last executing test programs: 2m42.621016206s ago: executing program 3 (id=591): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xd8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffffffffe9d, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2m42.525065651s ago: executing program 3 (id=593): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0ab0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3caa435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908ad10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d076feafa22f0610a70f2bdf4000200000066b60d00b0c2c1254f0963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b5887437a172ebc02a740694298b79dc194e533583412dff048fc21f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be033c9d2f972cc93c1c13caec04a367c24a9fb2a6991ddb737d527d6acb15426415b6e8b14f822e86067a5e991c3b404984e1a2c6e94bd0339454c13ad3c328a182c15dc760a3000000005dc2ed0e0b29e98fa883c71949a34d84030323e3d54f45b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce903eaf32706e0000249a028044ede964362cfb7830a246c3b2f60000fc4deb8eda1368b0960b8d69bd99c64893d44f962526528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e582160ed048c46e1dccca85bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7033be648b12bb1fee58b58d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d70c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc3a4763948a1cbc10348ef2ac3781b847611fcb0a26acafdd6d9ab05865fcf7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb81c53f16d80f51006cbc71570a5e272b223425e09dc6b6cc1fbc455a64fd449284f71761092a0342000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d28484e15dc4320e4f85c16a8fbffadf8214d6d24cabe17ad4135d8872935ce0e6a468fd20fa4461d1d600234feac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c1044ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880ada682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f4815237c3aa356217738898a16ba603439f6eaad8e70b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0xa, 0x80, 0x140}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r0}, 0x38) 2m42.360453441s ago: executing program 3 (id=595): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xc, 0x7fffffff}]}) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0006000800"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa88000001"], 0x0) 2m42.238258468s ago: executing program 3 (id=597): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2402, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000500)={0x66666666666666d, 0x0, [{0x80000001, 0x3, 0x1, 0x7fffffff, 0x9, 0x3, 0x4}, {0x7, 0xb, 0x6, 0x7f, 0xd11, 0x4, 0xfffffffe}, {0xd, 0x9, 0x1, 0x4, 0x80, 0x81, 0x2}, {0x2, 0x40, 0x5, 0x5, 0x2, 0x4, 0x1}]}) 2m42.145512673s ago: executing program 3 (id=598): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2m41.213458027s ago: executing program 3 (id=617): r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000480)={0x7, 0xfffffffffffffffe, 0x7, 0x0, 0x3, 0x200, "0f6d00", 0x2, 0x2, 0x0, 0x6, 0x0, 0x4, 0xff}) 2m26.148923483s ago: executing program 32 (id=617): r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000480)={0x7, 0xfffffffffffffffe, 0x7, 0x0, 0x3, 0x200, "0f6d00", 0x2, 0x2, 0x0, 0x6, 0x0, 0x4, 0xff}) 2m15.666088972s ago: executing program 4 (id=1059): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x80, &(0x7f0000000000), &(0x7f0000000080)=0x4) 2m15.506344132s ago: executing program 4 (id=1062): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x28e3}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000380)={0x7d, {{0x29, 0x0, 0x2000000, @empty, 0x8000005}}}, 0x88) 2m15.419258197s ago: executing program 4 (id=1063): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a", 0xb9}, {&(0x7f0000000840)="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", 0x1cc}, {&(0x7f00000003c0)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea4", 0x36}], 0x3}, 0x8001) 2m15.285887844s ago: executing program 4 (id=1067): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000900)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 2m14.778725634s ago: executing program 4 (id=1074): r0 = socket$inet6(0x10, 0x80002, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffe}, {0x16, 0x0, 0x2}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) 2m14.16282158s ago: executing program 4 (id=1083): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="42000000030000000000000000000000000000000000000021"], 0x42) 2m14.007314749s ago: executing program 33 (id=1083): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="42000000030000000000000000000000000000000000000021"], 0x42) 1m57.905081295s ago: executing program 1 (id=1284): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="d2ff0304872a89073478e5f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m57.532379496s ago: executing program 1 (id=1289): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000200)=0x4) close(r0) 1m57.272816321s ago: executing program 1 (id=1293): r0 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r0, 0xbabc) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), 0x4) 1m57.040986345s ago: executing program 1 (id=1296): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x8) 1m56.905211713s ago: executing program 1 (id=1298): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x300, 0x0, &(0x7f0000002080)) 1m56.250848971s ago: executing program 1 (id=1309): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1m55.959363008s ago: executing program 34 (id=1309): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 7.322666984s ago: executing program 6 (id=2396): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11) ioctl$TIOCSLCKTRMIOS(r0, 0x8910, &(0x7f00000001c0)) 4.901665935s ago: executing program 0 (id=2415): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x3) ioctl$TCFLSH(r0, 0x540b, 0x0) 4.687782337s ago: executing program 0 (id=2417): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6062, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)={0x0, 0x22, 0x10, {0x10, 0xd, "3d91419da546052dcdcf01abdc14"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.687414827s ago: executing program 7 (id=2418): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000002"], 0x8) 4.575464664s ago: executing program 7 (id=2419): io_setup(0x8, &(0x7f0000000540)=0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x1, r1, &(0x7f0000000140)="0100", 0x2, 0x2a21}]) 4.11973541s ago: executing program 6 (id=2420): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0x6e) connect$unix(r0, &(0x7f0000000640)=@file={0x1}, 0x6e) 3.965144809s ago: executing program 6 (id=2421): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8844a3, &(0x7f00000001c0)={[{@huge_advise}]}) 3.708996654s ago: executing program 6 (id=2422): socket(0x40000000015, 0x5, 0x0) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) 3.516754325s ago: executing program 6 (id=2424): syz_io_uring_setup(0xbf4, &(0x7f0000000180)={0x0, 0x18c0, 0x800, 0x3, 0x3}, &(0x7f00000000c0), 0x0) r0 = syz_mount_image$xfs(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x2218a5d, &(0x7f0000000140), 0x0, 0x96a4, &(0x7f0000002080)="$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") ioctl$FS_IOC_GETFSMAP(r0, 0xc0205867, &(0x7f00000000c0)=ANY=[]) 3.194271454s ago: executing program 5 (id=2426): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0]) 2.410483509s ago: executing program 0 (id=2427): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCGIDLE(r0, 0x4004743c, 0x0) 1.511614582s ago: executing program 2 (id=2430): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.445943656s ago: executing program 2 (id=2431): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x28, 0x2c, 0x1, 0x70bd28, 0x0, "", [@typed={0x8, 0x40, 0x0, 0x0, @uid=r1}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0x9, 0xdf, 0x0, 0x1, [@generic="1f598086b3"]}]}]}, 0x28}], 0x1}, 0x0) 1.342465592s ago: executing program 5 (id=2432): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 1.262755626s ago: executing program 2 (id=2433): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x10000, 0x191, 0x0, 0x0, 0xdd9f83, 0x8, 0x2f, 0xf3, 0x2, 0xa, 0x722, 0x6, 0x7, 0x5, 0x27, 0x20, {0x0, 0x6fd8e84d}, 0x3, 0xed}}) 1.159196092s ago: executing program 7 (id=2434): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, 0x0}, 0x4008804) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)="c1090a000000000000001d1e02af80f3", 0x10}, {&(0x7f0000000180)="96675dd1dde03e4a4d739db009197aa0", 0x10}], 0x2}, 0x4040) 1.140812944s ago: executing program 2 (id=2435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000001c0007800c000400002d00002e5f00000c0003"], 0x30}}, 0x0) 1.049314379s ago: executing program 7 (id=2436): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0xa, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, r1, 0x1, 0x0, 0x0, {0x35}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0) 998.590492ms ago: executing program 2 (id=2437): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x20, 0x12, 0xa01, 0x70bd28, 0x25dfdbfd, {0x80, 0x0, 0x300}, [@typed={0x9, 0xf5, 0x0, 0x0, @binary="585878a177"}]}, 0x20}, 0x1, 0x0, 0x0, 0x8840}, 0x0) 960.979094ms ago: executing program 5 (id=2438): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x6c82, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x66, 0x0, 0x63, 0x0, 0x0, @empty, @empty}}}}) 897.539558ms ago: executing program 7 (id=2439): unshare(0x2040400) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x9a, 0xfffffffffffffffe}, 0x10) 804.194073ms ago: executing program 2 (id=2440): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 751.645826ms ago: executing program 5 (id=2441): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) pread64(r0, 0x0, 0x0, 0x4) 664.591901ms ago: executing program 7 (id=2442): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x5, 0x2}, 0x50) 568.724177ms ago: executing program 5 (id=2443): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x7, 0x0, &(0x7f0000000280)) 509.06406ms ago: executing program 0 (id=2444): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x44, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x3}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x6}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x3}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xd}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x54}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0xd}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 371.418788ms ago: executing program 5 (id=2445): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) 313.363821ms ago: executing program 0 (id=2446): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) msgget$private(0x0, 0x40) 90.108285ms ago: executing program 0 (id=2447): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) mkdir(0x0, 0x0) sysfs$2(0x9, 0x0, 0x0) 0s ago: executing program 6 (id=2448): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @empty}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) kernel console output (not intermixed with test programs): loop2): disk space caching is enabled [ 162.033332][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.063040][ T7095] BTRFS info (device loop2): has skinny extents [ 162.091244][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.123455][ T7118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1149'. [ 162.134263][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 162.145601][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.173260][ T4801] Bluetooth: hci3: command 0x040f tx timeout [ 162.209879][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 162.449928][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1085'. [ 162.466848][ T7095] BTRFS info (device loop2): enabling ssd optimizations [ 162.527033][ T7095] BTRFS info (device loop2): clearing free space tree [ 162.578852][ T7095] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 162.649766][ T7095] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 163.742294][ T4242] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 164.012557][ T4242] usb 6-1: Using ep0 maxpacket: 32 [ 164.130639][ T4319] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.142572][ T4242] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.178815][ T4242] usb 6-1: config 0 interface 0 has no altsetting 0 [ 164.212433][ T4242] usb 6-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 164.230895][ T4242] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.253130][ T4835] Bluetooth: hci3: command 0x0419 tx timeout [ 164.275153][ T4242] usb 6-1: config 0 descriptor?? [ 164.309880][ T4319] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.327950][ T7218] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1187'. [ 164.419806][ T4319] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.508066][ T7230] loop1: detected capacity change from 0 to 512 [ 164.583780][ T4319] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.608112][ T7230] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 164.631668][ T7230] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c816e02c, mo2=0002] [ 164.644283][ T7230] EXT4-fs (loop1): orphan cleanup on readonly fs [ 164.651330][ T7230] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.1190: bad orphan inode 267 [ 164.672264][ T7230] EXT4-fs (loop1): Remounting filesystem read-only [ 164.691468][ T7230] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,grpquota. Quota mode: writeback. [ 164.756039][ T7230] System zones: 1-12 [ 164.767390][ T4242] hid-generic 0003:07C0:1125.0014: hidraw0: USB HID v0.02 Device [HID 07c0:1125] on usb-dummy_hcd.5-1/input0 [ 164.783161][ T7230] EXT4-fs (loop1): re-mounted. Opts: quota,noload,block_validity,. Quota mode: writeback. [ 164.976327][ T4242] usb 6-1: USB disconnect, device number 3 [ 165.099492][ T7243] fido_id[7243]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 165.235987][ T4793] kernel read not supported for file /dsp (pid: 4793 comm: kworker/1:11) [ 165.267783][ T7248] loop0: detected capacity change from 0 to 4096 [ 165.307224][ T7248] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 165.436925][ T7248] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 165.794954][ T7272] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1206'. [ 166.302612][ T1324] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 166.584927][ T1324] usb 3-1: Using ep0 maxpacket: 16 [ 166.703667][ T1324] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 166.717285][ T1324] usb 3-1: config 0 has no interface number 0 [ 166.729664][ T1324] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 166.757198][ T1324] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 166.783060][ T1324] usb 3-1: config 0 interface 41 has no altsetting 0 [ 166.953261][ T1324] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 166.987575][ T1324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.008196][ T7330] loop1: detected capacity change from 0 to 64 [ 167.023650][ T1324] usb 3-1: Product: syz [ 167.028001][ T1324] usb 3-1: Manufacturer: syz [ 167.039705][ T1324] usb 3-1: SerialNumber: syz [ 167.078468][ T1324] usb 3-1: config 0 descriptor?? [ 167.131614][ T7330] hfs: unable to locate alternate MDB [ 167.137589][ T7287] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 167.151361][ T7287] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 167.162223][ T7330] hfs: continuing without an alternate MDB [ 167.192637][ T4319] device hsr_slave_0 left promiscuous mode [ 167.213116][ T4319] device hsr_slave_1 left promiscuous mode [ 167.269267][ T4319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.314733][ T4319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.345671][ T4319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.366320][ T4319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.432542][ T1324] dm9601: probe of 3-1:0.41 failed with error -71 [ 167.459998][ T4319] device hsr0 left promiscuous mode [ 167.470980][ T4319] bridge0: port 3(hsr0) entered disabled state [ 167.483248][ T1324] sr9700: probe of 3-1:0.41 failed with error -71 [ 167.531233][ T1324] usb 3-1: USB disconnect, device number 