last executing test programs: 17.290757283s ago: executing program 2 (id=706): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) 17.096934846s ago: executing program 2 (id=700): unshare(0x2040400) r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000b95000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x40) 16.868742821s ago: executing program 2 (id=702): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 16.731661493s ago: executing program 2 (id=705): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', 0x81c00a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2cf, &(0x7f0000002080)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0/../file0/../file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) 16.132809595s ago: executing program 2 (id=718): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100), 0x0, 0x8) 15.37486196s ago: executing program 2 (id=712): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x100}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 15.034649506s ago: executing program 32 (id=712): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x100}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 9.337069277s ago: executing program 3 (id=765): io_setup(0x8, &(0x7f0000000540)=0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f00000003c0)="01000000", 0x4, 0x2a25}]) 9.029116213s ago: executing program 3 (id=774): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d78fa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB="056c"], 0x3, 0x6ae, &(0x7f0000000e40)="$eJzs3U9sHFcdB/DvbDbrbJBSt03TgJBqNVIFjUjsrEqChNSAEMohQhFcerUSp7GySSvHRWmEyAYoSJw4oR44FKFw6AkhhFQOCFHOSEhcOOUeiRuHHABXM7O7Xtsbx25ir9t+PtJ43ts3773f/DJ/dsexNsBn1rnXsr+XIueOn79Z1u/d7XTv3e1cG5STTCVpJM16laKdFB8mZ1Mv+Xz5Yn+44mHzvHL/g6L57vudutbsL9X2jc36bTB2y15yYFjZl2SmLv53y8NuGK9aqnEuro73cFObNRbDuMuEHRskDiZtZYPeamPjkd23ft4Ce9bt+r65wXRyMPXdtbrF9a8Oj74yTN6m16be7sUBAAAAO2XsZ/lRTz3Ig9zMod0JBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4divo7A4v+0hiUZ1IMvv+/NfKd+q0Jh/uY3rlcrb771KQDAQAAAAAAAIDH8sKDPMjNHBrUV4rqd/4vVpXD1c/P5a3cyEKWciI3M5/lLGcpc0mmRwZq3ZxfXl6a29jzlyl7rqys3O73PDW256m1cfXWBzrufxps2AgAAAAAAAAAPrN+lHOrv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC9oEj21atqOTwoT6fRTHIgSauYGW7emmiwT8BfJh0AAAAA7Lx2f32o+H9dWCmqz/xHqs/9B/JWrmc5i1lONwu5VD0LqD/1N/7R63Tv3e1cK5eNA3/j39uKoxox9bOH8TPPVls8N+xxLt/O93I8M7mQpSzm+5nPchYyk29VpfkUme4/vZi+d7edQawb4z27pnZhfWwvjJTL+I5WkbRzOYtVbCdysTUIvdHf7ujIbH9sJetmvFNmp3i1b4s5utRfl3v0i/56b5iu9nz/MCOz/dyX2Xh6NO8bc7/N42T9THNpDJ9BHV6dpayun+lj5fxgf13m+qc7m/NtPkpbm4nez8va4Og7snnOky//868XrjSuX71y+cbxvXMYfUzrj4nOSCae31ImumUmeo+RiQOPE/+T0+pno76Kbu9q+WLV91AW8528kUtZyOnMZi5nMpuv5VQ6OTWS1+c2z2t1rjW2d64d+1K/UN6TfjZyb9o1Uw9rKPP69EheR69001Xb6CurWXpmC1kqWhmfpX+NDaX5hX6hnOPHI3ecyVufibmRTDy7eSZ+/b+VJDe6168uXZl/c5M5bv354EuD8qBQnrbvrL02/+ZJ7tc29He3PF6eKf+xUt82Ro+Osu3ZQVudr6KZ1X6Hh21r73OtVqrzuW571JlajnTkzriR6rbnx87SqdqOjrSteZeTN9IdvgsBYA87+PLBVvt+++/t99o/aV9pnz/wzakzU19sZf/fmn/a97vGbxtfL17Oe/lhDk06UgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+DS48fatq/Pd7sLSHiyk8YQHvDO2aZCK+pXW3tj3T2pharMj6vdJNunemkTM7SR7InVp7sJcUxnTdH74SjtpDONJcnWPfMEdsBNOLl978+SNt299ZfHa/OsLry9cP3Xm9KunO1+du33y8mJ3Ybb+OekogZ2w+jZg0pEAAAAAAAAAAAAAW7Ubf94wZtqiN4F9BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6Zzr2W/b0UmZs9MVvW793tdMtlUF7dspmkkaT4QVJ8mJxNvWR6ZLjiYfO8cv+DX7307vud1bGag+0b6/r94T8rK9vci15/yUySff31o01tabyLI+P1thlYrRjuYZmwY4PEwaR9FAAA///howfX") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) listxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) 7.616172921s ago: executing program 3 (id=768): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0xfff, @loopback, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000080)=0xffdffffe, 0x4) 7.459369044s ago: executing program 3 (id=771): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', 0x81c00a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2cf, &(0x7f0000002080)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0/../file0/../file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) 7.219098329s ago: executing program 3 (id=773): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002202000000000000020000008001d00ac1414bb05001a"], 0x2c}}, 0x0) 6.724805158s ago: executing program 3 (id=775): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000880), 0x14) 6.225294548s ago: executing program 33 (id=775): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000880), 0x14) 3.290800675s ago: executing program 0 (id=790): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_ECN={0x4, 0x4, 0x1}]}}]}, 0x40}}, 0x8840) 3.00995234s ago: executing program 0 (id=792): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000180001eeffffffffffffff850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x40000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 2.844590594s ago: executing program 1 (id=786): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0xffffffff, 0x400, 0x0, 0x0, 0x6, 0x88}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) 988.62253ms ago: executing program 0 (id=787): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)="08001eb3b0335d00", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x8000) 973.36252ms ago: executing program 1 (id=795): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x13, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 730.036755ms ago: executing program 0 (id=788): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9api\x87\xb9\x02\x95$\xf1\f\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xc0\xd7Uw\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x94?\x96\\\xf6\xc6\x95\x03\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xaf\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\b\x00\xce\x8b\x19\xea\xef\xe3\x00\x00', 0x0) fallocate(r0, 0x50, 0x2, 0x7ffffffffffffffe) 726.083715ms ago: executing program 1 (id=797): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0, 0x0}, &(0x7f0000000880)=0xc) syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840, &(0x7f0000000940)={[{@grpid}, {@sb={'sb', 0x3d, 0x4b}}, {@jqfmt_vfsold}, {@jqfmt_vfsv1}, {@prjquota}, {@resgid={'resgid', 0x3d, r1}}, {@dax}]}, 0x1, 0x576, &(0x7f0000000140)="$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") 500.11225ms ago: executing program 0 (id=789): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001380)={0x2, 0x20000006, 0x1, 0x0, 0xc}) 332.766983ms ago: executing program 0 (id=791): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f00000001c0)='./file1\x00', 0x810, &(0x7f0000000300)={[{@treelog}, {@nossd}, {@autodefrag}, {@thread_pool={'thread_pool', 0x3d, 0x4}}, {@nodatasum}, {@thread_pool={'thread_pool', 0x3d, 0x4}}, {@flushoncommit}, {@user_subvol_rm}, {@ref_verify}, {}, {@clear_cache}, {@flushoncommit}, {@ssd}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@ssd}]}, 0x1, 0x50f3, &(0x7f0000005140)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 332.454723ms ago: executing program 1 (id=793): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000140)={0x0, 0x2}) r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) 178.863186ms ago: executing program 1 (id=794): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000740)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, 0x1000}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e24, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, @in6={0xa, 0x4e24, 0x5, @empty, 0x8}, @in6={0xa, 0x4e20, 0x2, @private0, 0xc4f}], 0x6e) 0s ago: executing program 1 (id=796): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xaf}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x7ff}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @immediate={{0xe}, @void}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}}, 0x40) kernel console output (not intermixed with test programs): not active [ 79.244502][ T5786] hsr_slave_0: entered promiscuous mode [ 79.251305][ T5786] hsr_slave_1: entered promiscuous mode [ 79.258379][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.266646][ T5786] Cannot create hsr debugfs directory [ 79.482483][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.496172][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.521084][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.532400][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.609585][ T5792] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.634892][ T5792] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.648247][ T5792] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.660521][ T5792] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.738996][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.750349][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.761690][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.773068][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.856153][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.866383][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.889213][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.913818][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.995658][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.061046][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.092297][ T1322] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.099888][ T1322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.117743][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.138872][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.154260][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.161481][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.205312][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.240647][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.253701][ T1322] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.261098][ T1322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.280574][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.287856][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.302202][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.339349][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.346557][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.399907][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.407248][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.428556][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.508641][ T1322] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.516341][ T1322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.549138][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.556402][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.648299][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.711321][ T5786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.727965][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.860439][ T5788] veth0_vlan: entered promiscuous mode [ 80.865477][ T5791] Bluetooth: hci0: command tx timeout [ 80.886765][ T5788] veth1_vlan: entered promiscuous mode [ 80.990435][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.019850][ T5788] veth0_macvtap: entered promiscuous mode [ 81.051767][ T5788] veth1_macvtap: entered promiscuous mode [ 81.104954][ T5791] Bluetooth: hci3: command tx timeout [ 81.110680][ T5791] Bluetooth: hci1: command tx timeout [ 81.117039][ T5794] Bluetooth: hci2: command tx timeout [ 81.139921][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.158004][ T5783] veth0_vlan: entered promiscuous mode [ 81.173570][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.192334][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.203536][ T5788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.213079][ T5788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.225281][ T5788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.234379][ T5788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.261800][ T5783] veth1_vlan: entered promiscuous mode [ 81.366342][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.379714][ T1073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.393989][ T1073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.451032][ T5783] veth0_macvtap: entered promiscuous mode [ 81.482397][ T5783] veth1_macvtap: entered promiscuous mode [ 81.506226][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.516172][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.538290][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.551505][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.567001][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.598497][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.610373][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.622999][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.635128][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.644315][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.653728][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.663572][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.688505][ T5786] veth0_vlan: entered promiscuous mode [ 81.700885][ T5792] veth0_vlan: entered promiscuous mode [ 81.721276][ T5792] veth1_vlan: entered promiscuous mode [ 81.819302][ T5786] veth1_vlan: entered promiscuous mode [ 81.935076][ T1073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.935698][ T5792] veth0_macvtap: entered promiscuous mode [ 81.943262][ T1073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.955337][ T5786] veth0_macvtap: entered promiscuous mode [ 82.012506][ T5792] veth1_macvtap: entered promiscuous mode [ 82.021748][ T5786] veth1_macvtap: entered promiscuous mode [ 82.038638][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.070868][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.108989][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.121400][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.131697][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.142963][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.158395][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.189480][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.203091][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.211394][ T5879] syz.0.7[5879]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 82.217734][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.234327][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.249383][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.251074][ T5879] loop0: detected capacity change from 0 to 256 [ 