last executing test programs: 1m27.263271617s ago: executing program 0 (id=82): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='stack :'], 0x7) (async) write$apparmor_exec(r3, &(0x7f00000000c0)={'exec ', '&\f&\x00\x00\x00\x00\x00\x00h\xd4y\xc7\xab\x86-A:\x92\xf5[\x9fk6\x02^\x0ftp(\xc2\x98\x02\x00G\xa1y\x8dzq\x98\x82\xa0\x16\t\x9c\xd6$\v\b\x8b\xf14;u\x89\xb7\vY\xbc\xda};\r\xd8~<\xbaea\xd6\x84+\x10\xd32&\xf9\x96\xccf\xef\xe2\xbb\xafx8\x90\xe9\x9bf\xa5\xf4T\x952\xfe\xcd\x01a\xf5\xae\xa9\"\x9f\xb3TN\xe8\x1c\x85X\xf2c\xbf\xc3\xeb`\xb9\x83\xcf!F\\0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrusage(0x0, 0x0) 3.724170973s ago: executing program 1 (id=417): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x180) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 3.505299463s ago: executing program 5 (id=418): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000300), &(0x7f0000000140)='./bus\x00', 0x810, &(0x7f0000000580)={[{@discard}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@nobarrier}, {@usebackuproot}, {@space_cache_v1}, {@nodatasum}, {@commit={'commit', 0x3d, 0x71}}, {@max_inline={'max_inline', 0x3d, [0x34, 0x38, 0x33, 0x6b, 0x32, 0x39, 0x70, 0x78, 0x38]}}]}, 0x6, 0x510e, &(0x7f0000006440)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 3.343371037s ago: executing program 1 (id=419): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x2000000, &(0x7f0000000400)=ANY=[], 0x2, 0x23d, &(0x7f00000001c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0xc1) 3.104304058s ago: executing program 4 (id=420): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x20400, 0x0) setuid(0xee01) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x2ae) 2.887177687s ago: executing program 4 (id=421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x831c21, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './file0'}, 0x3a}], [{@fowner_eq}], 0x2f}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000100), 0x1, 0x50f9, &(0x7f0000005140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc4009420, &(0x7f0000000200)={0x2, 0x6, 0x4000000000000000}) 2.783155146s ago: executing program 1 (id=422): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x40, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x80, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRES8=0x0], 0x1, 0x122e, &(0x7f0000002580)="$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") shutdown(r0, 0x1) 2.609115501s ago: executing program 5 (id=423): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x3, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000300), 0x0}, 0x20) 1.775894634s ago: executing program 4 (id=424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000280), 0x1, 0x614f, &(0x7f000000ccc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x2, 0x0, 0x0) 1.355777091s ago: executing program 1 (id=425): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0, @ANYBLOB="4b7656da"], 0x40c}}, 0x0) 896.082131ms ago: executing program 5 (id=426): socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xf1e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) syz_mount_image$xfs(&(0x7f0000009680), &(0x7f00000096c0)='./file0\x00', 0x0, &(0x7f00000000c0), 0x1, 0x96f2, &(0x7f000001c440)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 303.922053ms ago: executing program 1 (id=427): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa2, 0x0, &(0x7f0000000640)="b44c806748f06309624431ed337301000000010000009c1fd05dacf5bb80c9b7ee0fae7a6a53200386ce51def6a4effb86e8e2ad7cb4645c2b9c0614907d40080cd6f4e5b5da60159633bb490c4af96c8663ad81b86b898d9435af40b29d0936e15fb284457b0bc44d54579a75db65633809f4e37ef15070c36fdb9660809c71e250fab354c5772fee217712b65392884be1910d626c1aecba99c72b0f8ebfa19503", 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 214.723741ms ago: executing program 4 (id=428): socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000380)={0x0, 0x60d3, 0x8, 0x0, 0x3df}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x6003, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x47ba, 0x0, 0x28, 0x0, 0x0) 0s ago: executing program 1 (id=429): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6282, &(0x7f000000f900)="$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") chdir(&(0x7f0000000080)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) creat(&(0x7f0000000040)='./bus\x00', 0xa8) open(&(0x7f00000000c0)='./bus\x00', 0x147c7c, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x5, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) kernel console output (not intermixed with test programs): of length 0, skipping remainder of the config [ 94.150881][ T4513] XFS: ikeep mount option is deprecated. [ 94.159350][ T33] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 94.169645][ T4522] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 94.179796][ T33] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 94.190690][ T33] usb 2-1: SerialNumber: syz [ 94.203933][ T33] usb 2-1: config 0 descriptor?? [ 94.228961][ T33] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 94.240013][ T33] usb 2-1: Failed to create links for entity 255 [ 94.247122][ T33] usb 2-1: Failed to register entities (-22). [ 94.322904][ T4324] XFS (loop3): Metadata CRC error detected at xfs_sb_read_verify+0x39a/0x480, xfs_sb_quiet block 0x0 [ 94.336231][ T4324] XFS (loop3): Unmount and run xfs_repair [ 94.342027][ T4324] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 94.351036][ T4324] 00000000: 58 46 53 42 00 00 08 00 00 00 00 00 00 00 20 00 XFSB.......... . [ 94.360375][ T4324] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 94.369643][ T4324] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 94.379745][ T4324] 00000030: 00 00 00 00 00 00 00 20 00 00 00 00 00 00 24 40 ....... ......$@ [ 94.389180][ T4324] 00000040: 00 00 00 00 00 00 24 41 00 00 00 00 00 00 24 42 ......$A......$B [ 94.409800][ T4324] 00000050: 00 00 00 02 00 00 20 00 00 00 00 02 00 00 00 00 ...... ......... [ 94.423391][ T4324] 00000060: 00 00 12 00 b4 b5 02 00 04 00 00 02 00 00 00 00 ................ [ 94.618425][ T4324] 00000070: 00 00 00 00 00 00 00 00 0b 09 0a 01 0d 00 00 32 ...............2 [ 94.634364][ T4545] loop4: detected capacity change from 0 to 1024 [ 94.793009][ T4262] EXT4-fs (loop0): unmounting filesystem. [ 95.413059][ C1] sched: RT throttling activated [ 95.748006][ T4551] loop4: detected capacity change from 0 to 64 [ 95.787569][ T4551] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 95.965438][ T4555] loop0: detected capacity change from 0 to 128 [ 95.992747][ T4555] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 96.005293][ T4555] hpfs: filesystem error: improperly stopped [ 96.011503][ T4555] hpfs: You really don't want any checks? You are crazy... [ 96.021318][ T4555] hpfs: hpfs_map_sector(): read error [ 96.027000][ T4555] hpfs: code page support is disabled [ 96.035036][ T4555] hpfs: hpfs_map_sector(): read error [ 96.041438][ T4555] hpfs: hpfs_map_sector(): read error [ 96.047121][ T4555] hpfs: filesystem error: unable to find root dir [ 96.161923][ T4551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.343159][ T4324] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 96.665286][ T4551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.893238][ T4324] usb 5-1: Using ep0 maxpacket: 32 [ 96.961499][ T4324] usb 5-1: config 0 has no interfaces? [ 96.967324][ T4324] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 97.042152][ T4324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.087902][ T4324] usb 5-1: config 0 descriptor?? [ 97.393779][ T4375] usb 5-1: USB disconnect, device number 3 [ 97.613417][ T4272] usb 2-1: USB disconnect, device number 8 [ 97.912686][ T4525] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 97.957638][ T4569] loop2: detected capacity change from 0 to 64 [ 97.978440][ T4569] hfs: creator requires a 4 character value [ 97.991357][ T4525] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 98.004618][ T4569] hfs: unable to parse mount options [ 98.087351][ T4525] Remounting filesystem read-only [ 98.118274][ T4277] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 98.262902][ T4571] loop4: detected capacity change from 0 to 256 [ 98.360028][ T4571] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.390143][ T4571] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 98.410402][ T4579] device erspan0 entered promiscuous mode [ 98.459954][ T4571] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 98.613321][ T4324] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 98.815050][ T4324] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 98.843176][ T4324] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 98.876336][ T4324] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 98.920256][ T4324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.941963][ T4575] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 98.969173][ T4575] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 99.083234][ T4345] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 99.284835][ T4324] usb 4-1: USB disconnect, device number 5 [ 99.297471][ T4582] loop0: detected capacity change from 0 to 40427 [ 99.306964][ T4345] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 99.333220][ T4345] usb 2-1: config 0 interface 0 has no altsetting 0 [ 99.368102][ T4345] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 99.378466][ T4582] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 99.393252][ T4345] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 99.425577][ T4345] usb 2-1: Product: syz [ 99.429999][ T4345] usb 2-1: Manufacturer: syz [ 99.435338][ T4345] usb 2-1: SerialNumber: syz [ 99.440031][ T4582] F2FS-fs (loop0): invalid crc value [ 99.460368][ T4345] usb 2-1: config 0 descriptor?? [ 99.469804][ T4582] F2FS-fs (loop0): Found nat_bits in checkpoint [ 99.483498][ T4580] loop2: detected capacity change from 0 to 32768 [ 99.509668][ T4345] usb 2-1: selecting invalid altsetting 0 [ 99.629070][ T4580] XFS (loop2): Mounting V5 Filesystem [ 99.645515][ T4582] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 99.719128][ T4582] syz.0.48: attempt to access beyond end of device [ 99.719128][ T4582] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 99.842117][ T4582] syz.0.48: attempt to access beyond end of device [ 99.842117][ T4582] loop0: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 99.961758][ T4580] XFS (loop2): Ending clean mount [ 99.963519][ T4582] syz.0.48: attempt to access beyond end of device [ 99.963519][ T4582] loop0: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 100.306425][ T4262] syz-executor: attempt to access beyond end of device [ 100.306425][ T4262] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 100.425614][ T4267] XFS (loop2): Unmounting Filesystem [ 101.379083][ T4625] Cannot find add_set index 0 as target [ 101.535617][ T4631] device syzkaller1 entered promiscuous mode [ 101.574415][ T4631] netlink: 56 bytes leftover after parsing attributes in process `syz.3.58'. [ 101.595834][ T4631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.58'. [ 101.622654][ T4633] input: syz0 as /devices/virtual/input/input6 [ 101.808287][ T4637] ptrace attach of "./syz-executor exec"[4267] was attempted by "./syz-executor exec"[4637] [ 102.372608][ T4629] loop0: detected capacity change from 0 to 40427 [ 102.392069][ T4272] usb 2-1: USB disconnect, device number 9 [ 102.393006][ T4629] F2FS-fs (loop0): Wrong NAT boundary, start(2560) end(3584) blocks(512) [ 102.407613][ T4629] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 102.453474][ T4629] F2FS-fs (loop0): invalid crc value [ 102.483668][ T4377] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 102.500575][ T4629] F2FS-fs (loop0): Found nat_bits in checkpoint [ 102.630213][ T4629] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 102.643192][ T4629] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 102.659783][ T26] audit: type=1800 audit(1767961875.681:3): pid=4629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.56" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 102.683697][ T4377] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 102.717257][ T4377] usb 4-1: config 0 has no interface number 0 [ 102.777512][ T4377] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 102.828304][ T4377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.848023][ T4377] usb 4-1: Product: syz [ 102.858148][ T4377] usb 4-1: Manufacturer: syz [ 102.878410][ T4377] usb 4-1: SerialNumber: syz [ 102.899216][ T4377] usb 4-1: config 0 descriptor?? [ 102.916016][ T4639] loop4: detected capacity change from 0 to 32768 [ 102.939194][ T4262] syz-executor: attempt to access beyond end of device [ 102.939194][ T4262] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 103.049209][ T4639] XFS (loop4): Mounting V5 Filesystem [ 103.125876][ T4377] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 103.214346][ T4377] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 103.273588][ T4377] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 103.313793][ T4377] usb 4-1: media controller created [ 103.395154][ T4377] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.443989][ T4639] XFS (loop4): Ending clean mount [ 103.490235][ T4655] loop1: detected capacity change from 0 to 40427 [ 103.552806][ T4655] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 103.593027][ T4655] F2FS-fs (loop1): invalid crc value [ 103.635635][ T4655] F2FS-fs (loop1): Found nat_bits in checkpoint [ 103.838775][ T4655] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 103.984192][ T4655] syz.1.63: attempt to access beyond end of device [ 103.984192][ T4655] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 104.043325][ T4639] overlayfs: conflicting lowerdir path [ 104.077044][ T4655] syz.1.63: attempt to access beyond end of device [ 104.077044][ T4655] loop1: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 104.105587][ T4675] loop0: detected capacity change from 0 to 8 [ 104.195631][ T4675] SQUASHFS error: zlib decompression failed, data probably corrupt [ 104.228859][ T4655] syz.1.63: attempt to access beyond end of device [ 104.228859][ T4655] loop1: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 104.235323][ T4675] SQUASHFS error: Failed to read block 0x9b: -5 [ 104.290612][ T4675] SQUASHFS error: Unable to read metadata cache entry [99] [ 104.329862][ T4675] SQUASHFS error: Unable to read inode 0x127 [ 104.415253][ T4264] XFS (loop4): Unmounting Filesystem [ 104.523307][ T4277] syz-executor: attempt to access beyond end of device [ 104.523307][ T4277] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 104.544288][ T4377] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 104.598596][ T4662] loop2: detected capacity change from 0 to 32768 [ 104.627447][ T4675] loop0: detected capacity change from 0 to 4096 [ 104.652905][ T4675] ntfs3: Unknown parameter '' [ 104.680430][ T4662] XFS (loop2): Mounting V5 Filesystem [ 104.691492][ T4675] netlink: 60 bytes leftover after parsing attributes in process `syz.0.64'. [ 104.951562][ T4662] XFS (loop2): Ending clean mount [ 104.991608][ T4377] usb 4-1: USB disconnect, device number 6 [ 105.001915][ T4662] XFS (loop2): syz.2.65 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 105.209374][ T4267] XFS (loop2): Unmounting Filesystem [ 105.370626][ T4692] loop0: detected capacity change from 0 to 2048 [ 105.463151][ T4692] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 105.477230][ T4698] netlink: 32 bytes leftover after parsing attributes in process `syz.3.71'. [ 105.557739][ T4700] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #12: block 2: comm syz.0.69: lblock 0 mapped to illegal pblock 2 (length 1) [ 105.749464][ T4262] EXT4-fs (loop0): unmounting filesystem. [ 105.942279][ T4705] loop1: detected capacity change from 0 to 4096 [ 105.981729][ T4710] ptrace attach of "./syz-executor exec"[4262] was attempted by "./syz-executor exec"[4710] [ 106.022891][ T4709] mmap: syz.2.70 (4709) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 106.037992][ T4711] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.054598][ T4705] netlink: 24 bytes leftover after parsing attributes in process `syz.1.72'. [ 106.514579][ T26] audit: type=1326 audit(1767961879.531:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe518f749 code=0x7ffc0000 [ 106.642518][ T26] audit: type=1326 audit(1767961879.541:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe518f749 code=0x7ffc0000 [ 106.721829][ T26] audit: type=1326 audit(1767961879.541:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f2fe518f749 code=0x7ffc0000 [ 106.796247][ T26] audit: type=1326 audit(1767961879.541:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe518f749 code=0x7ffc0000 [ 106.860951][ T4739] loop4: detected capacity change from 0 to 4096 [ 106.881169][ T26] audit: type=1326 audit(1767961879.541:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe518f749 code=0x7ffc0000 [ 106.924910][ T4739] EXT4-fs: Ignoring removed nobh option [ 106.976725][ T26] audit: type=1326 audit(1767961879.541:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f2fe518f749 code=0x7ffc0000 [ 107.002541][ T4739] EXT4-fs (loop4): Test dummy encryption mode enabled [ 107.010331][ T26] audit: type=1326 audit(1767961879.591:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe518f749 code=0x7ffc0000 [ 107.035869][ T4747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.81'. [ 107.062549][ T4739] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 107.152609][ T4752] 9pnet_fd: p9_fd_create_unix (4752): problem connecting socket: ./file0: -111 [ 107.154733][ T26] audit: type=1326 audit(1767961879.591:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe518f749 code=0x7ffc0000 [ 107.247600][ T4739] EXT4-fs error (device loop4): ext4_empty_dir:3154: inode #12: block 80: comm syz.4.79: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 107.330626][ T26] audit: type=1326 audit(1767961879.591:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2fe518f749 code=0x7ffc0000 [ 107.357474][ T4739] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz.4.79: directory missing '..' [ 107.417282][ T4721] loop1: detected capacity change from 0 to 32768 [ 107.482014][ T4721] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.74 (4721) [ 107.572242][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 107.659316][ T4721] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 107.683165][ T3532] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 107.721326][ T4721] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 107.764168][ T4721] BTRFS info (device loop1): force clearing of disk cache [ 107.771392][ T4721] BTRFS info (device loop1): enabling auto defrag [ 107.778961][ T4377] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.803696][ T4721] BTRFS info (device loop1): max_inline at 0 [ 107.830192][ T4721] BTRFS info (device loop1): enabling disk space caching [ 107.854893][ T4721] BTRFS info (device loop1): disk space caching is enabled [ 107.893305][ T3532] usb 1-1: Using ep0 maxpacket: 16 [ 107.906147][ T3532] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 107.983142][ T4377] usb 3-1: Using ep0 maxpacket: 32 [ 107.993956][ T4377] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 108.002027][ T4377] usb 3-1: config 0 has no interface number 0 [ 108.009274][ T3532] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.018127][ T3532] usb 1-1: Product: syz [ 108.022420][ T3532] usb 1-1: Manufacturer: syz [ 108.027401][ T3532] usb 1-1: SerialNumber: syz [ 108.042472][ T3532] usb 1-1: config 0 descriptor?? [ 108.054715][ T4377] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.066292][ T4377] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.079267][ T3532] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 108.098958][ T4377] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 108.149018][ T4377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.177872][ T4744] loop3: detected capacity change from 0 to 32768 [ 108.189198][ T4377] usb 3-1: config 0 descriptor?? [ 108.280088][ T4721] BTRFS info (device loop1): enabling ssd optimizations [ 108.337305][ T4744] XFS (loop3): Mounting V5 Filesystem [ 108.344389][ T4721] BTRFS info (device loop1): rebuilding free space tree [ 108.465900][ T3532] ssu100: probe of 1-1:0.0 failed with error -71 [ 108.483616][ T3532] usb 1-1: USB disconnect, device number 3 [ 108.506443][ T4794] loop4: detected capacity change from 0 to 512 [ 108.536348][ T4744] XFS (loop3): Starting recovery (logdev: internal) [ 108.574677][ T4794] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 108.614152][ T4794] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 108.646125][ T4721] BTRFS info (device loop1): disabling free space tree [ 108.675449][ T4721] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 108.689781][ T4744] XFS (loop3): Ending recovery (logdev: internal) [ 108.709956][ T4721] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 108.713030][ T4794] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 108.773505][ T4758] loop2: detected capacity change from 0 to 32768 [ 108.840178][ T4794] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 108.852127][ T4794] System zones: 0-2, 18-18, 34-35 [ 108.857723][ T4270] XFS (loop3): Unmounting Filesystem [ 108.889722][ T4794] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 108.963454][ T4797] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 109.007014][ T4438] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 109.022478][ T4758] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 109.201211][ T4758] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 109.312362][ T32] (kworker/u4:2,32,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 109.559683][ T4802] fscrypt (loop4, inode 12): Error -61 getting encryption context [ 109.585008][ T4813] loop0: detected capacity change from 0 to 64 [ 109.602152][ T4377] usbhid 3-1:0.1: can't add hid device: -71 [ 109.609900][ T4377] usbhid: probe of 3-1:0.1 failed with error -71 [ 109.652615][ T4377] usb 3-1: USB disconnect, device number 2 [ 109.670749][ T4277] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.674994][ T4813] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 109.854225][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 109.871892][ T4267] ocfs2: Unmounting device (7,2) on (node local) [ 109.921691][ T4811] loop0: detected capacity change from 64 to 0 [ 109.948230][ C0] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.168080][ T4817] loop4: detected capacity change from 0 to 512 [ 110.214154][ T4817] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 110.398206][ T4824] netlink: 'syz.2.92': attribute type 8 has an invalid length. [ 110.476253][ T4824] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.92'. [ 112.499631][ T4833] loop1: detected capacity change from 0 to 512 [ 112.556916][ T4262] BFS-fs: bfs_iget(): Bad inode number loop0:0000fe02 [ 113.471902][ T4262] BFS-fs: bfs_iget(): Bad inode number loop0:0000fe02 [ 113.594545][ T4835] loop3: detected capacity change from 0 to 32768 [ 113.614569][ T4833] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 113.615394][ T4835] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 113.632044][ T4835] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 113.667438][ T4835] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 113.675942][ T4833] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.680119][ T4377] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 113.698660][ T4377] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 113.740374][ T4377] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 41ms [ 113.774627][ T4377] gfs2: fsid=syz:syz.0: jid=0: Done [ 113.781537][ T4835] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 113.823801][ T4841] device syzkaller1 entered promiscuous mode [ 113.887172][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 113.996582][ T4842] netlink: 56 bytes leftover after parsing attributes in process `syz.2.97'. [ 114.055369][ T4842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.97'. [ 114.159678][ T4844] capability: warning: `syz.1.98' uses 32-bit capabilities (legacy support in use) [ 114.293745][ T4845] loop1: detected capacity change from 0 to 1024 [ 114.329963][ T4845] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.361031][ T4845] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 114.464127][ T4845] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 114.472372][ T4845] System zones: 0-1, 3-36 [ 114.531903][ T4845] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 114.806190][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 115.135994][ T4866] ptrace attach of "./syz-executor exec"[4264] was attempted by "./syz-executor exec"[4866] [ 115.258740][ T4848] loop3: detected capacity change from 0 to 32768 [ 115.276784][ T4848] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.99 (4848) [ 115.303286][ T4377] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 115.320049][ T4848] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.332444][ T4848] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 115.342120][ T4848] BTRFS info (device loop3): using free space tree [ 115.489102][ T4882] netlink: 16 bytes leftover after parsing attributes in process `syz.1.105'. [ 115.524048][ T4377] usb 3-1: Using ep0 maxpacket: 16 [ 115.539800][ T4377] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 115.568513][ T4377] usb 3-1: config 0 has no interface number 0 [ 115.585704][ T4377] usb 3-1: config 0 interface 8 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.610592][ T4377] usb 3-1: config 0 interface 8 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.616966][ T4848] BTRFS info (device loop3): enabling ssd optimizations [ 115.634881][ T4377] usb 3-1: config 0 interface 8 has no altsetting 0 [ 115.649164][ T4377] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 115.670059][ T4377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.705630][ T4377] usb 3-1: config 0 descriptor?? [ 115.761583][ T4270] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.881116][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.940903][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.949584][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.958491][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.967709][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 115.975384][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.589486][ T4861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.695956][ T4861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.925450][ T4377] uclogic 0003:5543:0522.0001: unknown main item tag 0x0 [ 118.059536][ T4377] uclogic 0003:5543:0522.0001: unknown main item tag 0x0 [ 118.149299][ T4377] uclogic 0003:5543:0522.0001: unknown main item tag 0x0 [ 118.248144][ T4377] uclogic 0003:5543:0522.0001: unknown main item tag 0x0 [ 118.339526][ T4377] uclogic 0003:5543:0522.0001: unknown main item tag 0x0 [ 118.469694][ T4377] uclogic 0003:5543:0522.0001: No inputs registered, leaving [ 118.718226][ T4377] uclogic 0003:5543:0522.0001: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input8 [ 119.001506][ T4900] loop4: detected capacity change from 0 to 32768 [ 119.088718][ T4900] read_mapping_page failed! [ 119.094300][ T4900] ERROR: (device loop4): txCommit: [ 119.094300][ T4900] [ 119.152583][ T4377] usb 3-1: USB disconnect, device number 3 [ 119.665061][ T4275] Bluetooth: hci0: command 0x0409 tx timeout [ 121.193394][ T4377] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 121.418130][ T4377] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.477650][ T4377] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.589912][ T4377] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 121.683853][ T4904] fido_id[4904]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 121.736997][ T4377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 121.753325][ T4275] Bluetooth: hci0: command 0x041b tx timeout [ 121.779944][ T4377] usb 3-1: SerialNumber: syz [ 121.942499][ T4891] chnl_net:caif_netlink_parms(): no params data found [ 122.041230][ T4377] usb 3-1: 0:2 : does not exist [ 122.092967][ T4377] usb 3-1: USB disconnect, device number 4 [ 122.176398][ T4891] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.235696][ T4915] loop3: detected capacity change from 0 to 4096 [ 122.239468][ T4891] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.258457][ T4915] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 122.291470][ T4891] device bridge_slave_0 entered promiscuous mode [ 122.322513][ T4891] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.336739][ T4891] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.355009][ T4891] device bridge_slave_1 entered promiscuous mode [ 122.365390][ T4591] udevd[4591]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.409205][ T4917] loop1: detected capacity change from 0 to 16 [ 122.499735][ T4917] erofs: (device loop1): mounted with root inode @ nid 36. [ 122.504827][ T4891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.534062][ T4891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.828034][ T4891] team0: Port device team_slave_0 added [ 122.910853][ T4891] team0: Port device team_slave_1 added [ 122.928630][ T4922] loop2: detected capacity change from 0 to 512 [ 122.939536][ T4922] journal_path: Lookup failure for './bus' [ 122.952595][ T4922] EXT4-fs: error: could not find journal device path [ 123.321040][ T4935] loop2: detected capacity change from 0 to 8 [ 123.439180][ T4891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.454958][ T4891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.488108][ T4891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.689773][ T4891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.707278][ T4891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.770180][ T4891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.816431][ T4360] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 123.833798][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 123.950749][ T4946] loop1: detected capacity change from 0 to 4096 [ 124.003349][ T4360] usb 3-1: Using ep0 maxpacket: 32 [ 124.012045][ T4360] usb 3-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 1024 [ 124.040121][ T4360] usb 3-1: config 1 interface 0 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 16 [ 124.060440][ T4360] usb 3-1: config 1 interface 0 has no altsetting 0 [ 124.077744][ T4360] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.111164][ T4360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.135996][ T4360] usb 3-1: Product: 齂녙鋷齏됢즆圓ᛦ쐤뎜쵿⅊䮓초ꟿ灧ꬉᴵ㬿腱銙␤┌滄솨崽⃈䁬⾡꒪挪軵ട눶ᄆݴ鴒☞⶘罚싿툇콓⩠뤈ꃷ녒೼唅権⻥䓬糿稝㿛ﹸۤ⍝វ摔䱋ፏ펔냢ᯚⰅ¼眞솇桫팻褴✡虀䇩ĸ壿ୗ岮鹶킠馎焎㎁婬̪獬ꎄ⢆晞༦砩 [ 124.168040][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.216215][ T4360] usb 3-1: Manufacturer: ᠉ [ 124.225556][ T4360] usb 3-1: SerialNumber: syz [ 124.249055][ T4935] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 124.260168][ T4935] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 124.439719][ T4891] device hsr_slave_0 entered promiscuous mode [ 124.502723][ T4360] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 124.554194][ T4360] usb 3-1: USB disconnect, device number 5 [ 124.573817][ T4891] device hsr_slave_1 entered promiscuous mode [ 124.613493][ T4891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.621179][ T4891] Cannot create hsr debugfs directory [ 124.692259][ T4955] loop3: detected capacity change from 0 to 64 [ 124.750992][ T4955] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 124.965609][ T4959] loop4: detected capacity change from 0 to 4096 [ 125.150541][ T4959] ntfs3: loop4: ino=21, "file1" attr_insert_range [ 125.315944][ T4891] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 125.351916][ T4891] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 125.377268][ T4891] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 125.412655][ T4891] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 125.493323][ T4377] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 125.669936][ T4977] loop4: detected capacity change from 0 to 8192 [ 125.698269][ T4377] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 125.733428][ T4377] usb 4-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 125.743879][ T4360] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 125.754754][ T4977] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 125.766260][ T4377] usb 4-1: config 150 has 1 interface, different from the descriptor's value: 2 [ 125.783804][ T4377] usb 4-1: config 150 has no interface number 0 [ 125.790332][ T4377] usb 4-1: config 150 interface 204 has no altsetting 0 [ 125.814066][ T4977] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 125.825655][ T4377] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 125.835797][ T4977] REISERFS (device loop4): using ordered data mode [ 125.842371][ T4977] reiserfs: using flush barriers [ 125.847856][ T4377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.856206][ T4377] usb 4-1: Product: syz [ 125.860598][ T4377] usb 4-1: Manufacturer: syz [ 125.865631][ T4377] usb 4-1: SerialNumber: syz [ 125.889501][ T4977] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 125.904338][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 125.923132][ T4360] usb 5-1: Using ep0 maxpacket: 8 [ 125.936321][ T4360] usb 5-1: unable to get BOS descriptor or descriptor too short [ 125.946632][ T4891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.954916][ T4360] usb 5-1: config 8 has an invalid interface number: 24 but max is 0 [ 125.970359][ T4360] usb 5-1: config 8 has no interface number 0 [ 125.979178][ T4360] usb 5-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 1024 [ 125.994261][ T4977] REISERFS (device loop4): checking transaction log (loop4) [ 126.036169][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.043421][ T4360] usb 5-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 126.043474][ T4360] usb 5-1: config 8 interface 24 has no altsetting 0 [ 126.063770][ T4360] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 126.106329][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.118038][ T4360] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.118068][ T4360] usb 5-1: Product: syz [ 126.118084][ T4360] usb 5-1: Manufacturer: syz [ 126.118100][ T4360] usb 5-1: SerialNumber: syz [ 126.137236][ T4979] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 126.167732][ T4891] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.190996][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.191741][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.192231][ T4438] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.192340][ T4438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.192828][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.199450][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.199993][ T4438] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.200059][ T4438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.200818][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.219538][ T4377] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 126.220619][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.232953][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.261795][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.264747][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.428438][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.438615][ T4360] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 126.449081][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.470909][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.493554][ T4377] usb 3-1: Using ep0 maxpacket: 32 [ 126.501897][ T4377] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 126.511446][ T4360] usb 5-1: USB disconnect, device number 4 [ 126.530953][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.564588][ T4377] usb 3-1: config 0 has no interface number 0 [ 126.570777][ T4377] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 126.582841][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.612385][ T4891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.631850][ T4377] usb 3-1: config 0 interface 85 has no altsetting 0 [ 126.651100][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.673269][ T4377] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 126.692054][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.710305][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.720325][ T4377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.743420][ T4377] usb 3-1: Product: syz [ 126.748621][ T4377] usb 3-1: Manufacturer: syz [ 126.779321][ T4377] usb 3-1: SerialNumber: syz [ 126.802381][ T4377] usb 3-1: config 0 descriptor?? [ 127.413547][ T4377] appletouch 3-1:0.85: Geyser mode initialized. [ 127.430264][ T4377] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input8 [ 127.543440][ T4995] loop3: detected capacity change from 0 to 32768 [ 127.655729][ T33] usb 4-1: USB disconnect, device number 7 [ 127.732332][ T4991] loop2: detected capacity change from 0 to 1764 [ 127.827115][ T4439] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 127.844135][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.851729][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.907442][ T4987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.929792][ T4891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.949089][ T4987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.326303][ T4277] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 128.351627][ T5028] loop4: detected capacity change from 0 to 1024 [ 128.366149][ T4277] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 128.640658][ T5028] device wg2 entered promiscuous mode [ 128.769646][ T4377] usb 3-1: USB disconnect, device number 6 [ 128.842554][ T4377] appletouch 3-1:0.85: input: appletouch disconnected [ 128.863669][ T7] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 128.952491][ T5036] netlink: 'syz.2.133': attribute type 13 has an invalid length. [ 129.075213][ T7] usb 4-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 129.085070][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 129.103152][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.134128][ T7] usb 4-1: config 0 descriptor?? [ 129.263437][ T4819] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 129.333305][ T4331] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 129.394621][ T7] usbhid 4-1:0.0: can't add hid device: -71 [ 129.400720][ T7] usbhid: probe of 4-1:0.0 failed with error -71 [ 129.450108][ T7] usb 4-1: USB disconnect, device number 8 [ 129.475119][ T4819] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 129.494252][ T5054] loop3: detected capacity change from 0 to 8 [ 129.509858][ T4819] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.535798][ T4331] usb 2-1: not running at top speed; connect to a high speed hub [ 129.550560][ T4819] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 129.563141][ T4331] usb 2-1: config 0 has no interfaces? [ 129.581180][ T4331] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 129.595359][ T4819] usb 5-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.02 [ 129.609088][ T4331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.610340][ T5054] SQUASHFS error: zlib decompression failed, data probably corrupt [ 129.627144][ T4819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.628340][ T4331] usb 2-1: Product: syz [ 129.640206][ T4819] usb 5-1: config 0 descriptor?? [ 129.649392][ T4331] usb 2-1: Manufacturer: syz [ 129.654518][ T5054] SQUASHFS error: Failed to read block 0x9f: -5 [ 129.660828][ T5054] SQUASHFS error: Unable to read metadata cache entry [9d] [ 129.679444][ T4331] usb 2-1: SerialNumber: syz [ 129.698123][ T4331] usb 2-1: config 0 descriptor?? [ 129.703346][ T5054] SQUASHFS error: Unable to read inode 0x40127 [ 129.772266][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 129.782368][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.836911][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.851235][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.862736][ T4891] device veth0_vlan entered promiscuous mode [ 129.871425][ T4377] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 129.881399][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.895645][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.914006][ T4891] device veth1_vlan entered promiscuous mode [ 129.947826][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 129.964215][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 129.982109][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.999912][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.011748][ T4891] device veth0_macvtap entered promiscuous mode [ 130.025734][ T4891] device veth1_macvtap entered promiscuous mode [ 130.046090][ T4891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.073514][ T4377] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 130.081359][ T4891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.089561][ T5043] loop1: detected capacity change from 0 to 4096 [ 130.094310][ T4891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.114018][ T4377] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.129865][ T4377] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.140362][ T5043] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 130.157751][ T4891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.173979][ T4377] usb 3-1: config 0 interface 0 has no altsetting 0 [ 130.186376][ T4891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.200539][ T4891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.214642][ T4377] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.223881][ T4377] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.235276][ T4891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.247461][ T4377] usb 3-1: config 0 interface 0 has no altsetting 0 [ 130.254443][ T4891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.265861][ T4891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.280060][ T4377] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.291817][ T4891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.302330][ T4377] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.313976][ T5043] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 130.329889][ T4891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.338031][ T4377] usb 3-1: config 0 interface 0 has no altsetting 0 [ 130.346178][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 130.357102][ T4377] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.367873][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 130.376281][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 130.390388][ T4377] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.402616][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 130.417449][ T4377] usb 3-1: config 0 interface 0 has no altsetting 0 [ 130.430182][ T4377] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.448413][ T4891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.467052][ T4377] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.472962][ T4819] usb 2-1: USB disconnect, device number 10 [ 130.487129][ T4377] usb 3-1: config 0 interface 0 has no altsetting 0 [ 130.499098][ T4891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.509929][ T4377] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.523121][ T4375] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 130.523934][ T4891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.541509][ T4891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.552144][ T4891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.553451][ T4377] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.566774][ T4891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.591941][ T4891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.593367][ T4377] usb 3-1: config 0 interface 0 has no altsetting 0 [ 130.614928][ T4891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.630188][ T4891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.641485][ T4377] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.653693][ T4891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.654143][ T4377] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.676110][ T4891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.697461][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.718099][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.733208][ T4375] usb 4-1: Using ep0 maxpacket: 8 [ 130.740583][ T4375] usb 4-1: unable to get BOS descriptor or descriptor too short [ 130.741887][ T4891] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.753196][ T4377] usb 3-1: config 0 interface 0 has no altsetting 0 [ 130.770272][ T4891] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.780571][ T4375] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 130.792716][ T4891] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.802943][ T4377] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.813079][ T4891] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.816239][ T4375] usb 4-1: config 1 has no interface number 1 [ 130.833115][ T4377] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.852333][ T5073] loop1: detected capacity change from 0 to 512 [ 130.858783][ T4375] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 130.872006][ T4377] usb 3-1: config 0 interface 0 has no altsetting 0 [ 130.885056][ T4377] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 130.898010][ T4375] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 130.911180][ T4377] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 130.923641][ T4377] usb 3-1: Product: syz [ 130.941188][ T4375] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.967097][ T4377] usb 3-1: Manufacturer: syz [ 130.979296][ T5073] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #16: comm syz.1.138: corrupted inode contents [ 130.999146][ T4375] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.009793][ T4377] usb 3-1: SerialNumber: syz [ 131.018481][ T5073] EXT4-fs error (device loop1): ext4_dirty_inode:6133: inode #16: comm syz.1.138: mark_inode_dirty error [ 131.030541][ T4375] usb 4-1: Product: syz [ 131.043978][ T4377] usb 3-1: config 0 descriptor?? [ 131.053122][ T4375] usb 4-1: Manufacturer: syz [ 131.068940][ T5073] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #16: comm syz.1.138: corrupted inode contents [ 131.087544][ T4375] usb 4-1: SerialNumber: syz [ 131.098071][ T5073] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.138: mark_inode_dirty error [ 131.112194][ T5073] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #16: comm syz.1.138: corrupted inode contents [ 131.134419][ T5073] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 131.144872][ T4377] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 131.152625][ T5073] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #16: comm syz.1.138: corrupted inode contents [ 131.175294][ T5073] EXT4-fs error (device loop1): ext4_truncate:4318: inode #16: comm syz.1.138: mark_inode_dirty error [ 131.195059][ T5073] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 131.240479][ T5073] EXT4-fs (loop1): 1 truncate cleaned up [ 131.246894][ T5073] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 131.258973][ T5073] ext4 filesystem being mounted at /22/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.271912][ T46] __quota_error: 22 callbacks suppressed [ 131.271928][ T46] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 131.323384][ T46] EXT4-fs error (device loop1): ext4_release_dquot:6845: comm kworker/u4:3: Failed to release dquot type 1 [ 131.363692][ T33] usb 3-1: USB disconnect, device number 7 [ 131.379229][ T4375] usb 4-1: 2:1 : no UAC_FORMAT_TYPE desc [ 131.386750][ T33] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 131.395033][ T4292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.429414][ T4292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.473476][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.489884][ T4375] usb 4-1: USB disconnect, device number 9 [ 131.500000][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.538776][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 131.548481][ T5056] overlayfs: missing 'lowerdir' [ 131.554681][ T4591] udevd[4591]: setting mode of /dev/bus/usb/004/009 to 020664 failed: No such file or directory [ 131.568819][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 131.580574][ T4591] udevd[4591]: setting owner of /dev/bus/usb/004/009 to uid=0, gid=0 failed: No such file or directory [ 131.794381][ T4591] udevd[4591]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.993149][ T4819] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 132.026557][ T4375] usb 5-1: USB disconnect, device number 5 [ 132.098910][ T26] audit: type=1326 audit(1767961905.121:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5079 comm="syz.3.139" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2fe518f749 code=0x0 [ 132.198514][ T4819] usb 6-1: Using ep0 maxpacket: 32 [ 132.207196][ T4819] usb 6-1: config 0 has an invalid descriptor of length 74, skipping remainder of the config [ 132.246148][ T4819] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 132.289141][ T4819] usb 6-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=10.ae [ 132.328953][ T4819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.369545][ T4819] usb 6-1: Product: syz [ 132.385774][ T4819] usb 6-1: Manufacturer: syz [ 132.413631][ T4819] usb 6-1: SerialNumber: syz [ 132.463625][ T4819] usb 6-1: config 0 descriptor?? [ 132.556592][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 132.705270][ T5078] loop5: detected capacity change from 0 to 16 [ 132.760663][ T5078] erofs: (device loop5): mounted with root inode @ nid 36. [ 132.843307][ T5078] erofs: (device loop5): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 132.876424][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.882783][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.956997][ T5078] erofs: (device loop5): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 132.999927][ T5107] loop2: detected capacity change from 0 to 1024 [ 133.614365][ T5107] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 133.900807][ T5110] program syz.2.144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.948431][ T5084] loop4: detected capacity change from 0 to 32768 [ 134.087550][ T5084] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 134.185487][ T4310] usb 6-1: USB disconnect, device number 2 [ 134.458453][ T4264] ocfs2: Unmounting device (7,4) on (node local) [ 134.669918][ T5133] loop2: detected capacity change from 0 to 4096 [ 134.779296][ T5144] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.854696][ T26] audit: type=1800 audit(1767961907.881:36): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.147" name="file1" dev="loop2" ino=19 res=0 errno=0 [ 134.989954][ T5148] loop3: detected capacity change from 0 to 128 [ 135.057532][ T5146] loop4: detected capacity change from 0 to 1024 [ 135.081785][ T5148] ADFS-fs (loop3): unrecognised mount option "uid=" or missing value [ 135.264148][ T5146] EXT4-fs: Ignoring removed bh option [ 135.269784][ T5146] EXT4-fs: Ignoring removed nobh option [ 135.279908][ T5146] EXT4-fs: Ignoring removed bh option [ 135.311971][ T5146] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 136.024502][ T5146] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 136.297918][ T5166] binder: 5165:5166 ioctl 4018620d 0 returned -22 [ 136.592836][ T5170] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3836: comm syz.4.149: Allocating blocks 497-513 which overlap fs metadata [ 136.665032][ T5170] EXT4-fs (loop4): pa ffff888071461000: logic 256, phys. 385, len 8 [ 136.673733][ T5170] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 137.124904][ T5173] loop2: detected capacity change from 0 to 128 [ 137.219012][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 137.262742][ T5173] FAT-fs (loop2): Directory bread(block 414) failed [ 137.307727][ T5173] FAT-fs (loop2): Directory bread(block 415) failed [ 137.318006][ T5173] FAT-fs (loop2): Directory bread(block 416) failed [ 137.328459][ T5173] FAT-fs (loop2): Directory bread(block 417) failed [ 137.348947][ T5173] FAT-fs (loop2): Directory bread(block 418) failed [ 137.363516][ T5173] FAT-fs (loop2): Directory bread(block 419) failed [ 137.370298][ T5173] FAT-fs (loop2): Directory bread(block 420) failed [ 137.398901][ T5173] FAT-fs (loop2): Directory bread(block 421) failed [ 137.577904][ T5173] FAT-fs (loop2): FAT read failed (blocknr 128) [ 137.650308][ T5179] FAT-fs (loop2): FAT read failed (blocknr 128) [ 137.854046][ T5177] device batadv_slave_1 entered promiscuous mode [ 137.871799][ T5177] device batadv_slave_1 left promiscuous mode [ 138.673483][ T4377] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 139.035282][ T4377] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 139.050511][ T5164] loop3: detected capacity change from 0 to 32768 [ 139.057120][ T4377] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.074556][ T4377] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 139.091377][ T4377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.091860][ T5164] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.154 (5164) [ 139.134986][ T4377] usb 3-1: config 0 descriptor?? [ 139.242425][ T5164] BTRFS error (device loop3): open_ctree failed: -4 [ 139.423781][ T5196] loop4: detected capacity change from 0 to 4096 [ 139.507146][ T5196] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 139.555738][ T4377] hid (null): global environment stack underflow [ 139.565224][ T5196] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 139.591357][ T4377] hid-u2fzero 0003:10C4:8ACF.0002: global environment stack underflow [ 139.620246][ T5196] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 139.632646][ T4377] hid-u2fzero 0003:10C4:8ACF.0002: item 0 4 1 11 parsing failed [ 139.647048][ T4591] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (4591) [ 139.670392][ T4377] hid-u2fzero: probe of 0003:10C4:8ACF.0002 failed with error -22 [ 139.691607][ T5196] ntfs: volume version 3.1. [ 139.766593][ T4377] usb 3-1: USB disconnect, device number 8 [ 140.156230][ T4360] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 140.410373][ T4360] usb 6-1: config 0 has an invalid interface number: 249 but max is 0 [ 140.767714][ T4360] usb 6-1: config 0 has no interface number 0 [ 140.774344][ T4360] usb 6-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 140.784652][ T4360] usb 6-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 140.794877][ T4360] usb 6-1: config 0 interface 249 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 140.806932][ T4360] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 140.819580][ T4360] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.873780][ T4360] usb 6-1: config 0 descriptor?? [ 140.921756][ T4360] port100 6-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 141.184489][ T5211] device syzkaller0 entered promiscuous mode [ 141.199870][ T5213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.208612][ T5213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.843141][ T4360] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 142.283177][ T4360] usb 2-1: Using ep0 maxpacket: 16 [ 142.388836][ T4360] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice= 6.76 [ 142.490773][ T4360] usb 2-1: New USB device strings: Mfr=2, Product=66, SerialNumber=3 [ 142.585140][ T4360] usb 2-1: Product: syz [ 142.605092][ T4360] usb 2-1: Manufacturer: syz [ 142.623493][ T4360] usb 2-1: SerialNumber: syz [ 142.630099][ T4360] usb 2-1: config 0 descriptor?? [ 142.649198][ T4821] usb 6-1: USB disconnect, device number 3 [ 142.691985][ T4264] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 142.900078][ T5224] ptrace attach of "./syz-executor exec"[4277] was attempted by "./syz-executor exec"[5224] [ 143.397517][ T5233] netlink: 'syz.4.172': attribute type 1 has an invalid length. [ 143.486825][ T5233] device bond1 entered promiscuous mode [ 143.509714][ T5233] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.862555][ T5221] loop5: detected capacity change from 0 to 32768 [ 143.960538][ T5221] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 144.174417][ T5239] loop2: detected capacity change from 0 to 32768 [ 144.188065][ T5245] loop4: detected capacity change from 0 to 1024 [ 144.198131][ T4891] ocfs2: Unmounting device (7,5) on (node local) [ 144.278362][ T4439] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 144.642098][ T5245] batman_adv: batadv0: Adding interface: gretap1 [ 144.648694][ T5245] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.674137][ T5245] batman_adv: batadv0: Interface activated: gretap1 [ 145.502328][ T4360] usb_8dev 2-1:0.0 can0: sending command message failed [ 145.533618][ T4360] usb_8dev 2-1:0.0 can0: can't get firmware version [ 145.615129][ T5253] devtmpfs: Bad value for 'huge' [ 145.703961][ T4360] usb_8dev: probe of 2-1:0.0 failed with error -22 [ 145.722150][ T4360] usb 2-1: USB disconnect, device number 11 [ 145.819473][ T5223] loop3: detected capacity change from 0 to 40427 [ 146.597181][ T5268] loop3: detected capacity change from 0 to 256 [ 146.811966][ T5251] loop5: detected capacity change from 0 to 32768 [ 146.840729][ T5272] device syzkaller0 entered promiscuous mode [ 146.883647][ T5251] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.176 (5251) [ 146.957395][ T5253] loop1: detected capacity change from 0 to 32768 [ 146.990850][ T5253] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.177 (5253) [ 147.011170][ T5251] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 147.060557][ T5251] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 147.114214][ T5253] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 147.133165][ T5251] BTRFS info (device loop5): setting nodatacow, compression disabled [ 147.159361][ T5251] BTRFS info (device loop5): force clearing of disk cache [ 147.167071][ T5253] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 147.197903][ T5251] BTRFS info (device loop5): enabling ssd optimizations [ 147.223970][ T5253] BTRFS info (device loop1): force zlib compression, level 3 [ 147.231456][ T5253] BTRFS info (device loop1): force clearing of disk cache [ 147.263542][ T5251] BTRFS info (device loop5): using spread ssd allocation scheme [ 147.271297][ T5251] BTRFS info (device loop5): enabling auto defrag [ 147.287656][ T5253] BTRFS info (device loop1): turning on async discard [ 147.314028][ T5251] BTRFS info (device loop5): turning off barriers [ 147.320784][ T5251] BTRFS info (device loop5): disabling free space tree [ 147.331270][ T5253] BTRFS info (device loop1): allowing degraded mounts [ 147.377078][ T5253] BTRFS info (device loop1): enabling disk space caching [ 147.386269][ T5251] BTRFS warning (device loop5): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 147.403156][ T5253] BTRFS info (device loop1): disk space caching is enabled [ 147.421639][ T5251] BTRFS info (device loop5): not using ssd optimizations [ 147.436389][ T5251] BTRFS info (device loop5): not using spread ssd allocation scheme [ 147.681641][ T5320] team0: Caught tx_queue_len zero misconfig [ 147.686249][ T5253] BTRFS info (device loop1): enabling ssd optimizations [ 147.714066][ T5253] BTRFS info (device loop1): rebuilding free space tree [ 147.780021][ T5251] BTRFS info (device loop5): rebuilding free space tree [ 147.811986][ T5253] BTRFS info (device loop1): disabling free space tree [ 147.832277][ T5323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'. [ 147.841931][ T5251] BTRFS info (device loop5): disabling free space tree [ 147.864453][ T5253] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 147.883398][ T5251] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 147.911271][ T5253] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 147.942375][ T5251] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 148.084386][ T5253] BTRFS info (device loop1): balance: start -susage=0..511,limit=2 [ 148.163874][ T5253] BTRFS info (device loop1): left=0, need=98304, flags=2 [ 148.203087][ T5253] BTRFS info (device loop1): space_info SYSTEM has 0 free, is not full [ 148.212037][ T5253] BTRFS info (device loop1): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 148.228463][ T5253] BTRFS info (device loop1): global_block_rsv: size 1048576 reserved 1048576 [ 148.237823][ T5253] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0 [ 148.245545][ T5253] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0 [ 148.253406][ T5253] BTRFS info (device loop1): delayed_block_rsv: size 0 reserved 0 [ 148.261312][ T5253] BTRFS info (device loop1): delayed_refs_rsv: size 0 reserved 0 [ 148.390409][ T5253] BTRFS info (device loop1): relocating block group 1048576 flags system [ 148.570775][ T4891] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 148.610624][ T5253] BTRFS info (device loop1): balance: ended with status: 0 [ 148.871868][ T5283] loop3: detected capacity change from 0 to 32768 [ 148.929768][ T5283] gfs2: Unknown parameter '' [ 148.988373][ T5332] loop4: detected capacity change from 0 to 512 [ 149.032554][ T4277] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 149.136224][ T5332] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 149.183567][ T5338] loop2: detected capacity change from 0 to 4096 [ 149.199568][ T5332] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 149.208108][ T5332] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.187: bad orphan inode 13 [ 149.221575][ T5332] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 150.836472][ T5358] netlink: 92 bytes leftover after parsing attributes in process `syz.1.189'. [ 150.858947][ T5358] netlink: 40 bytes leftover after parsing attributes in process `syz.1.189'. [ 150.885644][ T5358] ptrace attach of "./syz-executor exec"[4277] was attempted by "./syz-executor exec"[5358] [ 151.083866][ T5336] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 151.654873][ T5336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.691822][ T5336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.722652][ T5336] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 151.758508][ T5336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.781682][ T5336] usb 6-1: config 0 descriptor?? [ 151.875357][ T5370] loop1: detected capacity change from 0 to 4096 [ 151.913239][ T5370] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 151.991745][ T5370] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 152.244745][ T5375] loop3: detected capacity change