ T7780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.012015][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.012429][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.145469][ T7806] loop0: detected capacity change from 0 to 1024 [ 181.186847][ T5807] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 181.392025][ T5807] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 181.431127][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.441065][ T7816] [U] „ [ 181.467378][ T5807] usb 3-1: Product: syz [ 181.474970][ T5807] usb 3-1: Manufacturer: syz [ 181.496713][ T5807] usb 3-1: SerialNumber: syz [ 181.513015][ T5807] usb 3-1: config 0 descriptor?? [ 181.530872][ T5807] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 181.578703][ T5807] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 181.610462][ T5807] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 181.632483][ T5807] usb 3-1: media controller created [ 181.671849][ T5807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.706302][ T7819] loop3: detected capacity change from 0 to 4096 [ 181.772199][ T5807] DVB: Unable to find symbol mt352_attach() [ 181.906872][ T968] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 181.908835][ T5807] DVB: Unable to find symbol nxt6000_attach() [ 181.941458][ T5807] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 181.985602][ T5807] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 182.031015][ T7829] loop3: detected capacity change from 0 to 256 [ 182.033069][ T5807] dvb-usb: schedule remote query interval to 1000 msecs. [ 182.058720][ T7829] exfat: Deprecated parameter 'utf8' [ 182.063262][ T5807] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 182.075131][ T5807] dvb-usb: bulk message failed: -22 (7/0) [ 182.090627][ T5807] dvb-usb: bulk message failed: -22 (7/0) [ 182.102671][ T7829] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 182.130064][ T5807] usb 3-1: USB disconnect, device number 9 [ 182.158454][ T968] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 182.205127][ T968] usb 1-1: config 0 has no interface number 0 [ 182.212036][ T968] usb 1-1: config 0 interface 4 has no altsetting 0 [ 182.242127][ T968] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 182.292733][ T5807] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 182.293078][ T968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.368239][ T968] usb 1-1: config 0 descriptor?? [ 182.398919][ T968] cp210x 1-1:0.4: cp210x converter detected [ 182.819745][ T968] cp210x 1-1:0.4: failed to get vendor val 0x000e size 3: -71 [ 182.857415][ T968] usb 1-1: cp210x converter now attached to ttyUSB0 [ 182.881523][ T968] usb 1-1: USB disconnect, device number 8 [ 182.918319][ T968] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 182.935910][ T968] cp210x 1-1:0.4: device disconnected [ 182.996894][ T5807] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 183.197146][ T5807] usb 4-1: Using ep0 maxpacket: 8 [ 183.227934][ T5807] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 183.262481][ T5807] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 183.276814][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.300251][ T5807] usb 4-1: Product: syz [ 183.304859][ T5807] usb 4-1: Manufacturer: syz [ 183.320559][ T5807] usb 4-1: SerialNumber: syz [ 183.562490][ T5807] usb 4-1: selecting invalid altsetting 1 [ 183.770343][ T5807] usb 4-1: unit 0 not found! [ 183.800429][ T5807] usb 4-1: selecting invalid altsetting 1 [ 183.971638][ T5807] usb 4-1: cannot request logical cluster ID: 0 (err: -71) [ 183.982539][ T5807] usb 4-1: invalid MIXER UNIT descriptor 6 [ 184.001416][ T5807] snd-usb-audio: probe of 4-1:1.1 failed with error -71 [ 184.032115][ T5807] usb 4-1: selecting invalid altsetting 1 [ 184.056096][ T5807] usb 4-1: cannot request logical cluster ID: 0 (err: -71) [ 184.064561][ T5807] usb 4-1: invalid MIXER UNIT descriptor 6 [ 184.115098][ T5807] snd-usb-audio: probe of 4-1:1.2 failed with error -71 [ 184.137883][ T5807] usb 4-1: USB disconnect, device number 8 [ 184.244377][ T5762] udevd[5762]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.523405][ T7878] vivid-007: ================= START STATUS ================= [ 184.546743][ T7878] vivid-007: Enable Output Cropping: true grabbed [ 184.555262][ T7878] vivid-007: Enable Output Composing: true grabbed [ 184.594570][ T7878] vivid-007: Enable Output Scaler: true grabbed [ 184.606762][ T7878] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 184.617834][ T7878] vivid-007: Transmit Mode: HDMI grabbed [ 184.623838][ T7878] vivid-007: Display Present: true inactive [ 184.631172][ T7878] vivid-007: Hotplug Present: 0x00000001 [ 184.639920][ T7878] vivid-007: RxSense Present: 0x00000001 [ 184.645795][ T7878] vivid-007: EDID Present: 0x00000001 [ 184.651697][ T7878] vivid-007: ================== END STATUS ================== [ 185.453304][ T7900] loop0: detected capacity change from 0 to 4096 [ 185.461577][ T7908] mmap: syz.2.841 (7908) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 185.494520][ T7900] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 185.573539][ T7900] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 185.634373][ T7900] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 185.662038][ T7911] tipc: Started in network mode [ 185.670035][ T7911] tipc: Node identity -, cluster identity 4711 [ 185.679018][ T7900] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 185.705702][ T7900] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 185.737073][ T7900] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 185.789642][ T7900] ntfs: volume version 3.1. [ 185.798404][ T7900] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 185.818773][ T7914] netlink: 296 bytes