82.260634][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.279998][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.310875][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.343992][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.356949][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.369533][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.416739][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.429257][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.464841][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.484512][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.496819][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.508023][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.519191][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.532769][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.573226][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.615654][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.655912][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.670907][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.687490][ T5792] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.702840][ T5792] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.728948][ T5792] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.738927][ T5792] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.945491][ T5791] Bluetooth: hci0: command tx timeout [ 83.149196][ T1073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.185401][ T5791] Bluetooth: hci1: command tx timeout [ 83.191197][ T5791] Bluetooth: hci3: command tx timeout [ 83.197619][ T5794] Bluetooth: hci2: command tx timeout [ 83.205088][ T1073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.324089][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.351264][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.398262][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.414465][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.513288][ T2917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.553561][ T2917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.593904][ T5898] loop0: detected capacity change from 0 to 16 [ 83.611197][ T5898] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 83.963253][ T5904] loop1: detected capacity change from 0 to 4096 [ 84.092614][ T5904] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 84.163856][ T5912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19'. [ 84.586531][ T5924] loop1: detected capacity change from 0 to 64 [ 84.986230][ T5933] loop3: detected capacity change from 0 to 256 [ 85.025922][ T5791] Bluetooth: hci0: command tx timeout [ 85.035990][ T5933] exfat: Deprecated parameter 'utf8' [ 85.041786][ T5933] exfat: Deprecated parameter 'utf8' [ 85.065139][ T5933] exfat: Deprecated parameter 'utf8' [ 85.153309][ T5933] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 85.265555][ T5791] Bluetooth: hci3: command tx timeout [ 85.271223][ T5791] Bluetooth: hci2: command tx timeout [ 85.278349][ T1186] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.287477][ T5794] Bluetooth: hci1: command tx timeout [ 85.475314][ T1186] usb 3-1: Using ep0 maxpacket: 16 [ 85.494862][ T1186] usb 3-1: too many endpoints for config 0 interface 0 altsetting 6: 65, using maximum allowed: 30 [ 85.515682][ T1186] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.534567][ T1186] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 85.595088][ T1186] usb 3-1: config 0 interface 0 has no altsetting 0 [ 85.612314][ T1186] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 85.633190][ T1186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.667443][ T1186] usb 3-1: config 0 descriptor?? [ 85.889369][ T5964] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.965058][ T5967] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 86.136567][ T1186] kye 0003:0458:5013.0001: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 86.173271][ T1186] kye 0003:0458:5013.0001: unknown main item tag 0x0 [ 86.212713][ T1186] kye 0003:0458:5013.0001: unknown main item tag 0x0 [ 86.240853][ T1186] kye 0003:0458:5013.0001: unknown main item tag 0x0 [ 86.272191][ T1186] kye 0003:0458:5013.0001: hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 86.319440][ T1186] kye 0003:0458:5013.0001: tablet-enabling feature report not found [ 86.358962][ T1186] kye 0003:0458:5013.0001: tablet enabling failed [ 86.434358][ T1186] usb 3-1: USB disconnect, device number 2 [ 86.566436][ T5979] fido_id[5979]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 87.371198][ T965] cfg80211: failed to load regulatory.db [ 87.454947][ T6005] Illegal XDP return value 4294967274 on prog (id 10) dev N/A, expect packet loss! [ 87.763336][ T6013] loop2: detected capacity change from 0 to 64 [ 87.807457][ T6013] hfs: uid requires an argument [ 87.849088][ T6013] hfs: unable to parse mount options [ 87.925017][ T6019] netlink: 60 bytes leftover after parsing attributes in process `syz.3.69'. [ 87.970865][ T6019] netlink: 60 bytes leftover after parsing attributes in process `syz.3.69'. [ 88.011779][ T6016] netlink: 60 bytes leftover after parsing attributes in process `syz.3.69'. [ 88.370509][ T6029] loop1: detected capacity change from 0 to 1024 [ 88.409981][ T6029] ======================================================= [ 88.409981][ T6029] WARNING: The mand mount option has been deprecated and [ 88.409981][ T6029] and is ignored by this kernel. Remove the mand [ 88.409981][ T6029] option from the mount to silence this warning. [ 88.409981][ T6029] ======================================================= [ 88.534968][ T6029] EXT4-fs: Ignoring removed oldalloc option [ 88.541164][ T6029] EXT4-fs: Ignoring removed bh option [ 88.558610][ T6033] netlink: 128 bytes leftover after parsing attributes in process `syz.0.76'. [ 88.585606][ T6036] tipc: Can't bind to reserved service type 1 [ 88.592130][ T6033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.76'. [ 88.622298][ T6029] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 88.720130][ T6029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.843886][ T6037] loop2: detected capacity change from 0 to 4096 [ 89.057909][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.195380][ T6037] ntfs3: loop2: failed to convert name for inode 1e. [ 89.263723][ T6052] loop1: detected capacity change from 0 to 16 [ 89.272419][ T6052] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 89.757131][ T6062] loop2: detected capacity change from 0 to 2048 [ 89.803122][ T6048] loop0: detected capacity change from 0 to 32768 [ 89.848462][ T6062] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 89.913586][ T6062] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.936284][ T6069] loop3: detected capacity change from 0 to 1024 [ 89.953804][ T6069] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 89.973387][ T6048] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 90.079182][ T6069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.289274][ T6048] XFS (loop0): Ending clean mount [ 90.368348][ T6084] capability: warning: `syz.1.94' uses deprecated v2 capabilities in a way that may be insecure [ 90.401913][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.541332][ T5788] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 91.230994][ T6106] rdma_op ffff88807e5a99f0 conn xmit_rdma 0000000000000000 [ 91.419245][ T6110] loop1: detected capacity change from 0 to 22 [ 91.455588][ T6110] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 91.510437][ T6110] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 91.981598][ T6108] loop3: detected capacity change from 0 to 32768 [ 92.043233][ T6104] loop2: detected capacity change from 0 to 32768 [ 92.091508][ T6108] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 92.293900][ T6135] loop0: detected capacity change from 0 to 4096 [ 92.318105][ T6135] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 92.345007][ T28] audit: type=1800 audit(1758647839.246:2): pid=6104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.103" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 92.347620][ T6108] XFS (loop3): Ending clean mount [ 92.394222][ T6135] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 92.479269][ T6108] XFS (loop3): Quotacheck needed: Please wait. [ 92.524745][ T6135] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 92.614283][ T6135] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 92.665111][ T6135] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 92.697327][ T6108] XFS (loop3): Quotacheck: Done. [ 92.721464][ T6135] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 92.725976][ T6108] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 92.795245][ T6135] ntfs: (device loop0): check_mft_mirror(): Failed to read $MFTMirr. [ 92.847916][ T6135] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 92.882353][ T6135] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 92.912898][ T6135] ntfs: volume version 3.1. [ 93.044652][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.259756][ T23] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 93.294828][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.325204][ T23] usb 3-1: Product: syz [ 93.338050][ T23] usb 3-1: Manufacturer: syz [ 93.353267][ T23] usb 3-1: SerialNumber: syz [ 93.365754][ T23] usb 3-1: config 0 descriptor?? [ 93.377647][ T23] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 93.400430][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 93.410919][ T23] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 93.421747][ T23] usb 3-1: media controller created [ 93.445280][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 93.486676][ T23] DVB: Unable to find symbol mt352_attach() [ 93.518449][ T23] DVB: Unable to find symbol nxt6000_attach() [ 93.529179][ T23] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 93.543907][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 93.565493][ T23] dvb-usb: schedule remote query interval to 1000 msecs. [ 93.572944][ T23] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 93.584560][ T23] dvb-usb: bulk message failed: -22 (7/0) [ 93.590829][ T23] dvb-usb: bulk message failed: -22 (7/0) [ 93.694506][ T8] usb 3-1: USB disconnect, device number 3 [ 93.738582][ T8] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 94.363376][ T6153] loop3: detected capacity change from 0 to 2048 [ 94.418074][ T6153] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 94.520877][ T6153] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.728700][ T6166] GUP no longer grows the stack in syz.2.126 (6166): 200000005000-200000008000 (200000004000) [ 94.728840][ T6166] CPU: 0 PID: 6166 Comm: syz.2.126 Not tainted syzkaller #0 [ 94.728858][ T6166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 94.728871][ T6166] Call Trace: [ 94.728878][ T6166] [ 94.728890][ T6166] dump_stack_lvl+0x16c/0x230 [ 94.728926][ T6166] ? show_regs_print_info+0x20/0x20 [ 94.728946][ T6166] ? load_image+0x3b0/0x3b0 [ 94.728962][ T6166] ? find_vma+0x12e/0x1b0 [ 94.728997][ T6166] fixup_user_fault+0x652/0x710 [ 94.729024][ T6166] fault_in_user_writeable+0x71/0xe0 [ 94.729053][ T6166] futex_lock_pi+0x21b/0x8d0 [ 94.729076][ T6166] ? fixup_pi_state_owner+0x5c0/0x5c0 [ 94.729134][ T6166] ? userfaultfd_unmap_prep+0x3d0/0x3d0 [ 94.729158][ T6166] ? mas_find_setup+0x493/0x590 [ 94.729179][ T6166] do_futex+0x23d/0x3e0 [ 94.729202][ T6166] ? __ia32_sys_get_robust_list+0x90/0x90 [ 94.729229][ T6166] __se_sys_futex+0x36f/0x3f0 [ 94.729252][ T6166] ? __x64_sys_futex+0xf0/0xf0 [ 94.729276][ T6166] ? __x64_sys_futex+0x21/0xf0 [ 94.729296][ T6166] do_syscall_64+0x55/0xb0 [ 94.729314][ T6166] ? clear_bhb_loop+0x40/0x90 [ 94.729330][ T6166] ? clear_bhb_loop+0x40/0x90 [ 94.729349][ T6166] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.729372][ T6166] RIP: 0033:0x7f1c9318eec9 [ 94.729393][ T6166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.729407][ T6166] RSP: 002b:00007f1c94060038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 94.729450][ T6166] RAX: ffffffffffffffda RBX: 00007f1c933e5fa0 RCX: 00007f1c9318eec9 [ 94.729464][ T6166] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 94.729476][ T6166] RBP: 00007f1c93211f91 R08: 0000000000000000 R09: 0000000000000000 [ 94.729488][ T6166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.729499][ T6166] R13: 00007f1c933e6038 R14: 00007f1c933e5fa0 R15: 00007ffc4cd2edb8 [ 94.729528][ T6166] [ 95.096192][ T5869] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.250771][ T6182] capability: warning: `syz.3.135' uses 32-bit capabilities (legacy support in use) [ 95.299223][ T5869] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 95.338054][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.358817][ T5869] usb 1-1: Product: syz [ 95.363221][ T5869] usb 1-1: Manufacturer: syz [ 95.384606][ T5869] usb 1-1: SerialNumber: syz [ 95.384922][ T6187] loop1: detected capacity change from 0 to 1024 [ 95.392067][ T5869] usb 1-1: config 0 descriptor?? [ 95.410848][ T5869] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 95.461405][ T6187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.463991][ T5869] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 95.494990][ T5869] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 95.506258][ T5869] usb 1-1: media controller created [ 95.511392][ T6192] netlink: 'syz.3.138': attribute type 28 has an invalid length. [ 95.530525][ T5869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 95.552564][ T6187] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.605431][ T6187] EXT4-fs error (device loop1): ext4_free_blocks:6676: comm syz.1.137: Freeing blocks not in datazone - block = 0, count = 16 [ 95.653972][ T6187] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 95.705538][ T5869] DVB: Unable to find symbol mt352_attach() [ 95.835202][ T5869] DVB: Unable to find symbol nxt6000_attach() [ 95.841328][ T5869] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 95.866243][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.875785][ T5869] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 95.908706][ T5869] dvb-usb: schedule remote query interval to 1000 msecs. [ 95.917063][ T5869] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 95.928683][ T5869] dvb-usb: bulk message failed: -22 (7/0) [ 95.935889][ T5869] dvb-usb: bulk message failed: -22 (7/0) [ 95.951698][ T6199] netlink: 'syz.3.141': attribute type 2 has an invalid length. [ 95.976207][ T5869] usb 1-1: USB disconnect, device number 2 [ 96.000337][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.141'. [ 96.126828][ T5869] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 96.566675][ T6215] loop0: detected capacity change from 0 to 512 [ 96.674282][ T6221] loop2: detected capacity change from 0 to 256 [ 96.683768][ T6215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.685639][ T6221] exfat: Deprecated parameter 'utf8' [ 96.697512][ T6215] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.729263][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.151'. [ 96.741842][ T6222] netlink: 16 bytes leftover after parsing attributes in process `syz.3.149'. [ 96.811558][ T6221] exfat: Deprecated parameter 'utf8' [ 96.847698][ T6221] exfat: Deprecated parameter 'namecase' [ 96.952834][ T6221] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 96.981147][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.345618][ T6237] loop3: detected capacity change from 0 to 1024 [ 97.367956][ T6237] EXT4-fs: Ignoring removed nobh option [ 97.388429][ T6237] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.476014][ T6237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.531897][ T6237] EXT4-fs warning (device loop3): ext4_resize_begin:74: won't resize using backup superblock at 1 [ 97.552622][ T6226] loop1: detected capacity change from 0 to 32768 [ 97.719350][ T6226] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 97.748404][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.828907][ T6261] MTD: Couldn't look up 'memory.events': -15 [ 97.889854][ T6264] program syz.2.166 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.964933][ T6226] XFS (loop1): Ending clean mount [ 98.029740][ T6226] XFS (loop1): Quotacheck needed: Please wait. [ 98.079303][ T6226] XFS (loop1): Quotacheck: Done. [ 98.184743][ T5792] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 98.367766][ T5830] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 98.589172][ T6281] sp0: Synchronizing with TNC [ 98.624536][ T5830] usb 3-1: Using ep0 maxpacket: 16 [ 98.635332][ T5830] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.656858][ T5830] usb 3-1: config 0 interface 0 has no altsetting 0 [ 98.671499][ T5830] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 98.691392][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.713959][ T5830] usb 3-1: config 0 descriptor?? [ 98.759286][ T6285] loop1: detected capacity change from 0 to 512 [ 98.770731][ T6285] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.150709][ T5830] ryos 0003:1E7D:3138.0002: unknown main item tag 0x0 [ 99.167835][ T5830] ryos 0003:1E7D:3138.0002: unknown main item tag 0x0 [ 99.169280][ T6291] raw_sendmsg: syz.0.179 forgot to set AF_INET. Fix it! [ 99.182149][ T5830] ryos 0003:1E7D:3138.0002: unknown main item tag 0x0 [ 99.224756][ T5830] ryos 0003:1E7D:3138.0002: unknown main item tag 0x0 [ 99.231794][ T5830] ryos 0003:1E7D:3138.0002: unknown main item tag 0x0 [ 99.256405][ T5830] ryos 0003:1E7D:3138.0002: hidraw0: USB HID v0.05 Device [HID 1e7d:3138] on usb-dummy_hcd.2-1/input0 [ 99.352910][ T5830] usb 3-1: USB disconnect, device number 4 [ 99.413678][ T6294] fido_id[6294]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 100.148028][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 100.148048][ T28] audit: type=1326 audit(1758647847.066:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af838eec9 code=0x7ffc0000 [ 100.232771][ T28] audit: type=1326 audit(1758647847.066:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af838eec9 code=0x7ffc0000 [ 100.286927][ T6314] loop2: detected capacity change from 0 to 64 [ 100.304671][ T28] audit: type=1326 audit(1758647847.076:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1af838eec9 code=0x7ffc0000 [ 100.387641][ T28] audit: type=1326 audit(1758647847.076:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af838eec9 code=0x7ffc0000 [ 100.429909][ T28] audit: type=1326 audit(1758647847.076:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af838eec9 code=0x7ffc0000 [ 100.485473][ T28] audit: type=1326 audit(1758647847.076:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f1af838eec9 code=0x7ffc0000 [ 100.519611][ T28] audit: type=1326 audit(1758647847.076:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af838eec9 code=0x7ffc0000 [ 100.530758][ T6304] loop0: detected capacity change from 0 to 40427 [ 100.633628][ T6320] loop2: detected capacity change from 0 to 512 [ 100.635328][ T5830] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.652602][ T6304] F2FS-fs (loop0): invalid crc value [ 100.659813][ T6320] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.673077][ T6320] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.686374][ T6320] EXT4-fs (loop2): Test dummy encryption mode enabled [ 100.695301][ T6320] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 100.709647][ T6304] F2FS-fs (loop0): Found nat_bits in checkpoint [ 100.737030][ T6320] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 100.802404][ T6320] EXT4-fs (loop2): 1 truncate cleaned up [ 100.825407][ T6304] F2FS-fs (loop0): Start checkpoint disabled! [ 100.856785][ T6320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.881178][ T5830] usb 4-1: Using ep0 maxpacket: 8 [ 100.893762][ T5830] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 100.907410][ T6304] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 100.926610][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.953681][ T5830] usb 4-1: config 0 descriptor?? [ 101.171922][ T6320] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 101.268591][ T6332] netlink: 'syz.1.195': attribute type 4 has an invalid length. [ 101.279690][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.409189][ T5830] uclogic 0003:145F:0212.0003: interface is invalid, ignoring [ 101.580594][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.198'. [ 101.625722][ T5830] usb 4-1: USB disconnect, device number 2 [ 101.934527][ T5869] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.099782][ T6355] loop0: detected capacity change from 0 to 512 [ 102.113559][ T6355] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 102.154495][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 102.161769][ T5869] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.168097][ T6355] EXT4-fs (loop0): 1 truncate cleaned up [ 102.184504][ T5869] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 102.227181][ T5869] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 102.237406][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.247307][ T5869] usb 2-1: Product: syz [ 102.251973][ T5869] usb 2-1: Manufacturer: syz [ 102.257175][ T5869] usb 2-1: SerialNumber: syz [ 102.263814][ T6355] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.266592][ T5869] usb 2-1: config 0 descriptor?? [ 102.336231][ T6358] loop2: detected capacity change from 0 to 1024 [ 102.366654][ T6355] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.206: corrupted in-inode xattr: overlapping e_value [ 102.442135][ T6355] EXT4-fs (loop0): Remounting filesystem read-only [ 102.483730][ T6355] EXT4-fs warning (device loop0): ext4_xattr_set_entry:1781: inode #15: comm syz.0.206: unable to update i_inline_off [ 102.538672][ T6355] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 102.564122][ T42] hfsplus: b-tree write err: -5, ino 4 [ 102.638923][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.924805][ T5869] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 102.955882][ T5869] asix: probe of 2-1:0.0 failed with error -71 [ 103.004465][ T5869] usb 2-1: USB disconnect, device number 2 [ 103.382309][ T6385] loop0: detected capacity change from 0 to 1024 [ 103.439362][ T6385] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 103.981398][ T6402] loop0: detected capacity change from 0 to 1024 [ 104.026957][ T6402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.234692][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.644864][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.235'. [ 104.883074][ T6423] loop0: detected capacity change from 0 to 4096 [ 104.903065][ T6423] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 105.077410][ T6423] ntfs: volume version 3.1. [ 105.077554][ T6430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'. [ 105.147948][ T6430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'. [ 105.406736][ T6440] loop0: detected capacity change from 0 to 16 [ 105.453135][ T6442] loop2: detected capacity change from 0 to 64 [ 105.464938][ T6440] erofs: (device loop0): mounted with root inode @ nid 36. [ 105.788379][ T6452] loop0: detected capacity change from 0 to 256 [ 105.795936][ T6451] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.866084][ T6450] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 105.875226][ T6452] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x09567547, utbl_chksum : 0xe619d30d) [ 106.102603][ T6458] warning: `syz.3.252' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.251770][ T6460] Zero length message leads to an empty skb [ 106.915647][ T6484] loop2: detected capacity change from 0 to 256 [ 107.104758][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 107.295028][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 107.313566][ T8] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 107.334582][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.353954][ T6475] loop1: detected capacity change from 0 to 32768 [ 107.364250][ T8] usb 1-1: Product: syz [ 107.369710][ T5830] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 107.380226][ T8] usb 1-1: Manufacturer: syz [ 107.386825][ T8] usb 1-1: SerialNumber: syz [ 107.402233][ T8] usb 1-1: config 0 descriptor?? [ 107.420591][ T8] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 107.581150][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.604626][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.647458][ T5830] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 107.675764][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.695396][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.706956][ T5830] usb 3-1: config 0 descriptor?? [ 107.903010][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.926682][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.940751][ T23] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 107.950957][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.978173][ T23] usb 4-1: config 0 descriptor?? [ 108.008411][ T6490] loop1: detected capacity change from 0 to 4096 [ 108.041959][ T8] gspca_sonixj: reg_w1 err -71 [ 108.052791][ T8] sonixj: probe of 1-1:0.0 failed with error -71 [ 108.091571][ T8] usb 1-1: USB disconnect, device number 3 [ 108.167040][ T6490] ntfs3: loop1: ino=1e, "file1" attr_set_size [ 108.181610][ T6490] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 108.332801][ T5830] razer 0003:1532:010E.0004: failed to enable macro keys: -71 [ 108.365648][ T5830] razer 0003:1532:010E.0004: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.2-1/input0 [ 108.411967][ T23] kone 0003:1E7D:2CED.0005: hidraw1: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0 [ 108.425589][ T5830] usb 3-1: USB disconnect, device number 5 [ 108.472858][ T42] wlan1: Trigger new scan to find an IBSS to join [ 108.531052][ T6494] fido_id[6494]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 108.612823][ T5869] usb 4-1: USB disconnect, device number 3 [ 108.747531][ T6502] loop1: detected capacity change from 0 to 1024 [ 108.872471][ T12] hfsplus: b-tree write err: -5, ino 4 [ 108.897139][ T6505] netlink: 'syz.0.273': attribute type 29 has an invalid length. [ 109.514156][ T6522] process 'syz.3.281' launched '/dev/fd/3' with NULL argv: empty string added [ 109.708328][ T6509] loop1: detected capacity change from 0 to 32768 [ 109.743000][ T6509] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.274 (6509) [ 109.845828][ T6509] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 109.895433][ T6509] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 109.915504][ T6529] loop2: detected capacity change from 0 to 2048 [ 109.954791][ T6509] BTRFS info (device loop1): enabling auto defrag [ 109.966539][ T6529] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 109.986958][ T6509] BTRFS info (device loop1): setting nodatasum [ 109.993916][ T6509] BTRFS info (device loop1): turning on flush-on-commit [ 110.019764][ T6509] BTRFS info (device loop1): doing ref verification [ 110.029688][ T6509] BTRFS info (device loop1): allowing degraded mounts [ 110.042807][ T6532] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.070586][ T6509] BTRFS info (device loop1): force clearing of disk cache [ 110.086946][ T6509] BTRFS info (device loop1): enabling ssd optimizations [ 110.103246][ T6509] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 110.161318][ T6509] BTRFS info (device loop1): use lzo compression, level 0 [ 110.194770][ T6509] BTRFS info (device loop1): using free space tree [ 110.216414][ T5869] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.262305][ T6515] loop0: detected capacity change from 0 to 32768 [ 110.344707][ T6515] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 110.412575][ T6509] BTRFS info (device loop1): auto enabling async discard [ 110.424595][ T5869] usb 4-1: Using ep0 maxpacket: 32 [ 110.434508][ T5869] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.449521][ T5869] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 110.460621][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.475460][ T5869] usb 4-1: config 0 descriptor?? [ 110.485847][ T5869] dw2102: su3000_identify_state [ 110.494464][ T5869] dvb-usb: found a 'TeVii S662' in warm state. [ 110.500904][ T5869] dw2102: su3000_power_ctrl: 1, initialized 0 [ 110.507263][ T6509] BTRFS info (device loop1): rebuilding free space tree [ 110.519441][ T6558] netlink: 26 bytes leftover after parsing attributes in process `syz.2.287'. [ 110.529457][ T6515] XFS (loop0): Ending clean mount [ 110.550718][ T5869] dvb-usb: bulk message failed: -22 (2/0) [ 110.568467][ T6558] netlink: 16 bytes leftover after parsing attributes in process `syz.2.287'. [ 110.586613][ T6515] XFS (loop0): Quotacheck needed: Please wait. [ 110.603439][ T5869] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 110.635772][ T5869] dvbdev: DVB: registering new adapter (TeVii S662) [ 110.642740][ T5869] usb 4-1: media controller created [ 110.669445][ T1322] XFS (loop0): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 110.688748][ T6531] dvb-usb: bulk message failed: -22 (5/0) [ 110.711417][ T6531] dw2102: i2c transfer failed. [ 110.753099][ T5869] dvb-usb: bulk message failed: -22 (6/0) [ 110.772402][ T6515] XFS (loop0): Quotacheck: Done. [ 110.773973][ T5869] dw2102: i2c transfer failed. [ 110.815395][ T5869] dvb-usb: bulk message failed: -22 (6/0) [ 110.820826][ T6562] loop2: detected capacity change from 0 to 2048 [ 110.836171][ T5869] dw2102: i2c transfer failed. [ 110.876362][ T5869] dvb-usb: bulk message failed: -22 (6/0) [ 110.883376][ T5869] dw2102: i2c transfer failed. [ 110.908838][ T6562] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.921746][ T5869] dvb-usb: bulk message failed: -22 (6/0) [ 110.953868][ T5788] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 110.978365][ T5869] dw2102: i2c transfer failed. [ 110.983217][ T5869] dvb-usb: bulk message failed: -22 (6/0) [ 111.000909][ T5869] dw2102: i2c transfer failed. [ 111.012476][ T5869] dvb-usb: bulk message failed: -22 (6/0) [ 111.019310][ T5869] dw2102: i2c transfer failed. [ 111.045141][ T5869] dvb-usb: MAC address: 02:02:02:02:02:02 [ 111.101628][ T5869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.188881][ T5792] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.255720][ T5869] dvb-usb: bulk message failed: -22 (3/0) [ 111.261607][ T5869] dw2102: command 0x0e transfer