last executing test programs: 6m36.982786375s ago: executing program 3 (id=83): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x3200451, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f626172726965722c6fa0d5692f7cdbe6059169b18221d749a1726465723d7374726963742c6e6f7265636f766572792c624b72726965722c6e6f646973636172642c6f726465723d7374726963742c6572726f72733d72656d6f756e742d726f2c75726465723d72656c617865642c646973636172642c63703d30783030"], 0x3, 0xee2, &(0x7f0000001e80)="$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") mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@xino_off}], [], 0x5c}) 6m36.480193965s ago: executing program 3 (id=89): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 6m34.453236682s ago: executing program 3 (id=103): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5883, 0x80}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 6m34.196259637s ago: executing program 3 (id=106): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000540)={[{@errors_remount}, {@delalloc}, {@bh}, {@dioread_lock}, {@nouid32}, {@data_writeback}]}, 0x2, 0x550, &(0x7f0000000900)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, 0x0) 6m33.502228248s ago: executing program 3 (id=112): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50ec, &(0x7f00000051c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143041, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000080)={0x17c04, 0xffffffffffffffff, 0x9, 0x1002, 0x800000006, 0x1ff}) 6m31.832381506s ago: executing program 3 (id=120): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000200)=0x2, 0x4) 6m31.321586655s ago: executing program 32 (id=120): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000200)=0x2, 0x4) 1m27.548013721s ago: executing program 2 (id=3009): r0 = socket(0x23, 0x80805, 0x0) listen(r0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @private=0xa010100}, 0x10) 1m27.293087866s ago: executing program 2 (id=3012): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x1c) write(r0, 0x0, 0x0) 1m26.968268944s ago: executing program 2 (id=3015): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d617463680000002000028008000300b07346e30a0001007374617465000000080002"], 0xd0}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000040), 0x2) 1m26.628011294s ago: executing program 2 (id=3019): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) 1m26.392796218s ago: executing program 2 (id=3022): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x9, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r1, 0x9e000003}}, 0x48) 1m25.857001209s ago: executing program 2 (id=3030): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000300)={[{@acl}, {}, {@noacl}, {}, {@nouser_xattr}, {@cache_strategy_readahead}]}, 0x1, 0x177, &(0x7f0000000680)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100, 0x171) getdents(r0, &(0x7f0000000000)=""/119, 0x77) 1m25.361847008s ago: executing program 33 (id=3030): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000300)={[{@acl}, {}, {@noacl}, {}, {@nouser_xattr}, {@cache_strategy_readahead}]}, 0x1, 0x177, &(0x7f0000000680)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100, 0x171) getdents(r0, &(0x7f0000000000)=""/119, 0x77) 1m8.809962514s ago: executing program 6 (id=3143): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x10080, &(0x7f00000003c0)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030303031362c6e6c733d63703835322c6465636f6d706f73652c747970653dcfccdbe12c6e6f6465636f6d706f73652c756d61736b3d30303030303030303030303030303030303030333130342c747970653d4d3cceb82c002ad7284323ea56bc99a14dd378534ee75c7630ac8f558227d608170ed1eff17f7fe5d3ae8967f7d801ab"], 0x44, 0x706, &(0x7f0000001440)="$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") mount$nfs(&(0x7f0000000540)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) mount$nfs(&(0x7f0000000300)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) 1m8.397039768s ago: executing program 6 (id=3146): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="199374c96ee3", 0x0, 0xffffffff, 0x30, 0x0, 0x0}) 1m8.120323754s ago: executing program 6 (id=3149): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010080ffffff000000000100000008000100030000001c0004800500efff00000000050003008000000005000300060000000800020003"], 0x40}}, 0x20000000) 1m7.828340011s ago: executing program 6 (id=3153): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000002c80)={0x4, @win={{0x8, 0x5, 0xffff2832, 0x130d}, 0xe, 0x1, 0x0, 0xfffffffa, 0x0, 0x19}}) 1m7.641051642s ago: executing program 6 (id=3155): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) symlinkat(&(0x7f0000000040)='./file0/file0\x00', r0, &(0x7f0000000100)='./file0\x00') 1m7.370112418s ago: executing program 6 (id=3159): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) 52.279475199s ago: executing program 34 (id=3159): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) 5.080537223s ago: executing program 0 (id=3692): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000180)={0x0, 0x2}) 4.716734185s ago: executing program 0 (id=3695): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'s526\x00', [0x2f00, 0x5, 0xd09a, 0xffffffff, 0x3, 0x10001, 0x20000004, 0x6, 0xffe, 0xe3b3, 0x1, 0x1, 0x4, 0x100007, 0xa9, 0x6, 0x5, 0x40000009, 0x830, 0x2, 0xfffd, 0x8, 0xa4df, 0x101, 0x2, 0x0, 0x100007, 0x3, 0x8, 0x5, 0x713]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xff92, &(0x7f0000000080)=[0x3, 0x3, 0x4, 0x7, 0x4660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0x2, 0x200, 0x4, 0x6], 0x3, 0x4}) 3.617559699s ago: executing program 1 (id=3706): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x18, 0x1, 0x1, [r2, r0]}}], 0x18, 0x4}, 0x8c0) 3.471985018s ago: executing program 4 (id=3708): unshare(0x6020400) r0 = syz_open_procfs(0x0, &(0x7f0000000680)='cgroup\x00') preadv(r0, &(0x7f00000008c0)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1000000000000252, 0x0, 0x0) 3.268431329s ago: executing program 1 (id=3710): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000040)=[{r0, 0x10}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f0000000640), 0x4, 0x5c5, &(0x7f0000001a00)="$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") 3.232533712s ago: executing program 4 (id=3711): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) 2.844210884s ago: executing program 4 (id=3715): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x18, r1, 0x6a98047402e98331, 0x70bd2a, 0x0, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2.740302111s ago: executing program 1 (id=3717): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @local}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000800)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 2.507158864s ago: executing program 4 (id=3718): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x7, 0x7800, 0x0, 0xfffffffb, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x0, 0x0, 0x9, 0x4, 0x0, @remote, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000001a80)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r1, 0x10, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x27, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 2.24049616s ago: executing program 1 (id=3720): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4038ae7a, &(0x7f0000000240)={[{0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200000efd}, {0x0, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20}]}) 2.174038493s ago: executing program 4 (id=3722): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x5200447, &(0x7f00000003c0)=ANY=[], 0xfd, 0x635c, &(0x7f0000012780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0x2000003, 0x2000}) 1.72052123s ago: executing program 7 (id=3724): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) bind$netlink(r0, &(0x7f0000000080), 0xc) 1.71104148s ago: executing program 1 (id=3725): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x444a, &(0x7f00000088c0)="$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") r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x120) getdents64(r0, 0xfffffffffffffffe, 0x41) 1.647545024s ago: executing program 5 (id=3726): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x14, 0x4, 0x8, 0x10000}, 0x48) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f00000001c0), &(0x7f00000003c0)=@udp=r1, 0x2}, 0x20) 1.432533807s ago: executing program 7 (id=3727): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000000000)) 1.359183631s ago: executing program 5 (id=3728): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) 1.246171377s ago: executing program 7 (id=3729): r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x7) 1.03242602s ago: executing program 5 (id=3730): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1ec) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',dfltgid=', @ANYRESHEX, @ANYBLOB=',\x00B']) 984.988833ms ago: executing program 7 (id=3731): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x2b, [0x8000, 0xc95a, 0xffffdff3, 0x3, 0x80, 0x6, 0x3, 0x7e, 0x2, 0x5, 0x39cc191a, 0x5f, 0xb, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x800, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x4, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0xc, 0xe, 0x0, 0x71, 0x7, 0x1000, 0x3, 0x2, 0x8005, 0x3f, 0x8d, 0x6, 0x6, 0x0, 0x5, 0x4, 0x3, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6ca, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x31, 0xe, 0x312, 0x78, 0xea4, 0x9, 0x3, 0x3, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x1, 0x8, 0x5, 0x10005, 0x5f31, 0x4, 0xfffffffd, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x28, 0x1, 0xfe000000, 0xffff, 0x2, 0x7, 0x9, 0x3ff, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x12000000, 0x2], [0x100007, 0x4, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0xffff, 0x80000002, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0x10000003, 0x1000, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x5, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x83, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x7fff, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x7, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0x6, 0x3, 0xb, 0x5, 0x934, 0x6, 0x6, 0x0, 0xbdfe, 0xce7, 0x1ff, 0xfffffffe, 0x7, 0x8000005, 0x3, 0x101, 0x10000, 0x6, 0x8003, 0xffff, 0x81, 0xff, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0xa721, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x37f, 0x9602, 0x7, 0x2, 0x7, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa23, 0xc, 0x0, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x2, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 893.227178ms ago: executing program 0 (id=3732): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)}], 0x2}], 0x1, 0x40800) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_stats={0x11}}) 824.528593ms ago: executing program 5 (id=3733): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000005200010004000000000000001c"], 0x28}}, 0x0) 749.807116ms ago: executing program 7 (id=3734): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='K'], 0x3) 720.828928ms ago: executing program 0 (id=3735): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0xfffd, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x5}, 0x1c) 452.588884ms ago: executing program 0 (id=3736): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) unshare(0x26020480) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @multicast1}, 0xffffffffffffff1b) 452.374744ms ago: executing program 5 (id=3737): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 350.57243ms ago: executing program 7 (id=3738): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14) 284.813524ms ago: executing program 0 (id=3739): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x4, &(0x7f0000000140), 0x0, 0x246, &(0x7f00000002c0)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000540)={@desc={0x1, 0x0, @desc2}, 0x40, 0x0, '\x00', @b}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x40046629, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) 52.495747ms ago: executing program 5 (id=3740): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001004300040001801000028006000180"], 0x28}}, 0x0) 20.438579ms ago: executing program 1 (id=3741): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1}, 0x6e) 0s ago: executing program 4 (id=3742): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x0, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0x6, 0xffffeadb, 0x3, 0x1003c, 0x8, 0x4, 0x8000000, 0x5]}) kernel console output (not intermixed with test programs): 8][T10903] ntfs3: loop0: Failed to load $Extend. [ 353.055760][T10918] loop1: detected capacity change from 0 to 4096 [ 353.095817][T10918] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 353.222244][T10918] ntfs: volume version 3.1. [ 353.311197][T10918] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp1251. You might want to try to use the mount option nls=utf8. [ 353.393299][T10918] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 353.452754][T10929] loop5: detected capacity change from 0 to 1024 [ 353.461460][T10930] loop0: detected capacity change from 0 to 16 [ 353.484886][T10929] EXT4-fs: Ignoring removed nobh option [ 353.499472][T10930] erofs: (device loop0): erofs_read_inode: unsupported i_format 16 of nid 36 [ 353.560425][T10929] EXT4-fs: inline encryption not supported [ 353.592834][T10929] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 353.625990][ T26] audit: type=1326 audit(1770381974.513:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10931 comm="syz.1.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501779aeb9 code=0x7ffc0000 [ 353.721395][T10929] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 353.725837][ T26] audit: type=1326 audit(1770381974.533:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10931 comm="syz.1.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f501779aeb9 code=0x7ffc0000 [ 353.860251][ T26] audit: type=1326 audit(1770381974.533:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10931 comm="syz.1.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501779aeb9 code=0x7ffc0000 [ 353.931616][T10938] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2492'. [ 353.948943][ T26] audit: type=1326 audit(1770381974.533:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10931 comm="syz.1.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501779aeb9 code=0x7ffc0000 [ 353.971406][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.984781][ T4775] EXT4-fs (loop5): unmounting filesystem. [ 354.039862][ T26] audit: type=1326 audit(1770381974.533:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10931 comm="syz.1.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f501779aeb9 code=0x7ffc0000 [ 354.122111][ T26] audit: type=1326 audit(1770381974.543:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10931 comm="syz.1.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501779aeb9 code=0x7ffc0000 [ 354.207944][T10940] loop5: detected capacity change from 0 to 1024 [ 354.214988][ T26] audit: type=1326 audit(1770381974.543:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10931 comm="syz.1.