leftover after parsing attributes in process `syz.1.844'. [ 185.846985][ T7900] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 185.900962][ T7900] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 185.946676][ T7900] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 186.312795][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.849'. [ 186.352960][ T7924] netlink: 'syz.1.849': attribute type 5 has an invalid length. [ 187.156262][ T7928] loop2: detected capacity change from 0 to 32768 [ 187.219155][ T7928] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 187.376731][ T7928] XFS (loop2): Ending clean mount [ 187.566468][ T5768] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 187.750773][ T7966] loop0: detected capacity change from 0 to 128 [ 188.147516][ T7972] netlink: 20 bytes leftover after parsing attributes in process `syz.1.867'. [ 188.235172][ T7978] loop0: detected capacity change from 0 to 1024 [ 188.426229][ T7976] loop2: detected capacity change from 0 to 4096 [ 189.182007][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.879'. [ 189.444006][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.883'. [ 189.490982][ T8006] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.652535][ T8006] bridge_slave_1 (unregistering): left allmulticast mode [ 189.660515][ T8006] bridge_slave_1 (unregistering): left promiscuous mode [ 189.670808][ T8006] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.017537][ T8020] loop3: detected capacity change from 0 to 128 [ 190.044167][ T8020] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 190.161437][ T8020] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 190.171986][ T8022] loop1: detected capacity change from 0 to 1024 [ 190.418874][ T11] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 190.691153][ T8036] loop2: detected capacity change from 0 to 256 [ 191.018702][ T8045] Driver unsupported XDP return value 0 on prog (id 39) dev N/A, expect packet loss! [ 191.287056][ T8057] program syz.2.908 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.676177][ T8069] loop2: detected capacity change from 0 to 512 [ 191.746928][ T8069] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 191.763652][ T8077] loop0: detected capacity change from 0 to 16 [ 191.783176][ T8077] erofs: (device loop0): mounted with root inode @ nid 36. [ 191.787246][ T8069] EXT4-fs error (device loop2): ext4_iget_extra_inode:4739: inode #15: comm syz.2.914: corrupted in-inode xattr: e_value size too large [ 191.814033][ T8069] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.914: couldn't read orphan inode 15 (err -117) [ 191.841669][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 191.841686][ T28] audit: type=1800 audit(1777411549.232:94): pid=8077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.917" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 191.901959][ T8069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.143509][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.455282][ T8088] loop0: detected capacity change from 0 to 4096 [ 192.480509][ T8088] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 192.798343][ T27] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 193.020203][ T27] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 193.036203][ T27] usb 3-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 193.068543][ T27] usb 3-1: New USB device found, idVendor=813a, idProduct=22fe, bcdDevice=89.9c [ 193.097622][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.116738][ T27] usb 3-1: Product: syz [ 193.126219][ T27] usb 3-1: Manufacturer: syz [ 193.140132][ T27] usb 3-1: SerialNumber: syz [ 193.145790][ T8113] veth0_to_bond: entered allmulticast mode [ 193.221654][ T8111] loop0: detected capacity change from 0 to 4096 [ 193.245188][ T8111] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 193.334617][ T8111] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 193.452096][ T5807] usb 3-1: USB disconnect, device number 10 [ 193.941098][ T8109] loop1: detected capacity change from 0 to 40427 [ 193.986154][ T8109] F2FS-fs (loop1): invalid crc value [ 194.003254][ T8125] loop3: detected capacity change from 0 to 1024 [ 194.030352][ T8109] F2FS-fs (loop1): Found nat_bits in checkpoint [ 194.282986][ T8109] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 194.472263][ T8136] loop3: detected capacity change from 0 to 512 [ 194.492397][ T5767] syz-executor: attempt to access beyond end of device [ 194.492397][ T5767] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 194.518556][ T5767] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 194.562895][ T8136] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.944: bg 0: block 5: invalid block bitmap [ 194.666785][ T8136] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 194.678707][ T8136] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.944: invalid indirect mapped block 3 (level 2) [ 194.715867][ T8136] EXT4-fs (loop3): 1 orphan inode deleted [ 194.733347][ T8136] EXT4-fs (loop3): 1 truncate cleaned up [ 194.742852][ T8136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.842009][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.848770][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.974099][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.454440][ T8161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.955'. [ 196.202120][ T8158] loop2: detected capacity change from 0 to 40427 [ 196.221566][ T8158] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 196.249293][ T8158] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 196.282348][ T8158] F2FS-fs (loop2): invalid crc value [ 196.305565][ T8158] F2FS-fs (loop2): Found nat_bits in checkpoint [ 196.396852][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 