last executing test programs: 1m3.381522706s ago: executing program 2 (id=3): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002140)={0x20, 0xa, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000084}, 0x44) 1m3.236765111s ago: executing program 2 (id=6): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000007c0)={0x34, &(0x7f00000005c0)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m0.859046383s ago: executing program 2 (id=24): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='shortad\x00partition=00000000000000000005,noadinicb,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYRES64], 0x1, 0x489, &(0x7f0000000140)="$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") setrlimit(0x1, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000680)='./file1\x00', 0x20fffbfffc) 1m0.645800804s ago: executing program 2 (id=26): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040), 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000300)) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 59.854878035s ago: executing program 2 (id=35): ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl(r0, 0x8b24, &(0x7f0000000040)) 59.194557622s ago: executing program 2 (id=43): r0 = socket$inet_tcp(0x2, 0x1, 0x6) listen(r0, 0x5) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x3) 59.094186273s ago: executing program 32 (id=43): r0 = socket$inet_tcp(0x2, 0x1, 0x6) listen(r0, 0x5) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x3) 1.96527873s ago: executing program 5 (id=929): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/48, 0x30) getdents64(r0, 0xfffffffffffffffe, 0xff80) 1.916822755s ago: executing program 5 (id=931): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0xb) read$FUSE(r0, &(0x7f0000003ec0)={0x2020}, 0x2020) 1.098120848s ago: executing program 5 (id=945): r0 = io_uring_setup(0x44a, &(0x7f0000000000)={0x0, 0x7a4c, 0x8, 0x0, 0x57}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001f40)={0x3, 0x0, &(0x7f0000001ec0)=[{0x0}], 0x0, 0x1}, 0x20) 1.071399731s ago: executing program 5 (id=946): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='maps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') 890.570689ms ago: executing program 3 (id=949): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$update(0x2, r1, 0x0, 0x0) 849.195133ms ago: executing program 3 (id=950): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={@loopback={0xfec0ffffffffffff, 0x3fc}, 0x0, r1}) 776.648061ms ago: executing program 4 (id=951): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) 761.926313ms ago: executing program 4 (id=952): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) setrlimit(0x7, &(0x7f0000000640)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 760.814153ms ago: executing program 3 (id=953): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x40) 660.593323ms ago: executing program 3 (id=955): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x4, 0x8004, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0xc080}, 0x0) 654.025643ms ago: executing program 0 (id=956): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x4e23, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e23, @private=0xfffffffe}}) 639.664315ms ago: executing program 4 (id=957): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000002640)=[{&(0x7f00000007c0)="27031c00f40e3400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab971573", 0x32}, {&(0x7f0000001640)="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", 0xf19}], 0x2}, 0x24000008) 588.22636ms ago: executing program 3 (id=959): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x2000040, &(0x7f0000000440), 0x1, 0x445, &(0x7f00000009c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x8, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 553.904343ms ago: executing program 4 (id=960): pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x8001, 0x0) 498.239709ms ago: executing program 0 (id=961): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x58, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004010) 423.860337ms ago: executing program 0 (id=963): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @private, 0x0, 0x1, 'sh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x48f, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x200000001, 'ovf\x00'}, 0x2c) 393.22956ms ago: executing program 1 (id=964): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffc, 0x6, 0x3, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="581617000000", 0x0, 0x9, 0x0, 0x0, 0x0}) 386.5266ms ago: executing program 4 (id=965): syz_mount_image$hfs(&(0x7f00000011c0), &(0x7f0000001300)='./file1\x00', 0x84, &(0x7f0000001340)=ANY=[], 0x8b, 0x2d5, &(0x7f0000001f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002280)='./file0\x00', 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 346.146905ms ago: executing program 1 (id=966): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000c40)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000c80)="060000000300010000", 0x9) 313.584028ms ago: executing program 0 (id=967): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, 0x0, &(0x7f0000000040)) 313.098568ms ago: executing program 1 (id=968): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf2509000000300003801400000000000000000000000800030000000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x4008}, 0x20000000) 271.432832ms ago: executing program 1 (id=969): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000002140)={[{@fat=@gid}, {@numtail}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@uni_xlate}, {@utf8}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@fat=@check_strict}, {@shortname_mixed}, {@utf8no}, {@rodir}, {@utf8no}, {@shortname_win95}]}, 0x3, 0x29e, &(0x7f0000000480)="$eJzs3c1qa1UUAOB1mn8dJANHItwDOnB0ufUJWuQKYkFQIqgDLd5ckCRcaCHQKsaOfAKfQPBtnIgv4AMoztqBeOT0JGnSnqSmlqTo9026utZe2ftk79JOsvv5a8P+sxfHz8++/jWazSR29mIvLpLoxE5MfRulfvm9PA8APHAXWRZ/ZIVGkTpZHFGL8u+rOxtZIABw7+Z//297LQDAZnz48Sfv7R8cPP0gTZsRw+9G3SSKr0V9/3l8GYPoxZNox58R2UwRv/PuwdOoprlOvDEcj7p55/Czn86LPyf2f4u47N+NdnTK+3fTwlz/eNStxUuT+fcG0Xv/h2jHK+X9b5X0R7ceb74+t/7H0Y6fv4gXMYhnk2ef9n+zm6ZvZ9+ff/Vpns37k/Go25iNm4yubHhrAAAAAAAAAAAAAAAAAAAAAAD4D3ucznQW79+ZXvxfFJuT8Qv1FfcDjefu53mSpmmWXO+vxqvVqG7ruQEAAAAAAAAAAAAAAAAAAOAhOT457R8OBr2jNYKPbpYqsZCZfqy/pD3+Wsw0ImKt2ReCR+t2RWWytEEScW1MPSJWtNeicdl5+1yV5aX8BW6UWvl6ekdJNfqHP2Z325TrQTLLtOZLj6KYK8+0imAu828nHTTjMpierv5hctvmNssOybKg8s/Xk5Ucv+Xt9bLTmysZ3Foxe/3lO711WXtJKYmI2uzNXP06tXvZwaufFAAAAAAAAAAAAAAAAAAAYMOuPvRbUjzbwoIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYAuu/v//GsF40nyjlLUjTk77WSXPVGNS2vIjAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8D/wdwAAAP//h9dhCg==") mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./proc\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000b40)='./proc\x00', 0x200) 184.625531ms ago: executing program 0 (id=970): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 176.609312ms ago: executing program 5 (id=971): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000840)) 142.054676ms ago: executing program 3 (id=972): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRES8=0x0, @ANYRESDEC, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRES8, @ANYRES8], 0x1, 0x1ef, &(0x7f0000000280)="$eJzslU9rE0EYxn+zO+l2NdCcvVpsL9pmC+I3sB/AD2DYrrWY+Kcb0ISA0UsvIuJnECp+Cg+C3nsoInipBwVzqHiqSGR23p1uSCBV4iGwDyTv8z4z7zvzvsPO3E4fpAHw+7gXUyODosonpdDAirLayYK1P8QOBV+19euivxH7RWza6R48s7R7p9FsJrtpZwpRCqbNGSHjkj7zYhPIh6ejiuLf8oyRJWaTx5G2bzs7PvRiRAkmzZFYZrifceLNuOTwjGfxswpF5dusC6zwnzrmCKet+1WdfkwfX9rjnDjHl/CQ0bbMH/H+KipFrq/0+hOPQeYcHvdiQ27KLWa0LfvLP4lsjnHeFeZc0NAH5TN0eXR2W8IKsNZu3V9LO93LO63GdrKd3I2ijavr78/LJzp8DDvNZF0xeC6rxJ751zgEvF6CgXp1AIdhL64An0/H+xSgClszOAcqlBLzkPxyXr1YCAzBK8QWc9i8b115gWg+LW5wiUXgYd8MR9huLWOyaW6Z0jZR+DUyp64L+4QTPBazgSvxvebWHgqVh+2jXY76ERXnROKYhZKNa678PbHLYjfF7os9Epu/XfmbpLMM38Vb7cMCjxrt9m72eFnmtMhpUc2t7Mmq+Wuo8p0ElChRokSJEiVKzAn+BAAA//+Kekw8") r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="1000000001"], 0x454680) 108.437139ms ago: executing program 1 (id=973): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x6, 0x4, 0x8, 0xb}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000780)={r1}, 0xc) 98.18464ms ago: executing program 0 (id=974): r0 = openat$rtc(0xffffff9c, &(0x7f0000000600), 0xc2440, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x5) ioctl$RTC_PIE_ON(r0, 0x7005) 96.96195ms ago: executing program 4 (id=975): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000000)='\x00', 0x1, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, r0, 0x5, 0x995, 0x0, 0x19}) 60.998914ms ago: executing program 5 (id=976): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r0, 0x84, 0x84, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x1, @private0, 0x8000}}, 0x4e23}, &(0x7f0000000340)=0x90) 0s ago: executing program 1 (id=977): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd700000100000010000000c00020002000000000000001c0007800c00018008000100", @ANYRES32], 0x48}}, 0x4) kernel console output (not intermixed with test programs): im2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.701494][ T4200] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.711344][ T4200] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.722068][ T4200] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.761362][ T4188] device veth1_macvtap entered promiscuous mode [ 66.768741][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.779424][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.816371][ T4198] device veth1_vlan entered promiscuous mode [ 66.840060][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.854584][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.866681][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.876202][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.886087][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.896985][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.906391][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.916061][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.953162][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.970045][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.988136][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.040694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.050354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.067422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.078075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.087377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.095509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.135617][ T4193] device veth0_vlan entered promiscuous mode [ 67.143264][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.152803][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.161556][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.170231][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.180558][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.189165][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.209083][ T4192] device veth0_vlan entered promiscuous mode [ 67.221880][ T4265] Bluetooth: hci0: command 0x040f tx timeout [ 67.222677][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.240289][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.250596][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.259501][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.269481][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.279087][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.288763][ T4198] device veth0_macvtap entered promiscuous mode [ 67.302295][ T1109] Bluetooth: hci2: command 0x040f tx timeout [ 67.312395][ T4193] device veth1_vlan entered promiscuous mode [ 67.323482][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.328922][ T4192] device veth1_vlan entered promiscuous mode [ 67.335890][ T1109] Bluetooth: hci1: command 0x040f tx timeout [ 67.344803][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.356491][ T4198] device veth1_macvtap entered promiscuous mode [ 67.381828][ T4265] Bluetooth: hci4: command 0x040f tx timeout [ 67.389181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.396950][ T4265] Bluetooth: hci3: command 0x040f tx timeout [ 67.404063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.413915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 67.423733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.431871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.440046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.448626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.457419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.484934][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.493374][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.497912][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.512694][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.526500][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.538972][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.550513][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.564321][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 67.572902][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 67.580834][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 67.589189][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.597859][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.606880][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.616575][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.626107][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.638722][ T4192] device veth0_macvtap entered promiscuous mode [ 67.649688][ T4192] device veth1_macvtap entered promiscuous mode [ 67.673359][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.689584][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.700282][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.712993][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.729023][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.750544][ T4198] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.764522][ T4198] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.780060][ T4198] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.792523][ T4198] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.804047][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.812584][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.821330][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.830742][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.843578][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.852591][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.862674][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.874095][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.884739][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.897434][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.908480][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.919172][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.930409][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.980539][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.992691][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.005755][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.017978][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.029452][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.040713][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.051119][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.061827][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.074755][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.089148][ T4193] device veth0_macvtap entered promiscuous mode [ 68.114486][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.129487][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.151132][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.160248][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.169863][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.179830][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.202637][ T4193] device veth1_macvtap entered promiscuous mode [ 68.243724][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.264816][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.267039][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.286361][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.297740][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.309187][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.319117][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.329892][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.340444][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.352358][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.363902][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.391091][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.400101][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.409477][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.442145][ T4260] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.446454][ T4285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.461456][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.465691][ T4285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.478547][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.490606][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.505422][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.515614][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.526561][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.536743][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.548585][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.560692][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.578539][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.588419][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.597536][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.606614][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.617931][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.627686][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.637742][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.670236][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.679034][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.710648][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.726638][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.760521][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.782700][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.782918][ T4307] netlink: 'syz.1.2': attribute type 29 has an invalid length. [ 68.791160][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.807114][ T4307] netlink: 'syz.1.2': attribute type 29 has an invalid length. [ 68.815535][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.828554][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.874905][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.884096][ T4307] netlink: 'syz.1.2': attribute type 29 has an invalid length. [ 68.901924][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.903161][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.909955][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.936057][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.971370][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.015511][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.038586][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.053729][ T4260] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 69.084550][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.085981][ T4260] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.130375][ T4318] loop3: detected capacity change from 0 to 128 [ 69.131987][ T4313] loop0: detected capacity change from 0 to 36864 [ 69.143993][ T4260] usb 3-1: Product: syz [ 69.154750][ T4260] usb 3-1: Manufacturer: syz [ 69.169025][ T4260] usb 3-1: SerialNumber: syz [ 69.206522][ T4260] usb 3-1: config 0 descriptor?? [ 69.249154][ T4318] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 69.267144][ T4260] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 69.288972][ T4313] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 69.313240][ T4265] Bluetooth: hci0: command 0x0419 tx timeout [ 69.372654][ T4305] Bluetooth: hci1: command 0x0419 tx timeout [ 69.387493][ T4305] Bluetooth: hci2: command 0x0419 tx timeout [ 69.445340][ T4326] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11'. [ 69.462327][ T4303] Bluetooth: hci3: command 0x0419 tx timeout [ 69.490238][ T4303] Bluetooth: hci4: command 0x0419 tx timeout [ 69.568279][ T4332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 69.580639][ T4332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 69.627879][ T4334] nbd: couldn't find device at index 10275584 [ 69.701490][ T4303] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.859093][ T4330] loop0: detected capacity change from 0 to 32768 [ 69.887900][ T4330] ======================================================= [ 69.887900][ T4330] WARNING: The mand mount option has been deprecated and [ 69.887900][ T4330] and is ignored by this kernel. Remove the mand [ 69.887900][ T4330] option from the mount to silence this warning. [ 69.887900][ T4330] ======================================================= [ 69.924023][ T4260] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 69.935917][ T4260] sq905c: probe of 3-1:0.0 failed with error -71 [ 69.963250][ T4260] usb 3-1: USB disconnect, device number 2 [ 70.018462][ T4350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'. [ 70.034182][ T4350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21'. [ 70.066484][ T4330] XFS (loop0): Mounting V5 Filesystem [ 70.074509][ T4357] loop1: detected capacity change from 0 to 128 [ 70.148188][ T4330] XFS (loop0): Ending clean mount [ 70.168481][ T4330] XFS (loop0): Quotacheck needed: Please wait. [ 70.176468][ T4357] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 70.292319][ T4303] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 70.301429][ T4303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.334489][ T4303] usb 5-1: Product: syz [ 70.346284][ T4303] usb 5-1: Manufacturer: syz [ 70.354210][ T4303] usb 5-1: SerialNumber: syz [ 70.369475][ T4303] usb 5-1: config 0 descriptor?? [ 70.375931][ T4330] XFS (loop0): Quotacheck: Done. [ 70.415314][ T4303] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 002 [ 70.502385][ T4198] XFS (loop0): Unmounting Filesystem [ 70.516142][ T4365] loop2: detected capacity change from 0 to 128 [ 70.528985][ T4363] loop1: detected capacity change from 0 to 1024 [ 70.557436][ T4365] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 70.617402][ T4365] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 70.829058][ T4369] loop2: detected capacity change from 0 to 33280 [ 70.877241][ T4371] loop3: detected capacity change from 0 to 1024 [ 70.896991][ T4373] netlink: 20 bytes leftover after parsing attributes in process `syz.1.28'. [ 70.927040][ T4369] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 70.989285][ T4369] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 71.049220][ T4369] EXT4-fs error (device loop2): ext4_orphan_get:1436: comm syz.2.26: bad orphan inode 131083 [ 71.071903][ T4303] i2c i2c-1: failure reading functionality [ 71.099244][ T4303] i2c i2c-1: connected i2c-tiny-usb device [ 71.140101][ T4369] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.182414][ T4303] usb 5-1: USB disconnect, device number 2 [ 71.214760][ T4383] device-mapper: table: 248:0: multipath: invalid number of paths [ 71.265657][ T4383] device-mapper: ioctl: error adding target to table [ 71.305922][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.312910][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.358702][ T4369] overlayfs: upper fs needs to support d_type. [ 71.435535][ T4377] loop0: detected capacity change from 0 to 32768 [ 71.479332][ T4377] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.30 (4377) [ 71.494814][ T4200] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /3/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 71.597924][ T4377] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 71.620076][ T4392] loop4: detected capacity change from 0 to 33280 [ 71.636078][ T4377] BTRFS info (device loop0): setting nodatasum [ 71.661713][ T4377] BTRFS info (device loop0): force zlib compression, level 3 [ 71.686165][ T4392] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.36: missing EA_INODE flag [ 71.713700][ T4392] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.36: error while reading EA inode 2 err=-117 [ 71.731796][ T4377] BTRFS info (device loop0): turning on flush-on-commit [ 71.780663][ T4377] BTRFS info (device loop0): max_inline at 4096 [ 71.801480][ T4392] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.36: inode #3584: comm syz.4.36: iget: illegal inode # [ 71.816053][ T4377] BTRFS info (device loop0): using free space tree [ 71.821776][ T4392] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.36: error while reading EA inode 3584 err=-117 [ 71.823203][ T4377] BTRFS info (device loop0): has skinny extents [ 71.946823][ T4392] EXT4-fs (loop4): 1 orphan inode deleted [ 71.971404][ T4392] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 72.104409][ T155] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.145048][ T4377] BTRFS info (device loop0): enabling ssd optimizations [ 72.207340][ T155] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.331156][ T155] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.382297][ T4436] netlink: 16 bytes leftover after parsing attributes in process `syz.3.48'. [ 72.391420][ T4436] netlink: 16 bytes leftover after parsing attributes in process `syz.3.48'. [ 72.439470][ T155] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.452565][ T4436] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 72.511727][ T4436] iwpm_hello_cb: Unable to parse nlmsg [ 72.640524][ T4441] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.863989][ T4441] chnl_net:caif_netlink_parms(): no params data found [ 72.987423][ T4471] capability: warning: `syz.4.59' uses 32-bit capabilities (legacy support in use) [ 73.017587][ T4441] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.027234][ T4441] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.035703][ T4441] device bridge_slave_0 entered promiscuous mode [ 73.044367][ T4441] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.053931][ T4441] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.064003][ T4441] device bridge_slave_1 entered promiscuous mode [ 73.066472][ T4464] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 73.090113][ T4441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.109154][ T4441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.144110][ T4441] team0: Port device team_slave_0 added [ 73.151130][ T4464] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 73.154726][ T4441] team0: Port device team_slave_1 added [ 73.185952][ T4441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.193232][ T4441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.223071][ T4262] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.255303][ T4441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.269022][ T4441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.283240][ T4441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.311269][ T4464] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 73.333966][ T4441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.433494][ T4441] device hsr_slave_0 entered promiscuous mode [ 73.449688][ T4441] device hsr_slave_1 entered promiscuous mode [ 73.458671][ T4441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.469759][ T4441] Cannot create hsr debugfs directory [ 73.543002][ T4258] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.582009][ T4262] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.602226][ T4262] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 73.642516][ T4490] EXT4-fs (loop3): Ignoring removed orlov option [ 73.650884][ T4262] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 73.679086][ T4490] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 73.700551][ T4262] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.731941][ T4484] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 73.737457][ T4262] usb 2-1: config 0 descriptor?? [ 73.780434][ T4490] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3894: comm syz.3.63: Allocating blocks 41-42 which overlap fs metadata [ 73.798006][ T4490] Quota error (device loop3): write_blk: dquota write failed [ 73.805738][ T4490] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 73.818345][ T4262] gspca_main: spca561-2.14.0 probing abcd:cdee [ 73.835651][ T4490] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 73.857501][ T4490] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.63: Failed to acquire dquot type 1 [ 73.882837][ T4490] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 73.912050][ T4490] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.63: corrupted inode contents [ 73.950270][ T4490] EXT4-fs error (device loop3): ext4_dirty_inode:6087: inode #12: comm syz.3.63: mark_inode_dirty error [ 73.966234][ T4490] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.63: corrupted inode contents [ 74.020612][ T4490] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #12: comm syz.3.63: mark_inode_dirty error [ 74.022201][ T4484] usb 5-1: Using ep0 maxpacket: 32 [ 74.032359][ T4258] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.053875][ T4490] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.63: corrupted inode contents [ 74.081131][ T4490] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 74.094892][ T4441] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 74.095281][ T4490] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.63: corrupted inode contents [ 74.116321][ T4490] EXT4-fs error (device loop3): ext4_truncate:4286: inode #12: comm syz.3.63: mark_inode_dirty error [ 74.118477][ T4441] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 74.132632][ T4490] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 74.145501][ T4490] EXT4-fs (loop3): 1 truncate cleaned up [ 74.152965][ T4490] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,noblock_validity,inode_readahead_blks=0x0000000000200000,noload,noinit_itable,abort,orlov,init_itable,auto_da_alloc=0x00000000000085962,errors=continue. Quota mode: writeback. [ 74.158115][ T4441] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 74.191951][ T4484] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.218122][ T4484] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 74.234363][ T4441] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 74.238736][ T4484] usb 5-1: config 0 interface 0 has no altsetting 0 [ 74.251017][ T4484] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 74.262907][ T4490] EXT4-fs (loop3): Ignoring removed nobh option [ 74.269085][ T4484] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.270235][ T4490] EXT4-fs (loop3): Cannot change journaled quota options when quota turned on [ 74.288539][ T4484] usb 5-1: config 0 descriptor?? [ 74.320731][ T4258] usb 1-1: Using ep0 maxpacket: 16 [ 74.449573][ T4441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.457656][ T4258] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 74.493476][ T4262] spca561: probe of 2-1:0.0 failed with error -22 [ 74.512143][ T4262] usb 2-1: USB disconnect, device number 2 [ 74.578739][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.589807][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.631408][ T4441] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.644127][ T4258] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 74.660665][ T4258] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.662553][ T4482] Bluetooth: hci4: command 0x0409 tx timeout [ 74.676576][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.680097][ T4258] usb 1-1: Product: syz [ 74.692969][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.701451][ T4258] usb 1-1: Manufacturer: syz [ 74.708693][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.709504][ T4258] usb 1-1: SerialNumber: syz [ 74.715941][ T4285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.730542][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.752666][ T4258] r8152-cfgselector 1-1: config 0 descriptor?? [ 74.769865][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.788937][ T4484] input: HID 2006:0118 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:2006:0118.0001/input/input5 [ 74.811959][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.840641][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.847769][ T4285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.884037][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.905272][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.927501][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.962145][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.001319][ T4484] hkems 0003:2006:0118.0001: input,hiddev0,hidraw0: USB HID v0.07 Device [HID 2006:0118] on usb-dummy_hcd.4-1/input0 [ 75.002869][ T4535] set_capacity_and_notify: 2 callbacks suppressed [ 75.002883][ T4535] loop3: detected capacity change from 0 to 1024 [ 75.018114][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.065807][ T4484] hkems 0003:2006:0118.0001: no output reports found [ 75.075485][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.081769][ T4484] hkems 0003:2006:0118.0001: force feedback init failed [ 75.117461][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.141453][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.166272][ T4539] xt_limit: Overflow, try lower: 150994954/0 [ 75.183612][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.228180][ T4484] usb 5-1: USB disconnect, device number 3 [ 75.240185][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.250264][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.267544][ T4258] r8152-cfgselector 1-1: Unknown version 0x0000 [ 75.275760][ T4258] r8152-cfgselector 1-1: bad CDC descriptors [ 75.297684][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.328627][ T4540] fido_id[4540]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 75.337021][ T4258] r8152-cfgselector 1-1: Unknown version 0x0000 [ 75.410630][ T4258] r8152-cfgselector 1-1: USB disconnect, device number 2 [ 75.655000][ T4556] netlink: 'syz.1.76': attribute type 4 has an invalid length. [ 75.700658][ T4556] netlink: 'syz.1.76': attribute type 5 has an invalid length. [ 75.734052][ T4556] netlink: 'syz.1.76': attribute type 1 has an invalid length. [ 75.756727][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.773588][ T4556] netlink: 'syz.1.76': attribute type 4 has an invalid length. [ 75.786208][ T4556] netlink: 'syz.1.76': attribute type 5 has an invalid length. [ 75.807798][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.826801][ T4556] netlink: 'syz.1.76': attribute type 1 has an invalid length. [ 75.837583][ T4556] iwpm_register_pid_cb: Could not find a matching request (seq = 830110067) [ 75.848535][ T4441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.940421][ T4574] iwpm_parse_nlmsg: Invalid attribute (msg type Register Pid response ret = -22) [ 76.020069][ T4577] loop1: detected capacity change from 0 to 33280 [ 76.121576][ T4568] loop4: detected capacity change from 0 to 8192 [ 76.141881][ T4577] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.166783][ T4577] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 76.204812][ T4577] EXT4-fs (loop1): orphan cleanup on readonly fs [ 76.228142][ T4568] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 76.241336][ T4577] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.81: bad orphan inode 15 [ 76.262824][ T4586] loop0: detected capacity change from 0 to 2048 [ 76.298207][ T4568] REISERFS (device loop4): using ordered data mode [ 76.308515][ T4592] netlink: 209832 bytes leftover after parsing attributes in process `syz.3.85'. [ 76.328791][ T4568] reiserfs: using flush barriers [ 76.347598][ T4577] ext4_test_bit(bit=14, block=18) = 1 [ 76.357457][ T4568] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 76.374520][ T4577] is_bad_inode(inode)=0 [ 76.378974][ T4577] NEXT_ORPHAN(inode)=1023 [ 76.384805][ T4577] max_ino=32 [ 76.394951][ T4577] i_nlink=0 [ 76.398811][ T4577] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.81: bg 0: block 440: padding at end of block bitmap is not set [ 76.438594][ T4586] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 76.473514][ T4568] REISERFS (device loop4): checking transaction log (loop4) [ 76.492768][ T4577] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 76.504889][ T155] device hsr_slave_0 left promiscuous mode [ 76.531020][ T155] device hsr_slave_1 left promiscuous mode [ 76.584509][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.603912][ T4577] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.625221][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.662333][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.701985][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.731861][ T4263] Bluetooth: hci4: command 0x041b tx timeout [ 76.735731][ T155] device bridge_slave_1 left promiscuous mode [ 76.777133][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.854010][ T155] device bridge_slave_0 left promiscuous mode [ 76.866996][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.899236][ T4568] REISERFS (device loop4): Using tea hash to sort names [ 76.930536][ T4568] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 76.944951][ T155] device veth1_macvtap left promiscuous mode [ 76.952771][ T155] device veth0_macvtap left promiscuous mode [ 76.967121][ T155] device veth1_vlan left promiscuous mode [ 76.980645][ T155] device veth0_vlan left promiscuous mode [ 77.022213][ T4612] capability: warning: `syz.1.89' uses deprecated v2 capabilities in a way that may be insecure [ 77.411453][ T4626] loop1: detected capacity change from 0 to 256 [ 77.436177][ T4628] loop4: detected capacity change from 0 to 34816 [ 77.485100][ T4626] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 77.517596][ T4628] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,block_validity,grpid,,errors=continue. Quota mode: writeback. [ 77.534757][ T4628] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.570230][ T26] audit: type=1800 audit(1794443339.671:2): pid=4626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.94" name="file2" dev="loop1" ino=1048625 res=0 errno=0 [ 77.691569][ T155] team0 (unregistering): Port device team_slave_1 removed [ 77.720665][ T155] team0 (unregistering): Port device team_slave_0 removed [ 77.760882][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.818234][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.929919][ T4639] loop4: detected capacity change from 0 to 256 [ 77.978709][ T155] bond0 (unregistering): Released all slaves [ 77.988362][ T4639] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 78.081741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.091232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.128686][ T4641] mmap: syz.3.99 (4641) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 78.168130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.179595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.192724][ T4441] device veth0_vlan entered promiscuous mode [ 78.212172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.231336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.287360][ T4441] device veth1_vlan entered promiscuous mode [ 78.369800][ T4655] loop1: detected capacity change from 0 to 33280 [ 78.398194][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 78.398784][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 78.399246][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.399667][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.400086][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.400523][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.413896][ T4441] device veth0_macvtap entered promiscuous mode [ 78.463381][ T4482] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 78.478962][ T4655] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.481528][ T4441] device veth1_macvtap entered promiscuous mode [ 78.530432][ T4655] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.542577][ T4441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.590565][ T4441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.600969][ T4441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.618360][ T4441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.619114][ T4655] EXT4-fs error (device loop1): ext4_readdir:223: inode #12: comm syz.1.105: path /28/file0/file0: directory fails checksum at offset 0 [ 78.628519][ T4441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.679666][ T4441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.711731][ T4441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.734891][ T4441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.752874][ T4441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.771444][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.808634][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.816613][ T4258] Bluetooth: hci4: command 0x040f tx timeout [ 78.857694][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.877095][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.893793][ T4482] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 78.907101][ T4441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.929665][ T4482] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 78.958866][ T4441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.976521][ T4482] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 78.986347][ T4684] loop1: detected capacity change from 0 to 128 [ 78.996486][ T4441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.007315][ T4441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.024704][ T4482] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.036998][ T4441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.053672][ T4441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.065914][ T4441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.076849][ T4441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.089172][ T4441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.102045][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.119498][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.131325][ T4441] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.141026][ T4441] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.150313][ T4441] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.160463][ T4441] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.298819][ T4693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.114'. [ 79.341856][ T4693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.114'. [ 79.368713][ T4693] netlink: 'syz.3.114': attribute type 12 has an invalid length. [ 79.387571][ T4693] netlink: 'syz.3.114': attribute type 13 has an invalid length. [ 79.514498][ T4546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.538168][ T4546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.552570][ T4703] loop0: detected capacity change from 0 to 33280 [ 79.569933][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.618435][ T4482] lg-g15 0003:046D:C222.0002: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 79.662204][ T4303] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.673319][ T4703] EXT4-fs (loop0): 1 truncate cleaned up [ 79.696734][ T4546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.698456][ T4703] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 79.753394][ T4482] lg-g15 0003:046D:C222.0002: Error -90 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 79.778030][ T4546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.829230][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.889002][ T4482] usb 5-1: USB disconnect, device number 4 [ 80.090140][ T4717] fido_id[4717]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 80.091939][ T4303] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.141766][ T4303] usb 2-1: config 0 interface 0 has no altsetting 0 [ 80.158016][ T4303] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 80.191875][ T4303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.217838][ T4719] loop3: detected capacity change from 0 to 4096 [ 80.245259][ T4303] usb 2-1: config 0 descriptor?? [ 80.409653][ T4719] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 80.457270][ T4735] loop4: detected capacity change from 0 to 33280 [ 80.474368][ T4719] ntfs3: loop3: Failed to load $Extend. [ 80.489266][ T4737] loop5: detected capacity change from 0 to 33792 [ 80.568210][ T4737] EXT4-fs (loop5): Ignoring removed orlov option [ 80.579552][ T4735] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 80.672355][ T4737] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 80.686601][ T4735] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #13: comm syz.4.127: iget: bad i_size value: 12154757448730 [ 80.730589][ T4735] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.127: couldn't read orphan inode 13 (err -117) [ 80.748024][ T4737] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,resgid=0x0000000000000000,auto_da_alloc=0x0000000000000003,acl,debug_want_extra_isize=0x0000000000000080,inode_readahead_blks=0x0000000000100000,errors=remount-ro,noinit_itable,orlov,. Quota mode: none. [ 80.758824][ T4724] loop0: detected capacity change from 0 to 32768 [ 80.784241][ T4303] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 80.795150][ T4719] ntfs3: Volume is dirty and "force" flag is not set! [ 80.804455][ T4735] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,barrier,jqfmt=vfsv1,nodelalloc,noblock_validity,grpjquota=.,errors=continue. Quota mode: writeback. [ 80.829464][ T4724] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.121 (4724) [ 80.864185][ T4303] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 80.894045][ T4262] Bluetooth: hci4: command 0x0419 tx timeout [ 80.920618][ T4303] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 80.980768][ T4303] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 81.007012][ T4303] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 81.033660][ T4303] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 81.036232][ T4737] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2812: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 81.048696][ T4303] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 81.070084][ T4303] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 81.078566][ T4303] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 81.097364][ T4303] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 81.109449][ T4303] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 81.118664][ T4303] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 81.131281][ T4303] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 81.140268][ T4303] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 81.154836][ T4303] gt683r_led 0003:1770:FF00.0003: unbalanced collection at end of report description [ 81.167487][ T4303] gt683r_led 0003:1770:FF00.0003: hid parsing failed [ 81.181119][ T4303] gt683r_led: probe of 0003:1770:FF00.0003 failed with error -22 [ 81.219590][ T4303] usb 2-1: USB disconnect, device number 3 [ 81.267009][ T4724] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 81.279261][ T4724] BTRFS info (device loop0): using free space tree [ 81.339951][ T4724] BTRFS info (device loop0): has skinny extents [ 81.599131][ T4752] loop5: detected capacity change from 0 to 4096 [ 81.715090][ T4724] BTRFS info (device loop0): enabling ssd optimizations [ 82.312350][ T4795] loop1: detected capacity change from 0 to 4096 [ 82.501533][ T4795] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 83.140712][ T4774] loop4: detected capacity change from 0 to 32768 [ 83.272869][ T4841] loop3: detected capacity change from 0 to 33280 [ 83.367142][ T4774] XFS (loop4): Mounting V5 Filesystem [ 83.522112][ T4812] loop5: detected capacity change from 0 to 32768 [ 83.614392][ T4812] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.141 (4812) [ 83.629751][ T4841] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 83.685937][ T4774] XFS (loop4): Ending clean mount [ 83.692345][ T4841] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.775630][ T4812] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 83.795660][ T4841] EXT4-fs warning (device loop3): ext4_empty_dir:3158: inode #12: comm syz.3.147: directory missing '..' [ 83.816657][ T4812] BTRFS info (device loop5): using free space tree [ 83.837098][ T4812] BTRFS info (device loop5): has skinny extents [ 83.844059][ T4477] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 83.858563][ T4863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.152'. [ 83.909926][ T4861] XFS (loop4): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 [ 84.093298][ T4861] XFS (loop4): Unmount and run xfs_repair [ 84.099091][ T4861] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 84.136343][ T4861] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 84.145822][ T4861] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 84.156410][ T4861] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 84.159859][ T4886] loop3: detected capacity change from 0 to 256 [ 84.165930][ T4861] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 84.174349][ T4812] BTRFS info (device loop5): enabling ssd optimizations [ 84.182789][ T4861] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 84.197642][ T4861] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 84.221778][ T4861] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 84.230675][ T4861] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 84.253548][ T4861] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x14 len 4 error 74 [ 84.283868][ T4861] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1540/0x1b30 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 84.301874][ T4477] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.337909][ T4477] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 84.360078][ T4477] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 84.371270][ T4886] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 1) [ 84.379941][ T4886] exFAT-fs (loop3): failed to load alloc-bitmap [ 84.381770][ T4861] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 84.399455][ T4886] exFAT-fs (loop3): failed to recognize exfat type [ 84.407767][ T4477] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.446688][ T4886] netlink: 666 bytes leftover after parsing attributes in process `syz.3.155'. [ 84.457230][ T4477] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 84.491260][ T4477] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.509372][ T4193] XFS (loop4): Unmounting Filesystem [ 84.718946][ T4478] kernel write not supported for file /sg0 (pid: 4478 comm: kworker/1:9) [ 84.782473][ T4180] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop5 scanned by udevd (4180) [ 85.051973][ T4477] gud 2-1:1.0: No supported pixel formats found [ 85.059334][ T4477] gud: probe of 2-1:1.0 failed with error -22 [ 85.288067][ T4258] usb 2-1: USB disconnect, device number 4 [ 85.527287][ T4942] loop4: detected capacity change from 0 to 64 [ 85.582156][ T4942] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 85.876675][ T4959] loop0: detected capacity change from 0 to 256 [ 85.901693][ T4959] exfat: Deprecated parameter 'utf8' [ 85.907160][ T4959] exfat: Deprecated parameter 'namecase' [ 85.968538][ T4959] exfat: Deprecated parameter 'namecase' [ 85.984606][ T4959] exfat: Deprecated parameter 'utf8' [ 86.043280][ T4959] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 86.207836][ T4986] loop1: detected capacity change from 0 to 64 [ 86.230611][ T4988] loop0: detected capacity change from 0 to 64 [ 86.287293][ T4984] loop3: detected capacity change from 0 to 1024 [ 86.297092][ T4990] process 'syz.5.189' launched '/dev/fd/3' with NULL argv: empty string added [ 86.356070][ T4988] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 86.364439][ T4984] hfsplus: Filesystem is marked locked, mounting read-only. [ 86.583197][ T4999] netlink: 16 bytes leftover after parsing attributes in process `syz.4.194'. [ 86.586523][ T4984] hfsplus: filesystem is marked locked, leaving read-only. [ 86.655327][ T7] cfg80211: failed to load regulatory.db [ 86.713532][ T4998] loop5: detected capacity change from 0 to 4096 [ 86.763443][ T5011] netlink: 'syz.1.197': attribute type 7 has an invalid length. [ 86.793692][ T5011] netlink: 'syz.1.197': attribute type 5 has an invalid length. [ 86.801514][ T5011] netlink: 17 bytes leftover after parsing attributes in process `syz.1.197'. [ 86.936672][ T5018] loop0: detected capacity change from 0 to 128 [ 86.969987][ T4998] ntfs: volume version 3.1. [ 87.025459][ T5018] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 87.110077][ T4198] sysv_free_block: flc_count > flc_size [ 87.117475][ T5026] loop1: detected capacity change from 0 to 64 [ 87.124137][ T7] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 87.134499][ T5020] loop3: detected capacity change from 0 to 4096 [ 87.137280][ T4198] sysv_free_block: flc_count > flc_size [ 87.167890][ T4198] sysv_free_block: flc_count > flc_size [ 87.210602][ T4198] sysv_free_block: flc_count > flc_size [ 87.235651][ T5026] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 87.263442][ T4198] sysv_free_block: flc_count > flc_size [ 87.297434][ T4198] sysv_free_block: flc_count > flc_size [ 87.321037][ T4198] sysv_free_block: flc_count > flc_size [ 87.327140][ T4198] sysv_free_block: flc_count > flc_size [ 87.343748][ T4198] sysv_free_block: flc_count > flc_size [ 87.349416][ T4198] sysv_free_block: flc_count > flc_size [ 87.383819][ T4198] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 87.415605][ T5029] ntfs3: loop3: ino=1e, "file1" The size of extended attributes must not exceed 64KiB [ 87.512003][ T7] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 87.520091][ T7] usb 5-1: config 0 has no interface number 0 [ 87.663420][ T5041] jffs2: notice: (5041) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 87.701932][ T7] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 87.719472][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.737657][ T7] usb 5-1: Product: syz [ 87.751804][ T7] usb 5-1: Manufacturer: syz [ 87.759424][ T7] usb 5-1: SerialNumber: syz [ 87.783679][ T7] usb 5-1: config 0 descriptor?? [ 87.820956][ T5049] loop3: detected capacity change from 0 to 64 [ 87.830153][ T7] usb 5-1: selecting invalid altsetting 1 [ 87.854304][ T7] dvb_ttusb_budget: ttusb_init_controller: error [ 87.877533][ T7] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 87.917680][ T5050] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 88.007769][ T5050] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.057584][ T7] DVB: Unable to find symbol stv0299_attach() [ 88.179581][ T7] DVB: Unable to find symbol tda8083_attach() [ 88.186001][ T7] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 88.238593][ T7] usb 5-1: USB disconnect, device number 5 [ 88.497679][ T5062] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 88.502987][ T5078] autofs4:pid:5078:autofs_fill_super: called with bogus options [ 88.544836][ T5062] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.571552][ T5062] EXT4-fs warning (device loop5): ext4_empty_dir:3158: inode #12: comm syz.5.213: directory missing '..' [ 88.928878][ T5091] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 88.946659][ T5099] netlink: 16 bytes leftover after parsing attributes in process `syz.5.230'. [ 89.081948][ T5091] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.111822][ T4477] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 89.159753][ T5091] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 89.182545][ T5091] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 89.202196][ T5091] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.227: Failed to acquire dquot type 0 [ 89.387131][ T5112] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 89.537701][ T4477] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 89.560016][ T4477] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.573163][ T4477] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 89.586004][ T4477] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.658257][ T4477] hub 2-1:4.0: USB hub found [ 89.809340][ T5133] IPv6: NLM_F_CREATE should be specified when creating new route [ 89.887581][ T4477] hub 2-1:4.0: 2 ports detected [ 89.893219][ T4477] usb 2-1: selecting invalid altsetting 1 [ 89.911329][ T4477] hub 2-1:4.0: Using single TT (err -22) [ 90.102184][ T4477] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 90.109297][ T4477] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 90.182763][ T4477] usb 2-1: USB disconnect, device number 5 [ 90.353368][ T5158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.258'. [ 90.892232][ T5192] set_capacity_and_notify: 9 callbacks suppressed [ 90.892248][ T5192] loop4: detected capacity change from 0 to 4096 [ 91.122724][ T5200] netlink: 'syz.5.279': attribute type 29 has an invalid length. [ 91.128401][ T5201] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.178800][ T5200] netlink: 'syz.5.279': attribute type 29 has an invalid length. [ 91.209672][ T5202] netlink: 'syz.5.279': attribute type 29 has an invalid length. [ 91.557545][ T5218] netlink: 'syz.0.286': attribute type 8 has an invalid length. [ 91.581918][ T5218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.286'. [ 91.609791][ T5218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'. [ 91.627574][ T5194] loop1: detected capacity change from 0 to 32768 [ 91.759891][ T5194] XFS (loop1): Mounting V5 Filesystem [ 91.903878][ T5194] XFS (loop1): Ending clean mount [ 91.943859][ T4188] XFS (loop1): Unmounting Filesystem [ 92.124797][ T5243] loop3: detected capacity change from 0 to 32768 [ 92.156543][ T5243] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.294 (5243) [ 92.191899][ T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 92.265971][ T5243] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 92.284024][ T5243] BTRFS warning (device loop3): excessive commit interval 3581 [ 92.294270][ T5243] BTRFS info (device loop3): force zlib compression, level 3 [ 92.303042][ T5243] BTRFS info (device loop3): metadata ratio 107050 [ 92.310990][ T5243] BTRFS info (device loop3): turning on flush-on-commit [ 92.319961][ T5243] BTRFS info (device loop3): max_inline at 4096 [ 92.327946][ T4479] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.346767][ T5243] BTRFS info (device loop3): using free space tree [ 92.358883][ T5243] BTRFS info (device loop3): has skinny extents [ 92.541836][ T5243] BTRFS info (device loop3): enabling ssd optimizations [ 92.578056][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.585828][ T5280] loop1: detected capacity change from 0 to 16 [ 92.591981][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 92.608325][ T7] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 92.621294][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.635469][ T7] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 92.645205][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.758594][ T5280] erofs: (device loop1): mounted with root inode @ nid 36. [ 92.772256][ T4479] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.801492][ T5280] erofs: (device loop1): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 92.813262][ T5280] erofs: (device loop1): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 92.817522][ T4479] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.828652][ T5280] erofs: (device loop1): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 92.846963][ T5280] erofs: (device