failed. [ 111.322435][ T5869] dvb-usb: bulk message failed: -22 (3/0) [ 111.352810][ T5869] dw2102: command 0x0e transfer failed. [ 111.505124][ T1322] wlan1: Trigger new scan to find an IBSS to join [ 111.706272][ T5869] dvb-usb: bulk message failed: -22 (3/0) [ 111.743783][ T6574] loop2: detected capacity change from 0 to 2048 [ 111.752463][ T5869] dw2102: command 0x0e transfer failed. [ 111.781999][ T5869] dvb-usb: bulk message failed: -22 (3/0) [ 111.804781][ T5869] dw2102: command 0x0e transfer failed. [ 111.813145][ T5869] dvb-usb: bulk message failed: -22 (1/0) [ 111.855055][ T5869] dw2102: command 0x51 transfer failed. [ 111.861118][ T5869] dvb-usb: bulk message failed: -22 (5/0) [ 111.880343][ T6574] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 111.929843][ T5869] dw2102: i2c probe for address 0x68 failed. [ 111.948842][ T5869] dvb-usb: bulk message failed: -22 (5/0) [ 111.956124][ T5869] dw2102: i2c probe for address 0x69 failed. [ 111.962575][ T5869] dvb-usb: bulk message failed: -22 (5/0) [ 111.971169][ T6574] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.976945][ T5869] dw2102: i2c probe for address 0x6a failed. [ 111.987097][ T5869] dw2102: probing for demodulator failed. Is the external power switched on? [ 112.014780][ T5869] dvb-usb: no frontend was attached by 'TeVii S662' [ 112.182992][ T6585] loop3: detected capacity change from 0 to 512 [ 112.218245][ T6585] EXT4-fs: Ignoring removed i_version option [ 112.248667][ T6585] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 112.266003][ T5869] rc_core: IR keymap rc-tt-1500 not found [ 112.271954][ T5869] Registered IR keymap rc-empty [ 112.344834][ T5869] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 112.356914][ T6585] EXT4-fs (loop3): 1 truncate cleaned up [ 112.365016][ T5869] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input7 [ 112.382809][ T6585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.383390][ T5869] dvb-usb: schedule remote query interval to 250 msecs. [ 112.404197][ T5869] dw2102: su3000_power_ctrl: 0, initialized 1 [ 112.411465][ T5869] dvb-usb: TeVii S662 successfully initialized and connected. [ 112.425863][ T5869] usb 4-1: USB disconnect, device number 4 [ 112.483179][ T6587] loop1: detected capacity change from 0 to 4096 [ 112.544997][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 112.579550][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.628798][ T5869] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 112.649227][ T6587] ntfs3: loop1: ino=1f, "file2" attr_set_size [ 112.703996][ T6597] Bluetooth: MGMT ver 1.22 [ 112.802641][ T8] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 112.824710][ T8] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 112.848743][ T8] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 112.871072][ T8] usb 1-1: config 220 has no interface number 2 [ 112.884516][ T8] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 112.948952][ T8] usb 1-1: config 220 interface 0 has no altsetting 0 [ 112.961786][ T8] usb 1-1: config 220 interface 76 has no altsetting 0 [ 112.980912][ T8] usb 1-1: config 220 interface 1 has no altsetting 0 [ 112.983775][ T6605] netlink: 60 bytes leftover after parsing attributes in process `syz.2.304'. [ 113.002720][ T8] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 113.013797][ T6605] netlink: 60 bytes leftover after parsing attributes in process `syz.2.304'. [ 113.044622][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.062325][ T6603] netlink: 60 bytes leftover after parsing attributes in process `syz.2.304'. [ 113.084536][ T8] usb 1-1: Product: syz [ 113.088858][ T8] usb 1-1: Manufacturer: syz [ 113.110343][ T8] usb 1-1: SerialNumber: syz [ 113.125459][ T6609] loop3: detected capacity change from 0 to 512 [ 113.134359][ T6609] EXT4-fs: Ignoring removed orlov option [ 113.199273][ T6609] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 113.228969][ T6609] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 113.282818][ T6609] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.306: corrupted in-inode xattr: e_value size too large [ 113.384070][ T8] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 113.407096][ T6609] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.306: couldn't read orphan inode 15 (err -117) [ 113.430432][ T8] usb 1-1: No valid video chain found. [ 113.442959][ T8] usb 1-1: selecting invalid altsetting 0 [ 113.472003][ T6609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.535127][ T8] usb 1-1: selecting invalid altsetting 0 [ 113.542148][ T8] usbtest: probe of 1-1:220.1 failed with error -22 [ 113.599007][ T8] usb 1-1: USB disconnect, device number 4 [ 113.687480][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.993151][ T6631] delete_channel: no stack [ 114.114914][ T1186] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 114.136952][ T6618] loop1: detected capacity change from 0 to 32768 [ 114.336552][ T1186] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 114.362559][ T1186] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 114.384166][ T1186] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 114.423257][ T1186] usb 3-1: config 220 has no interface number 2 [ 114.442565][ T1186] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 114.464903][ T2917] wlan1: Creating new IBSS network, BSSID 16:3b:ad:ba:35:96 [ 114.469246][ T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 114.507154][ T1186] usb 3-1: config 220 interface 0 has no altsetting 0 [ 114.525352][ T6642] loop0: detected capacity change from 0 to 512 [ 114.531089][ T1186] usb 3-1: config 220 interface 76 has no altsetting 0 [ 114.552878][ T6642] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 114.564511][ T1186] usb 3-1: config 220 interface 1 has no altsetting 0 [ 114.567302][ T1186] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 114.594640][ T1186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.615304][ T1186] usb 3-1: Product: syz [ 114.620595][ T6642] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=00c2] [ 114.631334][ T1186] usb 3-1: Manufacturer: syz [ 114.638094][ T1186] usb 3-1: SerialNumber: syz [ 114.663155][ T6642] System zones: 0-2, 18-18, 34-34 [ 114.670672][ T6642] EXT4-fs (loop0): orphan cleanup on readonly fs [ 114.686652][ T6642] EXT4-fs error (device loop0): ext4_quota_enable:7131: inode #15: comm syz.0.322: iget: bad i_size value: 360287970189639690 [ 114.701479][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 114.712732][ T6642] EXT4-fs error (device loop0): ext4_quota_enable:7134: comm syz.0.322: Bad quota inode: 15, type: 2 [ 114.728364][ T27] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 114.738864][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.747882][ T27] usb 4-1: Product: syz [ 114.752240][ T27] usb 4-1: Manufacturer: syz [ 114.754078][ T6642] EXT4-fs warning (device loop0): ext4_enable_quotas:7175: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 114.757264][ T27] usb 4-1: SerialNumber: syz [ 114.760187][ T27] usb 4-1: config 0 descriptor?? [ 114.804099][ T6642] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 114.821394][ T27] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 114.838742][ T6642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.861755][ T27] dvb-usb: bulk message failed: -22 (2/0) [ 114.882882][ T1186] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 114.893419][ T1186] usb 3-1: No valid video chain found. [ 114.900311][ T1186] usb 3-1: selecting invalid altsetting 0 [ 114.917462][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 114.951763][ T1186] usb 3-1: selecting invalid altsetting 0 [ 114.965035][ T1186] usbtest: probe of 3-1:220.1 failed with error -22 [ 114.972827][ T27] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 115.014062][ T1186] usb 3-1: USB disconnect, device number 6 [ 115.027507][ T6635] dvb-usb: bulk message failed: -22 (3/0) [ 115.034852][ T27] usb 4-1: media controller created [ 115.119284][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.132748][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.165736][ T27] cxusb: set interface failed [ 115.172843][ T27] dvb-usb: bulk message failed: -22 (1/0) [ 115.313771][ T27] DVB: Unable to find symbol mt352_attach() [ 115.334197][ T6652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.324'. [ 115.336248][ T27] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 115.465315][ T27] rc_core: IR keymap rc-dvico-portable not found [ 115.492975][ T27] Registered IR keymap rc-empty [ 115.508249][ T27] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 115.536458][ T27] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input8 [ 115.605707][ T27] dvb-usb: schedule remote query interval to 100 msecs. [ 115.645066][ T27] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 115.690486][ T27] usb 4-1: USB disconnect, device number 5 [ 115.905046][ T27] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 116.039086][ T6669] loop1: detected capacity change from 0 to 256 [ 116.131795][ T6669] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 116.179139][ T6669] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 116.294213][ T6650] loop0: detected capacity change from 0 to 40427 [ 116.321776][ T6650] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 116.344583][ T8] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 116.394150][ T6650] F2FS-fs (loop0): invalid crc value [ 116.430426][ T6650] F2FS-fs (loop0): Found nat_bits in checkpoint [ 116.554726][ T6650] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 116.570889][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 116.593900][ T8] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 116.609571][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.635567][ T8] usb 3-1: config 0 descriptor?? [ 116.658506][ T6671] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 116.731428][ T5788] syz-executor: attempt to access beyond end of device [ 116.731428][ T5788] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.791438][ T5788] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 116.797337][ T6667] loop3: detected capacity change from 0 to 32768 [ 117.069158][ T6667] (syz.3.330,6667,0):ocfs2_load_local_alloc:338 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2! [ 117.069158][ T6667] found = 0, set = 0, taken = 0, off = 1280 [ 117.124582][ T6667] (syz.3.330,6667,1):ocfs2_load_local_alloc:355 ERROR: status = -22 [ 117.139665][ T8] elan 0003:04F3:0755.0006: unknown main item tag 0x0 [ 117.148258][ T6667] (syz.3.330,6667,1):ocfs2_check_volume:2462 ERROR: status = -22 [ 117.174557][ T6667] (syz.3.330,6667,1):ocfs2_check_volume:2490 ERROR: status = -22 [ 117.182701][ T8] elan 0003:04F3:0755.0006: item fetching failed at offset 3/5 [ 117.192987][ T6667] (syz.3.330,6667,1):ocfs2_mount_volume:1822 ERROR: status = -22 [ 117.203149][ T8] elan 0003:04F3:0755.0006: Hid Parse failed [ 117.222690][ T8] elan: probe of 0003:04F3:0755.0006 failed with error -22 [ 117.224736][ T6683] loop1: detected capacity change from 0 to 128 [ 117.304227][ T6667] (syz.3.330,6667,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 117.339617][ T6683] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 117.352817][ T8] usb 3-1: USB disconnect, device number 7 [ 117.467276][ T6683] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.673927][ T6691] loop0: detected capacity change from 0 to 4096 [ 117.693567][ T5792] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.883320][ T6693] loop3: detected capacity change from 0 to 4096 [ 117.936022][ T6691] ntfs3: loop0: ino=21, "file1" fallocate(0x11) is not supported [ 117.950959][ T6693] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 118.545822][ T6709] netlink: 116 bytes leftover after parsing attributes in process `syz.0.347'. [ 118.614711][ T27] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 118.824629][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 118.845254][ T27] usb 3-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 118.877045][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.913285][ T27] usb 3-1: Product: syz [ 118.929913][ T27] usb 3-1: Manufacturer: syz [ 118.942208][ T27] usb 3-1: SerialNumber: syz [ 118.963655][ T27] usb 3-1: config 0 descriptor?? [ 118.981218][ T27] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 119.183031][ T27] gspca_sn9c2028: read1 error -32 [ 119.396907][ T27] gspca_sn9c2028: read1 error -71 [ 119.403333][ T27] sn9c2028: probe of 3-1:0.0 failed with error -71 [ 119.423526][ T27] usb 3-1: USB disconnect, device number 8 [ 119.511964][ T6733] loop1: detected capacity change from 0 to 32768 [ 119.541692][ T6733] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 119.609507][ T28] audit: type=1326 audit(1758647866.526:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.3.