196.442374][ T8158] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 196.460106][ T8158] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 196.598719][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 196.615124][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 196.626998][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 196.649595][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 196.668794][ T9] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 196.686531][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.699409][ T9] usb 4-1: Product: syz [ 196.704475][ T9] usb 4-1: Manufacturer: syz [ 196.723212][ T9] usb 4-1: SerialNumber: syz [ 196.732252][ T9] usb 4-1: config 0 descriptor?? [ 196.751235][ T9] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 196.765174][ T8194] ip6gretap0: entered promiscuous mode [ 196.944340][ T8198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.971'. [ 197.007068][ T9] scsi host1: usb-storage 4-1:0.0 [ 197.129544][ T8203] loop1: detected capacity change from 0 to 64 [ 197.210212][ T8203] hfs: bad catalog entry type 65409 [ 197.291507][ T5807] usb 4-1: USB disconnect, device number 9 [ 197.657224][ T8215] loop0: detected capacity change from 0 to 64 [ 198.015056][ T8225] ip6tnl1: entered allmulticast mode [ 198.030823][ T8227] loop3: detected capacity change from 0 to 256 [ 198.981189][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.997'. [ 199.007379][ T8256] tipc: New replicast peer: 172.30.1.0 [ 199.013744][ T8256] tipc: Enabled bearer , priority 10 [ 199.261094][ T8263] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1001'. [ 199.472938][ T8246] loop3: detected capacity change from 0 to 32768 [ 199.593991][ T8246] read_mapping_page failed! [ 199.635383][ T8246] ERROR: (device loop3): txCommit: [ 199.635383][ T8246] [ 199.838407][ T8274] loop2: detected capacity change from 0 to 256 [ 199.856537][ T8274] exfat: Deprecated parameter 'utf8' [ 199.901209][ T8274] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 200.401291][ T8266] loop0: detected capacity change from 0 to 40427 [ 200.413975][ T8266] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 200.437391][ T8266] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 200.490625][ T8266] F2FS-fs (loop0): invalid crc value [ 200.527409][ T8266] F2FS-fs (loop0): Found nat_bits in checkpoint [ 200.638529][ T8270] loop1: detected capacity change from 0 to 32768 [ 200.750565][ T8266] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 200.767082][ T8266] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 200.785649][ T8270] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 200.962302][ T8270] XFS (loop1): Ending clean mount [ 201.096111][ T8270] XFS (loop1): syz.1.1004 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 201.207446][ T5767] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 201.819438][ T8305] usb usb8: usbfs: process 8305 (syz.0.1014) did not claim interface 0 before use [ 201.903813][ T8299] loop3: detected capacity change from 0 to 32768 [ 201.914513][ T8307] loop1: detected capacity change from 0 to 256 [ 202.002438][ T8307] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xa393d547, utbl_chksum : 0xe619d30d) [ 202.024746][ T28] audit: type=1800 audit(1777411559.412:95): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1013" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 202.075350][ T8299] ERROR: (device loop3): dbAllocBits: leaf page corrupt [ 202.075350][ T8299] [ 202.095247][ T8299] ERROR: (device loop3): remounting filesystem as read-only [ 202.142322][ T8299] syz.3.1013: attempt to access beyond end of device [ 202.142322][ T8299] loop3: rw=34817, sector=4680704, nr_sectors = 968 limit=32768 [ 202.231724][ T112] blkno = 8ed80, nblocks = 79 [ 202.246767][ T112] ERROR: (device loop3): dbFree: block to be freed is outside the map [ 202.246767][ T112] [ 202.260707][ T8313] netlink: 'syz.0.1019': attribute type 1 has an invalid length. [ 202.424194][ T8315] loop1: detected capacity change from 0 to 512 [ 202.465454][ T8315] EXT4-fs: inline encryption not supported [ 202.514992][ T8315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.543669][ T8315] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.862446][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.874661][ T8330] loop0: detected capacity change from 0 to 64 [ 202.964342][ T8330] Trying to free block not in datazone [ 203.210684][ T8336] loop2: detected capacity change from 0 to 64 [ 203.720228][ T8350] ceph: Unexpected value for 'acl' [ 203.841997][ T8356] loop0: detected capacity change from 0 to 2048 [ 203.885386][ T8356] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 203.921477][ T8358] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 203.939259][ T8356] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.975832][ T8356] UDF-fs: unknown compression code (0) [ 204.006923][ T5807] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 204.238682][ T5807] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 204.257079][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.277468][ T5807] usb 4-1: Product: syz [ 204.281922][ T5807] usb 4-1: Manufacturer: syz [ 204.306771][ T5807] usb 4-1: SerialNumber: syz [ 204.336410][ T5807] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 204.366044][ T5757] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 204.609459][ T8372] loop2: detected capacity change from 0 to 8192 [ 204.657650][ T8372] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 204.689182][ T8372] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 204.703827][ T8372] REISERFS (device loop2): using ordered data mode [ 204.735944][ T8372] reiserfs: using flush barriers [ 204.772337][ T8372] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 204.825578][ T8372] REISERFS (device loop2): checking transaction log (loop2) [ 204.876712][ T8372] REISERFS (device loop2): Using r5 hash to sort names [ 204.900748][ T8372] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 205.444815][ T28] audit: type=1326 audit(1777411562.832:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.2.