from 0 to 512 [ 152.275059][ T5375] ext4: Unknown parameter 'appraise_type' [ 152.330409][ T4376] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 152.360594][ T5376] device syzkaller0 entered promiscuous mode [ 152.361362][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 152.725468][ T5378] loop1: detected capacity change from 0 to 40427 [ 152.816134][ T5381] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 152.831224][ T5381] qnx6: wrong signature (magic) in superblock #1. [ 152.872637][ T5378] F2FS-fs (loop1): invalid crc value [ 152.890305][ T5381] qnx6: unable to read the first superblock [ 152.979979][ T5378] F2FS-fs (loop1): Found nat_bits in checkpoint [ 153.088665][ T5378] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 153.875120][ T5383] loop4: detected capacity change from 0 to 8192 [ 153.958273][ T5383] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 154.041791][ T5383] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 154.051147][ T5383] REISERFS (device loop4): using ordered data mode [ 154.057809][ T5383] reiserfs: using flush barriers [ 154.073141][ T5383] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 154.090554][ T5383] REISERFS (device loop4): checking transaction log (loop4) [ 154.132082][ T5336] usbhid 6-1:0.0: can't add hid device: -71 [ 154.147614][ T5336] usbhid: probe of 6-1:0.0 failed with error -71 [ 154.208902][ T5336] usb 6-1: USB disconnect, device number 4 [ 154.258066][ T4277] syz-executor: attempt to access beyond end of device [ 154.258066][ T4277] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 154.481487][ T5383] REISERFS (device loop4): Using tea hash to sort names [ 154.701261][ T5383] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 155.366820][ T5399] device syzkaller0 entered promiscuous mode [ 155.404881][ T5404] ptrace attach of "./syz-executor exec"[4267] was attempted by "./syz-executor exec"[5404] [ 155.515649][ T5406] loop3: detected capacity change from 0 to 512 [ 155.555281][ T5406] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.619247][ T5406] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 155.634978][ T5406] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 155.659457][ T5406] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 155.689405][ T5406] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e04ce01c, mo2=0000] [ 155.711197][ T5406] EXT4-fs (loop3): failed to initialize system zone (-117) [ 155.719000][ T5406] EXT4-fs (loop3): mount failed [ 155.914855][ T5414] loop1: detected capacity change from 0 to 1024 [ 155.927548][ T5414] EXT4-fs: Ignoring removed oldalloc option [ 155.940982][ T5414] EXT4-fs: Ignoring removed orlov option [ 155.947859][ T5414] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.010342][ T5414] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 156.100660][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 156.327737][ T5432] loop2: detected capacity change from 0 to 64 [ 156.389942][ T5432] hfs: unable to locate alternate MDB [ 156.395688][ T5432] hfs: continuing without an alternate MDB [ 156.403441][ T5336] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 156.604641][ T5336] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.636376][ T5336] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.656460][ T5336] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.707140][ T5336] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.741048][ T5336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.770548][ T5336] usb 5-1: config 0 descriptor?? [ 156.827273][ T5437] device syzkaller0 entered promiscuous mode [ 156.841647][ T5435] loop2: detected capacity change from 0 to 4096 [ 157.233403][ T5423] binder: 5415:5423 ioctl c0306201 200000000300 returned -11 [ 157.414876][ T5418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.423979][ T5418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.442142][ T5435] ntfs: volume version 3.1. [ 157.452420][ T5336] usbhid 5-1:0.0: can't add hid device: -71 [ 157.466234][ T5336] usbhid: probe of 5-1:0.0 failed with error -71 [ 157.491701][ T5336] usb 5-1: USB disconnect, device number 6 [ 157.851731][ T5446] loop3: detected capacity change from 0 to 512 [ 157.896132][ T5430] loop1: detected capacity change from 0 to 32768 [ 157.932864][ T5446] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2196: inode #15: comm syz.3.215: corrupted in-inode xattr [ 157.948877][ T5446] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.215: couldn't read orphan inode 15 (err -117) [ 157.967417][ T5446] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 158.095860][ T5430] XFS (loop1): Mounting V5 Filesystem [ 158.169974][ T5430] XFS (loop1): Ending clean mount [ 158.197307][ T5430] XFS (loop1): Quotacheck needed: Please wait. [ 158.272364][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 158.412812][ T5430] XFS (loop1): Quotacheck: Done. [ 158.553797][ T5336] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 158.701319][ T5345] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 158.753264][ T5336] usb 6-1: Using ep0 maxpacket: 32 [ 158.760451][ T5336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.813089][ T5336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.841336][ T5452] loop2: detected capacity change from 0 to 40427 [ 158.853150][ T5345] usb 4-1: device descriptor read/64, error -71 [ 158.917663][ T5452] F2FS-fs (loop2): Invalid uid value -1 [ 159.102879][ T5336] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 159.112636][ T5336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.123543][ T5345] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 159.138125][ T5336] usb 6-1: config 0 descriptor?? [ 159.283745][ T5473] Zero length message leads to an empty skb [ 159.313117][ T5345] usb 4-1: device descriptor read/64, error -71 [ 159.331030][ T4277] XFS (loop1): Unmounting Filesystem [ 159.433640][ T5345] usb usb4-port1: attempt power cycle [ 159.473118][ T5336] usbhid 6-1:0.0: can't add hid device: -71 [ 159.480379][ T5336] usbhid: probe of 6-1:0.0 failed with error -71 [ 159.511758][ T5477] loop4: detected capacity change from 0 to 256 [ 159.520933][ T5336] usb 6-1: USB disconnect, device number 5 [ 159.648105][ T26] audit: type=1800 audit(1767961932.671:37): pid=5476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.219" name="file0" dev="loop4" ino=1048598 res=0 errno=0 [ 159.863645][ T5345] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 159.944683][ T5345] usb 4-1: device descriptor read/8, error -71 [ 160.213264][ T5345] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 160.242376][ T5490] ptrace attach of "./syz-executor exec"[4277] was attempted by "./syz-executor exec"[5490] [ 160.283923][ T5345] usb 4-1: device descriptor read/8, error -71 [ 160.341482][ T5494] netlink: 'syz.4.224': attribute type 1 has an invalid length. [ 160.415741][ T5345] usb usb4-port1: unable to enumerate USB device [ 160.422309][ T5494] loop4: detected capacity change from 0 to 2048 [ 160.456653][ T5494] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=26504, location=26504 [ 160.509896][ T5494] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.526734][ T5496] device syzkaller0 entered promiscuous mode [ 160.660089][ T5486] loop5: detected capacity change from 0 to 256 [ 160.754957][ T5486] FAT-fs (loop5): Directory bread(block 64) failed [ 160.777766][ T5486] FAT-fs (loop5): Directory bread(block 65) failed [ 160.825642][ T5486] FAT-fs (loop5): Directory bread(block 66) failed [ 160.836393][ T5486] FAT-fs (loop5): Directory bread(block 67) failed [ 160.846801][ T5486] FAT-fs (loop5): Directory bread(block 68) failed [ 160.854102][ T5486] FAT-fs (loop5): Directory bread(block 69) failed [ 160.861157][ T5486] FAT-fs (loop5): Directory bread(block 70) failed [ 160.868369][ T5486] FAT-fs (loop5): Directory bread(block 71) failed [ 160.876409][ T5486] FAT-fs (loop5): Directory bread(block 72) failed [ 160.887582][ T5486] FAT-fs (loop5): Directory bread(block 73) failed [ 161.141017][ T5507] loop2: detected capacity change from 0 to 2048 [ 161.428121][ T5512] loop4: detected capacity change from 0 to 32768 [ 161.600570][ T5507] UDF-fs: iocharset maccroati?nfo00000000000000000000 not found [ 161.615030][ T5512] XFS (loop4): Mounting V5 Filesystem [ 161.779839][ T5512] XFS (loop4): Ending clean mount [ 162.483680][ T3532] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 162.712271][ T3532] usb 4-1: config 0 has an invalid interface number: 182 but max is 1 [ 162.722479][ T3532] usb 4-1: config 0 has no interface number 1 [ 162.732116][ T3532] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 162.744714][ T3532] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.806705][ T3532] usb 4-1: config 0 descriptor?? [ 162.898805][ T5529] loop1: detected capacity change from 0 to 4096 [ 163.011057][ T5529] ntfs: volume version 3.1. [ 163.019076][ T4820] usb 4-1: USB disconnect, device number 14 [ 163.213338][ T4264] XFS (loop4): Unmounting Filesystem [ 163.406303][ T5544] capability: warning: `syz.1.238' uses deprecated v2 capabilities in a way that may be insecure [ 163.445897][ T5541] loop2: detected capacity change from 0 to 2048 [ 163.619806][ T5541] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 163.658886][ T5541] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2196: inode #12: comm syz.2.239: corrupted in-inode xattr [ 163.867871][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 163.947128][ T5556] loop1: detected capacity change from 0 to 1024 [ 164.047579][ T5556] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 164.070536][ T5562] loop2: detected capacity change from 0 to 1024 [ 164.190132][ T5562] EXT4-fs: Ignoring removed mblk_io_submit option [ 164.257956][ T5568] netlink: 148 bytes leftover after parsing attributes in process `syz.4.236'. [ 164.284679][ T5562] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 164.298366][ T5568] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 164.427076][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 164.508331][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 164.541462][ T5572] loop3: detected capacity change from 0 to 512 [ 164.679245][ T5572] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 164.706685][ T5580] loop2: detected capacity change from 0 to 64 [ 164.732387][ T5577] kvm [5573]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 164.753203][ T5572] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.830595][ T5572] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #2: comm syz.3.248: corrupted inode contents [ 164.856065][ T5580] syz.2.250: attempt to access beyond end of device [ 164.856065][ T5580] loop2: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 164.877985][ T5582] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 164.909506][ T5572] EXT4-fs error (device loop3): ext4_dirty_inode:6133: inode #2: comm syz.3.248: mark_inode_dirty error [ 164.954567][ T5572] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #2: comm syz.3.248: corrupted inode contents [ 164.993454][ T5580] Buffer I/O error on dev loop2, logical block 1295, async page read [ 165.018799][ T5572] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.248: mark_inode_dirty error [ 165.085527][ T5580] syz.2.250: attempt to access beyond end of device [ 165.085527][ T5580] loop2: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 165.122519][ T5580] Buffer I/O error on dev loop2, logical block 1295, async page read [ 165.131068][ T26] audit: type=1800 audit(1767961938.151:38): pid=5580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.250" name="file2" dev="loop2" ino=6 res=0 errno=0 [ 165.312174][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 165.415861][ T5595] loop1: detected capacity change from 0 to 8 [ 165.477605][ T5595] SQUASHFS error: Unable to read inode 0x11f [ 165.568210][ T5590] loop4: detected capacity change from 0 to 40427 [ 165.582348][ T5590] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x1f52010) [ 165.590843][ T5590] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 165.599241][ T5590] F2FS-fs (loop4): Unrecognized mount option "fault_injection=-0000000000000001262" or missing value [ 165.611489][ C1] vkms_vblank_simulate: vblank timer overrun [ 165.674496][ T5598] ip6tnl0: Caught tx_queue_len zero misconfig [ 165.741806][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.752413][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.762464][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.773100][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.782955][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.793592][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.803510][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.815065][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.825109][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.835706][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.845659][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.856194][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.866874][ T5602] device batadv_slave_0 entered promiscuous mode [ 165.874976][ T5602] batman_adv: batadv0: Adding interface: macsec1 [ 165.881367][ T5602] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.907106][ T5602] batman_adv: batadv0: Interface activated: macsec1 [ 166.129939][ T5606] qrtr: Invalid version 0 [ 166.501331][ T5616] netlink: 'syz.5.265': attribute type 10 has an invalid length. [ 166.737369][ T5615] loop3: detected capacity change from 0 to 40427 [ 166.748643][ T5615] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(56834) root(3) [ 166.756803][ T5615] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 166.767217][ T5615] F2FS-fs (loop3): invalid crc value [ 166.823717][ T5616] team0: Port device dummy0 added [ 166.851476][ T5615] F2FS-fs (loop3): Invalid segment type: 8, segno: 11 [ 166.865695][ T5615] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 166.867317][ T5617] netlink: 'syz.5.265': attribute type 10 has an invalid length. [ 166.909644][ T5619] loop2: detected capacity change from 0 to 2048 [ 166.927668][ T5617] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 166.961218][ T5619] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.051405][ T5617] team0: Failed to send options change via netlink (err -105) [ 167.075844][ T5617] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 167.123558][ T5617] team0: Port device dummy0 removed [ 167.162252][ T5617] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 167.216720][ T5624] netlink: 52 bytes leftover after parsing attributes in process `syz.4.267'. [ 167.267006][ T5627] bridge0: port 3(team0) entered blocking state [ 167.283387][ T5627] bridge0: port 3(team0) entered disabled state [ 167.333527][ T5627] device team0 entered promiscuous mode [ 167.359602][ T5627] device team_slave_0 entered promiscuous mode [ 167.375430][ T5633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.271'. [ 167.393832][ T5627] device team_slave_1 entered promiscuous mode [ 167.474129][ T5627] bridge0: port 3(team0) entered blocking state [ 167.481209][ T5627] bridge0: port 3(team0) entered forwarding state [ 167.846203][ T5638] loop5: detected capacity change from 0 to 40427 [ 167.860367][ T5638] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 167.868231][ T5638] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 167.880779][ T5638] F2FS-fs (loop5): invalid crc value [ 167.901383][ T5638] F2FS-fs (loop5): Found nat_bits in checkpoint [ 167.918846][ T5644] loop2: detected capacity change from 0 to 256 [ 167.950543][ T5638] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 167.958815][ T5638] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 