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af838eec9 code=0x7fc00000 [ 119.712226][ T6733] XFS (loop1): Ending clean mount [ 119.751195][ T6733] XFS (loop1): Quotacheck needed: Please wait. [ 119.826945][ T6733] XFS (loop1): Quotacheck: Done. [ 120.117484][ T5792] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 121.282914][ T6786] loop0: detected capacity change from 0 to 8192 [ 121.332777][ T6786] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 121.360870][ T6786] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 121.378169][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 121.396218][ T6786] REISERFS (device loop0): using journaled data mode [ 121.407110][ T6786] reiserfs: using flush barriers [ 121.431749][ T6786] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 121.451969][ T6786] REISERFS (device loop0): checking transaction log (loop0) [ 121.468941][ T6786] REISERFS (device loop0): Using r5 hash to sort names [ 121.486730][ T6786] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 121.509771][ T6786] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 121.542821][ T6786] REISERFS error (device loop0): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 121.560957][ T6786] REISERFS (device loop0): Remounting filesystem read-only [ 121.605182][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 121.621735][ T27] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 121.643396][ T28] audit: type=1326 audit(1758647868.546:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9318eec9 code=0x7ffc0000 [ 121.674519][ T27] usb 2-1: config 0 has no interface number 0 [ 121.704312][ T27] usb 2-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 121.718020][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.730664][ T28] audit: type=1326 audit(1758647868.556:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c9318d710 code=0x7ffc0000 [ 121.778290][ T27] usb 2-1: Product: syz [ 121.782754][ T27] usb 2-1: Manufacturer: syz [ 121.798728][ T27] usb 2-1: SerialNumber: syz [ 121.826759][ T28] audit: type=1326 audit(1758647868.556:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9318eec9 code=0x7ffc0000 [ 121.858009][ T27] usb 2-1: config 0 descriptor?? [ 121.882875][ T27] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.69/input/input9 [ 121.923033][ T28] audit: type=1326 audit(1758647868.556:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9318eec9 code=0x7ffc0000 [ 121.947875][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.086538][ T5140] bcm5974 2-1:0.69: could not read from device [ 122.110109][ T27] usb 2-1: USB disconnect, device number 3 [ 122.125029][ T5140] bcm5974 2-1:0.69: could not read from device [ 122.226953][ T6808] loop2: detected capacity change from 0 to 64 [ 122.256749][ T6808] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 122.546578][ T6819] loop3: detected capacity change from 0 to 24 [ 122.564817][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 122.687066][ T6821] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.396'. [ 122.764503][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 122.788945][ T23] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 122.809791][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.834880][ T23] usb 3-1: Product: syz [ 122.839459][ T23] usb 3-1: Manufacturer: syz [ 122.856655][ T23] usb 3-1: SerialNumber: syz [ 122.875685][ T23] usb 3-1: config 0 descriptor?? [ 123.086824][ T23] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 123.105102][ T23] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 123.291469][ T23] usb 3-1: USB disconnect, device number 9 [ 123.800265][ T6840] loop3: detected capacity change from 0 to 40427 [ 123.823390][ T6840] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 123.833406][ T6840] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 123.877614][ T6840] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 123.918379][ T6840] F2FS-fs (loop3): Found nat_bits in checkpoint [ 124.054578][ T6840] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 124.062022][ T6840] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 124.074534][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 124.090320][ T6865] loop1: detected capacity change from 0 to 64 [ 124.279006][ T23] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 124.313626][ T23] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 124.335638][ T23] usb 1-1: config 0 has no interface number 0 [ 124.378145][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 124.401501][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.428589][ T23] usb 1-1: Product: syz [ 124.432898][ T23] usb 1-1: Manufacturer: syz [ 124.454664][ T23] usb 1-1: SerialNumber: syz [ 124.487616][ T23] usb 1-1: config 0 descriptor?? [ 124.726620][ T6878] sg_read: process 222 (syz.1.421) changed security contexts after opening file descriptor, this is not allowed. [ 124.731756][ T6877] loop2: detected capacity change from 0 to 256 [ 124.813363][ T6877] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 124.909415][ T23] usb 1-1: Found UVC 0.00 device syz (046d:0823) [ 124.924793][ T23] usb 1-1: No valid video chain found. [ 125.119514][ T23] usb 1-1: USB disconnect, device number 5 [ 125.549036][ T6902] loop1: detected capacity change from 0 to 512 [ 125.574210][ T6902] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.431: Parent and EA inode have the same ino 15 [ 125.637336][ T6902] EXT4-fs (loop1): 1 orphan inode deleted [ 125.655014][ T6902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.715835][ T6902] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.431: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 125.852325][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.900472][ T6896] loop2: detected capacity change from 0 to 32768 [ 125.944732][ T6896] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.428 (6896) [ 126.040757][ T6896] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 126.069977][ T6896] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 126.124588][ T6896] BTRFS info (device loop2): force zlib compression, level 3 [ 126.132062][ T6896] BTRFS info (device loop2): force clearing of disk cache [ 126.185071][ T6896] BTRFS info (device loop2): setting nodatasum [ 126.191418][ T6896] BTRFS info (device loop2): disabling tree log [ 126.203152][ T6916] loop0: detected capacity change from 0 to 1764 [ 126.245070][ T6896] BTRFS info (device loop2): enabling disk space caching [ 126.279357][ T6896] BTRFS info (device loop2): disk space caching is enabled [ 126.387276][ T6929] loop3: detected capacity change from 0 to 128 [ 126.534615][ T6896] BTRFS info (device loop2): auto enabling async discard [ 126.593994][ T6896] BTRFS info (device loop2): rebuilding free space tree [ 126.680998][ T6896] BTRFS info (device loop2): disabling free space tree [ 126.721706][ T6896] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 126.765388][ T6896] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 126.782224][ T6946] loop0: detected capacity change from 0 to 1024 [ 126.820974][ T6948] ALSA: seq fatal error: cannot create timer (-22) [ 126.942888][ T6896] BTRFS warning (device loop2): can't set the compress_lzo feature bit while mounted [ 127.060819][ T6952] netlink: 20 bytes leftover after parsing attributes in process `syz.1.447'. [ 127.093671][ T5783] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 127.299742][ T6961] loop3: detected capacity change from 0 to 512 [ 127.414546][ T5775] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 127.448021][ T6961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.524720][ T6961] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.664720][ T5775] usb 1-1: Using ep0 maxpacket: 8 [ 127.698016][ T5775] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 127.714642][ T5775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.726610][ T6961] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 127.732379][ T5775] usb 1-1: Product: syz [ 127.750817][ T5775] usb 1-1: Manufacturer: syz [ 127.760963][ T5775] usb 1-1: SerialNumber: syz [ 127.789021][ T5775] usb 1-1: config 0 descriptor?? [ 127.842019][ T5775] gspca_main: sq905-2.14.0 probing 2770:9120 [ 127.904571][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.072622][ T6985] loop3: detected capacity change from 0 to 1024 [ 128.247134][ T6989] loop2: detected capacity change from 0 to 1024 [ 128.253273][ T2917] hfsplus: b-tree write err: -5, ino 4 [ 128.451806][ T5775] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 128.473563][ T5775] sq905: probe of 1-1:0.0 failed with error -71 [ 128.497334][ T5775] usb 1-1: USB disconnect, device number 6 [ 128.821472][ T7007] loop3: detected capacity change from 0 to 1024 [ 128.974980][ T1073] hfsplus: b-tree write err: -5, ino 4 [ 129.504343][ T7005] loop2: detected capacity change from 0 to 32768 [ 129.554668][ T7025] netlink: 28 bytes leftover after parsing attributes in process `syz.3.479'. [ 129.593115][ T7025] netlink: 28 bytes leftover after parsing attributes in process `syz.3.479'. [ 129.630741][ T7005] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 129.705626][ T7005] XFS (loop2): Ending clean mount [ 129.724316][ T7005] XFS (loop2): Quotacheck needed: Please wait. [ 129.853164][ T7005] XFS (loop2): Quotacheck: Done. [ 129.975010][ T7049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.484'. [ 130.075592][ T5783] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 131.008170][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.496'. [ 131.041944][ T7051] loop0: detected capacity change from 0 to 32768 [ 131.064649][ T7051] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.485 (7051) [ 131.133978][ T7051] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.173197][ T7051] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 131.218151][ T7051] BTRFS info (device loop0): metadata ratio 2 [ 131.224871][ T1186] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 131.254177][ T7051] BTRFS info (device loop0): allowing degraded mounts [ 131.271893][ T7051] BTRFS info (device loop0): force zlib compression, level 3 [ 131.296219][ T7051] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 131.328085][ T7051] BTRFS info (device loop0): use zstd compression, level 3 [ 131.344604][ T7051] BTRFS info (device loop0): force clearing of disk cache [ 131.362496][ T7051] BTRFS info (device loop0): turning on flush-on-commit [ 131.384475][ T7051] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 131.420687][ T7051] BTRFS info (device loop0): trying to use backup root at mount time [ 131.451350][ T1186] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.454610][ T7051] BTRFS info (device loop0): using free space tree [ 131.471842][ T1186] usb 2-1: config 0 interface 0 has no altsetting 0 [ 131.495248][ T1186] usb 2-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 131.536491][ T1186] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.580519][ T1186] usb 2-1: config 0 descriptor?? [ 131.654841][ T7051] BTRFS info (device loop0): enabling ssd optimizations [ 131.681648][ T7051] BTRFS info (device loop0): rebuilding free space tree [ 132.050464][ T1186] wacom 0003:056A:00BA.0007: unbalanced delimiter at end of report description [ 132.054043][ T5788] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 132.106852][ T1186] wacom 0003:056A:00BA.0007: parse failed [ 132.112887][ T1186] wacom: probe of 0003:056A:00BA.0007 failed with error -22 [ 132.161102][ T7088] loop3: detected capacity change from 0 to 32768 [ 132.276554][ T5830] usb 2-1: USB disconnect, device number 4 [ 132.374928][ T7088] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 132.483284][ T7090] loop2: detected capacity change from 0 to 40427 [ 132.504376][ T7088] XFS (loop3): Ending clean mount [ 132.533457][ T7088] XFS (loop3): Quotacheck needed: Please wait. [ 132.539961][ T7090] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 132.567304][ T7090] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 132.632481][ T7090] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 132.676827][ T7088] XFS (loop3): Quotacheck: Done. [ 132.683670][ T7090] F2FS-fs (loop2): Found nat_bits in checkpoint [ 132.858579][ T7090] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 132.900779][ T7090] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 133.043312][ T5786] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 133.430924][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.449524][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.944032][ T7138] loop1: detected capacity change from 0 to 32768 [ 134.049651][ T7145] loop3: detected capacity change from 0 to 8192 [ 134.074118][ T7147] loop2: detected capacity change from 0 to 1024 [ 134.078044][ T7145] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 134.102725][ T7145] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 134.115002][ T7145] REISERFS (device loop3): using ordered data mode [ 134.123612][ T7145] reiserfs: using flush barriers [ 134.154266][ T7145] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 134.161334][ T7141] loop0: detected capacity change from 0 to 32768 [ 134.173448][ T7145] REISERFS (device loop3): checking transaction log (loop3) [ 134.190679][ T7145] REISERFS (device loop3): Using r5 hash to sort names [ 134.199583][ T7145] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 134.214679][ T7145] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 134.237266][ T7145] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 134.242527][ T7147] hfsplus: bad catalog entry type [ 134.346538][ T7141] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 134.624935][ T7141] XFS (loop0): Ending clean mount [ 134.686347][ T7160] loop2: detected capacity change from 0 to 128 [ 134.756195][ T5788] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 134.775724][ T7160] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 134.916859][ T7160] hpfs: filesystem error: improperly stopped [ 134.924318][ T7160] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 134.938119][ T7160] hpfs: You really don't want any checks? You are crazy... [ 135.007717][ T7160] hpfs: hpfs_map_sector(): read error [ 135.017695][ T7160] hpfs: code page support is disabled [ 135.059518][ T7160] hpfs: hpfs_map_4sectors(): unaligned read [ 135.082542][ T7160] hpfs: hpfs_map_4sectors(): unaligned read [ 135.138944][ T7160] hpfs: filesystem error: unable to find root dir [ 135.501344][ T7176] loop0: detected capacity change from 0 to 256 [ 135.568571][ T7176] FAT-fs (loop0): Directory bread(block 64) failed [ 135.587712][ T7176] FAT-fs (loop0): Directory bread(block 65) failed [ 135.604937][ T7176] FAT-fs (loop0): Directory bread(block 66) failed [ 135.624363][ T7176] FAT-fs (loop0): Directory bread(block 67) failed [ 135.634085][ T7176] FAT-fs (loop0): Directory bread(block 68) failed [ 135.639040][ T7178] loop2: detected capacity change from 0 to 4096 [ 135.662257][ T7180] loop1: detected capacity change from 0 to 2048 [ 135.665674][ T7178] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 135.674545][ T7176] FAT-fs (loop0): Directory bread(block 69) failed [ 135.729731][ T7176] FAT-fs (loop0): Directory bread(block 70) failed [ 135.750975][ T7176] FAT-fs (loop0): Directory bread(block 71) failed [ 135.758556][ T7176] FAT-fs (loop0): Directory bread(block 72) failed [ 135.766029][ T7180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.766258][ T7176] FAT-fs (loop0): Directory bread(block 73) failed [ 135.787864][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 135.834847][ T7178] ntfs: volume version 3.1. [ 135.875888][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.983985][ T27] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 136.007525][ T27] usb 4-1: config 0 has no interface number 0 [ 136.018744][ T27] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.030980][ T27] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.042569][ T27] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 136.052809][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.075237][ T27] usb 4-1: config 0 descriptor?? [ 136.291115][ T7188] loop1: detected capacity change from 0 to 4096 [ 136.551188][ T27] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.0008/input/input10 [ 136.819785][ T27] holtek_kbd 0003:04D9:A055.