loop1): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 92.867914][ T5280] erofs: (device loop1): z_erofs_readahead: readahead error at page 17 @ nid 36 [ 92.888782][ T5280] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 92.890190][ T4479] usb 1-1: config 0 interface 0 has no altsetting 0 [ 92.910470][ T5280] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 9 of nid 36 [ 92.913080][ T4479] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 92.930673][ T5280] erofs: (device loop1): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 92.930707][ T5280] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 40959 of nid 36 [ 92.930726][ T5280] erofs: (device loop1): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 92.931285][ T5280] attempt to access beyond end of device [ 92.931285][ T5280] loop1: rw=524288, want=67108888, limit=16 [ 92.947119][ T4479] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.958846][ T5280] attempt to access beyond end of device [ 92.958846][ T5280] loop1: rw=524288, want=736, limit=16 [ 92.996780][ T5280] attempt to access beyond end of device [ 92.996780][ T5280] loop1: rw=524288, want=525160, limit=16 [ 93.009104][ T5280] attempt to access beyond end of device [ 93.009104][ T5280] loop1: rw=524288, want=24, limit=16 [ 93.011212][ T4479] usb 1-1: config 0 descriptor?? [ 93.061513][ T5291] loop5: detected capacity change from 0 to 128 [ 93.093230][ T5291] VFS: Found a Xenix FS (block size = 1024) on device loop5 [ 93.271853][ T4441] sysv_free_block: flc_count > flc_size [ 93.287376][ T4441] sysv_free_block: flc_count > flc_size [ 93.304984][ T4441] sysv_free_block: flc_count > flc_size [ 93.311272][ T4441] sysv_free_block: flc_count > flc_size [ 93.318434][ T4441] sysv_free_block: flc_count > flc_size [ 93.340885][ T4441] sysv_free_block: flc_count > flc_size [ 93.391890][ T7] gud 5-1:1.0: Failed to get properties (error=-71) [ 93.392626][ T4441] sysv_free_block: flc_count > flc_size [ 93.401831][ T7] gud: probe of 5-1:1.0 failed with error -71 [ 93.417766][ T4441] sysv_free_block: flc_count > flc_size [ 93.424178][ T4441] sysv_free_block: flc_count > flc_size [ 93.431223][ T4441] sysv_free_block: flc_count > flc_size [ 93.438872][ T4441] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 93.465939][ T7] usb 5-1: USB disconnect, device number 6 [ 93.586491][ T4479] input: HID 0eef:72c4 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0EEF:72C4.0004/input/input8 [ 93.663642][ T5310] loop1: detected capacity change from 0 to 256 [ 93.704536][ T5310] exfat: Deprecated parameter 'utf8' [ 93.710022][ T5310] exfat: Deprecated parameter 'namecase' [ 93.775980][ T4479] hid-multitouch 0003:0EEF:72C4.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0eef:72c4] on usb-dummy_hcd.0-1/input0 [ 93.820259][ T5310] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 93.852348][ T4479] usb 1-1: USB disconnect, device number 3 [ 94.024879][ T5313] fido_id[5313]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 94.098703][ T5326] loop1: detected capacity change from 0 to 16 [ 94.105098][ T5301] loop3: detected capacity change from 0 to 32768 [ 94.135477][ T5326] erofs: (device loop1): mounted with root inode @ nid 36. [ 94.168678][ T5330] netlink: 'syz.5.318': attribute type 1 has an invalid length. [ 94.170565][ T5326] erofs: (device loop1): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 1740 of nid 36 [ 94.354944][ T5301] XFS (loop3): Mounting V5 Filesystem [ 94.414917][ T5356] loop0: detected capacity change from 0 to 64 [ 94.450128][ T5359] loop5: detected capacity change from 0 to 33280 [ 94.553456][ T5359] EXT4-fs error (device loop5): ext4_orphan_get:1436: comm syz.5.327: bad orphan inode 13 [ 94.592932][ T5301] XFS (loop3): Ending clean mount [ 94.609494][ T5359] ext4_test_bit(bit=12, block=4) = 1 [ 94.614274][ T5301] XFS (loop3): Quotacheck needed: Please wait. [ 94.618631][ T5359] is_bad_inode(inode)=0 [ 94.659420][ T5359] NEXT_ORPHAN(inode)=0 [ 94.668813][ T5359] max_ino=32 [ 94.673208][ T5359] i_nlink=1 [ 94.677381][ T5359] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.797788][ T5359] EXT4-fs warning (device loop5): dx_probe:845: inode #2: comm syz.5.327: Hash code is SIPHASH, but hash not in dirent [ 94.838973][ T5374] netlink: 'syz.1.334': attribute type 29 has an invalid length. [ 94.844606][ T5359] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.327: Corrupt directory, running e2fsck is recommended [ 94.849068][ T5301] XFS (loop3): Quotacheck: Done. [ 94.874203][ T5359] EXT4-fs warning (device loop5): dx_probe:845: inode #2: comm syz.5.327: Hash code is SIPHASH, but hash not in dirent [ 94.894033][ T5359] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.327: Corrupt directory, running e2fsck is recommended [ 94.903679][ T5374] netlink: 'syz.1.334': attribute type 29 has an invalid length. [ 94.964040][ T5377] netlink: 'syz.1.334': attribute type 29 has an invalid length. [ 95.121515][ T4192] XFS (loop3): Unmounting Filesystem [ 95.234327][ T5393] ip_tables: iptables: counters copy to user failed while replacing table [ 95.323300][ T5392] NILFS (loop0): invalid segment: Checksum error in segment payload [ 95.366429][ T5392] NILFS (loop0): trying rollback from an earlier position [ 95.478237][ T5392] NILFS (loop0): recovery complete [ 95.495798][ T5401] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.541417][ T5398] rxe_eth0 speed is unknown, defaulting to 1000 [ 96.056202][ T5383] XFS (loop4): Mounting V5 Filesystem [ 96.182546][ T5417] set_capacity_and_notify: 2 callbacks suppressed [ 96.182561][ T5417] loop3: detected capacity change from 0 to 4096 [ 96.221681][ T5417] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 96.284366][ T5383] XFS (loop4): Ending clean mount [ 96.376325][ T4193] XFS (loop4): Unmounting Filesystem [ 96.416197][ T5431] device-mapper: table: 248:2: crypt: Error decoding and setting key [ 96.450993][ T5431] device-mapper: ioctl: error adding target to table [ 96.702610][ T4479] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 96.743385][ T5452] loop1: detected capacity change from 0 to 256 [ 96.971746][ T4479] usb 1-1: Using ep0 maxpacket: 8 [ 97.245437][ T5478] loop4: detected capacity change from 0 to 256 [ 97.282045][ T4479] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 97.293632][ T4479] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.347183][ T4479] usb 1-1: Product: syz [ 97.356403][ T4479] usb 1-1: Manufacturer: syz [ 97.361076][ T4479] usb 1-1: SerialNumber: syz [ 97.406288][ T4479] usb 1-1: config 0 descriptor?? [ 97.662028][ T4479] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 98.120773][ T5475] loop5: detected capacity change from 0 to 32768 [ 98.131958][ T4479] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 98.164438][ T4479] usb 1-1: USB disconnect, device number 4 [ 98.445227][ T5475] JBD2: Ignoring recovery information on journal [ 98.583297][ T5475] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 98.592691][ T5526] netlink: 'syz.4.385': attribute type 24 has an invalid length. [ 98.663193][ T4472] (kworker/u4:6,4472,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 98.711741][ T4472] (kworker/u4:6,4472,0):ocfs2_read_locked_inode:554 ERROR: status = -12 [ 98.779872][ T4472] (kworker/u4:6,4472,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=256, inode=0, rec_len=0, name_len=0 [ 98.948938][ T5503] loop3: detected capacity change from 0 to 32768 [ 99.027847][ T4441] ocfs2: Unmounting device (7,5) on (node local) [ 99.186977][ T5554] loop4: detected capacity change from 0 to 64 [ 99.213602][ T5503] XFS (loop3): Mounting V5 Filesystem [ 99.337470][ T5554] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 99.434881][ T5503] XFS (loop3): Ending clean mount [ 99.560290][ T5576] loop5: detected capacity change from 0 to 1024 [ 99.591540][ T4192] XFS (loop3): Unmounting Filesystem [ 99.647502][ T5576] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 99.733816][ T5585] loop4: detected capacity change from 0 to 128 [ 99.818828][ T5585] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 100.469211][ T5618] netlink: 64 bytes leftover after parsing attributes in process `syz.3.416'. [ 100.519742][ T5615] device-mapper: ioctl: unable to find target [ 100.906857][ T5640] loop3: detected capacity change from 0 to 4096 [ 101.004609][ T5647] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.193075][ T5654] device-mapper: table: 248:4: crypt: Error decoding and setting key [ 101.201277][ T5654] device-mapper: ioctl: error adding target to table [ 101.330424][ T5665] program syz.5.431 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.370256][ T5670] Bluetooth: hci0: Invalid link address type 1 for 66:55:44:23:22:11 [ 101.547790][ T5674] netlink: 2 bytes leftover after parsing attributes in process `syz.5.434'. [ 101.591777][ T4479] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 101.901148][ T5696] loop3: detected capacity change from 0 to 4096 [ 101.919289][ T5708] loop0: detected capacity change from 0 to 16 [ 101.958865][ T5708] erofs: (device loop0): mounted with root inode @ nid 36. [ 101.982036][ T4479] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.996077][ T5696] NILFS (loop3): invalid segment: Checksum error in segment payload [ 102.012999][ T4479] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.030148][ T5696] NILFS (loop3): trying rollback from an earlier position [ 102.077265][ T4479] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.099579][ T5696] NILFS (loop3): recovery complete [ 102.116837][ T4479] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.147855][ T4479] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.148594][ T5720] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.208309][ T5696] IPv6: addrconf: prefix option has invalid lifetime [ 102.221163][ T4479] usb 5-1: config 0 descriptor?? [ 102.232364][ T5696] IPv6: addrconf: prefix option has invalid lifetime [ 102.372472][ T5730] netlink: 256 bytes leftover after parsing attributes in process `syz.0.455'. [ 102.385458][ T5730] netlink: 72 bytes leftover after parsing attributes in process `syz.0.455'. [ 102.569361][ T5735] loop3: detected capacity change from 0 to 36864 [ 102.596079][ T4818] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 102.621274][ T5746] netlink: 'syz.0.460': attribute type 29 has an invalid length. [ 102.640830][ T5746] netlink: 'syz.0.460': attribute type 29 has an invalid length. [ 102.673069][ T5751] netlink: 'syz.0.460': attribute type 29 has an invalid length. [ 102.740633][ T5735] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 102.768941][ T4479] plantronics 0003:047F:FFFF.0005: unbalanced collection at end of report description [ 102.773381][ T5735] EXT4-fs (loop3): Remounting file system with no journal so ignoring journalled data option [ 102.789468][ T5735] EXT4-fs (loop3): Cannot change journaled quota options when quota turned on [ 102.806730][ T4479] plantronics 0003:047F:FFFF.0005: parse failed [ 102.851810][ T4818] usb 2-1: Using ep0 maxpacket: 8 [ 102.871857][ T4479] plantronics: probe of 0003:047F:FFFF.0005 failed with error -22 [ 102.971885][ T4818] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.017839][ T4818] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.052806][ T4818] usb 2-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 103.101880][ T4818] usb 2-1: config 0 interface 0 has no altsetting 0 [ 103.109442][ T4818] usb 2-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 103.147091][ T4818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.192284][ T4818] usb 2-1: config 0 descriptor?? [ 103.212729][ T7] usb 5-1: USB disconnect, device number 7 [ 103.338016][ T5775] device macsec1 entered promiscuous mode [ 103.427957][ T5763] loop0: detected capacity change from 0 to 32768 [ 103.630486][ T5798] device vlan2 entered promiscuous mode [ 103.649047][ T5800] nftables ruleset with unbound set [ 103.649452][ T5798] device bridge0 entered promiscuous mode [ 103.676759][ T4818] wacom 0003:056A:0003.0006: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 103.710174][ T4818] wacom 0003:056A:0003.0006: hidraw0: USB HID v10.07 Joystick [HID 056a:0003] on usb-dummy_hcd.1-1/input0 [ 103.739668][ T5805] netlink: 60 bytes leftover after parsing attributes in process `syz.5.476'. [ 103.759164][ T4818] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0003.0006/input/input10 [ 103.876752][ T5809] loop5: detected capacity change from 0 to 32896 [ 103.914609][ T4818] usb 2-1: USB disconnect, device number 6 [ 103.938721][ T5809] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.961934][ T5809] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.075329][ T5816] fido_id[5816]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 104.185823][ T5824] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.328601][ T5835] ipt_rpfilter: unknown options [ 104.574723][ T5848] loop4: detected capacity change from 0 to 2048 [ 104.614910][ T5855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.495'. [ 104.663573][ T5848] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.121110][ T5896] netlink: 332 bytes leftover after parsing attributes in process `syz.5.510'. [ 105.185260][ T5896] netlink: 'syz.5.510': attribute type 9 has an invalid length. [ 105.200708][ T5901] loop3: detected capacity change from 0 to 32896 [ 105.229663][ T5896] netlink: 108 bytes leftover after parsing attributes in process `syz.5.510'. [ 105.261964][ T5896] netlink: 32 bytes leftover after parsing attributes in process `syz.5.510'. [ 105.301165][ T5901] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.327655][ T5901] ext4 filesystem being mounted at /120/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.463219][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 105.471318][ T5910] loop1: detected capacity change from 0 to 4096 [ 105.488799][ T5919] MPTCP: kernel_bind error, err=-99 [ 105.533595][ T5923] logitech-hidpp-device 0005:046D:B012.0007: received hid++ report of bad size (29) [ 105.606925][ T5910] NILFS (loop1): invalid segment: Checksum error in segment payload [ 105.617077][ T4818] logitech-hidpp-device 0005:046D:B012.0007: Device not connected [ 105.654704][ T5910] NILFS (loop1): trying rollback from an earlier position [ 105.696857][ T5930] loop3: detected capacity change from 0 to 256 [ 105.739394][ T5930] exfat: Deprecated parameter 'utf8' [ 105.752075][ T5930] exfat: Deprecated parameter 'utf8' [ 105.776923][ T5930] exfat: Deprecated parameter 'namecase' [ 105.801272][ T5910] NILFS (loop1): recovery complete [ 105.807887][ T5930] exfat: Deprecated parameter 'namecase' [ 105.818743][ T5933] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.831822][ T7] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 105.849449][ T7] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 105.860053][ T5930] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbcba5927, utbl_chksum : 0xe619d30d) [ 105.910999][ T5910] IPv6: addrconf: prefix option has invalid lifetime [ 105.918726][ T7] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 