last executing test programs: 5.795857438s ago: executing program 2 (id=2224): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write(r0, &(0x7f0000000440)="240000001eb012d9000000000000fb8effc189e4a0cec8360330a8c56537da308746706a71775602bf2e5d438bdb70f06f8f9e91715726620500000000000000003aef6b0f7c233c440016c1c374597c796d2e76ca51f72ebd038eed3743093e71e6", 0xfffffe82) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)) 5.56866082s ago: executing program 1 (id=2228): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) 4.874763633s ago: executing program 1 (id=2235): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x20}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) 4.866673964s ago: executing program 2 (id=2236): unshare(0x4000400) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x94) 4.815957949s ago: executing program 2 (id=2237): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f000001fb00), 0x1, 0x50f3, &(0x7f000000a2c0)="$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") lsetxattr$security_capability(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v2, 0x14, 0x0) truncate(&(0x7f0000000040)='./file1\x00', 0x0) 4.775125932s ago: executing program 1 (id=2238): syz_mount_image$minix(&(0x7f00000001c0), &(0x7f00000066c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1810002, &(0x7f0000004180)=ANY=[@ANYBLOB="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", @ANYBLOB="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", @ANYRES8, @ANYRES8, @ANYRES64, @ANYBLOB="0614960426ff397f5388dc609087119c2d5e15f43dbcdeb67bd1ee8a1b6752162c2958635a5dc52be88328c24ccc30", @ANYRES16, @ANYRESDEC, @ANYRES32, @ANYBLOB="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", @ANYRES32], 0x1, 0x1de, &(0x7f0000003f80)="$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") sync() truncate(&(0x7f00000000c0)='./file2\x00', 0xd00) 4.190300616s ago: executing program 4 (id=2241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000a40)={@link_local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2677f8", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @local}}}}, 0x0) 4.151521199s ago: executing program 1 (id=2242): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0), 0xfdef) 4.112097993s ago: executing program 4 (id=2243): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000011c0)={'hsr0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @dev}, 0x14) 3.974507386s ago: executing program 1 (id=2244): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4={0x3, 0x0, 0x0, "e7e03604"}, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_4={0x3, 0x1, 0x2, "02002000"}, @local=@item_4={0x3, 0x2, 0x7, "9915a37e"}, @main=@item_4={0x3, 0x0, 0x8, "de4e06d8"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 3.889154914s ago: executing program 4 (id=2245): syz_mount_image$jfs(&(0x7f0000005dc0), &(0x7f0000005e00)='./file0\x00', 0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], 0x1, 0x5ddd, &(0x7f000000bc40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) 3.468020302s ago: executing program 2 (id=2246): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000000a40)='./bus\x00', 0x200800, &(0x7f00000001c0)={[], [{@flag='nolazytime'}]}, 0x1, 0x9693, &(0x7f000001c300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x71e5b30d, 0x0, 0x0, 0x0, 0x2000000}) 2.72522796s ago: executing program 4 (id=2247): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04"], 0x7) 2.453529805s ago: executing program 3 (id=2251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_PORT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 2.315111268s ago: executing program 3 (id=2252): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001a0001000000000000000000020c"], 0x38}}, 0x0) 2.230330716s ago: executing program 4 (id=2254): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x4ec, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0xb, 0xb}}, 0x0) 2.17786583s ago: executing program 3 (id=2255): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000064000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008080007400000003b080006400000000008000740000000024c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c0002"], 0x1ec}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d03"], 0x0) 1.572871976s ago: executing program 1 (id=2260): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000300)='./file0\x00', 0x16, &(0x7f0000001440)={[{@barrier}, {@subvolid}, {@acl}, {@noflushoncommit}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@notreelog}]}, 0x15, 0x5102, &(0x7f000000a2c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, 0x0) 1.495113053s ago: executing program 4 (id=2262): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_012={0x1, 0x1, 0x6, "86"}, @global=@item_012={0x2, 0x1, 0x4, "0500"}]}}, 0x0}, 0x0) 1.427532509s ago: executing program 0 (id=2263): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0414f9f407000901000aff8000034000030000000008001d0001000000", 0x24) 1.379894794s ago: executing program 0 (id=2264): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080), 0xe) connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @none}, 0xe) 778.031648ms ago: executing program 2 (id=2265): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e0, 0x0) setreuid(0xee00, 0xee01) fgetxattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.opaque\x00', 0x0, 0x0) 486.540015ms ago: executing program 0 (id=2266): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}, [@mark={0xc, 0x15, {0x35075c}}]}, 0xc4}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x8, 0x3a, 0x0, @private1, @local, {[], @echo_reply}}}}}, 0x0) 412.234412ms ago: executing program 0 (id=2267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 152.892946ms ago: executing program 0 (id=2268): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x0) 133.098478ms ago: executing program 3 (id=2269): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f00000003c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write$binfmt_script(r0, &(0x7f0000002e80)={'#! ', '\xe9\x1fq\x89Y\x1e\x923aK', [], 0xa, "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"}, 0x2a1) 69.063324ms ago: executing program 3 (id=2270): unshare(0x22020600) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40045201, &(0x7f0000000180)=ANY=[@ANYRES64]) 40.729786ms ago: executing program 3 (id=2271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002280)=ANY=[@ANYBLOB="1400000010000100e6ffffff000000000000000a64000000060a0b040000000000000000020000003800048024000180090001006d65746100000000140002800800034000000017080002400000000c100001800c0001006e6f747261636b000900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) 32.039597ms ago: executing program 0 (id=2272): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtclass={0x43c, 0x28, 0x8, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xc}, {0x6, 0x3}, {0x4, 0x6}}, [@tclass_kind_options=@c_htb={{0x8}, {0x408, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0xffff, 0x5, 0x1, 0x4, 0x2, 0x2, 0xfffffffa, 0xf7b4, 0x7, 0x200, 0x75c, 0x80, 0x8, 0xa, 0xdfe1, 0x6, 0x9, 0x200, 0x9, 0x3, 0xfffffffc, 0x8, 0x9, 0xfffffffe, 0x7, 0x3, 0x3, 0xf9d, 0x0, 0x1, 0x640b, 0x7, 0x0, 0x7fff, 0x5, 0x3, 0xffffffff, 0x1, 0x8, 0x1ff, 0x3, 0xff58, 0x7, 0xa93, 0x6c7b, 0x10000, 0x5, 0x1, 0x9, 0x7, 0x7, 0x4, 0xa, 0xffffffff, 0xf3b3, 0x9, 0x7fff, 0xfffff51a, 0xa46, 0x7, 0xfffffff7, 0x8000, 0x5, 0x8, 0x0, 0x6, 0x0, 0x6, 0x1, 0x7, 0x5, 0x4, 0x7, 0xde, 0xb670, 0x0, 0x3, 0x6, 0x7, 0xbb, 0x8, 0xffff9561, 0x401, 0x1, 0xffffffff, 0x8a, 0xffff0001, 0x1, 0x2, 0x5, 0x6, 0x7, 0xfff, 0x7, 0xb81, 0x3, 0x0, 0x23, 0x415, 0x7fffffff, 0xfffffff9, 0x3, 0x40000, 0x8, 0x80000001, 0x1, 0x6, 0x80, 0x9, 0x2, 0xff, 0x5, 0x38, 0x6b8f, 0x3, 0x7ff, 0x8dd, 0x2, 0x8, 0x3, 0x1, 0xcc0000, 0xc906, 0x8, 0xfff, 0xe, 0x10000, 0x6, 0xc, 0x7fff, 0x8a, 0x3, 0x7, 0x7, 0x6, 0x1, 0x8, 0x0, 0x6, 0x6, 0xfff, 0x2, 0x902, 0x5, 0x5, 0xc3b, 0x5, 0xc000, 0xe13, 0x9, 0x64, 0x5, 0x2, 0xde, 0x7, 0x4, 0x10, 0x5, 0x9, 0x8, 0x200, 0x6, 0x17, 0x8, 0x6, 0x10000, 0x769, 0x4bf6, 0x1, 0xd6, 0x0, 0x1, 0x9, 0x40, 0x30000000, 0x476d, 0x9, 0x8, 0x3, 0x3, 0x0, 0x8, 0x9, 0x4, 0x3, 0x80000001, 0x2, 0x0, 0xfffffffd, 0x0, 0x4, 0x6, 0x8000, 0x96e, 0x6, 0x1, 0x9, 0x3ff, 0x401, 0x1, 0x383, 0xef92, 0x2, 0xc2, 0x94ef, 0x6, 0x6, 0x7, 0x95, 0x0, 0x20, 0x4, 0x24a2, 0x1, 0x0, 0x1, 0x4, 0x6, 0x22ec, 0x8, 0xfffffff9, 0x5, 0x7, 0xffff8000, 0xa000, 0x7, 0x7, 0x10, 0x63b8, 0x4, 0xc, 0x8001, 0x7, 0x6, 0x80, 0x2, 0x400, 0x4df, 0x6, 0x2f7a, 0x3, 0xff, 0x1d, 0x7, 0x2, 0xfff, 0x1, 0x2, 0x200, 0x0, 0xffffff7f, 0x8, 0x836, 0x3ff, 0x5, 0x6]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x6}}]}, 0x43c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d01000003d00010000000000000000000100000004000080b71001"], 0x10d0}}, 0x0) 0s ago: executing program 2 (id=2273): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000380009040000000000000000020000000400000014000100"], 0x2c}}, 0x0) kernel console output (not intermixed with test programs): e newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.340105][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.371184][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.387245][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.415440][ T7211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.439684][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 211.463281][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.501412][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.527002][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.563163][ T7395] loop1: detected capacity change from 0 to 256 [ 211.572919][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.584383][ T7387] loop4: detected capacity change from 0 to 40427 [ 211.607622][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.649968][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.672212][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.688578][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.712577][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.734437][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.745570][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.756836][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.768072][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.781291][ T7211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.811761][ T7395] exfat: Deprecated parameter 'utf8' [ 211.818645][ T7395] exfat: Deprecated parameter 'utf8' [ 211.863830][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 211.889617][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.904371][ T7387] F2FS-fs (loop4): Found nat_bits in checkpoint [ 211.913746][ T7211] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.944921][ T7211] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.971386][ T7395] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 211.981791][ T7211] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.023297][ T7211] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.139022][ T7387] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 212.255590][ T3574] attempt to access beyond end of device [ 212.255590][ T3574] loop4: rw=2049, want=45104, limit=40427 [ 212.406274][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.420073][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.485393][ T4194] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 212.501455][ T7410] loop1: detected capacity change from 0 to 4096 [ 212.520110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 212.539543][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.558964][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.641503][ T7410] ntfs: volume version 3.1. [ 212.652004][ T1443] IPVS: stopping backup sync thread 5152 ... [ 212.675514][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 212.793373][ T4194] usb 4-1: Using ep0 maxpacket: 32 [ 212.974925][ T4194] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 213.102135][ T7418] vim2m vim2m.0: vidioc_s_fmt queue busy [ 213.209267][ T4194] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 213.230638][ T4194] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.267612][ T4194] usb 4-1: Product: syz [ 213.288978][ T4194] usb 4-1: Manufacturer: syz [ 213.328805][ T4194] usb 4-1: SerialNumber: syz [ 213.345383][ T4194] usb 4-1: config 0 descriptor?? [ 213.409658][ T7408] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 