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501779aeb9 code=0x7ffc0000 [ 354.239056][ C1] vkms_vblank_simulate: vblank timer overrun [ 354.317885][T10940] hfsplus: bad catalog entry type [ 354.448869][ T9] hfsplus: b-tree write err: -5, ino 4 [ 354.864622][ T4542] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 354.938905][T10956] loop1: detected capacity change from 0 to 512 [ 354.980256][T10956] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 355.060018][T10956] EXT4-fs (loop1): 1 truncate cleaned up [ 355.074641][ T4542] usb 3-1: Using ep0 maxpacket: 32 [ 355.082265][ T4542] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 355.089079][T10956] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 355.105641][ T4542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.123520][ T4542] usb 3-1: config 0 descriptor?? [ 355.140233][ T4542] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 355.641417][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 355.836852][ T4542] gspca_nw80x: reg_w err -71 [ 355.841676][ T4542] nw80x: probe of 3-1:0.0 failed with error -71 [ 355.880585][ T4542] usb 3-1: USB disconnect, device number 23 [ 355.937081][T10967] netlink: 'syz.4.2506': attribute type 3 has an invalid length. [ 355.953732][T10948] loop5: detected capacity change from 0 to 32768 [ 356.092933][T10948] XFS (loop5): Mounting V5 Filesystem [ 356.203543][T10948] XFS (loop5): Ending clean mount [ 356.236646][T10948] XFS (loop5): Quotacheck needed: Please wait. [ 356.400929][T10948] XFS (loop5): Quotacheck: Done. [ 356.513653][ T4775] XFS (loop5): Unmounting Filesystem [ 356.928646][T10994] loop4: detected capacity change from 0 to 256 [ 356.990263][T10994] exfat: Deprecated parameter 'utf8' [ 357.022576][T10994] exfat: Deprecated parameter 'namecase' [ 357.091349][T10994] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 357.725981][T11010] loop2: detected capacity change from 0 to 1024 [ 357.874522][T11014] loop5: detected capacity change from 0 to 512 [ 357.911596][T11017] loop4: detected capacity change from 0 to 512 [ 357.919941][T11014] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 358.006587][T11017] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 358.167809][T11022] netlink: 'syz.1.2527': attribute type 1 has an invalid length. [ 358.219628][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 358.248039][T11014] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 358.339763][T11014] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 358.368800][ T4353] hfsplus: b-tree write err: -5, ino 4 [ 358.460061][T11024] loop4: detected capacity change from 0 to 256 [ 358.924570][T11038] loop5: detected capacity change from 0 to 1024 [ 358.999893][T11038] hfsplus: bad catalog entry type [ 359.165007][ T4353] hfsplus: b-tree write err: -5, ino 4 [ 359.539253][T11057] loop1: detected capacity change from 0 to 256 [ 359.593762][T11057] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d) [ 359.691891][T11063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2548'. [ 359.804493][ T4542] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 359.941810][T11070] loop0: detected capacity change from 0 to 256 [ 359.996342][T11070] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 360.010268][ T4542] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.054686][ T4542] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.094188][ T4542] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.134866][ T4542] usb 5-1: config 0 interface 0 has no altsetting 0 [ 360.141593][ T4542] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 360.182037][ T4542] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.215675][ T4542] usb 5-1: config 0 descriptor?? [ 360.417221][T11077] netlink: 'syz.0.2554': attribute type 1 has an invalid length. [ 360.655034][ T4542] magicmouse 0003:05AC:0265.0024: hidraw0: USB HID v0.09 Device [HID 05ac:0265] on usb-dummy_hcd.4-1/input0 [ 360.704900][ T4542] magicmouse 0003:05AC:0265.0024: magicmouse input not registered [ 360.751599][ T4542] magicmouse: probe of 0003:05AC:0265.0024 failed with error -12 [ 360.875594][ T4330] usb 5-1: USB disconnect, device number 13 [ 360.979717][T11095] netlink: 'syz.5.2563': attribute type 4 has an invalid length. [ 361.029829][T11095] netlink: 'syz.5.2563': attribute type 2 has an invalid length. [ 361.109149][T11092] fido_id[11092]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 361.576254][T11107] loop0: detected capacity change from 0 to 4096 [ 361.617950][T11107] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 361.668286][T11107] ntfs3: loop0: Failed to load $Extend. [ 361.903031][T11116] loop2: detected capacity change from 0 to 2048 [ 361.988638][T11116] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 362.115963][T11103] loop5: detected capacity change from 0 to 32768 [ 362.199137][T11103] JBD2: Ignoring recovery information on journal [ 362.315753][T11103] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 362.402852][T11103] (syz.5.2567,11103,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 362.425346][T11103] (syz.5.2567,11103,1):ocfs2_group_add:495 ERROR: Can't read the group descriptor # 2147483647 from the device. [ 362.589443][ T4775] ocfs2: Unmounting device (7,5) on (node local) [ 362.795513][T11133] loop4: detected capacity change from 0 to 512 [ 362.883539][T11133] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 362.984905][T11133] EXT4-fs (loop4): 1 truncate cleaned up [ 362.990662][T11133] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 363.097411][T11133] EXT4-fs warning (device loop4): verify_group_input:169: Last group not full [ 363.219398][T11138] loop0: detected capacity change from 0 to 4096 [ 363.273553][T11138] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 363.315726][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 363.556633][T11149] loop4: detected capacity change from 0 to 256 [ 363.574502][T11149] exfat: Deprecated parameter 'namecase' [ 363.580335][T11149] exfat: Deprecated parameter 'utf8' [ 363.671199][T11149] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 363.702061][ T4281] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 363.728642][ T4281] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 363.774695][ T4281] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 364.094692][T11166] tipc: Started in network mode [ 364.099661][T11166] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 364.134818][T11166] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 364.169011][T11170] loop4: detected capacity change from 0 to 512 [ 364.178578][T11166] tipc: Enabled bearer , priority 10 [ 364.241408][T11172] loop1: detected capacity change from 0 to 2048 [ 364.303782][T11172] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 365.145163][ T4635] tipc: Node number set to 1 [ 365.374903][T11202] loop4: detected capacity change from 0 to 1764 [ 365.583931][T11182] loop2: detected capacity change from 0 to 32768 [ 365.603152][T11210] device ip6_vti0 entered promiscuous mode [ 365.674829][T11217] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 365.751125][T11182] XFS (loop2): Mounting V5 Filesystem [ 365.890217][T11182] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 365.922547][T11182] XFS (loop2): Starting recovery (logdev: internal) [ 365.948102][T11182] XFS (loop2): Ending recovery (logdev: internal) [ 365.957802][T11182] XFS (loop2): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 365.970473][T11182] XFS (loop2): Failed to initialize disk quotas. [ 366.141029][ T4269] XFS (loop2): Unmounting Filesystem [ 366.951780][ T26] audit: type=1326 audit(1770381987.833:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11254 comm="syz.5.2634" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda5499aeb9 code=0x0 [ 367.351685][T11253] loop1: detected capacity change from 0 to 32768 [ 367.373475][T11253] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop1 scanned by syz.1.2633 (11253) [ 367.397752][T11253] BTRFS info (device loop1): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 367.408404][T11253] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 367.418469][T11253] BTRFS info (device loop1): using free space tree [ 367.476989][T11253] BTRFS info (device loop1): enabling ssd optimizations [ 367.559936][ T3598] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 367.665825][ T4282] BTRFS info (device loop1): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 367.754091][ T3598] usb 3-1: Using ep0 maxpacket: 16 [ 367.761251][ T3598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.801751][ T3598] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 367.831564][ T3598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.883480][ T3598] usb 3-1: config 0 descriptor?? [ 368.100401][T11292] loop4: detected capacity change from 0 to 512 [ 368.158330][T11294] loop1: detected capacity change from 0 to 512 [ 368.175683][T11292] EXT4-fs: Ignoring removed i_version option [ 368.182511][T11292] EXT4-fs: Ignoring removed oldalloc option [ 368.290437][T11292] EXT4-fs (loop4): Test dummy encryption mode enabled [ 368.322445][T11294] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 368.352298][T11292] EXT4-fs (loop4): 1 truncate cleaned up [ 368.368191][ T3598] hkems 0003:2006:0118.0025: unbalanced delimiter at end of report description [ 368.395761][T11294] ext4 filesystem being mounted at /571/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.406809][T11292] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 368.425140][ T3598] hkems 0003:2006:0118.0025: parse failed [ 368.431090][ T3598] hkems: probe of 0003:2006:0118.0025 failed with error -22 [ 368.507026][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 368.548293][T11301] EXT4-fs error (device loop1): __ext4_new_inode:1285: comm syz.1.2644: failed to insert inode 16: doubly allocated? [ 368.613179][ T3598] usb 3-1: USB disconnect, device number 24 [ 368.728869][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 369.209976][T11317] nbd: must specify at least one socket [ 369.753932][T11333] loop1: detected capacity change from 0 to 256 [ 370.564366][T11354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2669'. [ 370.746063][T11358] IPVS: Error joining to the multicast group [ 370.837164][T11335] loop4: detected capacity change from 0 to 32768 [ 370.920394][T11335] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 370.976668][T11335] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 371.062716][T11366] loop1: detected capacity change from 0 to 1024 [ 371.142971][T11366] EXT4-fs: Ignoring removed bh option [ 371.179667][T11335] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 371.224891][ T4639] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 371.233016][ T4639] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 371.278396][T11366] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 371.333411][ T4639] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 100ms [ 371.342973][ T4639] gfs2: fsid=syz:syz.0: jid=0: Done [ 371.351030][T11335] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 371.430004][T11376] usb usb1: usbfs: process 11376 (syz.2.2679) did not claim interface 0 before use [ 371.462036][T11366] EXT4-fs warning (device loop1): ext4_resize_begin:74: won't resize using backup superblock at 1 [ 371.682725][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 372.058145][T11399] loop0: detected capacity change from 0 to 512 [ 372.114951][T11399] EXT4-fs: Ignoring removed mblk_io_submit option [ 372.190775][T11399] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 372.260918][ T26] audit: type=1326 audit(1770381993.143:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.5.2691" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda5499aeb9 code=0x0 [ 372.347173][T11399] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.2688: attempt to clear invalid blocks 2 len 1 [ 372.419271][T11399] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 372.477376][T11399] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2688: invalid indirect mapped block 1819239214 (level 0) [ 372.527881][T11399] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2688: invalid indirect mapped block 1819239214 (level 1) [ 372.549042][T11399] EXT4-fs (loop0): 1 truncate cleaned up [ 372.556789][T11399] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 372.712221][ T4281] EXT4-fs (loop0): unmounting filesystem. [ 373.023427][T11401] loop2: detected capacity change from 0 to 32768 [ 373.038889][T11401] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2689 (11401) [ 373.099494][T11401] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 373.155599][T11401] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 373.174417][T11401] BTRFS info (device loop2): using free space tree [ 373.383751][T11447] loop0: detected capacity change from 0 to 1024 [ 373.390477][T11401] BTRFS info (device loop2): enabling ssd optimizations [ 373.569046][T11452] hfsplus: request for non-existent node 17039360 in B*Tree [ 373.630095][T11452] hfsplus: request for non-existent node 17039360 in B*Tree [ 373.689128][ T4269] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 373.813700][T11456] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2705'. [ 373.857453][T11456] nbd: couldn't find device at index 64 [ 374.360979][ T28] hfsplus: b-tree write err: -5, ino 8 [ 374.632447][T11481] loop1: detected capacity change from 0 to 1024 [ 374.815784][ T4353] hfsplus: b-tree write err: -5, ino 4 [ 375.026915][T11498] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2724'. [ 375.414619][T11510] netlink: 1008 bytes leftover after parsing attributes in process `syz.2.2729'. [ 375.652974][T11507] loop4: detected capacity change from 0 to 8192 [ 375.662895][T11513] loop1: detected capacity change from 0 to 64 [ 375.722480][T11507] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 375.748583][T11515] 9pnet_rdma: rdma_create_trans (11515): problem binding to privport: 13 [ 375.764896][T11507] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 375.789493][T11518] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2732'. [ 375.835228][T11507] REISERFS (device loop4): using ordered data mode [ 375.841830][T11507] reiserfs: using flush barriers [ 375.855095][T11518] netlink: 'syz.2.2732': attribute type 3 has an invalid length. [ 375.881530][T11507] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 375.948587][T11507] REISERFS (device loop4): checking transaction log (loop4) [ 375.985408][T11507] REISERFS (device loop4): Using r5 hash to sort names [ 375.992694][T11507] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 376.106455][T11520] loop5: detected capacity change from 0 to 64 [ 376.471381][T11524] loop2: detected capacity change from 0 to 4096 [ 376.583753][T11524] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 376.614739][T11524] ntfs3: loop2: Failed to load $Extend. [ 376.739640][T11528] loop4: detected capacity change from 0 to 1024 [ 376.772940][T11528] EXT4-fs: Ignoring removed orlov option [ 376.846545][T11528] EXT4-fs: Ignoring removed nomblk_io_submit option [ 376.972040][T11528] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 377.010391][T11522] loop1: detected capacity change from 0 to 32768 [ 377.029323][T11522] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2734 (11522) [ 377.049296][T11522] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 377.060991][T11522] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 377.070574][T11522] BTRFS info (device loop1): turning on sync discard [ 377.078521][T11522] BTRFS info (device loop1): setting nodatacow, compression disabled [ 377.088103][T11522] BTRFS info (device loop1): turning off barriers [ 377.095838][T11522] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 377.107363][T11522] BTRFS info (device loop1): trying to use backup root at mount time [ 377.115942][T11522] BTRFS info (device loop1): metadata ratio 32769 [ 377.122661][T11522] BTRFS info (device loop1): max_inline at 0 [ 377.130385][T11522] BTRFS info (device loop1): using free space tree [ 377.194098][ T4639] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 377.250092][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 377.326389][ T11] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 377.400351][ T4639] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 377.431194][ T4639] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 377.455271][T11522] BTRFS error (device loop1): failed to load root extent [ 377.462689][T11522] BTRFS warning (device loop1): try to load backup roots slot 1 [ 377.483569][ T4639] usb 3-1: Product: syz [ 377.499097][ T11] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 377.508840][ T4639] usb 3-1: Manufacturer: syz [ 377.537460][T11558] loop0: detected capacity change from 0 to 128 [ 377.544015][ T4639] usb 3-1: SerialNumber: syz [ 377.553112][T11522] BTRFS warning (device loop1): couldn't read tree root [ 377.565848][T11522] BTRFS warning (device loop1): try to load backup roots slot 2 [ 377.586771][ T4639] usb 3-1: config 0 descriptor?? [ 377.624875][ T4639] ch341 3-1:0.0: ch341-uart converter detected [ 377.653003][T11522] BTRFS error (device loop1): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 377.709562][T11522] BTRFS warning (device loop1): couldn't read tree root [ 377.744789][T11522] BTRFS warning (device loop1): try to load backup roots slot 3 [ 377.815638][T11522] BTRFS info (device loop1): enabling ssd optimizations [ 377.823447][T11522] BTRFS info (device loop1): rebuilding free space tree [ 377.947664][T11522] BTRFS info (device loop1): checking UUID tree [ 378.211895][ T4639] usb 3-1: failed to send control message: -71 [ 378.223129][ T4639] ch341-uart: probe of ttyUSB0 failed with error -71 [ 378.270919][ T4639] usb 3-1: USB disconnect, device number 25 [ 378.309682][ T4639] ch341 3-1:0.0: device disconnected [ 378.420933][ T4282] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 