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc43b9cdd9 code=0x7ffc0000 [ 205.497899][ T28] audit: type=1326 audit(1777411562.832:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.2.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc43b9cdd9 code=0x7ffc0000 [ 205.529396][ T28] audit: type=1326 audit(1777411562.872:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.2.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fdc43b9cdd9 code=0x7ffc0000 [ 205.535149][ T8370] loop0: detected capacity change from 0 to 65536 [ 205.607337][ T28] audit: type=1326 audit(1777411562.882:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.2.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc43b9cdd9 code=0x7ffc0000 [ 205.635464][ T8370] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 205.652071][ T5757] usb 4-1: Service connection timeout for: 256 [ 205.659903][ T5757] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 205.684256][ T28] audit: type=1326 audit(1777411562.892:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.2.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc43b9cdd9 code=0x7ffc0000 [ 205.696500][ T5757] ath9k_htc: Failed to initialize the device [ 205.732740][ T28] audit: type=1326 audit(1777411562.892:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.2.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fdc43b9cdd9 code=0x7ffc0000 [ 205.763045][ T28] audit: type=1326 audit(1777411562.892:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.2.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc43b9cdd9 code=0x7ffc0000 [ 205.804627][ T5757] usb 4-1: ath9k_htc: USB layer deinitialized [ 205.848956][ T8370] XFS (loop0): Ending clean mount [ 205.864989][ T8370] XFS (loop0): Quotacheck needed: Please wait. [ 205.876516][ T28] audit: type=1326 audit(1777411562.892:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.2.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc43b9cdd9 code=0x7ffc0000 [ 205.951815][ T8370] XFS (loop0): Quotacheck: Done. [ 206.075089][ T9] usb 4-1: USB disconnect, device number 10 [ 206.246464][ T5769] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 206.285705][ T28] audit: type=1326 audit(1777411563.672:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8390 comm="syz.1.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0d99cdd9 code=0x7ffc0000 [ 206.312051][ C1] vkms_vblank_simulate: vblank timer overrun [ 206.563063][ T8389] loop2: detected capacity change from 0 to 32768 [ 206.636152][ T8389] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 206.678582][ T8399] /dev/loop0: Can't open blockdev [ 206.854020][ T8389] XFS (loop2): Ending clean mount [ 206.879288][ T8389] XFS (loop2): Quotacheck needed: Please wait. [ 206.930450][ T8411] loop3: detected capacity change from 0 to 64 [ 207.029260][ T8389] XFS (loop2): Quotacheck: Done. [ 207.092958][ T8413] loop1: detected capacity change from 0 to 512 [ 207.162100][ T5777] Bluetooth: hci0: command 0x0406 tx timeout [ 207.170265][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 207.171735][ T5083] Bluetooth: hci1: command 0x0406 tx timeout [ 207.207074][ T8413] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 207.354946][ T8413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.447905][ T5768] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 207.742821][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.837033][ T8458] Bluetooth: MGMT ver 1.22 [ 209.640892][ T8489] loop2: detected capacity change from 0 to 128 [ 209.689048][ T8489] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 209.721991][ T8489] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 209.756769][ T8489] hpfs: You really don't want any checks? You are crazy... [ 209.771820][ T8489] hpfs: hpfs_map_sector(): read error [ 209.789450][ T8489] hpfs: code page support is disabled [ 209.796406][ T8489] hpfs: hpfs_map_4sectors(): unaligned read [ 209.805793][ T8489] hpfs: hpfs_map_4sectors(): unaligned read [ 209.812841][ T8489] hpfs: filesystem error: unable to find root dir [ 210.035741][ T8483] loop0: detected capacity change from 0 to 32768 [ 210.036791][ T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 210.091808][ T8483] JBD2: Ignoring recovery information on journal [ 210.128937][ T8483] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 210.237312][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 210.277318][ T27] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 210.306402][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.346711][ T27] usb 2-1: Product: syz [ 210.351322][ T27] usb 2-1: Manufacturer: syz [ 210.356131][ T27] usb 2-1: SerialNumber: syz [ 210.388045][ T27] usb 2-1: config 0 descriptor?? [ 210.406312][ T27] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 210.417601][ T27] dvb-usb: bulk message failed: -22 (2/0) [ 210.468045][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 210.497736][ T5769] ocfs2: Unmounting device (7,0) on (node local) [ 210.506422][ T27] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 210.548965][ T27] usb 2-1: media controller created [ 210.633041][ T8491] cxusb: i2c wr: len=80 is too big! [ 210.633041][ T8491] [ 210.650956][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 210.720717][ T27] usb 2-1: selecting invalid altsetting 7 [ 210.751998][ T27] cxusb: set interface failed [ 