last executing test programs: 30.379578874s ago: executing program 2 (id=1579): syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a3a440000000010109023b000101010000090400001202eb0000052406000005240000000d240f0100000000000000000009058202000200000009050302"], 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) acct(0x0) 28.288151453s ago: executing program 2 (id=1595): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000c0000000080000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r0, &(0x7f0000000600), &(0x7f0000000080)=""/61}, 0x20) 28.0848314s ago: executing program 2 (id=1600): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, @in=@remote, 0x0, 0x2400, 0x1000, 0x0, 0x2, 0x20, 0x20, 0x84, 0x0, 0xee01}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) 28.004403366s ago: executing program 2 (id=1602): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000022c0)={[{@errors_remount}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 26.933943093s ago: executing program 2 (id=1621): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') fchmod(r0, 0x1c0) 23.454445756s ago: executing program 2 (id=1652): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)={0x54, r1, 0xfe12482fe0801d65, 0x4, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x2800}, {0xc, 0x90, 0x6}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8011}, 0x4004800) 23.226269634s ago: executing program 32 (id=1652): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)={0x54, r1, 0xfe12482fe0801d65, 0x4, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x2800}, {0xc, 0x90, 0x6}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8011}, 0x4004800) 14.718990255s ago: executing program 1 (id=1707): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000010000003c000180060001000a000000080005000300e5ff0b00070000000000000000000800090043000000090006006e6f6e6500000000080008"], 0x50}}, 0x0) 14.550751489s ago: executing program 1 (id=1709): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000e00)=ANY=[@ANYBLOB='lastblock=0000000000000\x00\x00\x00\x00\x00\x00\x00\aumask=00000000000000000000000,dmode=00000000000000000000001,longad,longad,uid=forget,undelete,iocharset=utf8,umask=00000000000000000000010,undelete,uid=forget,nostrict,session=00000000000000000000,partition=00000000000000000006,\x00', @ANYRESHEX, @ANYRESHEX], 0x2, 0xc2d, &(0x7f00000001c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000011000300686173683a69702c6d61726b000000000900020073797a30000000000500040000000000050005000200000005000100060000001400078008000b40000004f608000840"], 0x60}}, 0x0) 13.79770953s ago: executing program 1 (id=1716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a0b0400000000000000000200000088000480240001800b000100736f636b6574000014000280080002400000000308000140000000024c0001800b00010065787468647200003c000280080002400000007508000340000000590800064000000002080006400000000108000440000000b905000200070000000500020007000000140001800a00010071756f7461000000040002800900010073797a30000000000900020073797a32"], 0x17c}}, 0x40880) 12.980240096s ago: executing program 1 (id=1720): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000022c0)={[{@errors_remount}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 12.06795457s ago: executing program 1 (id=1725): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) rename(&(0x7f00000006c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000000c0)='./file0\x00') 9.355948541s ago: executing program 1 (id=1736): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000004480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0x40046f01, &(0x7f0000000000)={0xc6, 0x1, 0x401}) 9.088375792s ago: executing program 33 (id=1736): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000004480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0x40046f01, &(0x7f0000000000)={0xc6, 0x1, 0x401}) 3.765523054s ago: executing program 0 (id=1796): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) 2.364015708s ago: executing program 5 (id=1797): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@bh}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@noload}]}, 0x1, 0x50a, &(0x7f0000001700)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xffffffffffffffff, 0x0, 0x7fff, 0x9b}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f00000002c0)=ANY=[], 0xfe37, 0x0) 2.355372219s ago: executing program 0 (id=1806): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000001c0)) 2.215461681s ago: executing program 0 (id=1799): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x18, 0x0, &(0x7f0000000040)) 2.139200806s ago: executing program 0 (id=1800): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000002200)={0x41000d, 0x1, 0xc, 0x7, 0x0, 0x81}) 2.034074025s ago: executing program 4 (id=1801): syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x8000c6, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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") chdir(&(0x7f0000000480)='./file0\x00') llistxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)=""/136, 0x88) 1.949820782s ago: executing program 0 (id=1802): r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_LOCK(r0, 0xb) 1.939374683s ago: executing program 3 (id=1803): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000200)={0x44, r1, 0x1, 0x70bd29, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}}, 0x0) 1.799343804s ago: executing program 0 (id=1804): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x2968, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x17, {[@global=@item_012={0x0, 0x1, 0xbdac63e42b40d958}]}}, 0x0}, 0x0) 1.705172922s ago: executing program 3 (id=1805): getgroups(0x2, &(0x7f0000000000)=[0x0, 0x0]) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,umask=00000000000000000007777,dmask=00000000000000000000152,iocharset=default,gid=', @ANYRESHEX=r0, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYRES8=r0], 0x81, 0x14f9, &(0x7f0000002a80)="$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") chmod(&(0x7f00000000c0)='./file0\x00', 0xd0) 1.663360175s ago: executing program 5 (id=1807): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xa, 0x2, {0x0, 0xefe}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000050}, 0x8840) 1.654173126s ago: executing program 4 (id=1808): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r1], 0x1}) 1.266112527s ago: executing program 4 (id=1809): r0 = getpgrp(0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ptrace$setopts(0x4206, r0, 0x0, 0x20004f) 1.265671607s ago: executing program 5 (id=1810): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) ioctl$TCFLSH(r0, 0x8926, 0xbffffffffffffffb) 1.22817305s ago: executing program 4 (id=1811): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) 1.177141595s ago: executing program 3 (id=1812): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000040)=[{&(0x7f0000000080)='J', 0x1}], 0x1, 0x66, 0x0) 1.079626183s ago: executing program 4 (id=1813): syz_mount_image$jfs(&(0x7f00000000c0), &(0x7f00000002c0)='./file1\x00', 0x1cc0a, &(0x7f0000000680)=ANY=[], 0x51, 0x5ff1, &(0x7f000000f080)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x0, 0x0, 0xfffffffc, 0x8}) 948.910423ms ago: executing program 3 (id=1814): r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_LOCK(r0, 0xb) 826.223453ms ago: executing program 3 (id=1815): r0 = socket$inet6(0xa, 0x200000000003, 0x87) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000280)={@broadcast, @random="54f55c5c52c0", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "03136c", 0x0, 0x87, 0x0, @local, @mcast2}}}}, 0x0) 655.425067ms ago: executing program 5 (id=1816): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x4, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x1b, 0xf, 0x9, 0x14, 0xb, 0x676, 0x6, 0xa8}) 609.329431ms ago: executing program 3 (id=1817): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f00000000c0)=[{0x18, 0x4000, 0x22, &(0x7f0000000040)="009f8418946c238f940f53ccbc9f22d5662ed6dcc62b8dad45c6c4e7963bd086f8a7"}, {0x80, 0x3000, 0x0, 0x0}], 0x2}) 517.075898ms ago: executing program 5 (id=1818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 369.49875ms ago: executing program 5 (id=1819): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x0, 0x0}}, 0xfc36) 0s ago: executing program 4 (id=1820): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x40}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0x94}}, 0x0) kernel console output (not intermixed with test programs): system without journal. Opts: ,errors=continue. Quota mode: writeback. [ 110.649346][ T4294] usb 3-1: Using ep0 maxpacket: 16 [ 110.675824][ T6293] loop0: detected capacity change from 0 to 32768 [ 110.746964][ T6293] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.820 (6293) [ 110.819229][ T4294] usb 3-1: unable to get BOS descriptor or descriptor too short [ 110.841331][ T6293] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 110.888984][ T5209] usb 5-1: Using ep0 maxpacket: 16 [ 110.894367][ T6293] BTRFS info (device loop0): enabling ssd optimizations [ 110.908849][ T4294] usb 3-1: config 248 interface 0 has no altsetting 0 [ 110.930848][ T6293] BTRFS info (device loop0): not using ssd optimizations [ 110.948419][ T6293] BTRFS info (device loop0): turning off barriers [ 110.977595][ T6293] BTRFS info (device loop0): using free space tree [ 110.985271][ T6293] BTRFS info (device loop0): has skinny extents [ 111.019879][ T5209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.054516][ T5209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.078766][ T4294] usb 3-1: New USB device found, idVendor=0711, idProduct=0901, bcdDevice=73.78 [ 111.089269][ T4294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.098904][ T4294] usb 3-1: Product: syz [ 111.103083][ T4294] usb 3-1: Manufacturer: syz [ 111.107687][ T4294] usb 3-1: SerialNumber: syz [ 111.121535][ T5209] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 111.126712][ T6339] loop1: detected capacity change from 0 to 1024 [ 111.153401][ T5209] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 111.175250][ T5209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.204600][ T6339] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 111.224043][ T5209] usb 5-1: config 0 descriptor?? [ 111.304762][ T6339] EXT4-fs error (device loop1): ext4_get_journal_inode:5158: inode #32: comm syz.1.835: iget: special inode unallocated [ 111.345382][ T6339] EXT4-fs (loop1): no journal found [ 111.352615][ T6339] EXT4-fs (loop1): can't get journal size [ 111.369881][ T6339] EXT4-fs (loop1): filesystem is read-only [ 111.411569][ T6339] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none. [ 111.458910][ T4294] sisusb 3-1:248.0: Invalid USB2VGA device [ 111.464755][ T4294] sisusb: probe of 3-1:248.0 failed with error -22 [ 111.517467][ T4294] usb 3-1: USB disconnect, device number 7 [ 111.702676][ T5209] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 111.714950][ T5209] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 111.731487][ T5209] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 111.770146][ T5209] microsoft 0003:045E:07DA.000A: No inputs registered, leaving [ 111.845594][ T5209] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 111.879622][ T6356] loop1: detected capacity change from 0 to 1024 [ 111.898167][ T5209] microsoft 0003:045E:07DA.000A: no inputs found [ 111.906746][ T5209] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 111.946357][ T5209] usb 5-1: USB disconnect, device number 7 [ 112.123898][ T6363] loop2: detected capacity change from 0 to 2048 [ 112.231235][ T6367] fido_id[6367]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 112.251024][ T6363] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.274759][ T4277] hfsplus: b-tree write err: -5, ino 4 [ 112.564840][ T6382] loop4: detected capacity change from 0 to 256 [ 112.939411][ T5209] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 113.048989][ T6364] loop0: detected capacity change from 0 to 32768 [ 113.117262][ T6395] loop2: detected capacity change from 0 to 8192 [ 113.255416][ T6364] XFS (loop0): Mounting V5 Filesystem [ 113.265957][ T6380] loop1: detected capacity change from 0 to 32768 [ 113.348766][ T5209] usb 5-1: config 1 has an invalid descriptor of length 123, skipping remainder of the config [ 113.422317][ T5209] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.470160][ T6380] XFS (loop1): Mounting V5 Filesystem [ 113.554541][ T6364] XFS (loop0): Ending clean mount [ 113.638846][ T5209] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 113.656276][ T6429] loop3: detected capacity change from 0 to 2048 [ 113.663401][ T5209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.717985][ T5209] usb 5-1: Product: syz [ 113.725758][ T5209] usb 5-1: Manufacturer: syz [ 113.757005][ T6429] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.769283][ T5209] usb 5-1: SerialNumber: syz [ 113.795356][ T6380] XFS (loop1): Ending clean mount [ 113.798874][ T5346] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 113.845350][ T6380] XFS (loop1): Quotacheck needed: Please wait. [ 113.878191][ T4189] XFS (loop0): Unmounting Filesystem [ 114.095302][ T6380] XFS (loop1): Quotacheck: Done. [ 114.169057][ T5346] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.173709][ T5209] usb 5-1: 0:2 : does not exist [ 114.204235][ T5346] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.228735][ T5346] usb 3-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 114.246784][ T5346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.250586][ T5209] usb 5-1: USB disconnect, device number 8 [ 114.295445][ T5346] usb 3-1: config 0 descriptor?? [ 114.337469][ T4184] XFS (loop1): Unmounting Filesystem [ 114.446177][ T6448] CUSE: DEVNAME unspecified [ 114.507879][ T6450] loop3: detected capacity change from 0 to 256 [ 114.693347][ T6458] loop4: detected capacity change from 0 to 8 [ 114.777048][ T6458] SQUASHFS error: lzo decompression failed, data probably corrupt [ 114.787180][ T5346] elecom 0003:056E:011C.000B: item fetching failed at offset 0/3 [ 114.809806][ T5346] elecom: probe of 0003:056E:011C.000B failed with error -22 [ 114.817735][ T6458] SQUASHFS error: Failed to read block 0x91: -5 [ 114.834423][ T6458] SQUASHFS error: Unable to read metadata cache entry [8f] [ 114.862155][ T6458] SQUASHFS error: Unable to read inode 0x11f [ 114.907110][ T5346] kernel write not supported for file /snd/seq (pid: 5346 comm: kworker/1:18) [ 115.017140][ T5344] usb 3-1: USB disconnect, device number 8 [ 115.187893][ T6481] CUSE: DEVNAME unspecified [ 115.244742][ T6483] loop4: detected capacity change from 0 to 1024 [ 115.266901][ T5346] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 115.356931][ T6483] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 115.459006][ T1108] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 115.505451][ T6489] loop4: detected capacity change from 0 to 256 [ 115.633021][ T5346] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 115.658493][ T6493] overlayfs: unrecognized mount option "\fsplus" or missing value [ 115.661893][ T5346] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.704973][ T5209] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.713721][ T5346] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 115.728407][ T5346] usb 2-1: New USB device found, idVendor=046d, idProduct=e104, bcdDevice= 0.00 [ 115.739261][ T1108] usb 1-1: Using ep0 maxpacket: 16 [ 115.769687][ T5218] kernel write not supported for file /snd/seq (pid: 5218 comm: kworker/0:16) [ 115.784059][ T5346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.810142][ T5346] usb 2-1: config 0 descriptor?? [ 115.890486][ T6502] loop4: detected capacity change from 0 to 4096 [ 115.912203][ T1108] usb 1-1: unable to get BOS descriptor or descriptor too short [ 115.926645][ T6502] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 115.978701][ T5209] usb 4-1: Using ep0 maxpacket: 16 [ 116.000171][ T1108] usb 1-1: config 248 interface 0 has no altsetting 0 [ 116.108907][ T5209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.148947][ T5209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.179432][ T1108] usb 1-1: New USB device found, idVendor=0711, idProduct=0901, bcdDevice=73.78 [ 116.188917][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.196919][ T1108] usb 1-1: Product: syz [ 116.201568][ T5209] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 116.225678][ T1108] usb 1-1: Manufacturer: syz [ 116.231254][ T1108] usb 1-1: SerialNumber: syz [ 116.242032][ T5209] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 116.252091][ T5209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.277040][ T5209] usb 4-1: config 0 descriptor?? [ 116.304891][ T5346] hid-generic 0003:046D:E104.000C: unbalanced collection at end of report description [ 116.329120][ T5346] hid-generic: probe of 0003:046D:E104.000C failed with error -22 [ 116.476090][ T6511] loop4: detected capacity change from 0 to 32768 [ 116.510479][ T6511] XFS (loop4): Mounting V5 Filesystem [ 116.537056][ T5218] usb 2-1: USB disconnect, device number 7 [ 116.610033][ T1108] sisusb 1-1:248.0: Invalid USB2VGA device [ 116.616238][ T1108] sisusb: probe of 1-1:248.0 failed with error -22 [ 116.633861][ T1108] usb 1-1: USB disconnect, device number 11 [ 116.647208][ T6511] XFS (loop4): Ending clean mount [ 116.691671][ T4192] XFS (loop4): Unmounting Filesystem [ 116.790015][ T5209] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 116.797250][ T5209] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 116.804954][ T5209] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 116.814536][ T5209] microsoft 0003:045E:07DA.000D: No inputs registered, leaving [ 116.843699][ T5209] microsoft 0003:045E:07DA.000D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 116.869212][ T5209] microsoft 0003:045E:07DA.000D: no inputs found [ 116.875579][ T5209] microsoft 0003:045E:07DA.000D: could not initialize ff, continuing anyway [ 117.020620][ T1108] usb 4-1: USB disconnect, device number 5 [ 117.146278][ T6535] loop0: detected capacity change from 0 to 1024 [ 117.204172][ T6535] overlayfs: unrecognized mount option "\fsplus" or missing value [ 117.322207][ T6538] loop2: detected capacity change from 0 to 2048 [ 117.406130][ T6538] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.424484][ T6531] loop4: detected capacity change from 0 to 32768 [ 117.514744][ T6531] XFS (loop4): Mounting V5 Filesystem [ 117.576246][ T6531] XFS (loop4): Ending clean mount [ 117.618723][ T5344] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 117.622253][ T6551] loop3: detected capacity change from 0 to 4096 [ 117.682755][ T6551] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 117.744816][ T4192] XFS (loop4): Unmounting Filesystem [ 117.859681][ T5344] usb 1-1: Using ep0 maxpacket: 32 [ 117.918235][ T6553] loop2: detected capacity change from 0 to 8192 [ 117.979075][ T5344] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 118.019844][ T5344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.067606][ T5344] usb 1-1: config 0 descriptor?? [ 118.160524][ T5344] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 118.239183][ T6563] loop2: detected capacity change from 0 to 1024 [ 118.269522][ T6567] loop3: detected capacity change from 0 to 8 [ 118.350800][ T6563] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 118.388521][ T6567] SQUASHFS error: lzo decompression failed, data probably corrupt [ 118.420320][ T6567] SQUASHFS error: Failed to read block 0x91: -5 [ 118.426602][ T6567] SQUASHFS error: Unable to read metadata cache entry [8f] [ 118.464633][ T6567] SQUASHFS error: Unable to read inode 0x11f [ 118.546247][ T6583] loop2: detected capacity change from 0 to 256 [ 118.664172][ T6581] loop1: detected capacity change from 0 to 4096 [ 118.704392][ T6581] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 118.780574][ T6581] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 118.818964][ T5344] gspca_nw80x: reg_w err -71 [ 118.823731][ T5344] nw80x: probe of 1-1:0.0 failed with error -71 [ 118.876280][ T5344] usb 1-1: USB disconnect, device number 12 [ 118.960156][ T6600] device sit0 entered promiscuous mode [ 118.983174][ T6600] netlink: 'syz.3.926': attribute type 1 has an invalid length. [ 119.039509][ T6600] netlink: 1 bytes leftover after parsing attributes in process `syz.3.926'. [ 119.121094][ T4184] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 119.156845][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 119.156859][ T26] audit: type=1326 audit(1754520661.370:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760a17dbe9 code=0x7ff00000 [ 119.243240][ T26] audit: type=1326 audit(1754520661.420:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f760a17dbe9 code=0x7ff00000 [ 119.284892][ T5218] kernel write not supported for file /adsp1 (pid: 5218 comm: kworker/0:16) [ 119.293565][ T26] audit: type=1326 audit(1754520661.420:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760a17dbe9 code=0x7ff00000 [ 119.293607][ T26] audit: type=1326 audit(1754520661.420:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760a17dbe9 code=0x7ff00000 [ 119.293633][ T26] audit: type=1326 audit(1754520661.420:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760a17dbe9 code=0x7ff00000 [ 119.293659][ T26] audit: type=1326 audit(1754520661.420:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760a17dbe9 code=0x7ff00000 [ 119.293686][ T26] audit: type=1326 audit(1754520661.420:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760a17dbe9 code=0x7ff00000 [ 119.293713][ T26] audit: type=1326 audit(1754520661.420:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760a17dbe9 code=0x7ff00000 [ 119.293782][ T26] audit: type=1326 audit(1754520661.420:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760a17dbe9 code=0x7ff00000 [ 119.468023][ T6618] loop1: detected capacity change from 0 to 256 [ 119.484430][ T26] audit: type=1326 audit(1754520661.420:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760a17dbe9 code=0x7ff00000 [ 119.585069][ T6624] netlink: 108 bytes leftover after parsing attributes in process `syz.4.937'. [ 119.608685][ T4294] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 119.618485][ T6624] netlink: 20 bytes leftover after parsing attributes in process `syz.4.937'. [ 119.788951][ T5345] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 119.868823][ T4294] usb 4-1: Using ep0 maxpacket: 32 [ 119.982450][ T6622] loop0: detected capacity change from 0 to 32768 [ 119.990783][ T4294] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 120.006774][ T4294] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 120.024968][ T4294] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.084310][ T6622] JBD2: Ignoring recovery information on journal [ 120.096323][ T6639] loop2: detected capacity change from 0 to 512 [ 120.107473][ T6630] loop4: detected capacity change from 0 to 32768 [ 120.129316][ T6630] (syz.4.940,6630,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "0xffffffffffffffff" or missing value [ 120.168914][ T5345] usb 2-1: config 1 has an invalid descriptor of length 123, skipping remainder of the config [ 120.184997][ T6622] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 120.194251][ T4294] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 120.204399][ T5345] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.207098][ T6630] (syz.4.940,6630,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 120.222805][ T4294] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 120.238888][ T6639] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 120.279257][ T6639] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.293745][ T4294] usb 4-1: Product: syz [ 120.324305][ T4294] usb 4-1: Manufacturer: syz [ 120.337726][ T6639] EXT4-fs error (device loop2): ext4_acquire_dquot:6207: comm syz.2.944: Failed to acquire dquot type 1 [ 120.355962][ T4294] usb 4-1: SerialNumber: syz [ 120.367603][ T4189] ocfs2: Unmounting device (7,0) on (node local) [ 120.376609][ T6646] EXT4-fs error (device loop2): ext4_acquire_dquot:6207: comm syz.2.944: Failed to acquire dquot type 1 [ 120.404598][ T6645] loop4: detected capacity change from 0 to 2048 [ 120.417894][ T4294] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input14 [ 120.448991][ T5345] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 120.458063][ T5345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.485097][ T6645] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.495602][ T5345] usb 2-1: Product: syz [ 120.509008][ T5345] usb 2-1: Manufacturer: syz [ 120.545444][ T5345] usb 2-1: SerialNumber: syz [ 120.720475][ T4294] usb 4-1: USB disconnect, device number 6 [ 120.761252][ T4294] appletouch 4-1:1.0: input: appletouch disconnected [ 120.876373][ T6655] loop4: detected capacity change from 0 to 256 [ 120.882713][ T6659] netlink: 108 bytes leftover after parsing attributes in process `syz.2.951'. [ 120.894451][ T5345] usb 2-1: 0:2 : does not exist [ 120.906051][ T6659] netlink: 20 bytes leftover after parsing attributes in process `syz.2.951'. [ 120.952494][ T5345] usb 2-1: USB disconnect, device number 8 [ 121.211109][ T5499] udevd[5499]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.238659][ T5209] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 121.286443][ T6665] loop3: detected capacity change from 0 to 64 [ 121.334041][ T6665] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 121.366331][ T6665] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 121.508699][ T5209] usb 1-1: Using ep0 maxpacket: 8 [ 121.671178][ T5209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 121.688431][ T5209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.698324][ T5209] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.713263][ T5209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 121.724705][ T5209] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 121.740946][ T5209] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 121.750110][ T5209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.762118][ T5209] usb 1-1: config 0 descriptor?? [ 121.779857][ T6661] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 121.906015][ T6662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.277801][ T5218] usb 1-1: USB disconnect, device number 13 [ 122.589816][ T6673] loop4: detected capacity change from 0 to 64 [ 122.689515][ T6673] hfs: request for non-existent node 786432 in B*Tree [ 122.708061][ T6673] hfs: request for non-existent node 786432 in B*Tree [ 122.741204][ T6679] loop1: detected capacity change from 0 to 2048 [ 122.796973][ T4192] hfs: node 4:3 still has 1 user(s)! [ 122.818347][ T6679] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.870236][ T6687] device sit0 entered promiscuous mode [ 122.914198][ T6687] netlink: 'syz.0.963': attribute type 1 has an invalid length. [ 122.968016][ T6689] loop4: detected capacity change from 0 to 4096 [ 122.972738][ T6687] netlink: 1 bytes leftover after parsing attributes in process `syz.0.963'. [ 123.072328][ T6689] ntfs: volume version 3.1. [ 123.242977][ T6704] loop2: detected capacity change from 0 to 164 [ 123.321637][ T6710] loop0: detected capacity change from 0 to 64 [ 123.349134][ T6704] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 123.375426][ T6704] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 123.408803][ T6710] hfs: request for non-existent node 786432 in B*Tree [ 123.415611][ T6710] hfs: request for non-existent node 786432 in B*Tree [ 123.572973][ T4189] hfs: node 4:3 still has 1 user(s)! [ 123.916421][ T6725] loop0: detected capacity change from 0 to 2048 [ 123.947039][ T6725] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.005787][ T6698] loop1: detected capacity change from 0 to 32768 [ 124.061708][ T6730] loop3: detected capacity change from 0 to 256 [ 124.145400][ T6698] ialloc: diAlloc returned -5! [ 124.161872][ T6732] kernel profiling enabled (shift: 9) [ 124.195271][ T6730] FAT-fs (loop3): Directory bread(block 64) failed [ 124.215713][ T6730] FAT-fs (loop3): Directory bread(block 65) failed [ 124.226764][ T6730] FAT-fs (loop3): Directory bread(block 66) failed [ 124.227732][ T6708] loop4: detected capacity change from 0 to 32768 [ 124.250906][ T6730] FAT-fs (loop3): Directory bread(block 67) failed [ 124.284567][ T6730] FAT-fs (loop3): Directory bread(block 68) failed [ 124.301854][ T6708] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.976 (6708) [ 124.315483][ T6730] FAT-fs (loop3): Directory bread(block 69) failed [ 124.334294][ T6730] FAT-fs (loop3): Directory bread(block 70) failed [ 124.372095][ T6739] program syz.2.991 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.387303][ T6730] FAT-fs (loop3): Directory bread(block 71) failed [ 124.396083][ T6730] FAT-fs (loop3): Directory bread(block 72) failed [ 124.399326][ T6708] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 124.410129][ T6730] FAT-fs (loop3): Directory bread(block 73) failed [ 124.468791][ T6708] BTRFS info (device loop4): using free space tree [ 124.475445][ T6708] BTRFS info (device loop4): has skinny extents [ 124.853814][ T6708] BTRFS info (device loop4): enabling ssd optimizations [ 125.004580][ T6741] loop1: detected capacity change from 0 to 32768 [ 125.126452][ T6741] JBD2: Ignoring recovery information on journal [ 125.207563][ T6738] loop0: detected capacity change from 0 to 32768 [ 125.249514][ T6738] XFS: noikeep mount option is deprecated. [ 125.315579][ T6741] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 125.499901][ T6738] XFS (loop0): Mounting V5 Filesystem [ 125.540200][ T4184] ocfs2: Unmounting device (7,1) on (node local) [ 125.648176][ T6797] loop3: detected capacity change from 0 to 164 [ 125.649983][ T6738] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 125.739086][ T6796] loop1: detected capacity change from 0 to 256 [ 125.768217][ T6738] XFS (loop0): Starting recovery (logdev: internal) [ 125.768411][ T6797] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 125.797008][ T6738] XFS (loop0): Ending recovery (logdev: internal) [ 125.837855][ T6796] FAT-fs (loop1): Directory bread(block 64) failed [ 125.864207][ T6796] FAT-fs (loop1): Directory bread(block 65) failed [ 125.882693][ T6796] FAT-fs (loop1): Directory bread(block 66) failed [ 125.889623][ T6797] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 125.923679][ T6796] FAT-fs (loop1): Directory bread(block 67) failed [ 125.945546][ T6775] loop2: detected capacity change from 0 to 32768 [ 125.975935][ T6796] FAT-fs (loop1): Directory bread(block 68) failed [ 125.982812][ T4189] XFS (loop0): Unmounting Filesystem [ 125.992154][ T6796] FAT-fs (loop1): Directory bread(block 69) failed [ 126.019555][ T6796] FAT-fs (loop1): Directory bread(block 70) failed [ 126.052301][ T6796] FAT-fs (loop1): Directory bread(block 71) failed [ 126.090786][ T6796] FAT-fs (loop1): Directory bread(block 72) failed [ 126.111168][ T6796] FAT-fs (loop1): Directory bread(block 73) failed [ 126.134220][ T6775] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 126.173639][ T6775] (syz.2.998,6775,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 126.326876][ T6775] (syz.2.998,6775,0):__ocfs2_delete_entry:1162 ERROR: status = -5 [ 126.336725][ T6775] (syz.2.998,6775,0):ocfs2_unlink:990 ERROR: status = -5 [ 126.374159][ T6775] (syz.2.998,6775,0):ocfs2_unlink:1042 ERROR: status = -5 [ 126.504849][ T4196] ocfs2: Unmounting device (7,2) on (node local) [ 126.827434][ T6827] lo speed is unknown, defaulting to 1000 [ 126.844477][ T6827] lo speed is unknown, defaulting to 1000 [ 126.877463][ T6827] lo speed is unknown, defaulting to 1000 [ 126.955208][ T6827] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 126.999440][ T6827] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 127.055653][ T6810] loop4: detected capacity change from 0 to 32768 [ 127.088102][ T6810] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1010 (6810) [ 127.091920][ T6827] lo speed is unknown, defaulting to 1000 [ 127.121192][ T6827] lo speed is unknown, defaulting to 1000 [ 127.142099][ T6827] lo speed is unknown, defaulting to 1000 [ 127.153707][ T6810] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 