378.619276][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.634295][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.870039][ T4418] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop1 scanned by udevd (4418) [ 379.695426][T11607] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2764'. [ 379.744081][T11607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2764'. [ 379.776270][T11607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2764'. [ 379.804107][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2764'. [ 379.945975][T11586] loop5: detected capacity change from 0 to 32768 [ 380.079947][T11617] loop0: detected capacity change from 0 to 256 [ 380.101105][T11586] XFS (loop5): Mounting V5 Filesystem [ 380.145951][T11617] FAT-fs (loop0): Directory bread(block 64) failed [ 380.183304][T11617] FAT-fs (loop0): Directory bread(block 65) failed [ 380.207573][T11588] loop4: detected capacity change from 0 to 40427 [ 380.225593][T11617] FAT-fs (loop0): Directory bread(block 66) failed [ 380.232228][T11617] FAT-fs (loop0): Directory bread(block 67) failed [ 380.259266][T11588] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 380.280541][T11617] FAT-fs (loop0): Directory bread(block 68) failed [ 380.304690][T11586] XFS (loop5): Starting recovery (logdev: internal) [ 380.311689][T11588] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 380.322681][T11617] FAT-fs (loop0): Directory bread(block 69) failed [ 380.336395][T11617] FAT-fs (loop0): Directory bread(block 70) failed [ 380.379058][T11588] F2FS-fs (loop4): invalid crc value [ 380.401617][T11617] FAT-fs (loop0): Directory bread(block 71) failed [ 380.433890][T11617] FAT-fs (loop0): Directory bread(block 72) failed [ 380.447217][T11617] FAT-fs (loop0): Directory bread(block 73) failed [ 380.464243][T11586] XFS (loop5): Ending recovery (logdev: internal) [ 380.485377][T11588] F2FS-fs (loop4): Found nat_bits in checkpoint [ 380.716272][T11588] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 380.723412][T11588] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 380.785423][ T4775] XFS (loop5): Unmounting Filesystem [ 381.401722][T11630] loop2: detected capacity change from 0 to 32768 [ 381.462789][T11630] ialloc: diAlloc returned -5! [ 381.488812][T11630] ialloc: diAlloc returned -5! [ 381.507159][T11645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2778'. [ 381.527478][T11645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2778'. [ 381.602056][T11649] netlink: 'syz.5.2773': attribute type 7 has an invalid length. [ 381.634668][T11649] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2773'. [ 382.039671][T11661] usb usb8: usbfs: process 11661 (syz.4.2784) did not claim interface 5 before use [ 382.195354][T11667] program syz.1.2786 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 382.691289][T11683] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2794'. [ 383.193177][T11681] loop1: detected capacity change from 0 to 32768 [ 383.267042][T11681] JBD2: Ignoring recovery information on journal [ 383.392852][T11681] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 383.630318][T11707] loop4: detected capacity change from 0 to 8 [ 383.822199][ T4282] ocfs2: Unmounting device (7,1) on (node local) [ 384.125601][T11719] loop5: detected capacity change from 0 to 2048 [ 384.154057][ T4636] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 384.179500][T11719] NILFS (loop5): invalid segment: Inconsistency found [ 384.224740][T11719] NILFS (loop5): trying rollback from an earlier position [ 384.280131][T11719] NILFS (loop5): recovery complete [ 384.305739][T11726] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 384.380142][ T4636] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.424868][ T4636] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.465370][ T4636] usb 3-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 384.495745][ T4636] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.547349][ T4636] usb 3-1: config 0 descriptor?? [ 384.635533][T11733] sctp: [Deprecated]: syz.0.2816 (pid 11733) Use of int in max_burst socket option deprecated. [ 384.635533][T11733] Use struct sctp_assoc_value instead [ 384.969655][ T4636] itetech 0003:048D:8595.0026: unknown main item tag 0x0 [ 384.994076][ T4636] itetech 0003:048D:8595.0026: unknown main item tag 0x0 [ 385.024374][ T4636] itetech 0003:048D:8595.0026: hidraw0: USB HID v0.00 Device [HID 048d:8595] on usb-dummy_hcd.2-1/input0 [ 385.181594][ T4636] usb 3-1: USB disconnect, device number 26 [ 385.277132][T11743] fido_id[11743]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 385.424908][ T4330] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 385.541597][T11753] loop0: detected capacity change from 0 to 16 [ 385.586337][T11753] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 385.624731][ T4330] usb 6-1: Using ep0 maxpacket: 32 [ 385.631836][ T4330] usb 6-1: New USB device found, idVendor=056a, idProduct=033e, bcdDevice= 0.00 [ 385.649699][ T4330] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.672051][ T4330] usb 6-1: config 0 descriptor?? [ 385.863781][T11757] loop0: detected capacity change from 0 to 256 [ 385.942184][T11761] loop2: detected capacity change from 0 to 8 [ 386.049614][T11761] SQUASHFS error: Unable to read inode 0xe3 [ 386.098432][ T4330] wacom 0003:056A:033E.0027: Unknown device_type for 'HID 056a:033e'. Assuming pen. [ 386.157340][ T4330] wacom 0003:056A:033E.0027: hidraw0: USB HID v0.00 Device [HID 056a:033e] on usb-dummy_hcd.5-1/input0 [ 386.214819][ T4330] input: Wacom Intuos PT M 2 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:033E.0027/input/input24 [ 386.322989][ T4330] usb 6-1: USB disconnect, device number 20 [ 386.555376][T11771] fido_id[11771]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 387.069544][T11795] overlayfs: workdir and upperdir must be separate subtrees [ 387.196847][T11797] binder: 11796:11797 ioctl c0306201 200000000100 returned -14 [ 387.233498][T11793] loop2: detected capacity change from 0 to 8192 [ 387.241589][T11793] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 387.241618][T11793] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 387.241719][T11793] REISERFS (device loop2): using ordered data mode [ 387.241731][T11793] reiserfs: using flush barriers [ 387.243039][T11793] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 387.243451][T11793] REISERFS (device loop2): checking transaction log (loop2) [ 387.247095][T11793] REISERFS (device loop2): Using r5 hash to sort names [ 387.247463][T11793] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 387.728493][T11808] syz.1.2850 (11808) used obsolete PPPIOCDETACH ioctl [ 388.254258][ T4639] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 388.274079][ T4636] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 388.343179][T11829] loop2: detected capacity change from 0 to 1024 [ 388.364701][ T4343] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 388.436338][ T4639] usb 5-1: Using ep0 maxpacket: 16 [ 388.453586][ T4639] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 388.472941][ T4636] usb 2-1: Using ep0 maxpacket: 32 [ 388.482165][ T4639] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.501056][ T4639] usb 5-1: Product: syz [ 388.507621][ T4636] usb 2-1: New USB device found, idVendor=056a, idProduct=033e, bcdDevice= 0.00 [ 388.521067][ T4639] usb 5-1: Manufacturer: syz [ 388.527324][ T4636] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.535740][ T4639] usb 5-1: SerialNumber: syz [ 388.542356][ T4639] usb 5-1: config 0 descriptor?? [ 388.554616][ T4343] usb 6-1: Using ep0 maxpacket: 16 [ 388.560526][ T4636] usb 2-1: config 0 descriptor?? [ 388.567135][ T4343] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 388.587111][ T4639] as10x_usb: device has been detected [ 388.593047][ T4639] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 388.596053][ T4343] usb 6-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 388.618917][ T4343] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.631044][ T4343] usb 6-1: config 0 descriptor?? [ 388.658666][ T4639] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 388.728596][ T4639] as10x_usb: error during firmware upload part1 [ 388.735738][ T4639] Registered device Sky IT Digital Key (green led) [ 388.836732][T11816] random: crng reseeded on system resumption [ 389.003029][ T4636] wacom 0003:056A:033E.0028: Unknown device_type for 'HID 056a:033e'. Assuming pen. [ 389.020849][ T4636] wacom 0003:056A:033E.0028: hidraw0: USB HID v0.00 Device [HID 056a:033e] on usb-dummy_hcd.1-1/input0 [ 389.034850][ T4636] input: Wacom Intuos PT M 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:033E.0028/input/input27 [ 389.084210][ T4639] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 389.086074][ T4343] sony 0003:054C:0374.0029: hiddev1,hidraw1: USB HID v0.06 Device [HID 054c:0374] on usb-dummy_hcd.5-1/input0 [ 389.114580][ T4343] sony 0003:054C:0374.0029: failed to claim input [ 389.275788][ T4343] usb 2-1: USB disconnect, device number 7 [ 389.289670][ T4542] usb 6-1: USB disconnect, device number 21 [ 389.304451][ T4639] usb 3-1: Using ep0 maxpacket: 8 [ 389.311727][ T4639] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.353901][ T4639] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.371590][ T4639] usb 3-1: config 0 interface 0 has no altsetting 0 [ 389.392345][ T4639] usb 3-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 389.404589][T11832] fido_id[11832]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 389.420253][ T4639] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.448698][ T4639] usb 3-1: config 0 descriptor?? [ 389.486155][T11833] fido_id[11833]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 389.546259][ T4542] usb 5-1: USB disconnect, device number 14 [ 389.600310][ T4542] Unregistered device Sky IT Digital Key (green led) [ 389.629334][ T4542] as10x_usb: device has been disconnected [ 389.896169][ T4639] smartjoyplus 0003:0B43:0003.002A: ignoring exceeding usage max [ 389.916775][ T4639] smartjoyplus 0003:0B43:0003.002A: unbalanced collection at end of report description [ 389.932509][ T4639] smartjoyplus 0003:0B43:0003.002A: parse failed [ 389.950082][ T4639] smartjoyplus: probe of 0003:0B43:0003.002A failed with error -22 [ 390.149048][ T4639] usb 3-1: USB disconnect, device number 27 [ 390.732978][T11867] loop0: detected capacity change from 0 to 1764 [ 390.827014][T11867] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 390.870878][T11867] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 390.885162][T11871] loop2: detected capacity change from 0 to 64 [ 391.242439][T11877] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 391.310600][T11877] tipc: Enabled bearer , priority 10 [ 391.807044][T11898] nbd: couldn't find a device at index 1996488704 [ 392.389871][T11886] loop5: detected capacity change from 0 to 32768 [ 392.458020][T11886] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 392.789355][ T4395] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 392.888230][T11900] loop4: detected capacity change from 0 to 32768 [ 393.075637][T11900] XFS (loop4): Mounting V5 Filesystem [ 393.242121][T11900] XFS (loop4): Ending clean mount [ 393.407493][T11915] loop2: detected capacity change from 0 to 32768 [ 393.441326][T11915] XFS: attr2 mount option is deprecated. [ 393.515360][ T4270] XFS (loop4): Unmounting Filesystem [ 393.637537][ T4542] XFS (loop2): filesystem is marked as having an internal log; do not specify logdev on the mount command line. [ 393.683289][T11915] XFS (loop2): SB validate failed with error -22. [ 394.362485][T11965] sp0: Synchronizing with TNC [ 394.564165][ T4636] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 394.651942][T11970] loop2: detected capacity change from 0 to 1764 [ 394.740927][T11972] loop1: detected capacity change from 0 to 512 [ 394.784160][ T4636] usb 6-1: Using ep0 maxpacket: 16 [ 394.791966][ T4636] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.813575][T11972] EXT4-fs: Ignoring removed bh option [ 394.835467][ T4636] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.865178][T11972] EXT4-fs: Ignoring removed mblk_io_submit option [ 394.883523][T11972] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 394.893620][ T4636] usb 6-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00 [ 394.893654][ T4636] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.914444][ T4636] usb 6-1: config 0 descriptor?? [ 395.090674][T11972] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 395.112549][T11972] EXT4-fs (loop1): orphan cleanup on readonly fs [ 395.126679][T11972] Quota error (device loop1): do_insert_tree: Free block already used in tree: block 4 [ 395.174544][T11972] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 395.215328][T11972] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.2919: Failed to acquire dquot type 1 [ 395.228163][T11972] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.2919: Invalid block bitmap block 0 in block_group 0 [ 395.249476][T11972] Quota error (device loop1): write_blk: dquota write failed [ 395.258060][T11972] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 395.268305][T11972] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.2919: Failed to acquire dquot type 1 [ 395.296702][T11972] Quota error (device loop1): write_blk: dquota write failed [ 395.336054][T11972] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 395.373241][T11972] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.2919: Failed to acquire dquot type 1 [ 395.375325][ T4636] logitech-hidpp-device 0003:046D:C091.002B: hidraw0: USB HID v0.00 Device [HID 046d:c091] on usb-dummy_hcd.5-1/input0 [ 395.460333][T11972] EXT4-fs (loop1): 1 orphan inode deleted [ 395.543604][T11972] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 395.604474][ T4636] usb 6-1: USB disconnect, device number 22 [ 395.750553][T11986] fido_id[11986]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 395.772562][T11990] loop0: detected capacity change from 0 to 1024 [ 395.880761][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 395.893178][T11990] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 396.258546][ T4281] EXT4-fs (loop0): unmounting filesystem. [ 396.658755][T12021] loop0: detected capacity change from 0 to 256 [ 396.700590][T12021] FAT-fs (loop0): Directory bread(block 64) failed [ 396.720535][T12021] FAT-fs (loop0): Directory bread(block 65) failed [ 396.758183][T12021] FAT-fs (loop0): Directory bread(block 66) failed [ 396.781655][T12021] FAT-fs (loop0): Directory bread(block 67) failed [ 396.802821][T12021] FAT-fs (loop0): Directory bread(block 68) failed [ 396.823489][T12021] FAT-fs (loop0): Directory bread(block 69) failed [ 396.839737][T12021] FAT-fs (loop0): Directory bread(block 70) failed [ 396.858845][T12021] FAT-fs (loop0): Directory bread(block 71) failed [ 396.870290][T12021] FAT-fs (loop0): Directory bread(block 72) failed [ 396.878528][T12021] FAT-fs (loop0): Directory bread(block 73) failed [ 396.894580][ T4330] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 397.104654][ T4330] usb 3-1: Using ep0 maxpacket: 16 [ 397.111857][ T4330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 397.132497][ T4330] usb 3-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 397.172809][T12029] loop5: detected capacity change from 0 to 4096 [ 397.180139][ T4330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.202599][ T4330] usb 3-1: config 0 descriptor?? [ 397.294541][T12032] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 397.295992][T12029] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 397.427890][T12029] NILFS (loop5): mounting fs with errors [ 397.646009][ T4330] sony 0003:054C:0374.002C: hiddev0,hidraw0: USB HID v0.06 Device [HID 054c:0374] on usb-dummy_hcd.2-1/input0 [ 397.709651][ T4330] sony 0003:054C:0374.002C: failed to claim input [ 397.722669][T12027] loop4: detected capacity change from 0 to 32768 [ 397.808923][T12027] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 397.856627][ T4330] usb 3-1: USB disconnect, device number 28 [ 398.098436][T12045] fido_id[12045]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 398.249716][ T4377] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 398.415145][T12059] loop1: detected capacity change from 0 to 256 [ 398.422425][T12059] exfat: Deprecated parameter 'utf8' [ 398.500141][T12059] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x40a90196, utbl_chksum : 0xe619d30d) [ 398.787714][T12070] loop0: detected capacity change from 0 to 256 [ 399.174698][ T4330] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 