210.762142][ T27] dvb-usb: bulk message failed: -22 (1/0) [ 210.890194][ T27] DVB: Unable to find symbol lgdt330x_attach() [ 210.906759][ T27] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 211.054011][ T8513] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1098'. [ 211.087278][ T27] rc_core: IR keymap rc-dvico-portable not found [ 211.102559][ T27] Registered IR keymap rc-empty [ 211.122447][ T27] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 211.179159][ T27] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input14 [ 211.222321][ T27] dvb-usb: schedule remote query interval to 100 msecs. [ 211.250492][ T27] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 211.303126][ T27] usb 2-1: USB disconnect, device number 6 [ 211.504617][ T8521] loop1: detected capacity change from 0 to 2048 [ 211.537953][ T8521] EXT4-fs: Ignoring removed i_version option [ 211.550967][ T27] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 211.610381][ T8521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.661739][ T8521] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.902963][ T8536] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1111'. [ 212.005809][ T8538] loop3: detected capacity change from 0 to 512 [ 212.016098][ T8538] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 212.063338][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.075278][ T5762] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 212.362239][ T5807] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 212.401615][ T8548] loop3: detected capacity change from 0 to 512 [ 212.447113][ T8548] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 212.490821][ T8550] loop1: detected capacity change from 0 to 4096 [ 212.574201][ T8552] loop2: detected capacity change from 0 to 256 [ 212.581572][ T5807] usb 1-1: Using ep0 maxpacket: 32 [ 212.592920][ T8553] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.626766][ T5807] usb 1-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.666181][ T5807] usb 1-1: config 0 interface 0 has no altsetting 0 [ 212.677829][ T5807] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 212.717488][ T8552] FAT-fs (loop2): Directory bread(block 64) failed [ 212.724477][ T8552] FAT-fs (loop2): Directory bread(block 65) failed [ 212.731782][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.771429][ T8552] FAT-fs (loop2): Directory bread(block 66) failed [ 212.772757][ T5807] usb 1-1: config 0 descriptor?? [ 212.794704][ T8552] FAT-fs (loop2): Directory bread(block 67) failed [ 212.825284][ T8552] FAT-fs (loop2): Directory bread(block 68) failed [ 212.837533][ T8552] FAT-fs (loop2): Directory bread(block 69) failed [ 212.866911][ T8552] FAT-fs (loop2): Directory bread(block 70) failed [ 212.897012][ T8552] FAT-fs (loop2): Directory bread(block 71) failed [ 212.932409][ T8552] FAT-fs (loop2): Directory bread(block 72) failed [ 212.969856][ T8552] FAT-fs (loop2): Directory bread(block 73) failed [ 213.201482][ T8558] loop3: detected capacity change from 0 to 4096 [ 213.235281][ T5807] dragonrise 0003:0079:0011.000C: unknown main item tag 0x0 [ 213.255352][ T5807] dragonrise 0003:0079:0011.000C: unknown main item tag 0x0 [ 213.290805][ T5807] dragonrise 0003:0079:0011.000C: unknown main item tag 0x0 [ 213.309847][ T5807] dragonrise 0003:0079:0011.000C: unknown main item tag 0x0 [ 213.350069][ T5807] dragonrise 0003:0079:0011.000C: unknown main item tag 0x0 [ 213.372576][ T5807] dragonrise 0003:0079:0011.000C: unbalanced collection at end of report description [ 213.397658][ T5807] dragonrise 0003:0079:0011.000C: parse failed [ 213.430928][ T5807] dragonrise: probe of 0003:0079:0011.000C failed with error -22 [ 213.475713][ T8558] ntfs3: loop3: failed to convert "0080" to cp775 [ 213.477394][ T5807] usb 1-1: USB disconnect, device number 9 [ 213.525774][ T8558] ntfs3: loop3: failed to convert name for inode 1e. [ 213.581524][ T8566] loop2: detected capacity change from 0 to 256 [ 213.599137][ T8567] loop1: detected capacity change from 0 to 256 [ 213.693201][ T8567] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 213.887469][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1127'. [ 213.954454][ T8569] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 214.026694][ T8569] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.606389][ T8592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1137'. [ 214.682155][ T8588] NILFS (loop2): invalid segment: Checksum error in segment payload [ 214.717579][ T8588] NILFS (loop2): trying rollback from an earlier position [ 214.731358][ T8590] set_capacity_and_notify: 2 callbacks suppressed [ 214.731376][ T8590] loop0: detected capacity change from 0 to 4096 [ 214.800392][ T8588] NILFS (loop2): recovery complete [ 214.835541][ T8596] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 214.958638][ T8599] loop3: detected capacity change from 0 to 512 [ 214.970660][ T8590] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 215.164608][ T8590] ntfs3: loop0: failed to convert "0080" to maccenteuro [ 215.220882][ T8590] ntfs3: loop0: failed to convert name for inode 1e. [ 216.075912][ T8628] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 216.106384][ T8628] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 216.391889][ T8635] syz.1.1158[8635] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.392734][ T8635] syz.1.1158[8635] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.006202][ T8626] loop2: detected capacity change from 0 to 32768 [ 217.053089][ T8629] loop3: detected capacity change from 0 to 32768 [ 217.131280][ T8629] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 217.164964][ T8626] JBD2: Ignoring recovery information on journal [ 217.252753][ T8626] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 