168.284874][ T7] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 168.400043][ T5655] loop2: detected capacity change from 0 to 64 [ 168.473243][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 168.480367][ T7] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 168.524751][ T7] usb 4-1: config 0 has no interface number 0 [ 168.565026][ T7] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 168.613208][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.621262][ T7] usb 4-1: Product: syz [ 168.664253][ T7] usb 4-1: Manufacturer: syz [ 168.668930][ T7] usb 4-1: SerialNumber: syz [ 168.715128][ T7] usb 4-1: config 0 descriptor?? [ 168.754307][ T7] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 168.788293][ T7] usb 4-1: selecting invalid altsetting 1 [ 168.811902][ T7] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 168.844719][ T7] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 168.908286][ T7] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 168.934845][ T7] usb 4-1: media controller created [ 169.001670][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.124806][ T7] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 169.152831][ T7] zl10353_read_register: readreg error (reg=127, ret==-71) [ 169.178203][ T7] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 169.289278][ T5676] netlink: 16 bytes leftover after parsing attributes in process `syz.2.287'. [ 169.319658][ T7] usb 4-1: USB disconnect, device number 15 [ 169.921275][ T5687] netlink: 32 bytes leftover after parsing attributes in process `syz.4.293'. [ 170.188953][ T5702] loop1: detected capacity change from 0 to 512 [ 170.276101][ T5706] fuse: Bad value for 'fd' [ 170.300143][ T5702] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 170.392418][ T5702] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.486542][ T5702] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #2: comm syz.1.298: corrupted inode contents [ 170.546004][ T5702] EXT4-fs error (device loop1): ext4_dirty_inode:6133: inode #2: comm syz.1.298: mark_inode_dirty error [ 170.583771][ T5702] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #2: comm syz.1.298: corrupted inode contents [ 170.625530][ T5702] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.298: mark_inode_dirty error [ 170.666040][ T5718] loop3: detected capacity change from 0 to 128 [ 170.786209][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 171.085568][ T5725] loop1: detected capacity change from 0 to 1024 [ 171.105127][ T5723] loop4: detected capacity change from 0 to 32768 [ 171.115679][ T5725] EXT4-fs: Ignoring removed bh option [ 171.122441][ T5723] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.306 (5723) [ 171.140764][ T5723] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 171.151082][ T5723] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 171.159943][ T5723] BTRFS info (device loop4): using free space tree [ 171.212810][ T5725] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 171.424062][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 171.470604][ T5723] BTRFS info (device loop4): enabling ssd optimizations [ 171.574994][ T5746] loop3: detected capacity change from 0 to 2048 [ 171.636741][ T5746] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 171.728809][ T5753] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.810628][ T5757] netlink: 108 bytes leftover after parsing attributes in process `syz.1.311'. [ 171.822072][ T4264] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 171.837460][ T5757] netlink: 108 bytes leftover after parsing attributes in process `syz.1.311'. [ 172.454584][ T5767] loop5: detected capacity change from 0 to 32768 [ 172.557340][ T5767] JBD2: Ignoring recovery information on journal [ 172.792121][ T5767] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 172.899243][ T5778] loop2: detected capacity change from 0 to 40427 [ 172.913079][ T5778] F2FS-fs (loop2): invalid crc value [ 172.957358][ T5778] F2FS-fs (loop2): Found nat_bits in checkpoint [ 173.169278][ T5778] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 173.188496][ T26] audit: type=1800 audit(1767961946.211:39): pid=5778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.320" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 173.225161][ T5785] f2fs_ckpt-7:2: attempt to access beyond end of device [ 173.225161][ T5785] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 173.283662][ T4891] ocfs2: Unmounting device (7,5) on (node local) [ 173.291859][ T5784] loop3: detected capacity change from 0 to 40427 [ 173.307020][ T5784] F2FS-fs (loop3): invalid crc value [ 173.317405][ T5784] F2FS-fs (loop3): Found nat_bits in checkpoint [ 173.357296][ T5784] F2FS-fs (loop3): Start checkpoint disabled! [ 173.413232][ T5784] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 173.608589][ T5797] loop5: detected capacity change from 0 to 1024 [ 173.784874][ T4435] kworker/u4:11: attempt to access beyond end of device [ 173.784874][ T4435] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 173.797683][ T5797] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 173.889481][ T5797] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.927005][ T5805] loop4: detected capacity change from 0 to 512 [ 173.987003][ T5805] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 174.109381][ T5805] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 174.223822][ T5805] EXT4-fs (loop4): 1 truncate cleaned up [ 174.229592][ T5805] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 174.325348][ T4891] EXT4-fs (loop5): unmounting filesystem. [ 174.695753][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 175.147031][ T5830] loop3: detected capacity change from 0 to 2048 [ 175.218875][ T5830] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.305661][ T5827] loop5: detected capacity change from 0 to 8192 [ 175.587040][ T5833] loop2: detected capacity change from 0 to 40427 [ 175.599191][ T5833] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x3ffff [ 175.678718][ T5835] loop4: detected capacity change from 0 to 2048 [ 175.822008][ T5835] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 175.884333][ T5835] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.969737][ T5839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.340'. [ 176.004146][ T26] audit: type=1800 audit(1767961949.031:40): pid=5835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.339" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 176.024669][ T5839] netlink: 'syz.3.340': attribute type 12 has an invalid length. [ 176.030203][ T5835] fs-verity: sha256 using implementation "sha256-avx2" [ 176.096275][ T5839] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.106031][ T5839] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.114876][ T5839] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.123781][ T5839] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.272587][ T5839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.340'. [ 176.281965][ T5839] netlink: 'syz.3.340': attribute type 12 has an invalid length. [ 176.293808][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 176.713929][ T5848] loop2: detected capacity change from 0 to 32768 [ 176.727550][ T5848] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.344 (5848) [ 176.747587][ T5848] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 176.757913][ T5848] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 176.767234][ T5848] BTRFS info (device loop2): enabling ssd optimizations [ 176.774398][ T5848] BTRFS info (device loop2): using spread ssd allocation scheme [ 176.782091][ T5848] BTRFS info (device loop2): disabling tree log [ 176.789007][ T5848] BTRFS info (device loop2): turning on flush-on-commit [ 176.796301][ T5848] BTRFS error (device loop2): unrecognized commit_interval value 0x0000000080000000 [ 176.809326][ T5848] BTRFS error (device loop2): open_ctree failed: -22 [ 177.316752][ T4591] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (4591) [ 177.574520][ T5881] loop5: detected capacity change from 0 to 128 [ 177.678314][ T26] audit: type=1800 audit(1767961950.701:41): pid=5881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.351" name="flush,shortname=lower,shortname=mixed,uni_xlate=0,nonumtail=0,nonumtail=0,shortname=winnt," dev="loop5" ino=1048601 res=0 errno=0 [ 178.000262][ T5853] loop4: detected capacity change from 0 to 32768 [ 178.223473][ T48] Bluetooth: hci0: command 0x0405 tx timeout [ 178.377801][ T5885] loop2: detected capacity change from 0 to 65536 [ 178.389178][ T5853] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 178.446310][ T5853] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 178.457840][ T5853] BTRFS info (device loop4): using free space tree [ 178.499554][ T5885] XFS (loop2): Mounting V5 Filesystem [ 178.522236][ T5897] pit: kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 178.538716][ T5897] pit: kvm: requested 180190 ns i8254 timer period limited to 200000 ns [ 178.569672][ T5897] pit: kvm: requested 78781 ns i8254 timer period limited to 200000 ns [ 178.581960][ T5897] pit: kvm: requested 176838 ns i8254 timer period limited to 200000 ns [ 178.595255][ T5897] pit: kvm: requested 137447 ns i8254 timer period limited to 200000 ns [ 178.612158][ T5897] pit: kvm: requested 188571 ns i8254 timer period limited to 200000 ns [ 178.626889][ T5885] XFS (loop2): Ending clean mount [ 178.647359][ T5897] pit: kvm: requested 82971 ns i8254 timer period limited to 200000 ns [ 178.663694][ T5897] pit: kvm: requested 198628 ns i8254 timer period limited to 200000 ns [ 178.733536][ T5897] pit: kvm: requested 65371 ns i8254 timer period limited to 200000 ns [ 178.786521][ T5897] pit: kvm: requested 98057 ns i8254 timer period limited to 200000 ns [ 178.798389][ T4267] XFS (loop2): Unmounting Filesystem [ 178.841439][ T5925] loop5: detected capacity change from 0 to 16 [ 178.927509][ T5925] erofs: (device loop5): mounted with root inode @ nid 36. [ 178.951273][ T5853] BTRFS info (device loop4): enabling ssd optimizations [ 179.126906][ T4264] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 179.634668][ T5945] loop3: detected capacity change from 0 to 512 [ 179.694421][ T5945] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 179.785830][ T5942] loop5: detected capacity change from 0 to 32768 [ 179.805286][ T5942] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.366 (5942) [ 179.839203][ T5945] EXT4-fs (loop3): 1 truncate cleaned up [ 179.853187][ T5945] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 179.893309][ T4820] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 179.946214][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.367'. [ 179.982045][ T5942] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 179.992367][ T5942] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 180.002987][ T5942] BTRFS info (device loop5): using free space tree [ 180.117780][ T4820] usb 2-1: not running at top speed; connect to a high speed hub [ 180.132399][ T4820] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 180.165157][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 180.171520][ T4820] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 180.183312][ T4820] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 180.201155][ T5958] loop4: detected capacity change from 0 to 2048 [ 180.210336][ T4820] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 180.224831][ T4910] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.243765][ T4820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.264693][ T5958] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.285041][ T4820] usb 2-1: Product: syz [ 180.289306][ T4820] usb 2-1: Manufacturer: syz [ 180.338593][ T4910] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 180.351360][ T4820] usb 2-1: SerialNumber: syz [ 180.399617][ T5942] BTRFS info (device loop5): enabling ssd optimizations [ 180.481514][ T5976] loop3: detected capacity change from 0 to 512 [ 180.560738][ T5976] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 180.623277][ T5942] BTRFS info (device loop5): balance: start -s [ 180.636984][ T5942] BTRFS info (device loop5): relocating block group 1048576 flags system [ 180.643246][ T4820] usb 2-1: 0:2 : does not exist [ 180.679234][ T5976] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.369: bg 0: block 127: padding at end of block bitmap is not set [ 180.731712][ T5977] fido_id[5977]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 180.777454][ T5976] EXT4-fs (loop3): Remounting filesystem read-only [ 180.802164][ T5942] BTRFS info (device loop5): balance: ended with status: 0 [ 180.853299][ T4820] usb 2-1: USB disconnect, device number 12 [ 180.913380][ T5976] EXT4-fs (loop3): 1 truncate cleaned up [ 180.919127][ T5976] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 180.944170][ T4891] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 180.986547][ T4376] udevd[4376]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.433342][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 181.837904][ T5987] loop5: detected capacity change from 0 to 8192 [ 181.902168][ T5987] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 181.964548][ T5987] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 182.008330][ T5987] FAT-fs (loop5): Filesystem has been set read-only [ 182.039598][ T5987] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 182.092551][ T6006] loop2: detected capacity change from 0 to 512 [ 182.129372][ T6006] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 182.201039][ T6006] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e01c, mo2=0002] [ 182.298112][ T6006] EXT4-fs (loop2): orphan cleanup on readonly fs [ 182.347733][ T6006] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.378: bad orphan inode 267 [ 182.365982][ T6006] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 182.407393][ T6006] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 182.840976][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 183.257423][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.266896][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.126502][ T6046] loop2: detected capacity change from 0 to 128 [ 184.189833][ T6046] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 184.211580][ T6046] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 184.305993][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 184.584840][ T6050] loop2: detected capacity change from 0 to 32768 [ 184.612028][ T6050] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.394 (6050) [ 184.643153][ T6050] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 184.654426][ T6050] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 184.663333][ T6050] BTRFS info (device loop2): turning on sync discard [ 184.670088][ T6050] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 184.680803][ T6050] BTRFS info (device loop2): use lzo compression, level 0 [ 184.688102][ T6050] BTRFS info (device loop2): turning off barriers [ 184.694698][ T6050] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 184.705465][ T6050] BTRFS info (device loop2): trying to use backup root at mount time [ 184.713671][ T6050] BTRFS info (device loop2): enabling disk space caching [ 184.720766][ T6050] BTRFS info (device loop2): setting nodatasum [ 184.727112][ T6050] BTRFS info (device loop2): max_inline at 4096 [ 184.733540][ T6050] BTRFS error (device loop2): cannot disable free space tree [ 184.761580][ T6050] BTRFS error (device loop2): open_ctree failed: -22 [ 184.848544][ T4591] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (4591) [ 184.928349][ T6014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.992653][ T6053] Bluetooth: MGMT ver 1.22 [ 185.013148][ T6053] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 185.041034][ T6014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.531454][ T6056] loop2: detected capacity change from 0 to 32768 [ 185.641654][ T6056] XFS (loop2): Mounting V5 Filesystem [ 185.747737][ T6056] XFS (loop2): Ending clean mount [ 185.882054][ T4267] XFS (loop2): Unmounting Filesystem [ 186.081242][ T6014] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.100857][ T6014] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.113937][ T6014] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.122838][ T6014] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.388156][ T6014] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.397841][ T6014] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.407128][ T6014] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.416117][ T6014] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.516634][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.382'. [ 186.524745][ T6066] loop2: detected capacity change from 0 to 128 [ 186.645002][ T6068] program syz.3.398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.925623][ T6025] team0 (unregistering): Port device team_slave_0 removed [ 186.945340][ T6025] team0 (unregistering): Port device team_slave_1 removed [ 186.990610][ T6027] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 187.001249][ T6027] device bridge1 entered promiscuous mode [ 187.212778][ T6076] loop4: detected capacity change from 0 to 256 [ 187.237548][ T48] Bluetooth: to_multiplier 0 < 10 [ 187.274971][ T6077] loop1: detected capacity change from 0 to 1024 [ 187.294500][ T6077] EXT4-fs: Ignoring removed orlov option [ 187.324413][ T6076] exFAT-fs (loop4): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 187.381632][ T6077] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 187.434369][ T6077] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 187.522852][ T4902] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.536924][ T6077] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 187.557126][ T6077] EXT4-fs (loop1): Can't support bigalloc feature without extents feature [ 187.557126][ T6077] [ 187.580219][ T6077] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 187.631320][ T6077] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 187.663489][ T6077] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 16: comm syz.1.403: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 187.756381][ T6077] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 16: comm syz.1.403: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 187.834727][ T4902] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.941710][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 188.027454][ T4902] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.150671][ T6088] loop4: detected capacity change from 0 to 2048 [ 188.361598][ T6087] loop3: detected capacity change from 0 to 32768 [ 188.507435][ T6087] JBD2: Ignoring recovery information on journal [ 188.516649][ T6090] loop1: detected capacity change from 0 to 32768 [ 188.577074][ T6090] JBD2: Ignoring recovery information on journal [ 188.589921][ T6088] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 188.617819][ T6087] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 188.628595][ T6088] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.660685][ T6090] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 188.731761][ T4902] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.779271][ T6088] fs-verity: sha512 using implementation "sha512-avx2" [ 188.806942][ T4270] ocfs2: Unmounting device (7,3) on (node local) [ 188.844078][ T4277] ocfs2: Unmounting device (7,1) on (node local) [ 188.876400][ T6088] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.409: bg 0: block 288: padding at end of block bitmap is not set [ 188.977358][ T6088] fs-verity (loop4, inode 13): ext4_end_enable_verity() failed with err -117 [ 189.156284][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 189.273406][ T48] Bluetooth: hci4: command 0x2021 tx timeout [ 189.302418][ T6103] loop3: detected capacity change from 0 to 64 [ 189.374352][ T6103] Trying to free block not in datazone [ 189.457194][ T6103] Trying to free block not in datazone [ 189.474120][ T6109] IPv6: NLM_F_CREATE should be specified when creating new route [ 189.564784][ T4275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.577760][ T4275] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.586868][ T4275] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.597812][ T4275] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.607464][ T6103] Trying to free block not in datazone [ 189.614501][ T6103] Trying to free block not in datazone [ 189.621264][ T4275] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 189.628622][ T6103] Trying to free block not in datazone [ 189.634319][ T4275] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 189.655762][ T6103] Trying to free block not in datazone [ 189.661334][ T6103] Trying to free block not in datazone [ 189.667373][ T6103] Trying to free block not in datazone [ 189.672939][ T6103] Trying to free block not in datazone [ 189.679260][ T6103] Trying to free block not in datazone [ 189.684974][ T6103] Trying to free block not in datazone [ 189.690577][ T6103] Trying to free block not in datazone [ 189.698656][ T6103] Trying to free block not in datazone [ 189.704500][ T6103] Trying to free block not in datazone [ 189.710387][ T6103] Trying to free block not in datazone [ 189.717454][ T6103] Trying to free block not in datazone [ 189.722978][ T6103] Trying to free block not in datazone [ 189.729020][ T6103] Trying to free block not in datazone [ 189.751381][ T6103] Trying to free block not in datazone [ 189.757964][ T6103] Trying to free block not in datazone [ 189.763608][ T6103] Trying to free block not in datazone [ 189.769821][ T6103] Trying to free block not in datazone [ 189.775497][ T6103] Trying to free block not in datazone [ 189.780994][ T6103] Trying to free block not in datazone [ 189.786800][ T6103] Trying to free block not in datazone [ 189.792299][ T6103] Trying to free block not in datazone [ 189.825649][ T6103] Trying to free block not in datazone [ 189.876851][ T6103] Trying to free block not in datazone [ 189.882395][ T6103] Trying to free block not in datazone [ 190.013157][ T6103] Trying to free block not in datazone [ 190.084097][ T6103] Trying to free block not in datazone [ 190.089647][ T6103] Trying to free block not in datazone [ 190.147686][ T6103] Trying to free block not in datazone [ 190.229212][ T6103] Trying to free block not in datazone [ 190.234844][ T6103] Trying to free block not in datazone [ 190.240475][ T6103] Trying to free block not in datazone [ 190.247398][ T6103] Trying to free block not in datazone [ 190.253317][ T6103] Trying to free block not in datazone [ 190.258823][ T6103] Trying to free block not in datazone [ 190.270401][ T6103] Trying to free block not in datazone [ 190.315359][ T6103] Trying to free block not in datazone [ 190.350749][ T6103] Trying to free block not in datazone [ 190.398468][ T6103] Trying to free block not in datazone [ 190.428023][ T6103] Trying to free block not in datazone [ 190.460390][ T6124] loop1: detected capacity change from 0 to 2048 [ 190.501562][ T6103] Trying to free block not in datazone [ 190.537593][ T6124] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.551236][ T6103] Trying to free block not in datazone [ 190.615697][ T6103] Trying to free block not in datazone [ 190.654717][ T6103] Trying to free block not in datazone [ 190.660349][ T6103] Trying to free block not in datazone [ 190.794021][ T6103] Trying to free block not in datazone [ 191.005871][ T6129] loop5: detected capacity change from 0 to 32768 [ 191.013935][ T6103] Trying to free block not in datazone [ 191.019460][ T6103] Trying to free block not in datazone [ 191.043119][ T6103] Trying to free block not in datazone [ 191.064520][ T6129] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 191.075078][ T6129] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 191.083948][ T6129] BTRFS info (device loop5): turning on sync discard [ 191.090681][ T6129] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 191.100392][ T6129] BTRFS info (device loop5): use lzo compression, level 0 [ 191.108832][ T6129] BTRFS info (device loop5): turning off barriers [ 191.115412][ T6129] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 191.126170][ T6129] BTRFS info (device loop5): trying to use backup root at mount time [ 191.134385][ T6129] BTRFS info (device loop5): enabling disk space caching [ 191.141466][ T6129] BTRFS info (device loop5): setting nodatasum [ 191.147845][ T6129] BTRFS info (device loop5): max_inline at 4096 [ 191.154202][ T6129] BTRFS error (device loop5): cannot disable free space tree [ 191.162022][ T6129] BTRFS error (device loop5): open_ctree failed: -22 [ 191.209055][ T6103] Trying to free block not in datazone [ 191.233072][ T6103] Trying to free block not in datazone [ 191.238629][ T6103] Trying to free block not in datazone [ 191.280279][ T6103] Trying to free block not in datazone [ 191.322627][ T6103] Trying to free block not in datazone [ 191.466157][ T6103] Trying to free block not in datazone [ 191.472062][ T6103] Trying to free block not in datazone [ 191.576950][ T6103] Trying to free block not in datazone [ 191.589837][ T6138] loop4: detected capacity change from 0 to 32768 [ 191.599194][ T6138] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.421 (6138) [ 191.632454][ T6103] Trying to free block not in datazone [ 191.638254][ T6103] Trying to free block not in datazone [ 191.654198][ T6103] Trying to free block not in datazone [ 191.659742][ T6103] Trying to free block not in datazone [ 191.665634][ T6138] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 191.675938][ T6138] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 191.685068][ T6138] BTRFS info (device loop4): using free space tree [ 191.692119][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 191.734281][ T6103] Trying to free block not in datazone [ 191.739841][ T6103] Trying to free block not in datazone [ 191.755928][ T6103] Trying to free block not in datazone [ 191.762155][ T6103] Trying to free block not in datazone [ 191.775097][ T6103] Trying to free block not in datazone [ 191.780689][ T6103] Trying to free block not in datazone [ 191.792287][ T6103] Trying to free block not in datazone [ 191.822148][ T6103] Trying to free block not in datazone [ 191.839456][ T6103] Trying to free block not in datazone [ 191.850141][ T6103] Trying to free block not in datazone [ 191.858446][ T6103] Trying to free block not in datazone [ 191.878832][ T6103] Trying to free block not in datazone [ 191.888705][ T6103] Trying to free block not in datazone [ 191.898552][ T6103] Trying to free block not in datazone [ 191.907629][ T6103] Trying to free block not in datazone [ 191.913557][ T6103] Trying to free block not in datazone [ 191.920155][ T6103] Trying to free block not in datazone [ 191.926110][ T6103] Trying to free block not in datazone [ 191.931730][ T6103] Trying to free block not in datazone [ 191.937661][ T6103] Trying to free block not in datazone [ 191.943265][ T6103] Trying to free block not in datazone [ 191.948881][ T6103] Trying to free block not in datazone [ 191.954491][ T6103] Trying to free block not in datazone [ 191.960125][ T6103] Trying to free block not in datazone [ 191.965856][ T6103] Trying to free block not in datazone [ 191.971368][ T6103] Trying to free block not in datazone [ 191.976991][ T6103] Trying to free block not in datazone [ 191.982779][ T6103] Trying to free block not in datazone [ 191.990381][ T6103] Trying to free block not in datazone [ 191.996240][ T6103] Trying to free block not in datazone [ 192.001803][ T6103] Trying to free block not in datazone [ 192.007405][ T6103] Trying to free block not in datazone [ 192.013221][ T6103] Trying to free block not in datazone [ 192.018727][ T6103] Trying to free block not in datazone [ 192.024768][ T6103] Trying to free block not in datazone [ 192.030319][ T6103] Trying to free block not in datazone [ 192.036140][ T6103] Trying to free block not in datazone [ 192.041702][ T6103] Trying to free block not in datazone [ 192.073711][ T4376] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by udevd (4376) [ 192.082419][ T6103] Trying to free block not in datazone [ 192.095796][ T6103] Trying to free block not in datazone [ 192.097022][ T6138] BTRFS info (device loop4): enabling ssd optimizations [ 192.126838][ T6103] Trying to free block not in datazone [ 192.162865][ T6138] BTRFS info (device loop4): balance: start -svrange=4192962769381109550..3476060267370475366,limit=202604818480 [ 192.175271][ T6138] BTRFS info (device loop4): balance: ended with status: 0 [ 192.215601][ T6103] Trying to free block not in datazone [ 192.254711][ T6103] Trying to free block not in datazone [ 192.273158][ T6103] Trying to free block not in datazone [ 192.278704][ T6103] Trying to free block not in datazone [ 192.342430][ T4264] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 192.389815][ T6140] loop1: detected capacity change from 0 to 8192 [ 192.396754][ T6103] Trying to free block not in datazone [ 192.402277][ T6103] Trying to free block not in datazone [ 192.432558][ T6103] Trying to free block not in datazone [ 192.492957][ T6103] Trying to free block not in datazone [ 192.508706][ T6140] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 192.538789][ T6103] Trying to free block not in datazone [ 192.591206][ T6103] Trying to free block not in datazone [ 192.628945][ T6103] Trying to free block not in datazone [ 192.699653][ T6103] Trying to free block not in datazone [ 192.729311][ T6103] Trying to free block not in datazone [ 192.761439][ T6103] Trying to free block not in datazone [ 192.771566][ T6103] Trying to free block not in datazone [ 192.801984][ T6103] Trying to free block not in datazone [ 192.812124][ T6103] Trying to free block not in datazone [ 192.832402][ T6103] Trying to free block not in datazone [ 192.841850][ T6103] Trying to free block not in datazone [ 192.865885][ T6103] Trying to free block not in datazone [ 192.876310][ T6103] Trying to free block not in datazone [ 192.896065][ T6103] Trying to free block not in datazone [ 192.901606][ T6103] Trying to free block not in datazone [ 192.951636][ T6103] Trying to free block not in datazone [ 192.957377][ T6103] Trying to free block not in datazone [ 192.962881][ T6103] Trying to free block not in datazone [ 193.003077][ T6103] Trying to free block not in datazone [ 193.008627][ T6103] Trying to free block not in datazone [ 193.053271][ T6103] Trying to free block not in datazone [ 193.058868][ T6103] Trying to free block not in datazone [ 193.086028][ T6103] Trying to free block not in datazone [ 193.091635][ T6103] Trying to free block not in datazone [ 193.133090][ T6103] Trying to free block not in datazone [ 193.150899][ T6103] Trying to free block not in datazone [ 193.163444][ T6103] Trying to free block not in datazone [ 193.178182][ T6103] Trying to free block not in datazone [ 193.214651][ T6103] Trying to free block not in datazone [ 193.220191][ T6103] Trying to free block not in datazone [ 193.281472][ T6103] Trying to free block not in datazone [ 193.369058][ T6172] netlink: 136 bytes leftover after parsing attributes in process `syz.1.425'. [ 193.443461][ T6103] Trying to free block not in datazone [ 193.449189][ T6103] Trying to free block not in datazone [ 193.479654][ T6172] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 193.505921][ T6103] Trying