14 [ 167.615138][ T7353] loop0: detected capacity change from 0 to 1024 [ 167.636113][ T4319] device bridge_slave_1 left promiscuous mode [ 167.652228][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.691527][ T7357] loop6: detected capacity change from 0 to 256 [ 167.712563][ T4319] device bridge_slave_0 left promiscuous mode [ 167.718809][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.794503][ T7360] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.1240'. [ 167.858667][ T4319] device veth1_macvtap left promiscuous mode [ 167.870925][ T7357] FAT-fs (loop6): Directory bread(block 64) failed [ 167.911674][ T7357] FAT-fs (loop6): Directory bread(block 65) failed [ 167.954534][ T4319] device veth0_macvtap left promiscuous mode [ 167.960698][ T4319] device veth1_vlan left promiscuous mode [ 167.972519][ T7357] FAT-fs (loop6): Directory bread(block 66) failed [ 167.979297][ T7357] FAT-fs (loop6): Directory bread(block 67) failed [ 168.015423][ T7357] FAT-fs (loop6): Directory bread(block 68) failed [ 168.022119][ T7357] FAT-fs (loop6): Directory bread(block 69) failed [ 168.041419][ T4319] device veth0_vlan left promiscuous mode [ 168.103139][ T7357] FAT-fs (loop6): Directory bread(block 70) failed [ 168.112560][ T7357] FAT-fs (loop6): Directory bread(block 71) failed [ 168.119215][ T7357] FAT-fs (loop6): Directory bread(block 72) failed [ 168.184795][ T7357] FAT-fs (loop6): Directory bread(block 73) failed [ 168.226057][ T7376] netlink: 'syz.1.1245': attribute type 29 has an invalid length. [ 168.488738][ T7388] loop2: detected capacity change from 0 to 256 [ 168.617416][ T7388] FAT-fs (loop2): Directory bread(block 64) failed [ 168.634777][ T7388] FAT-fs (loop2): Directory bread(block 65) failed [ 168.656207][ T7388] FAT-fs (loop2): Directory bread(block 66) failed [ 168.677748][ T7388] FAT-fs (loop2): Directory bread(block 67) failed [ 168.695170][ T7388] FAT-fs (loop2): Directory bread(block 68) failed [ 168.711527][ T7388] FAT-fs (loop2): Directory bread(block 69) failed [ 168.730474][ T7388] FAT-fs (loop2): Directory bread(block 70) failed [ 168.747176][ T7388] FAT-fs (loop2): Directory bread(block 71) failed [ 168.777141][ T7388] FAT-fs (loop2): Directory bread(block 72) failed [ 168.797683][ T7388] FAT-fs (loop2): Directory bread(block 73) failed [ 168.902595][ T4235] Bluetooth: hci0: command 0x041f tx timeout [ 169.174051][ T4319] team0 (unregistering): Port device team_slave_1 removed [ 169.207935][ T4319] team0 (unregistering): Port device team_slave_0 removed [ 169.245265][ T4319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.297373][ T4319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.386141][ T4319] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 169.428055][ T4319] bond0 (unregistering): Released all slaves [ 169.507248][ T7376] netlink: 'syz.1.1245': attribute type 29 has an invalid length. [ 169.697149][ T7416] sctp: [Deprecated]: syz.2.1261 (pid 7416) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.697149][ T7416] Use struct sctp_sack_info instead [ 170.052499][ T4793] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 170.095770][ T7425] loop5: detected capacity change from 0 to 4096 [ 170.149536][ T7425] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 170.356702][ T7425] ntfs: volume version 3.1. [ 170.432544][ T4793] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 170.451022][ T4793] usb 1-1: config 0 has no interface number 0 [ 170.468169][ T4793] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 170.672470][ T4793] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 170.712234][ T4793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.720332][ T4793] usb 1-1: Product: syz [ 170.746708][ T4793] usb 1-1: Manufacturer: syz [ 170.802334][ T4793] usb 1-1: SerialNumber: syz [ 170.833687][ T4793] usb 1-1: config 0 descriptor?? [ 170.859533][ T7420] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 170.893758][ T4793] usb-storage 1-1:0.20: USB Mass Storage device detected [ 170.960113][ T4793] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 170.967838][ T4779] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 171.128959][ T7421] loop6: detected capacity change from 0 to 40427 [ 171.149599][ T7421] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x1ffff [ 171.158938][ T4793] scsi host1: usb-storage 1-1:0.20 [ 171.177340][ T7421] F2FS-fs (loop6): invalid crc value [ 171.227321][ T7421] F2FS-fs (loop6): Found nat_bits in checkpoint [ 171.352592][ T4779] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.369860][ T4779] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 171.413436][ T4779] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.418609][ T7421] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 171.446063][ T4801] usb 1-1: USB disconnect, device number 11 [ 171.483567][ T4779] usb 6-1: config 0 descriptor?? [ 171.968817][ T4779] logitech-djreceiver 0003:046D:C71F.0015: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.5-1/input0 [ 172.050297][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1288'. [ 172.172702][ T4835] usb 6-1: USB disconnect, device number 4 [ 172.384219][ T7502] fido_id[7502]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 172.833501][ T7525] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1285'. [ 173.035563][ T7533] loop2: detected capacity change from 0 to 256 [ 173.142733][ T7533] FAT-fs (loop2): Directory bread(block 64) failed [ 173.149540][ T7533] FAT-fs (loop2): Directory bread(block 65) failed [ 173.171672][ T7533] FAT-fs (loop2): Directory bread(block 66) failed [ 173.190065][ T7533] FAT-fs (loop2): Directory bread(block 67) failed [ 173.211257][ T7533] FAT-fs (loop2): Directory bread(block 68) failed [ 173.258248][ T7533] FAT-fs (loop2): Directory bread(block 69) failed [ 173.284305][ T7533] FAT-fs (loop2): Directory bread(block 70) failed [ 173.327631][ T7547] loop0: detected capacity change from 0 to 64 [ 173.344512][ T7533] FAT-fs (loop2): Directory bread(block 71) failed [ 173.377485][ T7533] FAT-fs (loop2): Directory bread(block 72) failed [ 173.442398][ T7533] FAT-fs (loop2): Directory bread(block 73) failed [ 174.172294][ T4779] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 174.552695][ T4779] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 174.579721][ T4779] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 174.626727][ T4779] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 174.672230][ T4779] usb 7-1: config 220 has no interface number 2 [ 174.699430][ T4779] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 174.756004][ T4779] usb 7-1: config 220 interface 0 has no altsetting 0 [ 174.772327][ T4779] usb 7-1: config 220 interface 76 has no altsetting 0 [ 174.779366][ T4779] usb 7-1: config 220 interface 1 has no altsetting 0 [ 174.942436][ T4779] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 174.976033][ T4779] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.006751][ T4779] usb 7-1: Product: syz [ 175.011003][ T4779] usb 7-1: Manufacturer: syz [ 175.044764][ T4779] usb 7-1: SerialNumber: syz [ 175.088363][ T7575] chnl_net:caif_netlink_parms(): no params data found [ 175.442634][ T4779] usb 7-1: selecting invalid altsetting 0 [ 175.449272][ T4779] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 175.466549][ T4779] usb 7-1: No valid video chain found. [ 175.455012][ T7575] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.524630][ T7575] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.573591][ T4779] usb 7-1: selecting invalid altsetting 0 [ 175.579423][ T4779] usbtest: probe of 7-1:220.1 failed with error -22 [ 175.591433][ T7633] loop5: detected capacity change from 0 to 256 [ 175.603526][ T7575] device bridge_slave_0 entered promiscuous mode [ 175.635190][ T4779] usb 7-1: USB disconnect, device number 2 [ 175.663603][ T7575] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.671756][ T7575] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.710203][ T7633] FAT-fs (loop5): Directory bread(block 64) failed [ 175.742317][ T7575] device bridge_slave_1 entered promiscuous mode [ 175.754047][ T7633] FAT-fs (loop5): Directory bread(block 65) failed [ 175.760810][ T7633] FAT-fs (loop5): Directory bread(block 66) failed [ 175.775646][ T7635] loop2: detected capacity change from 0 to 256 [ 175.814406][ T7633] FAT-fs (loop5): Directory bread(block 67) failed [ 175.821128][ T7633] FAT-fs (loop5): Directory bread(block 68) failed [ 175.848106][ T7633] FAT-fs (loop5): Directory bread(block 69) failed [ 175.870410][ T7633] FAT-fs (loop5): Directory bread(block 70) failed [ 175.885589][ T7575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.903040][ T7635] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 175.942375][ T7633] FAT-fs (loop5): Directory bread(block 71) failed [ 175.949568][ T7633] FAT-fs (loop5): Directory bread(block 72) failed [ 175.956840][ T7633] FAT-fs (loop5): Directory bread(block 73) failed [ 175.993518][ T7575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.056703][ T4319] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.080056][ T7612] loop0: detected capacity change from 0 to 32768 [ 176.259385][ T26] audit: type=1800 audit(1769554888.874:13): pid=7612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1331" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 176.291582][ T4319] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.345577][ T4835] Bluetooth: hci1: command 0x0409 tx timeout [ 176.407131][ T7575] team0: Port device team_slave_0 added [ 176.486421][ T7575] team0: Port device team_slave_1 added [ 176.633194][ T4319] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.720200][ T7575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.749938][ T7575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.777922][ T7661] loop5: detected capacity change from 0 to 64 [ 176.831261][ T7575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.906976][ T4319] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.997332][ T7575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.023246][ T7575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.120266][ T7575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.197872][ T7670] netem: change failed [ 177.340258][ T7575] device hsr_slave_0 entered promiscuous mode [ 177.358429][ T7676] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 177.366765][ T7575] device hsr_slave_1 entered promiscuous mode [ 177.384486][ T7575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.396157][ T7676] [U] J"—E:ÀÆ" [ 177.412822][ T7575] Cannot create hsr debugfs directory [ 177.600371][ T4319] tipc: Left network mode [ 177.870358][ T7659] loop2: detected capacity change from 0 to 32768 [ 178.018962][ T7575] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 178.090085][ T7575] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 178.171889][ T7697] loop5: detected capacity change from 0 to 16 [ 178.211491][ T7698] netlink: 'syz.6.1359': attribute type 3 has an invalid length. [ 178.241442][ T7575] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 178.261534][ T7697] erofs: (device loop5): mounted with root inode @ nid 36. [ 178.273609][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1359'. [ 178.304524][ T7575] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 178.412472][ T4242] Bluetooth: hci1: command 0x041b tx timeout [ 178.492545][ T4779] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 178.773438][ T7575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.784120][ T7681] loop0: detected capacity change from 0 to 40427 [ 178.831664][ T7681] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 178.863968][ T7681] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 178.880847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.888622][ T4779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 178.909980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.923388][ T4779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.935190][ T7681] F2FS-fs (loop0): Found nat_bits in checkpoint [ 178.959232][ T7575] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.971299][ T4779] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 179.003904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.027593][ T7722] loop5: detected capacity change from 0 to 2048 [ 179.035713][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.052340][ T4779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.081861][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.089299][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.104174][ T4779] usb 3-1: config 0 descriptor?? [ 179.121949][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.146990][ T7681] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 179.160214][ T7722] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 179.166212][ T7681] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 179.205898][ T7722] NILFS (loop5): mounting unchecked fs [ 179.251408][ T4304] udevd[4304]: incorrect nilfs2 checksum on /dev/loop5 [ 179.269583][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.270292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.270743][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.270832][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.272100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.283060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.284916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.286417][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.287133][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.287861][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.288551][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.290310][ T7722] NILFS (loop5): recovery complete [ 179.316306][ T7730] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 179.330957][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.331672][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.393716][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.394319][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.411866][ T7575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.584499][ T4779] samsung 0003:0419:0001.0016: unknown main item tag 0x0 [ 179.586425][ T4779] samsung 0003:0419:0001.0016: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.2-1/input0 [ 179.717656][ T4319] device hsr_slave_0 left promiscuous mode [ 179.718407][ T4319] device hsr_slave_1 left promiscuous mode [ 179.718989][ T4319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.719063][ T4319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.719885][ T4319] device bridge_slave_1 left promiscuous mode [ 179.720011][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.725665][ T4319] device bridge_slave_0 left promiscuous mode [ 179.725796][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.775782][ T4319] device veth1_macvtap left promiscuous mode [ 179.775876][ T4319] device veth0_macvtap left promiscuous mode [ 179.775975][ T4319] device veth1_vlan left promiscuous mode [ 179.808655][ T4787] usb 3-1: USB disconnect, device number 15 [ 179.885291][ T7737] fido_id[7737]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 180.507918][ T1324] Bluetooth: hci1: command 0x040f tx timeout [ 180.761666][ T4319] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 180.867813][ T4319] team0 (unregistering): Port device team_slave_1 removed [ 180.912323][ T4319] team0 (unregistering): Port device team_slave_0 removed [ 180.944917][ T4319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.010683][ T4319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.165637][ T7770] loop6: detected capacity change from 0 to 1024 [ 181.167245][ T4319] bond0 (unregistering): Released all slaves [ 181.535940][ T7780] loop2: detected capacity change from 0 to 256 [ 181.595565][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.606783][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.615377][ T7780] exfat: Deprecated parameter 'utf8' [ 181.643996][ T7780] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6c34595, utbl_chksum : 0xe619d30d) [ 181.669475][ T7575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.262530][ T4779] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 182.527649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 182.574181][ T1324] Bluetooth: hci1: command 0x0419 tx timeout [ 182.584405][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 182.632614][ T4779] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 182.657060][ T4779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.667776][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 182.706662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.709390][ T4779] usb 1-1: config 0 descriptor?? [ 182.744234][ T7575] device veth0_vlan entered promiscuous mode [ 182.774591][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.794708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.827751][ T7575] device veth1_vlan entered promiscuous mode [ 182.952448][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 182.973425][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 182.992397][ T4779] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 183.010132][ T4779] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 183.012634][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 183.086411][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 183.116071][ T7575] device veth0_macvtap entered promiscuous mode [ 183.154874][ T7575] device veth1_macvtap entered promiscuous mode [ 183.216707][ T4779] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 183.247414][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.278045][ T4779] [drm] Initialized udl on minor 2 [ 183.319607][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.365120][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.410219][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.413898][ T4779] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 183.436067][ T7841] loop6: detected capacity change from 0 to 1024 [ 183.468427][ T4779] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 183.486186][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.514602][ T4779] usb 1-1: USB disconnect, device number 12 [ 183.542953][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.569121][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.588486][ T4787] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 183.609142][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.640028][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.666316][ T4787] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 183.675029][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.716046][ T7575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.733185][ T4787] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 183.749220][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 183.765043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 183.848587][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 183.903854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 183.945574][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.977227][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.045388][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.111097][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.158284][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.213052][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.242269][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.272213][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.292245][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.322970][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.355756][ T155] hfsplus: b-tree write err: -5, ino 4 [ 184.358976][ T7575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.401491][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 184.412052][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 184.458236][ T7575] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.482238][ T7575] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.554713][ T7575] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.590608][ T7575] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.723275][ T7870] team0: Device vxcan3 is of different type [ 185.097855][ T7848] loop5: detected capacity change from 0 to 40427 [ 185.114467][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.114552][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.118920][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 185.164645][ T7848] F2FS-fs (loop5): invalid crc value [ 185.183754][ T7848] F2FS-fs (loop5): Found nat_bits in checkpoint [ 185.237348][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.237429][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.243062][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 185.264590][ T7886] netlink: 'syz.2.1411': attribute type 2 has an invalid length. [ 185.406274][ T7848] F2FS-fs (loop5): Start checkpoint disabled! [ 185.444957][ T7848] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 186.507033][ T7933] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1427'. [ 186.545001][ T7935] netem: incorrect ge model size [ 186.550120][ T7935] netem: change failed [ 186.757499][ T7939] loop6: detected capacity change from 0 to 256 [ 186.916858][ T7939] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 187.139337][ T7961] loop5: detected capacity change from 0 to 2048 [ 187.346058][ T7961] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,noblock_validity,errors=remount-ro,. Quota mode: none. [ 187.604471][ T4793] kernel write not supported for file /sg0 (pid: 4793 comm: kworker/1:11) [ 187.724558][ T7992] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1449'. [ 188.832402][ T4235] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 188.853704][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1467'. [ 189.116894][ T4235] usb 7-1: Using ep0 maxpacket: 16 [ 189.238283][ T8013] loop2: detected capacity change from 0 to 32768 [ 189.338690][ T8051] loop7: detected capacity change from 0 to 8 [ 189.381467][ T8013] XFS (loop2): Mounting V5 Filesystem [ 189.421294][ T8051] unable to read inode lookup table [ 189.432731][ T4235] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 189.470248][ T4235] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.478885][ T8022] loop0: detected capacity change from 0 to 32768 [ 189.562451][ T4235] usb 7-1: Product: syz [ 189.631011][ T4235] usb 7-1: Manufacturer: syz [ 189.657476][ T4235] usb 7-1: SerialNumber: syz [ 189.676608][ T4235] r8152-cfgselector 7-1: config 0 descriptor?? [ 189.696024][ T8022] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 189.775847][ T8013] XFS (loop2): Starting recovery (logdev: internal) [ 189.842447][ T8013] XFS (loop2): Ending recovery (logdev: internal) [ 189.930338][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 189.974417][ T4235] r8152-cfgselector 7-1: Unknown version 0x0000 [ 190.051093][ T4235] usbip-host 7-1: 7-1 is not in match_busid table... skip! [ 190.128374][ T4197] XFS (loop2): Unmounting Filesystem [ 190.189741][ T8041] loop5: detected capacity change from 0 to 32768 [ 190.258627][ T7] usb 7-1: USB disconnect, device number 3 [ 190.335992][ T8079] loop7: detected capacity change from 0 to 2048 [ 190.405632][ T8041] XFS (loop5): Mounting V5 Filesystem [ 190.425631][ T8079] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.693669][ T8041] XFS (loop5): Ending clean mount [ 190.740812][ T8041] XFS (loop5): Quotacheck needed: Please wait. [ 190.950877][ T8041] XFS (loop5): Quotacheck: Done. [ 191.212543][ T4793] Bluetooth: hci2: command 0x0406 tx timeout [ 191.227703][ T4235] Bluetooth: hci0: command 0x0406 tx timeout [ 191.293443][ T6516] XFS (loop5): Unmounting Filesystem [ 191.826185][ T8145] loop7: detected capacity change from 0 to 1024 [ 192.100575][ T154] hfsplus: b-tree write err: -5, ino 4 [ 192.523988][ T8174] tipc: Enabling not permitted [ 192.529537][ T8174] tipc: Enabling of bearer rejected, failed to enable media [ 192.880607][ T8200] loop5: detected capacity change from 0 to 256 [ 192.925252][ T8200] exfat: Deprecated parameter 'utf8' [ 192.931018][ T8200] exfat: Deprecated parameter 'utf8' [ 192.939586][ T8203] loop2: detected capacity change from 0 to 512 [ 193.030426][ T8200] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 193.209057][ T8213] loop7: detected capacity change from 0 to 8192 [ 193.217296][ T8203] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1517: inode has both inline data and extents flags [ 193.270745][ T8203] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1517: couldn't read orphan inode 15 (err -117) [ 193.299564][ T8213] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 193.318513][ T8203] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 193.349176][ T8213] REISERFS (device loop7): using ordered data mode [ 193.385833][ T13] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 193.402348][ T13] Bluetooth: hci1: Injecting HCI hardware error event [ 193.406474][ T8213] reiserfs: using flush barriers [ 193.416916][ T4195] Bluetooth: hci1: hardware error 0x00 [ 193.451019][ T8213] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 193.482702][ T8213] REISERFS (device loop7): checking transaction log (loop7) [ 193.523625][ T8213] REISERFS (device loop7): Using r5 hash to sort names [ 193.530856][ T8213] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 193.656836][ T8213] REISERFS warning (device loop7): super-6502 reiserfs_getopt: unknown mount option "noload" [ 194.263391][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.269823][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.544485][ T8199] loop6: detected capacity change from 0 to 32768 [ 194.599876][ T8249] loop7: detected capacity change from 0 to 4096 [ 194.648006][ T8199] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 194.696620][ T8199] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 194.793361][ T8199] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 194.813120][ T8249] ntfs3: loop7: ino=3, Correct links count -> 2. [ 194.869610][ T8265] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1537'. [ 194.919079][ T8265] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1537'. [ 194.977638][ T8199] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 194.983969][ T8249] ntfs3: loop7: failed to convert "0000" to iso8859-13 [ 195.030068][ T8249] ntfs3: loop7: failed to convert name for inode 1e. [ 195.102733][ T4793] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 195.171560][ T8224] loop5: detected capacity change from 0 to 40427 [ 195.316532][ T8224] F2FS-fs (loop5): Invalid log blocks per segment (4278190089) [ 195.363485][ T8224] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 195.435229][ T8224] F2FS-fs (loop5): invalid crc value [ 195.533362][ T8224] F2FS-fs (loop5): Found nat_bits in checkpoint [ 195.577863][ T8291] nbd: must specify a size in bytes for the device [ 195.586403][ T8290] netlink: 201392 bytes leftover after parsing attributes in process `syz.7.1545'. [ 195.643115][ T4793] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 195.663825][ T4793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.671941][ T4793] usb 1-1: Product: syz [ 195.732785][ T4793] usb 1-1: Manufacturer: syz [ 195.737466][ T4793] usb 1-1: SerialNumber: syz [ 195.784557][ T4793] usb 1-1: config 0 descriptor?? [ 195.823493][ T8224] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 195.830595][ T8224] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 195.863757][ T4793] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 196.490221][ T4835] usb 1-1: USB disconnect, device number 13 [ 197.272383][ T4793] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 197.312386][ T4187] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 197.351846][ T8367] loop0: detected capacity change from 0 to 2048 [ 197.378311][ T8367] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 197.405164][ T8367] NILFS (loop0): mounting unchecked fs [ 197.454471][ T4341] udevd[4341]: incorrect nilfs2 checksum on /dev/loop0 [ 197.485517][ T8373] sch_fq: defrate 4294967295 ignored. [ 197.496268][ T8367] NILFS (loop0): recovery complete [ 197.515968][ T8374] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 197.526893][ T4793] usb 3-1: Using ep0 maxpacket: 32 [ 197.663055][ T4793] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 197.702308][ T4793] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 197.727052][ T8380] loop5: detected capacity change from 0 to 1024 [ 197.755620][ T4793] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.784690][ T8380] EXT4-fs (loop5): Ignoring removed orlov option [ 197.849082][ T8380] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,user_xattr,,errors=continue. Quota mode: none. [ 197.870889][ C0] vkms_vblank_simulate: vblank timer overrun [ 197.922523][ T4187] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 197.942075][ T4187] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.950476][ T4187] usb 7-1: Product: syz [ 197.955093][ T4187] usb 7-1: Manufacturer: syz [ 197.959734][ T4187] usb 7-1: SerialNumber: syz [ 197.966743][ T4187] usb 7-1: config 0 descriptor?? [ 197.972692][ T4793] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 197.998839][ T4793] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 198.014645][ T4187] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 198.027972][ T4187] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 198.049093][ T4793] usb 3-1: Product: syz [ 198.059405][ T4793] usb 3-1: Manufacturer: syz [ 198.063772][ T4187] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 198.080450][ T4793] usb 3-1: SerialNumber: syz [ 198.084491][ T4187] usb 7-1: media controller created [ 198.111415][ T4187] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 198.188695][ T4793] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input22 [ 198.218226][ T8354] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 198.308331][ T4187] DVB: Unable to find symbol mt352_attach() [ 198.431990][ T4187] DVB: Unable to find symbol nxt6000_attach() [ 198.444210][ T4793] usb 3-1: USB disconnect, device number 16 [ 198.462356][ T4187] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 198.518286][ T4793] appletouch 3-1:1.0: input: appletouch disconnected [ 198.544224][ T4187] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input23 [ 198.576097][ T4187] dvb-usb: schedule remote query interval to 1000 msecs. [ 198.592242][ T4187] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 198.616186][ T4187] dvb-usb: bulk message failed: -22 (7/0) [ 198.626517][ T8410] loop0: detected capacity change from 0 to 1024 [ 198.633696][ T4187] dvb-usb: bulk message failed: -22 (7/0) [ 198.643198][ T4187] usb 7-1: USB disconnect, device number 4 [ 198.731975][ T4187] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 198.768036][ T8410] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 199.081432][ T8428] CUSE: DEVNAME unspecified [ 199.208199][ T8434] mkiss: ax0: crc mode is auto. [ 199.341678][ T8437] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 199.500131][ T8439] loop5: detected capacity change from 0 to 4096 [ 199.554499][ T8439] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 199.794284][ T8439] ntfs: (device loop5): parse_options(): NLS character set macgreÿ not found. Using previous one utf8. [ 199.829360][ T8464] loop7: detected capacity change from 0 to 512 [ 199.843192][ T8439] ntfs: (device loop5): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 199.861360][ T8468] loop6: detected capacity change from 0 to 1024 [ 199.889237][ T8439] ntfs: (device loop5): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 199.928556][ T8464] EXT4-fs error (device loop7): __ext4_iget:4912: inode #11: block 1: comm syz.7.1602: invalid block [ 199.960605][ T8464] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1602: couldn't read orphan inode 11 (err -117) [ 199.991323][ T8439] ntfs: volume version 3.1. [ 200.124622][ T8464] EXT4-fs (loop7): mounted filesystem without journal. Opts: noauto_da_alloc,minixdf,max_dir_size_kb=0x0000000000000009,data_err=abort,grpquota,noinit_itable,inode_readahead_blks=0x0000000000400000,i_version,acl,,errors=continue. Quota mode: writeback. [ 200.228013][ T8468] hfsplus: bad catalog entry type [ 200.426887][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1610'. [ 200.444772][ T155] hfsplus: b-tree write err: -5, ino 4 [ 200.464504][ T8490] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1610'. [ 200.481514][ T8490] netlink: 'syz.7.1610': attribute type 13 has an invalid length. [ 200.539051][ T8490] netlink: 'syz.7.1610': attribute type 11 has an invalid length. [ 200.571279][ T8494] netlink: 'syz.5.1609': attribute type 8 has an invalid length. [ 200.898918][ T26] audit: type=1400 audit(1769554913.514:14): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8506 comm="syz.2.1617" [ 201.031740][ T8517] program syz.7.1619 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.055394][ T8519] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1620'. [ 201.248544][ T8529] loop2: detected capacity change from 0 to 1024 [ 201.270066][ T8527] loop6: detected capacity change from 0 to 1024 [ 201.392388][ T8529] hfsplus: bad catalog entry type [ 201.458564][ T7854] hfsplus: b-tree write err: -5, ino 4 [ 201.518176][ T9] hfsplus: b-tree write err: -5, ino 4 [ 201.843026][ T8557] loop0: detected capacity change from 0 to 512 [ 201.894314][ T8557] EXT4-fs (loop0): Ignoring removed orlov option [ 201.925668][ T8557] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 201.959355][ T8564] netlink: 'syz.2.1640': attribute type 4 has an invalid length. [ 202.014659][ T8557] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 202.032298][ T4793] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 202.090927][ T8557] EXT4-fs error (device loop0): ext4_iget_extra_inode:4566: inode #15: comm syz.0.1636: corrupted in-inode xattr [ 202.229477][ T8557] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1636: couldn't read orphan inode 15 (err -117) [ 202.292759][ T4793] usb 7-1: Using ep0 maxpacket: 32 [ 202.302868][ T8557] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 202.331199][ T8581] loop5: detected capacity change from 0 to 256 [ 202.351749][ T8581] exfat: Deprecated parameter 'namecase' [ 202.380870][ T8584] loop7: detected capacity change from 0 to 256 [ 202.418668][ T8581] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 202.437950][ T4793] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 202.458037][ T4793] usb 7-1: config 0 has no interface number 0 [ 202.657082][ T8587] netlink: 'syz.5.1649': attribute type 9 has an invalid length. [ 202.665349][ T4793] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 202.674822][ T8587] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.1649'. [ 202.695258][ T4793] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.705378][ T4793] usb 7-1: Product: syz [ 202.712590][ T4793] usb 7-1: Manufacturer: syz [ 202.723249][ T4793] usb 7-1: SerialNumber: syz [ 202.777499][ T4793] usb 7-1: config 0 descriptor?? [ 202.800440][ T8590] netlink: 'syz.5.1649': attribute type 9 has an invalid length. [ 202.824164][ T4793] smsc95xx v2.0.0 [ 202.828029][ T4793] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 202.844843][ T4793] smsc95xx: probe of 7-1:0.67 failed with error -22 [ 202.886648][ T8590] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.1649'. [ 203.060822][ T4187] usb 7-1: USB disconnect, device number 5 [ 203.082791][ T4787] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 203.373313][ T8615] genirq: Flags mismatch irq 31. 00000000 (comedi_parport) vs. 00000000 (virtio1-input.0) [ 203.452805][ T4787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.472613][ T4787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.512330][ T4787] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.562688][ T4787] usb 1-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 203.584811][ T4787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.643301][ T4787] usb 1-1: config 0 descriptor?? [ 203.735569][ T8631] loop2: detected capacity change from 0 to 1024 [ 203.751639][ T8633] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1662'. [ 203.822710][ T8633] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1662'. [ 203.836984][ T8631] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 2: comm syz.2.1661: lblock 2 mapped to illegal pblock 2 (length 1) [ 203.859386][ T8631] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 203.879635][ T8631] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 48: comm syz.2.1661: lblock 0 mapped to illegal pblock 48 (length 1) [ 203.906461][ T8631] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 203.920734][ T8631] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.1661: Failed to acquire dquot type 0 [ 203.942298][ T8631] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 203.955018][ T8633] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1662'. [ 203.967097][ T8631] EXT4-fs error (device loop2): ext4_evict_inode:282: inode #11: comm syz.2.1661: mark_inode_dirty error [ 203.979469][ T8631] EXT4-fs warning (device loop2): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 203.993323][ T8631] EXT4-fs (loop2): 1 orphan inode deleted [ 203.999285][ T8631] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 204.023122][ T154] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 204.061740][ T154] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 204.091481][ T154] EXT4-fs error (device loop2): ext4_release_dquot:6270: comm kworker/u4:2: Failed to release dquot type 0 [ 204.149507][ T4787] hid-multitouch 0003:0EEF:72D0.0017: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.0-1/input0 [ 204.224702][ T8631] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.1661: Invalid inode table block 1 in block_group 0 [ 204.249904][ T8646] sp0: Synchronizing with TNC [ 204.327737][ T8631] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 204.358654][ T4787] usb 1-1: USB disconnect, device number 14 [ 204.406988][ T4197] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 204.427267][ T8651] fido_id[8651]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 204.461023][ T8654] loop6: detected capacity change from 0 to 64 [ 204.524692][ T4197] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 204.545474][ T26] audit: type=1800 audit(1769554917.164:15): pid=8654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1668" name="file1" dev="loop6" ino=21 res=0 errno=0 [ 204.607180][ T4197] EXT4-fs error (device loop2): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 204.804825][ T8662] binder: 8660:8662 ioctl 4018620d 0 returned -22 [ 204.827062][ T8662] binder: 8660:8662 ioctl c0046209 0 returned -22 [ 205.117990][ T8680] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1678'. [ 205.159534][ T8684] netlink: 'syz.2.1680': attribute type 29 has an invalid length. [ 205.189598][ T8684] netlink: 'syz.2.1680': attribute type 29 has an invalid length. [ 205.231663][ T8687] netlink: 'syz.2.1680': attribute type 29 has an invalid length. [ 205.294240][ T8691] loop5: detected capacity change from 0 to 128 [ 205.520948][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1688'. [ 206.371881][ T8732] loop5: detected capacity change from 0 to 1024 [ 206.493801][ T8740] loop2: detected capacity change from 0 to 2048 [ 206.533526][ T8732] hfsplus: request for non-existent node 262144 in B*Tree [ 206.541867][ T8732] hfsplus: request for non-existent node 262144 in B*Tree [ 206.592532][ T8740] EXT4-fs (loop2): Unrecognized mount option "obj_role=seclabel" or missing value [ 207.042511][ T13] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 207.312465][ T13] usb 6-1: Using ep0 maxpacket: 32 [ 207.442639][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.463547][ T8778] loop0: detected capacity change from 0 to 764 [ 207.473236][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.484787][ T13] usb 6-1: New USB device found, idVendor=046d, idProduct=c082, bcdDevice= 0.00 [ 207.494645][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.515230][ T13] usb 6-1: config 0 descriptor?? [ 207.788448][ T8792] netlink: 'syz.0.1723': attribute type 2 has an invalid length. [ 208.009679][ T8799] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1727'. [ 208.027302][ T13] logitech-hidpp-device 0003:046D:C082.0018: hidraw0: USB HID v0.02 Device [HID 046d:c082] on usb-dummy_hcd.5-1/input0 [ 208.097240][ T8799] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1727'. [ 208.264461][ T1324] usb 6-1: USB disconnect, device number 5 [ 208.376172][ T8806] loop2: detected capacity change from 0 to 4096 [ 208.387842][ T8807] fido_id[8807]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 208.636454][ T8806] ntfs3: loop2: ino=5, "/" directory corrupted [ 208.684163][ T8806] ntfs3: loop2: ino=5, "/" directory corrupted [ 208.735212][ T8822] loop0: detected capacity change from 0 to 256 [ 208.839617][ T8822] FAT-fs (loop0): Directory bread(block 64) failed [ 208.879814][ T8822] FAT-fs (loop0): Directory bread(block 65) failed [ 208.941109][ T8822] FAT-fs (loop0): Directory bread(block 66) failed [ 208.969896][ T8822] FAT-fs (loop0): Directory bread(block 67) failed [ 209.006073][ T8822] FAT-fs (loop0): Directory bread(block 68) failed [ 209.026136][ T8822] FAT-fs (loop0): Directory bread(block 69) failed [ 209.071384][ T8822] FAT-fs (loop0): Directory bread(block 70) failed [ 209.095136][ T8822] FAT-fs (loop0): Directory bread(block 71) failed [ 209.119556][ T8822] FAT-fs (loop0): Directory bread(block 72) failed [ 209.176016][ T8822] FAT-fs (loop0): Directory bread(block 73) failed [ 209.253773][ T8842] netlink: 388 bytes leftover after parsing attributes in process `syz.6.1742'. [ 209.794430][ T8869] usb usb8: usbfs: process 8869 (syz.7.1752) did not claim interface 0 before use [ 209.996292][ T8879] loop6: detected capacity change from 0 to 512 [ 210.080304][ T8886] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 210.100297][ T8879] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 210.148191][ T8879] EXT4-fs (loop6): orphan cleanup on readonly fs [ 210.171754][ T8881] loop5: detected capacity change from 0 to 4096 [ 210.271719][ T8892] loop2: detected capacity change from 0 to 4096 [ 210.282506][ T8879] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1757: bg 0: block 248: padding at end of block bitmap is not set [ 210.320728][ T8879] Quota error (device loop6): write_blk: dquota write failed [ 210.330475][ T8879] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 210.347063][ T8879] EXT4-fs error (device loop6): ext4_acquire_dquot:6234: comm syz.6.1757: Failed to acquire dquot type 1 [ 210.410007][ T8879] EXT4-fs (loop6): 1 truncate cleaned up [ 210.416650][ T8893] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.465854][ T8889] loop7: detected capacity change from 0 to 4096 [ 210.477931][ T8879] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,bsdgroups,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 210.554837][ T8889] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512) [ 210.679036][ T8892] NILFS (loop2): nilfs_palloc_commit_free_entry (ino=6): entry number 14 already freed [ 210.710903][ T8879] EXT4-fs (loop6): shut down requested (0) [ 210.724206][ T8889] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 211.250562][ T8908] loop6: detected capacity change from 0 to 2048 [ 211.346737][ T8883] loop0: detected capacity change from 0 to 32768 [ 211.397681][ T8883] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1758 (8883) [ 211.449217][ T8883] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 211.449319][ T8883] BTRFS info (device loop0): force clearing of disk cache [ 211.449351][ T8883] BTRFS info (device loop0): enabling auto defrag [ 211.449371][ T8883] BTRFS info (device loop0): enabling ssd optimizations [ 211.449412][ T8883] BTRFS info (device loop0): max_inline at 0 [ 211.449433][ T8883] BTRFS info (device loop0): enabling disk space caching [ 211.449449][ T8883] BTRFS info (device loop0): disk space caching is enabled [ 211.449465][ T8883] BTRFS info (device loop0): has skinny extents [ 211.600040][ T8925] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.003427][ T8883] BTRFS info (device loop0): clearing free space tree [ 212.010434][ T8883] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 212.032333][ T8883] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 212.372802][ T4835] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 212.632345][ T4787] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 212.733552][ T4341] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop0 scanned by udevd (4341) [ 212.785826][ T4835] usb 6-1: config 0 interface 0 altsetting 247 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 212.819945][ T4835] usb 6-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 212.869025][ T4835] usb 6-1: config 0 interface 0 has no altsetting 0 [ 212.893360][ T4835] usb 6-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 212.925245][ T4835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.998186][ T4835] usb 6-1: config 0 descriptor?? [ 213.038761][ T8964] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 213.047142][ T4787] usb 7-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 213.058237][ T4787] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.125464][ T4787] usb 7-1: config 0 descriptor?? [ 213.384531][ T9006] tipc: Invalid UDP bearer configuration [ 213.384576][ T9006] tipc: Enabling of bearer rejected, failed to enable media [ 213.411248][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1788'. [ 213.461656][ T9010] vivid-008: disconnect [ 213.485240][ T9009] vivid-008: reconnect [ 213.537610][ T4835] itetech 0003:06CB:73F5.0019: hidraw0: USB HID vff.ed Device [HID 06cb:73f5] on usb-dummy_hcd.5-1/input0 [ 213.614571][ T4787] smartjoyplus 0003:0925:8866.001A: unbalanced collection at end of report description [ 213.647234][ T9015] loop0: detected capacity change from 0 to 1024 [ 213.654613][ T4787] smartjoyplus 0003:0925:8866.001A: parse failed [ 213.684745][ T4787] smartjoyplus: probe of 0003:0925:8866.001A failed with error -22 [ 213.754597][ T4235] usb 6-1: USB disconnect, device number 6 [ 213.780522][ T9023] unsupported nlmsg_type 40 [ 213.802050][ T9015] hfsplus: bad catalog entry type [ 213.824613][ T4787] usb 7-1: USB disconnect, device number 6 [ 213.928745][ T154] hfsplus: b-tree write err: -5, ino 4 [ 213.979147][ T26] audit: type=1326 audit(1769554926.594:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9028 comm="syz.7.1796" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc6b54e2eb9 code=0x0 [ 214.017560][ T9025] fido_id[9025]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 214.381456][ T9045] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1801'. [ 214.778520][ T9069] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1809'. [ 214.843032][ T9069] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1809'. [ 214.958227][ T9078] loop7: detected capacity change from 0 to 2048 [ 215.037711][ T9078] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 215.081993][ T9083] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 215.242453][ T4187] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 215.378583][ T9093] loop5: detected capacity change from 0 to 1764 [ 215.545398][ T4187] usb 1-1: Using ep0 maxpacket: 8 [ 215.662936][ T4187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 215.684880][ T4187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.710202][ T4187] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 215.710239][ T4187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 215.710263][ T4187] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 215.710306][ T4187] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 215.710332][ T4187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.726561][ T4187] usb 1-1: config 0 descriptor?? [ 215.835511][ T4195] Bluetooth: hci6: urb ffff88801f6bb200 submission failed (90) [ 216.018381][ T4187] usb 1-1: USB disconnect, device number 15 [ 216.469245][ T9140] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 216.934239][ T9174] device bridge0 entered promiscuous mode [ 216.955573][ T9172] loop6: detected capacity change from 0 to 512 [ 216.976209][ T9174] device macvlan3 entered promiscuous mode [ 217.041447][ T9172] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 217.062442][ T4187] Bluetooth: hci3: command 0x0405 tx timeout [ 217.106592][ T9172] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 not in group (block 1)! [ 217.160192][ T9172] EXT4-fs (loop6): group descriptors corrupted! [ 217.235347][ T9190] bridge0: Device is already in use. [ 218.102842][ T26] audit: type=1326 audit(1769554930.694:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.7.1861" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6b54e2eb9 code=0x0 [ 218.250026][ T9215] loop5: detected capacity change from 0 to 32768 [ 218.363090][ T9215] OCFS2: ERROR (device loop5): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #77: fs_generation is 3923116032 [ 218.380595][ T9215] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 218.390829][ T9215] OCFS2: File system is now read-only. [ 218.396454][ T9215] (syz.5.1860,9215,0):ocfs2_read_locked_inode:521 ERROR: status = -30 [ 218.404817][ T9215] (syz.5.1860,9215,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 218.414355][ T9215] (syz.5.1860,9215,0):ocfs2_init_local_system_inodes:493 ERROR: status=-30, sysfile=12, slot=0 [ 218.424780][ T9215] (syz.5.1860,9215,0):ocfs2_init_local_system_inodes:502 ERROR: status = -30 [ 218.433663][ T9215] (syz.5.1860,9215,0):ocfs2_mount_volume:1818 ERROR: status = -30 [ 218.452583][ T9215] (syz.5.1860,9215,0):ocfs2_fill_super:1177 ERROR: status = -30 [ 219.047479][ T9195] loop2: detected capacity change from 0 to 32768 [ 219.204264][ T9195] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 219.261806][ T9195] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 219.353286][ T9195] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 219.410921][ T9264] loop7: detected capacity change from 0 to 22 [ 219.437065][ T9260] loop0: detected capacity change from 0 to 2048 [ 219.485488][ T9227] loop6: detected capacity change from 0 to 32768 [ 219.500959][ T9195] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 219.511239][ T9264] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 219.537944][ T9227] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.1864 (9227) [ 219.570609][ T9264] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 219.584300][ T9260] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 219.656745][ T9227] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 219.667444][ T26] audit: type=1800 audit(1769554932.284:18): pid=9260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1875" name="bus" dev="loop0" ino=1367 res=0 errno=0 [ 219.694717][ T9227] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 219.745733][ T9227] BTRFS info (device loop6): use zstd compression, level 3 [ 219.769126][ T9227] BTRFS info (device loop6): using free space tree [ 219.783344][ T9227] BTRFS info (device loop6): has skinny extents [ 219.854753][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 220.056941][ T9291] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1880'. [ 220.179568][ T9227] BTRFS info (device loop6): enabling ssd optimizations [ 220.644824][ T9314] loop0: detected capacity change from 0 to 1024 [ 220.844279][ T9324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1882'. [ 220.903149][ T9324] tipc: Enabling of bearer rejected, failed to enable media [ 221.088530][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1896'. [ 221.274314][ T9341] loop2: detected capacity change from 0 to 8 [ 221.364361][ T9341] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 221.434760][ T4341] udevd[4341]: incorrect cramfs checksum on /dev/loop2 [ 221.499122][ T9341] cramfs: Error -3 while decompressing! [ 221.567226][ T4341] udevd[4341]: incorrect cramfs checksum on /dev/loop2 [ 221.593111][ T9341] cramfs: ffffffff964000a8(26)->ffff888056125000(4096) [ 221.630395][ T9341] cramfs: Error -3 while decompressing! [ 221.649697][ T9341] cramfs: ffffffff964000c2(26)->ffff888056124000(4096) [ 221.708395][ T9341] cramfs: Error -3 while decompressing! [ 221.739225][ T9341] cramfs: ffffffff964000dc(16)->ffff8880571a3000(4096) [ 221.747956][ T9341] cramfs: Error -3 while decompressing! [ 221.754956][ T9341] cramfs: ffffffff964000a8(26)->ffff888056125000(4096) [ 221.763928][ T26] audit: type=1800 audit(1769554934.384:19): pid=9341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1899" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 222.968861][ T9373] loop6: detected capacity change from 0 to 40427 [ 223.069728][ T9373] F2FS-fs (loop6): invalid crc value [ 223.179681][ T9373] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 223.358131][ T9396] loop5: detected capacity change from 0 to 32768 [ 223.453639][ T9373] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 223.513846][ T9408] loop0: detected capacity change from 0 to 32768 [ 223.521227][ T9396] (syz.5.1913,9396,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 223.610088][ T9396] (syz.5.1913,9396,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 223.660526][ T9408] JBD2: Ignoring recovery information on journal [ 223.674116][ T6973] attempt to access beyond end of device [ 223.674116][ T6973] loop6: rw=2049, want=45104, limit=40427 [ 223.716930][ T9447] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.758307][ T9396] JBD2: Ignoring recovery information on journal [ 223.782367][ T9449] loop2: detected capacity change from 0 to 512 [ 223.883754][ T9396] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 223.949412][ T9408] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 223.961486][ T9449] EXT4-fs (loop2): 1 truncate cleaned up [ 223.968748][ T9449] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,errors=remount-ro,jqfmt=vfsv0,. Quota mode: writeback. [ 224.016020][ T9449] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1930: invalid indirect mapped block 234881024 (level 0) [ 224.070098][ T9447] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.103584][ T9449] EXT4-fs (loop2): Remounting filesystem read-only [ 224.143693][ T6516] ocfs2: Unmounting device (7,5) on (node local) [ 224.144256][ T9408] (syz.0.1917,9408,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10 [ 224.336470][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 224.526071][ T9447] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.711160][ T9447] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.834912][ T9472] loop5: detected capacity change from 0 to 1764 [ 224.836754][ T4787] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 224.910590][ T9472] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 224.922795][ T9447] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.946309][ T9447] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.950700][ T9474] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 224.977152][ T9447] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.996808][ T9447] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.082351][ T4787] usb 7-1: Using ep0 maxpacket: 16 [ 225.212858][ T4787] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.251454][ T4787] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 225.319665][ T4787] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 225.338027][ T9487] loop7: detected capacity change from 0 to 1024 [ 225.350878][ T4787] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.385492][ T4787] usb 7-1: config 0 descriptor?? [ 225.424206][ T9487] hfsplus: request for non-existent node 3 in B*Tree [ 225.470006][ T9487] hfsplus: request for non-existent node 3 in B*Tree [ 225.639755][ T9503] rtc_cmos 00:00: Alarms can be up to one day in the future [ 225.652581][ T9349] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 225.702636][ T9504] loop7: detected capacity change from 0 to 64 [ 225.899425][ T4787] microsoft 0003:045E:07DA.001B: collection stack underflow [ 225.924146][ T4787] microsoft 0003:045E:07DA.001B: item 0 2 0 12 parsing failed [ 225.960709][ T4787] microsoft 0003:045E:07DA.001B: parse failed [ 225.990998][ T4787] microsoft: probe of 0003:045E:07DA.001B failed with error -22 [ 226.041890][ T9519] loop5: detected capacity change from 0 to 16 [ 226.074301][ T9519] erofs: (device loop5): mounted with root inode @ nid 36. [ 226.094324][ T9349] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.121134][ T9349] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 226.155710][ T9349] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 226.171464][ T9349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.193453][ T9349] usb 1-1: config 0 descriptor?? [ 226.228691][ T9362] usb 7-1: USB disconnect, device number 7 [ 226.237524][ T9349] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 226.259392][ T9349] dvb-usb: bulk message failed: -22 (3/0) [ 226.271418][ T9349] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 226.289257][ T6516] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 46 [ 226.301218][ T9349] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 226.308609][ T9349] usb 1-1: media controller created [ 226.319627][ T6516] erofs: (device loop5): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 226.329833][ T9349] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 226.344032][ T6516] erofs: (device loop5): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 226.356249][ T9349] dvb-usb: bulk message failed: -22 (6/0) [ 226.365829][ T9344] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 226.379144][ T9349] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 226.449849][ T9493] dvb-usb: bulk message failed: -22 (4/0) [ 226.467504][ T9349] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input24 [ 226.498153][ T9349] dvb-usb: schedule remote query interval to 150 msecs. [ 226.515729][ T9349] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 226.551352][ T9349] usb 1-1: USB disconnect, device number 16 [ 226.606100][ T9349] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 226.644371][ T9514] loop7: detected capacity change from 0 to 32768 [ 226.728426][ T9527] loop6: detected capacity change from 0 to 64 [ 226.737390][ T9514] add_index: next_index = 0. Resetting! [ 226.752813][ T9344] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 226.771331][ T9344] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 226.778263][ T9514] non-latin1 character 0x3ff found in JFS file name [ 226.792088][ T9344] usb 3-1: config 0 has no interface number 0 [ 226.800451][ T9514] mount with iocharset=utf8 to access [ 227.002828][ T9344] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 227.042731][ T4787] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 227.043430][ T9344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.103687][ T9344] usb 3-1: Product: syz [ 227.108136][ T9344] usb 3-1: Manufacturer: syz [ 227.113605][ T9344] usb 3-1: SerialNumber: syz [ 227.123349][ T9344] usb 3-1: config 0 descriptor?? [ 227.185082][ T9539] loop7: detected capacity change from 0 to 256 [ 227.233236][ T9539] exfat: Deprecated parameter 'utf8' [ 227.291028][ T9539] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 227.444346][ T4787] usb 6-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 227.493295][ T4787] usb 6-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.508864][ T9547] loop7: detected capacity change from 0 to 16 [ 227.522670][ T4787] usb 6-1: config 0 interface 0 has no altsetting 0 [ 227.529363][ T4787] usb 6-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 227.572297][ T4787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.583198][ T9547] erofs: (device loop7): mounted with root inode @ nid 36. [ 227.602398][ T9344] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 227.608855][ T9344] usb 3-1: No valid video chain found. [ 227.627625][ T4787] usb 6-1: config 0 descriptor?? [ 227.658486][ T9547] erofs: (device loop7): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 227.689994][ T9547] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 227.823348][ T9534] loop6: detected capacity change from 0 to 32768 [ 227.841972][ T9349] usb 3-1: USB disconnect, device number 17 [ 228.116876][ T4787] pantherlord 0003:0810:0002.001C: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.5-1/input0 [ 228.138935][ T4787] pantherlord 0003:0810:0002.001C: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 228.363510][ T9344] usb 6-1: USB disconnect, device number 7 [ 228.482448][ T9349] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 228.532008][ T9553] loop7: detected capacity change from 0 to 32768 [ 228.631870][ T9568] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 228.647332][ T9553] ERROR: (device loop7): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 228.647332][ T9553] [ 228.666435][ T9568] hpfs: filesystem error: improperly stopped [ 228.686164][ T9568] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 228.698415][ T9568] hpfs: You really don't want any checks? You are crazy... [ 228.711828][ T9568] hpfs: hpfs_map_sector(): read error [ 228.735661][ T9568] hpfs: code page support is disabled [ 228.741222][ T9568] hpfs: hpfs_map_4sectors(): unaligned read [ 228.752348][ T9349] usb 7-1: Using ep0 maxpacket: 16 [ 228.758364][ T9568] hpfs: hpfs_map_4sectors(): unaligned read [ 228.769667][ T9568] hpfs: filesystem error: unable to find root dir [ 228.844253][ T9568] hpfs: hpfs_map_4sectors(): unaligned read [ 229.113330][ T9349] usb 7-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 229.135936][ T9579] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 229.151423][ T9349] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.160160][ T9579] hpfs: filesystem error: improperly stopped [ 229.170196][ T9579] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 229.210217][ T9349] usb 7-1: Product: syz [ 229.222352][ T9579] hpfs: You really don't want any checks? You are crazy... [ 229.231495][ T9349] usb 7-1: Manufacturer: syz [ 229.257763][ T9579] hpfs: hpfs_map_sector(): read error [ 229.271220][ T9349] usb 7-1: SerialNumber: syz [ 229.285074][ T9579] hpfs: code page support is disabled [ 229.300827][ T9349] usb 7-1: config 0 descriptor?? [ 229.323116][ T9579] hpfs: hpfs_map_4sectors(): unaligned read [ 229.329771][ T9579] hpfs: hpfs_map_4sectors(): unaligned read [ 229.372238][ T9579] hpfs: filesystem error: unable to find root dir [ 229.384265][ T9349] visor 7-1:0.0: Sony Clie 3.5 converter detected [ 229.485721][ T9587] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 229.504343][ T9587] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 229.524960][ T9587] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010561, chksum : 0x50c549e0, utbl_chksum : 0xe619d30d) [ 229.832609][ T9349] usb 7-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 230.034054][ T4787] usb 7-1: USB disconnect, device number 8 [ 230.049758][ T4787] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 230.068475][ T4787] visor 7-1:0.0: device disconnected [ 230.135103][ T9585] set_capacity_and_notify: 3 callbacks suppressed [ 230.135119][ T9585] loop5: detected capacity change from 0 to 32768 [ 230.261281][ T9585] XFS (loop5): Mounting V5 Filesystem [ 230.376329][ T9585] XFS (loop5): Ending clean mount [ 230.585796][ T6516] XFS (loop5): Unmounting Filesystem [ 230.924276][ T9626] loop6: detected capacity change from 0 to 64 [ 230.939274][ T9602] loop2: detected capacity change from 0 to 32768 [ 230.952440][ T9596] loop0: detected capacity change from 0 to 32768 [ 231.018515][ T9596] (syz.0.1993,9596,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 231.062586][ T9602] JBD2: Ignoring recovery information on journal [ 231.117144][ T9596] (syz.0.1993,9596,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 231.225597][ T9602] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 231.348199][ T9602] (syz.2.1996,9602,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10 [ 231.480006][ T9596] JBD2: Ignoring recovery information on journal [ 231.672018][ T4197] ocfs2: Unmounting device (7,2) on (node local) [ 231.681145][ T9596] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 231.735904][ T9648] ieee802154 phy0 wpan0: encryption failed: -22 [ 231.825140][ T9649] [U] ÿÿ [ 231.941472][ T9656] netlink: 'syz.7.2015': attribute type 4 has an invalid length. [ 232.105036][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 232.188224][ T9668] loop6: detected capacity change from 0 to 1764 [ 232.536363][ T9683] xt_l2tp: unknown flags: 1f [ 232.655405][ T9684] loop2: detected capacity change from 0 to 4096 [ 232.662530][ T9689] loop0: detected capacity change from 0 to 2048 [ 232.689132][ T9692] loop5: detected capacity change from 0 to 256 [ 232.793385][ T9689] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 232.832314][ T9362] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 232.846012][ T9689] ext4 filesystem being mounted at /435/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.951214][ T9689] fs-verity (loop0, inode 18): Unknown hash algorithm number: 0 [ 233.056701][ T9694] loop7: detected capacity change from 0 to 32768 [ 233.082395][ T9362] usb 7-1: Using ep0 maxpacket: 8 [ 233.286813][ T9708] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2037'. [ 233.382636][ T9362] usb 7-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 233.408146][ T9362] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 233.438469][ T9362] usb 7-1: Product: syz [ 233.463162][ T9362] usb 7-1: Manufacturer: syz [ 233.467833][ T9362] usb 7-1: SerialNumber: syz [ 233.526624][ T9362] usb 7-1: config 0 descriptor?? [ 233.595010][ T9362] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 233.714500][ T9727] loop2: detected capacity change from 0 to 256 [ 233.812535][ T9362] gspca_sn9c2028: read1 error -71 [ 233.819472][ T9731] mkiss: ax0: crc mode is auto. [ 233.832643][ T9362] gspca_sn9c2028: read1 error -71 [ 233.852443][ T9362] gspca_sn9c2028: read1 error -71 [ 233.857695][ T9362] sn9c2028: probe of 7-1:0.0 failed with error -71 [ 233.863806][ T9727] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 233.926832][ T9362] usb 7-1: USB disconnect, device number 9 [ 234.104457][ T9733] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 234.216585][ T9733] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 234.474098][ T4186] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 234.601444][ T9752] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2055'. [ 234.646658][ T9752] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2055'. [ 234.722523][ T9752] netlink: 'syz.6.2055': attribute type 6 has an invalid length. [ 234.757912][ T9752] netlink: 'syz.6.2055': attribute type 5 has an invalid length. [ 234.770832][ T9752] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2055'. [ 234.842007][ T155] hfsplus: b-tree write err: -5, ino 4 [ 235.140409][ T9775] netlink: 'syz.2.2065': attribute type 3 has an invalid length. [ 235.508180][ T9755] set_capacity_and_notify: 2 callbacks suppressed [ 235.508197][ T9755] loop0: detected capacity change from 0 to 32768 [ 235.607640][ T9755] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.2053 (9755) [ 235.648863][ T9755] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 235.679626][ T9755] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 235.721582][ T9755] BTRFS info (device loop0): use zstd compression, level 3 [ 235.749335][ T9755] BTRFS info (device loop0): using free space tree [ 235.777619][ T9755] BTRFS info (device loop0): has skinny extents [ 235.937673][ T9807] loop6: detected capacity change from 0 to 128 [ 235.999668][ T9812] loop2: detected capacity change from 0 to 1024 [ 236.028401][ T9807] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 236.054323][ T9807] hpfs: filesystem error: improperly stopped [ 236.060503][ T9807] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 236.069206][ T9807] hpfs: You really don't want any checks? You are crazy... [ 236.077700][ T9807] hpfs: hpfs_map_sector(): read error [ 236.093734][ T9807] hpfs: code page support is disabled [ 236.099253][ T9807] hpfs: hpfs_map_4sectors(): unaligned read [ 236.111951][ T9807] hpfs: hpfs_map_4sectors(): unaligned read [ 236.118729][ T9807] hpfs: filesystem error: unable to find root dir [ 236.149130][ T9755] BTRFS info (device loop0): enabling ssd optimizations [ 236.209003][ T9812] hfsplus: bad catalog entry type [ 236.220089][ T26] audit: type=1800 audit(1769554948.834:20): pid=9755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2053" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 236.302007][ T4319] hfsplus: b-tree write err: -5, ino 4 [ 236.383112][ T9830] genirq: Flags mismatch irq 10. 00000000 (das16m1) vs. 00000080 (virtio2) [ 236.685204][ T9841] loop6: detected capacity change from 0 to 128 [ 237.035977][ T9845] loop2: detected capacity change from 0 to 1764 [ 237.379382][ T9847] loop0: detected capacity change from 0 to 8192 [ 237.432862][ T9859] netlink: 'syz.6.2096': attribute type 2 has an invalid length. [ 237.447988][ T9847] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 237.461381][ T9855] loop5: detected capacity change from 0 to 4096 [ 237.470497][ T9859] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2096'. [ 237.482968][ T9847] REISERFS (device loop0): using journaled data mode [ 237.489947][ T9847] reiserfs: using flush barriers [ 237.528004][ T9855] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 237.557711][ T9847] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 237.590674][ T9847] REISERFS (device loop0): checking transaction log (loop0) [ 237.667282][ T9847] REISERFS (device loop0): Using r5 hash to sort names [ 237.692597][ T9847] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 237.747339][ T9847] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 237.919088][ T9866] loop2: detected capacity change from 0 to 128 [ 238.619201][ T9889] netlink: 'syz.5.2110': attribute type 29 has an invalid length. [ 238.628030][ T9889] netlink: 'syz.5.2110': attribute type 29 has an invalid length. [ 238.639880][ T9889] netlink: 'syz.5.2110': attribute type 29 has an invalid length. [ 238.699288][ T4787] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 238.802231][ T9878] loop6: detected capacity change from 0 to 32768 [ 238.822017][ T9893] loop5: detected capacity change from 0 to 128 [ 238.857099][ T9878] (syz.6.2106,9878,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 238.873633][ T9878] (syz.6.2106,9878,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 238.897627][ T9893] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 238.934292][ T9878] JBD2: Ignoring recovery information on journal [ 238.959235][ T9893] hpfs: filesystem error: improperly stopped [ 238.963342][ T4787] usb 1-1: Using ep0 maxpacket: 16 [ 238.993590][ T9893] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 239.001393][ T9893] hpfs: You really don't want any checks? You are crazy... [ 239.061658][ T9878] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 239.081252][ T9893] hpfs: hpfs_map_sector(): read error [ 239.089299][ T9893] hpfs: code page support is disabled [ 239.103525][ T9893] hpfs: hpfs_map_4sectors(): unaligned read [ 239.111275][ T9893] hpfs: hpfs_map_4sectors(): unaligned read [ 239.117488][ T9893] hpfs: filesystem error: unable to find root dir [ 239.123370][ T4787] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 239.155058][ T4787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 239.194730][ T4787] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 239.265164][ T6973] ocfs2: Unmounting device (7,6) on (node local) [ 239.470126][ T4787] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 239.502534][ T4787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.510600][ T4787] usb 1-1: Product: syz [ 239.545892][ T4787] usb 1-1: Manufacturer: syz [ 239.550607][ T4787] usb 1-1: SerialNumber: syz [ 239.599490][ T4787] usb 1-1: config 0 descriptor?? [ 239.625807][ T9880] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 239.657473][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2121'. [ 239.694987][ T4787] mceusb 1-1:0.0: mceusb_dev_probe: device setup failed! [ 239.702103][ T4787] mceusb: probe of 1-1:0.0 failed with error -12 [ 239.917341][ T4787] usb 1-1: USB disconnect, device number 17 [ 240.052530][ T4827] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 240.323598][ T9945] autofs4:pid:9945:autofs_fill_super: called with bogus options [ 240.462837][ T4827] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 240.490924][ T4827] usb 6-1: config 0 has no interface number 0 [ 240.498604][ T4827] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 240.560962][ T4827] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 240.578308][ T4827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.652501][ T4827] usb 6-1: config 0 descriptor?? [ 240.673589][ T9955] set_capacity_and_notify: 2 callbacks suppressed [ 240.673607][ T9955] loop7: detected capacity change from 0 to 256 [ 240.705531][ T4827] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.120/input/input25 [ 240.979835][ T9362] usb 6-1: USB disconnect, device number 8 [ 240.985900][ C0] usbtouchscreen 6-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -19 [ 241.239418][ T9977] loop0: detected capacity change from 0 to 128 [ 241.323719][ T9977] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 241.419769][ T9977] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 241.564805][ T9989] loop5: detected capacity change from 0 to 256 [ 241.586405][ T9993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2161'. [ 241.616339][ T9993] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2161'. [ 241.653929][ T9989] exfat: Deprecated parameter 'utf8' [ 241.754364][ T9989] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 241.795708][ T9997] loop0: detected capacity change from 0 to 2048 [ 241.873837][ T9997] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 241.985937][T10011] loop2: detected capacity change from 0 to 64 [ 242.240160][T10021] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.250403][T10021] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.259238][T10021] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.268032][T10021] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.452783][ T4787] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 242.817698][T10047] loop6: detected capacity change from 0 to 512 [ 242.843005][ T4787] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 242.864662][ T4787] usb 6-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.00 [ 242.883652][ T4787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.922872][ T4787] usb 6-1: config 0 descriptor?? [ 242.981834][T10054] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 243.041081][T10047] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2188: invalid indirect mapped block 4294967295 (level 1) [ 243.148323][T10047] EXT4-fs (loop6): Remounting filesystem read-only [ 243.154971][T10047] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2188: invalid indirect mapped block 4294967295 (level 1) [ 243.255141][T10047] EXT4-fs (loop6): Remounting filesystem read-only [ 243.298025][T10047] EXT4-fs (loop6): 2 truncates cleaned up [ 243.321785][T10047] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,barrier=0x0000000000000004,. Quota mode: writeback. [ 243.433841][ T4787] wacom 0003:056A:00B9.001D: collection stack underflow [ 243.449293][ T4787] wacom 0003:056A:00B9.001D: item 0 4 0 12 parsing failed [ 243.479871][ T4787] wacom 0003:056A:00B9.001D: parse failed [ 243.498746][ T4787] wacom: probe of 0003:056A:00B9.001D failed with error -22 [ 243.666828][ T9362] usb 6-1: USB disconnect, device number 9 [ 244.709205][T10089] netlink: 212912 bytes leftover after parsing attributes in process `syz.5.2207'. [ 244.762532][T10094] sg_read: process 959 (syz.0.2208) changed security contexts after opening file descriptor, this is not allowed. [ 244.862021][T10096] loop6: detected capacity change from 0 to 2048 [ 245.166687][T10109] loop2: detected capacity change from 0 to 16 [ 245.247331][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2216'. [ 245.284991][T10106] loop0: detected capacity change from 0 to 4096 [ 245.340329][T10096] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 245.373415][ T4827] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 245.911896][ T4827] usb 6-1: too many endpoints for config 0 interface 0 altsetting 4: 65, using maximum allowed: 30 [ 245.922915][ T4827] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.965869][ T4827] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 246.004260][ T4827] usb 6-1: config 0 interface 0 has no altsetting 0 [ 246.011483][ T4827] usb 6-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 246.077978][ T4827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.122070][ T4827] usb 6-1: config 0 descriptor?? [ 246.434396][T10109] erofs: (device loop2): mounted with root inode @ nid 36. [ 246.498946][T10109] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36 [ 246.526880][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 246.561988][T10109] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 352255 of nid 36 [ 246.605531][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 85 @ nid 36 [ 246.656146][ T4827] wacom 0003:056A:032B.001E: hidraw0: USB HID v0.07 Device [HID 056a:032b] on usb-dummy_hcd.5-1/input0 [ 246.670585][T10109] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36 [ 246.692090][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 246.701546][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 246.711976][T10121] loop7: detected capacity change from 0 to 32768 [ 246.729245][T10109] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 339967 of nid 36 [ 246.760339][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 246.781334][T10109] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 80 of nid 36 [ 246.791035][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 81 @ nid 36 [ 246.815411][T10109] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 331775 of nid 36 [ 246.841482][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 246.902020][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 246.920506][ T9357] usb 6-1: USB disconnect, device number 10 [ 246.968695][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 246.981814][T10109] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 315391 of nid 36 [ 247.018389][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 247.031501][T10109] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 72 of nid 36 [ 247.041163][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 73 @ nid 36 [ 247.081026][T10109] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 299007 of nid 36 [ 247.093654][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 247.131651][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 247.212205][T10109] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 247.247782][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 247.331684][T10109] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 286719 of nid 36 [ 247.343313][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 69 @ nid 36 [ 247.382462][T10109] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 247.424993][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 68 @ nid 36 [ 247.483019][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 67 @ nid 36 [ 247.522212][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 66 @ nid 36 [ 247.602216][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 65 @ nid 36 [ 247.632208][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 247.692093][T10109] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 62 of nid 36 [ 247.701934][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 247.750107][T10109] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 258047 of nid 36 [ 247.815288][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 247.852208][T10109] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 253951 of nid 36 [ 247.912212][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 247.921457][T10109] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 