217.261912][ T8629] XFS (loop3): Ending clean mount [ 217.437667][ T5770] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 217.530044][ T8626] (syz.2.1153,8626,0):ocfs2_verify_group_and_input:426 ERROR: input chain exceeds the limit. [ 217.589752][ T8626] (syz.2.1153,8626,0):ocfs2_group_add:507 ERROR: status = -22 [ 217.732638][ T8664] tipc: Started in network mode [ 217.761630][ T8664] tipc: Node identity , cluster identity 4711 [ 217.838659][ T5768] ocfs2: Unmounting device (7,2) on (node local) [ 218.125968][ T8650] loop1: detected capacity change from 0 to 32768 [ 218.316973][ T27] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 218.395392][ T8672] loop2: detected capacity change from 0 to 2048 [ 218.427150][ T8672] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.540513][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.551463][ T27] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 218.573846][ T27] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 218.585632][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.647987][ T27] usb 4-1: config 0 descriptor?? [ 218.669409][ T27] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 218.684354][ T27] dvb-usb: bulk message failed: -22 (3/0) [ 218.718205][ T8678] loop0: detected capacity change from 0 to 64 [ 218.734458][ T27] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 218.792936][ T27] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 218.796178][ T8680] loop1: detected capacity change from 0 to 512 [ 218.814497][ T27] usb 4-1: media controller created [ 218.844755][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 218.860977][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 218.860995][ T28] audit: type=1804 audit(1777411576.232:109): pid=8678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1175" name="/newroot/293/bus/file1" dev="loop0" ino=21 res=1 errno=0 [ 218.889017][ T27] dvb-usb: bulk message failed: -22 (6/0) [ 218.919534][ T8668] dvb-usb: bulk message failed: -22 (2/0) [ 218.929436][ T27] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 218.967557][ T27] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 218.995965][ T27] dvb-usb: schedule remote query interval to 150 msecs. [ 219.026319][ T27] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 219.077130][ T27] usb 4-1: USB disconnect, device number 11 [ 219.186950][ T8686] loop0: detected capacity change from 0 to 256 [ 219.230277][ T27] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 219.836177][ T8703] loop0: detected capacity change from 0 to 256 [ 219.873027][ T8703] exfat: Deprecated parameter 'namecase' [ 219.939914][ T8703] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 220.323884][ T8718] program syz.0.1192 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 220.403952][ T8721] loop1: detected capacity change from 0 to 1024 [ 220.819891][ T968] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 221.016682][ T968] usb 3-1: Using ep0 maxpacket: 32 [ 221.059704][ T968] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 221.078415][ T968] usb 3-1: config 0 has no interface number 0 [ 221.100712][ T968] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 221.125060][ T968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.144690][ T968] usb 3-1: Product: syz [ 221.150828][ T968] usb 3-1: Manufacturer: syz [ 221.173183][ T968] usb 3-1: SerialNumber: syz [ 221.185523][ T968] usb 3-1: config 0 descriptor?? [ 221.211365][ T968] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 221.306824][ T5807] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 221.457245][ T968] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 221.497131][ T5807] usb 1-1: Using ep0 maxpacket: 16 [ 221.514421][ T5807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.526918][ T968] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 221.545401][ T5807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.594727][ T5807] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 221.659780][ T5807] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 221.736750][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.790170][ T5807] usb 1-1: config 0 descriptor?? [ 222.009706][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 222.029119][ T5775] usb 3-1: USB disconnect, device number 11 [ 222.075989][ T5775] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 222.153832][ T5775] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 222.198194][ T5775] quatech2 3-1:0.51: device disconnected [ 222.227983][ T8765] loop1: detected capacity change from 0 to 128 [ 222.277152][ T5807] microsoft 0003:045E:07DA.000D: No inputs registered, leaving [ 222.277537][ T8765] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985 [ 222.308397][ T5807] microsoft 0003:045E:07DA.000D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 222.341564][ T8765] ; already mounted read-only [ 222.361892][ T8765] hpfs: filesystem error: improperly stopped [ 222.402395][ T5807] microsoft 0003:045E:07DA.000D: no inputs found [ 222.410935][ T8765] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 222.431531][ T5807] microsoft 0003:045E:07DA.000D: could not initialize ff, continuing anyway [ 222.446909][ T8765] hpfs: You really don't want any checks? You are crazy... [ 222.477849][ T8765] hpfs: hpfs_map_sector(): read error [ 222.490087][ T8765] hpfs: code page support is disabled [ 222.497159][ T5807] usb 1-1: USB disconnect, device number 10 [ 222.506072][ T8765] hpfs: hpfs_map_4sectors(): unaligned read [ 222.541123][ T8765] hpfs: hpfs_map_4sectors(): unaligned read [ 222.575373][ T8765] hpfs: filesystem error: unable to find root dir [ 222.659352][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1208'. [ 