213.657278][ T1443] device hsr_slave_0 left promiscuous mode [ 213.671024][ T1443] device hsr_slave_1 left promiscuous mode [ 213.677690][ T1443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.686247][ T1443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.704317][ T1443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.724059][ T1443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.745209][ T1443] device bridge_slave_1 left promiscuous mode [ 213.757807][ T1443] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.766464][ T4194] usb 4-1: USB disconnect, device number 15 [ 213.805623][ T1443] device bridge_slave_0 left promiscuous mode [ 213.833960][ T1443] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.864482][ T1443] device hsr_slave_0 left promiscuous mode [ 213.877476][ T1443] device hsr_slave_1 left promiscuous mode [ 213.915634][ T1443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.925835][ T1443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.942824][ T1443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.955998][ T1443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.968817][ T1443] device bridge_slave_1 left promiscuous mode [ 213.981777][ T7426] loop2: detected capacity change from 0 to 32768 [ 213.984002][ T1443] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.017375][ T1443] device bridge_slave_0 left promiscuous mode [ 214.029599][ T1443] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.077412][ T7426] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1295 (7426) [ 214.103282][ T7426] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 214.136611][ T1443] device veth1_macvtap left promiscuous mode [ 214.145722][ T1443] device veth0_macvtap left promiscuous mode [ 214.158954][ T1443] device veth1_vlan left promiscuous mode [ 214.165402][ T7426] BTRFS info (device loop2): using free space tree [ 214.182845][ T1443] device veth0_vlan left promiscuous mode [ 214.189184][ T7426] BTRFS info (device loop2): has skinny extents [ 214.227410][ T1443] device veth1_macvtap left promiscuous mode [ 214.237129][ T1443] device veth0_macvtap left promiscuous mode [ 214.253044][ T1443] device veth1_vlan left promiscuous mode [ 214.259516][ T1443] device veth0_vlan left promiscuous mode [ 214.515676][ T7426] BTRFS info (device loop2): enabling ssd optimizations [ 214.563798][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1305'. [ 214.922373][ T7479] loop4: detected capacity change from 0 to 4096 [ 214.972025][ T7479] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 215.067145][ T7479] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 215.140124][ T7479] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 215.215593][ T7479] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 215.267707][ T7479] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 215.381055][ T7479] ntfs: volume version 3.1. [ 215.399384][ T7479] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug. [ 215.484882][ T7479] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 215.522759][ T7479] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 215.628387][ T7479] ntfs: (device loop4): ntfs_readdir(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug. [ 215.869579][ T7491] loop0: detected capacity change from 0 to 32768 [ 215.956915][ T7491] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.1315 (7491) [ 216.051536][ T7496] loop4: detected capacity change from 0 to 4096 [ 216.071919][ T7491] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 216.101138][ T1443] team0 (unregistering): Port device team_slave_1 removed [ 216.108930][ T7491] BTRFS info (device loop0): enabling disk space caching [ 216.119114][ T7496] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 216.132707][ T7491] BTRFS info (device loop0): force clearing of disk cache [ 216.139851][ T7491] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 216.187781][ T7491] BTRFS info (device loop0): use zstd compression, level 3 [ 216.205158][ T7491] BTRFS info (device loop0): turning on sync discard [ 216.217001][ T7491] BTRFS info (device loop0): disk space caching is enabled [ 216.239099][ T1443] team0 (unregistering): Port device team_slave_0 removed [ 216.261542][ T7491] BTRFS info (device loop0): has skinny extents [ 216.284613][ T7496] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 216.329476][ T1443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.347298][ T1443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.463030][ T3574] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 216.545236][ T7491] BTRFS info (device loop0): enabling ssd optimizations [ 216.559281][ T7491] BTRFS info (device loop0): clearing free space tree [ 216.575831][ T7491] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 216.595703][ T7491] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 216.764314][ T7491] BTRFS error (device loop0): balance: invalid convert data profile raid10 [ 216.797573][ T1443] bond0 (unregistering): Released all slaves [ 217.092778][ T7520] loop4: detected capacity change from 0 to 4096 [ 217.149708][ T7494] loop2: detected capacity change from 0 to 32768 [ 217.197309][ T7520] ntfs3: Invalid value for gid. [ 217.270544][ T7494] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 217.310068][ T7494] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 217.388774][ T7494] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 16 extents in 0ms [ 217.590330][ T7524] loop4: detected capacity change from 0 to 64 [ 217.722424][ T7494] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 217.825919][ T7528] loop0: detected capacity change from 0 to 512 [ 217.889604][ T1443] team0 (unregistering): Port device team_slave_1 removed [ 217.988146][ T7535] loop4: detected capacity change from 0 to 256 [ 218.013172][ T1443] team0 (unregistering): Port device team_slave_0 removed [ 218.046899][ T7528] EXT4-fs (loop0): 1 orphan inode deleted [ 218.070329][ T7528] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 218.073773][ T1443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.099819][ T7528] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038 (0x7fffffff) [ 218.204696][ T7535] FAT-fs (loop4): Directory bread(block 64) failed [ 218.235110][ T7535] FAT-fs (loop4): Directory bread(block 65) failed [ 218.300375][ T7535] FAT-fs (loop4): Directory bread(block 66) failed [ 218.309137][ T1443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.347190][ T7535] FAT-fs (loop4): Directory bread(block 67) failed [ 218.369461][ T7535] FAT-fs (loop4): Directory bread(block 68) failed [ 218.387191][ T7535] FAT-fs (loop4): Directory bread(block 69) failed [ 218.413261][ T7535] FAT-fs (loop4): Directory bread(block 70) failed [ 218.427821][ T7535] FAT-fs (loop4): Directory bread(block 71) failed [ 218.447220][ T7535] FAT-fs (loop4): Directory bread(block 72) failed [ 218.455241][ T7535] FAT-fs (loop4): Directory bread(block 73) failed [ 218.771792][ T1443] bond0 (unregistering): Released all slaves [ 218.844412][ T7552] loop4: detected capacity change from 0 to 4096 [ 219.050616][ T7487] device tunl0 entered promiscuous mode [ 219.085614][ T7487] netlink: 'syz.3.1312': attribute type 1 has an invalid length. [ 219.115146][ T7553] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.124263][ T7487] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1312'. [ 219.245930][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1331'. [ 219.397387][ T7562] loop0: detected capacity change from 0 to 64 [ 219.425628][ T7564] loop4: detected capacity change from 0 to 512 [ 219.498318][ T7566] netlink: 'syz.2.1337': attribute type 1 has an invalid length. [ 219.526319][ T26] audit: type=1800 audit(1727519403.424:6314): pid=7559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.1334" name="/newroot/281/file0" dev="tmpfs" ino=1501 res=0 errno=0 [ 219.573315][ T3877] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 219.660173][ T7564] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 219.786542][ T7573] loop3: detected capacity change from 0 to 64 [ 219.803130][ T7564] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 219.858692][ T7564] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1334: bg 0: block 18: invalid block bitmap [ 219.926889][ T7564] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 219.951363][ T3877] usb 2-1: Using ep0 maxpacket: 16 [ 219.985345][ T7564] EXT4-fs (loop4): 1 truncate cleaned up [ 219.993622][ T7564] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 220.008206][ T7564] ext2 filesystem being mounted at /281/file0 supports timestamps until 2038 (0x7fffffff) [ 220.125464][ T7585] loop2: detected capacity change from 0 to 64 [ 220.137048][ T3877] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.160105][ T3877] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.204842][ T3877] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 220.260770][ T3877] usb 2-1: config 0 interface 0 has no altsetting 0 [ 220.271559][ T3877] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 220.294409][ T3877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.327608][ T3877] usb 2-1: config 0 descriptor?? [ 220.388597][ T7593] loop3: detected capacity change from 0 to 256 [ 220.548399][ T7593] FAT-fs (loop3): Directory bread(block 64) failed [ 220.570294][ T7593] FAT-fs (loop3): Directory bread(block 65) failed [ 220.597215][ T7593] FAT-fs (loop3): Directory bread(block 66) failed [ 220.625084][ T7593] FAT-fs (loop3): Directory bread(block 67) failed [ 220.636287][ T7593] FAT-fs (loop3): Directory bread(block 68) failed [ 220.644701][ T7593] FAT-fs (loop3): Directory bread(block 69) failed [ 220.657111][ T7593] FAT-fs (loop3): Directory bread(block 70) failed [ 220.665790][ T7593] FAT-fs (loop3): Directory bread(block 71) failed [ 220.700073][ T7593] FAT-fs (loop3): Directory bread(block 72) failed [ 220.736130][ T7593] FAT-fs (loop3): Directory bread(block 73) failed [ 220.833738][ T7609] x_tables: ip_tables: udp match: only valid for protocol 17 [ 220.888373][ T3877] hid-generic 0003:045E:05DA.0019: ignoring exceeding usage max [ 220.910224][ T3877] hid-generic 0003:045E:05DA.0019: unbalanced collection at end of report description [ 220.944436][ T3877] hid-generic: probe of 0003:045E:05DA.0019 failed with error -22 [ 221.119297][ T3877] usb 2-1: USB disconnect, device number 12 [ 222.087814][ T7654] autofs4:pid:7654:autofs_fill_super: called with bogus options [ 222.229864][ T7660] loop4: detected capacity change from 0 to 512 [ 222.528486][ T7660] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.1378: corrupted in-inode xattr [ 222.541176][ T3750] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 222.572759][ T7660] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1378: couldn't read orphan inode 15 (err -117) [ 222.587776][ T7669] loop0: detected capacity change from 0 to 512 [ 222.611999][ T7660] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 222.762983][ T7620] loop3: detected capacity change from 0 to 32768 [ 222.930255][ T3750] usb 2-1: too many endpoints for config 0 interface 0 altsetting 64: 254, using maximum allowed: 30 [ 222.961031][ T3750] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 222.999371][ T3750] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.031648][ T3750] usb 2-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 223.076228][ T3750] usb 2-1: config 0 interface 0 has no altsetting 0 [ 223.096592][ T3750] usb 2-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 223.129802][ T3750] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.192233][ T3750] usb 2-1: config 0 descriptor?? [ 223.214904][ T7669] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 223.233848][ T7658] loop2: detected capacity change from 0 to 32768 [ 223.348767][ T7620] XFS (loop3): Mounting V5 Filesystem [ 223.433634][ T7658] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1377 (7658) [ 223.508489][ T7658] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 223.599849][ T7658] BTRFS info (device loop2): using free space tree [ 223.623837][ T7658] BTRFS info (device loop2): has skinny extents [ 223.732605][ T7671] loop4: detected capacity change from 0 to 32768 [ 223.773832][ T7620] XFS (loop3): Ending clean mount [ 223.846181][ T7620] XFS (loop3): Quotacheck needed: Please wait. [ 223.902768][ T7698] loop0: detected capacity change from 0 to 1024 [ 223.950192][ T3750] usb 