247.989091][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 248.031765][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 248.087842][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 248.120237][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 248.160167][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 55 @ nid 36 [ 248.218956][T10106] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 248.242207][T10109] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 225279 of nid 36 [ 248.275084][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 248.319846][T10109] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 248.386949][T10123] loop6: detected capacity change from 0 to 32768 [ 248.419375][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 248.479625][T10121] (syz.7.2221,10121,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 248.487467][T10109] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 217087 of nid 36 [ 248.547754][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 248.558756][T10121] (syz.7.2221,10121,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 248.587014][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 248.650361][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 248.692289][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 49 @ nid 36 [ 248.722333][T10109] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 200703 of nid 36 [ 248.742504][T10123] XFS (loop6): Mounting V5 Filesystem [ 248.790769][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 248.813506][T10109] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 42 of nid 36 [ 248.840192][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 248.881821][T10109] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 176127 of nid 36 [ 248.908156][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 248.942115][T10121] (syz.7.2221,10121,1):ocfs2_initialize_super:2313 ERROR: status = -12 [ 248.950479][T10121] (syz.7.2221,10121,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 249.000787][T10109] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 172031 of nid 36 [ 249.028846][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 249.072635][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 249.114079][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 249.161369][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 37 @ nid 36 [ 249.175486][T10151] fido_id[10151]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 249.202248][T10109] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 249.258010][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 249.288650][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 35 @ nid 36 [ 249.323441][ T4781] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 249.345823][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 249.397751][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 33 @ nid 36 [ 249.427867][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 249.462421][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 249.471580][T10109] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 28 of nid 36 [ 249.610802][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 29 @ nid 36 [ 249.650224][T10109] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 118783 of nid 36 [ 249.693408][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 28 @ nid 36 [ 249.705920][ T4781] usb 6-1: Using ep0 maxpacket: 32 [ 249.772192][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 249.812801][T10109] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 110591 of nid 36 [ 249.866112][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 249.891452][T10109] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 249.930203][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 249.947299][T10109] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 249.966720][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 249.986045][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 250.030857][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 250.086917][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 250.128444][T10123] XFS (loop6): Ending clean mount [ 250.153446][T10109] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 250.181402][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 250.219898][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 250.220112][T10123] XFS (loop6): Quotacheck needed: Please wait. [ 250.271613][ T4781] usb 6-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 250.296113][ T4781] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.312205][T10109] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 250.321852][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 250.340141][ T4781] usb 6-1: Product: syz [ 250.355538][ T4781] usb 6-1: Manufacturer: syz [ 250.360239][ T4781] usb 6-1: SerialNumber: syz [ 250.369218][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 17 @ nid 36 [ 250.369246][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 250.369683][T10109] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 250.369703][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 250.369790][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 5 @ nid 36 [ 250.369831][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 250.369854][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 3 @ nid 36 [ 250.369878][T10109] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 36 [ 250.390492][T10109] attempt to access beyond end of device [ 250.390492][T10109] loop2: rw=524288, want=13478624104, limit=16 [ 250.462440][ T4781] usb 6-1: config 0 descriptor?? [ 250.515294][T10109] attempt to access beyond end of device [ 250.515294][T10109] loop2: rw=524288, want=13478624080, limit=16 [ 250.571883][ T4781] dw2102: su3000_identify_state [ 250.582456][T10109] attempt to access beyond end of device [ 250.582456][T10109] loop2: rw=524288, want=56, limit=16 [ 250.593450][ T4781] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 250.621007][T10109] attempt to access beyond end of device [ 250.621007][T10109] loop2: rw=524288, want=40, limit=16 [ 250.632110][ T4781] dw2102: su3000_power_ctrl: 1, initialized 0 [ 250.638812][ T4781] dvb-usb: bulk message failed: -22 (2/0) [ 250.672207][T10109] attempt to access beyond end of device [ 250.672207][T10109] loop2: rw=524288, want=96, limit=16 [ 250.683249][T10109] attempt to access beyond end of device [ 250.683249][T10109] loop2: rw=524288, want=32, limit=16 [ 250.723489][ T4781] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 250.756431][T10109] attempt to access beyond end of device [ 250.756431][T10109] loop2: rw=524288, want=15495015312, limit=16 [ 250.772637][T10148] dvb-usb: bulk message failed: -22 (3/0) [ 250.779153][T10148] dw2102: i2c transfer failed. [ 250.833777][ T4781] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 250.858818][T10109] attempt to access beyond end of device [ 250.858818][T10109] loop2: rw=524288, want=15495015288, limit=16 [ 250.870971][ T4781] usb 6-1: media controller created [ 250.877687][T10123] XFS (loop6): Quotacheck: Done. [ 250.893839][ T4781] dvb-usb: bulk message failed: -22 (6/0) [ 250.900330][ T4781] dw2102: i2c transfer failed. [ 250.913533][ T4781] dvb-usb: bulk message failed: -22 (6/0) [ 250.919337][ T4781] dw2102: i2c transfer failed. [ 250.924532][T10109] attempt to access beyond end of device [ 250.924532][T10109] loop2: rw=524288, want=1259035616, limit=16 [ 250.961941][ T4781] dvb-usb: bulk message failed: -22 (6/0) [ 250.972316][ T4781] dw2102: i2c transfer failed. [ 250.977154][ T4781] dvb-usb: bulk message failed: -22 (6/0) [ 251.010694][ T4781] dw2102: i2c transfer failed. [ 251.018475][ T4781] dvb-usb: bulk message failed: -22 (6/0) [ 251.033079][ T4781] dw2102: i2c transfer failed. [ 251.037939][ T4781] dvb-usb: bulk message failed: -22 (6/0) [ 251.046178][ T6973] XFS (loop6): Unmounting Filesystem [ 251.057146][ T4781] dw2102: i2c transfer failed. [ 251.061977][ T4781] dvb-usb: MAC address: 02:02:02:02:02:02 [ 251.149375][ T4781] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 251.243343][ T4781] dvb-usb: bulk message failed: -22 (3/0) [ 251.249175][ T4781] dw2102: command 0x0e transfer failed. [ 251.280263][ T4781] dvb-usb: bulk message failed: -22 (3/0) [ 251.296826][ T4781] dw2102: command 0x0e transfer failed. [ 251.597870][T10162] loop5: detected capacity change from 0 to 2048 [ 251.641828][ T4781] dvb-usb: bulk message failed: -22 (3/0) [ 251.647695][ T4781] dw2102: command 0x0e transfer failed. [ 251.654734][ T4781] dvb-usb: bulk message failed: -22 (3/0) [ 251.660500][ T4781] dw2102: command 0x0e transfer failed. [ 251.696158][ T4781] dvb-usb: bulk message failed: -22 (1/0) [ 251.701965][ T4781] dw2102: command 0x51 transfer failed. [ 251.791536][ T4781] DVB: Unable to find symbol ds3000_attach() [ 251.797743][ T4781] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 252.009800][ T4781] rc_core: IR keymap rc-su3000 not found [ 252.015553][ T4781] Registered IR keymap rc-empty [ 252.021427][ T4781] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 252.057408][ T4781] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input29 [ 252.089621][ T4781] dvb-usb: schedule remote query interval to 150 msecs. [ 252.096933][ T4781] dw2102: su3000_power_ctrl: 0, initialized 1 [ 252.118145][ T4781] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 252.195611][ T4781] usb 6-1: USB disconnect, device number 11 [ 252.297301][T10166] loop0: detected capacity change from 0 to 512 [ 252.312551][ T4781] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 252.580385][T10168] 9pnet: p9_fd_create_unix (10168): problem connecting socket: éq‰Y’3aK: -111 [ 254.011749][T10178] loop2: detected capacity change from 0 to 40427 [ 254.065872][T10180] loop7: detected capacity change from 0 to 128 [ 254.712845][T10162] NILFS (loop5): error -4 creating segctord thread [ 255.313621][T10189] loop6: detected capacity change from 0 to 4096 [ 255.380957][T10178] F2FS-fs (loop2): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 255.390619][T10178] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 255.424961][T10178] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x6 [ 255.473376][T10178] F2FS-fs (loop2): invalid crc value [ 255.541202][T10178] F2FS-fs (loop2): Found nat_bits in checkpoint [ 255.596123][T10180] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 255.604277][T10180] System zones: 1-3, 19-19, 35-36 [ 255.632774][T10180] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 255.654524][T10180] ext4 filesystem being mounted at /184/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 255.708966][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.722450][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.789528][T10178] F2FS-fs (loop2): Start checkpoint disabled! [ 255.954167][T10178] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 255.961390][T10178] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 255.969370][T10195] loop0: detected capacity change from 0 to 512 [ 257.599215][T10195] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2756: inode #11: comm syz.0.2244: corrupted xattr block 95 [ 257.715753][T10203] loop5: detected capacity change from 0 to 32768 [ 257.725730][T10195] EXT4-fs (loop0): Remounting filesystem read-only [ 257.742699][T10195] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.2244: bg 0: block 7: invalid block bitmap [ 257.792329][ T9357] Bluetooth: hci4: command 0x0406 tx timeout [ 257.816998][T10195] EXT4-fs (loop0): Remounting filesystem read-only [ 257.835208][T10195] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 257.873970][T10195] EXT4-fs (loop0): Remounting filesystem read-only [ 257.916258][T10195] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2922: inode #11: comm syz.0.2244: corrupted xattr block 95 [ 257.971906][T10195] EXT4-fs (loop0): Remounting filesystem read-only [ 257.989258][T10195] EXT4-fs warning (device loop0): ext4_evict_inode:302: xattr delete (err -117) [ 258.022432][T10195] EXT4-fs (loop0): 1 orphan inode deleted [ 258.028251][T10195] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpjquota=,. Quota mode: none. [ 258.096401][T10215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2256'. [ 258.668046][T10189] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 260.662071][T10203] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 260.692201][T10203] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 260.896011][T10203] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 261.076132][T10203] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 261.603441][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2281'. [ 262.039406][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2285'. [ 262.525925][T10259] loop7: detected capacity change from 0 to 32768 [ 262.692872][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2292'. [ 263.081733][T10295] sp0: Synchronizing with TNC [ 263.121782][T10291] loop0: detected capacity change from 0 to 4096 [ 263.211831][T10259] JBD2: Ignoring recovery information on journal [ 263.248109][T10291] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 263.266510][T10291] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 263.372422][T10291] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 263.438937][T10291] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 263.535697][T10291] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 263.595381][T10259] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode. [ 263.640656][T10291] ntfs: volume version 3.1. [ 263.782479][T10291] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 263.807943][T10291] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 263.946023][T10291] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 263.973964][T10291] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 263.992243][T10291] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 264.045387][ T7575] ocfs2: Unmounting device (7,7) on (node local) [ 264.396629][T10316] loop5: detected capacity change from 0 to 1024 [ 264.730672][T10322] loop6: detected capacity change from 0 to 1024 [ 267.163480][ T9362] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 267.728941][ T9362] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.751865][ T9357] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 267.772257][ T9362] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.809508][ T9362] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.871251][ T9362] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 267.889878][ T9362] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.915873][ T9362] usb 1-1: config 0 descriptor?? [ 268.099903][ T9357] usb 3-1: Using ep0 maxpacket: 32 [ 268.251285][ T9357] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 268.298756][ T9357] usb 3-1: config 0 interface 0 has no altsetting 0 [ 268.319116][ T9357] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 268.366448][ T9357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.413716][ T9357] usb 3-1: config 0 descriptor?? [ 268.556509][ T9362] belkin 0003:1020:0006.001F: item fetching failed at offset 1/3 [ 268.618269][ T9362] belkin 0003:1020:0006.001F: parse failed [ 268.640142][ T9362] belkin: probe of 0003:1020:0006.001F failed with error -22 [ 268.784809][ T9007] usb 1-1: USB disconnect, device number 18 [ 269.034345][ T9357] corsair-cpro 0003:1B1C:0C10.0020: unknown main item tag 0x0 [ 269.047664][ T9357] corsair-cpro 0003:1B1C:0C10.0020: unknown main item tag 0x0 [ 269.071344][ T9357] corsair-cpro 0003:1B1C:0C10.0020: unknown main item tag 0x0 [ 269.105056][ T9357] corsair-cpro 0003:1B1C:0C10.0020: unknown main item tag 0x0 [ 269.129595][ T9357] corsair-cpro 0003:1B1C:0C10.0020: unknown main item tag 0x0 [ 269.161419][ T9357] corsair-cpro 0003:1B1C:0C10.0020: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 269.211270][T10368] loop7: detected capacity change from 0 to 1024 [ 269.304505][ T9357] corsair-cpro: probe of 0003:1B1C:0C10.0020 failed with error -38 [ 269.347558][ T9357] usb 3-1: USB disconnect, device number 18 [ 269.911233][T10376] loop0: detected capacity change from 0 to 8192 [ 270.579791][ T4827] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 270.898812][T10390] loop5: detected capacity change from 0 to 1024 [ 271.217113][ T4827] usb 3-1: config index 0 descriptor too short (expected 4495, got 71) [ 271.229520][T10390] hfsplus: bad catalog entry type [ 271.262214][ T4827] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 271.290820][ T4827] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.301954][T10391] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 271.309384][T10391] hfsplus: cannot replace xattr [ 271.357679][ T4277] hfsplus: b-tree write err: -5, ino 4 [ 271.362351][ T4827] usb 3-1: config 0 has no interface number 0 [ 271.661017][ T4827] usb 3-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 271.689678][ T4827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.713962][ T4827] usb 3-1: Product: syz [ 271.728600][ T4827] usb 3-1: Manufacturer: syz [ 271.741668][ T4827] usb 3-1: SerialNumber: syz [ 271.772337][ T4827] usb 3-1: config 0 descriptor?? [ 271.783472][T10388] loop6: detected capacity change from 0 to 32768 [ 271.894834][T10376] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 271.913998][T10376] REISERFS (device loop0): using ordered data mode [ 271.965057][T10376] reiserfs: using flush barriers [ 272.051116][T10376] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 272.084556][T10376] REISERFS (device loop0): checking transaction log (loop0) [ 272.120747][ T4827] usb 3-1: USB disconnect, device number 19 [ 272.215362][T10376] REISERFS (device loop0): Using r5 hash to sort names [ 272.222743][T10376] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 272.482307][T10376] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "dax=never" [ 272.795089][T10398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2342'. [ 273.445556][T10410] loop2: detected capacity change from 0 to 256 [ 273.608810][T10421] loop7: detected capacity change from 0 to 256 [ 273.937504][T10425] loop5: detected capacity change from 0 to 16 [ 274.774362][T10429] rtc_cmos 00:00: Alarms can be up to one day in the future [ 275.206314][T10435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2355'. [ 275.264409][T10425] erofs: (device loop5): mounted with root inode @ nid 36. [ 275.428659][T10436] fido_id[10436]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 275.554705][T10421] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x2e76b09e, utbl_chksum : 0xe619d30d) [ 276.839105][T10449] loop0: detected capacity change from 0 to 40427 [ 277.166066][T10451] loop5: detected capacity change from 0 to 1024 [ 277.720746][T10466] loop6: detected capacity change from 0 to 1024 [ 278.267916][ T9362] Bluetooth: hci5: command 0x0406 tx timeout [ 278.428396][T10480] loop2: detected capacity change from 0 to 256 [ 278.813780][T10449] F2FS-fs (loop0): Found nat_bits in checkpoint [ 279.787300][T10466] hfsplus: bad catalog entry type [ 279.883721][ T7854] hfsplus: b-tree write err: -5, ino 4 [ 279.917717][T10496] netlink: 'syz.5.2383': attribute type 1 has an invalid length. [ 279.951820][T10496] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.2383'. [ 280.467352][T10504] loop5: detected capacity change from 0 to 512 [ 280.581648][T10504] EXT4-fs (loop5): Ignoring removed nobh option [ 280.617773][T10504] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 280.665321][T10504] EXT4-fs (loop5): inline encryption not supported [ 280.688454][T10504] EXT4-fs (loop5): Test dummy encryption mode enabled [ 280.744656][T10504] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 280.751855][T10504] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 280.914061][T10504] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 280.916525][T10504] System zones: 1-12 [ 280.960128][T10504] EXT4-fs (loop5): 1 truncate cleaned up [ 280.960150][T10504] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,debug,mblk_io_submit,nogrpid,,errors=continue. Quota mode: none. [ 280.980201][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 280.980219][ T26] audit: type=1800 audit(1769554993.594:21): pid=10504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2388" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 283.795079][T10565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2408'. [ 283.841901][T10567] loop2: detected capacity change from 0 to 1024 [ 283.891289][T10569] loop5: detected capacity change from 0 to 2048 [ 284.654651][T10585] 9pnet_rdma: rdma_create_trans (10585): problem binding to privport: 13 [ 285.266212][ T9357] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 285.589960][T10569] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 285.707593][ T9353] Bluetooth: hci0: command 0x0c1a tx timeout [ 285.810910][ T9357] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.822027][ T9357] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 285.847697][ T155] hfsplus: b-tree write err: -5, ino 4 [ 285.856557][ T9357] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.872741][ T9357] usb 1-1: config 0 descriptor?? [ 286.011529][T10569] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x0000000000000814,. Quota mode: writeback. [ 286.142861][T10569] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #12: block 5: comm syz.5.2410: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=7952, size=56 fake=0 [ 286.262327][T10569] EXT4-fs (loop5): Remounting filesystem read-only [ 286.388085][ T9357] lenovo 0003:17EF:6062.0021: unknown main item tag 0x1 [ 286.417774][ T9357] lenovo 0003:17EF:6062.0021: hidraw0: USB HID v0.04 Device [HID 17ef:6062] on usb-dummy_hcd.0-1/input0 [ 286.639904][ T9357] usb 1-1: USB disconnect, device number 19 [ 286.664783][T10617] fido_id[10617]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 287.083538][T10615] loop6: detected capacity change from 0 to 32768 [ 287.263493][T10619] syz.0.2427 (10619) used obsolete PPPIOCDETACH ioctl [ 288.228295][T10631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2431'. [ 288.810379][T10615] XFS (loop6): Mounting V5 Filesystem [ 289.528901][T10615] XFS (loop6): Ending clean mount [ 289.611327][ T6973] XFS (loop6): Unmounting Filesystem [ 289.617376][ T27] INFO: task syz-executor:4183 blocked for more than 143 seconds. [ 289.639153][ T27] Not tainted syzkaller #0 [ 289.674849][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 289.728455][ T27] task:syz-executor state:D stack:21680 pid: 4183 ppid: 1 flags:0x00004004 [ 289.746073][ T27] Call Trace: [ 289.749428][ T27] [ 289.753529][ T27] __schedule+0x11ef/0x43c0 [ 289.758098][ T27] ? verify_lock_unused+0x140/0x140 [ 289.764833][ T27] ? stack_trace_snprint+0xf0/0xf0 [ 289.770022][ T27] ? mark_lock+0x94/0x320 [ 289.781594][ T27] ? release_firmware_map_entry+0x190/0x190 [ 289.793320][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 289.799485][ T27] ? lock_chain_count+0x20/0x20 [ 289.812299][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 289.817503][ T27] schedule+0x11b/0x1e0 [ 289.824054][ T27] io_schedule+0x7c/0xd0 [ 289.831830][ T27] wait_on_page_bit_common+0x83b/0xe50 [ 289.841591][ T27] ? wait_on_page_bit+0x50/0x50 [ 289.847688][ T27] ? rcu_lock_release+0x20/0x20 [ 289.853204][ T27] ? finish_lock_switch+0x12f/0x280 [ 289.858710][ T27] truncate_inode_pages_range+0xa24/0xfe0 [ 289.866010][ T27] ? invalidate_inode_page+0x360/0x360 [ 289.871697][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 289.879007][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 289.884620][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 289.889981][ T27] evict+0x4dc/0x8d0 [ 289.894829][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 289.900763][ T27] ? proc_nr_inodes+0x320/0x320 [ 289.906916][ T27] ? preempt_schedule_thunk+0x16/0x18 [ 289.917089][ T27] evict_inodes+0x46b/0x6a0 [ 289.923648][ T27] ? __dentry_kill+0x530/0x650 [ 289.938262][ T27] ? clear_inode+0x150/0x150 [ 289.945459][ T27] generic_shutdown_super+0x93/0x300 [ 289.952736][ T27] kill_block_super+0x7c/0xe0 [ 289.957590][ T27] deactivate_locked_super+0x93/0xf0 [ 289.968392][ T27] cleanup_mnt+0x42d/0x4e0 [ 289.973640][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 289.978996][ T27] task_work_run+0x125/0x1a0 [ 289.985689][ T27] exit_to_user_mode_loop+0x10f/0x130 [ 289.991210][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 289.997685][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 290.003563][ T27] do_syscall_64+0x58/0xa0 [ 290.008112][ T27] ? clear_bhb_loop+0x30/0x80 [ 290.014290][ T27] ? clear_bhb_loop+0x30/0x80 [ 290.019129][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 290.026015][ T27] RIP: 0033:0x7f71be7da117 [ 290.030659][ T27] RSP: 002b:00007ffc519bc738 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 290.039635][ T27] RAX: 0000000000000000 RBX: 00007f71be84271f RCX: 00007f71be7da117 [ 290.048099][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc519bc7f0 [ 290.058099][ T27] RBP: 00007ffc519bc7f0 R08: 00007ffc519bd7f0 R09: 00000000ffffffff [ 290.066516][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc519bd880 [ 290.074923][ T27] R13: 00007f71be84271f R14: 000000000001f54f R15: 00007ffc519bd8c0 [ 290.083728][ T27] [ 290.088562][ T27] [ 290.088562][ T27] Showing all locks held in the system: [ 290.099944][ T27] 1 lock held by khungtaskd/27: [ 290.108033][ T27] #0: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 290.121064][ T27] 2 locks held by getty/3946: [ 290.128009][ T27] #0: ffff88807f1b1098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 290.138960][ T27] #1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70 [ 290.150131][ T27] 1 lock held by syz-executor/4183: [ 290.158329][ T27] #0: ffff888024ec60e0 (&type->s_umount_key#95){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 290.169487][ T27] 2 locks held by kworker/1:9/4781: [ 290.175093][ T27] #0: ffff888016c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 290.185647][ T27] #1: ffffc900036dfd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 290.197757][ T27] 2 locks held by syz-executor/6973: [ 290.203741][ T27] #0: ffff88805982a0e0 (&type->s_umount_key#68){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 290.214118][ T27] #1: ffffffff8c323528 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d1/0x750 [ 290.228490][ T27] [ 290.230967][ T27] ============================================= [ 290.230967][ T27] [ 290.250124][ T27] NMI backtrace for cpu 0 [ 290.254609][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 290.261872][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 290.272142][ T27] Call Trace: [ 290.275511][ T27] [ 290.278479][ T27] dump_stack_lvl+0x188/0x250 [ 290.283293][ T27] ? show_regs_print_info+0x20/0x20 [ 290.288537][ T27] ? load_image+0x400/0x400 [ 290.293093][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 290.298523][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 290.303688][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 290.308671][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 290.314872][ T27] ? _printk+0xda/0x130 [ 290.319078][ T27] ? load_image+0x400/0x400 [ 290.323618][ T27] ? load_image+0x400/0x400 [ 290.328137][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 290.334236][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 290.340233][ T27] watchdog+0xe0f/0xe50 [ 290.344409][ T27] kthread+0x436/0x520 [ 290.348634][ T27] ? hungtask_pm_notify+0x40/0x40 [ 290.353700][ T27] ? kthread_blkcg+0xd0/0xd0 [ 290.358328][ T27] ret_from_fork+0x1f/0x30 [ 290.362788][ T27] [ 290.366775][ T27] Sending NMI from CPU 0 to CPUs 1: [ 290.372032][ C1] NMI backtrace for cpu 1 [ 290.372044][ C1] CPU: 1 PID: 4277 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 290.372066][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 290.372077][ C1] Workqueue: bat_events batadv_nc_worker [ 290.372098][ C1] RIP: 0010:__lock_acquire+0x4d5/0x7d10 [ 290.372125][ C1] Code: 68 83 e0 01 c1 e0 12 09 c8 8b 8c 24 c8 00 00 00 c1 e1 13 41 c1 e5 14 41 09 cd 45 09 f5 41 09 c5 48 8b 44 24 58 42 0f b6 04 00 <84> c0 0f 85 af 62 00 00 44 8b 75 28 45 89 6f 20 49 8d 5f 24 48 89 [ 290.372140][ C1] RSP: 0018:ffffc900032cf5a0 EFLAGS: 00000002 [ 290.372154][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 290.372166][ C1] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff8880283446f8 [ 290.372177][ C1] RBP: ffffc900032cf7f0 R08: dffffc0000000000 R09: 0000000000000001 [ 290.372188][ C1] R10: dffffc0000000000 R11: fffffbfff1b13b16 R12: ffff888028344654 [ 290.372200][ C1] R13: 00000000000c003b R14: 000000000000003b R15: ffff8880283446e8 [ 290.372212][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 290.372228][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.372241][ C1] CR2: 00007fe7634832f8 CR3: 000000002282d000 CR4: 00000000003506e0 [ 290.372257][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 290.372268][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 290.372279][ C1] Call Trace: [ 290.372285][ C1] [ 290.372303][ C1] ? verify_lock_unused+0x140/0x140 [ 290.372324][ C1] ? finish_lock_switch+0x12f/0x280 [ 290.372343][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 290.372362][ C1] ? finish_lock_switch+0x12f/0x280 [ 290.372379][ C1] ? finish_task_switch+0x12f/0x640 [ 290.372399][ C1] ? __switch_to_asm+0x34/0x60 [ 290.372420][ C1] lock_acquire+0x19e/0x400 [ 290.372437][ C1] ? rcu_preempt_deferred_qs_irqrestore+0x26f/0xc30 [ 290.372462][ C1] ? read_lock_is_recursive+0x10/0x10 [ 290.372486][ C1] _raw_spin_lock+0x2a/0x40 [ 290.372505][ C1] ? rcu_preempt_deferred_qs_irqrestore+0x26f/0xc30 [ 290.372523][ C1] rcu_preempt_deferred_qs_irqrestore+0x26f/0xc30 [ 290.372543][ C1] ? preempt_schedule_notrace+0xfc/0x120 [ 290.372560][ C1] ? preempt_schedule_common+0xd0/0xd0 [ 290.372580][ C1] ? sync_rcu_exp_done_unlocked+0x140/0x140 [ 290.372599][ C1] ? rcu_read_unlock_special+0xf0/0x4a0 [ 290.372616][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 290.372634][ C1] rcu_read_unlock_special+0x3dd/0x4a0 [ 290.372652][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 290.372667][ C1] ? read_lock_is_recursive+0x10/0x10 [ 290.372686][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 290.372704][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 290.372726][ C1] __rcu_read_unlock+0x78/0xd0 [ 290.372742][ C1] batadv_nc_worker+0x256/0x5c0 [ 290.372760][ C1] process_one_work+0x85f/0x1010 [ 290.372784][ C1] ? worker_detach_from_pool+0x240/0x240 [ 290.372801][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 290.372819][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 290.372837][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 290.372857][ C1] ? wq_worker_running+0x97/0x170 [ 290.372874][ C1] worker_thread+0xaa6/0x1290 [ 290.372896][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 290.372913][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 290.372937][ C1] kthread+0x436/0x520 [ 290.372950][ C1] ? rcu_lock_release+0x20/0x20 [ 290.372966][ C1] ? kthread_blkcg+0xd0/0xd0 [ 290.372981][ C1] ret_from_fork+0x1f/0x30 [ 290.373003][ C1] [ 290.394937][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 290.723188][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 290.730428][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 290.740615][ T27] Call Trace: [ 290.743905][ T27] [ 290.746864][ T27] dump_stack_lvl+0x188/0x250 [ 290.751677][ T27] ? show_regs_print_info+0x20/0x20 [ 290.756932][ T27] ? load_image+0x400/0x400 [ 290.761522][ T27] panic+0x2e5/0x810 [ 290.765550][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 290.771292][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 290.775823][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 290.781413][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 290.787591][ T27] watchdog+0xe4e/0xe50 [ 290.791764][ T27] kthread+0x436/0x520 [ 290.795861][ T27] ? hungtask_pm_notify+0x40/0x40 [ 290.801000][ T27] ? kthread_blkcg+0xd0/0xd0 [ 290.805621][ T27] ret_from_fork+0x1f/0x30 [ 290.810107][ T27] [ 290.813389][ T27] Kernel Offset: disabled [ 290.817737][ T27] Rebooting in 86400 seconds..