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1 [ 136.906210][ T27] usb 4-1: USB disconnect, device number 6 [ 137.038725][ T7196] fido_id[7196]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 137.170802][ T7191] loop2: detected capacity change from 0 to 32768 [ 137.181415][ T7191] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.523 (7191) [ 137.231159][ T7191] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 137.245920][ T7191] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 137.255961][ T7191] BTRFS info (device loop2): turning on sync discard [ 137.268041][ T7191] BTRFS info (device loop2): enabling disk space caching [ 137.276679][ T7191] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 137.302695][ T7191] BTRFS info (device loop2): trying to use backup root at mount time [ 137.330644][ T7191] BTRFS info (device loop2): force clearing of disk cache [ 137.374480][ T7191] BTRFS info (device loop2): disk space caching is enabled [ 137.457647][ T7191] BTRFS info (device loop2): rebuilding free space tree [ 137.488238][ T7191] BTRFS info (device loop2): disabling free space tree [ 137.504838][ T7191] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 137.528686][ T7191] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 137.645475][ T7225] netlink: 16 bytes leftover after parsing attributes in process `syz.1.531'. [ 137.718857][ T7227] netlink: 24 bytes leftover after parsing attributes in process `syz.3.532'. [ 137.781861][ T5783] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 138.163947][ T7241] program syz.0.536 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.354602][ T965] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 138.554888][ T965] usb 3-1: Using ep0 maxpacket: 8 [ 138.566704][ T965] usb 3-1: unable to get BOS descriptor or descriptor too short [ 138.595587][ T965] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 138.604365][ T965] usb 3-1: config 4 has no interface number 0 [ 138.624677][ T965] usb 3-1: config 4 interface 30 has no altsetting 0 [ 138.652878][ T965] usb 3-1: string descriptor 0 read error: -22 [ 138.660142][ T965] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 138.703372][ T965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.740231][ T7258] loop1: detected capacity change from 0 to 1024 [ 138.773076][ T965] dw2102: su3000_identify_state [ 138.786275][ T965] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 138.794167][ T965] dw2102: su3000_power_ctrl: 1, initialized 0 [ 138.833725][ T965] dvb-usb: bulk message failed: -22 (2/0) [ 138.847146][ T965] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 138.886125][ T965] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 138.925760][ T965] usb 3-1: media controller created [ 138.934679][ T965] dvb-usb: bulk message failed: -22 (6/0) [ 138.941066][ T965] dw2102: i2c transfer failed. [ 138.970464][ T965] dvb-usb: bulk message failed: -22 (6/0) [ 138.980663][ T965] dw2102: i2c transfer failed. [ 138.986899][ T58] hfsplus: b-tree write err: -5, ino 4 [ 138.992759][ T965] dvb-usb: bulk message failed: -22 (6/0) [ 139.002006][ T965] dw2102: i2c transfer failed. [ 139.007332][ T965] dvb-usb: bulk message failed: -22 (6/0) [ 139.013583][ T965] dw2102: i2c transfer failed. [ 139.018829][ T965] dvb-usb: bulk message failed: -22 (6/0) [ 139.025820][ T965] dw2102: i2c transfer failed. [ 139.030744][ T965] dvb-usb: bulk message failed: -22 (6/0) [ 139.044486][ T965] dw2102: i2c transfer failed. [ 139.056436][ T965] dvb-usb: MAC address: 02:02:02:02:02:02 [ 139.118758][ T965] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.241657][ T965] dvb-usb: bulk message failed: -22 (3/0) [ 139.289417][ T965] dw2102: command 0x0e transfer failed. [ 139.289433][ T965] dvb-usb: bulk message failed: -22 (3/0) [ 139.289473][ T965] dw2102: command 0x0e transfer failed. [ 139.604572][ T965] dvb-usb: bulk message failed: -22 (3/0) [ 139.610571][ T965] dw2102: command 0x0e transfer failed. [ 139.634523][ T965] dvb-usb: bulk message failed: -22 (3/0) [ 139.644466][ T965] dw2102: command 0x0e transfer failed. [ 139.650738][ T965] dvb-usb: bulk message failed: -22 (1/0) [ 139.668784][ T965] dw2102: command 0x51 transfer failed. [ 139.687643][ T965] dvb-usb: bulk message failed: -22 (5/0) [ 139.693520][ T965] dw2102: i2c probe for address 0x68 failed. [ 139.708889][ T965] dvb-usb: bulk message failed: -22 (5/0) [ 139.714940][ T965] dw2102: i2c probe for address 0x69 failed. [ 139.729041][ T965] dvb-usb: bulk message failed: -22 (5/0) [ 139.735565][ T965] dw2102: i2c probe for address 0x6a failed. [ 139.742195][ T965] dw2102: probing for demodulator failed. Is the external power switched on? [ 139.776631][ T965] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 139.779353][ T7289] loop0: detected capacity change from 0 to 128 [ 139.838677][ T7289] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 139.855307][ T7289] hpfs: filesystem error: improperly stopped [ 139.879579][ T7289] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 139.915044][ T7289] hpfs: You really don't want any checks? You are crazy... [ 139.954975][ T7289] hpfs: hpfs_map_sector(): read error [ 139.964662][ T965] rc_core: IR keymap rc-tt-1500 not found [ 139.970667][ T7289] hpfs: code page support is disabled [ 139.973896][ T965] Registered IR keymap rc-empty [ 139.985904][ T7289] hpfs: hpfs_map_4sectors(): unaligned read [ 139.994226][ T965] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 140.004663][ T7289] hpfs: hpfs_map_4sectors(): unaligned read [ 140.010625][ T7289] hpfs: filesystem error: unable to find root dir [ 140.022268][ T965] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input11 [ 140.054220][ T965] dvb-usb: schedule remote query interval to 250 msecs. [ 140.071256][ T7277] loop3: detected capacity change from 0 to 32768 [ 140.073716][ T965] dw2102: su3000_power_ctrl: 0, initialized 1 [ 140.122430][ T965] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 140.197773][ T965] usb 3-1: USB disconnect, device number 10 [ 140.375719][ T965] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 140.478597][ T7292] loop0: detected capacity change from 0 to 4096 [ 140.508654][ T7292] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 140.539257][ T1073] Bluetooth: hci4: Frame reassembly failed (-84) [ 140.635968][ T7288] loop2: detected capacity change from 0 to 32768 [ 140.711619][ T7288] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 140.795700][ T7292] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 140.808199][ T7296] loop1: detected capacity change from 0 to 4096 [ 140.848878][ T7296] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 140.867222][ T7288] XFS (loop2): Ending clean mount [ 140.887159][ T1073] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 140.907840][ T7288] XFS (loop2): Quotacheck needed: Please wait. [ 140.918443][ T5788] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 140.959584][ T5788] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 140.995112][ T5788] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 141.002888][ T58] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 141.010547][ T7296] ntfs: volume version 3.1. [ 141.014785][ T7288] XFS (loop2): Quotacheck: Done. [ 141.191270][ T5783] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 141.504785][ T965] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 141.652289][ T7310] loop2: detected capacity change from 0 to 32768 [ 141.662653][ T7310] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.558 (7310) [ 141.681043][ T7310] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 141.691575][ T7310] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 141.698905][ T965] usb 1-1: Using ep0 maxpacket: 16 [ 141.700750][ T7310] BTRFS info (device loop2): turning on sync discard [ 141.713544][ T7310] BTRFS info (device loop2): setting nodatacow, compression disabled [ 141.722636][ T7310] BTRFS info (device loop2): turning off barriers [ 141.723427][ T965] usb 1-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 141.729868][ T7310] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 141.756305][ T965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.757034][ T7310] BTRFS info (device loop2): trying to use backup root at mount time [ 141.768473][ T965] usb 1-1: Product: syz [ 141.779137][ T7310] BTRFS info (device loop2): metadata ratio 3 [ 141.779966][ T965] usb 1-1: Manufacturer: syz [ 141.789370][ T7310] BTRFS info (device loop2): enabling auto defrag [ 141.797352][ T7310] BTRFS info (device loop2): doing ref verification [ 141.804556][ T965] usb 1-1: SerialNumber: syz [ 141.810302][ T7310] BTRFS info (device loop2): max_inline at 0 [ 141.811257][ T965] usb 1-1: config 0 descriptor?? [ 141.816966][ T7310] BTRFS info (device loop2): using free space tree [ 141.839048][ T965] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 141.883011][ T1322] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 141.897949][ T7310] BTRFS error (device loop2): failed to load root extent [ 141.906063][ T7310] BTRFS warning (device loop2): try to load backup roots slot 1 [ 141.919497][ T11] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 141.937697][ T7310] BTRFS warning (device loop2): couldn't read tree root [ 141.947965][ T7310] BTRFS warning (device loop2): try to load backup roots slot 2 [ 141.958297][ T11] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 141.974299][ T7310] BTRFS warning (device loop2): couldn't read tree root [ 141.983021][ T7310] BTRFS warning (device loop2): try to load backup roots slot 3 [ 142.008210][ T7310] BTRFS info (device loop2): enabling ssd optimizations [ 142.020603][ T7310] BTRFS info (device loop2): rebuilding free space tree [ 142.056490][ T965] gspca_sn9c2028: read1 error -32 [ 142.057539][ T7310] BTRFS info (device loop2): checking UUID tree [ 142.136426][ T5783] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 142.279337][ T965] gspca_sn9c2028: read1 error -71 [ 142.291051][ T965] sn9c2028: probe of 1-1:0.0 failed with error -71 [ 142.332010][ T965] usb 1-1: USB disconnect, device number 7 [ 142.545599][ T5794] Bluetooth: hci4: command 0x1003 tx timeout [ 142.552894][ T5791] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 142.585082][ T2917] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 142.986325][ T7341] loop3: detected capacity change from 0 to 128 [ 143.029963][ T7341] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 143.082428][ T7341] hpfs: filesystem error: improperly stopped [ 143.089128][ T7341] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 143.098136][ T7332] loop1: detected capacity change from 0 to 32768 [ 143.104989][ T7341] hpfs: You really don't want any checks? You are crazy... [ 143.114315][ T7341] hpfs: hpfs_map_sector(): read error [ 143.121474][ T7341] hpfs: code page support is disabled [ 143.128471][ T7341] hpfs: hpfs_map_4sectors(): unaligned read [ 143.136603][ T7341] hpfs: hpfs_map_4sectors(): unaligned read [ 143.143164][ T7341] hpfs: filesystem error: unable to find root dir [ 143.170396][ T7332] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 143.352819][ T7332] XFS (loop1): Ending clean mount [ 143.488720][ T5792] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 143.636774][ T7357] loop3: detected capacity change from 0 to 256 [ 143.743391][ T7357] FAT-fs (loop3): Directory bread(block 64) failed [ 143.776302][ T7357] FAT-fs (loop3): Directory bread(block 65) failed [ 143.804704][ T7357] FAT-fs (loop3): Directory bread(block 66) failed [ 143.814690][ T7357] FAT-fs (loop3): Directory bread(block 67) failed [ 143.830234][ T7353] loop0: detected capacity change from 0 to 32768 [ 143.841904][ T7357] FAT-fs (loop3): Directory bread(block 68) failed [ 143.854310][ T7357] FAT-fs (loop3): Directory bread(block 69) failed [ 143.870008][ T7357] FAT-fs (loop3): Directory bread(block 70) failed [ 143.893974][ T7357] FAT-fs (loop3): Directory bread(block 71) failed [ 143.943360][ T7357] FAT-fs (loop3): Directory bread(block 72) failed [ 143.959814][ T7357] FAT-fs (loop3): Directory bread(block 73) failed [ 144.698121][ T7367] loop0: detected capacity change from 0 to 4096 [ 144.715619][ T7367] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 144.817469][ T7367] ntfs: volume version 3.1. [ 144.914644][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 145.115141][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 145.128909][ T8] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 145.149344][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.164456][ T8] usb 4-1: Product: syz [ 145.169027][ T8] usb 4-1: Manufacturer: syz [ 145.176616][ T8] usb 4-1: SerialNumber: syz [ 145.190535][ T8] usb 4-1: config 0 descriptor?? [ 145.207680][ T8] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 145.411265][ T8] gspca_sn9c2028: read1 error -32 [ 145.619111][ T8] gspca_sn9c2028: read1 error -71 [ 145.625961][ T8] sn9c2028: probe of 4-1:0.0 failed with error -71 [ 145.634933][ T8] usb 4-1: USB disconnect, device number 7 [ 146.644797][ T7377] loop2: detected capacity change from 0 to 32768 [ 146.666825][ T7377] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 146.740409][ T7377] XFS (loop2): Ending clean mount [ 146.749580][ T7377] XFS (loop2): Quotacheck needed: Please wait. [ 146.807734][ T7377] XFS (loop2): Quotacheck: Done. [ 146.905471][ T5783] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 147.571008][ T7416] loop1: detected capacity change from 0 to 24 [ 147.923063][ T7406] loop0: detected capacity change from 0 to 32768 [ 147.939724][ T7410] loop2: detected capacity change from 0 to 32768 [ 147.964586][ T7406] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 148.001070][ T7410] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 148.122341][ T7410] XFS (loop2): Ending clean mount [ 148.170325][ T7406] XFS (loop0): Ending clean mount [ 148.182626][ T7406] XFS (loop0): Quotacheck needed: Please wait. [ 148.232942][ T7406] XFS (loop0): Quotacheck: Done. [ 148.252665][ T5783] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 148.601292][ T5788] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 149.086400][ T7454] loop3: detected capacity change from 0 to 16 [ 149.093758][ T7454] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 149.667794][ T7468] loop3: detected capacity change from 0 to 32768 [ 149.699477][ T7468] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 149.761591][ T7468] XFS (loop3): Ending clean mount [ 149.772378][ T7468] XFS (loop3): Quotacheck needed: Please wait. [ 149.808046][ T7468] XFS (loop3): Quotacheck: Done. [ 149.901012][ T5786] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 150.132545][ T7480] loop2: detected capacity change from 0 to 512 [ 150.176464][ T7480] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.614: Parent and EA inode have the same ino 15 [ 150.286041][ T7480] EXT4-fs (loop2): 1 orphan inode deleted [ 150.293740][ T7480] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.327324][ T7486] loop0: detected capacity change from 0 to 64 [ 150.375547][ T7480] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.614: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 150.535171][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.070912][ T7494] loop3: detected capacity change from 0 to 32768 [ 151.104827][ T7185] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 151.125572][ T7494] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 151.254298][ T7494] XFS (loop3): Ending clean mount [ 151.282017][ T7494] XFS (loop3): Quotacheck needed: Please wait. [ 151.294549][ T7185] usb 1-1: Using ep0 maxpacket: 