127.157790][ T6827] lo speed is unknown, defaulting to 1000 [ 127.184928][ T6810] BTRFS info (device loop4): turning on flush-on-commit [ 127.185443][ T6827] lo speed is unknown, defaulting to 1000 [ 127.206034][ T6810] BTRFS info (device loop4): using free space tree [ 127.217890][ T6810] BTRFS info (device loop4): has skinny extents [ 127.264677][ T4294] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 127.330983][ T6844] sctp: [Deprecated]: syz.3.1020 (pid 6844) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.330983][ T6844] Use struct sctp_sack_info instead [ 127.342088][ T6832] loop1: detected capacity change from 0 to 32768 [ 127.354140][ T6844] sctp: [Deprecated]: syz.3.1020 (pid 6844) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.354140][ T6844] Use struct sctp_sack_info instead [ 127.387273][ T6832] XFS: attr2 mount option is deprecated. [ 127.402248][ T6851] sctp: [Deprecated]: syz.3.1021 (pid 6851) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.402248][ T6851] Use struct sctp_sack_info instead [ 127.426264][ T6832] XFS: ikeep mount option is deprecated. [ 127.507065][ T6832] XFS (loop1): Mounting V5 Filesystem [ 127.517802][ T6810] BTRFS info (device loop4): enabling ssd optimizations [ 127.541517][ T6810] BTRFS info (device loop4): checking UUID tree [ 127.629112][ T4294] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 127.637158][ T4294] usb 3-1: config 0 has no interface number 0 [ 127.662132][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1024'. [ 127.706568][ T4294] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 127.747281][ T4294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.779469][ T4294] usb 3-1: config 0 descriptor?? [ 127.831575][ T4294] cp210x 3-1:0.1: cp210x converter detected [ 127.857309][ T6832] XFS (loop1): Ending clean mount [ 127.865757][ T6832] XFS (loop1): Quotacheck needed: Please wait. [ 127.940040][ T6832] XFS (loop1): Quotacheck: Done. [ 127.991533][ T6879] loop0: detected capacity change from 0 to 1024 [ 128.034446][ T6856] loop3: detected capacity change from 0 to 32768 [ 128.046127][ T4184] XFS (loop1): Unmounting Filesystem [ 128.195488][ T6856] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop3 scanned by syz.3.1022 (6856) [ 128.252240][ T4294] cp210x 3-1:0.1: failed to get vendor val 0x000e size 3: -71 [ 128.292944][ T4294] usb 3-1: cp210x converter now attached to ttyUSB0 [ 128.337324][ T5877] hfsplus: b-tree write err: -5, ino 4 [ 128.367433][ T4294] usb 3-1: USB disconnect, device number 9 [ 128.392271][ T6856] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 128.428839][ T6856] BTRFS info (device loop3): using free space tree [ 128.446410][ T6856] BTRFS info (device loop3): has skinny extents [ 128.449066][ T6882] loop4: detected capacity change from 0 to 1024 [ 128.479407][ T4294] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 128.487879][ T4294] cp210x 3-1:0.1: device disconnected [ 128.609794][ T6882] hfsplus: bad catalog entry type [ 128.638410][ T1208] hfsplus: b-tree write err: -5, ino 4 [ 128.783303][ T6909] loop0: detected capacity change from 0 to 128 [ 128.915549][ T6918] syz.2.1036 (6918): /proc/6917/oom_adj is deprecated, please use /proc/6917/oom_score_adj instead. [ 128.925771][ T6909] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 128.942071][ T6856] BTRFS info (device loop3): enabling ssd optimizations [ 128.967532][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 128.967544][ T26] audit: type=1326 audit(1754520671.180:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.2.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760a17dbe9 code=0x7ffc0000 [ 129.152183][ T26] audit: type=1326 audit(1754520671.220:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.2.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760a17dbe9 code=0x7ffc0000 [ 129.280986][ T26] audit: type=1326 audit(1754520671.220:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.2.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f760a17dbe9 code=0x7ffc0000 [ 129.293249][ T5355] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 9 /dev/loop3 scanned by udevd (5355) [ 129.386643][ T26] audit: type=1326 audit(1754520671.220:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.2.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760a17dbe9 code=0x7ffc0000 [ 129.459651][ T26] audit: type=1326 audit(1754520671.220:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.2.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f760a17dbe9 code=0x7ffc0000 [ 129.495308][ T6938] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1044'. [ 129.583030][ T26] audit: type=1326 audit(1754520671.220:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.2.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760a17dbe9 code=0x7ffc0000 [ 129.674180][ T6948] loop1: detected capacity change from 0 to 512 [ 129.768376][ T6952] loop0: detected capacity change from 0 to 512 [ 129.816294][ T6907] loop4: detected capacity change from 0 to 32768 [ 129.848972][ T6952] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 129.965647][ T6948] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #12: comm syz.1.1049: corrupted in-inode xattr [ 130.016254][ T6948] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1049: couldn't read orphan inode 12 (err -117) [ 130.043344][ T6952] EXT4-fs (loop0): mounted filesystem without journal. Opts: nomblk_io_submit,inode_readahead_blks=0x0000000000000800,discard,,errors=continue. Quota mode: writeback. [ 130.077039][ T6948] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.088976][ T6952] ext4 filesystem being mounted at /182/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.137743][ T6980] sctp: [Deprecated]: syz.3.1061 (pid 6980) Use of struct sctp_assoc_value in delayed_ack socket option. [ 130.137743][ T6980] Use struct sctp_sack_info instead [ 130.155506][ T6980] 8021q: VLANs not supported on hsr0 [ 130.195657][ T6907] XFS (loop4): Mounting V5 Filesystem [ 130.384438][ T6907] XFS (loop4): Ending clean mount [ 130.502638][ T6907] XFS (loop4): Quotacheck needed: Please wait. [ 130.639172][ T6907] XFS (loop4): Quotacheck: Done. [ 130.705330][ T7001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.764984][ T4192] XFS (loop4): Unmounting Filesystem [ 130.863306][ T7005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1072'. [ 131.087312][ T7015] loop0: detected capacity change from 0 to 2048 [ 131.096939][ T6989] loop3: detected capacity change from 0 to 40427 [ 131.105192][ T7017] loop2: detected capacity change from 0 to 1024 [ 131.126733][ T7019] program syz.1.1079 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.172830][ T7021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1080'. [ 131.177397][ T6989] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 131.221260][ T7015] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.230617][ T6989] F2FS-fs (loop3): invalid crc value [ 131.286427][ T6989] F2FS-fs (loop3): Found nat_bits in checkpoint [ 131.313335][ T26] audit: type=1800 audit(1754520673.530:81): pid=7017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1078" name="file2" dev="loop2" ino=0 res=0 errno=0 [ 131.331224][ T7015] EXT4-fs error (device loop0): ext4_find_extent:929: inode #2: comm syz.0.1077: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 131.438987][ T6989] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 131.574052][ T7036] loop4: detected capacity change from 0 to 64 [ 132.815876][ T7092] sp0: Synchronizing with TNC [ 132.843154][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.849565][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.936568][ T7088] loop2: detected capacity change from 0 to 4096 [ 132.954710][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1111'. [ 133.255357][ T7077] loop3: detected capacity change from 0 to 32768 [ 133.445984][ T7068] loop4: detected capacity change from 0 to 32768 [ 133.632472][ T7118] loop0: detected capacity change from 0 to 512 [ 133.708422][ T7118] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 133.731291][ T7118] EXT4-fs (loop0): orphan cleanup on readonly fs [ 133.763798][ T7118] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.1122: iget: bad i_size value: 38620345925642 [ 133.804751][ T7118] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1122: couldn't read orphan inode 15 (err -117) [ 133.837851][ T7118] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.350882][ T7068] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 134.364408][ T7077] XFS (loop3): Mounting V5 Filesystem [ 134.369934][ T4261] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 134.412982][ T7068] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 134.498607][ T7122] loop2: detected capacity change from 0 to 40427 [ 134.518309][ T7068] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 134.593486][ T7068] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 134.608699][ T4261] usb 1-1: Using ep0 maxpacket: 16 [ 134.611160][ T7077] XFS (loop3): Ending clean mount [ 134.630713][ T7158] loop1: detected capacity change from 0 to 512 [ 134.665263][ T7077] XFS (loop3): Quotacheck needed: Please wait. [ 134.681037][ T7158] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 134.734681][ T4261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.766309][ T4261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.776227][ T7077] XFS (loop3): Quotacheck: Done. [ 134.817583][ T4261] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 134.858692][ T4261] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 134.884372][ T4261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.910471][ T4261] usb 1-1: config 0 descriptor?? [ 134.956980][ T4183] XFS (loop3): Unmounting Filesystem [ 135.083585][ T7162] loop1: detected capacity change from 0 to 4096 [ 135.126554][ T7162] ntfs: (device loop1): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 135.143409][ T7162] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 135.172032][ T7162] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 135.190765][ T7162] ntfs: volume version 3.1. [ 135.237478][ T4184] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 135.259028][ T21] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 135.367533][ T7166] loop1: detected capacity change from 0 to 512 [ 135.402554][ T7166] FAT-fs (loop1): Invalid FSINFO signature: 0x41008052, 0x61417272 (sector = 1) [ 135.416603][ T4261] microsoft 0003:045E:07DA.000E: report is too long [ 135.424970][ T4261] microsoft 0003:045E:07DA.000E: item 0 4 0 11 parsing failed [ 135.446458][ T4261] microsoft 0003:045E:07DA.000E: parse failed [ 135.470055][ T4261] microsoft: probe of 0003:045E:07DA.000E failed with error -22 [ 135.486935][ T7122] F2FS-fs (loop2): invalid crc value [ 135.496598][ T7122] F2FS-fs (loop2): Found nat_bits in checkpoint [ 135.498785][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 135.628791][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 135.656126][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.656162][ T7122] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 135.683050][ T21] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 135.716021][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 135.793889][ T21] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 135.848810][ T21] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 135.905056][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.952587][ T21] usb 5-1: config 0 descriptor?? [ 135.979916][ T4261] usb 1-1: USB disconnect, device number 14 [ 135.990640][ T7160] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 136.572446][ T21] usb 5-1: USB disconnect, device number 9 [ 136.855758][ T7202] loop1: detected capacity change from 0 to 2048 [ 136.924236][ T7206] tipc: Enabling of bearer rejected, failed to enable media [ 137.063425][ T7190] loop0: detected capacity change from 0 to 32768 [ 137.573305][ T7233] netlink: 'syz.0.1183': attribute type 2 has an invalid length. [ 137.766891][ T7243] sp0: Synchronizing with TNC [ 137.964985][ T7247] loop0: detected capacity change from 0 to 4096 [ 137.985584][ T7251] hfs: can't find a HFS filesystem on dev nullb0 [ 138.084029][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1184'. [ 138.142029][ T7255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1184'. [ 138.154225][ T7202] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 138.161849][ T7255] netlink: 'syz.2.1184': attribute type 11 has an invalid length. [ 138.205765][ T7202] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.553874][ T7268] loop1: detected capacity change from 0 to 512 [ 139.001815][ T7278] loop2: detected capacity change from 0 to 512 [ 139.046784][ T7278] EXT4-fs (loop2): Ignoring removed oldalloc option [ 139.078668][ T7278] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 139.172095][ T7278] EXT4-fs (loop2): 1 truncate cleaned up [ 139.178234][ T7278] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 139.731158][ T7284] loop4: detected capacity change from 0 to 32768 [ 139.766421][ T7295] loop0: detected capacity change from 0 to 128 [ 139.881789][ T7284] XFS (loop4): Mounting V5 Filesystem [ 139.902404][ T7268] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2775: inode #11: comm syz.1.1190: corrupted xattr block 95 [ 139.956395][ T7268] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.1190: bg 0: block 7: invalid block bitmap [ 139.979937][ T7284] XFS (loop4): Ending clean mount [ 139.987413][ T7284] XFS (loop4): Quotacheck needed: Please wait. [ 140.014036][ T7289] loop2: detected capacity change from 0 to 32768 [ 140.025305][ T7268] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 140.039012][ T7268] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2941: inode #11: comm syz.1.1190: corrupted xattr block 95 [ 140.067837][ T7284] XFS (loop4): Quotacheck: Done. [ 140.072985][ T7268] EXT4-fs warning (device loop1): ext4_evict_inode:302: xattr delete (err -117) [ 140.104232][ T7268] EXT4-fs (loop1): 1 orphan inode deleted [ 140.110501][ T7268] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 140.228394][ T4192] XFS (loop4): Unmounting Filesystem [ 140.299392][ T7308] loop1: detected capacity change from 0 to 16 [ 140.345692][ T7308] erofs: (device loop1): mounted with root inode @ nid 36. [ 140.374932][ T7308] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 140.407803][ T7308] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -44 in[46, 4050] out[1851] [ 140.437293][ T7308] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 140.693889][ T7310] loop1: detected capacity change from 0 to 4096 [ 140.838347][ T7322] netlink: 'syz.3.1211': attribute type 11 has an invalid length. [ 140.846451][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1211'. [ 141.119855][ T7295] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 141.171860][ T7295] ext4 filesystem being mounted at /218/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 141.438975][ T7320] loop4: detected capacity change from 0 to 32768 [ 141.486900][ T7333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1215'. [ 141.579286][ T7335] loop2: detected capacity change from 0 to 2048 [ 141.648925][ T7335] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 141.676452][ T7335] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.744278][ T26] audit: type=1326 audit(1754520683.960:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.0.1217" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a1fe2ebe9 code=0x0 [ 142.140637][ T7346] loop4: detected capacity change from 0 to 512 [ 142.385989][ T7344] loop2: detected capacity change from 0 to 32768 [ 142.440524][ T7344] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 142.452382][ T7344] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 142.466306][ T7344] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 142.555476][ T7344] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 142.974542][ T7354] netlink: 'syz.3.1226': attribute type 29 has an invalid length. [ 143.066831][ T5349] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 