222.701318][ T8774] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1208'. [ 222.858357][ T8779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1209'. [ 223.104839][ T8787] loop2: detected capacity change from 0 to 512 [ 223.216902][ T8787] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.1213: iget: bad extra_isize 50264 (inode size 256) [ 223.371732][ T8787] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1213: couldn't read orphan inode 15 (err -117) [ 223.445834][ T8787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.536927][ T8787] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.1213: Directory hole found for htree leaf block 0 [ 223.639570][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.773354][ T8812] loop3: detected capacity change from 0 to 512 [ 223.899562][ T8812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.955024][ T8812] ext4 filesystem being mounted at /299/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 224.193861][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.327376][ T8817] loop2: detected capacity change from 0 to 40427 [ 225.352589][ T8817] F2FS-fs (loop2): invalid crc value [ 225.373007][ T8817] F2FS-fs (loop2): Found nat_bits in checkpoint [ 225.543819][ T8817] F2FS-fs (loop2): Start checkpoint disabled! [ 225.601430][ T8817] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 225.669564][ T8831] loop3: detected capacity change from 0 to 32768 [ 225.730202][ T8831] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 225.739652][ T8831] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 226.014975][ T8831] XFS (loop3): Ending clean mount [ 226.060811][ T8831] XFS (loop3): Quotacheck needed: Please wait. [ 226.144475][ T43] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x2e5/0x11d0, inode 0x1684 dinode [ 226.165300][ T43] XFS (loop3): Unmount and run xfs_repair [ 226.171862][ T43] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 226.184616][ T43] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 226.215531][ T43] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 226.241851][ T43] 00000020: 34 f7 58 68 a1 1e 07 ee 34 f7 58 68 a1 1e 07 ee 4.Xh....4.Xh.... [ 226.269236][ T43] 00000030: 34 f7 58 68 a1 1e 07 ee 00 00 00 00 00 00 04 1a 4.Xh............ [ 226.287287][ T43] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 ................ [ 226.314094][ T43] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 c2 72 3d 69 .............r=i [ 226.334627][ T43] 00000060: ff ff ff ff cf 80 b3 ab 00 00 00 00 00 00 00 05 ................ [ 226.357056][ T43] 00000070: 00 00 00 01 00 00 00 40 00 00 00 00 00 00 00 08 .......@........ [ 226.425931][ T8831] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 226.585547][ T5770] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 227.470094][ T8905] loop2: detected capacity change from 0 to 64 [ 227.642382][ T8884] loop1: detected capacity change from 0 to 32768 [ 227.725588][ T8884] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 227.886919][ T8884] XFS (loop1): Ending clean mount [ 227.910821][ T8884] XFS (loop1): Quotacheck needed: Please wait. [ 228.043979][ T8884] XFS (loop1): Quotacheck: Done. [ 228.066111][ T8921] loop3: detected capacity change from 0 to 4096 [ 228.175853][ T8928] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 228.303357][ T5767] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 228.334042][ T8921] NILFS error (device loop3): nilfs_dotdot: directory #12 missing '.' [ 228.381166][ T8921] Remounting filesystem read-only [ 228.519049][ T8930] loop2: detected capacity change from 0 to 8192 [ 228.527340][ T5770] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 228.587002][ T5770] NILFS (loop3): discard dirty page: offset=0, ino=18 [ 228.598671][ T8930] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 228.616655][ T5770] NILFS (loop3): discard dirty block: blocknr=0, size=4096 [ 228.621197][ T8930] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 228.625585][ T5770] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 228.642295][ T5770] NILFS (loop3): discard dirty block: blocknr=14, size=4096 [ 228.652037][ T5770] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 228.659723][ T5770] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 228.668145][ T5770] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 228.677331][ T5770] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 228.686208][ T5770] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 228.694233][ T5770] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 228.708475][ T5770] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 228.715880][ T5770] NILFS (loop3): discard dirty block: blocknr=28, size=4096 [ 228.724019][ T5770] NILFS (loop3): discard dirty page: offset=4096, ino=3 [ 228.731604][ T5770] NILFS (loop3): discard dirty block: blocknr=29, size=4096 [ 228.740388][ T5770] NILFS (loop3): discard dirty page: offset=270336, ino=3 [ 228.750111][ T8930] REISERFS (device loop2): using ordered data mode [ 228.766750][ T5770] NILFS (loop3): discard dirty block: blocknr=0, size=4096 [ 228.781626][ T8930] reiserfs: using flush barriers [ 228.819140][ T8930] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 228.879498][ T8930] REISERFS (device loop2): checking transaction log (loop2) [ 228.929679][ T8930] REISERFS (device loop2): Using r5 hash to sort names [ 228.975366][ T8930] reiserfs: enabling write barrier flush mode [ 228.989178][ T8930] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 229.040708][ T8930] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 229.064201][ T8930] REISERFS (device loop2): Remounting filesystem read-only [ 229.087232][ T8930] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 229.126256][ T8930] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 229.183443][ T8930] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 229.222563][ T8945] program syz.3.1252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.233753][ T8930] REISERFS error (device loop2): zam-7001 reiserfs_find_entry: io error [ 229.244987][ T8930] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 229.297883][ T8930] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 229.326704][ T8930] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 229.393974][ T8930] REISERFS warning (device loop2): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 229.615797][ T5768] ------------[ cut here ]------------ [ 229.622171][ T5768] kernel BUG at fs/reiserfs/journal.c:1916! [ 229.638591][ T8956] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 229.645680][ T8956] comedi comedi3: 8255: I/O port conflict (0xffffffffffffff00,4) [ 229.653159][ T5768] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 229.660476][ T5768] CPU: 1 PID: 5768 Comm: syz-executor Not tainted syzkaller #0 [ 229.668840][ T5768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 229.680329][ T5768] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 229.687765][ T5768] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 14 db b5 ff e9 f9 fc ff ff e8 fa a3 5d ff <0f> 0b e8 f3 a3 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 229.710469][ T5768] RSP: 0018:ffffc900045ffb00 EFLAGS: 00010293 [ 229.716923][ T5768] RAX: ffffffff82297e06 RBX: 1ffff920008bff64 RCX: ffff88802f8b9e00 [ 229.726425][ T5768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 229.736191][ T5768] RBP: ffffc900045ffbf8 R08: ffffc900045ffb77 R09: 0000000000000000 [ 229.745425][ T5768] R10: ffffc900045ffb40 R11: fffff520008bff6f R12: ffffc90003897000 [ 229.755690][ T5768] R13: dffffc0000000000 R14: ffff88803148c630 R15: 0000000000000000 [ 229.765353][ T5768] FS: 000055557e6ea500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 229.775409][ T5768] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 229.783162][ T5768] CR2: 000000110c29f9dc CR3: 0000000060d23000 CR4: 00000000003506e0 [ 229.792349][ T5768] Call Trace: [ 229.795648][ T5768] [ 229.798776][ T5768] ? journal_release+0x30/0x30 [ 229.803988][ T5768] journal_release+0x1f/0x30 [ 229.808700][ T5768] reiserfs_put_super+0x26b/0x510 [ 229.813931][ T5768] ? hook_inode_free_security+0xb0/0xb0 [ 229.821370][ T5768] ? evict_inodes+0x63c/0x6a0 [ 229.826435][ T5768] ? reiserfs_dirty_inode+0x270/0x270 [ 229.832097][ T5768] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 229.839892][ T5768] ? reiserfs_dirty_inode+0x270/0x270 [ 229.845878][ T5768] generic_shutdown_super+0x134/0x2b0 [ 229.852360][ T5768] kill_block_super+0x44/0x90 [ 229.857230][ T5768] deactivate_locked_super+0x97/0x100 [ 229.863172][ T5768] cleanup_mnt+0x43b/0x4d0 [ 229.867906][ T5768] task_work_run+0x1d4/0x260 [ 229.872868][ T5768] ? task_work_cancel+0x220/0x220 [ 229.878281][ T5768] ? exit_to_user_mode_loop+0x3b/0x110 [ 229.884332][ T5768] exit_to_user_mode_loop+0xe6/0x110 [ 229.889921][ T5768] exit_to_user_mode_prepare+0xee/0x180 [ 229.895899][ T5768] syscall_exit_to_user_mode+0x1a/0x50 [ 229.903217][ T5768] do_syscall_64+0x61/0xa0 [ 229.907823][ T5768] ? clear_bhb_loop+0x40/0x90 [ 229.912541][ T5768] ? clear_bhb_loop+0x40/0x90 [ 229.918098][ T5768] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.924545][ T5768] RIP: 0033:0x7fdc43b9e017 [ 229.929626][ T5768] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 229.951121][ T5768] RSP: 002b:00007ffc8f1544d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 229.959845][ T5768] RAX: 0000000000000000 RBX: 00007fdc43c32120 RCX: 00007fdc43b9e017 [ 229.968466][ T5768] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc8f154590 [ 229.978410][ T5768] RBP: 00007ffc8f154590 R08: 00007ffc8f155590 R09: 00000000ffffffff [ 229.988471][ T5768] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc8f155620 [ 229.997987][ T5768] R13: 00007fdc43c32120 R14: 0000000000038032 R15: 00007ffc8f155660 [ 230.008078][ T5768] [ 230.011280][ T5768] Modules linked in: [ 230.016277][ T8956] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 230.038984][ T8956] comedi comedi3: 8255: I/O port conflict (0x80007,4) [ 230.041057][ T5768] ---[ end trace 0000000000000000 ]--- [ 230.047173][ T8956] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 230.054395][ T5768] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 230.060855][ T8956] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 230.069709][ T5768] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 14 db b5 ff e9 f9 fc ff ff e8 fa a3 5d ff <0f> 0b e8 f3 a3 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 230.075674][ T8956] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 230.101432][ T5768] RSP: 0018:ffffc900045ffb00 EFLAGS: 00010293 [ 230.115484][ T5768] RAX: ffffffff82297e06 RBX: 1ffff920008bff64 RCX: ffff88802f8b9e00 [ 230.133517][ T8956] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 230.141224][ T5768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 230.151601][ T5768] RBP: ffffc900045ffbf8 R08: ffffc900045ffb77 R09: 0000000000000000 [ 230.160832][ T5768] R10: ffffc900045ffb40 R11: fffff520008bff6f R12: ffffc90003897000 [ 230.170685][ T5768] R13: dffffc0000000000 R14: ffff88803148c630 R15: 0000000000000000 [ 230.179593][ T5768] FS: 000055557e6ea500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 230.195935][ T5768] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.203314][ T5768] CR2: 00007f82da3ea2f8 CR3: 0000000060d23000 CR4: 00000000003506e0 [ 230.212803][ T5768] Kernel panic - not syncing: Fatal exception [ 230.220052][ T5768] Kernel Offset: disabled [ 230.224981][ T5768] Rebooting in 86400 seconds..