2-1: string descriptor 0 read error: -71 [ 223.970098][ T3750] uclogic 0003:5543:0047.001A: failed retrieving string descriptor #200: -71 [ 223.979894][ T3750] uclogic 0003:5543:0047.001A: failed retrieving pen parameters: -71 [ 223.998838][ T3750] uclogic 0003:5543:0047.001A: failed probing pen v2 parameters: -71 [ 224.007876][ T3750] uclogic 0003:5543:0047.001A: failed probing parameters: -71 [ 224.017235][ T3750] uclogic: probe of 0003:5543:0047.001A failed with error -71 [ 224.033135][ T3750] usb 2-1: USB disconnect, device number 13 [ 224.079133][ T7658] BTRFS info (device loop2): enabling ssd optimizations [ 224.137571][ T7620] XFS (loop3): Quotacheck: Done. [ 224.201545][ T3632] hfsplus: b-tree write err: -5, ino 4 [ 224.715271][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1392'. [ 224.727663][ T7712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1392'. [ 224.880362][ T7037] XFS (loop3): Unmounting Filesystem [ 224.912917][ T7714] vhci_hcd: invalid port number 0 [ 225.216771][ T7718] loop1: detected capacity change from 0 to 1764 [ 225.374405][ T7726] loop4: detected capacity change from 0 to 64 [ 225.875521][ T7736] loop1: detected capacity change from 0 to 256 [ 225.917603][ T7734] loop4: detected capacity change from 0 to 4096 [ 225.970622][ T7736] exfat: Deprecated parameter 'utf8' [ 226.017983][ T7736] exfat: Deprecated parameter 'utf8' [ 226.018182][ T7734] __ntfs_error: 1 callbacks suppressed [ 226.018194][ T7734] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 226.047105][ T7734] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 226.048497][ T7736] exfat: Deprecated parameter 'utf8' [ 226.057627][ T7734] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 226.089742][ T7734] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 226.146288][ T7736] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 226.212322][ T7720] loop2: detected capacity change from 0 to 32768 [ 226.292135][ T7734] ntfs: volume version 3.1. [ 226.334059][ T7734] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp737. You might want to try to use the mount option nls=utf8. [ 226.361837][ T7734] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 226.430755][ T7720] XFS (loop2): Mounting V5 Filesystem [ 226.597536][ T7720] XFS (loop2): Ending clean mount [ 226.760369][ T7211] XFS (loop2): Unmounting Filesystem [ 226.911540][ T7756] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1390'. [ 227.399537][ T7765] loop0: detected capacity change from 0 to 1024 [ 227.400710][ T4194] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 227.451764][ T7767] loop3: detected capacity change from 0 to 128 [ 227.539032][ T7765] hfsplus: bad catalog entry type [ 227.624099][ T7751] loop1: detected capacity change from 0 to 32768 [ 227.626326][ T443] hfsplus: b-tree write err: -5, ino 4 [ 227.643347][ T7767] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 227.674969][ T7767] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038 (0x7fffffff) [ 227.803222][ T7751] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1405 (7751) [ 227.930239][ T7751] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 227.980119][ T7751] BTRFS info (device loop1): using free space tree [ 228.027607][ T7751] BTRFS info (device loop1): has skinny extents [ 228.070164][ T4194] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 228.079791][ T4194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.136674][ T4194] usb 5-1: config 0 descriptor?? [ 228.341923][ T7809] program syz.0.1424 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.434362][ T7816] loop3: detected capacity change from 0 to 64 [ 228.445035][ T7751] BTRFS info (device loop1): enabling ssd optimizations [ 228.693207][ T4194] [drm:udl_init] *ERROR* Selecting channel failed [ 228.780092][ T4194] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 228.835690][ T4194] [drm] Initialized udl on minor 2 [ 228.860352][ T7833] loop2: detected capacity change from 0 to 1024 [ 228.937133][ T4194] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 229.040377][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1436'. [ 229.053926][ T4194] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 229.164578][ T4194] usb 5-1: USB disconnect, device number 10 [ 229.210587][ T4199] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 229.254624][ T4199] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 229.310876][ T4199] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 229.470316][ T7833] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 229.636667][ T7854] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1431'. [ 229.969541][ T7851] loop3: detected capacity change from 0 to 8192 [ 230.148398][ T7869] loop1: detected capacity change from 0 to 512 [ 230.215750][ T7869] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 230.215750][ T7869] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 230.215750][ T7869] [ 230.284163][ T7838] loop0: detected capacity change from 0 to 32768 [ 230.328388][ T7851] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 230.380225][ T3618] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 230.534988][ T7869] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #3: comm syz.1.1446: corrupted inode contents [ 230.579500][ T3877] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 230.667817][ T7869] EXT4-fs (loop1): Remounting filesystem read-only [ 230.684511][ T7869] EXT4-fs error (device loop1): ext4_dirty_inode:6007: inode #3: comm syz.1.1446: mark_inode_dirty error [ 230.885508][ T7869] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #3: comm syz.1.1446: corrupted inode contents [ 230.954418][ T7869] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.1446: mark_inode_dirty error [ 230.974895][ T7838] JBD2: Ignoring recovery information on journal [ 231.075872][ T7869] Quota error (device loop1): write_blk: dquota write failed [ 231.099340][ T3877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.126600][ T7869] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 231.130409][ T3877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.177294][ T7838] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 231.186379][ T3877] usb 5-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 231.187388][ T3618] usb 3-1: New USB device found, idVendor=041e, idProduct=400a, bcdDevice=9e.b6 [ 231.203690][ T7869] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.1446: Failed to acquire dquot type 0 [ 231.248911][ T3877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.267956][ T7869] EXT4-fs (loop1): 1 truncate cleaned up [ 231.278017][ T7869] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nouser_xattr,. Quota mode: writeback. [ 231.279999][ T3618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.329553][ T3877] usb 5-1: config 0 descriptor?? [ 231.340416][ T3618] usb 3-1: Product: syz [ 231.345372][ T3618] usb 3-1: Manufacturer: syz [ 231.360809][ T7869] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038 (0x7fffffff) [ 231.383254][ T3618] usb 3-1: SerialNumber: syz [ 231.462113][ T3618] usb 3-1: config 0 descriptor?? [ 231.513264][ T7890] loop3: detected capacity change from 0 to 512 [ 231.519418][ T3618] gspca_main: spca500-2.14.0 probing 041e:400a [ 231.565106][ T5865] ocfs2: Unmounting device (7,0) on (node local) [ 231.698589][ T7890] EXT4-fs (loop3): Ignoring removed orlov option [ 231.763493][ T3618] usb 3-1: USB disconnect, device number 10 [ 231.798758][ T7890] EXT4-fs (loop3): 1 orphan inode deleted [ 231.842206][ T7890] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,auto_da_alloc,init_itable,stripe=0x000000000000007b,orlov,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 231.852155][ T3877] glorious 0003:258A:0036.001B: unknown main item tag 0x0 [ 231.890205][ T3877] glorious 0003:258A:0036.001B: unknown main item tag 0x0 [ 231.927643][ T7899] loop1: detected capacity change from 0 to 256 [ 231.934478][ T3877] glorious 0003:258A:0036.001B: unknown main item tag 0x0 [ 231.962373][ T3877] glorious 0003:258A:0036.001B: unknown main item tag 0x0 [ 231.990623][ T3877] glorious 0003:258A:0036.001B: unknown main item tag 0x0 [ 232.000210][ T3877] glorious 0003:258A:0036.001B: unknown main item tag 0x0 [ 232.008085][ T3877] glorious 0003:258A:0036.001B: unknown main item tag 0x0 [ 232.008819][ T7890] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038 (0x7fffffff) [ 232.025199][ T7899] exfat: Deprecated parameter 'utf8' [ 232.081377][ T7899] exfat: Deprecated parameter 'utf8' [ 232.090793][ T7899] exfat: Deprecated parameter 'utf8' [ 232.096382][ T7899] exfat: Deprecated parameter 'utf8' [ 232.100227][ T3877] glorious 0003:258A:0036.001B: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.4-1/input0 [ 232.170130][ T7901] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1458'. [ 232.179540][ T7901] vxcan1: MTU too low for tipc bearer [ 232.191081][ T3877] usb 5-1: USB disconnect, device number 11 [ 232.232342][ T7901] tipc: Enabling of bearer rejected, failed to enable media [ 232.265760][ T7899] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xac5c0b1f, utbl_chksum : 0xe619d30d) [ 232.671511][ T7914] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1465'. [ 232.719499][ T7914] unsupported nlmsg_type 40 [ 232.799448][ T7916] netlink: 'syz.2.1466': attribute type 10 has an invalid length. [ 233.270086][ T3745] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 233.647334][ T3745] usb 5-1: config index 0 descriptor too short (expected 3133, got 61) [ 233.677640][ T3745] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 233.698065][ T3745] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.721270][ T3745] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 233.745735][ T3745] usb 5-1: config 0 has no interface number 0 [ 233.799799][ T3745] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 233.850338][ T3745] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 233.868817][ T3745] usb 5-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 233.909558][ T3745] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 233.927540][ T3745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.954749][ T3745] usb 5-1: config 0 descriptor?? [ 234.021891][ T3745] gspca_main: spca561-2.14.0 probing abcd:cdee [ 234.171718][ T3877] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 234.300149][ T3745] spca561: probe of 5-1:0.156 failed with error -22 [ 234.331057][ T3745] usb 5-1: MIDIStreaming interface descriptor not found [ 234.442527][ T3745] usb 5-1: USB disconnect, device number 12 [ 234.650166][ T3750] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 234.697232][ T3877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.723658][ T3877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.767547][ T3877] usb 2-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 234.806662][ T3877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.859998][ T3877] usb 2-1: config 0 descriptor?? [ 234.868317][ T7975] loop3: detected capacity change from 0 to 32768 [ 234.971194][ T7975] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1493 (7975) [ 235.053853][ T7975] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 235.070949][ T3750] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 235.105419][ T3750] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.134628][ T7975] BTRFS info (device loop3): turning on sync discard [ 235.161871][ T7975] BTRFS info (device loop3): max_inline at 0 [ 235.199462][ T3750] usb 3-1: config 0 has no interface number 0 [ 235.211539][ T7975] BTRFS info (device loop3): enabling ssd optimizations [ 235.234033][ T3750] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 235.255307][ T7975] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 235.297464][ T3750] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.325320][ T7975] BTRFS info (device loop3): use lzo compression, level 0 [ 235.333376][ T7975] BTRFS info (device loop3): turning off discard [ 235.352663][ T3877] asus 0003:048D:CE50.001C: unknown main item tag 0x0 [ 235.365886][ T7975] BTRFS info (device loop3): using free space tree [ 235.374371][ T3877] asus 0003:048D:CE50.001C: unknown main item tag 0x0 [ 235.397874][ T7975] BTRFS info (device loop3): has skinny extents [ 235.405400][ T3877] asus 0003:048D:CE50.001C: unknown main item tag 0x0 [ 235.418112][ T3877] asus 0003:048D:CE50.001C: unknown main item tag 0x0 [ 235.433936][ T3877] asus 0003:048D:CE50.001C: unknown main item tag 0x0 [ 235.453826][ T3877] asus 0003:048D:CE50.001C: hidraw0: USB HID v0.00 Device [HID 048d:ce50] on usb-dummy_hcd.1-1/input0 [ 235.507750][ T3877] asus 0003:048D:CE50.001C: Asus input not registered [ 235.516631][ T8000] loop4: detected capacity change from 0 to 8192 [ 235.521282][ T3750] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 235.542095][ T3877] asus: probe of 0003:048D:CE50.001C failed with error -12 [ 235.549705][ T3750] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.579809][ T3750] usb 3-1: Product: syz [ 235.589159][ T3750] usb 3-1: Manufacturer: syz [ 235.603321][ T3877] usb 2-1: USB disconnect, device number 14 [ 235.614709][ T3750] usb 3-1: SerialNumber: syz [ 235.635513][ T8000] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 235.665368][ T3750] usb 3-1: config 0 descriptor?? [ 235.684249][ T8000] REISERFS (device loop4): using ordered data mode [ 235.735515][ T8000] reiserfs: using flush barriers [ 235.775003][ T8000] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 235.853367][ T8000] REISERFS (device loop4): checking transaction log (loop4) [ 235.885238][ T8000] REISERFS (device loop4): Using r5 hash to sort names [ 235.893586][ T8000] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 235.903490][ T7991] loop0: detected capacity change from 0 to 32768 [ 235.962204][ T8000] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 236.066245][ T8000] REISERFS warning (device loop4): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=8, len=2 - odd [ 236.190330][ T3750] usbtouchscreen: probe of 3-1:0.117 failed with error -71 [ 236.244635][ T3750] usb 3-1: USB disconnect, device number 11 [ 236.797026][ T8044] misc userio: No port type given on /dev/userio [ 237.030339][ T3618] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 237.244626][ T4194] Bluetooth: hci0: command 0x0406 tx timeout [ 237.384775][ T8066] loop2: detected capacity change from 0 to 1024 [ 237.400373][ T3618] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 237.421442][ T3618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.434336][ T3618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.445194][ T3618] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 237.459501][ T3618] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 237.498340][ T3618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.517024][ T3618] usb 5-1: config 0 descriptor?? [ 237.541140][ T3877] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 237.585884][ T8066] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 237.659606][ T8066] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 237.977062][ T3877] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 238.001344][ T3877] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.018112][ T3618] wacom 0003:056A:0331.001D: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.4-1/input0 [ 238.023636][ T3877] usb 2-1: config 0 interface 0 has no altsetting 0 [ 238.045535][ T3877] usb 2-1: New USB device found, idVendor=056a, idProduct=005e, bcdDevice= 0.00 [ 238.089209][ T3877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.132373][ T3877] usb 2-1: config 0 descriptor?? [ 238.247401][ T3618] usb 5-1: USB disconnect, device number 13 [ 238.310887][ T8073] tipc: Started in network mode [ 238.317185][ T8073] tipc: Node identity , cluster identity 4711 [ 238.372395][ T8073] tipc: Failed to set node id, please configure manually [ 238.390246][ T8073] tipc: Enabling of bearer rejected, failed to enable media [ 238.642974][ T3877] wacom 0003:056A:005E.001E: unknown main item tag 0x0 [ 238.660189][ T3877] wacom 0003:056A:005E.001E: unknown main item tag 0x0 [ 238.684802][ T3877] wacom 0003:056A:005E.001E: unknown main item tag 0x0 [ 238.712283][ T3877] wacom 0003:056A:005E.001E: unknown main item tag 0x0 [ 238.732555][ T3877] wacom 0003:056A:005E.001E: hidraw0: USB HID v0.00 Device [HID 056a:005e] on usb-dummy_hcd.1-1/input0 [ 238.918605][ T13] usb 2-1: USB disconnect, device number 15 [ 239.001190][ T8089] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1537'. [ 239.248741][ T8075] loop2: detected capacity change from 0 to 32768 [ 239.387907][ T3877] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 239.393927][ T8094] loop4: detected capacity change from 0 to 2048 [ 239.433935][ T8075] XFS (loop2): Mounting V5 Filesystem [ 239.509736][ T8075] XFS (loop2): Ending clean mount [ 239.527917][ T8075] XFS (loop2): Quotacheck needed: Please wait. [ 239.730670][ T8075] XFS (loop2): Quotacheck: Done. [ 239.757891][ T3877] usb 4-1: Using ep0 maxpacket: 8 [ 239.769589][ T8094] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 239.828351][ T7211] XFS (loop2): Unmounting Filesystem [ 240.020046][ T13] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 240.021580][ T3877] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.194863][ T3877] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 240.232447][ T3877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 240.263837][ T3877] usb 4-1: SerialNumber: syz [ 240.270252][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 240.292363][ T3877] usb 4-1: config 0 descriptor?? [ 240.310444][ T3752] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 240.390126][ T13] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 240.419215][ T13] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 240.459671][ T13] usb 2-1: config 135 has no interface number 0 [ 240.477671][ T13] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.554437][ T3752] usb 5-1: Using ep0 maxpacket: 16 [ 240.583646][ T3877] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 240.594937][ T3877] usb 4-1: No valid video chain found. [ 240.660250][ T13] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 240.680334][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.699674][ T13] usb 2-1: Product: syz [ 240.710220][ T3752] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.731882][ T13] usb 2-1: Manufacturer: syz [ 240.736514][ T13] usb 2-1: SerialNumber: syz [ 240.752751][ T3752] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.800164][ T3752] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 240.821621][ T3752] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.833561][ T13] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 240.850288][ T13] usb 2-1: No valid video chain found. [ 240.888421][ T3752] usb 5-1: config 0 descriptor?? [ 240.913401][ T13] usb 4-1: USB disconnect, device number 16 [ 241.085559][ T3618] usb 2-1: USB disconnect, device number 16 [ 241.371871][ T3752] cp2112 0003:10C4:EA90.001F: unbalanced delimiter at end of report description [ 241.394713][ T8123] loop2: detected capacity change from 0 to 32768 [ 241.402355][ T3752] cp2112 0003:10C4:EA90.001F: parse failed [ 241.418892][ T3752] cp2112: probe of 0003:10C4:EA90.001F failed with error -22 [ 241.505893][ T8119] loop0: detected capacity change from 0 to 32768 [ 241.576321][ T8119] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 241.609569][ T3752] usb 5-1: USB disconnect, device number 14 [ 241.615210][ T8119] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 241.776289][ T8123] JBD2: Ignoring recovery information on journal [ 241.832834][ T8119] gfs2: fsid=syz:syz.s: journal 0 mapped with 16 extents in 0ms [ 241.955072][ T8123] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 242.044451][ T8138] loop1: detected capacity change from 0 to 256 [ 242.090019][ T8119] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 242.168367][ T8138] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 242.297503][ T7211] ocfs2: Unmounting device (7,2) on (node local) [ 242.766606][ T8154] syz.2.1564 (8154): /proc/8153/oom_adj is deprecated, please use /proc/8153/oom_score_adj instead. [ 243.415696][ T3877] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 243.521531][ T8130] loop3: detected capacity change from 0 to 40427 [ 243.752711][ T8130] F2FS-fs (loop3): invalid crc value [ 243.818886][ T8130] F2FS-fs (loop3): Found nat_bits in checkpoint [ 243.874255][ T8149] loop0: detected capacity change from 0 to 40427 [ 243.947323][ T3877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.982773][ T3877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.999259][ T8149] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 244.024534][ T3877] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.038334][ T8149] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 244.068062][ T8170] loop4: detected capacity change from 0 to 32768 [ 244.081210][ T3877] usb 3-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 244.088314][ T8161] loop1: detected capacity change from 0 to 32768 [ 244.128152][ T3877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.136977][ T8161] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.1566 (8161) [ 244.173751][ T8149] F2FS-fs (loop0): Found nat_bits in checkpoint [ 244.176268][ T8130] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 244.195987][ T3877] usb 3-1: config 0 descriptor?? [ 244.263957][ T8161] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 244.293298][ T8161] BTRFS info (device loop1): using free space tree [ 244.307198][ T8161] BTRFS info (device loop1): has skinny extents [ 244.318529][ T8170] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 244.393994][ T8149] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 244.414286][ T8149] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 244.511287][ T3574] ocfs2: Unmounting device (7,4) on (node local) [ 244.608683][ T8161] BTRFS info (device loop1): enabling ssd optimizations [ 244.631410][ T5865] attempt to access beyond end of device [ 244.631410][ T5865] loop0: rw=2049, want=45104, limit=40427 [ 244.785846][ T3877] uclogic 0003:28BD:0055.0020: unknown main item tag 0x0 [ 244.800464][ T3877] uclogic 0003:28BD:0055.0020: No inputs registered, leaving [ 244.844271][ T3877] uclogic 0003:28BD:0055.0020: hidraw0: USB HID v0.00 Device [HID 28bd:0055] on usb-dummy_hcd.2-1/input0 [ 245.025471][ T3877] usb 3-1: USB disconnect, device number 12 [ 246.012999][ T8222] loop2: detected capacity change from 0 to 16 [ 246.109647][ T8222] erofs: (device loop2): mounted with root inode @ nid 36. [ 246.156477][ T8222] erofs: (device loop2): z_erofs_readpage: failed to read, err [-95] [ 246.725658][ T8212] loop0: detected capacity change from 0 to 32768 [ 246.843494][ T8212] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1579 (8212) [ 246.941159][ T8212] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 246.974682][ T8212] BTRFS info (device loop0): setting nodatacow, compression disabled [ 247.020729][ T8212] BTRFS info (device loop0): setting datacow [ 247.047867][ T8212] BTRFS info (device loop0): doing ref verification [ 247.074480][ T8212] BTRFS info (device loop0): force clearing of disk cache [ 247.117493][ T8212] BTRFS info (device loop0): turning off barriers [ 247.135033][ T8212] BTRFS info (device loop0): enabling ssd optimizations [ 247.165443][ T8255] program syz.1.1598 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.190003][ T8212] BTRFS info (device loop0): using spread ssd allocation scheme [ 247.225752][ T8212] BTRFS info (device loop0): not using ssd optimizations [ 247.260016][ T8212] BTRFS info (device loop0): not using spread ssd allocation scheme [ 247.312467][ T8212] BTRFS info (device loop0): using free space tree [ 247.351896][ T8212] BTRFS info (device loop0): has skinny extents [ 247.386094][ T8220] loop3: detected capacity change from 0 to 40427 [ 247.628915][ T8220] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 247.634217][ T8238] loop2: detected capacity change from 0 to 32768 [ 247.648501][ T8220] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 247.720514][ T8212] BTRFS info (device loop0): clearing free space tree [ 247.731034][ T8220] F2FS-fs (loop3): Found nat_bits in checkpoint [ 247.744822][ T8238] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1589 (8238) [ 247.770691][ T8212] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 247.782623][ T8238] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 247.805579][ T8212] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 247.814940][ T8238] BTRFS info (device loop2): using free space tree [ 247.866836][ T8238] BTRFS info (device loop2): has skinny extents [ 247.885172][ T8212] BTRFS info (device loop0): creating free space tree [ 