16 [ 151.320255][ T7185] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 151.339344][ T7185] usb 1-1: config 0 has no interface number 0 [ 151.358672][ T7185] usb 1-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 151.383319][ T7185] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.420886][ T7185] usb 1-1: Product: syz [ 151.424123][ T7494] XFS (loop3): Quotacheck: Done. [ 151.426134][ T7185] usb 1-1: Manufacturer: syz [ 151.436632][ T7185] usb 1-1: SerialNumber: syz [ 151.444749][ T7185] usb 1-1: config 0 descriptor?? [ 151.462303][ T7185] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.69/input/input12 [ 151.689124][ T5140] bcm5974 1-1:0.69: could not read from device [ 151.788199][ T5786] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 151.797986][ T5140] bcm5974 1-1:0.69: could not read from device [ 151.809806][ T5140] bcm5974 1-1:0.69: could not read from device [ 151.810618][ T7185] usb 1-1: USB disconnect, device number 8 [ 151.827935][ T5140] bcm5974 1-1:0.69: could not read from device [ 152.082262][ T7517] ALSA: seq fatal error: cannot create timer (-22) [ 152.295325][ T7524] loop3: detected capacity change from 0 to 512 [ 152.394355][ T7524] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.628: Parent and EA inode have the same ino 15 [ 152.494291][ T7524] EXT4-fs (loop3): 1 orphan inode deleted [ 152.525724][ T7524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.590227][ T7533] loop2: detected capacity change from 0 to 1024 [ 152.620681][ T7524] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.3.628: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 152.667168][ T7533] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 152.755989][ T7533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.788217][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.959228][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.182979][ T7531] loop1: detected capacity change from 0 to 32768 [ 153.223039][ T28] audit: type=1800 audit(1758647900.136:15): pid=7531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.639" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 153.266783][ T7552] netlink: 16 bytes leftover after parsing attributes in process `syz.3.641'. [ 153.478650][ T7558] loop0: detected capacity change from 0 to 64 [ 153.516854][ T7560] loop2: detected capacity change from 0 to 16 [ 153.542683][ T7560] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 153.556606][ T28] audit: type=1800 audit(1758647900.476:16): pid=7558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.644" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 154.404891][ T7583] netlink: 'syz.2.656': attribute type 28 has an invalid length. [ 154.467749][ T7587] loop1: detected capacity change from 0 to 64 [ 155.259938][ T7602] netlink: 'syz.0.664': attribute type 2 has an invalid length. [ 155.294056][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.664'. [ 155.590431][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.668'. [ 155.624351][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.668'. [ 155.682897][ T7608] netlink: 'syz.3.668': attribute type 3 has an invalid length. [ 155.718155][ T8] IPVS: starting estimator thread 0... [ 155.774414][ C1] sched: RT throttling activated [ 155.854745][ T7613] IPVS: using max 19 ests per chain, 45600 per kthread [ 155.916264][ T7593] loop1: detected capacity change from 0 to 131072 [ 155.937635][ T7593] F2FS-fs (loop1): build fault injection attr: rate: 7, type: 0x7ffff [ 155.946091][ T7593] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x40004 [ 155.954676][ T7593] F2FS-fs (loop1): QUOTA feature is enabled, so ignore qf_name [ 155.976311][ T7593] F2FS-fs (loop1): invalid crc value [ 156.026901][ T7593] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x156/0x580 [ 156.039887][ T7593] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 156.057068][ T7593] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 156.075476][ T7593] F2FS-fs (loop1): Found nat_bits in checkpoint [ 156.110325][ T7593] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 156.121841][ T7593] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1d6/0x920 [ 156.122540][ T7624] loop2: detected capacity change from 0 to 1024 [ 156.156843][ T7593] F2FS-fs (loop1): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 156.195273][ T7593] F2FS-fs (loop1): Failed to read root inode [ 156.287947][ T7624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.324575][ T7624] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.419732][ T7624] EXT4-fs error (device loop2): ext4_free_blocks:6676: comm syz.2.674: Freeing blocks not in datazone - block = 0, count = 16 [ 156.474683][ T7624] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 156.668423][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.782206][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'. [ 156.978889][ T7645] netlink: 16 bytes leftover after parsing attributes in process `syz.2.682'. [ 157.278467][ T7656] loop2: detected capacity change from 0 to 1024 [ 157.346002][ T7656] EXT4-fs: Ignoring removed nobh option [ 157.370467][ T7656] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 157.472853][ T7656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.591147][ T7662] loop0: detected capacity change from 0 to 4096 [ 157.598466][ T7656] EXT4-fs warning (device loop2): ext4_resize_begin:74: won't resize using backup superblock at 1 [ 157.666440][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.756702][ T7662] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 157.789346][ T7662] ntfs3: loop0: Failed to load $Extend (-22). [ 157.820136][ T7662] ntfs3: loop0: Failed to initialize $Extend. [ 157.838782][ T7673] loop1: detected capacity change from 0 to 256 [ 157.866102][ T7673] exfat: Deprecated parameter 'utf8' [ 157.884530][ T7673] exfat: Deprecated parameter 'utf8' [ 157.890544][ T7662] ntfs3: loop0: ino=5, "/" directory corrupted [ 157.900341][ T7673] exfat: Deprecated parameter 'namecase' [ 157.912422][ T7662] ntfs3: loop0: ino=5, "/" directory corrupted [ 158.038069][ T7673] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 158.243919][ T7684] loop0: detected capacity change from 0 to 1024 [ 158.268383][ T7684] EXT4-fs: inline encryption not supported [ 158.274275][ T7684] EXT4-fs: Ignoring removed i_version option [ 158.317980][ T7684] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 158.525468][ T7684] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #3: block 1: comm syz.0.698: lblock 1 mapped to illegal pblock 1 (length 1) [ 158.570993][ T7684] Quota error (device loop0): write_blk: dquota write failed [ 158.601317][ T7684] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 158.630303][ T7684] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.698: Failed to acquire dquot type 0 [ 158.668139][ T7684] EXT4-fs error (device loop0): ext4_free_blocks:6676: comm syz.0.698: Freeing blocks not in datazone - block = 0, count = 4096 [ 158.685584][ T7697] loop2: detected capacity change from 0 to 256 [ 158.715928][ T7684] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.698: Invalid inode bitmap blk 0 in block_group 0 [ 158.745777][ T2917] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 158.774664][ T7684] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 158.798628][ T2917] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 158.814002][ T7684] EXT4-fs (loop0): 1 orphan inode deleted [ 158.835151][ T2917] EXT4-fs error (device loop0): ext4_release_dquot:6976: comm kworker/u4:7: Failed to release dquot type 0 [ 158.855826][ T7684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.930985][ T5783] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 158.953443][ T7703] loop3: detected capacity change from 0 to 512 [ 158.965691][ T7684] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 1: comm syz.0.698: lblock 1 mapped to illegal pblock 1 (length 1) [ 158.994608][ T5783] FAT-fs (loop2): Filesystem has been set read-only [ 159.006108][ T7703] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 159.013207][ T5783] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 159.034864][ T7684] Quota error (device loop0): find_tree_dqentry: Can't read quota tree block 1 [ 159.054940][ T7684] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 60928 [ 159.094097][ T7684] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.698: Failed to acquire dquot type 0 [ 159.341884][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.517026][ T7705] loop3: detected capacity change from 0 to 2048 [ 159.541799][ T7705] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.800850][ T7710] loop0: detected capacity change from 0 to 256 [ 159.823164][ T7711] sp0: Synchronizing with TNC [ 159.867322][ T7710] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 160.063465][ T1322] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.226028][ T1322] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.365429][ T1322] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.515609][ T1322] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.607430][ T7726] netlink: 16 bytes leftover after parsing attributes in process `syz.0.722'. [ 161.085634][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 161.108369][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 161.124920][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 161.172539][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 161.181148][ T5794] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 161.194881][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 161.238132][ T7746] Bluetooth: MGMT ver 1.22 [ 161.615142][ T7758] loop1: detected capacity change from 0 to 512 [ 161.670386][ T7758] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 161.737411][ T7758] EXT4-fs (loop1): 1 truncate cleaned up [ 161.757606][ T7758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.783901][ T7765] loop0: detected capacity change from 0 to 64 [ 161.866211][ T7758] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.733: corrupted in-inode xattr: overlapping e_value [ 161.927514][ T7765] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 161.956488][ T7758] EXT4-fs (loop1): Remounting filesystem read-only [ 161.963406][ T7758] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1781: inode #15: comm syz.1.733: unable to update i_inline_off [ 162.082871][ T7751] loop3: detected capacity change from 0 to 40427 [ 162.094751][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.140288][ T7751] F2FS-fs (loop3): invalid crc value [ 162.215447][ T7751] F2FS-fs (loop3): Found nat_bits in checkpoint [ 162.264787][ T965] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 162.337466][ T7751] F2FS-fs (loop3): Start checkpoint disabled! [ 162.378907][ T7751] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 162.445770][ T965] usb 1-1: Using ep0 maxpacket: 16 [ 162.494809][ T965] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 162.526020][ T965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.534250][ T965] usb 1-1: Product: syz [ 162.562536][ T965] usb 1-1: Manufacturer: syz [ 162.594626][ T965] usb 1-1: SerialNumber: syz [ 162.625090][ T965] usb 1-1: config 0 descriptor?? [ 162.849276][ T7738] chnl_net:caif_netlink_parms(): no params data found [ 162.856572][ T965] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 162.856592][ T965] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 163.071808][ T7790] loop1: detected capacity change from 0 to 1024 [ 163.110184][ T965] usb 1-1: USB disconnect, device number 9 [ 163.118505][ T7790] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 163.266009][ T5791] Bluetooth: hci0: command tx timeout [ 163.537815][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.744'. [ 163.897506][ T28] audit: type=1326 audit(1758647910.816:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7817 comm="syz.0.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055898eec9 code=0x7ffc0000 [ 163.977108][ T28] audit: type=1326 audit(1758647910.816:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7817 comm="syz.0.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055898eec9 code=0x7ffc0000 [ 163.979265][ T7738] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.011708][ T28] audit: type=1326 audit(1758647910.816:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7817 comm="syz.0.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f055898eec9 code=0x7ffc0000 [ 164.040712][ T7738] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.049683][ T7738] bridge_slave_0: entered allmulticast mode [ 164.057895][ T7738] bridge_slave_0: entered promiscuous mode [ 164.110422][ T28] audit: type=1326 audit(1758647910.816:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7817 comm="syz.0.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055898eec9 code=0x7ffc0000 [ 164.140477][ T7738] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.148457][ T28] audit: type=1326 audit(1758647910.816:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7817 comm="syz.0.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055898eec9 code=0x7ffc0000 [ 164.177299][ T28] audit: type=1326 audit(1758647910.816:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7817 comm="syz.0.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f055898eec9 code=0x7ffc0000 [ 164.201845][ T28] audit: type=1326 audit(1758647910.816:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7817 comm="syz.0.