399.371531][ T4330] usb 2-1: Using ep0 maxpacket: 16 [ 399.400849][ T4330] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 399.438094][ T4330] usb 2-1: config 0 has no interface number 0 [ 399.455897][ T4330] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 399.477708][ T4330] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 399.507937][ T4330] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 399.544592][ T4330] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 399.571158][ T4330] usb 2-1: Product: syz [ 399.585970][ T4330] usb 2-1: SerialNumber: syz [ 399.606150][ T4330] usb 2-1: config 0 descriptor?? [ 399.658844][ T4330] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 399.677500][ T4330] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input31 [ 399.896343][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 399.907822][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 399.915440][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 399.923474][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 399.934202][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 399.941460][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 399.954591][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 399.962515][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 399.970142][ T4330] usb 2-1: USB disconnect, device number 8 [ 399.987270][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 399.994299][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 400.025340][ T4330] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 400.333893][T12113] loop0: detected capacity change from 0 to 512 [ 400.372748][T12113] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 400.414727][T12113] EXT4-fs (loop0): 1 truncate cleaned up [ 400.420604][T12113] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 400.630181][ T4281] EXT4-fs (loop0): unmounting filesystem. [ 400.962137][T12129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2989'. [ 401.268677][T12137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2993'. [ 401.711884][T12152] loop5: detected capacity change from 0 to 256 [ 401.759204][T12152] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 402.570155][T12168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3007'. [ 402.589699][T12166] loop0: detected capacity change from 0 to 4096 [ 402.604633][T12168] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3007'. [ 402.634625][T12166] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 402.652157][T12168] netlink: 'syz.5.3007': attribute type 18 has an invalid length. [ 402.727622][T12166] ntfs3: loop0: Failed to load $Extend. [ 402.893822][T12154] loop1: detected capacity change from 0 to 40427 [ 402.951045][T12154] F2FS-fs (loop1): invalid crc value [ 402.997268][T12154] F2FS-fs (loop1): Found nat_bits in checkpoint [ 403.248054][T12154] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 403.462668][ T26] audit: type=1800 audit(1770382024.343:184): pid=12154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3002" name="file0" dev="loop1" ino=10 res=0 errno=0 [ 403.495109][T12154] UBIFS error (pid: 12154): cannot open "./file0", error -22 [ 403.585252][T12192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3017'. [ 403.635148][ T4282] syz-executor: attempt to access beyond end of device [ 403.635148][ T4282] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 404.530530][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.628379][T12216] loop1: detected capacity change from 0 to 1024 [ 404.727930][T12216] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 404.745776][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.760967][T12216] syz.1.3021: attempt to access beyond end of device [ 404.760967][T12216] loop1: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 404.809398][T12216] buffer_io_error: 102 callbacks suppressed [ 404.809415][T12216] Buffer I/O error on dev loop1, logical block 458752, async page read [ 404.866566][T12216] syz.1.3021: attempt to access beyond end of device [ 404.866566][T12216] loop1: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 404.910709][T12216] Buffer I/O error on dev loop1, logical block 458752, async page read [ 405.029677][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.228134][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.264931][T12231] loop1: detected capacity change from 0 to 8 [ 405.351495][T12231] SQUASHFS error: lzo decompression failed, data probably corrupt [ 405.414340][T12231] SQUASHFS error: Failed to read block 0x91: -5 [ 405.420833][T12231] SQUASHFS error: Unable to read metadata cache entry [8f] [ 405.471441][T12231] SQUASHFS error: Unable to read inode 0x11f [ 405.530264][T12235] 9pnet_fd: p9_fd_create_unix (12235): problem connecting socket: qY3aK: -111 [ 405.843204][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 405.856753][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 405.868434][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 405.878857][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 405.904721][ T4280] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 405.940938][ T4280] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 406.444491][T12256] loop4: detected capacity change from 0 to 64 [ 406.876641][T12237] loop0: detected capacity change from 0 to 32768 [ 407.479476][T12241] chnl_net:caif_netlink_parms(): no params data found [ 407.981311][ T4280] Bluetooth: hci1: command 0x0409 tx timeout [ 407.993490][T12241] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.008302][T12241] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.017351][T12241] device bridge_slave_0 entered promiscuous mode [ 408.026945][T12241] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.034273][T12241] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.042556][T12241] device bridge_slave_1 entered promiscuous mode [ 408.114908][ T4320] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 408.191761][T12241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.254270][T12241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.310206][ T4320] usb 2-1: Using ep0 maxpacket: 16 [ 408.319095][ T4320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.362417][ T4320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.383828][ T4320] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 408.400812][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.431730][ T4320] usb 2-1: config 0 descriptor?? [ 408.470206][T12241] team0: Port device team_slave_0 added [ 408.555017][T12241] team0: Port device team_slave_1 added [ 408.688779][T12241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.730292][T12241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.795095][T12241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.851771][ T4320] hid-multitouch 0003:1FD2:6007.002D: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 409.061119][ T4330] usb 2-1: USB disconnect, device number 9 [ 409.082581][T12241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.097472][T12241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.194752][T12241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.236551][T12318] fido_id[12318]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 409.358618][T12241] device hsr_slave_0 entered promiscuous mode [ 409.391996][T12241] device hsr_slave_1 entered promiscuous mode [ 409.411974][T12241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.431274][T12241] Cannot create hsr debugfs directory [ 409.625391][T12312] loop4: detected capacity change from 0 to 32768 [ 409.813107][ T9] device hsr_slave_0 left promiscuous mode [ 409.833299][T12313] loop5: detected capacity change from 0 to 40427 [ 409.846613][ T9] device hsr_slave_1 left promiscuous mode [ 409.863819][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.885232][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.895710][T12313] F2FS-fs (loop5): invalid crc value [ 409.926245][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.935108][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.956474][T12313] F2FS-fs (loop5): Found nat_bits in checkpoint [ 409.971308][ T9] bridge0: port 3(batadv0) entered disabled state [ 410.015795][ T9] device bridge_slave_1 left promiscuous mode [ 410.022216][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.054312][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 410.131990][T12313] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 410.155186][ T9] device bridge_slave_0 left promiscuous mode [ 410.190591][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.388169][ T4775] syz-executor: attempt to access beyond end of device [ 410.388169][ T4775] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 410.453927][ T9] device veth1_macvtap left promiscuous mode [ 410.484617][ T9] device veth0_macvtap left promiscuous mode [ 410.490834][ T9] device veth1_vlan left promiscuous mode [ 410.540757][ T9] device veth0_vlan left promiscuous mode [ 411.154078][ T4635] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 411.380749][ T4635] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 411.406820][ T4635] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.417404][ T4635] usb 5-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 411.427047][ T4635] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.443693][ T4635] usb 5-1: config 0 descriptor?? [ 411.888369][ T4635] apple 0003:05AC:029F.002E: unknown main item tag 0x2 [ 411.898247][ T4635] apple 0003:05AC:029F.002E: hidraw0: USB HID v0.00 Device [HID 05ac:029f] on usb-dummy_hcd.4-1/input0 [ 411.930230][T12354] loop5: detected capacity change from 0 to 32768 [ 411.989051][T12354] ERROR: (device loop5): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 411.989051][T12354] [ 412.107510][ T4635] usb 5-1: USB disconnect, device number 15 [ 412.154374][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 412.230437][T12355] fido_id[12355]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 412.256428][T12357] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3079'. [ 412.267807][ T9] team0 (unregistering): Port device team_slave_1 removed [ 412.454498][ T9] team0 (unregistering): Port device team_slave_0 removed [ 412.590039][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.683057][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.824097][ T4635] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 412.984255][ T4639] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 413.046424][ T4635] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.063567][ T4635] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 413.079754][ T4635] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 413.089228][ T4635] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.109379][ T4635] usb 6-1: config 0 descriptor?? [ 413.121042][ T4635] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 413.127945][ T4635] dvb-usb: bulk message failed: -22 (3/0) [ 413.141829][ T4635] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 413.151317][ T4635] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 413.158639][ T4635] usb 6-1: media controller created [ 413.165569][ T4635] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 413.208957][ T4635] dvb-usb: bulk message failed: -22 (6/0) [ 413.220149][ T4639] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 413.231140][ T4635] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 413.245486][ T4639] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 413.254584][ T4639] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 413.263857][ T4639] usb 5-1: config 1 has no interface number 0 [ 413.271634][ T4635] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input32 [ 413.284398][ T4639] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 413.296776][ T4639] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 413.313188][ T4635] dvb-usb: schedule remote query interval to 150 msecs. [ 413.330310][ T4635] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 413.344748][ T4639] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 413.354381][ T4639] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.366355][ T4635] usb 6-1: USB disconnect, device number 23 [ 413.395092][ T4639] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 413.410549][ T4635] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 413.588773][ T9] bond0 (unregistering): Released all slaves [ 413.743906][T12367] loop0: detected capacity change from 0 to 128 [ 414.070825][T12371] loop5: detected capacity change from 0 to 256 [ 414.146929][T12371] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 414.214413][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 414.558970][T12241] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 414.618517][T12241] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 414.664614][T12241] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 414.732170][T12241] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 415.034244][T12241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.081508][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 415.149414][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 415.184535][T12241] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.213001][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 415.247110][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 415.272375][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.279773][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.331877][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 415.358585][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 415.401094][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 415.412744][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.422237][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.436002][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 415.465743][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 415.482880][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 415.521915][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 415.543370][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 415.568497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 415.596065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 415.617247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 415.627089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 415.661626][T12241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 415.672579][ T4635] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 415.720685][T12241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 415.748350][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 415.778904][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 415.791281][ T4639] snd_usb_pod 5-1:1.1: set_interface failed [ 415.792229][ T4639] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 415.792359][ T4639] snd_usb_pod: probe of 5-1:1.1 failed with error -71 [ 415.803066][ T4639] usb 5-1: USB disconnect, device number 16 [ 415.886338][ T4635] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 415.886370][ T4635] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 415.886390][ T4635] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 415.886411][ T4635] usb 6-1: config 220 has no interface number 2 [ 415.886457][ T4635] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 415.886486][ T4635] usb 6-1: config 220 interface 0 has no altsetting 0 [ 415.886507][ T4635] usb 6-1: config 220 interface 76 has no altsetting 0 [ 415.886527][ T4635] usb 6-1: config 220 interface 1 has no altsetting 0 [ 415.896724][ T4635] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 415.896757][ T4635] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.896780][ T4635] usb 6-1: Product: syz [ 415.896797][ T4635] usb 6-1: Manufacturer: syz [ 415.896814][ T4635] usb 6-1: SerialNumber: syz [ 416.122696][ T4635] usb 6-1: selecting invalid altsetting 0 [ 416.123301][ T4635] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 416.123338][ T4635] usb 6-1: No valid video chain found. [ 416.170739][ T4635] usb 6-1: selecting invalid altsetting 0 [ 416.170769][ T4635] usbtest: probe of 6-1:220.1 failed with error -22 [ 416.180149][ T4635] usb 6-1: USB disconnect, device number 24 [ 416.578988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 416.596114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 416.646100][T12241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.343390][T12448] xt_l2tp: v2 tid > 0xffff: 37482740 [ 417.602977][T12456] loop1: detected capacity change from 0 to 1024 [ 418.076424][ T4512] hfsplus: b-tree write err: -5, ino 4 [ 418.091607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 418.105751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 418.190555][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 418.245024][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 418.295170][T12241] device veth0_vlan entered promiscuous mode [ 418.323069][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 418.347039][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 418.367738][T12241] device veth1_vlan entered promiscuous mode [ 418.472779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 418.497239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 418.507140][T12479] ptrace attach of "./syz-executor exec"[4281] was attempted by ""[12479] [ 418.541930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 418.553741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 418.584806][ T4320] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 418.637245][T12241] device veth0_macvtap entered promiscuous mode [ 418.696132][T12241] device veth1_macvtap entered promiscuous mode [ 418.752313][T12241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.772087][T12241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.782475][T12241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.803156][T12241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.811192][ T4320] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 418.814309][T12241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.847565][ T4320] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 418.881201][ T4320] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.902282][ T4320] usb 2-1: config 0 has no interfaces? [ 418.922530][ T4320] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 418.924110][T12241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.947377][T12241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.959674][T12241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.977098][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.977686][T12241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.002979][ T4320] usb 2-1: config 0 descriptor?? [ 419.009743][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 419.042854][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 419.079951][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 419.091873][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 419.112283][T12241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.128138][T12241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.177669][T12241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.188913][T12241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.188929][T12241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.188946][T12241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.188971][T12241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.188985][T12241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.191912][T12241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.193841][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 419.194778][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 419.213753][T12241] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.215576][T12241] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.215613][T12241] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.215643][T12241] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.277087][ T4330] usb 2-1: USB disconnect, device number 10 [ 419.476755][ T4793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.476846][ T4793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.529839][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 419.619822][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.619913][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.628555][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 420.530800][T12530] loop1: detected capacity change from 0 to 1024 [ 420.753248][T12536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3137'. [ 420.820113][T12538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3137'. [ 420.874455][T12538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3137'. [ 420.906547][T12538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3137'. [ 420.944145][T12538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3137'. [ 421.072723][T12545] loop6: detected capacity change from 0 to 1024 [ 421.088536][T12545] EXT4-fs: inline encryption not supported [ 421.098095][T12545] EXT4-fs: Ignoring removed i_version option [ 421.143441][T12545] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 421.220657][T12545] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 421.360302][T12241] EXT4-fs (loop6): unmounting filesystem. [ 421.562174][T12561] loop4: detected capacity change from 0 to 2048 [ 421.565505][T12560] loop6: detected capacity change from 0 to 1024 [ 421.629578][T12562] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 421.711556][T12561] NILFS error (device loop4): nilfs_dotdot: directory #12 missing '.' [ 421.767814][ T4512] hfsplus: b-tree write err: -5, ino 4 [ 421.783091][T12561] Remounting filesystem read-only [ 422.114133][ T4632] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 422.322235][ T4632] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.343920][ T4632] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.393538][ T4632] usb 6-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 422.428288][ T4632] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.463873][ T4632] usb 6-1: config 0 descriptor?? [ 422.910043][ T4632] lenovo 0003:17EF:60B5.002F: hidraw0: USB HID v0.20 Device [HID 17ef:60b5] on usb-dummy_hcd.5-1/input0 [ 422.989084][T12600] loop4: detected capacity change from 0 to 1024 [ 423.117788][ T4632] usb 6-1: USB disconnect, device number 25 [ 423.411489][T12605] fido_id[12605]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 423.855095][ T4632] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 424.050411][T12628] loop0: detected capacity change from 0 to 2048 [ 424.072059][ T4632] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 424.122980][ T4632] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.132198][T12629] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 424.164988][ T4632] usb 2-1: Product: syz [ 424.169261][ T4632] usb 2-1: Manufacturer: syz [ 424.215120][ T4632] usb 2-1: SerialNumber: syz [ 424.239611][ T4632] hub 2-1:24.0: bad descriptor, ignoring hub [ 424.267910][ T4632] hub: probe of 2-1:24.0 failed with error -5 [ 424.441262][ T4632] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 424.479735][ T4632] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 424.517936][ T4632] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 424.546701][ T4632] usb 2-1: media controller created [ 424.593084][ T4632] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 424.808601][T12647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3177'. [ 424.880069][ T4632] DVB: Unable to find symbol dib7000p_attach() [ 424.892538][ T4632] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 425.208691][ T4632] rc_core: IR keymap rc-dib0700-rc5 not found [ 425.218071][ T4632] Registered IR keymap rc-empty [ 425.233673][ T4632] dvb-usb: could not initialize remote control. [ 425.252816][ T4632] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 425.567354][ T4632] usb 2-1: USB disconnect, device number 11 [ 425.656170][ T4632] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 425.833370][T12672] loop0: detected capacity change from 0 to 64 [ 426.175394][T12678] [U] [ 426.689048][T12687] loop1: detected capacity change from 0 to 128 [ 427.078523][T12673] loop4: detected capacity change from 0 to 40427 [ 427.144877][T12694] tipc: Started in network mode [ 427.149824][T12694] tipc: Node identity , cluster identity 4711 [ 427.226942][T12675] loop5: detected capacity change from 0 to 32768 [ 427.245039][T12673] F2FS-fs (loop4): Found nat_bits in checkpoint [ 427.354501][T12675] JBD2: Ignoring recovery information on journal [ 427.572613][T12673] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 427.596160][T12675] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 427.959126][ T4270] syz-executor: attempt to access beyond end of device [ 427.959126][ T4270] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 427.982509][ T4775] ocfs2: Unmounting device (7,5) on (node local) [ 428.285219][T12723] program syz.0.3200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 429.166129][ T4635] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 429.208050][T12741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3205'. [ 429.227290][T12720] loop5: detected capacity change from 0 to 32768 [ 429.283239][T12720] jfs_strtoUCS: char2uni returned -22. [ 429.334507][T12720] charset = cp950, char = 0xd4 [ 429.377309][ T4635] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.443017][ T4635] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.506535][ T4635] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 429.570924][ T4635] usb 2-1: config 0 interface 0 has no altsetting 0 [ 429.611564][ T4635] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 429.655220][ T4635] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.703355][ T4635] usb 2-1: config 0 descriptor?? [ 430.147173][ T4635] magicmouse 0003:05AC:0265.0030: collection stack underflow [ 430.168342][ T4635] magicmouse 0003:05AC:0265.0030: item 0 4 0 12 parsing failed [ 430.201621][ T4635] magicmouse 0003:05AC:0265.0030: magicmouse hid parse failed [ 430.227440][ T4635] magicmouse: probe of 0003:05AC:0265.0030 failed with error -22 [ 430.289676][T12762] can0: slcan on ptm0. [ 430.371949][ T4639] usb 2-1: USB disconnect, device number 12 [ 430.459663][T12761] can0 (unregistered): slcan off ptm0. [ 430.694259][ T4635] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 430.889448][ T4635] usb 6-1: Using ep0 maxpacket: 8 [ 430.896675][ T4635] usb 6-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 430.929546][ T4635] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.984495][ T4635] usb 6-1: config 0 descriptor?? [ 431.414018][ T4635] pantherlord 0003:0E8F:0003.0031: unknown main item tag 0x0 [ 431.452174][ T4635] pantherlord 0003:0E8F:0003.0031: unknown main item tag 0x0 [ 431.480179][ T4635] pantherlord 0003:0E8F:0003.0031: unknown main item tag 0x0 [ 431.504165][ T4635] pantherlord 0003:0E8F:0003.0031: unknown main item tag 0x0 [ 431.542436][ T4635] pantherlord 0003:0E8F:0003.0031: unknown main item tag 0x0 [ 431.562742][ T4635] pantherlord 0003:0E8F:0003.0031: unknown main item tag 0x0 [ 431.587368][ T4635] pantherlord 0003:0E8F:0003.0031: unknown main item tag 0x0 [ 431.630535][ T4635] pantherlord 0003:0E8F:0003.0031: hidraw0: USB HID v0.20 Device [HID 0e8f:0003] on usb-dummy_hcd.5-1/input0 [ 431.683404][ T4635] pantherlord 0003:0E8F:0003.0031: no output reports found [ 431.712750][T12770] loop0: detected capacity change from 0 to 32768 [ 431.737426][ T4635] usb 6-1: USB disconnect, device number 26 [ 432.003890][T12789] fido_id[12789]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 432.634071][ T4639] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 432.776140][T12817] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3232'. [ 432.834180][ T4639] usb 6-1: Using ep0 maxpacket: 32 [ 432.842370][ T4639] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.874757][ T4639] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c0b, bcdDevice= 0.00 [ 432.904687][ T4639] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.942385][ T4639] usb 6-1: config 0 descriptor?? [ 433.070361][T12823] loop1: detected capacity change from 0 to 512 [ 433.182330][T12823] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 433.193733][T12826] device ip6gretap0 entered promiscuous mode [ 433.228599][T12823] ext4 filesystem being mounted at /692/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.250913][T12826] device macsec2 entered promiscuous mode [ 433.321416][T12826] device ip6gretap0 left promiscuous mode [ 433.396962][ T4639] corsair-psu 0003:1B1C:1C0B.0032: unbalanced delimiter at end of report description [ 433.413404][T12823] EXT4-fs: Cannot specify journal on remount [ 433.440484][ T4639] corsair-psu: probe of 0003:1B1C:1C0B.0032 failed with error -22 [ 433.545691][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 433.639708][ T129] usb 6-1: USB disconnect, device number 27 [ 434.369319][T12856] netlink: 'syz.0.3251': attribute type 1 has an invalid length. [ 434.384829][T12856] nbd: error processing sock list [ 434.883643][T12872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3258'. [ 434.900136][T12872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3258'. [ 436.321181][T12920] loop5: detected capacity change from 0 to 256 [ 436.750592][T12930] loop1: detected capacity change from 0 to 1024 [ 436.832449][T12930] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 436.886306][T12930] EXT4-fs error (device loop1): ext4_get_journal_inode:5756: inode #32: comm syz.1.3282: iget: special inode unallocated [ 436.976885][T12930] EXT4-fs (loop1): no journal found [ 436.982172][T12930] EXT4-fs (loop1): can't get journal size [ 437.046453][T12930] EXT4-fs (loop1): filesystem is read-only [ 437.099139][T12930] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 437.239480][T12947] netlink: 'syz.4.3287': attribute type 25 has an invalid length. [ 437.269165][T12947] netlink: 'syz.4.3287': attribute type 25 has an invalid length. [ 437.365489][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 437.528967][T12952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3290'. [ 437.569044][T12954] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3289'. [ 438.248720][T12967] loop4: detected capacity change from 0 to 1024 [ 438.807504][T12955] loop1: detected capacity change from 0 to 40427 [ 438.833168][T12955] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 438.916032][T12955] F2FS-fs (loop1): invalid crc value [ 438.972972][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 438.991175][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 439.002084][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 439.013010][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 439.021738][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 439.029500][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 439.067184][T12955] F2FS-fs (loop1): Found nat_bits in checkpoint [ 439.207798][ T4512] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.270328][T12955] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 439.389136][ T4512] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.503410][T12992] loop5: detected capacity change from 0 to 4096 [ 439.608740][ T4512] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.636481][T12992] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 439.722650][T12992] ntfs3: loop5: Failed to load $Extend. [ 439.813069][T13000] overlayfs: failed to resolve './file0': -2 [ 439.863766][ T4512] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.057432][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.063858][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.087084][T12980] chnl_net:caif_netlink_parms(): no params data found [ 440.537628][T12980] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.588295][T12980] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.647688][T12980] device bridge_slave_0 entered promiscuous mode [ 440.907794][T12980] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.921020][T12980] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.964448][T12980] device bridge_slave_1 entered promiscuous mode [ 441.094278][ T4280] Bluetooth: hci1: command 0x0409 tx timeout [ 441.144777][T12980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.232115][T12980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.522386][T12980] team0: Port device team_slave_0 added [ 441.593462][T12980] team0: Port device team_slave_1 added [ 441.709105][T13058] loop1: detected capacity change from 0 to 1024 [ 441.753436][T12980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.775302][T12980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.865963][T12980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.928874][ T26] audit: type=1326 audit(1770382062.813:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13061 comm="syz.0.