247.941100][ T8212] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 247.970151][ T8212] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 247.996914][ T8300] mmap: syz.1.1606 (8300): VmData 41648128 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 248.078940][ T8220] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 248.099039][ T8220] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 248.237142][ T8238] BTRFS info (device loop2): enabling ssd optimizations [ 248.393866][ T8322] loop4: detected capacity change from 0 to 256 [ 248.425633][ T3752] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 248.685224][ T8322] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3962bc8b, utbl_chksum : 0xe619d30d) [ 248.730097][ T3752] usb 2-1: Using ep0 maxpacket: 8 [ 248.850356][ T3752] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.057220][ T3752] usb 2-1: New USB device found, idVendor=06f8, idProduct=3009, bcdDevice=3c.93 [ 249.086298][ T3752] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.120572][ T3752] usb 2-1: Product: syz [ 249.124853][ T3752] usb 2-1: Manufacturer: syz [ 249.144992][ T3752] usb 2-1: SerialNumber: syz [ 249.224714][ T3752] usb 2-1: config 0 descriptor?? [ 249.294149][ T3752] gspca_main: gspca_pac7302-2.14.0 probing 06f8:3009 [ 249.629747][ T8336] loop2: detected capacity change from 0 to 2048 [ 249.695556][ T8336] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 249.733117][ T8336] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 249.962436][ T3752] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 249.979321][ T3752] gspca_pac7302: probe of 2-1:0.0 failed with error -71 [ 250.011764][ T3752] usb 2-1: USB disconnect, device number 17 [ 250.421091][ T8354] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1624'. [ 250.460102][ T13] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 250.667841][ T8360] loop1: detected capacity change from 0 to 512 [ 250.696370][ T8333] loop4: detected capacity change from 0 to 40427 [ 250.774940][ T8338] loop0: detected capacity change from 0 to 40427 [ 250.818515][ T8360] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 250.829253][ T8338] F2FS-fs (loop0): Invalid log blocks per segment (4278190089) [ 250.829280][ T8338] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 250.831159][ T8360] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e11c, mo2=0002] [ 250.832123][ T8360] EXT4-fs (loop1): orphan cleanup on readonly fs [ 250.861588][ T8338] F2FS-fs (loop0): invalid crc value [ 250.893462][ T13] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 250.893497][ T13] usb 3-1: config 0 has no interface number 0 [ 250.894759][ T8360] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1627: bg 0: block 361: padding at end of block bitmap is not set [ 250.901512][ T8333] F2FS-fs (loop4): Found nat_bits in checkpoint [ 250.929675][ T8360] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 250.942624][ T8360] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.1627: attempt to clear invalid blocks 33619980 len 1 [ 250.981842][ T8360] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1627: invalid indirect mapped block 1811939328 (level 0) [ 250.983985][ T8360] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1627: invalid indirect mapped block 2185560079 (level 1) [ 250.988918][ T8360] EXT4-fs (loop1): 1 truncate cleaned up [ 250.988943][ T8360] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,noblock_validity,discard,grpid,inode_readahead_blks=0x0000000001000000,errors=continue. Quota mode: none. [ 251.041071][ T8338] F2FS-fs (loop0): Found nat_bits in checkpoint [ 251.050329][ T13] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 251.050358][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.050377][ T13] usb 3-1: Product: syz [ 251.050390][ T13] usb 3-1: Manufacturer: syz [ 251.050405][ T13] usb 3-1: SerialNumber: syz [ 251.052289][ T13] usb 3-1: config 0 descriptor?? [ 251.106551][ T8333] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 251.122771][ T8333] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 251.165967][ T8338] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 251.165997][ T8338] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 251.268283][ T3574] attempt to access beyond end of device [ 251.268283][ T3574] loop4: rw=2049, want=45104, limit=40427 [ 251.289160][ T5865] attempt to access beyond end of device [ 251.289160][ T5865] loop0: rw=2049, want=45104, limit=40427 [ 251.323026][ T13] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 251.785146][ T13] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 251.796699][ T13] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 251.810979][ T13] usb 3-1: media controller created [ 251.845697][ T8379] loop3: detected capacity change from 0 to 4096 [ 251.848368][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 251.941124][ T8379] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 252.288231][ T4200] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 252.340824][ T13] usb 3-1: USB disconnect, device number 13 [ 252.434545][ T8379] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 252.452896][ T8379] ntfs3: loop3: Failed to load $Extend. [ 252.595782][ T4200] usb 2-1: Using ep0 maxpacket: 16 [ 252.635617][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1641'. [ 252.724346][ T8401] loop4: detected capacity change from 0 to 256 [ 252.767549][ T4200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.794477][ T4200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.826334][ T8404] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 252.844312][ T4200] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 252.875987][ T4200] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.913146][ T4200] usb 2-1: config 0 descriptor?? [ 252.941978][ T8401] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 252.997639][ T8401] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 253.041220][ T8401] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 253.071265][ T8417] loop2: detected capacity change from 0 to 64 [ 253.423842][ T4200] elecom 0003:056E:00E6.0021: item fetching failed at offset 2/5 [ 253.424258][ T4200] elecom: probe of 0003:056E:00E6.0021 failed with error -22 [ 253.675852][ T4200] usb 2-1: USB disconnect, device number 18 [ 253.723516][ T8425] loop2: detected capacity change from 0 to 4096 [ 253.787064][ T8425] ntfs3: loop2: ino=3, Correct links count -> 2. [ 253.934436][ T8435] loop0: detected capacity change from 0 to 1764 [ 254.191928][ T8442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1663'. [ 254.584117][ T8462] loop0: detected capacity change from 0 to 256 [ 254.642951][ T8431] loop4: detected capacity change from 0 to 32768 [ 254.741765][ T8431] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.1658 (8431) [ 254.768510][ T26] audit: type=1326 audit(1727519438.664:6316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8473 comm="syz.2.1679" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc1086dff9 code=0x0 [ 254.829186][ T8431] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 254.853747][ T8431] BTRFS info (device loop4): using free space tree [ 254.875318][ T8431] BTRFS info (device loop4): has skinny extents [ 255.143149][ T8487] loop3: detected capacity change from 0 to 4096 [ 255.241504][ T8431] BTRFS info (device loop4): enabling ssd optimizations [ 255.255545][ T8487] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 255.643459][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.649798][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.951359][ T8482] loop1: detected capacity change from 0 to 32768 [ 256.142127][ T8518] loop4: detected capacity change from 0 to 512 [ 256.162633][ T8482] XFS (loop1): Mounting V5 Filesystem [ 256.322986][ T8518] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.1687: casefold flag without casefold feature [ 256.377332][ T8518] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1687: couldn't read orphan inode 15 (err -117) [ 256.466322][ T8518] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 256.494404][ T8482] XFS (loop1): Ending clean mount [ 256.558072][ T8482] XFS (loop1): Quotacheck needed: Please wait. [ 256.861391][ T8482] XFS (loop1): Quotacheck: Done. [ 257.068435][ T3568] XFS (loop1): Unmounting Filesystem [ 257.404337][ T4198] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 257.655927][ T8528] loop3: detected capacity change from 0 to 40427 [ 257.727291][ T8528] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 257.749798][ T8528] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 257.787180][ T8528] F2FS-fs (loop3): invalid crc value [ 257.831706][ T8528] F2FS-fs (loop3): Found nat_bits in checkpoint [ 257.907368][ T4198] usb 5-1: config index 0 descriptor too short (expected 4114, got 18) [ 257.952712][ T8528] F2FS-fs (loop3): recover fsync data on readonly fs [ 257.982689][ T8532] loop2: detected capacity change from 0 to 40427 [ 257.995622][ T8528] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30 [ 258.003758][ T8528] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 258.117617][ T8532] F2FS-fs (loop2): invalid crc_offset: 16 [ 258.162277][ T8538] loop1: detected capacity change from 0 to 4096 [ 258.175815][ T4198] usb 5-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 258.187432][ T4198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.210382][ T4198] usb 5-1: Product: syz [ 258.214731][ T8532] F2FS-fs (loop2): Found nat_bits in checkpoint [ 258.231085][ T4198] usb 5-1: Manufacturer: syz [ 258.251070][ T4198] usb 5-1: SerialNumber: syz [ 258.262955][ T4198] usb 5-1: config 0 descriptor?? [ 258.362910][ T8542] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 258.388804][ T8532] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 258.485411][ T8532] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=400000, run fsck to fix. [ 258.956703][ T8555] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.966552][ T8555] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.976055][ T8555] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.984798][ T8555] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.000047][ T4198] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 259.021258][ T4198] asix: probe of 5-1:0.0 failed with error -71 [ 259.022717][ T8555] Zero length message leads to an empty skb [ 259.095229][ T4198] usb 5-1: USB disconnect, device number 15 [ 259.417584][ T8570] loop2: detected capacity change from 0 to 512 [ 259.539618][ T8544] loop0: detected capacity change from 0 to 32768 [ 259.569796][ T8570] EXT4-fs (loop2): Ignoring removed nobh option [ 259.589745][ T8570] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 259.672214][ T8570] EXT4-fs (loop2): 1 truncate cleaned up [ 259.678993][ T8570] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 259.706699][ T26] audit: type=1800 audit(1727519443.604:6317): pid=8570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1708" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 259.750963][ T8544] XFS (loop0): Mounting V5 Filesystem [ 259.808833][ T8593] loop1: detected capacity change from 0 to 512 [ 259.952986][ T8593] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 259.955628][ T4506] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 259.976072][ T8544] XFS (loop0): Ending clean mount [ 260.023754][ T8593] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038 (0x7fffffff) [ 260.087777][ T8596] futex_wake_op: syz.4.1717 tries to shift op by 144; fix this program [ 260.240745][ T5865] XFS (loop0): Unmounting Filesystem [ 260.340860][ T8606] loop2: detected capacity change from 0 to 16 [ 260.366957][ T4506] usb 4-1: Using ep0 maxpacket: 32 [ 260.399847][ T8606] erofs: (device loop2): mounted with root inode @ nid 36. [ 260.561361][ T4506] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 260.570752][ T4506] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.630783][ T4506] usb 4-1: config 0 descriptor?? [ 260.727176][ T8616] netlink: 'syz.1.1722': attribute type 1 has an invalid length. [ 260.731185][ T4506] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 260.955705][ T8622] netlink: 'syz.1.1729': attribute type 3 has an invalid length. [ 260.964347][ T8622] netlink: 'syz.1.1729': attribute type 1 has an invalid length. [ 260.977935][ T8624] loop4: detected capacity change from 0 to 64 [ 261.059030][ T8628] device