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055898eec9 code=0x7ffc0000 [ 164.228914][ T7738] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.255156][ T7738] bridge_slave_1: entered allmulticast mode [ 164.263005][ T7738] bridge_slave_1: entered promiscuous mode [ 164.378279][ T7826] loop3: detected capacity change from 0 to 4096 [ 164.403362][ T7826] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 164.511718][ T7738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.547902][ T7826] ntfs: volume version 3.1. [ 164.617136][ T7738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.786767][ T7738] team0: Port device team_slave_0 added [ 164.824279][ T1322] hsr_slave_0: left promiscuous mode [ 164.849351][ T1322] hsr_slave_1: left promiscuous mode [ 164.904716][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.934731][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.964359][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.988678][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.011275][ T1322] bridge_slave_1: left allmulticast mode [ 165.022592][ T1322] bridge_slave_1: left promiscuous mode [ 165.036721][ T1322] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.074959][ T1322] bridge_slave_0: left allmulticast mode [ 165.081484][ T1322] bridge_slave_0: left promiscuous mode [ 165.088305][ T1322] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.216564][ T1322] veth1_macvtap: left promiscuous mode [ 165.225530][ T1322] veth0_macvtap: left promiscuous mode [ 165.231799][ T1322] veth1_vlan: left promiscuous mode [ 165.251161][ T7855] loop3: detected capacity change from 0 to 256 [ 165.258445][ T1322] veth0_vlan: left promiscuous mode [ 165.344608][ T5791] Bluetooth: hci0: command tx timeout [ 166.149570][ T7859] loop0: detected capacity change from 0 to 32768 [ 166.312599][ T7871] loop3: detected capacity change from 0 to 1024 [ 166.436456][ T11] hfsplus: b-tree write err: -5, ino 4 [ 166.689665][ T1322] team0 (unregistering): Port device team_slave_1 removed [ 166.816735][ T1322] team0 (unregistering): Port device team_slave_0 removed [ 166.874197][ T1322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.934760][ T1322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.424660][ T5791] Bluetooth: hci0: command tx timeout [ 167.611802][ T1322] bond0 (unregistering): Released all slaves [ 167.767098][ T7738] team0: Port device team_slave_1 added [ 167.895795][ T7880] loop3: detected capacity change from 0 to 256 [ 167.994889][ T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 167.996017][ T7738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.018762][ T7738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.042062][ T5786] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 168.048086][ T7738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.082052][ T7738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.097613][ T5786] FAT-fs (loop3): Filesystem has been set read-only [ 168.110238][ T7738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.127307][ T5786] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 168.186550][ T7738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.234088][ T8] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 168.256081][ T8] usb 1-1: config 0 has no interface number 0 [ 168.265274][ T8] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.276997][ T8] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.292747][ T8] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 168.326736][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.338509][ T8] usb 1-1: config 0 descriptor?? [ 168.458438][ T7738] hsr_slave_0: entered promiscuous mode [ 168.467809][ T7738] hsr_slave_1: entered promiscuous mode [ 168.477099][ T7738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.504082][ T7738] Cannot create hsr debugfs directory [ 168.773633][ T1322] IPVS: stop unused estimator thread 0... [ 168.854914][ T8] input: HID 04d9:a055 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:04D9:A055.0009/input/input13 [ 169.103602][ T8] holtek_kbd 0003:04D9:A055.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.0-1/input1 [ 169.152707][ T1322] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.190315][ T8] usb 1-1: USB disconnect, device number 10 [ 169.354236][ T7900] fido_id[7900]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 169.449163][ T1322] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.512016][ T5791] Bluetooth: hci0: command tx timeout [ 169.643177][ T1322] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.682773][ T7738] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 169.690963][ T965] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 169.706840][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 169.718557][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 169.736787][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 169.739801][ T7738] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 169.755461][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 169.764269][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 169.782709][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 169.807078][ T1322] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.845838][ T7738] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 169.869335][ T7738] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 169.884654][ T965] usb 2-1: Using ep0 maxpacket: 8 [ 169.907563][ T965] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 169.919954][ T965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.935915][ T965] usb 2-1: Product: syz [ 169.940295][ T965] usb 2-1: Manufacturer: syz [ 169.947189][ T965] usb 2-1: SerialNumber: syz [ 169.975315][ T965] usb 2-1: config 0 descriptor?? [ 169.988794][ T965] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 170.362607][ T7738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.456254][ T7738] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.465952][ T1073] wlan1: Trigger new scan to find an IBSS to join [ 170.533621][ T7908] chnl_net:caif_netlink_parms(): no params data found [ 170.560440][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.568598][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.622393][ T965] gspca_sonixj: reg_w1 err -71 [ 170.645236][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.652432][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.675003][ T965] sonixj: probe of 2-1:0.0 failed with error -71 [ 170.692787][ T965] usb 2-1: USB disconnect, device number 5 [ 170.925758][ T7908] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.933273][ T7908] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.944976][ T7908] bridge_slave_0: entered allmulticast mode [ 170.952602][ T7908] bridge_slave_0: entered promiscuous mode [ 170.962229][ T7908] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.969983][ T7908] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.980640][ T7908] bridge_slave_1: entered allmulticast mode [ 170.987677][ T7908] bridge_slave_1: entered promiscuous mode [ 171.090944][ T7908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.105443][ T7908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.279438][ T7908] team0: Port device team_slave_0 added [ 171.322171][ T7908] team0: Port device team_slave_1 added [ 171.395413][ T7942] loop0: detected capacity change from 0 to 2048 [ 171.470903][ T7942] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 171.525075][ T5778] udevd[5778]: incorrect nilfs2 checksum on /dev/loop0 [ 171.567528][ T7948] netlink: 26 bytes leftover after parsing attributes in process `syz.1.781'. [ 171.583131][ T7950] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.614537][ T7948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.781'. [ 171.646047][ T7908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.687433][ T7908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.779110][ T7908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.824701][ T5794] Bluetooth: hci1: command tx timeout [ 171.947432][ T7908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.961164][ T7908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.014530][ T7908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.148925][ T7908] hsr_slave_0: entered promiscuous mode [ 172.156585][ T7908] hsr_slave_1: entered promiscuous mode [ 172.163217][ T7908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.171596][ T7908] Cannot create hsr debugfs directory [ 172.178178][ T7962] netlink: 'syz.0.790': attribute type 4 has an invalid length. [ 172.205392][ T7738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.248753][ T1322] hsr_slave_0: left promiscuous mode [ 172.335215][ T1322] hsr_slave_1: left promiscuous mode [ 172.356104][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.385845][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.396399][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.420380][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.432796][ T1322] bridge_slave_1: left allmulticast mode [ 172.453261][ T1322] bridge_slave_1: left promiscuous mode [ 172.462492][ T1322] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.484293][ T1322] bridge_slave_0: left allmulticast mode [ 172.490774][ T1322] bridge_slave_0: left promiscuous mode [ 172.497380][ T1322] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.537448][ T1322] veth1_macvtap: left promiscuous mode [ 172.544078][ T1322] veth0_macvtap: left promiscuous mode [ 172.550558][ T1322] veth1_vlan: left promiscuous mode [ 172.557707][ T1322] veth0_vlan: left promiscuous mode [ 173.227274][ T1322] team0 (unregistering): Port device team_slave_1 removed [ 173.282566][ T1322] team0 (unregistering): Port device team_slave_0 removed [ 173.347332][ T1322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.408214][ T1322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.511332][ T7976] wlan1: Trigger new scan to find an IBSS to join [ 173.909346][ T5794] Bluetooth: hci1: command tx timeout [ 174.089925][ T1322] bond0 (unregistering): Released all slaves [ 174.711466][ T7989] loop1: detected capacity change from 0 to 1024 [ 174.755758][ T7989] EXT4-fs: Invalid gid value -1 [ 175.071972][ T7738] veth0_vlan: entered promiscuous mode [ 175.173073][ T7908] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 175.235719][ T7738] veth1_vlan: entered promiscuous mode [ 175.263086][ T7908] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 175.327984][ T7908] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 175.392119][ T7908] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 175.422929][ T1322] ------------[ cut here ]------------ [ 175.429475][ T1322] WARNING: CPU: 1 PID: 1322 at net/xfrm/xfrm_state.c:2997 xfrm_state_fini+0x25c/0x2b0 [ 175.439730][ T1322] Modules linked in: [ 175.443850][ T1322] CPU: 1 PID: 1322 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 175.451876][ T1322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 175.463238][ T1322] Workqueue: netns cleanup_net [ 175.468948][ T1322] RIP: 0010:xfrm_state_fini+0x25c/0x2b0 [ 175.475024][ T1322] Code: 5c 41 5d 41 5e 41 5f 5d e9 81 20 00 00 e8 0c c0 66 f8 0f 0b e9 2c fe ff ff e8 00 c0 66 f8 0f 0b e9 91 fe ff ff e8 f4 bf 66 f8 <0f> 0b 43 80 3c 2c 00 0f 85 fa fe ff ff e9 fd fe ff ff e8 dd bf 66 [ 175.492119][ T7738] veth0_macvtap: entered promiscuous mode [ 175.496632][ T1322] RSP: 0018:ffffc90004cafa98 EFLAGS: 00010293 [ 175.508887][ T1322] RAX: ffffffff891ed7ac RBX: ffff88802fba1d40 RCX: ffff8880248b5a00 [ 175.517985][ T1322] RDX: 0000000000000000 RSI: ffffffff8aaabca0 RDI: ffffffff8afc71c0 [ 175.526862][ T1322] RBP: 0000000000000040 R08: ffffffff90da750f R09: 1ffffffff21b4ea1 [ 175.535741][ T1322] R10: dffffc0000000000 R11: fffffbfff21b4ea2 R12: 1ffff11005f7461c [ 175.544108][ T1322] R13: dffffc0000000000 R14: ffff88802fba30e0 R15: ffff88802cda9300 [ 175.552854][ T1322] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 175.555909][ T7738] veth1_macvtap: entered promiscuous mode [ 175.563624][ T1322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 175.576160][ T1322] CR2: 00007f107ff45f98 CR3: 00000000569a3000 CR4: 00000000003506e0 [ 175.584377][ T1322] Call Trace: [ 175.587830][ T1322] [ 175.590803][ T1322] xfrm_net_exit+0x25/0x60 [ 175.595398][ T1322] cleanup_net+0x6f4/0xb90 [ 175.600265][ T1322] ? ops_free_list+0x3b0/0x3b0 [ 175.605469][ T1322] ? _raw_spin_unlock_irq+0x23/0x50 [ 175.611325][ T1322] ? process_scheduled_works+0x957/0x15b0 [ 175.618021][ T1322] ? process_scheduled_works+0x957/0x15b0 [ 175.624154][ T1322] process_scheduled_works+0xa45/0x15b0 [ 175.630422][ T1322] ? assign_work+0x400/0x400 [ 175.635569][ T1322] ? assign_work+0x39e/0x400 [ 175.640397][ T1322] worker_thread+0xa55/0xfc0 [ 175.645194][ T1322] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 175.651403][ T1322] ? _raw_spin_unlock+0x40/0x40 [ 175.657104][ T1322] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 175.663567][ T1322] kthread+0x2fa/0x390 [ 175.668065][ T1322] ? pr_cont_work+0x560/0x560 [ 175.672913][ T1322] ? kthread_blkcg+0xd0/0xd0 [ 175.677672][ T1322] ret_from_fork+0x48/0x80 [ 175.682214][ T1322] ? kthread_blkcg+0xd0/0xd0 [ 175.686974][ T1322] ret_from_fork_asm+0x11/0x20 [ 175.691881][ T1322] [ 175.695037][ T1322] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 175.702417][ T1322] CPU: 1 PID: 1322 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 175.710420][ T1322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 175.720666][ T1322] Workqueue: netns cleanup_net [ 175.725608][ T1322] Call Trace: [ 175.728968][ T1322] [ 175.731980][ T1322] dump_stack_lvl+0x16c/0x230 [ 175.736663][ T1322] ? show_regs_print_info+0x20/0x20 [ 175.742429][ T1322] ? load_image+0x3b0/0x3b0 [ 175.747018][ T1322] panic+0x2c0/0x710 [ 175.751607][ T1322] ? bpf_jit_dump+0xd0/0xd0 [ 175.756109][ T1322] ? ret_from_fork_asm+0x11/0x20 [ 175.761315][ T1322] __warn+0x2e0/0x470 [ 175.765383][ T1322] ? xfrm_state_fini+0x25c/0x2b0 [ 175.770676][ T1322] ? xfrm_state_fini+0x25c/0x2b0 [ 175.775698][ T1322] report_bug+0x2be/0x4f0 [ 175.780106][ T1322] ? xfrm_state_fini+0x25c/0x2b0 [ 175.785034][ T1322] ? xfrm_state_fini+0x25c/0x2b0 [ 175.790077][ T1322] ? xfrm_state_fini+0x25e/0x2b0 [ 175.795097][ T1322] handle_bug+0xcf/0x120 [ 175.799695][ T1322] exc_invalid_op+0x1a/0x50 [ 175.804432][ T1322] asm_exc_invalid_op+0x1a/0x20 [ 175.809388][ T1322] RIP: 0010:xfrm_state_fini+0x25c/0x2b0 [ 175.814935][ T1322] Code: 5c 41 5d 41 5e 41 5f 5d e9 81 20 00 00 e8 0c c0 66 f8 0f 0b e9 2c fe ff ff e8 00 c0 66 f8 0f 0b e9 91 fe ff ff e8 f4 bf 66 f8 <0f> 0b 43 80 3c 2c 00 0f 85 fa fe ff ff e9 fd fe ff ff e8 dd bf 66 [ 175.834982][ T1322] RSP: 0018:ffffc90004cafa98 EFLAGS: 00010293 [ 175.841154][ T1322] RAX: ffffffff891ed7ac RBX: ffff88802fba1d40 RCX: ffff8880248b5a00 [ 175.849437][ T1322] RDX: 0000000000000000 RSI: ffffffff8aaabca0 RDI: ffffffff8afc71c0 [ 175.857955][ T1322] RBP: 0000000000000040 R08: ffffffff90da750f R09: 1ffffffff21b4ea1 [ 175.866201][ T1322] R10: dffffc0000000000 R11: fffffbfff21b4ea2 R12: 1ffff11005f7461c [ 175.875123][ T1322] R13: dffffc0000000000 R14: ffff88802fba30e0 R15: ffff88802cda9300 [ 175.883641][ T1322] ? xfrm_state_fini+0x25c/0x2b0 [ 175.889149][ T1322] ? xfrm_state_fini+0x25c/0x2b0 [ 175.894293][ T1322] xfrm_net_exit+0x25/0x60 [ 175.898815][ T1322] cleanup_net+0x6f4/0xb90 [ 175.903603][ T1322] ? ops_free_list+0x3b0/0x3b0 [ 175.908531][ T1322] ? _raw_spin_unlock_irq+0x23/0x50 [ 175.914140][ T1322] ? process_scheduled_works+0x957/0x15b0 [ 175.920121][ T1322] ? process_scheduled_works+0x957/0x15b0 [ 175.926460][ T1322] process_scheduled_works+0xa45/0x15b0 [ 175.932123][ T1322] ? assign_work+0x400/0x400 [ 175.936798][ T1322] ? assign_work+0x39e/0x400 [ 175.941383][ T1322] worker_thread+0xa55/0xfc0 [ 175.946057][ T1322] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 175.952116][ T1322] ? _raw_spin_unlock+0x40/0x40 [ 175.957034][ T1322] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 175.963018][ T1322] kthread+0x2fa/0x390 [ 175.967081][ T1322] ? pr_cont_work+0x560/0x560 [ 175.971778][ T1322] ? kthread_blkcg+0xd0/0xd0 [ 175.976370][ T1322] ret_from_fork+0x48/0x80 [ 175.980877][ T1322] ? kthread_blkcg+0xd0/0xd0 [ 175.985565][ T1322] ret_from_fork_asm+0x11/0x20 [ 175.990360][ T1322] [ 175.994229][ T1322] Kernel Offset: disabled [ 175.999090][ T1322] Rebooting in 86400 seconds..