143.097442][ T7346] FAT-fs (loop4): Invalid FSINFO signature: 0x41008052, 0x61417272 (sector = 1) [ 143.105558][ T7358] loop3: detected capacity change from 0 to 1024 [ 143.245363][ T1208] hfsplus: b-tree write err: -5, ino 4 [ 143.328694][ T5349] usb 1-1: Using ep0 maxpacket: 32 [ 143.450102][ T5349] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.466720][ T5349] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.486847][ T5349] usb 1-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 143.507068][ T5349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.528158][ T5349] usb 1-1: config 0 descriptor?? [ 143.582298][ T7362] loop1: detected capacity change from 0 to 32768 [ 143.848590][ T26] audit: type=1326 audit(1754520686.060:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.2.1232" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f760a17dbe9 code=0x0 [ 144.022044][ T5349] logitech 0003:046D:C50C.000F: hidraw0: USB HID v0.00 Device [HID 046d:c50c] on usb-dummy_hcd.0-1/input0 [ 144.234284][ T7387] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1241'. [ 144.245697][ T4261] usb 1-1: USB disconnect, device number 15 [ 144.265391][ T7387] tipc: Invalid UDP bearer configuration [ 144.265432][ T7387] tipc: Enabling of bearer rejected, failed to enable media [ 144.338376][ T7389] loop3: detected capacity change from 0 to 1024 [ 144.418880][ T26] audit: type=1800 audit(1754520686.640:84): pid=7389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1231" name="file2" dev="loop3" ino=0 res=0 errno=0 [ 144.461872][ T5349] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 144.832023][ T5349] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 144.854623][ T5349] usb 2-1: config 0 has no interface number 0 [ 144.863395][ T5349] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 144.888371][ T5349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.906396][ T5349] usb 2-1: config 0 descriptor?? [ 144.964859][ T5349] cp210x 2-1:0.1: cp210x converter detected [ 144.967993][ T7405] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.1250'. [ 145.399853][ T5349] cp210x 2-1:0.1: failed to get vendor val 0x000e size 3: -71 [ 145.429273][ T5349] usb 2-1: cp210x converter now attached to ttyUSB0 [ 145.448434][ T5349] usb 2-1: USB disconnect, device number 9 [ 145.472746][ T5349] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 145.514626][ T5349] cp210x 2-1:0.1: device disconnected [ 145.533082][ T7423] loop2: detected capacity change from 0 to 4096 [ 145.548153][ T7427] loop3: detected capacity change from 0 to 512 [ 145.612192][ T7423] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 145.612964][ T7427] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 145.725871][ T7427] EXT4-fs (loop3): 1 truncate cleaned up [ 145.733289][ T7437] loop0: detected capacity change from 0 to 64 [ 145.740527][ T7427] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.784485][ T7437] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 146.133152][ T7443] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1262'. [ 146.324533][ T7444] fido_id[7444]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 146.889686][ T5339] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 147.066929][ T7463] loop2: detected capacity change from 0 to 128 [ 147.227505][ T7463] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,jqfmt=vfsv1,dax=inode,dax=never,minixdf,,errors=continue. Quota mode: none. [ 147.228936][ T5339] usb 4-1: not running at top speed; connect to a high speed hub [ 147.262748][ T7463] ext4 filesystem being mounted at /305/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 147.348861][ T5339] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 147.368868][ T5339] usb 4-1: config 1 has no interface number 1 [ 147.386003][ T5339] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 147.609789][ T5339] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 147.622667][ T5339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.657679][ T5339] usb 4-1: Product: syz [ 147.665337][ T7483] device veth1_macvtap left promiscuous mode [ 147.677951][ T5339] usb 4-1: Manufacturer: syz [ 147.693051][ T5339] usb 4-1: SerialNumber: syz [ 147.709303][ T7483] device macsec0 entered promiscuous mode [ 147.759000][ T7490] nbd: must specify a size in bytes for the device [ 147.765817][ T7488] device veth1_macvtap entered promiscuous mode [ 147.795243][ T7488] device macsec0 left promiscuous mode [ 148.148880][ T5339] usb 4-1: failed to enable PITCH for EP 0x82 [ 148.350303][ T5339] usb 4-1: USB disconnect, device number 7 [ 148.606679][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1306'. [ 148.662413][ T4294] Bluetooth: hci4: command 0x0405 tx timeout [ 148.687625][ T7535] loop2: detected capacity change from 0 to 64 [ 148.690029][ T4366] udevd[4366]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.719293][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1306'. [ 148.765360][ T7529] device macvlan2 entered promiscuous mode [ 149.371574][ T7553] loop3: detected capacity change from 0 to 2048 [ 149.403195][ T7554] loop1: detected capacity change from 0 to 4096 [ 149.621929][ T7537] loop0: detected capacity change from 0 to 40427 [ 149.776789][ T7542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.358465][ T7537] F2FS-fs (loop0): Invalid log blocks per segment (4278190089) [ 150.378787][ T7537] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 150.418325][ T7537] F2FS-fs (loop0): invalid crc value [ 150.435486][ T7554] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 150.517744][ T7537] F2FS-fs (loop0): Found nat_bits in checkpoint [ 150.576971][ T7553] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.807609][ T7537] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 150.866449][ T7537] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 151.048792][ T5339] Bluetooth: hci0: command 0x080f tx timeout [ 151.124083][ T4189] attempt to access beyond end of device [ 151.124083][ T4189] loop0: rw=2049, want=45104, limit=40427 [ 151.402506][ T5339] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 151.435671][ T7581] siw: device registration error -23 [ 151.648781][ T5339] usb 2-1: Using ep0 maxpacket: 32 [ 151.653189][ T7569] loop3: detected capacity change from 0 to 32768 [ 151.769069][ T5339] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 151.796038][ T5339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.797908][ T5339] usb 2-1: config 0 descriptor?? [ 151.829152][ T7569] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1322 (7569) [ 151.830725][ T5339] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 151.849472][ T7569] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 151.849565][ T7569] BTRFS info (device loop3): using free space tree [ 151.849580][ T7569] BTRFS info (device loop3): has skinny extents [ 152.036580][ T7574] loop2: detected capacity change from 0 to 40427 [ 152.103045][ T7574] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 152.158242][ T7574] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 152.188959][ T7574] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 152.224433][ T7606] loop4: detected capacity change from 0 to 1024 [ 152.233280][ T7608] loop0: detected capacity change from 0 to 1024 [ 152.263510][ T7574] F2FS-fs (loop2): Found nat_bits in checkpoint [ 152.444390][ T7574] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 152.488938][ T5339] gspca_nw80x: reg_w err -71 [ 152.493752][ T5339] nw80x: probe of 2-1:0.0 failed with error -71 [ 152.514142][ T7569] BTRFS info (device loop3): enabling ssd optimizations [ 152.538805][ T7574] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 152.569848][ T5339] usb 2-1: USB disconnect, device number 10 [ 152.590692][ T4277] hfsplus: b-tree write err: -5, ino 4 [ 152.683523][ T7619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1334'. [ 152.960065][ T7624] sp0: Synchronizing with TNC [ 153.427491][ T7639] loop4: detected capacity change from 0 to 512 [ 153.546950][ T7639] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 153.598795][ T5348] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 153.699511][ T7639] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.815707][ T7653] EXT4-fs error (device loop4): ext4_get_first_dir_block:3597: inode #12: comm syz.4.1343: Attempting to read directory block (0) that is past i_size (3) [ 153.983714][ T5348] usb 4-1: config 0 interface 0 altsetting 96 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 154.003802][ T5348] usb 4-1: config 0 interface 0 altsetting 96 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 154.029122][ T7661] loop0: detected capacity change from 0 to 256 [ 154.047132][ T5348] usb 4-1: config 0 interface 0 has no altsetting 0 [ 154.055064][ T5348] usb 4-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 154.088325][ T7663] overlayfs: './file1' not a directory [ 154.115282][ T5348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.175179][ T5348] usb 4-1: config 0 descriptor?? [ 154.194006][ T7661] FAT-fs (loop0): Directory bread(block 64) failed [ 154.201263][ T7636] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 154.222006][ T7661] FAT-fs (loop0): Directory bread(block 65) failed [ 154.253612][ T7661] FAT-fs (loop0): Directory bread(block 66) failed [ 154.304319][ T7661] FAT-fs (loop0): Directory bread(block 67) failed [ 154.350795][ T7661] FAT-fs (loop0): Directory bread(block 68) failed [ 154.387465][ T7661] FAT-fs (loop0): Directory bread(block 69) failed [ 154.401211][ T7661] FAT-fs (loop0): Directory bread(block 70) failed [ 154.407867][ T7661] FAT-fs (loop0): Directory bread(block 71) failed [ 154.427694][ T7661] FAT-fs (loop0): Directory bread(block 72) failed [ 154.475898][ T7661] FAT-fs (loop0): Directory bread(block 73) failed [ 154.698461][ T5348] wacom 0003:056A:0333.0010: hidraw0: USB HID v0.01 Device [HID 056a:0333] on usb-dummy_hcd.3-1/input0 [ 154.753105][ T7681] loop2: detected capacity change from 0 to 512 [ 154.854177][ T7681] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 154.901656][ T4294] usb 4-1: USB disconnect, device number 8 [ 154.956425][ T7685] fido_id[7685]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 155.036198][ T7681] EXT4-fs (loop2): orphan cleanup on readonly fs [ 155.079781][ T7681] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.1359: iget: bad i_size value: 360287970189639680 [ 155.191293][ T7681] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1359: couldn't read orphan inode 15 (err -117) [ 155.272559][ T7681] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,barrier,nogrpid,max_dir_size_kb=0x0000000000001000,,errors=continue. Quota mode: writeback. [ 155.302825][ T7674] loop4: detected capacity change from 0 to 32768 [ 155.409413][ T7674] XFS: attr2 mount option is deprecated. [ 155.458727][ T7674] XFS: ikeep mount option is deprecated. [ 155.547214][ T7698] sp0: Synchronizing with TNC [ 155.565424][ T7686] loop1: detected capacity change from 0 to 32768 [ 155.574450][ T7697] [U] [ 155.676824][ T7701] loop0: detected capacity change from 0 to 2048 [ 155.787493][ T7674] XFS (loop4): Mounting V5 Filesystem [ 155.829264][ T7709] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.019780][ T7674] XFS (loop4): Ending clean mount [ 156.027467][ T7701] NILFS error (device loop0): nilfs_dotdot: directory #12 missing '..' [ 156.095725][ T7674] XFS (loop4): Quotacheck needed: Please wait. [ 156.111260][ T7701] Remounting filesystem read-only [ 156.296217][ T4189] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 156.341941][ T7674] XFS (loop4): Quotacheck: Done. [ 156.633993][ T4192] XFS (loop4): Unmounting Filesystem [ 156.788752][ T4270] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 157.192995][ T7721] loop3: detected capacity change from 0 to 40427 [ 157.247405][ T7746] device veth1_macvtap left promiscuous mode [ 157.269697][ T7746] device macsec0 entered promiscuous mode [ 157.313642][ T7749] device veth1_macvtap entered promiscuous mode [ 157.329256][ T7748] lo speed is unknown, defaulting to 1000 [ 157.347693][ T7721] F2FS-fs (loop3): invalid crc value [ 157.376348][ T4270] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.378313][ T7749] device macsec0 left promiscuous mode [ 157.396268][ T4270] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.403770][ T7748] lo speed is unknown, defaulting to 1000 [ 157.412905][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.457272][ T7721] F2FS-fs (loop3): Found nat_bits in checkpoint [ 157.475754][ T7748] lo speed is unknown, defaulting to 1000 [ 157.533225][ T4270] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 157.565024][ T4270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 157.575576][ T4270] usb 3-1: SerialNumber: syz [ 157.583484][ T7748] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 157.616517][ T7721] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 157.677949][ T7721] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 157.698291][ T7748] lo speed is unknown, defaulting to 1000 [ 157.750046][ T7748] lo speed is unknown, defaulting to 1000 [ 157.768313][ T7748] lo speed is unknown, defaulting to 1000 [ 157.776298][ T7748] lo speed is unknown, defaulting to 1000 [ 157.785482][ T7748] lo speed is unknown, defaulting to 1000 [ 157.842712][ T4183] attempt to access beyond end of device [ 157.842712][ T4183] loop3: rw=2049, want=45104, limit=40427 [ 157.924611][ T4270] usb 3-1: 0:2 : does not exist [ 157.979746][ T4270] usb 3-1: USB disconnect, device number 10 [ 158.156674][ T7777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1396'. [ 158.356921][ T4300] udevd[4300]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.624888][ T7792] siw: device registration error -23 [ 158.707634][ T6790] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 159.022582][ T7806] loop1: detected capacity change from 0 to 1024 [ 159.074995][ T6790] usb 5-1: Using ep0 maxpacket: 8 [ 159.264702][ T6790] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 159.275370][ T6790] usb 5-1: config 179 has no interface number 0 [ 159.295931][ T6790] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 159.329557][ T6790] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 159.361056][ T6790] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 159.385450][ T7820] loop2: detected capacity change from 0 to 4096 [ 159.388605][ T6790] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 159.442070][ T6790] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 159.474304][ T6790] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 159.500212][ T6790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.535436][ T7820] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 159.564784][ T7781] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 159.768732][ T5348] Bluetooth: hci0: command 0x080f tx timeout [ 159.809668][ T7781] udc-core: couldn't find an available UDC or it's busy [ 159.821831][ T7781] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 160.064859][ T4294] usb 5-1: USB disconnect, device number 10 [ 160.068697][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 160.080068][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 160.148373][ T7816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.684434][ T4196] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 160.914294][ T7833] loop2: detected capacity change from 0 to 16 [ 161.033474][ T7833] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 161.128057][ T7848] [U] v3f"S/4:XTzWtlW= [ 161.143004][ T7848] [U] J"e:" [ 161.229749][ T5348] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 161.392001][ T7855] loop3: detected capacity change from 0 to 64 [ 161.493990][ T5348] usb 2-1: Using ep0 maxpacket: 16 [ 161.524175][ T4270] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 161.599858][ T7865] netlink: 'syz.2.1438': attribute type 16 has an invalid length. [ 161.619012][ T5348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.665567][ T5348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.705652][ T5348] usb 2-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 