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f419aeb9 code=0x7ffc0000 [ 441.990081][T12980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.999545][T12980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.026751][ T26] audit: type=1326 audit(1770382062.833:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13061 comm="syz.0.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f419aeb9 code=0x7ffc0000 [ 442.054516][T12980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.119629][ T26] audit: type=1326 audit(1770382062.843:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13061 comm="syz.0.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f61f419aeb9 code=0x7ffc0000 [ 442.254435][ T26] audit: type=1326 audit(1770382062.843:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13061 comm="syz.0.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f419aeb9 code=0x7ffc0000 [ 442.319909][ T26] audit: type=1326 audit(1770382062.843:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13061 comm="syz.0.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f419aeb9 code=0x7ffc0000 [ 442.395896][T12980] device hsr_slave_0 entered promiscuous mode [ 442.412963][T13068] loop1: detected capacity change from 0 to 1024 [ 442.439453][T13070] loop4: detected capacity change from 0 to 64 [ 442.453206][T12980] device hsr_slave_1 entered promiscuous mode [ 442.463587][T13068] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 442.470943][T12980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 442.479440][T12980] Cannot create hsr debugfs directory [ 442.554886][T13068] EXT4-fs (loop1): mount failed [ 443.044060][ T4635] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 443.114668][ T4330] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 443.174493][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 443.256388][ T4635] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.274167][ T4635] usb 6-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 443.293727][ T4635] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.309851][ T4330] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.328188][ T4635] usb 6-1: config 0 descriptor?? [ 443.343661][T13068] loop1: detected capacity change from 0 to 32768 [ 443.350934][ T4330] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 443.375734][ T4330] usb 5-1: config 0 interface 0 has no altsetting 0 [ 443.396059][T13068] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.3331 (13068) [ 443.409025][ T4330] usb 5-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 443.424454][ T4330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.446273][T13068] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 443.459017][ T4330] usb 5-1: config 0 descriptor?? [ 443.481674][T13068] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 443.510776][T13068] BTRFS info (device loop1): using free space tree [ 443.700054][ T4512] device hsr_slave_0 left promiscuous mode [ 443.724645][ T4512] device hsr_slave_1 left promiscuous mode [ 443.743354][T13068] BTRFS info (device loop1): enabling ssd optimizations [ 443.804768][ T4512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.812314][ T4512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.836083][ T4512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.843643][ T4512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.865682][ T4512] device bridge_slave_1 left promiscuous mode [ 443.872056][ T4512] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.891047][ T4330] logitech 0003:046D:C295.0034: unknown main item tag 0x0 [ 443.910317][ T4330] logitech 0003:046D:C295.0034: unknown main item tag 0x0 [ 443.929662][ T4330] logitech 0003:046D:C295.0034: hidraw0: USB HID v0.00 Device [HID 046d:c295] on usb-dummy_hcd.4-1/input0 [ 443.947063][ T4512] device bridge_slave_0 left promiscuous mode [ 443.953792][ T4635] razer 0003:1532:010E.0033: failed to enable macro keys: -71 [ 443.959115][ T4512] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.980305][ T4635] razer 0003:1532:010E.0033: hidraw1: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.5-1/input0 [ 444.004092][ T4330] logitech 0003:046D:C295.0034: no inputs found [ 444.034523][ T4635] usb 6-1: USB disconnect, device number 28 [ 444.070167][ T4282] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 444.102088][ T4330] usb 5-1: USB disconnect, device number 17 [ 444.619861][ T4512] device veth1_macvtap left promiscuous mode [ 444.639340][ T4512] device veth0_macvtap left promiscuous mode [ 444.669546][ T4512] device veth1_vlan left promiscuous mode [ 444.697209][ T4512] device veth0_vlan left promiscuous mode [ 444.720226][T13112] loop5: detected capacity change from 0 to 2048 [ 444.741134][T13112] EXT4-fs: Ignoring removed orlov option [ 444.794756][T13112] EXT4-fs: Ignoring removed oldalloc option [ 444.870244][T13112] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 444.942680][T13112] EXT4-fs error (device loop5): ext4_ext_precache:627: inode #2: comm syz.5.3338: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 445.111370][ T4775] EXT4-fs (loop5): unmounting filesystem. [ 445.260328][T13128] CUSE: unknown device info "" [ 445.268442][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 445.284328][T13128] CUSE: unknown device info "" [ 445.289723][T13128] CUSE: DEVNAME unspecified [ 445.590380][T13126] loop1: detected capacity change from 0 to 32768 [ 445.719250][T13126] XFS (loop1): Mounting V5 Filesystem [ 445.824246][T13126] XFS (loop1): Starting recovery (logdev: internal) [ 445.876033][T13126] XFS (loop1): Ending recovery (logdev: internal) [ 446.030593][ T4633] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 446.059584][ T4282] XFS (loop1): Unmounting Filesystem [ 446.264923][ T4633] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 446.278739][ T4633] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.308833][ T4633] usb 6-1: config 0 descriptor?? [ 446.317986][ T4633] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 446.608589][ T4512] team0 (unregistering): Port device team_slave_1 removed [ 446.724596][ T4633] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 446.740640][ T4512] team0 (unregistering): Port device team_slave_0 removed [ 446.746027][ T4633] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 446.772653][ T4633] usb 6-1: media controller created [ 446.817177][ T4633] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 446.851411][ T4512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.871724][ T4633] gp8psk_fe: Frontend attached [ 446.876843][ T4633] usb 6-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 446.902498][T13153] Bluetooth: MGMT ver 1.22 [ 446.949817][ T4633] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 446.984558][ T4512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.031174][ T4633] gp8psk: usb in 138 operation failed. [ 447.036843][ T4633] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 447.064028][ T4633] gp8psk: found Genpix USB device pID = 203 (hex) [ 447.076168][ T4633] usb 6-1: USB disconnect, device number 29 [ 447.087284][T13155] loop1: detected capacity change from 0 to 2048 [ 447.173754][T13155] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 447.215915][T13155] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.3351: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 447.261096][T13155] EXT4-fs (loop1): Remounting filesystem read-only [ 447.264828][ T4633] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 447.308034][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 447.346769][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 447.915398][T13159] loop1: detected capacity change from 0 to 65536 [ 448.012706][ T4512] bond0 (unregistering): Released all slaves [ 448.037752][T13159] XFS (loop1): Mounting V5 Filesystem [ 448.097238][T13159] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x2d5/0x1110, inode 0x21 dinode [ 448.108137][T13159] XFS (loop1): Unmount and run xfs_repair [ 448.113906][T13159] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 448.121420][T13159] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 448.130457][T13159] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 448.140101][T13159] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 69 c5 80 b8 ..e.....4.Xhi... [ 448.149676][T13159] 00000030: 34 f7 58 68 69 c5 80 b8 00 00 00 00 00 00 00 00 4.Xhi........... [ 448.159807][T13159] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 448.169330][T13159] 00000050: 00 00 00 02 00 00 00 00 00 00 00 04 00 00 00 00 ................ [ 448.178854][T13159] 00000060: ff ff ff ff f6 31 a3 b2 00 00 00 00 00 00 00 02 .....1.......... [ 448.188601][T13159] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 448.198137][T13159] XFS (loop1): failed to read RT inodes [ 448.848833][T13180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3357'. [ 448.884676][T12980] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 448.934898][T12980] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 449.016265][T12980] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 449.121626][T12980] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 449.682087][T13195] fido_id[13195]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 449.735283][T12980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.819760][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 449.828737][T13199] fido_id[13199]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 449.881500][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 449.923349][T12980] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.007464][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 450.028996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 450.065805][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.072977][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.196465][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 450.238307][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 450.267026][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 450.324203][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.331434][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.396360][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 450.410140][ T26] audit: type=1326 audit(1770382071.293:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13217 comm="syz.4.3368" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23f0f9aeb9 code=0x0 [ 450.413451][T13178] loop5: detected capacity change from 0 to 40427 [ 450.450480][T13178] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3ffff [ 450.473718][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 450.485156][T13178] F2FS-fs (loop5): invalid crc value [ 450.526941][T13178] F2FS-fs (loop5): Found nat_bits in checkpoint [ 450.549455][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 450.626295][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 450.657080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 450.707014][T13178] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 450.709975][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 450.760131][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 450.799247][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 450.828347][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 450.881902][T12980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 450.908676][T13228] loop1: detected capacity change from 0 to 2048 [ 450.920621][T12980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 450.961277][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 450.975532][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 450.993348][T13228] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 451.021607][T13228] ext4 filesystem being mounted at /730/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.248588][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 451.489145][T13242] loop1: detected capacity change from 0 to 256 [ 451.554754][T13242] exfat: Deprecated parameter 'namecase' [ 451.600400][T13242] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d) [ 452.053637][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 452.106825][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 452.143839][T12980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.486953][T13268] loop1: detected capacity change from 0 to 4096 [ 452.530633][T13268] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 452.615872][T13268] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 453.636472][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 453.666322][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 453.731473][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 453.745823][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 453.791460][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 453.828543][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 453.850038][T12980] device veth0_vlan entered promiscuous mode [ 453.879802][T12980] device veth1_vlan entered promiscuous mode [ 453.971478][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 454.007944][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 454.047094][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 454.079956][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 454.105361][T12980] device veth0_macvtap entered promiscuous mode [ 454.132292][T12980] device veth1_macvtap entered promiscuous mode [ 454.190589][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.222265][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.256939][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.298312][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.329717][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.350988][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.379799][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.403870][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.432595][T13300] loop4: detected capacity change from 0 to 32768 [ 454.443168][T12980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.482299][T13300] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.3392 (13300) [ 454.499220][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 454.520182][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 454.561063][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 454.575519][T13300] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 454.587621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 454.606792][T13300] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 454.633338][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.636199][T13300] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 454.674665][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.725518][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.736807][T13300] BTRFS info (device loop4): use zstd compression, level 3 [ 454.755215][T13300] BTRFS info (device loop4): using free space tree [ 454.777555][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.828581][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.864538][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.927727][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.980100][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.026396][T12980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.044891][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 455.055580][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 455.063876][T13300] BTRFS info (device loop4): enabling ssd optimizations [ 455.140282][T13318] loop1: detected capacity change from 0 to 32768 [ 455.183769][T12980] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.239328][T12980] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.265498][T13318] XFS (loop1): Mounting V5 Filesystem [ 455.304192][T12980] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.312975][T12980] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.397997][ T4270] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 455.560759][T13318] XFS (loop1): Ending clean mount [ 455.604715][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.613303][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.717925][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 455.834318][ T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.867156][ T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.919074][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 456.478576][ T4282] XFS (loop1): Unmounting Filesystem [ 457.684268][T13411] kernel read not supported for file / -9mZr7âW)s!Qfsl{Tr)rO2:"T+͟v|ղ (pid: 13411 comm: syz.4.3420) [ 457.765267][ T26] audit: type=1800 audit(1770382078.653:191): pid=13411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3420" name=202DD60E39F76D5A06720386019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B206 dev="mqueue" ino=60996 res=0 errno=0 [ 457.870418][T13417] loop1: detected capacity change from 0 to 512 [ 457.887447][T13382] loop5: detected capacity change from 0 to 32768 [ 457.987788][T13382] JBD2: Ignoring recovery information on journal [ 457.996135][T13417] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 458.005526][T13417] ext4 filesystem being mounted at /738/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 458.026268][ T26] audit: type=1804 audit(1770382078.693:192): pid=13411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3420" name=202DD60E39F76D5A06720386019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B206 dev="mqueue" ino=60996 res=1 errno=0 [ 458.091164][T13382] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 458.129217][T13417] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #2: comm syz.1.3410: corrupted inode contents [ 458.224515][T13417] EXT4-fs error (device loop1): ext4_dirty_inode:6137: inode #2: comm syz.1.3410: mark_inode_dirty error [ 458.311034][T13417] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #2: comm syz.1.3410: corrupted inode contents [ 458.327068][T13428] sp0: Synchronizing with TNC [ 458.439350][ T4775] ocfs2: Unmounting device (7,5) on (node local) [ 458.469648][T13427] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #2: comm syz.1.3410: corrupted inode contents [ 458.569802][T13427] EXT4-fs error (device loop1): ext4_dirty_inode:6137: inode #2: comm syz.1.3410: mark_inode_dirty error [ 458.610300][T13427] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #2: comm syz.1.3410: corrupted inode contents [ 458.724839][T13427] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.3410: mark_inode_dirty error [ 458.776498][T13427] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #2: comm syz.1.3410: corrupted inode contents [ 458.832222][T13427] EXT4-fs error (device loop1): ext4_dirty_inode:6137: inode #2: comm syz.1.3410: mark_inode_dirty error [ 459.009674][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 459.080673][T13446] loop5: detected capacity change from 0 to 2048 [ 459.274076][T13457] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 459.558485][T13462] loop4: detected capacity change from 0 to 1024 [ 459.775237][T13470] loop7: detected capacity change from 0 to 2048 [ 459.918767][ T28] hfsplus: b-tree write err: -5, ino 4 [ 459.966479][T13470] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 460.229273][T13485] tipc: Enabling of bearer rejected, failed to enable media [ 460.236149][T12980] EXT4-fs (loop7): unmounting filesystem. [ 461.079250][T13509] loop7: detected capacity change from 0 to 4096 [ 461.104598][ T4320] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 461.129950][T13509] ntfs: (device loop7): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 461.192270][T13509] ntfs: volume version 3.1. [ 461.210497][T13509] ntfs: (device loop7): ntfs_lookup_inode_by_name(): Size of index buffer (VCN 0x0) of directory inode 0x5 exceeds maximum size. [ 461.265410][T13509] ntfs: (device loop7): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 461.305787][ T4320] usb 5-1: Using ep0 maxpacket: 32 [ 461.321380][T13509] ntfs: (device loop7): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 461.337148][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.364671][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.426594][ T4320] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 461.441133][T13509] ntfs: (device loop7): ntfs_readdir(): Size of index buffer (VCN 0x0) of directory inode 0x5 exceeds maximum size. [ 461.495122][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.545084][ T4320] usb 5-1: config 0 descriptor?? [ 461.963613][ T4320] zydacron 0003:13EC:0006.0035: unknown main item tag 0x0 [ 461.980331][ T4320] zydacron 0003:13EC:0006.0035: unknown main item tag 0x0 [ 462.022625][ T4320] zydacron 0003:13EC:0006.0035: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.4-1/input0 [ 462.171208][ T4320] usb 5-1: USB disconnect, device number 18 [ 462.237483][T13531] loop5: detected capacity change from 0 to 8192 [ 462.464780][T13534] fido_id[13534]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 462.871778][T13557] loop1: detected capacity change from 0 to 2048 [ 462.908151][T13557] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 463.073132][ T4395] udevd[4395]: incorrect nilfs2 checksum on /dev/loop1 [ 463.114879][T13562] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 463.176870][T13567] loop7: detected capacity change from 0 to 512 [ 463.194971][T13567] EXT4-fs: Ignoring removed bh option [ 463.231682][T13565] device macsec0 entered promiscuous mode [ 463.250438][T13567] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 463.292088][T13567] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 463.382679][T13571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3474'. [ 463.490833][T12980] EXT4-fs (loop7): unmounting filesystem. [ 464.226994][T13559] loop4: detected capacity change from 0 to 32768 [ 464.299914][T13559] JBD2: Ignoring recovery information on journal [ 464.466395][T13559] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 464.754526][ T4633] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 464.816355][ T4270] ocfs2: Unmounting device (7,4) on (node local) [ 464.954096][ T4633] usb 2-1: Using ep0 maxpacket: 32 [ 464.961135][ T4633] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.012985][ T4633] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 465.066489][ T4633] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.143987][ T4633] usb 2-1: config 0 descriptor?? [ 465.390408][T13634] netlink: 822 bytes leftover after parsing attributes in process `syz.5.3496'. [ 465.428409][T13636] loop4: detected capacity change from 0 to 256 [ 465.556619][T13636] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 465.582688][ T4633] elo 0003:04E7:0009.0036: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.1-1/input0 [ 465.787442][ T9457] usb 2-1: USB disconnect, device number 13 [ 466.073063][T13644] fido_id[13644]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 466.209484][T13653] loop5: detected capacity change from 0 to 1024 [ 466.358043][T13653] hfsplus: walked past end of dir [ 466.849825][T13678] loop1: detected capacity change from 0 to 256 [ 466.943467][T13678] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 467.048956][T13643] loop7: detected capacity change from 0 to 32768 [ 467.158581][T13643] MetaData crosses page boundary!! [ 467.187365][T13643] lblock = 6161616161, size = 370544640 [ 467.212528][T13643] CPU: 1 PID: 13643 Comm: syz.7.3500 Not tainted syzkaller #0 [ 467.220132][T13643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 467.230262][T13643] Call Trace: [ 467.233605][T13643] [ 467.236639][T13643] dump_stack_lvl+0x188/0x24e [ 467.241476][T13643] ? __wake_up_bit+0x210/0x210 [ 467.246296][T13643] ? show_regs_print_info+0x12/0x12 [ 467.251560][T13643] ? load_image+0x400/0x400 [ 467.256135][T13643] __get_metapage+0xaa8/0xfa0 [ 467.260892][T13643] dtSearch+0x5d5/0x2050 [ 467.265231][T13643] jfs_symlink+0x851/0xfb0 [ 467.269728][T13643] ? jfs_unlink+0xa00/0xa00 [ 467.274322][T13643] ? make_kgid+0x660/0x660 [ 467.278795][T13643] ? apparmor_path_symlink+0x1ac/0x230 [ 467.284324][T13643] ? lookup_one_qstr_excl+0x11c/0x240 [ 467.289763][T13643] ? generic_permission+0x230/0x510 [ 467.295033][T13643] ? inode_permission+0xef/0x480 [ 467.300033][T13643] ? bpf_lsm_inode_symlink+0x5/0x10 [ 467.305291][T13643] ? security_inode_symlink+0xb2/0x100 [ 467.310821][T13643] vfs_symlink+0x247/0x3d0 [ 467.315303][T13643] do_symlinkat+0x1b6/0x400 [ 467.319865][T13643] ? vfs_symlink+0x3d0/0x3d0 [ 467.324521][T13643] ? getname_flags+0x206/0x500 [ 467.329451][T13643] __x64_sys_symlink+0x7a/0x90 [ 467.334271][T13643] do_syscall_64+0x4c/0xa0 [ 467.338761][T13643] ? clear_bhb_loop+0x60/0xb0 [ 467.343492][T13643] ? clear_bhb_loop+0x60/0xb0 [ 467.348223][T13643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 467.354178][T13643] RIP: 0033:0x7fe2c879aeb9 [ 467.358657][T13643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.378329][T13643] RSP: 002b:00007fe2c970e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 467.386862][T13643] RAX: ffffffffffffffda RBX: 00007fe2c8a15fa0 RCX: 00007fe2c879aeb9 [ 467.394893][T13643] RDX: 0000000000000000 RSI: 0000200000000cc0 RDI: 000020000000a900 [ 467.402932][T13643] RBP: 00007fe2c8808c1f R08: 0000000000000000 R09: 0000000000000000 [ 467.410963][T13643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.418993][T13643] R13: 00007fe2c8a16038 R14: 00007fe2c8a15fa0 R15: 00007ffcc4ea2248 [ 467.427041][T13643] [ 467.886452][T13694] loop1: detected capacity change from 0 to 16 [ 467.964793][T13694] erofs: (device loop1): mounted with root inode @ nid 36. [ 468.036003][T13694] erofs: (device loop1): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 468.080311][T13643] bread failed! [ 468.084066][T13694] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 468.093801][T13674] loop5: detected capacity change from 0 to 32768 [ 468.123022][T13694] erofs: (device loop1): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 468.210420][T13694] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 468.315625][T13694] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 468.354796][T13694] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 469.088395][T13717] loop5: detected capacity change from 0 to 512 [ 469.135000][T13717] EXT4-fs: Ignoring removed mblk_io_submit option [ 469.141528][T13717] EXT4-fs: Ignoring removed bh option [ 469.195771][T13717] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 469.276290][T13717] EXT4-fs error (device loop5): ext4_iget_extra_inode:4756: inode #15: comm syz.5.3522: corrupted in-inode xattr [ 469.297612][T13717] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.3522: couldn't read orphan inode 15 (err -117) [ 469.310755][T13717] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 469.384141][ T4330] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 469.411351][ T4775] EXT4-fs (loop5): unmounting filesystem. [ 469.624874][ T4330] usb 2-1: Using ep0 maxpacket: 16 [ 469.632035][ T4330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.681290][ T4330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.722751][ T4330] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 469.795975][ T4330] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 469.822950][ T4330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.856304][T13741] tipc: Started in network mode [ 469.871548][T13741] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 469.885532][ T4330] usb 2-1: config 0 descriptor?? [ 469.891873][T13741] tipc: Enabled bearer , priority 0 [ 470.182055][T13750] netlink: 'syz.7.3537': attribute type 10 has an invalid length. [ 470.266012][T13750] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 470.358335][ T4330] microsoft 0003:045E:07DA.0037: ignoring exceeding usage max [ 470.379391][ T4330] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 470.403508][ T4330] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 470.426887][ T4330] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 470.453493][ T4330] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 470.507941][ T4330] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 470.565705][ T4330] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 470.589825][ T4330] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 470.609011][ T4330] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 470.634595][ T4330] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 470.643618][T13766] loop7: detected capacity change from 0 to 128 [ 470.657665][ T4330] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 470.708381][T13766] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 470.711759][ T4330] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 470.736988][T13766] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 470.857947][ T4330] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 470.895637][ T4330] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 470.968389][ T4330] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0037/input/input34 [ 471.025561][ T4641] tipc: Node number set to 11578026 [ 471.048949][T12980] EXT4-fs (loop7): unmounting filesystem. [ 471.109933][ T4330] microsoft 0003:045E:07DA.0037: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 471.231491][ T4330] usb 2-1: USB disconnect, device number 14 [ 471.594945][T13780] fido_id[13780]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 472.430808][T13777] loop5: detected capacity change from 0 to 40427 [ 472.474595][T13777] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 472.488753][T13777] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 472.549817][T13777] F2FS-fs (loop5): build fault injection attr: rate: 17008, type: 0x3ffff [ 472.592916][T13777] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x1f8 [ 472.654464][T13777] F2FS-fs (loop5): invalid crc value [ 472.701242][T13777] F2FS-fs (loop5): Found nat_bits in checkpoint [ 472.874271][T13777] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 472.904268][T13777] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 473.279959][T13806] loop7: detected capacity change from 0 to 32768 [ 473.356206][ T4775] syz-executor: attempt to access beyond end of device [ 473.356206][ T4775] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 473.420039][T13806] JBD2: Ignoring recovery information on journal [ 473.638767][T13806] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 473.863436][T12980] ocfs2: Unmounting device (7,7) on (node local) [ 474.013315][T13829] loop4: detected capacity change from 0 to 32768 [ 474.080304][T13860] loop1: detected capacity change from 0 to 8 [ 474.264118][T13860] SQUASHFS error: Unable to read directory block [1d0:62] [ 474.755513][T13873] netlink: 'syz.5.3568': attribute type 8 has an invalid length. [ 475.848876][T13870] loop1: detected capacity change from 0 to 32768 [ 475.967529][T13870] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 475.986966][T13911] netlink: 'syz.5.3593': attribute type 1 has an invalid length. [ 476.059251][ T4282] ocfs2: Unmounting device (7,1) on (node local) [ 477.027921][T13948] loop5: detected capacity change from 0 to 736 [ 477.194604][ T4330] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 477.386612][ T4330] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 477.425217][ T4330] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 477.473685][ T4330] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 477.502134][ T4330] usb 2-1: config 220 has no interface number 2 [ 477.531575][ T4330] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 477.590664][ T4330] usb 2-1: config 220 interface 0 has no altsetting 0 [ 477.609453][ T4330] usb 2-1: config 220 interface 76 has no altsetting 0 [ 477.652337][ T4330] usb 2-1: config 220 interface 1 has no altsetting 0 [ 477.712502][ T4330] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 477.744633][ T4330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.778599][ T4330] usb 2-1: Product: syz [ 477.782897][ T4330] usb 2-1: Manufacturer: syz [ 477.834917][ T4330] usb 2-1: SerialNumber: syz [ 477.892110][T13965] loop5: detected capacity change from 0 to 512 [ 477.975948][T13965] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 478.036956][T13965] ext4 filesystem being mounted at /708/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.077065][ T4330] usb 2-1: selecting invalid altsetting 0 [ 478.083463][ T4330] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 478.117493][ T4330] usb 2-1: No valid video chain found. [ 478.178163][ T4330] usb 2-1: selecting invalid altsetting 0 [ 478.204533][ T4330] usbtest: probe of 2-1:220.1 failed with error -22 [ 478.230879][ T4330] usb 2-1: USB disconnect, device number 15 [ 478.436686][ T4775] EXT4-fs (loop5): unmounting filesystem. [ 478.865914][T13990] loop5: detected capacity change from 0 to 24 [ 479.292180][T14002] loop5: detected capacity change from 0 to 256 [ 479.420073][T13977] loop7: detected capacity change from 0 to 32768 [ 479.538418][ T26] audit: type=1800 audit(1770382100.423:193): pid=13977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3619" name="file1" dev="loop7" ino=4 res=0 errno=0 [ 