macsec1 entered promiscuous mode [ 261.359188][ T8639] loop2: detected capacity change from 0 to 1024 [ 261.393081][ T8642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1737'. [ 261.487862][ T13] usb 4-1: USB disconnect, device number 17 [ 261.513941][ T8642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1737'. [ 261.648776][ T8648] netlink: 'syz.0.1741': attribute type 13 has an invalid length. [ 261.955021][ T8661] loop2: detected capacity change from 0 to 64 [ 262.063340][ T8630] loop1: detected capacity change from 0 to 32768 [ 262.308102][ T8676] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1753'. [ 262.531846][ T8630] XFS (loop1): Mounting V5 Filesystem [ 262.644390][ T8665] loop4: detected capacity change from 0 to 8192 [ 262.754915][ T8679] loop2: detected capacity change from 0 to 8192 [ 262.768594][ T8665] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 262.782060][ T8630] XFS (loop1): Ending clean mount [ 262.806728][ T8665] REISERFS (device loop4): using ordered data mode [ 262.815442][ T8665] reiserfs: using flush barriers [ 262.833706][ T8665] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 262.865849][ T8630] XFS (loop1): Quotacheck needed: Please wait. [ 262.865954][ T8665] REISERFS (device loop4): checking transaction log (loop4) [ 262.987174][ T8679] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 262.998000][ T8630] XFS (loop1): Quotacheck: Done. [ 263.011341][ T8665] REISERFS (device loop4): Using r5 hash to sort names [ 263.019369][ T8665] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 263.050386][ T8679] REISERFS (device loop2): using ordered data mode [ 263.089995][ T8679] reiserfs: using flush barriers [ 263.144370][ T8679] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 263.168793][ T8679] REISERFS (device loop2): checking transaction log (loop2) [ 263.205796][ T3568] XFS (loop1): Unmounting Filesystem [ 263.234535][ T8679] REISERFS (device loop2): Using tea hash to sort names [ 263.250348][ T8679] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 263.648960][ T8715] overlayfs: unrecognized mount option "?´Z‰ugø=ãÊ2Áƒê£DtÀ.ú›ÚþÙµnÏý í1öîˆéÃëÄGÕíùßE-Ôû"èófhÇ!%TáêÉ äΰåºø•¯8ì™Y¯ŒPÑ9)-¼N5\þ\»–ÖÏ°–µx¦˜=mjYÉp1ÁkïW‡'ø<Ém™ì—Ã{îÁû¼¦À©Ñ¥µ¶™{‚¸îwгáQßýÞKSóm«@Y†Q™ÔKÔ8?rØÄœ˜jjØ 1±\È{>1Qµ!@dRN«‹ðö ;+!sõ¿×‚‰Þ3~öÿ&±RÍÁ½÷~5†tfG¶Õ MY!K0¢ò«Xl—÷l”~¥¨Ú" or missing value [ 263.652519][ T8712] loop3: detected capacity change from 0 to 4096 [ 263.743671][ T8709] loop0: detected capacity change from 0 to 4096 [ 263.833292][ T8712] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 263.879702][ T8709] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 263.982111][ T8709] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 264.048935][ T8709] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 264.056247][ T8712] ntfs3: loop3: mft corrupted [ 264.099965][ T8709] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 264.135744][ T8712] ntfs3: loop3: Failed to load $Extend. [ 264.209364][ T8709] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 264.355621][ T8709] ntfs: volume version 3.1. [ 264.420192][ T8709] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 264.475410][ T8709] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 264.553966][ T8709] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 264.627561][ T8748] loop1: detected capacity change from 0 to 256 [ 264.634003][ T8709] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 264.650345][ T8709] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 264.679167][ T8751] loop3: detected capacity change from 0 to 512 [ 264.794218][ T8748] FAT-fs (loop1): Directory bread(block 64) failed [ 264.850200][ T8748] FAT-fs (loop1): Directory bread(block 65) failed [ 264.856808][ T8751] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 264.876235][ T8748] FAT-fs (loop1): Directory bread(block 66) failed [ 264.914383][ T8751] EXT4-fs (loop3): orphan cleanup on readonly fs [ 264.922392][ T8748] FAT-fs (loop1): Directory bread(block 67) failed [ 264.969063][ T8748] FAT-fs (loop1): Directory bread(block 68) failed [ 265.018624][ T8748] FAT-fs (loop1): Directory bread(block 69) failed [ 265.042969][ T8751] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.1773: Failed to acquire dquot type 1 [ 265.046053][ T8748] FAT-fs (loop1): Directory bread(block 70) failed [ 265.088993][ T8748] FAT-fs (loop1): Directory bread(block 71) failed [ 265.114833][ T8748] FAT-fs (loop1): Directory bread(block 72) failed [ 265.129523][ T8751] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1773: bg 0: block 40: padding at end of block bitmap is not set [ 265.170015][ T8748] FAT-fs (loop1): Directory bread(block 73) failed [ 265.236660][ T8751] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 265.295200][ T8751] EXT4-fs (loop3): 1 truncate cleaned up [ 265.325016][ T8751] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 265.449992][ T8781] loop0: detected capacity change from 0 to 2048 [ 265.643354][ T8781] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 265.662865][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1787'. [ 265.700798][ T3752] kernel read not supported for file /dsp (pid: 3752 comm: kworker/0:15) [ 265.714860][ T8786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1787'. [ 265.733574][ T8789] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 266.343471][ T4506] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 266.522861][ T8821] loop0: detected capacity change from 0 to 512 [ 266.531165][ T8775] loop2: detected capacity change from 0 to 32768 [ 266.605396][ T8775] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1785 (8775) [ 266.699796][ T8775] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 266.726524][ T8775] BTRFS info (device loop2): using free space tree [ 266.740122][ T8775] BTRFS info (device loop2): has skinny extents [ 266.796810][ T8821] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,i_version,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 266.822900][ T8821] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038 (0x7fffffff) [ 266.856555][ T4506] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.880922][ T4506] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.938148][ T4506] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 266.961933][ T4506] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.966333][ T8840] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz.0.1801: Failed to acquire dquot type 0 [ 266.987091][ T4506] usb 5-1: config 0 descriptor?? [ 267.122848][ T8775] BTRFS info (device loop2): enabling ssd optimizations [ 267.476720][ T4506] dragonrise 0003:0079:0006.0022: item fetching failed at offset 2/5 [ 267.492848][ T4506] dragonrise 0003:0079:0006.0022: parse failed [ 267.533399][ T4506] dragonrise: probe of 0003:0079:0006.0022 failed with error -22 [ 267.544119][ T8825] loop3: detected capacity change from 0 to 32768 [ 267.614063][ T8825] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.1803 (8825) [ 268.010167][ T7] usb 5-1: USB disconnect, device number 16 [ 268.084662][ T8825] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 268.100005][ T8825] BTRFS info (device loop3): using free space tree [ 268.107119][ T8825] BTRFS info (device loop3): has skinny extents [ 268.154315][ T8865] loop1: detected capacity change from 0 to 136 [ 268.174339][ T8863] loop2: detected capacity change from 0 to 1024 [ 268.464405][ T8886] loop2: detected capacity change from 0 to 2048 [ 268.531375][ T8892] loop4: detected capacity change from 0 to 4096 [ 268.539880][ T8886] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 268.588568][ T8825] BTRFS info (device loop3): enabling ssd optimizations [ 268.622985][ T8892] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 268.680205][ T8895] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 268.776344][ T8892] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 268.833298][ T8892] ntfs3: loop4: Failed to load $Extend. [ 269.343212][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1819'. [ 269.544985][ T8904] netlink: 'syz.1.1820': attribute type 1 has an invalid length. [ 270.052746][ T8929] loop4: detected capacity change from 0 to 16 [ 270.116357][ T8929] erofs: (device loop4): mounted with root inode @ nid 36. [ 270.210109][ T3754] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 270.242079][ T8898] loop2: detected capacity change from 0 to 40427 [ 270.352373][ T8898] F2FS-fs (loop2): invalid crc value [ 270.499800][ T8898] F2FS-fs (loop2): Found nat_bits in checkpoint [ 270.580457][ T3754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.605484][ T3754] usb 4-1: New USB device found, idVendor=056a, idProduct=0093, bcdDevice= 0.00 [ 270.625283][ T3754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.648183][ T3754] usb 4-1: config 0 descriptor?? [ 270.668785][ T8898] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 270.749110][ T8898] F2FS-fs (loop2): Corrupted max_depth of 3: 4294967295 [ 271.055584][ T8946] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1837'. [ 271.086845][ T8933] loop1: detected capacity change from 0 to 40427 [ 271.095563][ T8946] tipc: Enabling of bearer rejected, failed to enable media [ 271.140121][ T3754] wacom 0003:056A:0093.0023: hidraw0: USB HID v0.00 Device [HID 056a:0093] on usb-dummy_hcd.3-1/input0 [ 271.168831][ T8933] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 271.180482][ T8933] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 271.246068][ T8933] F2FS-fs (loop1): invalid crc value [ 271.285147][ T8933] F2FS-fs (loop1): Found nat_bits in checkpoint [ 271.378583][ T3754] usb 4-1: USB disconnect, device number 18 [ 271.484870][ T8933] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 271.497949][ T8933] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 271.615451][ T8943] loop4: detected capacity change from 0 to 32768 [ 271.671717][ T3568] attempt to access beyond end of device [ 271.671717][ T3568] loop1: rw=2049, want=45104, limit=40427 [ 271.824403][ T8943] XFS (loop4): Mounting V5 Filesystem [ 272.265498][ T8952] loop0: detected capacity change from 0 to 32768 [ 272.328770][ T8943] XFS (loop4): Ending clean mount [ 272.376346][ T8943] XFS (loop4): Quotacheck needed: Please wait. [ 272.530101][ T7] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 272.637646][ T8943] XFS (loop4): Quotacheck: Done. [ 272.670704][ T8986] loop1: detected capacity change from 0 to 4096 [ 272.723105][ T3574] XFS (loop4): Unmounting Filesystem [ 272.763285][ T8952] JBD2: Ignoring recovery information on journal [ 272.847664][ T8952] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 273.070101][ T7] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 273.079629][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.133609][ T7] usb 3-1: Product: syz [ 273.140872][ T7] usb 3-1: Manufacturer: syz [ 273.145671][ T7] usb 3-1: SerialNumber: syz [ 273.154228][ T7] usb 3-1: config 0 descriptor?? [ 273.181396][ T5865] ocfs2: Unmounting device (7,0) on (node local) [ 273.241931][ T9004] netlink: 'syz.1.1860': attribute type 12 has an invalid length. [ 273.255279][ T9004] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1860'. [ 273.325823][ T3752] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 273.411891][ T7] hso 3-1:0.0: Failed to find BULK IN ep [ 273.433565][ T7] usb-storage 3-1:0.0: USB Mass Storage device detected [ 273.580061][ T3752] usb 4-1: Using ep0 maxpacket: 16 [ 273.638034][ T7] usb 3-1: USB disconnect, device number 14 [ 273.705080][ T3752] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.753804][ T3752] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.778929][ T3752] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 273.805090][ T3752] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 273.816430][ T3752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.851790][ T3752] usb 4-1: config 0 descriptor?? [ 274.345106][ T3752] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 274.394982][ T3752] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0024/input/input31 [ 274.457539][ T3752] microsoft 0003:045E:07DA.0024: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 274.594224][ T7] usb 4-1: USB disconnect, device number 19 [ 274.649986][ T3752] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 274.749161][ T9039] loop4: detected capacity change from 0 to 8192 [ 275.040296][ T3752] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 