to free block not in datazone [ 193.511484][ T6103] Trying to free block not in datazone [ 193.556562][ T6103] Trying to free block not in datazone [ 193.585761][ T6173] loop4: detected capacity change from 0 to 32768 [ 193.596262][ T6103] Trying to free block not in datazone [ 193.601801][ T6103] Trying to free block not in datazone [ 193.608618][ T6103] Trying to free block not in datazone [ 193.614425][ T6103] Trying to free block not in datazone [ 193.619925][ T6103] Trying to free block not in datazone [ 193.629602][ T6103] Trying to free block not in datazone [ 193.635506][ T6103] Trying to free block not in datazone [ 193.641237][ T6103] Trying to free block not in datazone [ 193.647074][ T6103] Trying to free block not in datazone [ 193.652801][ T6103] Trying to free block not in datazone [ 193.660832][ T6103] Trying to free block not in datazone [ 193.672179][ T6173] ERROR: (device loop4): diAllocAG: numfree > numinos [ 193.672179][ T6173] [ 193.685761][ T6103] Trying to free block not in datazone [ 193.691402][ T6173] ERROR: (device loop4): remounting filesystem as read-only [ 193.698811][ T6173] ialloc: diAlloc returned -5! [ 193.715662][ T6103] Trying to free block not in datazone [ 193.721349][ T6103] Trying to free block not in datazone [ 193.721554][ T6107] chnl_net:caif_netlink_parms(): no params data found [ 193.727057][ T6103] Trying to free block not in datazone [ 193.743554][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 193.748476][ T6103] Trying to free block not in datazone [ 193.786415][ T6103] Trying to free block not in datazone [ 193.791957][ T6103] Trying to free block not in datazone [ 193.844932][ T6177] program syz.1.427 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.853211][ T6103] Trying to free block not in datazone [ 193.859617][ T6103] Trying to free block not in datazone [ 193.902823][ T6103] Trying to free block not in datazone [ 193.913095][ T6103] Trying to free block not in datazone [ 193.918717][ T6103] Trying to free block not in datazone [ 193.978887][ T6103] Trying to free block not in datazone [ 193.996258][ T6103] Trying to free block not in datazone [ 194.001832][ T6103] Trying to free block not in datazone [ 194.022333][ T6103] Trying to free block not in datazone [ 194.054770][ T6103] Trying to free block not in datazone [ 194.060316][ T6103] Trying to free block not in datazone [ 194.121394][ T6103] Trying to free block not in datazone [ 194.155393][ T6103] Trying to free block not in datazone [ 194.160979][ T6103] Trying to free block not in datazone [ 194.191928][ T6103] Trying to free block not in datazone [ 194.197769][ T6103] Trying to free block not in datazone [ 194.203821][ T6103] Trying to free block not in datazone [ 194.209318][ T6103] Trying to free block not in datazone [ 194.215022][ T6103] Trying to free block not in datazone [ 194.220520][ T6103] Trying to free block not in datazone [ 194.226262][ T6103] Trying to free block not in datazone [ 194.231795][ T6103] Trying to free block not in datazone [ 194.248356][ T6103] Trying to free block not in datazone [ 194.263226][ T6103] Trying to free block not in datazone [ 194.277998][ T6103] Trying to free block not in datazone [ 194.288275][ T6103] Trying to free block not in datazone [ 194.329949][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.336400][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.346200][ T6103] Trying to free block not in datazone [ 194.351821][ T6103] Trying to free block not in datazone [ 194.393299][ T6103] Trying to free block not in datazone [ 194.403332][ T6103] Trying to free block not in datazone [ 194.408855][ T6103] Trying to free block not in datazone [ 194.519861][ T6103] Trying to free block not in datazone [ 194.555013][ T6179] loop1: detected capacity change from 0 to 32768 [ 194.563255][ T6103] Trying to free block not in datazone [ 194.568808][ T6103] Trying to free block not in datazone [ 194.574410][ T6103] Trying to free block not in datazone [ 194.580776][ T6103] Trying to free block not in datazone [ 194.593353][ T6179] [ 194.593353][ T6179] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.593353][ T6179] [ 194.611913][ T6103] Trying to free block not in datazone [ 194.624308][ T6179] read_mapping_page failed! [ 194.629341][ T6179] ERROR: (device loop1): txCommit: [ 194.629341][ T6179] [ 194.641439][ T6179] read_mapping_page failed! [ 194.646106][ T6179] ERROR: (device loop1): txCommit: [ 194.646106][ T6179] [ 194.663116][ T6103] Trying to free block not in datazone [ 194.668653][ T6103] Trying to free block not in datazone [ 194.683127][ T6103] Trying to free block not in datazone [ 194.689377][ T6103] Trying to free block not in datazone [ 194.695107][ T6103] Trying to free block not in datazone [ 194.700613][ T6103] Trying to free block not in datazone [ 194.728564][ T6182] read_mapping_page failed! [ 194.739106][ T6182] ERROR: (device loop1): txCommit: [ 194.739106][ T6182] [ 194.750222][ T6103] Trying to free block not in datazone [ 194.774648][ T6103] Trying to free block not in datazone [ 194.780291][ T6103] Trying to free block not in datazone [ 194.797899][ T6184] ================================================================== [ 194.806044][ T6184] BUG: KASAN: slab-out-of-bounds in dtSplitPage+0x10d4/0x31d0 [ 194.813552][ T6184] Read of size 1 at addr ffff8880546952d5 by task syz.1.429/6184 [ 194.821314][ T6184] [ 194.823694][ T6184] CPU: 0 PID: 6184 Comm: syz.1.429 Not tainted syzkaller #0 [ 194.831029][ T6184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 194.841147][ T6184] Call Trace: [ 194.844555][ T6184] [ 194.847533][ T6184] dump_stack_lvl+0x168/0x22e [ 194.852276][ T6184] ? __lock_acquire+0x7c50/0x7c50 [ 194.857361][ T6184] ? show_regs_print_info+0x12/0x12 [ 194.862717][ T6184] ? load_image+0x3b0/0x3b0 [ 194.867279][ T6184] ? __virt_addr_valid+0x465/0x540 [ 194.872455][ T6184] ? dtSplitPage+0x10d4/0x31d0 [ 194.877272][ T6184] print_report+0xa8/0x210 [ 194.881758][ T6184] kasan_report+0x10b/0x140 [ 194.886335][ T6184] ? dtSplitPage+0x10d4/0x31d0 [ 194.891151][ T6184] dtSplitPage+0x10d4/0x31d0 [ 194.895835][ T6184] dtInsert+0xfbd/0x58a0 [ 194.900129][ T6184] ? txLock+0x2ad/0x2090 [ 194.904429][ T6184] ? do_raw_spin_lock+0x11d/0x280 [ 194.909503][ T6184] ? __rwlock_init+0x140/0x140 [ 194.914314][ T6184] ? txLock+0xea9/0x2090 [ 194.918581][ T6184] ? UniStrupr+0x2e0/0x2e0 [ 194.923034][ T6184] ? dtInitRoot+0x226/0x660 [ 194.927559][ T6184] jfs_mkdir+0x6e5/0xa70 [ 194.931833][ T6184] ? jfs_symlink+0xe60/0xe60 [ 194.936461][ T6184] ? make_kgid+0x640/0x640 [ 194.940900][ T6184] ? apparmor_path_mkdir+0x1a3/0x220 [ 194.946209][ T6184] ? generic_permission+0x230/0x510 [ 194.951443][ T6184] ? inode_permission+0xef/0x480 [ 194.956412][ T6184] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 194.961467][ T6184] ? security_inode_mkdir+0xb3/0x100 [ 194.966784][ T6184] vfs_mkdir+0x387/0x570 [ 194.971065][ T6184] do_mkdirat+0x1d0/0x430 [ 194.975416][ T6184] ? vfs_mkdir+0x570/0x570 [ 194.979859][ T6184] __x64_sys_mkdirat+0x85/0x90 [ 194.984651][ T6184] do_syscall_64+0x4c/0xa0 [ 194.989103][ T6184] ? clear_bhb_loop+0x60/0xb0 [ 194.993821][ T6184] ? clear_bhb_loop+0x60/0xb0 [ 194.998528][ T6184] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.004447][ T6184] RIP: 0033:0x7f7578b8f749 [ 195.008909][ T6184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.028629][ T6184] RSP: 002b:00007f7579a67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 195.037071][ T6184] RAX: ffffffffffffffda RBX: 00007f7578de6180 RCX: 00007f7578b8f749 [ 195.045102][ T6184] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 195.053114][ T6184] RBP: 00007f7578c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 195.061110][ T6184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.069101][ T6184] R13: 00007f7578de6218 R14: 00007f7578de6180 R15: 00007ffd7e2e3928 [ 195.077107][ T6184] [ 195.080142][ T6184] [ 195.082483][ T6184] Allocated by task 6179: [ 195.086864][ T6184] kasan_set_track+0x4b/0x70 [ 195.091484][ T6184] __kasan_slab_alloc+0x6b/0x80 [ 195.096358][ T6184] slab_post_alloc_hook+0x4b/0x480 [ 195.101489][ T6184] kmem_cache_alloc_lru+0x11a/0x2e0 [ 195.106713][ T6184] jfs_alloc_inode+0x24/0x60 [ 195.111325][ T6184] iget_locked+0x1a9/0x830 [ 195.115761][ T6184] jfs_iget+0x20/0x3f0 [ 195.119875][ T6184] jfs_lookup+0x1c2/0x380 [ 195.124406][ T6184] __lookup_slow+0x27d/0x3a0 [ 195.129037][ T6184] lookup_slow+0x53/0x70 [ 195.133315][ T6184] walk_component+0x2be/0x3f0 [ 195.138043][ T6184] path_lookupat+0x169/0x440 [ 195.142761][ T6184] filename_lookup+0x1f0/0x500 [ 195.147595][ T6184] user_path_at_empty+0x3e/0x60 [ 195.152466][ T6184] __se_sys_chdir+0x91/0x280 [ 195.157082][ T6184] do_syscall_64+0x4c/0xa0 [ 195.161537][ T6184] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.167452][ T6184] [ 195.169840][ T6184] The buggy address belongs to the object at ffff888054694a00 [ 195.169840][ T6184] which belongs to the cache jfs_ip of size 2240 [ 195.183654][ T6184] The buggy address is located 21 bytes to the right of [ 195.183654][ T6184] 2240-byte region [ffff888054694a00, ffff8880546952c0) [ 195.197476][ T6184] [ 195.199832][ T6184] The buggy address belongs to the physical page: [ 195.206300][ T6184] page:ffffea000151a400 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888054691280 pfn:0x54690 [ 195.217790][ T6184] head:ffffea000151a400 order:3 compound_mapcount:0 compound_pincount:0 [ 195.226139][ T6184] memcg:ffff888075613801 [ 195.230393][ T6184] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 195.238469][ T6184] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff8881476eea00 [ 195.247074][ T6184] raw: ffff888054691280 00000000800d000b 00000001ffffffff ffff888075613801 [ 195.255763][ T6184] page dumped because: kasan: bad access detected [ 195.262205][ T6184] page_owner tracks the page as allocated [ 195.267936][ T6184] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 4995, tgid 4963 (syz.3.121), ts 127603337273, free_ts 117637911143 [ 195.291595][ T6184] post_alloc_hook+0x173/0x1a0 [ 195.296416][ T6184] get_page_from_freelist+0x1a26/0x1ac0 [ 195.301995][ T6184] __alloc_pages+0x1df/0x4e0 [ 195.306621][ T6184] alloc_slab_page+0x5d/0x160 [ 195.311332][ T6184] new_slab+0x87/0x2c0 [ 195.315434][ T6184] ___slab_alloc+0xbc6/0x1230 [ 195.320140][ T6184] kmem_cache_alloc_lru+0x1ae/0x2e0 [ 195.325360][ T6184] jfs_alloc_inode+0x24/0x60 [ 195.329978][ T6184] new_inode_pseudo+0x5f/0x1c0 [ 195.334854][ T6184] new_inode+0x25/0x1c0 [ 195.339064][ T6184] diReadSpecial+0x4e/0x700 [ 195.343603][ T6184] jfs_mount+0x3cd/0x860 [ 195.347879][ T6184] jfs_fill_super+0x4de/0xac0 [ 195.352581][ T6184] mount_bdev+0x287/0x3c0 [ 195.356939][ T6184] legacy_get_tree+0xe6/0x180 [ 195.361642][ T6184] vfs_get_tree+0x88/0x270 [ 195.366079][ T6184] page last free stack trace: [ 195.370775][ T6184] free_unref_page_prepare+0x8b4/0x9a0 [ 195.376272][ T6184] free_unref_page+0x2e/0x3f0 [ 195.381011][ T6184] __unfreeze_partials+0x1a5/0x200 [ 195.386150][ T6184] put_cpu_partial+0x17c/0x250 [ 195.390942][ T6184] qlist_free_all+0x76/0xe0 [ 195.395466][ T6184] kasan_quarantine_reduce+0x144/0x160 [ 195.400948][ T6184] __kasan_slab_alloc+0x1e/0x80 [ 195.405832][ T6184] slab_post_alloc_hook+0x4b/0x480 [ 195.410969][ T6184] __kmem_cache_alloc_node+0x140/0x260 [ 195.416450][ T6184] kmalloc_trace+0x26/0xe0 [ 195.420900][ T6184] kernfs_fop_open+0x3f1/0xcc0 [ 195.425693][ T6184] do_dentry_open+0x7e9/0x10d0 [ 195.430481][ T6184] path_openat+0x25c6/0x2e70 [ 195.435089][ T6184] do_filp_open+0x1c1/0x3c0 [ 195.439738][ T6184] do_sys_openat2+0x142/0x490 [ 195.444455][ T6184] __x64_sys_openat+0x135/0x160 [ 195.449337][ T6184] [ 195.451675][ T6184] Memory state around the buggy address: [ 195.457431][ T6184] ffff888054695180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 195.465511][ T6184] ffff888054695200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 195.473594][ T6184] >ffff888054695280: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 195.481940][ T6184] ^ [ 195.488659][ T6184] ffff888054695300: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 195.496838][ T6184] ffff888054695380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 195.504915][ T6184] ================================================================== [ 195.529762][ T6103] Trying to free block not in datazone [ 195.548454][ T6103] Trying to free block not in datazone [ 195.560856][ T6103] Trying to free block not in datazone [ 195.574094][ T6103] Trying to free block not in datazone [ 195.579834][ T6103] Trying to free block not in datazone [ 195.595664][ T6103] Trying to free block not in datazone [ 195.601671][ T6103] Trying to free block not in datazone [ 195.609016][ T6175] loop5: detected capacity change from 0 to 32768 [ 195.629644][ T6184] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 195.636917][ T6184] CPU: 1 PID: 6184 Comm: syz.1.429 Not tainted syzkaller #0 [ 195.644332][ T6184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.654427][ T6184] Call Trace: [ 195.657739][ T6184] [ 195.660708][ T6184] dump_stack_lvl+0x168/0x22e [ 195.665446][ T6184] ? memcpy+0x3c/0x60 [ 195.669468][ T6184] ? show_regs_print_info+0x12/0x12 [ 195.674718][ T6184] ? load_image+0x3b0/0x3b0 [ 195.679277][ T6184] panic+0x2c9/0x710 [ 195.683218][ T6184] ? bpf_jit_dump+0xd0/0xd0 [ 195.687773][ T6184] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 195.693724][ T6184] ? _raw_spin_unlock+0x40/0x40 [ 195.698622][ T6184] ? print_memory_metadata+0x314/0x400 [ 195.704132][ T6184] check_panic_on_warn+0x80/0xa0 [ 195.709128][ T6184] ? dtSplitPage+0x10d4/0x31d0 [ 195.713945][ T6184] end_report+0x66/0x110 [ 195.718270][ T6184] kasan_report+0x118/0x140 [ 195.722834][ T6184] ? dtSplitPage+0x10d4/0x31d0 [ 195.727643][ T6184] dtSplitPage+0x10d4/0x31d0 [ 195.732295][ T6184] dtInsert+0xfbd/0x58a0 [ 195.736589][ T6184] ? txLock+0x2ad/0x2090 [ 195.740909][ T6184] ? do_raw_spin_lock+0x11d/0x280 [ 195.746001][ T6184] ? __rwlock_init+0x140/0x140 [ 195.750843][ T6184] ? txLock+0xea9/0x2090 [ 195.755165][ T6184] ? UniStrupr+0x2e0/0x2e0 [ 195.759642][ T6184] ? dtInitRoot+0x226/0x660 [ 195.764185][ T6184] jfs_mkdir+0x6e5/0xa70 [ 195.768475][ T6184] ? jfs_symlink+0xe60/0xe60 [ 195.773122][ T6184] ? make_kgid+0x640/0x640 [ 195.777593][ T6184] ? apparmor_path_mkdir+0x1a3/0x220 [ 195.782926][ T6184] ? generic_permission+0x230/0x510 [ 195.788188][ T6184] ? inode_permission+0xef/0x480 [ 195.793178][ T6184] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 195.798266][ T6184] ? security_inode_mkdir+0xb3/0x100 [ 195.803683][ T6184] vfs_mkdir+0x387/0x570 [ 195.807984][ T6184] do_mkdirat+0x1d0/0x430 [ 195.812462][ T6184] ? vfs_mkdir+0x570/0x570 [ 195.816925][ T6184] __x64_sys_mkdirat+0x85/0x90 [ 195.821768][ T6184] do_syscall_64+0x4c/0xa0 [ 195.823629][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 195.832235][ T6184] ? clear_bhb_loop+0x60/0xb0 [ 195.836961][ T6184] ? clear_bhb_loop+0x60/0xb0 [ 195.841741][ T6184] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.847686][ T6184] RIP: 0033:0x7f7578b8f749 [ 195.852144][ T6184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.871801][ T6184] RSP: 002b:00007f7579a67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 195.880264][ T6184] RAX: ffffffffffffffda RBX: 00007f7578de6180 RCX: 00007f7578b8f749 [ 195.888288][ T6184] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 195.896312][ T6184] RBP: 00007f7578c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 195.904324][ T6184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.912328][ T6184] R13: 00007f7578de6218 R14: 00007f7578de6180 R15: 00007ffd7e2e3928 [ 195.920365][ T6184] [ 195.923991][ T6184] Kernel Offset: disabled [ 195.928353][ T6184] Rebooting in 86400 seconds..