105.956934][ T5910] IPv6: addrconf: prefix option has invalid lifetime [ 105.987759][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.040695][ T7] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 106.057182][ T7] usb 5-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 106.068757][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.107478][ T5903] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 106.144379][ T5903] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 106.175543][ T5903] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 106.223185][ T7] mos7720 5-1:1.0: Moschip 2 port adapter converter detected [ 106.332151][ T5943] loop3: detected capacity change from 0 to 4096 [ 106.431771][ T5944] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.462121][ T7] usb 5-1: mos7720: usb_control_msg() failed: -32 [ 106.487102][ T7] usb 5-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 106.544632][ T5935] XFS: attr2 mount option is deprecated. [ 106.570131][ T7] usb 5-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 106.628109][ T5937] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop0 scanned by syz.0.522 (5937) [ 106.684378][ T7] usb 5-1: USB disconnect, device number 8 [ 106.705492][ C0] usb 5-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 106.743076][ T5935] XFS (loop5): Mounting V5 Filesystem [ 106.778590][ T7] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 106.796653][ T7] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 106.835932][ T7] mos7720 5-1:1.0: device disconnected [ 106.897613][ T5937] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 106.913082][ T5935] XFS (loop5): Ending clean mount [ 106.929211][ T5937] BTRFS info (device loop0): using free space tree [ 106.936546][ T5937] BTRFS info (device loop0): has skinny extents [ 106.958015][ T5935] XFS (loop5): Quotacheck needed: Please wait. [ 107.026513][ T5935] XFS (loop5): Quotacheck: Done. [ 107.085105][ T5935] XFS (loop5): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 107.171377][ T4441] XFS (loop5): Unmounting Filesystem [ 107.230015][ T5975] set_capacity_and_notify: 3 callbacks suppressed [ 107.230032][ T5975] loop4: detected capacity change from 0 to 128 [ 107.317444][ T5937] BTRFS info (device loop0): enabling ssd optimizations [ 107.326108][ T5957] loop3: detected capacity change from 0 to 32768 [ 107.502735][ T5957] XFS (loop3): Mounting V5 Filesystem [ 107.778188][ T5986] mkiss: ax0: crc mode is auto. [ 107.946961][ T5957] XFS (loop3): Ending clean mount [ 108.023218][ T5999] netlink: 'syz.4.535': attribute type 9 has an invalid length. [ 108.047373][ T5999] netlink: 155304 bytes leftover after parsing attributes in process `syz.4.535'. [ 108.086807][ T4192] XFS (loop3): Unmounting Filesystem [ 108.297092][ T6018] loop1: detected capacity change from 0 to 33792 [ 108.334079][ T6018] EXT4-fs (loop1): Ignoring removed oldalloc option [ 108.346496][ T6018] EXT4-fs (loop1): Ignoring removed oldalloc option [ 108.354021][ T6018] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.452797][ T6018] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,bsddf,nodioread_nolock,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 108.662279][ T6018] EXT4-fs (loop1): Remounting file system with no journal so ignoring journalled data option [ 108.689612][ T6018] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.760348][ T6018] EXT4-fs (loop1): can't enable nombcache during remount [ 108.838516][ T6038] 0x0000000000ec-0x0000000000f2 : "" [ 108.987551][ T6038] ftl_cs: FTL header corrupt! [ 109.089128][ T6054] loop0: detected capacity change from 0 to 33280 [ 109.159108][ T6054] EXT4-fs (loop0): Ignoring removed bh option [ 109.176276][ T6054] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 109.196029][ T6058] tipc: Started in network mode [ 109.223735][ T6058] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 109.239680][ T6028] loop3: detected capacity change from 0 to 32768 [ 109.241066][ T6054] EXT4-fs (loop0): 1 truncate cleaned up [ 109.263967][ T6058] tipc: Enabled bearer , priority 10 [ 109.277315][ T6054] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,errors=continue,noload,bh,,errors=continue. Quota mode: none. [ 109.322942][ T6054] EXT4-fs warning (device loop0): ext4_group_add:1696: No reserved GDT blocks, can't resize [ 109.398272][ T6028] JBD2: Ignoring recovery information on journal [ 109.664577][ T6076] loop4: detected capacity change from 0 to 33280 [ 109.674906][ T6075] device-mapper: table: 248:5: raid: Gap in table [ 109.684270][ T6075] device-mapper: ioctl: error adding target to table [ 109.698815][ T6028] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 109.746921][ T6076] EXT4-fs (loop4): Ignoring removed bh option [ 109.844401][ T6076] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.569: corrupted in-inode xattr [ 109.918029][ T6076] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.569: couldn't read orphan inode 15 (err -117) [ 109.935449][ T4192] ocfs2: Unmounting device (7,3) on (node local) [ 109.938251][ T6076] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,inode_readahead_blks=0x0000000000000400,usrjquota=,nolazytime,norecovery,resgid=0x000000000000,errors=continue. Quota mode: none. [ 109.972787][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.336899][ T6097] loop3: detected capacity change from 0 to 33280 [ 110.394466][ T5293] tipc: Node number set to 9480874 [ 110.407653][ T6097] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 110.465067][ T6099] loop4: detected capacity change from 0 to 34816 [ 110.476843][ T6097] EXT4-fs (loop3): 1 truncate cleaned up [ 110.515157][ T6097] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,grpid,debug_want_extra_isize=0x0000000000000068,lazytime,nodioread_nolock,minixdf,,errors=continue. Quota mode: none. [ 110.603269][ T6097] EXT4-fs error (device loop3): xattr_find_entry:297: inode #15: comm syz.3.574: corrupted xattr entries [ 110.628699][ T6089] loop5: detected capacity change from 0 to 40427 [ 110.668991][ T6101] EXT4-fs error (device loop3): xattr_find_entry:297: inode #15: comm syz.3.574: corrupted xattr entries [ 110.676292][ T6089] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 110.696145][ T6089] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 110.698007][ T6099] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 110.722970][ T6089] F2FS-fs (loop5): invalid crc value [ 110.844102][ T6089] F2FS-fs (loop5): Found nat_bits in checkpoint [ 110.949986][ T6091] loop0: detected capacity change from 0 to 32768 [ 111.090882][ T6091] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 111.131421][ T6091] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 111.158467][ T6089] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 111.181704][ T6089] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 111.269880][ T6091] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 111.448654][ T6091] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 111.488956][ T6133] mkiss: ax0: crc mode is auto. [ 111.560394][ T5293] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 111.572265][ T6091] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 111.581503][ T6137] 0x0000000000ec-0x0000000000f2 : "" [ 111.585545][ T6091] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error [ 111.585545][ T6091] inode = 12 2341 [ 111.585545][ T6091] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590 [ 111.603871][ T6137] ftl_cs: FTL header corrupt! [ 111.677509][ T6091] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 111.695622][ T6091] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 111.715514][ T6091] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 111.723235][ T6141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.595'. [ 111.755197][ T6091] gfs2: fsid=syz:syz.s: File system withdrawn [ 111.771975][ T6091] CPU: 1 PID: 6091 Comm: syz.0.575 Not tainted syzkaller #0 [ 111.779306][ T6091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 111.789471][ T6091] Call Trace: [ 111.792766][ T6091] [ 111.795707][ T6091] dump_stack_lvl+0x188/0x250 [ 111.800454][ T6091] ? show_regs_print_info+0x20/0x20 [ 111.805674][ T6091] ? load_image+0x410/0x410 [ 111.810301][ T6091] gfs2_withdraw+0xb9a/0x14e0 [ 111.815186][ T6091] ? gfs2_lm+0x240/0x240 [ 111.819456][ T6091] ? load_image+0x410/0x410 [ 111.823992][ T6091] ? gfs2_consist_inode_i+0xc0/0xe0 [ 111.829227][ T6091] gfs2_dirent_scan+0x540/0x680 [ 111.834105][ T6091] ? gfs2_dirent_scan+0x680/0x680 [ 111.839155][ T6091] gfs2_dir_read+0x7ad/0x1820 [ 111.843874][ T6091] ? __might_sleep+0xf0/0xf0 [ 111.848484][ T6091] ? gfs2_dir_hash_inval+0x70/0x70 [ 111.853608][ T6091] ? _raw_spin_unlock+0x24/0x40 [ 111.858465][ T6091] ? gfs2_glock_nq+0xcaa/0x1510 [ 111.863342][ T6091] gfs2_readdir+0x165/0x1d0 [ 111.867874][ T6091] ? gfs2_fallocate+0x4b0/0x4b0 [ 111.872745][ T6091] ? gfs2_readdir+0x11f/0x1d0 [ 111.877700][ T6091] ? iterate_dir+0x10d/0x550 [ 111.882326][ T6091] ? down_read_killable+0x1ce/0x340 [ 111.887567][ T6091] ? fsnotify_perm+0x254/0x560 [ 111.892535][ T6091] iterate_dir+0x213/0x550 [ 111.896974][ T6091] ? gfs2_fallocate+0x4b0/0x4b0 [ 111.901841][ T6091] __se_sys_getdents64+0xf2/0x270 [ 111.906974][ T6091] ? __x64_sys_getdents64+0x80/0x80 [ 111.912294][ T6091] ? filldir+0x700/0x700 [ 111.916638][ T6091] ? lockdep_hardirqs_on+0x94/0x140 [ 111.921835][ T6091] do_syscall_64+0x4c/0xa0 [ 111.926246][ T6091] ? clear_bhb_loop+0x30/0x80 [ 111.931006][ T6091] ? clear_bhb_loop+0x30/0x80 [ 111.935681][ T6091] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.941607][ T6091] RIP: 0033:0x7f63e247efd9 [ 111.946055][ T6091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.965672][ T6091] RSP: 002b:00007f63e06cc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 111.974196][ T6091] RAX: ffffffffffffffda RBX: 00007f63e26fbfa0 RCX: 00007f63e247efd9 [ 111.982169][ T6091] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 111.990489][ T6091] RBP: 00007f63e250dfed R08: 0000000000000000 R09: 0000000000000000 [ 111.998452][ T6091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.006591][ T6091] R13: 00007f63e26fc038 R14: 00007f63e26fbfa0 R15: 00007ffe378610e8 [ 112.014576][ T6091] [ 112.017787][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.190741][ T6149] program syz.1.599 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.204051][ T5293] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 112.240611][ T5293] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.289920][ T5293] usb 5-1: config 0 interface 0 has no altsetting 0 [ 112.321104][ T5293] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 112.349573][ T5293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.390580][ T5293] usb 5-1: config 0 descriptor?? [ 112.526028][ T6168] set_capacity_and_notify: 1 callbacks suppressed [ 112.526045][ T6168] loop5: detected capacity change from 0 to 256 [ 112.530107][ T6169] loop0: detected capacity change from 0 to 33280 [ 112.616295][ T6168] FAT-fs (loop5): Directory bread(block 64) failed [ 112.620554][ T6169] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 112.632445][ T6168] FAT-fs (loop5): Directory bread(block 65) failed [ 112.636055][ T6169] System zones: 1-12 [ 112.639059][ T6168] FAT-fs (loop5): Directory bread(block 66) failed [ 112.650373][ T6168] FAT-fs (loop5): Directory bread(block 67) failed [ 112.669492][ T6168] FAT-fs (loop5): Directory bread(block 68) failed [ 112.685343][ T6169] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.607: missing EA_INODE flag [ 112.691832][ T4824] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.698396][ T6168] FAT-fs (loop5): Directory bread(block 69) failed [ 112.712802][ T6168] FAT-fs (loop5): Directory bread(block 70) failed [ 112.713074][ T6169] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.607: error while reading EA inode 12 err=-117 [ 112.719551][ T6168] FAT-fs (loop5): Directory bread(block 71) failed [ 112.719675][ T6168] FAT-fs (loop5): Directory bread(block 72) failed [ 112.745833][ T6168] FAT-fs (loop5): Directory bread(block 73) failed [ 112.761889][ T6169] EXT4-fs (loop0): 1 orphan inode deleted [ 112.767825][ T6169] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 112.835755][ T6168] binfmt_misc: register: failed to install interpreter file w5T)`)YFnA@T<3ڂ$rcnHwC" -8//file0 [ 112.840234][ T6169] EXT4-fs warning (device loop0): ext4_empty_dir:3149: inode #2: comm syz.0.607: directory missing '.' [ 112.910884][ T5293] koneplus 0003:1E7D:2E22.0008: unknown global tag 0xc [ 112.918020][ T5293] koneplus 0003:1E7D:2E22.0008: item 0 2 1 12 parsing failed [ 112.926197][ T5293] koneplus 0003:1E7D:2E22.0008: parse failed [ 112.932714][ T5293] koneplus: probe of 0003:1E7D:2E22.0008 failed with error -22 [ 113.064335][ T6173] loop5: detected capacity change from 0 to 4096 [ 113.115294][ T4814] usb 5-1: USB disconnect, device number 9 [ 113.117054][ T6173] ntfs3: loop5: Failed to load $Extend. [ 113.132265][ T4824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.162486][ T4824] usb 4-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 113.197705][ T4824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.228599][ T4824] usb 4-1: config 0 descriptor?? [ 113.261428][ T6183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.614'. [ 113.278650][ T6179] loop1: detected capacity change from 0 to 4096 [ 113.323588][ T6179] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 113.468401][ T6179] ntfs3: loop1: ino=1e, "file1" encrypted i/o not supported [ 113.482122][ T26] audit: type=1800 audit(1794443375.591:3): pid=6179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.613" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 113.542384][ T6197] comedi comedi3: Minor 256 is invalid! [ 113.984179][ T5293] usb 4-1: USB disconnect, device number 2 [ 114.099206][ T6234] loop4: detected capacity change from 0 to 256 [ 114.170623][ T6234] FAT-fs (loop4): Directory bread(block 64) failed [ 114.197025][ T6234] FAT-fs (loop4): Directory bread(block 65) failed [ 114.206276][ T6234] FAT-fs (loop4): Directory bread(block 66) failed [ 114.218273][ T6234] FAT-fs (loop4): Directory bread(block 67) failed [ 114.227657][ T6234] FAT-fs (loop4): Directory bread(block 68) failed [ 114.239807][ T6234] FAT-fs (loop4): Directory bread(block 69) failed [ 114.261053][ T6234] FAT-fs (loop4): Directory bread(block 70) failed [ 114.278762][ T6234] FAT-fs (loop4): Directory bread(block 71) failed [ 114.289886][ T6234] FAT-fs (loop4): Directory bread(block 72) failed [ 114.301396][ T6234] FAT-fs (loop4): Directory bread(block 73) failed [ 114.470980][ T6255] loop1: detected capacity change from 0 to 64 [ 114.608619][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.646'. [ 115.330092][ T6324] loop3: detected capacity change from 0 to 64 [ 115.371970][ T5294] Bluetooth: hci4: command 0x0405 tx timeout [ 115.468129][ T6323] loop4: detected capacity change from 0 to 4096 [ 115.568497][ T6323] ntfs: (device loop4): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 115.613840][ T6323] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 115.675230][ T6323] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 115.729014][ T6323] ntfs: volume version 3.1. [ 115.756921][ T6297] loop0: detected capacity change from 0 to 32768 [ 115.790923][ T6335] loop1: detected capacity change from 0 to 256 [ 115.945459][ T6323] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 115.980971][ T6297] read_mapping_page failed! [ 116.008063][ T6297] ERROR: (device loop0): txCommit: [ 116.008063][ T6297] [ 116.052970][ T6336] read_mapping_page failed! [ 116.058147][ T6336] ERROR: (device loop0): txCommit: [ 116.058147][ T6336] [ 116.102986][ T6308] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 116.127202][ T6323] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 116.165216][ T6308] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 116.178658][ T6323] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to map page. [ 116.188603][ T6323] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 116.206090][ T6323] ntfs: (device loop4): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -5. [ 116.241988][ T6308] F2FS-fs (loop5): invalid crc value [ 116.279772][ T6308] F2FS-fs (loop5): Found nat_bits in checkpoint [ 116.336318][ T4193] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 116.495137][ T6308] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 116.508128][ T6308] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 116.555685][ T6357] syz.0.681 uses obsolete (PF_INET,SOCK_PACKET) [ 116.773767][ T6363] ip_tables: iptables: counters copy to user failed while replacing table [ 116.988956][ T5293] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.275309][ T6387] netlink: 5 bytes leftover after parsing attributes in process `syz.3.694'. [ 117.421016][ T6386] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 117.421016][ T6386] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 117.421016][ T6386] [ 117.492135][ T6386] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 117.556813][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.696'. [ 117.592918][ T6391] netlink: 'syz.1.696': attribute type 4 has an invalid length. [ 117.623062][ T6386] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,resgid=0x0000000000000000,nouser_xattr,acl,debug_want_extra_isize=0x0000000000000080,inode_readahead_blks=0x0000000000100000,errors=remount-ro,noinit_itable,journal_dev=0x000000000000000e,. Quota mode: none. [ 117.961696][ T5294] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 118.040624][ T6402] set_capacity_and_notify: 5 callbacks suppressed [ 118.040643][ T6402] loop1: detected capacity change from 0 to 4096 [ 118.048706][ T6383] loop4: detected capacity change from 0 to 32768 [ 118.135812][ T6402] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 118.241842][ T6402] ntfs3: loop1: Failed to load $Extend. [ 118.287498][ T5294] usb 6-1: Using ep0 maxpacket: 8 [ 118.314584][ T6402] ntfs3: loop1: ino=5, "/" directory corrupted [ 118.342008][ T6402] ntfs3: loop1: ino=5, "/" directory corrupted [ 118.412113][ T5294] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.441728][ T5294] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.507444][ T6414] 0x0000000000ec-0x0000000000f2 : "" [ 118.552834][ T6414] ftl_cs: FTL header corrupt! [ 118.568918][ T6412] loop4: detected capacity change from 0 to 8192 [ 118.691834][ T5294] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 118.711633][ T5294] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.727912][ T6422] loop1: detected capacity change from 0 to 64 [ 118.741549][ T5294] usb 6-1: Product: syz [ 118.747437][ T5294] usb 6-1: Manufacturer: syz [ 118.756684][ T5294] usb 6-1: SerialNumber: syz [ 118.888670][ T6422] hfs: small file entry [ 119.018905][ T6434] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 119.047879][ T5294] usb 6-1: selecting invalid altsetting 1 [ 119.252120][ T5294] usb 6-1: unit 0 not found! [ 119.257440][ T5294] usb 6-1: unit 4 not found! [ 119.373193][ T6454] loop0: detected capacity change from 0 to 33280 [ 119.404903][ T5294] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 119.415166][ T6451] netlink: 'syz.3.721': attribute type 1 has an invalid length. [ 119.471202][ T6454] EXT4-fs error (device loop0): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 119.524018][ T4814] usb 6-1: USB disconnect, device number 2 [ 119.543156][ T6454] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #11: comm syz.0.724: corrupted inode contents [ 119.569981][ T6463] loop1: detected capacity change from 0 to 256 [ 119.612269][ T6463] exfat: Deprecated parameter 'utf8' [ 119.617792][ T6463] exfat: Deprecated parameter 'namecase' [ 119.628186][ T6454] EXT4-fs error (device loop0): ext4_dirty_inode:6087: inode #11: comm syz.0.724: mark_inode_dirty error [ 119.667023][ T6463] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 119.730001][ T6467] loop4: detected capacity change from 0 to 32896 [ 119.774143][ T6454] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.724: invalid indirect mapped block 1 (level 1) [ 119.793293][ T5336] udevd[5336]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.838715][ T6454] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #11: comm syz.0.724: corrupted inode contents [ 119.862459][ T6454] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 119.873087][ T6454] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #11: comm syz.0.724: corrupted inode contents [ 119.908156][ T6454] EXT4-fs error (device loop0): ext4_truncate:4286: inode #11: comm syz.0.724: mark_inode_dirty error [ 119.958128][ T6467] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.961175][ T6454] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 119.973374][ T6475] netlink: 68 bytes leftover after parsing attributes in process `syz.1.733'. [ 119.994546][ T6454] EXT4-fs (loop0): 1 truncate cleaned up [ 120.009888][ T6454] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.021499][ T6467] ext4 filesystem being mounted at /138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 120.226323][ T6454] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 13: comm syz.0.724: path /152/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 120.374144][ T6491] loop1: detected capacity change from 0 to 1024 [ 120.481826][ T4814] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 120.540221][ T6491] attempt to access beyond end of device [ 120.540221][ T6491] loop1: rw=0, want=5780, limit=1024 [ 120.561840][ T4824] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 120.822652][ T6512] loop1: detected capacity change from 0 to 2048 [ 120.873364][ T4814] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 120.898500][ T6513] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.918760][ T4814] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.928213][ T4824] usb 4-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 120.942376][ T4824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.967860][ T4814] usb 6-1: config 0 descriptor?? [ 121.036844][ T4814] cp210x 6-1:0.0: cp210x converter detected [ 121.051780][ T4479] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 121.125698][ T6520] loop1: detected capacity change from 0 to 33280 [ 121.167582][ T6520] EXT4-fs (loop1): inline encryption not supported [ 121.194482][ T6520] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.752: inode #1: comm syz.1.752: iget: illegal inode # [ 121.228399][ T6520] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.752: error while reading EA inode 1 err=-117 [ 121.256345][ T6520] EXT4-fs (loop1): 1 orphan inode deleted [ 121.265544][ T6520] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,grpjquota=,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,inlinecrypt,,errors=continue. Quota mode: none. [ 121.472599][ T4479] usb 5-1: config 1 has an invalid interface number: 7 but max is 1 [ 121.484917][ T4479] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.495727][ T4814] usb 6-1: cp210x converter now attached to ttyUSB0 [ 121.533643][ T4479] usb 5-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 121.549466][ T4479] usb 5-1: config 1 has no interface number 2 [ 121.556480][ T4479] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.574440][ T4479] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 121.593145][ T4479] usb 5-1: config 1 interface 1 has no altsetting 0 [ 121.686955][ T6529] netlink: 'syz.0.756': attribute type 1 has an invalid length. [ 121.703928][ T4818] usb 6-1: USB disconnect, device number 3 [ 121.740474][ T4818] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 121.754244][ T4818] cp210x 6-1:0.0: device disconnected [ 121.792010][ T4479] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.792042][ T4824] rtsx_usb: probe of 4-1:1.0 failed with error -71 [ 121.808888][ T4479] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.823486][ T4479] usb 5-1: Product: syz [ 121.828009][ T4479] usb 5-1: Manufacturer: syz [ 121.833514][ T4479] usb 5-1: SerialNumber: syz [ 121.856051][ T4824] usb 4-1: USB disconnect, device number 3 [ 121.902798][ T4479] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 121.903324][ T6523] XFS (loop1): Mounting V5 Filesystem [ 121.909728][ T4479] cdc_ncm 5-1:1.0: bind() failure [ 121.920890][ T4479] cdc_ncm 5-1:1.7: CDC Union missing and no IAD found [ 121.928806][ T4479] cdc_ncm 5-1:1.7: bind() failure [ 121.956972][ T6523] XFS (loop1): Ending clean mount [ 121.994981][ T4188] XFS (loop1): Unmounting Filesystem [ 122.122183][ T4479] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 122.132961][ T4479] usb 5-1: USB disconnect, device number 10 [ 122.682777][ T6556] EXT4-fs (loop0): 1 truncate cleaned up [ 122.688467][ T6556] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000005,,errors=continue. Quota mode: none. [ 122.732417][ T6543] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 122.741793][ T6543] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 122.767420][ T6556] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.765: bg 0: block 465: padding at end of block bitmap is not set [ 122.808255][ T6543] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 123.005948][ T6578] 0x0000000000ec-0x0000000000f2 : "" [ 123.049114][ T6578] ftl_cs: FTL header corrupt! [ 123.067449][ T6543] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 123.250547][ T6543] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 123.298277][ T6543] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error [ 123.298277][ T6543] inode = 12 2341 [ 123.298277][ T6543] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590 [ 123.352148][ T6543] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 123.360559][ T6543] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 123.395270][ T6543] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 123.420479][ T6543] gfs2: fsid=syz:syz.s: File system withdrawn [ 123.434777][ T6543] CPU: 1 PID: 6543 Comm: syz.1.758 Not tainted syzkaller #0 [ 123.442202][ T6543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 123.452562][ T6543] Call Trace: [ 123.455858][ T6543] [ 123.458806][ T6543] dump_stack_lvl+0x188/0x250 [ 123.463522][ T6543] ? show_regs_print_info+0x20/0x20 [ 123.468756][ T6543] ? load_image+0x410/0x410 [ 123.473585][ T6543] gfs2_withdraw+0xb9a/0x14e0 [ 123.478394][ T6543] ? gfs2_lm+0x240/0x240 [ 123.482664][ T6543] ? load_image+0x410/0x410 [ 123.487206][ T6543] ? gfs2_consist_inode_i+0xc0/0xe0 [ 123.492645][ T6543] gfs2_dirent_scan+0x540/0x680 [ 123.497539][ T6543] ? gfs2_dirent_scan+0x680/0x680 [ 123.502695][ T6543] gfs2_dir_read+0x7ad/0x1820 [ 123.507742][ T6543] ? __might_sleep+0xf0/0xf0 [ 123.512361][ T6543] ? gfs2_dir_hash_inval+0x70/0x70 [ 123.517510][ T6543] ? _raw_spin_unlock+0x24/0x40 [ 123.522388][ T6543] ? gfs2_glock_nq+0xcaa/0x1510 [ 123.527297][ T6543] gfs2_readdir+0x165/0x1d0 [ 123.531966][ T6543] ? gfs2_fallocate+0x4b0/0x4b0 [ 123.537014][ T6543] ? gfs2_readdir+0x11f/0x1d0 [ 123.541833][ T6543] ? iterate_dir+0x10d/0x550 [ 123.546528][ T6543] ? down_read_killable+0x1ce/0x340 [ 123.551742][ T6543] ? fsnotify_perm+0x254/0x560 [ 123.556639][ T6543] iterate_dir+0x213/0x550 [ 123.561335][ T6543] ? gfs2_fallocate+0x4b0/0x4b0 [ 123.566280][ T6543] __se_sys_getdents64+0xf2/0x270 [ 123.571402][ T6543] ? __x64_sys_getdents64+0x80/0x80 [ 123.576591][ T6543] ? filldir+0x700/0x700 [ 123.581114][ T6543] ? lockdep_hardirqs_on+0x94/0x140 [ 123.586614][ T6543] do_syscall_64+0x4c/0xa0 [ 123.591385][ T6543] ? clear_bhb_loop+0x30/0x80 [ 123.596079][ T6543] ? clear_bhb_loop+0x30/0x80 [ 123.600771][ T6543] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.606682][ T6543] RIP: 0033:0x7ffb8d3b8fd9 [ 123.611111][ T6543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.631417][ T6543] RSP: 002b:00007ffb8b606028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 123.639968][ T6543] RAX: ffffffffffffffda RBX: 00007ffb8d635fa0 RCX: 00007ffb8d3b8fd9 [ 123.648736][ T6543] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 123.658387][ T6543] RBP: 00007ffb8d447fed R08: 0000000000000000 R09: 0000000000000000 [ 123.666659][ T6543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.675730][ T6543] R13: 00007ffb8d636038 R14: 00007ffb8d635fa0 R15: 00007ffdef58f638 [ 123.684480][ T6543] [ 123.763799][ T6611] set_capacity_and_notify: 5 callbacks suppressed [ 123.763814][ T6611] loop3: detected capacity change from 0 to 33280 [ 123.903242][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.795'. [ 123.986696][ T6611] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.790: attempt to clear invalid blocks 2 len 1 [ 124.023275][ T6611] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 124.092175][ T6611] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.790: invalid indirect mapped block 1819239214 (level 0) [ 124.130518][ T6634] loop5: detected capacity change from 0 to 64 [ 124.141047][ T6611] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.790: invalid indirect mapped block 1819239214 (level 1) [ 124.185111][ T6632] loop0: detected capacity change from 0 to 4096 [ 124.281730][ T6639] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.360643][ T6611] EXT4-fs (loop3): 1 truncate cleaned up [ 124.385677][ T6611] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000003,,errors=continue. Quota mode: none. [ 124.473489][ T6638] loop1: detected capacity change from 0 to 8192 [ 124.635900][ T6638] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 124.646924][ T6638] REISERFS (device loop1): using journaled data mode [ 124.654349][ T6638] reiserfs: using flush barriers [ 124.673621][ T6638] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 124.696674][ T6638] REISERFS (device loop1): checking transaction log (loop1) [ 124.706419][ T6638] REISERFS (device loop1): Using r5 hash to sort names [ 124.734949][ T6638] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 124.776463][ T6638] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 125.129657][ T6690] loop5: detected capacity change from 0 to 64 [ 125.137931][ T6689] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 125.384554][ T6709] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.833'. [ 125.429047][ T6709] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 125.516840][ T6722] loop4: detected capacity change from 0 to 8 [ 125.547754][ T6725] loop0: detected capacity change from 0 to 64 [ 125.584853][ T6730] loop1: detected capacity change from 0 to 8 [ 125.690528][ T6722] SQUASHFS error: zstd decompression error: 2 [ 125.708321][ T6722] SQUASHFS error: zstd decompression failed, data probably corrupt [ 125.732777][ T6727] loop5: detected capacity change from 0 to 8192 [ 125.762531][ T6722] SQUASHFS error: Failed to read block 0x60: -5 [ 125.816244][ T6727] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 125.820421][ T6722] SQUASHFS error: zstd decompression error: 2 [ 125.836117][ T6722] SQUASHFS error: zstd decompression failed, data probably corrupt [ 125.844319][ T6722] SQUASHFS error: Failed to read block 0x60: -5 [ 125.852065][ T26] audit: type=1800 audit(1794443387.951:4): pid=6722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.842" name="/" dev="loop4" ino=1 res=0 errno=0 [ 125.906160][ T6727] REISERFS (device loop5): using ordered data mode [ 125.914188][ T6727] reiserfs: using flush barriers [ 125.954606][ T6727] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 126.037999][ T6745] loop1: detected capacity change from 0 to 16 [ 126.060414][ T6727] REISERFS (device loop5): checking transaction log (loop5) [ 126.109234][ T6751] netlink: 232 bytes leftover after parsing attributes in process `syz.4.853'. [ 126.118992][ T6745] erofs: (device loop1): mounted with root inode @ nid 36. [ 126.129450][ T6727] REISERFS (device loop5): Using r5 hash to sort names [ 126.147247][ T6727] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 126.156590][ T6753] netlink: 28 bytes leftover after parsing attributes in process `syz.3.856'. [ 126.467186][ T6768] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.732644][ T5293] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.792178][ T5294] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 127.072132][ T5294] usb 2-1: Using ep0 maxpacket: 16 [ 127.142179][ T5293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.154788][ T5293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.167860][ T5293] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 1.00 [ 127.183434][ T5293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.195282][ T6814] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 127.244850][ T5293] usb 1-1: config 0 descriptor?? [ 127.251953][ T5294] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.280644][ T5294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.319363][ T5294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.350954][ T5294] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 127.374029][ T5294] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 127.383891][ T5294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.406825][ T5294] usb 2-1: config 0 descriptor?? [ 127.553061][ T6841] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -107 0 [ 127.715319][ T5293] wacom 0003:056A:0331.000A: unknown main item tag 0x0 [ 127.750169][ T5293] wacom 0003:056A:0331.000A: unknown main item tag 0x0 [ 127.762598][ T5293] wacom 0003:056A:0331.000A: unknown main item tag 0x0 [ 127.770506][ T5293] wacom 0003:056A:0331.000A: unknown main item tag 0x0 [ 127.781230][ T5293] wacom 0003:056A:0331.000A: unknown main item tag 0x0 [ 127.792537][ T5293] wacom 0003:056A:0331.000A: unknown main item tag 0x0 [ 127.801267][ T5293] wacom 0003:056A:0331.000A: unknown main item tag 0x0 [ 127.822809][ T5293] wacom 0003:056A:0331.000A: unknown main item tag 0x0 [ 127.844182][ T5293] wacom 0003:056A:0331.000A: unknown main item tag 0x0 [ 127.853368][ T5293] wacom 0003:056A:0331.000A: unknown main item tag 0x0 [ 127.861474][ T5293] wacom 0003:056A:0331.000A: unknown main item tag 0x0 [ 127.881549][ T5293] wacom 0003:056A:0331.000A: unknown main item tag 0x0 [ 127.897445][ T5293] wacom 0003:056A:0331.000A: unknown main item tag 0x0 [ 127.899749][ T6858] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,data_err=ignore,init_itable,nodelalloc,abort,,errors=continue. Quota mode: none. [ 127.927065][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.939581][ T5293] wacom 0003:056A:0331.000A: hidraw0: USB HID v1.10 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 127.960097][ T5294] hid-generic 0003:057E:2019.000B: item fetching failed at offset 0/5 [ 127.971064][ T5294] hid-generic: probe of 0003:057E:2019.000B failed with error -22 [ 128.061888][ T5293] usb 1-1: USB disconnect, device number 5 [ 128.214858][ T4479] usb 2-1: USB disconnect, device number 7 [ 128.225724][ T6870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.907'. [ 128.234521][ T6868] fido_id[6868]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 128.635899][ T5293] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 128.725955][ T6888] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 128.783601][ T6888] hpfs: filesystem error: improperly stopped [ 128.789992][ T6888] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 128.800749][ T6888] hpfs: You really don't want any checks? You are crazy... [ 128.810336][ T6888] hpfs: hpfs_map_sector(): read error [ 128.819049][ T4814] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 128.830743][ T6888] hpfs: code page support is disabled [ 128.839500][ T6888] hpfs: hpfs_map_4sectors(): unaligned read [ 128.865700][ T6888] hpfs: hpfs_map_4sectors(): unaligned read [ 128.875573][ T6888] hpfs: filesystem error: unable to find root dir [ 128.876745][ T6895] set_capacity_and_notify: 5 callbacks suppressed [ 128.876762][ T6895] loop3: detected capacity change from 0 to 64 [ 129.040329][ T6899] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 129.052541][ T5293] usb 5-1: not running at top speed; connect to a high speed hub [ 129.065721][ T4814] usb 1-1: Using ep0 maxpacket: 16 [ 129.167420][ T5293] usb 5-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 129.181753][ T5293] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.192081][ T4814] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.207212][ T5293] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 129.222203][ T4814] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.227988][ T5293] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 129.236852][ T4814] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.250044][ T5293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.275609][ T4814] usb 1-1: config 0 interface 0 has no altsetting 0 [ 129.282623][ T5293] usb 5-1: config 0 descriptor?? [ 129.285769][ T4814] usb 1-1: New USB device found, idVendor=056a, idProduct=5200, bcdDevice= 0.00 [ 129.298700][ T4814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.310394][ T4814] usb 1-1: config 0 descriptor?? [ 129.328162][ T5293] usb 5-1: Found UVC 9.00 device (046d:0825) [ 129.671253][ T6935] loop3: detected capacity change from 0 to 33792 [ 129.710406][ T6935] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.748355][ T6935] fscrypt (loop3, inode 14): Error -61 getting encryption context [ 129.795884][ T4814] wacom 0003:056A:5200.000C: unknown main item tag 0x6 [ 129.810348][ T4814] wacom 0003:056A:5200.000C: unknown main item tag 0x0 [ 129.835133][ T4814] wacom 0003:056A:5200.000C: unknown main item tag 0x0 [ 129.864639][ T4814] wacom 0003:056A:5200.000C: unknown main item tag 0x0 [ 129.896813][ T4814] wacom 0003:056A:5200.000C: unknown main item tag 0x0 [ 129.914216][ T4814] wacom 0003:056A:5200.000C: Unknown device_type for 'HID 056a:5200'. Ignoring. [ 129.941213][ T6949] loop1: detected capacity change from 0 to 33280 [ 129.960969][ T6948] loop3: detected capacity change from 0 to 36864 [ 129.988217][ T6949] EXT4-fs (loop1): inline encryption not supported [ 129.995392][ T5293] uvcvideo 5-1:0.1: Failed to set UVC probe control : -71 (exp. 48). [ 130.022111][ T5293] uvcvideo 5-1:0.1: Failed to query (129) UVC probe control : -71 (exp. 48). [ 130.036912][ T5293] uvcvideo 5-1:0.1: Failed to initialize the device (-5). [ 130.037326][ T6949] EXT4-fs (loop1): 1 orphan inode deleted [ 130.056747][ T5293] usb 5-1: USB disconnect, device number 11 [ 130.062959][ T6949] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,inlinecrypt,usrquota,jqfmt=vfsv1,jqfmt=vfsv0,delalloc,journal_dev=0x0000000000000008,debug_want_extra_isize=0x000000000000005c,i_version,,errors=continue. Quota mode: writeback. [ 130.134737][ T6948] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodelalloc,,errors=continue. Quota mode: writeback. [ 130.154195][ T4814] usb 1-1: USB disconnect, device number 6 [ 130.198030][ T6948] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 130.304430][ T26] audit: type=1326 audit(1794443392.411:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.5.946" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f394de3dfd9 code=0x0 [ 130.423948][ T6961] netlink: 'syz.3.948': attribute type 11 has an invalid length. [ 130.432371][ T6961] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.948'. [ 130.456497][ T6959] loop1: detected capacity change from 0 to 4096 [ 130.533765][ T6965] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.809650][ T6983] netlink: 44 bytes leftover after parsing attributes in process `syz.1.958'. [ 130.823668][ T6984] loop3: detected capacity change from 0 to 33280 [ 130.861403][ T6984] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.903034][ T6984] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.976359][ T6995] loop4: detected capacity change from 0 to 64 [ 131.047247][ T7003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.968'. [ 131.093741][ T7005] loop1: detected capacity change from 0 to 256 [ 131.148742][ T6995] hfs: hfs: Invalid key length: 94 [ 131.202986][ T4192] EXT4-fs error (device loop3): ext4_lookup:1860: inode #11: comm syz-executor: iget: checksum invalid [ 131.261852][ T155] ------------[ cut here ]------------ [ 131.269752][ T4192] EXT4-fs error (device loop3): ext4_lookup:1860: inode #11: comm syz-executor: iget: checksum invalid [ 131.287913][ T155] kernel BUG at fs/hfs/inode.c:443! [ 131.347387][ T155] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 131.353491][ T155] CPU: 1 PID: 155 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 131.359608][ T7017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.977'. [ 131.361381][ T155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 131.361396][ T155] Workqueue: writeback wb_workfn (flush-7:4) [ 131.386523][ T155] RIP: 0010:hfs_write_inode+0xa19/0xa20 [ 131.392173][ T155] Code: 8d ff e9 05 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fe ff ff 4c 89 f7 e8 01 ba 8d ff e9 43 fe ff ff e8 d7 71 48 ff <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 [ 131.412223][ T155] RSP: 0018:ffffc900020273a0 EFLAGS: 00010293 [ 131.418301][ T155] RAX: ffffffff8230bbb9 RBX: ffff88807d6958c8 RCX: ffff88801c643b80 [ 131.426492][ T155] RDX: 0000000000000000 RSI: ffffffff8d2e2d80 RDI: 0000000000000000 [ 131.435859][ T155] RBP: ffffc90002027530 R08: ffff88801c643b80 R09: 0000000000000003 [ 131.444089][ T155] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 131.452260][ T155] R13: 1ffff92000404e78 R14: 0000000000000000 R15: ffff88807d695888 [ 131.460524][ T155] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 131.469533][ T155] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.476897][ T155] CR2: 00007f63e06cbff8 CR3: 000000007346f000 CR4: 00000000003506e0 [ 131.485196][ T155] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 131.493378][ T155] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 131.501457][ T155] Call Trace: [ 131.504750][ T155] [ 131.507675][ T155] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 131.513189][ T155] ? __writeback_single_inode+0x46d/0xda0 [ 131.519064][ T155] ? __rwlock_init+0x140/0x140 [ 131.524153][ T155] __writeback_single_inode+0x6c4/0xda0 [ 131.530162][ T155] writeback_sb_inodes+0xaaa/0x1750 [ 131.535369][ T155] ? queue_io+0x530/0x530 [ 131.539834][ T155] ? move_expired_inodes+0x722/0x770 [ 131.545384][ T155] ? rcu_is_watching+0x11/0xa0 [ 131.550147][ T155] ? queue_io+0x3ba/0x530 [ 131.554627][ T155] wb_writeback+0x44a/0xbc0 [ 131.559266][ T155] ? rcu_lock_release+0x20/0x20 [ 131.564232][ T155] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 131.570331][ T155] ? __lock_acquire+0x7d40/0x7d40 [ 131.575449][ T155] ? mark_lock+0x94/0x320 [ 131.580024][ T155] ? _raw_spin_unlock_irq+0x1f/0x40 [ 131.585322][ T155] wb_workfn+0x43a/0xf20 [ 131.589605][ T155] ? inode_wait_for_writeback+0x220/0x220 [ 131.595492][ T155] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 131.601673][ T155] ? __lock_acquire+0x7d40/0x7d40 [ 131.606930][ T155] ? read_lock_is_recursive+0x10/0x10 [ 131.612386][ T155] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 131.618742][ T155] ? _raw_spin_unlock+0x40/0x40 [ 131.624267][ T155] ? _raw_spin_unlock_irq+0x1f/0x40 [ 131.629498][ T155] process_one_work+0x867/0xff0 [ 131.635406][ T155] ? worker_detach_from_pool+0x240/0x240 [ 131.641138][ T155] ? lockdep_hardirqs_off+0x70/0x100 [ 131.646523][ T155] ? _raw_spin_lock_irq+0xb7/0xf0 [ 131.651839][ T155] ? _raw_spin_lock_irqsave+0x100/0x100 [ 131.657684][ T155] ? wq_worker_running+0x97/0x170 [ 131.662819][ T155] worker_thread+0xad7/0x12a0 [ 131.667779][ T155] kthread+0x42e/0x520 [ 131.672059][ T155] ? rcu_lock_release+0x20/0x20 [ 131.676918][ T155] ? kthread_blkcg+0xd0/0xd0 [ 131.681706][ T155] ret_from_fork+0x1f/0x30 [ 131.686254][ T155] [ 131.689489][ T155] Modules linked in: [ 131.693478][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.705693][ T155] ---[ end trace 98ea1448a698b257 ]--- [ 131.711492][ T155] RIP: 0010:hfs_write_inode+0xa19/0xa20 [ 131.717189][ T155] Code: 8d ff e9 05 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fe ff ff 4c 89 f7 e8 01 ba 8d ff e9 43 fe ff ff e8 d7 71 48 ff <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 [ 131.738062][ T155] RSP: 0018:ffffc900020273a0 EFLAGS: 00010293 [ 131.744657][ T155] RAX: ffffffff8230bbb9 RBX: ffff88807d6958c8 RCX: ffff88801c643b80 [ 131.752709][ T155] RDX: 0000000000000000 RSI: ffffffff8d2e2d80 RDI: 0000000000000000 [ 131.760712][ T155] RBP: ffffc90002027530 R08: ffff88801c643b80 R09: 0000000000000003 [ 131.768778][ T155] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 131.777030][ T155] R13: 1ffff92000404e78 R14: 0000000000000000 R15: ffff88807d695888 [ 131.785874][ T155] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 131.795106][ T155] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.801817][ T155] CR2: 00007f63e06cbff8 CR3: 000000007346f000 CR4: 00000000003506e0 [ 131.810179][ T155] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 131.818848][ T155] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 131.827242][ T155] Kernel panic - not syncing: Fatal exception [ 131.833792][ T155] Kernel Offset: disabled [ 131.838244][ T155] Rebooting in 86400 seconds..