161.717202][ T7867] [U] K#LɄR [ 161.731171][ T7866] [U] U [ 161.742815][ T5348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.753837][ T7869] loop2: detected capacity change from 0 to 256 [ 161.777011][ T5348] usb 2-1: config 0 descriptor?? [ 161.849161][ T7869] FAT-fs (loop2): Directory bread(block 64) failed [ 161.856843][ T7871] loop3: detected capacity change from 0 to 512 [ 161.857196][ T7869] FAT-fs (loop2): Directory bread(block 65) failed [ 161.888064][ T7869] FAT-fs (loop2): Directory bread(block 66) failed [ 161.896001][ T7869] FAT-fs (loop2): Directory bread(block 67) failed [ 161.908133][ T7869] FAT-fs (loop2): Directory bread(block 68) failed [ 161.915257][ T7869] FAT-fs (loop2): Directory bread(block 69) failed [ 161.927784][ T7869] FAT-fs (loop2): Directory bread(block 70) failed [ 161.951117][ T7869] FAT-fs (loop2): Directory bread(block 71) failed [ 161.957908][ T7869] FAT-fs (loop2): Directory bread(block 72) failed [ 161.967258][ T7869] FAT-fs (loop2): Directory bread(block 73) failed [ 162.048423][ T7871] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 162.073157][ T7871] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.124282][ T4270] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 162.139179][ T4270] usb 5-1: config 0 has no interface number 0 [ 162.145319][ T4270] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.204950][ T4270] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.228465][ T4270] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 162.253249][ T4270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.286065][ T4270] usb 5-1: config 0 descriptor?? [ 162.298264][ T5348] wacom 0003:056A:0318.0011: unbalanced collection at end of report description [ 162.359106][ T5348] wacom 0003:056A:0318.0011: parse failed [ 162.396437][ T5348] wacom: probe of 0003:056A:0318.0011 failed with error -22 [ 162.498679][ T5347] usb 2-1: USB disconnect, device number 11 [ 162.541833][ T7887] loop2: detected capacity change from 0 to 256 [ 162.582536][ T7890] loop3: detected capacity change from 0 to 64 [ 162.691973][ T26] audit: type=1800 audit(1754520704.910:85): pid=7890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1448" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 162.723969][ T7890] attempt to access beyond end of device [ 162.723969][ T7890] loop3: rw=34817, want=79, limit=64 [ 162.851609][ T4270] uclogic 0003:5543:0522.0012: No inputs registered, leaving [ 162.873461][ T4270] uclogic 0003:5543:0522.0012: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.4-1/input1 [ 163.111704][ T5218] usb 5-1: USB disconnect, device number 11 [ 163.539475][ T7913] loop3: detected capacity change from 0 to 64 [ 163.836143][ T7925] program syz.3.1463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.957824][ T7933] netlink: 'syz.0.1469': attribute type 10 has an invalid length. [ 164.030771][ T7935] sp0: Synchronizing with TNC [ 164.268766][ T7946] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 164.301695][ T7946] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 164.308182][ T7946] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 164.315843][ T7949] loop3: detected capacity change from 0 to 1024 [ 164.381864][ T7946] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 164.388353][ T7946] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 164.448625][ T7946] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 164.455211][ T7946] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 164.481752][ T7946] comedi comedi3: 8255: I/O port conflict (0xd,4) [ 164.488249][ T7946] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 164.566436][ T7946] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 164.573181][ T7946] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 164.595854][ T7946] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 164.628232][ T7953] loop4: detected capacity change from 0 to 8192 [ 164.634679][ T7946] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 164.685021][ T7946] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 164.699130][ T7946] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 164.706145][ T7946] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 164.732074][ T7946] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 164.768508][ T7946] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 164.794181][ T7953] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 164.809115][ T7953] REISERFS (device loop4): using ordered data mode [ 164.820392][ T7946] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 164.856084][ T7953] reiserfs: using flush barriers [ 164.908636][ T7946] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 164.915120][ T7946] comedi comedi3: 8255: I/O port conflict (0x2000e67,4) [ 164.944613][ T7953] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 165.003030][ T7946] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 165.006328][ T7953] REISERFS (device loop4): checking transaction log (loop4) [ 165.024675][ T7946] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 165.066224][ T7968] mkiss: ax0: crc mode is auto. [ 165.108027][ T7953] REISERFS (device loop4): Using r5 hash to sort names [ 165.175321][ T7953] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 165.247454][ T7947] loop0: detected capacity change from 0 to 32768 [ 165.255089][ T7953] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 165.318048][ T7953] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 165.689461][ T7979] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1492'. [ 165.713004][ T7966] loop3: detected capacity change from 0 to 32768 [ 165.754359][ T7981] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 165.804661][ T7981] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 165.838892][ T7981] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 165.845472][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1492'. [ 165.863281][ T7981] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 165.880814][ T7981] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 165.921805][ T7966] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 166.040828][ T7981] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 166.040869][ T7981] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 166.315663][ T4183] ocfs2: Unmounting device (7,3) on (node local) [ 166.688875][ T8017] loop2: detected capacity change from 0 to 256 [ 166.771615][ T8017] exfat: Deprecated parameter 'utf8' [ 166.778309][ T8017] exfat: Deprecated parameter 'namecase' [ 166.784066][ T8017] exfat: Deprecated parameter 'namecase' [ 166.802075][ T8017] exfat: Deprecated parameter 'utf8' [ 166.946191][ T8017] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 167.238663][ T8041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1519'. [ 167.247575][ T8041] netlink: 'syz.1.1519': attribute type 6 has an invalid length. [ 167.657250][ T8051] loop1: detected capacity change from 0 to 512 [ 167.728773][ T8002] loop3: detected capacity change from 0 to 32768 [ 167.860285][ T8051] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.1524: casefold flag without casefold feature [ 167.911863][ T8051] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1524: couldn't read orphan inode 15 (err -117) [ 167.967304][ T8051] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 168.221138][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.430442][ T8049] loop4: detected capacity change from 0 to 32768 [ 169.449494][ T5347] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 169.685389][ T8100] loop2: detected capacity change from 0 to 256 [ 169.698702][ T5344] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 169.708930][ T5347] usb 2-1: Using ep0 maxpacket: 8 [ 169.832751][ T5347] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.859708][ T5347] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.877591][ T5347] usb 2-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 169.904250][ T5347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.957111][ T5347] usb 2-1: config 0 descriptor?? [ 170.059988][ T5344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.073394][ T5344] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.092805][ T5344] usb 4-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 170.103422][ T5344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.138026][ T5344] usb 4-1: config 0 descriptor?? [ 170.417461][ T8127] loop4: detected capacity change from 0 to 16 [ 170.440349][ T5347] cherry 0003:046A:0027.0013: unknown main item tag 0x3 [ 170.460972][ T5347] cherry 0003:046A:0027.0013: unknown main item tag 0x2 [ 170.478356][ T5347] cherry 0003:046A:0027.0013: unknown main item tag 0x7 [ 170.497673][ T5347] cherry 0003:046A:0027.0013: unknown global tag 0xd [ 170.514933][ T8127] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 170.523507][ T5347] cherry 0003:046A:0027.0013: item 0 1 1 13 parsing failed [ 170.542418][ T5347] cherry: probe of 0003:046A:0027.0013 failed with error -22 [ 170.640584][ T5344] ortek 0003:1223:3F07.0014: unknown main item tag 0x6 [ 170.666420][ T5344] ortek 0003:1223:3F07.0014: bogus close delimiter [ 170.707905][ T5344] ortek 0003:1223:3F07.0014: item 0 0 2 10 parsing failed [ 170.752076][ T8134] loop0: detected capacity change from 0 to 8192 [ 170.756577][ T5344] ortek: probe of 0003:1223:3F07.0014 failed with error -22 [ 170.791175][ T5344] usb 2-1: USB disconnect, device number 12 [ 170.893698][ T8134] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 170.930426][ T4228] usb 4-1: USB disconnect, device number 9 [ 170.963275][ T8134] REISERFS (device loop0): using ordered data mode [ 170.985256][ T8134] reiserfs: using flush barriers [ 171.022429][ T8134] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 171.041316][ T8134] REISERFS (device loop0): checking transaction log (loop0) [ 171.067896][ T8134] REISERFS (device loop0): Using r5 hash to sort names [ 171.089147][ T8134] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 171.102006][ T8144] loop4: detected capacity change from 0 to 256 [ 171.579090][ T8151] loop4: detected capacity change from 0 to 512 [ 171.667003][ T8159] loop1: detected capacity change from 0 to 4096 [ 171.705948][ T8151] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 171.800590][ T8151] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 171.846703][ T8170] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.929673][ T8151] EXT4-fs (loop4): 1 truncate cleaned up [ 171.937024][ T8151] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,lazytime,quota,quota,,errors=continue. Quota mode: writeback. [ 171.944759][ T8159] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 172.034703][ T8159] Remounting filesystem read-only [ 172.168390][ T8172] loop3: detected capacity change from 0 to 16 [ 172.287311][ T8172] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 172.433279][ T8183] loop0: detected capacity change from 0 to 4096 [ 172.472600][ T8183] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 172.556382][ T4228] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 173.055872][ T4228] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 173.078592][ T4228] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 173.088277][ T4228] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 173.276195][ T4228] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 173.285285][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 173.301509][ T8180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.309666][ T4228] usb 3-1: SerialNumber: syz [ 173.543000][ T8191] loop4: detected capacity change from 0 to 256 [ 173.576848][ T8191] exfat: Deprecated parameter 'utf8' [ 173.595252][ T8191] exfat: Deprecated parameter 'namecase' [ 173.626800][ T8191] exfat: Deprecated parameter 'namecase' [ 173.641834][ T8191] exfat: Deprecated parameter 'utf8' [ 173.649908][ T4228] usbtest 3-1:1.0: Linux user mode ISO test driver [ 173.656450][ T4228] usbtest 3-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 173.784263][ T4228] usb 3-1: USB disconnect, device number 11 [ 174.136748][ T8199] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1592'. [ 174.151702][ T8191] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 174.449066][ T8208] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1598'. [ 174.509928][ T8214] netlink: 'syz.4.1597': attribute type 3 has an invalid length. [ 174.612880][ T8220] loop2: detected capacity change from 0 to 512 [ 174.680535][ T8227] loop0: detected capacity change from 0 to 8 [ 174.686896][ T8226] loop4: detected capacity change from 0 to 128 [ 174.733261][ T8220] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 174.842082][ T8226] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 174.872318][ T8226] ext4 filesystem being mounted at /305/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.897112][ T8233] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma? [ 174.949259][ T8220] EXT4-fs (loop2): 1 truncate cleaned up [ 174.954986][ T8220] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nobarrier,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,block_validity,dioread_lock,. Quota mode: none. [ 175.008658][ T8226] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #2: comm syz.4.1605: Directory block failed checksum [ 175.471840][ T8250] loop4: detected capacity change from 0 to 256 [ 175.551006][ T8252] loop3: detected capacity change from 0 to 4096 [ 175.653046][ T8252] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 175.668848][ T4196] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /384/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 175.691065][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.797128][ T8252] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 175.808111][ T4196] EXT4-fs (loop2): Remounting filesystem read-only [ 175.863492][ T4196] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 175.900669][ T5344] Bluetooth: hci0: command 0x0406 tx timeout [ 175.912666][ T5344] Bluetooth: hci1: command 0x0406 tx timeout [ 175.954856][ T5344] Bluetooth: hci2: command 0x0406 tx timeout [ 175.999421][ T5344] Bluetooth: hci3: command 0x0406 tx timeout [ 176.034232][ T8274] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1629'. [ 176.038763][ T4196] EXT4-fs (loop2): Remounting filesystem read-only [ 176.111314][ T4196] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /384/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 176.264040][ T4196] EXT4-fs (loop2): Remounting filesystem read-only [ 176.358910][ T4196] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 176.444587][ T4196] EXT4-fs (loop2): Remounting filesystem read-only [ 176.490139][ T4196] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /384/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 176.584363][ T4196] EXT4-fs (loop2): Remounting filesystem read-only [ 176.625565][ T4196] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 176.677832][ T4196] EXT4-fs (loop2): Remounting filesystem read-only [ 176.688391][ T4196] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /384/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 176.710102][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.787710][ T4196] EXT4-fs (loop2): Remounting filesystem read-only [ 176.807528][ T4196] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 176.881104][ T4270] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 176.906972][ T4196] EXT4-fs (loop2): Remounting filesystem read-only [ 176.919032][ T4196] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /384/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 176.940511][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.954920][ T8309] loop1: detected capacity change from 0 to 2048 [ 177.024355][ T4196] EXT4-fs (loop2): Remounting filesystem read-only [ 177.054244][ T4196] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 177.073827][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.086846][ T8311] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.151657][ T4196] EXT4-fs (loop2): Remounting filesystem read-only [ 177.425030][ T4270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.438691][ T4270] usb 4-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.00 [ 177.447776][ T4270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.492673][ T4270] usb 4-1: config 0 descriptor?? [ 177.806097][ T8305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.019507][ T4270] thrustmaster 0003:044F:B300.0015: unbalanced delimiter at end of report description [ 178.029571][ T4270] thrustmaster 0003:044F:B300.0015: parse failed [ 178.035915][ T4270] thrustmaster: probe of 0003:044F:B300.0015 failed with error -22 [ 178.386391][ T4270] usb 4-1: USB disconnect, device number 10 [ 178.616409][ T8320] loop0: detected capacity change from 0 to 512 [ 178.673330][ T8320] EXT4-fs (loop0): Ignoring removed bh option [ 178.796687][ T8321] loop4: detected capacity change from 0 to 4096 [ 178.828758][ T8320] EXT4-fs (loop0): mounted filesystem without journal. Opts: bh,journal_dev=0x0000000000000007,noload,,errors=continue. Quota mode: writeback. [ 178.843709][ T8320] ext4 filesystem being mounted at /317/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 178.958814][ T8330] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1648: bg 0: block 145: padding at end of block bitmap is not set [ 178.967680][ T8321] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 179.254926][ T4192] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 179.343713][ T5877] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.609740][ T5877] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.794312][ T5877] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.910357][ T5877] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.962551][ T8348] lo speed is unknown, defaulting to 1000 [ 180.159806][ T8353] loop1: detected capacity change from 0 to 1024 [ 180.548259][ T8348] chnl_net:caif_netlink_parms(): no params data found [ 181.046100][ T8369] loop0: detected capacity change from 0 to 32768 [ 181.110566][ T8375] loop1: detected capacity change from 0 to 64 [ 181.125332][ T8369] gfs2: fsid=#vS^Ѱ~o$: Trying to join cluster "lock_nolock", "#vS^Ѱ~o$" [ 181.136364][ T8369] gfs2: fsid=#vS^Ѱ~o$: Now mounting FS (format 1801)... [ 181.178322][ T6790] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 181.203557][ T8369] gfs2: fsid=#vS^Ѱ~o$.s: fatal: filesystem consistency error [ 181.203557][ T8369] inode = 1 19 [ 181.203557][ T8369] function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 115 [ 181.223540][ T8369] gfs2: fsid=#vS^Ѱ~o$.s: about to withdraw this file system [ 181.233134][ T8369] gfs2: fsid=#vS^Ѱ~o$.s: Journal recovery skipped for jid 0 until next mount. [ 181.243331][ T8369] gfs2: fsid=#vS^Ѱ~o$.s: Glock dequeues delayed: 0 [ 181.252269][ T8369] gfs2: fsid=#vS^Ѱ~o$.s: File system withdrawn [ 181.259792][ T8369] CPU: 0 PID: 8369 Comm: syz.0.1669 Not tainted 5.15.189-syzkaller #0 [ 181.267958][ T8369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 181.278043][ T8369] Call Trace: [ 181.281339][ T8369] [ 181.284294][ T8369] dump_stack_lvl+0x168/0x230 [ 181.288999][ T8369] ? kobject_uevent_env+0x371/0x890 [ 181.294209][ T8369] ? show_regs_print_info+0x20/0x20 [ 181.299418][ T8369] ? load_image+0x3b0/0x3b0 [ 181.303958][ T8369] ? kobject_uevent_env+0x371/0x890 [ 181.308813][ T26] audit: type=1800 audit(1754520723.500:86): pid=8375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1670" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 181.309170][ T8369] gfs2_withdraw+0x111b/0x1460 [ 181.334259][ T8369] ? gfs2_lm+0x220/0x220 [ 181.338522][ T8369] ? _raw_spin_unlock+0x24/0x40 [ 181.343390][ T8369] ? gfs2_glock_nq+0xcb0/0x1550 [ 181.348257][ T8369] ? gfs2_consist_inode_i+0xc0/0xe0 [ 181.353463][ T8369] gfs2_jdesc_check+0x137/0x290 [ 181.358326][ T8369] check_journal_clean+0x151/0x300 [ 181.363454][ T8369] ? gfs2_trans_remove_revoke+0x370/0x370 [ 181.369217][ T8369] ? check_journal_clean+0x10d/0x300 [ 181.374514][ T8369] ? __rwlock_init+0x140/0x140 [ 181.379298][ T8369] ? do_raw_spin_unlock+0x11d/0x230 [ 181.384509][ T8369] ? _raw_spin_unlock+0x24/0x40 [ 181.389375][ T8369] ? gfs2_jdesc_find+0xa7/0xc0 [ 181.394158][ T8369] init_journal+0x179c/0x2220 [ 181.398884][ T8369] ? end_bio_io_page+0x100/0x100 [ 181.403837][ T8369] ? vsnprintf+0x1905/0x1a00 [ 181.408455][ T8369] ? snprintf+0xd7/0x120 [ 181.412720][ T8369] ? init_journal+0x710/0x2220 [ 181.417499][ T8369] ? vscnprintf+0x80/0x80 [ 181.421901][ T8369] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 181.427034][ T8369] init_inodes+0xdb/0x320 [ 181.431471][ T8369] gfs2_fill_super+0x1701/0x1f50 [ 181.436440][ T8369] ? gfs2_reconfigure+0xcd0/0xcd0 [ 181.441490][ T8369] ? gfs2_glock_nq_num+0x82/0x1b0 [ 181.446528][ T8369] ? preempt_count_add+0x8d/0x190 [ 181.451583][ T8369] ? sb_set_blocksize+0xa5/0xe0 [ 181.456450][ T8369] get_tree_bdev+0x3f1/0x610 [ 181.461052][ T8369] ? gfs2_reconfigure+0xcd0/0xcd0 [ 181.466091][ T8369] gfs2_get_tree+0x4d/0x1e0 [ 181.470608][ T8369] vfs_get_tree+0x88/0x270 [ 181.475045][ T8369] do_new_mount+0x24a/0xa40 [ 181.479564][ T8369] __se_sys_mount+0x2d6/0x3c0 [ 181.481974][ T8366] loop4: detected capacity change from 0 to 32768 [ 181.484252][ T8369] ? __x64_sys_mount+0xc0/0xc0 [ 181.484281][ T8369] ? lockdep_hardirqs_on+0x94/0x140 [ 181.500599][ T8369] ? __x64_sys_mount+0x1c/0xc0 [ 181.505380][ T8369] do_syscall_64+0x4c/0xa0 [ 181.509812][ T8369] ? clear_bhb_loop+0x30/0x80 [ 181.514596][ T8369] ? clear_bhb_loop+0x30/0x80 [ 181.519289][ T8369] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.525208][ T8369] RIP: 0033:0x7f4a1fe3038a [ 181.529663][ T8369] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.549303][ T8369] RSP: 002b:00007f4a1e095e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 181.557731][ T8369] RAX: ffffffffffffffda RBX: 00007f4a1e095ef0 RCX: 00007f4a1fe3038a [ 181.565805][ T8369] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f4a1e095eb0 [ 181.573793][ T8369] RBP: 0000200000000400 R08: 00007f4a1e095ef0 R09: 0000000000200001 [ 181.581777][ T8369] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 181.589766][ T8369] R13: 00007f4a1e095eb0 R14: 00000000000125bb R15: 0000200000000f00 [ 181.597762][ T8369] [ 181.600932][ T8369] gfs2: fsid=#vS^Ѱ~o$.s: Error checking journal for spectator mount. [ 181.693388][ T8348] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.773154][ T8348] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.817358][ T8384] loop1: detected capacity change from 0 to 256 [ 181.835111][ T8348] device bridge_slave_0 entered promiscuous mode [ 181.900418][ T8348] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.928369][ T8348] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.936502][ T5344] Bluetooth: hci4: command 0x0409 tx timeout [ 181.992768][ T8348] device bridge_slave_1 entered promiscuous mode [ 182.015291][ T6790] usb 4-1: Using ep0 maxpacket: 8 [ 182.197450][ T6790] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.217287][ T8391] loop1: detected capacity change from 0 to 8 [ 182.228122][ T8391] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 182.251519][ T6790] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 182.264178][ T5499] udevd[5499]: incorrect cramfs checksum on /dev/loop1 [ 182.295971][ T6790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.306427][ T8348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.320458][ T6790] usb 4-1: config 0 descriptor?? [ 182.363637][ T5499] udevd[5499]: incorrect cramfs checksum on /dev/loop1 [ 182.439088][ T8348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.542143][ T8348] team0: Port device team_slave_0 added [ 182.542290][ T8393] loop0: detected capacity change from 0 to 8192 [ 182.649081][ T8348] team0: Port device team_slave_1 added [ 182.726245][ T8348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.743653][ T8348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.838238][ T8393] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 182.859761][ T6790] kye 0003:0458:4018.0016: unbalanced delimiter at end of report description [ 182.869511][ T8393] REISERFS (device loop0): using ordered data mode [ 182.876108][ T8393] reiserfs: using flush barriers [ 182.888198][ T8348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.913624][ T6790] kye 0003:0458:4018.0016: parse failed [ 182.919915][ T8348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.929087][ T8393] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 182.946605][ T8393] REISERFS (device loop0): checking transaction log (loop0) [ 182.955598][ T8393] REISERFS (device loop0): Using r5 hash to sort names [ 182.960884][ T8348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.965565][ T8393] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 182.993122][ T6790] kye: probe of 0003:0458:4018.0016 failed with error -22 [ 183.016842][ T8393] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 183.047288][ T8348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.120753][ T6790] usb 4-1: USB disconnect, device number 11 [ 183.221712][ T8393] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 183.281884][ T8348] device hsr_slave_0 entered promiscuous mode [ 183.302508][ T8393] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 183.325384][ T8348] device hsr_slave_1 entered promiscuous mode [ 183.341747][ T8348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.371326][ T8348] Cannot create hsr debugfs directory [ 183.373998][ T8393] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 183.435918][ T5218] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 183.946791][ T8415] loop0: detected capacity change from 0 to 512 [ 183.978636][ T5218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.011338][ T5218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.013206][ T5338] Bluetooth: hci4: command 0x041b tx timeout [ 184.054337][ T8418] loop4: detected capacity change from 0 to 164 [ 184.056275][ T5218] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 184.112847][ T5218] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.113304][ T8412] loop3: detected capacity change from 0 to 4096 [ 184.139011][ T5218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.205142][ T5218] usb 2-1: config 0 descriptor?? [ 184.304693][ T8415] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.1679: bad orphan inode 11862016 [ 184.328162][ T8348] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 184.408132][ T8412] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 184.411744][ T8415] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 184.517629][ T8415] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.595778][ T8348] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 184.639616][ T8348] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 184.736718][ T5218] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 184.814873][ T5877] device hsr_slave_0 left promiscuous mode [ 184.859332][ T5218] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 184.884413][ T5877] device hsr_slave_1 left promiscuous mode [ 184.986289][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.007007][ T5218] usb 2-1: USB disconnect, device number 13 [ 185.030108][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.093353][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.122098][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.163015][ T5877] device bridge_slave_1 left promiscuous mode [ 185.181260][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.256248][ T8445] fido_id[8445]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 185.319665][ T5877] device bridge_slave_0 left promiscuous mode [ 185.339696][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.473638][ T5877] device bridge0 left promiscuous mode [ 185.516470][ T5877] device veth1_macvtap left promiscuous mode [ 185.523596][ T5877] device veth0_macvtap left promiscuous mode [ 185.533514][ T5877] device veth1_vlan left promiscuous mode [ 185.545003][ T5877] device veth0_vlan left promiscuous mode [ 185.873672][ T5877] team0 (unregistering): Port device team_slave_1 removed [ 185.915112][ T5877] team0 (unregistering): Port device team_slave_0 removed [ 185.940995][ T5877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.968043][ T5877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.108786][ T5344] Bluetooth: hci4: command 0x040f tx timeout [ 186.135907][ T5877] bond0 (unregistering): Released all slaves [ 186.243975][ T8348] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 186.609805][ T8463] loop4: detected capacity change from 0 to 1024 [ 186.657128][ T8348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.726384][ T8463] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 186.764115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.811213][ T8463] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 186.834928][ T8477] loop0: detected capacity change from 0 to 64 [ 186.861785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.918786][ T8463] System zones: 0-1, 3-36 [ 186.924178][ T8463] EXT4-fs (loop4): orphan cleanup on readonly fs [ 186.971035][ T8348] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.032525][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.073583][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.115149][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.122305][ T4277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.132867][ T8463] EXT4-fs (loop4): 1 orphan inode deleted [ 187.165608][ T8463] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 187.214862][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.237202][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.266528][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.336510][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.343671][ T4277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.364852][ T8492] loop0: detected capacity change from 0 to 512 [ 187.467638][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.489073][ T8492] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 187.561073][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.619213][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.658062][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.668226][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.677284][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.686693][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.728293][ T8348] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 187.771977][ T8492] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 187.780829][ T8348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.854466][ T8492] EXT4-fs (loop0): 1 truncate cleaned up [ 187.889116][ T8492] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,lazytime,quota,quota,,errors=continue. Quota mode: writeback. [ 187.934139][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.965675][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.993498][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.043600][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.066481][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.151492][ T8509] loop1: detected capacity change from 0 to 2048 [ 188.169718][ T5345] Bluetooth: hci4: command 0x0419 tx timeout [ 188.623875][ T8509] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.763258][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.773641][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.824705][ T8348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.911941][ T8532] loop3: detected capacity change from 0 to 4096 [ 189.461081][ T8548] netlink: 'syz.1.1716': attribute type 2 has an invalid length. [ 189.696336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 189.714405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 189.718914][ T8556] loop1: detected capacity change from 0 to 512 [ 189.755632][ T8552] loop3: detected capacity change from 0 to 4096 [ 189.862277][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 189.884677][ T8526] loop0: detected capacity