479.549828][T14009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3631'. [ 479.644945][T14009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3631'. [ 479.764231][T14009] netlink: 'syz.0.3631': attribute type 6 has an invalid length. [ 480.394707][ T4343] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 480.558749][T14041] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 480.577334][T14041] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 480.610991][ T4343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.641486][ T4343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.670199][ T4343] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 480.700146][ T4343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.748016][ T4343] usb 2-1: config 0 descriptor?? [ 480.786421][T14007] loop4: detected capacity change from 0 to 32768 [ 481.178623][ T4343] hid (null): unknown global tag 0xd [ 481.197758][ T4343] razer 0003:1532:010E.0038: unknown global tag 0xd [ 481.212688][T14054] Bluetooth: MGMT ver 1.22 [ 481.225811][ T4343] razer 0003:1532:010E.0038: item 0 0 1 13 parsing failed [ 481.256392][ T4343] razer: probe of 0003:1532:010E.0038 failed with error -22 [ 481.382181][ T4641] usb 2-1: USB disconnect, device number 16 [ 481.488208][T14063] loop5: detected capacity change from 0 to 256 [ 481.552132][T14063] FAT-fs (loop5): Directory bread(block 64) failed [ 481.569975][T14063] FAT-fs (loop5): Directory bread(block 65) failed [ 481.599010][T14063] FAT-fs (loop5): Directory bread(block 66) failed [ 481.629015][T14063] FAT-fs (loop5): Directory bread(block 67) failed [ 481.672021][T14063] FAT-fs (loop5): Directory bread(block 68) failed [ 481.689959][T14063] FAT-fs (loop5): Directory bread(block 69) failed [ 481.707906][T14063] FAT-fs (loop5): Directory bread(block 70) failed [ 481.721635][T14063] FAT-fs (loop5): Directory bread(block 71) failed [ 481.740717][T14063] FAT-fs (loop5): Directory bread(block 72) failed [ 481.749168][T14063] FAT-fs (loop5): Directory bread(block 73) failed [ 482.567553][T14096] loop4: detected capacity change from 0 to 512 [ 482.668388][T14096] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 482.725792][T14096] ext4 filesystem being mounted at /761/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.019417][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 483.349087][T14118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3669'. [ 483.806123][T14135] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3675'. [ 483.948194][T14137] loop4: detected capacity change from 0 to 256 [ 483.954644][T14137] exfat: Deprecated parameter 'utf8' [ 483.954668][T14137] exfat: Deprecated parameter 'utf8' [ 483.954759][T14137] exfat: Deprecated parameter 'utf8' [ 484.015154][T14137] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 484.584689][ T4343] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 484.781305][ T4343] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.814993][T14166] loop7: detected capacity change from 0 to 512 [ 484.840419][ T4343] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid maxpacket 32, setting to 8 [ 484.904767][ T4343] usb 5-1: config 0 interface 0 has no altsetting 0 [ 484.911551][ T4343] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 484.977641][ T4343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.049455][ T4343] usb 5-1: config 0 descriptor?? [ 485.077168][T14148] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 485.213340][T14174] loop1: detected capacity change from 0 to 1024 [ 485.333013][T14182] loop5: detected capacity change from 0 to 256 [ 485.390617][T14182] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 485.485540][T14182] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 485.502876][ T4353] hfsplus: b-tree write err: -5, ino 4 [ 485.530876][ T4343] prodikeys 0003:041E:2801.0039: hidraw0: USB HID v0.02 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input0 [ 485.723842][ T4343] usb 5-1: USB disconnect, device number 19 [ 485.959513][T14191] fido_id[14191]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 486.072579][T14199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3699'. [ 486.333733][T14203] sp0: Synchronizing with TNC [ 486.365024][T14203] sp0: Found TNC [ 487.045462][T14225] loop1: detected capacity change from 0 to 512 [ 487.162283][T14225] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 487.426338][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 487.571069][T14240] loop7: detected capacity change from 0 to 2048 [ 487.635104][T14240] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 488.035331][T14251] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3719'. [ 488.108689][T14254] loop7: detected capacity change from 0 to 256 [ 488.171168][T14254] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 489.401149][T14258] loop4: detected capacity change from 0 to 32768 [ 489.488865][T14285] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3733'. [ 489.556446][T14287] loop7: detected capacity change from 0 to 2048 [ 489.600476][T14287] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 489.672013][T14269] loop1: detected capacity change from 0 to 32768 [ 489.793796][T14269] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 489.899762][T14269] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 489.960588][T14258] blkno = 0, nblocks = 40 [ 489.976375][T14258] ERROR: (device loop4): dbFree: block to be freed is outside the map [ 489.976375][T14258] [ 490.160553][ T4282] ocfs2: Unmounting device (7,1) on (node local) [ 490.205442][ T4270] BUG: Bad page state in process syz-executor pfn:72a6d [ 490.212576][ T4270] page:ffffea0001ca9b40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x72a6d [ 490.254265][ T4270] flags: 0xfff18000002046(referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 490.289235][ T4270] raw: 00fff18000002046 ffffea0001cbaac8 ffffc90003ec7960 0000000000000000 [ 490.320472][ T4270] raw: 0000000000000004 ffff888054bba5d0 00000000ffffffff 0000000000000000 [ 490.358992][ T4270] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 490.374558][ T4270] page_owner tracks the page as allocated [ 490.402868][ T4270] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 14258, tgid 14255 (syz.4.3722), ts 489529579980, free_ts 489397851618 [ 490.447588][ T4270] post_alloc_hook+0x173/0x1a0 [ 490.452611][ T4270] get_page_from_freelist+0x1a1e/0x1ab0 [ 490.479271][ T4270] __alloc_pages+0x1ec/0x4f0 [ 490.484488][ T4270] folio_alloc+0x1c/0x60 [ 490.488897][ T4270] filemap_alloc_folio+0xdb/0x480 [ 490.494471][ T4270] do_read_cache_folio+0x1bb/0x760 [ 490.499771][ T4270] do_read_cache_page+0x32/0x220 [ 490.506261][ T4270] __get_metapage+0x316/0xfa0 [ 490.516628][ T4270] dbAllocCtl+0xd4/0x9b0 [ 490.525506][ T4270] dbAllocAG+0x1e7/0xfe0 [ 490.534244][ T4270] dbDiscardAG+0x2c5/0x8e0 [ 490.544149][ T4270] jfs_ioc_trim+0x42b/0x660 [ 490.556124][ T4270] jfs_ioctl+0x28f/0x3b0 [ 490.565004][ T4270] __se_sys_ioctl+0xfa/0x170 [ 490.574535][ T4270] do_syscall_64+0x4c/0xa0 [ 490.585188][ T4270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.600166][ T4270] page last free stack trace: [ 490.624305][ T4270] free_unref_page_prepare+0x8b4/0x9a0 [ 490.629880][ T4270] free_unref_page_list+0xbb/0x8e0 [ 490.642634][ T4270] release_pages+0x1fa6/0x2220 [ 490.647886][ T4270] tlb_flush_mmu+0x105/0x220 [ 490.653212][ T4270] tlb_finish_mmu+0xbd/0x1c0 [ 490.659155][ T4270] unmap_region+0x29c/0x300 [ 490.663734][ T4270] do_mas_align_munmap+0xcc2/0x12b0 [ 490.670259][ T4270] do_mas_munmap+0x240/0x2b0 [ 490.675256][ T4270] __vm_munmap+0x1ac/0x2d0 [ 490.679747][ T4270] __x64_sys_munmap+0x5c/0x70 [ 490.689142][ T4270] do_syscall_64+0x4c/0xa0 [ 490.693675][ T4270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.715688][ T4270] Modules linked in: [ 490.719709][ T4270] CPU: 0 PID: 4270 Comm: syz-executor Not tainted syzkaller #0 [ 490.727316][ T4270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 490.737418][ T4270] Call Trace: [ 490.740732][ T4270] [ 490.743687][ T4270] dump_stack_lvl+0x188/0x24e [ 490.748413][ T4270] ? show_regs_print_info+0x12/0x12 [ 490.753647][ T4270] ? swiotlb_print_info+0x60/0x60 [ 490.758714][ T4270] bad_page+0x14b/0x170 [ 490.762915][ T4270] free_unref_page_prepare+0x42a/0x9a0 [ 490.768505][ T4270] ? percpu_ref_put+0x19/0x180 [ 490.773322][ T4270] free_unref_page_list+0xbb/0x8e0 [ 490.778570][ T4270] release_pages+0x1fa6/0x2220 [ 490.783383][ T4270] ? lru_cache_disable+0x30/0x30 [ 490.788365][ T4270] ? mlock_page_drain_local+0x75/0x490 [ 490.793857][ T4270] ? mlock_page_drain_local+0x75/0x490 [ 490.799357][ T4270] ? mlock_page_drain_local+0x289/0x490 [ 490.804937][ T4270] __pagevec_release+0x6d/0xe0 [ 490.809749][ T4270] truncate_inode_pages_range+0x352/0x1090 [ 490.815602][ T4270] ? mapping_evict_folio+0x520/0x520 [ 490.820938][ T4270] ? jfs_alloc_inode+0x60/0x60 [ 490.825741][ T4270] ? evict+0x834/0x8d0 [ 490.829859][ T4270] ? do_raw_spin_unlock+0x11d/0x230 [ 490.835118][ T4270] ? _raw_spin_unlock+0x24/0x40 [ 490.840018][ T4270] ? iput+0x768/0x980 [ 490.844045][ T4270] dbUnmount+0x105/0x170 [ 490.848477][ T4270] jfs_umount+0x1fa/0x360 [ 490.852950][ T4270] jfs_put_super+0x88/0x190 [ 490.857498][ T4270] ? jfs_free_inode+0x20/0x20 [ 490.862215][ T4270] generic_shutdown_super+0x130/0x340 [ 490.867925][ T4270] kill_block_super+0x7c/0xe0 [ 490.872643][ T4270] deactivate_locked_super+0x93/0xf0 [ 490.877961][ T4270] cleanup_mnt+0x42c/0x4b0 [ 490.882450][ T4270] ? lockdep_hardirqs_on+0x94/0x140 [ 490.887693][ T4270] task_work_run+0x1d0/0x260 [ 490.892326][ T4270] ? task_work_cancel+0x220/0x220 [ 490.897422][ T4270] ? exit_to_user_mode_loop+0x3b/0x110 [ 490.902927][ T4270] exit_to_user_mode_loop+0xe6/0x110 [ 490.908265][ T4270] exit_to_user_mode_prepare+0xee/0x180 [ 490.913857][ T4270] syscall_exit_to_user_mode+0x16/0x40 [ 490.919351][ T4270] do_syscall_64+0x58/0xa0 [ 490.923801][ T4270] ? clear_bhb_loop+0x60/0xb0 [ 490.928511][ T4270] ? clear_bhb_loop+0x60/0xb0 [ 490.933224][ T4270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.939253][ T4270] RIP: 0033:0x7f23f0f9c117 [ 490.943788][ T4270] Code: a2 c7 05 7c c4 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 490.963446][ T4270] RSP: 002b:00007ffe60f55728 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 490.971889][ T4270] RAX: 0000000000000000 RBX: 00007f23f100471f RCX: 00007f23f0f9c117 [ 490.979891][ T4270] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe60f557e0 [ 490.987919][ T4270] RBP: 00007ffe60f557e0 R08: 00007ffe60f567e0 R09: 00000000ffffffff [ 490.995929][ T4270] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe60f56870 [ 491.003935][ T4270] R13: 00007f23f100471f R14: 00000000000778b9 R15: 00007ffe60f568b0 [ 491.011961][ T4270] [ 491.015162][ C0] vkms_vblank_simulate: vblank timer overrun [ 491.040646][ T4270] Disabling lock debugging due to kernel taint [ 491.049205][ T4270] BUG: Bad page state in process syz-executor pfn:72eab [ 491.056646][ T4270] page:ffffea0001cbaac0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x3 pfn:0x72eab [ 491.067504][ T4270] flags: 0xfff18000002046(referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 491.078220][ T4270] raw: 00fff18000002046 ffffea00014e0ec8 ffffc90003ec7960 0000000000000000 [ 491.087080][ T4270] raw: 0000000000000003 ffff888054bba7c0 00000000ffffffff 0000000000000000 [ 491.095854][ T4270] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 491.103255][ T4270] page_owner tracks the page as allocated [ 491.109117][ T4270] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 14258, tgid 14255 (syz.4.3722), ts 489599024217, free_ts 489388059875 [ 491.127571][ T4270] post_alloc_hook+0x173/0x1a0 [ 491.132396][ T4270] get_page_from_freelist+0x1a1e/0x1ab0 [ 491.139588][ T4270] __alloc_pages+0x1ec/0x4f0 [ 491.144312][ T4270] folio_alloc+0x1c/0x60 [ 491.148601][ T4270] filemap_alloc_folio+0xdb/0x480 [ 491.153684][ T4270] do_read_cache_folio+0x1bb/0x760 [ 491.158887][ T4270] do_read_cache_page+0x32/0x220 [ 491.164477][ T4270] __get_metapage+0x316/0xfa0 [ 491.169236][ T4270] dbAdjCtl+0x144/0xa20 [ 491.173406][ T4270] dbAllocDmapLev+0x209/0x3c0 [ 491.178353][ T4270] dbAllocCtl+0x148/0x9b0 [ 491.182741][ T4270] dbAllocAG+0x1e7/0xfe0 [ 491.187080][ T4270] dbDiscardAG+0x2c5/0x8e0 [ 491.191528][ T4270] jfs_ioc_trim+0x42b/0x660 [ 491.196117][ T4270] jfs_ioctl+0x28f/0x3b0 [ 491.200521][ T4270] __se_sys_ioctl+0xfa/0x170 [ 491.205243][ T4270] page last free stack trace: [ 491.209935][ T4270] free_unref_page_prepare+0x8b4/0x9a0 [ 491.215565][ T4270] free_unref_page_list+0xbb/0x8e0 [ 491.220762][ T4270] release_pages+0x1fa6/0x2220 [ 491.225603][ T4270] tlb_flush_mmu+0x105/0x220 [ 491.230249][ T4270] tlb_finish_mmu+0xbd/0x1c0 [ 491.234937][ T4270] exit_mmap+0x384/0x960 [ 491.239587][ T4270] __mmput+0x118/0x3c0 [ 491.243701][ T4270] exit_mm+0x1fe/0x2d0 [ 491.248037][ T4270] do_exit+0x905/0x2480 [ 491.252285][ T4270] do_group_exit+0x217/0x2d0 [ 491.257347][ T4270] __x64_sys_exit_group+0x3b/0x40 [ 491.262452][ T4270] do_syscall_64+0x4c/0xa0 [ 491.269580][ T4270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 491.275887][ T4270] Modules linked in: [ 491.279827][ T4270] CPU: 0 PID: 4270 Comm: syz-executor Tainted: G B syzkaller #0 [ 491.288945][ T4270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 491.299028][ T4270] Call Trace: [ 491.302317][ T4270] [ 491.305267][ T4270] dump_stack_lvl+0x188/0x24e [ 491.309998][ T4270] ? show_regs_print_info+0x12/0x12 [ 491.315232][ T4270] ? swiotlb_print_info+0x60/0x60 [ 491.320298][ T4270] bad_page+0x14b/0x170 [ 491.324484][ T4270] free_unref_page_prepare+0x42a/0x9a0 [ 491.329988][ T4270] ? percpu_ref_put+0x19/0x180 [ 491.334788][ T4270] free_unref_page_list+0xbb/0x8e0 [ 491.339959][ T4270] release_pages+0x1fa6/0x2220 [ 491.344782][ T4270] ? lru_cache_disable+0x30/0x30 [ 491.349762][ T4270] ? mlock_page_drain_local+0x75/0x490 [ 491.355245][ T4270] ? mlock_page_drain_local+0x75/0x490 [ 491.360762][ T4270] ? mlock_page_drain_local+0x289/0x490 [ 491.366379][ T4270] __pagevec_release+0x6d/0xe0 [ 491.371293][ T4270] truncate_inode_pages_range+0x352/0x1090 [ 491.377185][ T4270] ? mapping_evict_folio+0x520/0x520 [ 491.382529][ T4270] ? jfs_alloc_inode+0x60/0x60 [ 491.387324][ T4270] ? evict+0x834/0x8d0 [ 491.391432][ T4270] ? do_raw_spin_unlock+0x11d/0x230 [ 491.396758][ T4270] ? _raw_spin_unlock+0x24/0x40 [ 491.401645][ T4270] ? iput+0x768/0x980 [ 491.405663][ T4270] dbUnmount+0x105/0x170 [ 491.409951][ T4270] jfs_umount+0x1fa/0x360 [ 491.414356][ T4270] jfs_put_super+0x88/0x190 [ 491.418897][ T4270] ? jfs_free_inode+0x20/0x20 [ 491.423610][ T4270] generic_shutdown_super+0x130/0x340 [ 491.429017][ T4270] kill_block_super+0x7c/0xe0 [ 491.433727][ T4270] deactivate_locked_super+0x93/0xf0 [ 491.439051][ T4270] cleanup_mnt+0x42c/0x4b0 [ 491.443504][ T4270] ? lockdep_hardirqs_on+0x94/0x140 [ 491.448743][ T4270] task_work_run+0x1d0/0x260 [ 491.453373][ T4270] ? task_work_cancel+0x220/0x220 [ 491.458436][ T4270] ? exit_to_user_mode_loop+0x3b/0x110 [ 491.463951][ T4270] exit_to_user_mode_loop+0xe6/0x110 [ 491.469283][ T4270] exit_to_user_mode_prepare+0xee/0x180 [ 491.475219][ T4270] syscall_exit_to_user_mode+0x16/0x40 [ 491.480761][ T4270] do_syscall_64+0x58/0xa0 [ 491.485217][ T4270] ? clear_bhb_loop+0x60/0xb0 [ 491.489928][ T4270] ? clear_bhb_loop+0x60/0xb0 [ 491.494632][ T4270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 491.500558][ T4270] RIP: 0033:0x7f23f0f9c117 [ 491.504999][ T4270] Code: a2 c7 05 7c c4 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 491.524630][ T4270] RSP: 002b:00007ffe60f55728 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 491.533182][ T4270] RAX: 0000000000000000 RBX: 00007f23f100471f RCX: 00007f23f0f9c117 [ 491.541205][ T4270] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe60f557e0 [ 491.549228][ T4270] RBP: 00007ffe60f557e0 R08: 00007ffe60f567e0 R09: 00000000ffffffff [ 491.557234][ T4270] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe60f56870 [ 491.565245][ T4270] R13: 00007f23f100471f R14: 00000000000778b9 R15: 00007ffe60f568b0 [ 491.573259][ T4270] [ 491.576373][ C0] vkms_vblank_simulate: vblank timer overrun [ 491.618095][T14308] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 491.626391][T14308] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 491.632886][T14308] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 491.639514][T14308] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 491.648445][T14308] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 491.655109][T14308] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 491.661931][T14308] comedi comedi3: 8255: I/O port conflict (0x1,4)