change from 0 to 32768 [ 189.908192][ T8556] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 189.929035][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 189.962030][ T8348] device veth0_vlan entered promiscuous mode [ 189.983844][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.023431][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 190.054754][ T8552] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 190.081143][ T8348] device veth1_vlan entered promiscuous mode [ 190.096987][ T8552] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 190.165816][ T8556] EXT4-fs (loop1): 1 truncate cleaned up [ 190.181546][ T8552] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 190.222831][ T8556] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nobarrier,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,block_validity,dioread_lock,. Quota mode: none. [ 190.257165][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 190.265686][ T8552] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 190.295094][ T8552] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 190.325827][ T8526] XFS (loop0): Mounting V5 Filesystem [ 190.387901][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 190.432279][ T8552] ntfs: volume version 3.1. [ 190.516624][ T4184] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /367/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 190.557306][ T8348] device veth0_macvtap entered promiscuous mode [ 190.592456][ T8348] device veth1_macvtap entered promiscuous mode [ 190.599860][ T8526] XFS (loop0): Ending clean mount [ 190.610929][ T4184] EXT4-fs (loop1): Remounting filesystem read-only [ 190.638063][ T8526] XFS (loop0): Quotacheck needed: Please wait. [ 190.645269][ T4184] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 190.674046][ T8552] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 190.748977][ T4184] EXT4-fs (loop1): Remounting filesystem read-only [ 190.749176][ T8552] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 190.787386][ T4184] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /367/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 190.815170][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.819623][ T8552] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 190.856174][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.901219][ T8526] XFS (loop0): Quotacheck: Done. [ 190.908650][ T8552] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 190.916012][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.944711][ T4184] EXT4-fs (loop1): Remounting filesystem read-only [ 190.955151][ T4184] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 190.968680][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.022861][ T8552] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 191.037826][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.057490][ T4184] EXT4-fs (loop1): Remounting filesystem read-only [ 191.073727][ T4184] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /367/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 191.089932][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.157414][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.183254][ T4184] EXT4-fs (loop1): Remounting filesystem read-only [ 191.192496][ T4184] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 191.198612][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.276093][ T4184] EXT4-fs (loop1): Remounting filesystem read-only [ 191.287881][ T4184] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /367/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 191.289592][ T8348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.375087][ T4184] EXT4-fs (loop1): Remounting filesystem read-only [ 191.384359][ T4184] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 191.404366][ T4189] XFS (loop0): Unmounting Filesystem [ 191.519499][ T4184] EXT4-fs (loop1): Remounting filesystem read-only [ 191.526493][ T4184] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /367/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 191.583260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 191.605312][ T8594] siw: device registration error -23 [ 191.632582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 191.645632][ T4184] EXT4-fs (loop1): Remounting filesystem read-only [ 191.652603][ T4184] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 191.656390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 191.771333][ T4184] EXT4-fs (loop1): Remounting filesystem read-only [ 191.792753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.822102][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.869578][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.880853][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.897184][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.916421][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.927402][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.969571][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.005723][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.018216][ T8348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.046593][ T8348] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.066460][ T8348] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.090275][ T8348] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.116435][ T8348] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.194460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.245265][ T4270] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 192.253665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.523146][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.547597][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.635021][ T4270] usb 4-1: Using ep0 maxpacket: 8 [ 192.666778][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 192.689839][ T1208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.748647][ T1208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.771781][ T8609] loop0: detected capacity change from 0 to 164 [ 192.852708][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 192.896421][ T4270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.914068][ T4270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.970754][ T4270] usb 4-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 192.983846][ T4270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.051135][ T4270] usb 4-1: config 0 descriptor?? [ 193.395582][ T5877] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.510047][ T5877] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.557731][ T8630] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1739'. [ 193.596012][ T4270] cherry 0003:046A:0027.0018: unknown main item tag 0x3 [ 193.628605][ T4270] cherry 0003:046A:0027.0018: unknown main item tag 0x2 [ 193.638613][ T4270] cherry 0003:046A:0027.0018: unknown main item tag 0x7 [ 193.645601][ T4270] cherry 0003:046A:0027.0018: unknown global tag 0xd [ 193.708052][ T4270] cherry 0003:046A:0027.0018: item 0 1 1 13 parsing failed [ 193.735623][ T4270] cherry: probe of 0003:046A:0027.0018 failed with error -22 [ 193.847998][ T8636] binder: 8634:8636 ioctl c00c620f 200000000180 returned -22 [ 193.880940][ T5877] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.921997][ T4270] usb 4-1: USB disconnect, device number 12 [ 194.026913][ T8638] lo speed is unknown, defaulting to 1000 [ 194.084582][ T8647] mmap: syz.5.1744 (8647) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 194.169800][ T5877] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.281026][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.287410][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.449552][ T8656] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1749'. [ 194.505050][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1749'. [ 194.631225][ T8638] chnl_net:caif_netlink_parms(): no params data found [ 194.633340][ T8670] MPTCP: kernel_bind error, err=-99 [ 194.858700][ T8677] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1754'. [ 194.901966][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1758'. [ 194.953830][ T5877] tipc: Disabling bearer [ 194.984509][ T5877] tipc: Disabling bearer [ 195.005534][ T5877] tipc: Left network mode [ 195.317553][ T8638] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.339803][ T8638] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.377533][ T8638] device bridge_slave_0 entered promiscuous mode [ 195.459969][ T8712] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 195.449588][ T8638] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.524618][ T8714] loop3: detected capacity change from 0 to 512 [ 195.532954][ T8712] CUSE: unknown device info "3ܟ,̘" [ 195.578741][ T8712] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 195.578741][ T8712] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 195.606528][ T8638] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.632562][ T8638] device bridge_slave_1 entered promiscuous mode [ 195.661420][ T8714] EXT4-fs (loop3): Test dummy encryption mode enabled [ 195.723012][ T8712] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 195.746368][ T8714] EXT4-fs error (device loop3): __ext4_iget:4894: inode #11: block 1: comm syz.3.1767: invalid block [ 195.790620][ T8679] loop5: detected capacity change from 0 to 32768 [ 195.813132][ T8717] loop0: detected capacity change from 0 to 4096 [ 195.820214][ T8714] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1767: couldn't read orphan inode 11 (err -117) [ 195.877106][ T8712] CUSE: DEVNAME unspecified [ 195.890230][ T8638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.957447][ T8638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.003043][ T8717] __ntfs_error: 6 callbacks suppressed [ 196.003062][ T8717] ntfs: (device loop0): parse_options(): NLS character set cpS not found. Using previous one iso8859-2. [ 196.020038][ T5347] Bluetooth: hci0: command 0x0409 tx timeout [ 196.026747][ T8714] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,dioread_lock,max_dir_size_kb=0x0000000000000004,auto_da_alloc=0x0000000000000265,nodiscard,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 196.082591][ T8679] JBD2: Ignoring recovery information on journal [ 196.242179][ T8717] ntfs: volume version 3.1. [ 196.314392][ T8638] team0: Port device team_slave_0 added [ 196.357827][ T8638] team0: Port device team_slave_1 added [ 196.388987][ T8679] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 196.524769][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1772'. [ 196.544803][ T8679] (syz.5.1756,8679,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 196.556075][ T8731] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1772'. [ 196.594230][ T8679] (syz.5.1756,8679,0):update_backups:188 ERROR: status = -12 [ 196.634891][ T8736] loop3: detected capacity change from 0 to 64 [ 196.655899][ T8679] ocfs2: Failed to update super blocks on 7,5 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 196.716575][ T8638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.734149][ T8638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.883196][ T8638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.925368][ T8348] ocfs2: Unmounting device (7,5) on (node local) [ 196.999006][ T8638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.016331][ T8638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.150774][ T8750] loop3: detected capacity change from 0 to 512 [ 197.187237][ T8638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.228450][ T8750] EXT4-fs (loop3): Ignoring removed bh option [ 197.330029][ T8750] EXT4-fs (loop3): mounted filesystem without journal. Opts: bh,journal_dev=0x0000000000000007,noload,,errors=continue. Quota mode: writeback. [ 197.355867][ T8750] ext4 filesystem being mounted at /306/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 197.491217][ T8638] device hsr_slave_0 entered promiscuous mode [ 197.516627][ T8775] loop4: detected capacity change from 0 to 512 [ 197.556607][ T8772] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1778: bg 0: block 145: padding at end of block bitmap is not set [ 197.575254][ T8638] device hsr_slave_1 entered promiscuous mode [ 197.582150][ T8638] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.608674][ T8638] Cannot create hsr debugfs directory [ 197.851524][ T4277] wlan1: Trigger new scan to find an IBSS to join [ 197.925504][ T8775] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 198.017176][ T8775] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.089482][ T4294] Bluetooth: hci0: command 0x041b tx timeout [ 198.180806][ T8792] CUSE: unknown device info "" [ 198.206113][ T8792] CUSE: zero length info key specified [ 198.281746][ T8638] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 198.450839][ T4294] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 198.467172][ T8638] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 198.534736][ T8638] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 198.599296][ T8638] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 198.650417][ T8771] loop0: detected capacity change from 0 to 32768 [ 198.717940][ T5877] device hsr_slave_0 left promiscuous mode [ 198.725647][ T5877] device hsr_slave_1 left promiscuous mode [ 198.731970][ T4294] usb 6-1: Using ep0 maxpacket: 16 [ 198.763014][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.779089][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.804995][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.830697][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.849657][ T5877] device bridge_slave_1 left promiscuous mode [ 198.873224][ T4294] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.875518][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.904302][ T4294] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.929688][ T5877] device bridge_slave_0 left promiscuous mode [ 198.945006][ T4294] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 198.949117][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.963755][ T4294] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.986975][ T4294] usb 6-1: config 0 descriptor?? [ 199.055792][ T5877] device veth1_macvtap left promiscuous mode [ 199.066699][ T5877] device veth0_macvtap left promiscuous mode [ 199.091704][ T5877] device veth1_vlan left promiscuous mode [ 199.107183][ T5877] device veth0_vlan left promiscuous mode [ 199.461982][ T4294] hid-multitouch 0003:1FD2:6007.0019: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 199.513348][ T5347] infiniband syz2: ib_query_port failed (-19) [ 199.681587][ T5348] usb 6-1: USB disconnect, device number 2 [ 199.894397][ T5877] team0 (unregistering): Port device team_slave_1 removed [ 199.944952][ T5877] team0 (unregistering): Port device team_slave_0 removed [ 199.999054][ T5877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.038856][ T5877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.179409][ T4294] Bluetooth: hci0: command 0x040f tx timeout [ 200.275512][ T8814] loop5: detected capacity change from 0 to 512 [ 200.344413][ T5877] bond0 (unregistering): Released all slaves [ 200.350730][ T8814] EXT4-fs (loop5): Ignoring removed bh option [ 200.445345][ T8814] EXT4-fs (loop5): mounted filesystem without journal. Opts: bh,journal_dev=0x0000000000000007,noload,,errors=continue. Quota mode: writeback. [ 200.492681][ T8814] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.675038][ T8814] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1797: bg 0: block 145: padding at end of block bitmap is not set [ 200.707988][ T8830] loop4: detected capacity change from 0 to 16 [ 200.786089][ T8830] erofs: (device loop4): mounted with root inode @ nid 36. [ 200.915338][ T8638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.947046][ T8840] loop3: detected capacity change from 0 to 256 [ 200.956497][ T8638] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.996519][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.004539][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.045737][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.108810][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.126025][ T8840] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 201.129295][ T3082] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.145183][ T3082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.218578][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.253252][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.269235][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.326127][ T8517] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.333283][ T8517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.371925][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.395080][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.442314][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.470645][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.539796][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.565955][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.590406][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.645560][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.683734][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.742931][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.789323][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.808573][ T8638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 202.174296][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 202.195792][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 202.254269][ T4294] Bluetooth: hci0: command 0x0419 tx timeout [ 202.269111][ T5338] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 202.288213][ T8638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.362657][ T8858] loop4: detected capacity change from 0 to 32768 [ 202.613372][ C0] ================================================================== [ 202.622210][ C0] BUG: KASAN: use-after-free in __nft_trace_packet+0x135/0x150 [ 202.629782][ C0] Read of size 2 at addr ffff88801e3dd940 by task ksoftirqd/0/14 [ 202.637510][ C0] [ 202.639845][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted 5.15.189-syzkaller #0 [ 202.647919][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 202.656658][ T5338] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 202.658077][ C0] Call Trace: [ 202.669352][ C0] [ 202.672312][ C0] dump_stack_lvl+0x168/0x230 [ 202.677013][ C0] ? show_regs_print_info+0x20/0x20 [ 202.682224][ C0] ? _printk+0xcc/0x110 [ 202.683886][ T5338] usb 4-1: config 0 has no interface number 0 [ 202.686399][ C0] ? __nft_trace_packet+0x135/0x150 [ 202.686430][ C0] ? load_image+0x3b0/0x3b0 [ 202.686452][ C0] ? nft_synproxy_do_eval+0x341/0x570 [ 202.707573][ C0] print_address_description+0x60/0x2d0 [ 202.713325][ C0] ? __nft_trace_packet+0x135/0x150 [ 202.718535][ C0] kasan_report+0xdf/0x130 [ 202.720283][ T5338] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 202.722961][ C0] ? __nft_trace_packet+0x135/0x150 [ 202.722989][ C0] __nft_trace_packet+0x135/0x150 [ 202.742268][ C0] nft_do_chain+0x120e/0x1420 [ 202.747068][ C0] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 202.752983][ C0] ? tcp_conn_schedule+0x459/0x800 [ 202.758126][ C0] ? ip_vs_in+0xb46/0x1c20 [ 202.762550][ C0] ? nf_nat_inet_fn+0x84e/0xa90 [ 202.767422][ C0] ? nf_nat_packet+0xf0/0xf0 [ 202.772028][ C0] nft_do_chain_inet+0x22b/0x300 [ 202.776986][ C0] ? nft_do_chain_arp+0xe0/0xe0 [ 202.779141][ T5338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.781860][ C0] ? nf_nat_ipv4_local_in+0x209/0x5b0 [ 202.795180][ C0] ? nft_do_chain_arp+0xe0/0xe0 [ 202.800041][ C0] nf_hook_slow+0xb9/0x200 [ 202.804465][ C0] ? NF_HOOK+0x360/0x360 [ 202.808727][ C0] NF_HOOK+0x1cb/0x360 [ 202.808987][ T4277] wlan1: Trigger new scan to find an IBSS to join [ 202.812813][ C0] ? NF_HOOK+0x360/0x360 [ 202.812835][ C0] ? ip_local_deliver+0x1a0/0x1a0 [ 202.812852][ C0] ? ip_rcv_finish_core+0xd8b/0x1bc0 [ 202.812875][ C0] ? NF_HOOK+0x360/0x360 [ 202.828045][ T5338] usb 4-1: config 0 descriptor?? [ 202.828516][ C0] ? ip_local_deliver+0x11e/0x1a0 [ 202.847935][ C0] ? ip_rcv_core+0xb60/0xb60 [ 202.852543][ C0] NF_HOOK+0x2d6/0x360 [ 202.856629][ C0] ? ip_rcv_core+0xb60/0xb60 [ 202.861236][ C0] ? ip_local_deliver+0x1a0/0x1a0 [ 202.866310][ C0] ? ip_rcv_core+0xb60/0xb60 [ 202.870912][ C0] ? ip_local_deliver_finish+0x320/0x320 [ 202.876649][ C0] ? ip_local_deliver_finish+0x320/0x320 [ 202.882297][ C0] __netif_receive_skb+0xcc/0x290 [ 202.887443][ C0] process_backlog+0x364/0x780 [ 202.892229][ C0] ? rps_trigger_softirq+0x210/0x210 [ 202.896085][ T5338] usb 4-1: selecting invalid altsetting 1 [ 202.897548][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 202.897579][ C0] ? lock_chain_count+0x20/0x20 [ 202.897593][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 202.917084][ T5338] dvb_ttusb_budget: ttusb_init_controller: error [ 202.919475][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 202.919508][ C0] __napi_poll+0xc0/0x430 [ 202.919526][ C0] ? net_rx_action+0x2db/0x9c0 [ 202.919545][ C0] net_rx_action+0x4a8/0x9c0 [ 202.919570][ C0] ? net_tx_action+0x870/0x870 [ 202.919587][ C0] ? detach_timer+0x2b0/0x2b0 [ 202.919622][ C0] handle_softirqs+0x328/0x820 [ 202.919643][ C0] ? run_ksoftirqd+0x98/0xf0 [ 202.919665][ C0] ? do_softirq+0x200/0x200 [ 202.919680][ C0] ? run_ksoftirqd+0x75/0xf0 [ 202.919696][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 202.943429][ T5338] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 202.944983][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 202.945013][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 202.997117][ C0] run_ksoftirqd+0x98/0xf0 [ 203.001547][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 203.006967][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 203.012356][ C0] ? smpboot_thread_fn+0x5bc/0x970 [ 203.017540][ T5338] DVB: Unable to find symbol cx22700_attach() [ 203.017567][ C0] smpboot_thread_fn+0x4f6/0x970 [ 203.028558][ C0] kthread+0x436/0x520 [ 203.032638][ C0] ? cpu_report_death+0x180/0x180 [ 203.037672][ C0] ? kthread_blkcg+0xd0/0xd0 [ 203.042276][ C0] ret_from_fork+0x1f/0x30 [ 203.046718][ C0] [ 203.049744][ C0] [ 203.052064][ C0] Allocated by task 14: [ 203.056359][ C0] __kasan_slab_alloc+0x9c/0xd0 [ 203.061221][ C0] slab_post_alloc_hook+0x4c/0x380 [ 203.064319][ T5338] DVB: Unable to find symbol tda10046_attach() [ 203.066335][ C0] kmem_cache_alloc_node+0x12d/0x2d0 [ 203.066357][ C0] __alloc_skb+0xf4/0x750 [ 203.066373][ C0] synproxy_send_client_synack+0x169/0xdd0 [ 203.066392][ C0] nft_synproxy_eval_v4+0x36b/0x560 [ 203.077601][ T5338] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 203.077805][ C0] nft_synproxy_do_eval+0x341/0x570 [ 203.106237][ C0] nft_do_chain+0x3fc/0x1420 [ 203.110846][ C0] nft_do_chain_inet+0x22b/0x300 [ 203.115806][ C0] nf_hook_slow+0xb9/0x200 [ 203.120236][ C0] NF_HOOK+0x1cb/0x360 [ 203.124320][ C0] NF_HOOK+0x2d6/0x360 [ 203.128404][ C0] __netif_receive_skb+0xcc/0x290 [ 203.128435][ T5338] usb 4-1: USB disconnect, device number 13 [ 203.133496][ C0] process_backlog+0x364/0x780 [ 203.133543][ C0] __napi_poll+0xc0/0x430 [ 203.133557][ C0] net_rx_action+0x4a8/0x9c0 [ 203.133571][ C0] handle_softirqs+0x328/0x820 [ 203.133584][ C0] run_ksoftirqd+0x98/0xf0 [ 203.133597][ C0] smpboot_thread_fn+0x4f6/0x970 [ 203.133614][ C0] kthread+0x436/0x520 [ 203.133626][ C0] ret_from_fork+0x1f/0x30 [ 203.133642][ C0] [ 203.133647][ C0] Freed by task 14: [ 203.133655][ C0] kasan_set_track+0x4b/0x70 [ 203.133672][ C0] kasan_set_free_info+0x1f/0x40 [ 203.133689][ C0] ____kasan_slab_free+0xd5/0x110 [ 203.133704][ C0] slab_free_freelist_hook+0xea/0x170 [ 203.133720][ C0] kmem_cache_free+0x8f/0x210 [ 203.133733][ C0] nft_synproxy_eval_v4+0x373/0x560 [ 203.133752][ C0] nft_synproxy_do_eval+0x341/0x570 [ 203.133767][ C0] nft_do_chain+0x3fc/0x1420 [ 203.221533][ C0] nft_do_chain_inet+0x22b/0x300 [ 203.226487][ C0] nf_hook_slow+0xb9/0x200 [ 203.230924][ C0] NF_HOOK+0x1cb/0x360 [ 203.235003][ C0] NF_HOOK+0x2d6/0x360 [ 203.239075][ C0] __netif_receive_skb+0xcc/0x290 [ 203.244107][ C0] process_backlog+0x364/0x780 [ 203.248877][ C0] __napi_poll+0xc0/0x430 [ 203.253210][ C0] net_rx_action+0x4a8/0x9c0 [ 203.257799][ C0] handle_softirqs+0x328/0x820 [ 203.262764][ C0] run_ksoftirqd+0x98/0xf0 [ 203.267186][ C0] smpboot_thread_fn+0x4f6/0x970 [ 203.272138][ C0] kthread+0x436/0x520 [ 203.276220][ C0] ret_from_fork+0x1f/0x30 [ 203.280643][ C0] [ 203.282964][ C0] The buggy address belongs to the object at ffff88801e3dd8c0 [ 203.282964][ C0] which belongs to the cache skbuff_head_cache of size 232 [ 203.297542][ C0] The buggy address is located 128 bytes inside of [ 203.297542][ C0] 232-byte region [ffff88801e3dd8c0, ffff88801e3dd9a8) [ 203.310827][ C0] The buggy address belongs to the page: [ 203.316461][ C0] page:ffffea000078f740 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1e3dd [ 203.326629][ C0] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 203.334196][ C0] raw: 00fff00000000200 ffffea000142a5c0 0000000900000002 ffff888144bf0140 [ 203.342792][ C0] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 203.351380][ C0] page dumped because: kasan: bad access detected [ 203.357810][ C0] page_owner tracks the page as allocated [ 203.363528][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 14, ts 163561204981, free_ts 158986086018 [ 203.381079][ C0] get_page_from_freelist+0x1b77/0x1c60 [ 203.386643][ C0] __alloc_pages+0x1e1/0x470 [ 203.391246][ C0] new_slab+0xc0/0x4b0 [ 203.395327][ C0] ___slab_alloc+0x81e/0xdf0 [ 203.396692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 203.399924][ C0] kmem_cache_alloc_node+0x1c3/0x2d0 [ 203.399945][ C0] __alloc_skb+0xf4/0x750 [ 203.399961][ C0] synproxy_send_client_synack+0x169/0xdd0 [ 203.399978][ C0] nft_synproxy_eval_v4+0x36b/0x560 [ 203.399996][ C0] nft_synproxy_do_eval+0x341/0x570 [ 203.400013][ C0] nft_do_chain+0x3fc/0x1420 [ 203.400030][ C0] nft_do_chain_inet+0x22b/0x300 [ 203.400046][ C0] nf_hook_slow+0xb9/0x200 [ 203.400060][ C0] NF_HOOK+0x1cb/0x360 [ 203.400075][ C0] NF_HOOK+0x2d6/0x360 [ 203.400088][ C0] __netif_receive_skb+0xcc/0x290 [ 203.424676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 203.428740][ C0] process_backlog+0x364/0x780 [ 203.428767][ C0] page last free stack trace: [ 203.428772][ C0] free_unref_page_prepare+0x637/0x6c0 [ 203.428788][ C0] free_unref_page+0x94/0x280 [ 203.428801][ C0] __unfreeze_partials+0x1a5/0x200 [ 203.428816][ C0] put_cpu_partial+0x12d/0x190 [ 203.428829][ C0] qlist_free_all+0x35/0x90 [ 203.428845][ C0] kasan_quarantine_reduce+0x150/0x160 [ 203.428860][ C0] __kasan_slab_alloc+0x2f/0xd0 [ 203.428876][ C0] slab_post_alloc_hook+0x4c/0x380 [ 203.428891][ C0] kmem_cache_alloc+0x100/0x290 [ 203.428909][ C0] __pmd_alloc+0x11f/0x730 [ 203.428923][ C0] handle_mm_fault+0xb92/0x43c0 [ 203.428937][ C0] do_user_addr_fault+0x489/0xc80 [ 203.428953][ C0] exc_page_fault+0x60/0x100 [ 203.428969][ C0] asm_exc_page_fault+0x22/0x30 [ 203.468473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 203.469632][ C0] [ 203.469638][ C0] Memory state around the buggy address: [ 203.469649][ C0] ffff88801e3dd800: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 203.469660][ C0] ffff88801e3dd880: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 203.469671][ C0] >ffff88801e3dd900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 203.469679][ C0] ^ [ 203.469689][ C0] ffff88801e3dd980: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 203.475678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 203.479098][ C0] ffff88801e3dda00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 203.479109][ C0] ================================================================== [ 203.479115][ C0] Disabling lock debugging due to kernel taint [ 203.479240][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 203.479253][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Tainted: G B 5.15.189-syzkaller #0 [ 203.489667][ T8638] device veth0_vlan entered promiscuous mode [ 203.494453][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 203.494464][ C0] Call Trace: [ 203.494470][ C0] [ 203.494477][ C0] dump_stack_lvl+0x168/0x230 [ 203.504844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 203.509148][ C0] ? show_regs_print_info+0x20/0x20 [ 203.509176][ C0] ? load_image+0x3b0/0x3b0 [ 203.509197][ C0] panic+0x2c9/0x7f0 [ 203.515303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 203.519117][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 203.519141][ C0] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 203.519161][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 203.519177][ C0] ? _raw_spin_unlock+0x40/0x40 [ 203.519192][ C0] ? print_memory_metadata+0x314/0x400 [ 203.519212][ C0] ? __nft_trace_packet+0x135/0x150 [ 203.519227][ C0] check_panic_on_warn+0x80/0xa0 [ 203.519244][ C0] ? __nft_trace_packet+0x135/0x150 [ 203.519257][ C0] end_report+0x6d/0xf0 [ 203.519271][ C0] kasan_report+0x102/0x130 [ 203.568085][ T8638] device veth1_vlan entered promiscuous mode [ 203.571345][ C0] ? __nft_trace_packet+0x135/0x150 [ 203.571367][ C0] __nft_trace_packet+0x135/0x150 [ 203.571380][ C0] nft_do_chain+0x120e/0x1420 [ 203.571401][ C0] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 203.597904][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 203.601721][ C0] ? tcp_conn_schedule+0x459/0x800 [ 203.601754][ C0] ? ip_vs_in+0xb46/0x1c20 [ 203.601768][ C0] ? nf_nat_inet_fn+0x84e/0xa90 [ 203.601787][ C0] ? nf_nat_packet+0xf0/0xf0 [ 203.601803][ C0] nft_do_chain_inet+0x22b/0x300 [ 203.601823][ C0] ? nft_do_chain_arp+0xe0/0xe0 [ 203.601843][ C0] ? nf_nat_ipv4_local_in+0x209/0x5b0 [ 203.601861][ C0] ? nft_do_chain_arp+0xe0/0xe0 [ 203.601877][ C0] nf_hook_slow+0xb9/0x200 [ 203.601893][ C0] ? NF_HOOK+0x360/0x360 [ 203.615185][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 203.617560][ C0] NF_HOOK+0x1cb/0x360 [ 203.627189][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 203.631741][ C0] ? NF_HOOK+0x360/0x360 [ 203.631782][ C0] ? ip_local_deliver+0x1a0/0x1a0 [ 203.631797][ C0] ? ip_rcv_finish_core+0xd8b/0x1bc0 [ 203.631815][ C0] ? NF_HOOK+0x360/0x360 [ 203.631833][ C0] ? ip_local_deliver+0x11e/0x1a0 [ 203.631850][ C0] ? ip_rcv_core+0xb60/0xb60 [ 203.631867][ C0] NF_HOOK+0x2d6/0x360 [ 203.631882][ C0] ? ip_rcv_core+0xb60/0xb60 [ 203.680786][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 203.682527][ C0] ? ip_local_deliver+0x1a0/0x1a0 [ 203.682554][ C0] ? ip_rcv_core+0xb60/0xb60 [ 203.909357][ C0] ? ip_local_deliver_finish+0x320/0x320 [ 203.914983][ C0] ? ip_local_deliver_finish+0x320/0x320 [ 203.920600][ C0] __netif_receive_skb+0xcc/0x290 [ 203.925607][ C0] process_backlog+0x364/0x780 [ 203.930359][ C0] ? rps_trigger_softirq+0x210/0x210 [ 203.935644][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 203.941608][ C0] ? lock_chain_count+0x20/0x20 [ 203.946445][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 203.951454][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 203.956810][ C0] __napi_poll+0xc0/0x430 [ 203.961120][ C0] ? net_rx_action+0x2db/0x9c0 [ 203.965866][ C0] net_rx_action+0x4a8/0x9c0 [ 203.970447][ C0] ? net_tx_action+0x870/0x870 [ 203.975225][ C0] ? detach_timer+0x2b0/0x2b0 [ 203.979912][ C0] handle_softirqs+0x328/0x820 [ 203.984669][ C0] ? run_ksoftirqd+0x98/0xf0 [ 203.989312][ C0] ? do_softirq+0x200/0x200 [ 203.993800][ C0] ? run_ksoftirqd+0x75/0xf0 [ 203.998464][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 204.003643][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 204.008914][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 204.014104][ C0] run_ksoftirqd+0x98/0xf0 [ 204.018609][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 204.023802][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 204.029199][ C0] ? smpboot_thread_fn+0x5bc/0x970 [ 204.034319][ C0] smpboot_thread_fn+0x4f6/0x970 [ 204.039284][ C0] kthread+0x436/0x520 [ 204.043341][ C0] ? cpu_report_death+0x180/0x180 [ 204.048348][ C0] ? kthread_blkcg+0xd0/0xd0 [ 204.052918][ C0] ret_from_fork+0x1f/0x30 [ 204.057322][ C0] [ 204.060534][ C0] Kernel Offset: disabled [ 204.064874][ C0] Rebooting in 86400 seconds..