275.058228][ T3752] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 275.094413][ T3752] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59357, setting to 1024 [ 275.160048][ T3752] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 275.187341][ T9051] program syz.3.1879 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.313347][ T9049] loop1: detected capacity change from 0 to 4096 [ 275.316221][ T9037] loop0: detected capacity change from 0 to 32768 [ 275.337696][ T9049] __ntfs_warning: 11 callbacks suppressed [ 275.337714][ T9049] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 275.370259][ T3752] usb 3-1: New USB device found, idVendor=0f11, idProduct=2051, bcdDevice=79.c5 [ 275.391445][ T3752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.421852][ T3752] usb 3-1: Product: syz [ 275.444954][ T3752] usb 3-1: Manufacturer: syz [ 275.459233][ T3752] usb 3-1: SerialNumber: syz [ 275.484705][ T3752] usb 3-1: config 0 descriptor?? [ 275.510313][ T9033] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 275.567352][ T3752] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 275.750105][ T9049] ntfs: volume version 3.1. [ 275.814949][ T3752] usb 3-1: USB disconnect, device number 15 [ 275.840143][ T3752] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 275.902633][ T9047] loop4: detected capacity change from 0 to 40427 [ 275.920984][ T7] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 275.952743][ T7492] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 276.057935][ T9047] F2FS-fs (loop4): Found nat_bits in checkpoint [ 276.232614][ T9047] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 276.290278][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.316821][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.374011][ T7] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 276.408105][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.453955][ T7] usb 4-1: config 0 descriptor?? [ 276.970621][ T7] kovaplus 0003:1E7D:2D50.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 277.025681][ T9060] loop1: detected capacity change from 0 to 32768 [ 277.221159][ T4506] usb 4-1: USB disconnect, device number 20 [ 277.234088][ T9060] XFS (loop1): Mounting V5 Filesystem [ 277.327071][ T9096] loop2: detected capacity change from 0 to 2048 [ 277.393841][ T9099] loop4: detected capacity change from 0 to 256 [ 277.486868][ T9060] XFS (loop1): Ending clean mount [ 277.501849][ T9096] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 277.568437][ T9096] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,grpquota,barrier=0x0000000000000000,grpjquota=,bsddf,bsddf,usrjquota=,. Quota mode: writeback. [ 277.673176][ T3568] XFS (loop1): Unmounting Filesystem [ 277.959321][ T9110] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1903'. [ 278.170680][ T7] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 278.530125][ T7] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 278.543989][ T7] usb 5-1: config 0 has no interface number 0 [ 278.569491][ T7] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.622781][ T7] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.657696][ T7] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 278.698717][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.729154][ T7] usb 5-1: config 0 descriptor?? [ 278.933378][ T9116] loop3: detected capacity change from 0 to 32768 [ 279.075397][ T9116] XFS (loop3): Mounting V5 Filesystem [ 279.142713][ T4198] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 279.165562][ T9133] loop1: detected capacity change from 0 to 32768 [ 279.186456][ T9116] XFS (loop3): Ending clean mount [ 279.196916][ T9116] XFS (loop3): Quotacheck needed: Please wait. [ 279.211939][ T7] prodikeys 0003:041E:2801.0026: unknown main item tag 0x0 [ 279.225214][ T7] prodikeys 0003:041E:2801.0026: unknown main item tag 0x0 [ 279.232865][ T7] prodikeys 0003:041E:2801.0026: unknown main item tag 0x0 [ 279.240731][ T7] prodikeys 0003:041E:2801.0026: unknown main item tag 0x0 [ 279.248331][ T7] prodikeys 0003:041E:2801.0026: unknown main item tag 0x0 [ 279.266409][ T7] prodikeys 0003:041E:2801.0026: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1 [ 279.284268][ T7] hid_prodikeys: hid-prodikeys: failed to find output report [ 279.284268][ T7] [ 279.347935][ T9116] XFS (loop3): Quotacheck: Done. [ 279.398867][ T9133] JBD2: Ignoring recovery information on journal [ 279.443000][ T7037] XFS (loop3): Unmounting Filesystem [ 279.489809][ T7] usb 5-1: USB disconnect, device number 17 [ 279.614754][ T4198] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 279.621562][ T9133] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 279.639344][ T4198] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.674475][ T4198] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 279.717632][ T4198] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 279.742580][ T9146] loop0: detected capacity change from 0 to 4096 [ 279.749543][ T4198] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 279.783485][ T4198] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 279.813256][ T4198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.814576][ T3568] ocfs2: Unmounting device (7,1) on (node local) [ 279.842927][ T4198] usb 3-1: config 0 descriptor?? [ 279.875307][ T9146] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 279.903237][ T9146] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 279.946248][ T9146] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 279.966334][ T9146] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 279.988153][ T9146] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 280.007098][ T9146] ntfs: volume version 3.1. [ 280.078262][ T9146] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 280.170905][ T9146] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 280.262918][ T9146] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 280.297621][ T9152] loop3: detected capacity change from 0 to 164 [ 280.369123][ T9149] loop4: detected capacity change from 0 to 4096 [ 280.388569][ T9146] __ntfs_error: 6 callbacks suppressed [ 280.388585][ T9146] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set default. You might want to try to use the mount option nls=utf8. [ 280.421128][ T4198] ntrig 0003:1B96:000A.0027: unknown main item tag 0x0 [ 280.457420][ T4198] ntrig 0003:1B96:000A.0027: unknown main item tag 0x0 [ 280.478533][ T9152] rock: directory entry would overflow storage [ 280.482623][ T4198] ntrig 0003:1B96:000A.0027: unknown main item tag 0x0 [ 280.486781][ T9149] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 280.513146][ T4198] ntrig 0003:1B96:000A.0027: unknown main item tag 0x0 [ 280.525350][ T9152] rock: sig=0x66, size=4, remaining=3 [ 280.533505][ T4198] ntrig 0003:1B96:000A.0027: unknown main item tag 0x0 [ 280.545485][ T9146] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 280.563930][ T9152] rock: directory entry would overflow storage [ 280.584818][ T4198] ntrig 0003:1B96:000A.0027: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 280.617511][ T9152] rock: sig=0x66, size=4, remaining=3 [ 280.663661][ T4198] usb 3-1: USB disconnect, device number 16 [ 280.711207][ T9149] ntfs: (device loop4): parse_options(): NLS character set cp9251 not found. Using previous one macturkish. [ 280.838686][ T9149] ntfs: volume version 3.1. [ 281.017412][ T9149] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 281.042173][ T9149] ntfs: (device loop4): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 281.184323][ T144] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 281.188751][ T9168] loop0: detected capacity change from 0 to 256 [ 281.262449][ T9168] exfat: Deprecated parameter 'utf8' [ 281.446123][ T9168] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x0ec8ca35, utbl_chksum : 0xe619d30d) [ 281.498133][ T9155] loop1: detected capacity change from 0 to 32768 [ 281.521898][ T4198] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 281.838034][ T4198] usb 3-1: Using ep0 maxpacket: 32 [ 281.995404][ T4198] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.000099][ T3752] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 282.030032][ T4198] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.064021][ T4198] usb 3-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 282.096375][ T4198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.131880][ T9185] loop3: detected capacity change from 0 to 24 [ 282.140812][ T4198] usb 3-1: config 0 descriptor?? [ 282.165942][ T9185] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 282.228613][ T9185] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 282.374910][ T9189] loop1: detected capacity change from 0 to 512 [ 282.382020][ T3752] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.435884][ T3752] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.476027][ T3752] usb 5-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 282.503228][ T3752] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.529541][ T9189] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 282.571687][ T3752] usb 5-1: config 0 descriptor?? [ 282.630345][ T9189] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue. Quota mode: writeback. [ 282.636084][ T4198] hid_mf 0003:0079:1801.0028: collection stack underflow [ 282.670499][ T4198] hid_mf 0003:0079:1801.0028: item 0 1 0 12 parsing failed [ 282.678337][ T4198] hid_mf 0003:0079:1801.0028: HID parse failed. [ 282.679844][ T9183] loop0: detected capacity change from 0 to 32768 [ 282.702221][ T4198] hid_mf: probe of 0003:0079:1801.0028 failed with error -22 [ 282.745722][ T9189] ext4 filesystem being mounted at /368/file0 supports timestamps until 2038 (0x7fffffff) [ 282.919507][ T9189] EXT4-fs error (device loop1): ext4_rename:3871: inode #16: comm syz.1.1934: target of rename is already freed [ 282.965937][ T4198] usb 3-1: USB disconnect, device number 17 [ 283.078447][ T3752] logitech 0003:046D:C626.0029: hidraw0: USB HID v10.00 Device [HID 046d:c626] on usb-dummy_hcd.4-1/input0 [ 283.164697][ T9191] loop3: detected capacity change from 0 to 32768 [ 283.354987][ T9191] XFS (loop3): Mounting V5 Filesystem [ 283.365226][ T8215] usb 5-1: USB disconnect, device number 18 [ 283.523772][ T9191] XFS (loop3): Ending clean mount [ 283.555378][ T9191] XFS (loop3): Quotacheck needed: Please wait. [ 283.649476][ T9208] loop2: detected capacity change from 0 to 64 [ 283.649561][ T9207] hub 6-0:1.0: USB hub found [ 283.698262][ T9191] XFS (loop3): Quotacheck: Done. [ 283.744168][ T9207] hub 6-0:1.0: 1 port detected [ 284.093858][ T7037] XFS (loop3): Unmounting Filesystem [ 284.331968][ T9199] loop1: detected capacity change from 0 to 32768 [ 284.389159][ T9228] netlink: 'syz.2.1948': attribute type 28 has an invalid length. [ 284.537124][ T9199] XFS (loop1): Mounting V5 Filesystem [ 284.626159][ T9236] loop4: detected capacity change from 0 to 4096 [ 284.953753][ T9199] XFS (loop1): Ending clean mount [ 284.953961][ T9224] loop0: detected capacity change from 0 to 40427 [ 284.994339][ T9199] XFS (loop1): Quotacheck needed: Please wait. [ 285.144083][ T9224] F2FS-fs (loop0): Found nat_bits in checkpoint [ 285.240223][ T9199] XFS (loop1): Quotacheck: Done. [ 285.320362][ T9224] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 285.325428][ T9249] loop3: detected capacity change from 0 to 2048 [ 285.379066][ T3568] XFS (loop1): Unmounting Filesystem [ 285.401341][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1952'. [ 285.626302][ T9249] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 285.643392][ T5865] attempt to access beyond end of device [ 285.643392][ T5865] loop0: rw=2049, want=45104, limit=40427 [ 285.651242][ T9249] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038 (0x7fffffff) [ 286.033661][ T4198] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 286.070839][ T9268] loop3: detected capacity change from 0 to 512 [ 286.283712][ T9268] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 286.295713][ T9268] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038 (0x7fffffff) [ 286.314925][ T9274] loop1: detected capacity change from 0 to 512 [ 286.403932][ T4198] usb 3-1: Using ep0 maxpacket: 16 [ 286.516526][ T9274] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1961: invalid indirect mapped block 256 (level 2) [ 286.574921][ T9274] EXT4-fs (loop1): 2 truncates cleaned up [ 286.598597][ T9274] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 286.650395][ T9274] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.1961: bg 0: block 5: invalid block bitmap [ 286.821987][ T9292] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1970'. [ 286.907832][ T4198] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 286.917312][ T4198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.942625][ T4198] usb 3-1: Product: syz [ 286.947264][ T4198] usb 3-1: Manufacturer: syz [ 287.012155][ T4198] usb 3-1: SerialNumber: syz [ 287.059909][ T4198] r8152-cfgselector 3-1: config 0 descriptor?? [ 287.555582][ T4198] r8152-cfgselector 3-1: Unknown version 0x0000 [ 287.562562][ T4198] r8152-cfgselector 3-1: bad CDC descriptors [ 287.583778][ T7] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 287.620230][ T4198] r8152-cfgselector 3-1: Unknown version 0x0000 [ 287.656260][ T4198] r8152-cfgselector 3-1: USB disconnect, device number 18 [ 287.693695][ T9297] loop4: detected capacity change from 0 to 32768 [ 287.766914][ T9297] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop4 scanned by syz.4.1972 (9297) [ 287.808474][ T9297] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 287.848642][ T9297] BTRFS info (device loop4): using free space tree [ 287.868884][ T9297] BTRFS info (device loop4): has skinny extents [ 287.961068][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 287.980018][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.001143][ T7] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 288.011010][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.026706][ T9314] loop3: detected capacity change from 0 to 32768 [ 288.049713][ T7] usb 2-1: config 0 descriptor?? [ 288.106120][ T9297] BTRFS info (device loop4): enabling ssd optimizations [ 288.286616][ T9314] XFS (loop3): Mounting V5 Filesystem [ 288.565976][ T7] elecom 0003:056E:00FE.002A: unknown main item tag 0x0 [ 288.579242][ T7] elecom 0003:056E:00FE.002A: unknown main item tag 0x6 [ 288.588176][ T7] elecom 0003:056E:00FE.002A: unknown main item tag 0x5 [ 288.596519][ T7] elecom 0003:056E:00FE.002A: unknown main item tag 0x4 [ 288.602537][ T9314] XFS (loop3): Ending clean mount [ 288.610400][ T7] elecom 0003:056E:00FE.002A: unknown main item tag 0x0 [ 288.626929][ T7] elecom 0003:056E:00FE.002A: unknown main item tag 0x0 [ 288.635281][ T7] elecom 0003:056E:00FE.002A: unknown main item tag 0x0 [ 288.654093][ T7] elecom 0003:056E:00FE.002A: unknown main item tag 0x0 [ 288.660208][ T9314] XFS (loop3): Quotacheck needed: Please wait. [ 288.681232][ T7] elecom 0003:056E:00FE.002A: unknown main item tag 0x0 [ 288.690305][ T7] elecom 0003:056E:00FE.002A: unknown main item tag 0x0 [ 288.709485][ T7] elecom 0003:056E:00FE.002A: unknown global tag 0xd [ 288.717331][ T7] elecom 0003:056E:00FE.002A: item 0 4 1 13 parsing failed [ 288.730941][ T7] elecom: probe of 0003:056E:00FE.002A failed with error -22 [ 288.856623][ T4198] usb 2-1: USB disconnect, device number 19 [ 289.040911][ T9314] XFS (loop3): Quotacheck: Done. [ 289.121348][ T7037] XFS (loop3): Unmounting Filesystem [ 289.134466][ T9341] loop2: detected capacity change from 0 to 40427 [ 289.420260][ T9341] F2FS-fs (loop2): Found nat_bits in checkpoint [ 289.467364][ T9355] loop4: detected capacity change from 0 to 1024 [ 289.524192][ T9357] loop1: detected capacity change from 0 to 736 [ 289.558498][ T9341] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 289.666100][ T9355] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 289.835590][ T7211] attempt to access beyond end of device [ 289.835590][ T7211] loop2: rw=2049, want=45104, limit=40427 [ 289.849089][ T9357] rock: directory entry would overflow storage [ 289.910242][ T9357] rock: sig=0x5850, size=36, remaining=14 [ 290.308355][ T9372] loop3: detected capacity change from 0 to 4096 [ 290.393803][ T9372] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 290.555017][ T9372] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 290.670775][ T7037] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 290.671661][ T7037] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 290.671689][ T7037] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 290.700133][ T9386] loop2: detected capacity change from 0 to 128 [ 290.981948][ T9390] loop2: detected capacity change from 0 to 128 [ 291.195839][ T9390] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 291.195942][ T9390] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038 (0x7fffffff) [ 291.228628][ T9395] loop1: detected capacity change from 0 to 1024 [ 291.358321][ T9395] EXT4-fs (loop1): Ignoring removed bh option [ 291.461266][ T9395] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nombcache,dioread_lock,norecovery,barrier=0x000000000000004c,bh,init_itable=0x0000000000000001,usrquota,init_itable,,errors=continue. Quota mode: writeback. [ 291.510509][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.565586][ T9399] ntfs3: Bad value for 'gid' [ 292.023006][ T9392] loop3: detected capacity change from 0 to 32768 [ 292.270103][ T23] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 292.422151][ T9422] xt_CT: You must specify a L4 protocol and not use inversions on it [ 292.608573][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 292.785492][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.812072][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.825958][ T9404] loop4: detected capacity change from 0 to 32768 [ 292.837549][ T23] usb 3-1: New USB device found, idVendor=056a, idProduct=00ce, bcdDevice= 0.00 [ 292.861027][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.883713][ T23] usb 3-1: config 0 descriptor?? [ 293.122458][ T4198] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 293.589495][ T4198] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 293.613732][ T4198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.650937][ T4198] usb 2-1: config 0 descriptor?? [ 293.656211][ T3752] usb 3-1: USB disconnect, device number 19 [ 293.708356][ T9441] loop4: detected capacity change from 0 to 4096 [ 293.767666][ T4198] cp210x 2-1:0.0: cp210x converter detected [ 293.837043][ T9441] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 293.928318][ T9441] ntfs: (device loop4): parse_options(): NLS character set macgreÿ not found. Using previous one utf8. [ 293.979475][ T9441] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 294.000175][ T9441] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 294.083184][ T9441] ntfs: volume version 3.1. [ 294.236438][ T4198] usb 2-1: cp210x converter now attached to ttyUSB0 [ 294.455656][ T3752] usb 2-1: USB disconnect, device number 20 [ 294.482044][ T3752] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 294.556729][ T3752] cp210x 2-1:0.0: device disconnected [ 294.727876][ T9446] loop3: detected capacity change from 0 to 32768 [ 294.764956][ T9461] loop4: detected capacity change from 0 to 16 [ 294.854557][ T9461] erofs: (device loop4): mounted with root inode @ nid 36. [ 294.971858][ T9446] JBD2: Ignoring recovery information on journal [ 295.143292][ T9468] loop4: detected capacity change from 0 to 1024 [ 295.198135][ T9446] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 295.208916][ T9477] loop0: detected capacity change from 0 to 128 [ 295.371809][ T3614] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 295.396756][ T9477] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 295.438600][ T9477] ext4 filesystem being mounted at /229/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 295.547025][ T9] hfsplus: b-tree write err: -5, ino 4 [ 295.565100][ T9477] EXT4-fs warning (device loop0): verify_group_input:147: Cannot add at group 9 (only 1 groups) [ 295.615715][ T9446] syz.3.2025 (9446) used greatest stack depth: 19360 bytes left [ 295.634611][ T3614] usb 2-1: Using ep0 maxpacket: 16 [ 295.665258][ T9470] loop2: detected capacity change from 0 to 32768 [ 295.709170][ T9470] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2038 (9470) [ 295.740039][ T9470] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 295.767507][ T9470] BTRFS info (device loop2): using free space tree [ 295.769716][ T3614] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 295.804466][ T9470] BTRFS info (device loop2): has skinny extents [ 295.819297][ T3614] usb 2-1: config 0 has no interface number 0 [ 295.841019][ T3614] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 295.863035][ T7037] ocfs2: Unmounting device (7,3) on (node local) [ 295.879374][ T9484] overlayfs: unrecognized mount option "\/cgroup.cpu/syz0" or missing value [ 296.050195][ T3614] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 296.059264][ T3614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.090492][ T3614] usb 2-1: Product: syz [ 296.094806][ T3614] usb 2-1: Manufacturer: syz [ 296.125489][ T3614] usb 2-1: SerialNumber: syz [ 296.159000][ T3614] usb 2-1: config 0 descriptor?? [ 296.252148][ T9508] hub 6-0:1.0: USB hub found [ 296.257224][ T9508] hub 6-0:1.0: 1 port detected [ 296.294923][ T9512] loop3: detected capacity change from 0 to 64 [ 296.341818][ T9470] BTRFS info (device loop2): enabling ssd optimizations [ 296.450110][ T3752] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 296.678433][ T9526] loop0: detected capacity change from 0 to 512 [ 296.850778][ T3752] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 296.867948][ T9527] loop3: detected capacity change from 0 to 4096 [ 296.880709][ T3614] usbtouchscreen: probe of 2-1:0.214 failed with error -71 [ 296.901949][ T9526] EXT4-fs (loop0): 1 orphan inode deleted [ 296.907707][ T9526] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 296.932303][ T3752] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.947134][ T9526] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038 (0x7fffffff) [ 296.949692][ T3614] usb 2-1: USB disconnect, device number 21 [ 296.971914][ T3752] usb 5-1: config 0 descriptor?? [ 297.019263][ T3752] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 297.195724][ T9527] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 297.603545][ T9543] loop1: detected capacity change from 0 to 1024 [ 297.670562][ T3752] gp8psk: usb out operation failed. [ 297.682650][ T3752] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 297.713994][ T3752] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 297.739540][ T3752] usb 5-1: USB disconnect, device number 19 [ 297.777877][ T4356] hfsplus: b-tree write err: -5, ino 4 [ 297.891613][ T9549] program syz.3.2062 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 297.907482][ T4198] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 298.032244][ T9553] loop3: detected capacity change from 0 to 1024 [ 298.394653][ T4198] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.441111][ T4198] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.462998][ T4198] usb 3-1: config 0 interface 0 has no altsetting 0 [ 298.489222][ T4198] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 298.510837][ T4198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.546870][ T4198] usb 3-1: config 0 descriptor?? [ 298.903816][ T9569] netlink: 'syz.3.2071': attribute type 29 has an invalid length. [ 298.925586][ T9569] netlink: 'syz.3.2071': attribute type 29 has an invalid length. [ 298.932140][ T9557] loop1: detected capacity change from 0 to 32768 [ 298.945287][ T9570] netlink: 'syz.3.2071': attribute type 29 has an invalid length. [ 299.060260][ T4198] koneplus 0003:1E7D:2E22.002C: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.2-1/input0 [ 299.137048][ T9557] XFS (loop1): Mounting V5 Filesystem [ 299.192311][ T9559] loop4: detected capacity change from 0 to 32768 [ 299.288846][ T4198] usb 3-1: USB disconnect, device number 20 [ 299.302814][ T9559] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 299.505597][ T9576] loop3: detected capacity change from 0 to 32768 [ 299.520563][ T3574] ocfs2: Unmounting device (7,4) on (node local) [ 299.575364][ T9557] XFS (loop1): Ending clean mount [ 299.585302][ T9576] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2072 (9576) [ 299.627391][ T9557] XFS (loop1): Quotacheck needed: Please wait. [ 299.663685][ T9576] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 299.687073][ T9576] BTRFS info (device loop3): using free space tree [ 299.706100][ T9576] BTRFS info (device loop3): has skinny extents [ 299.820454][ T9557] XFS (loop1): Quotacheck: Done. [ 299.927358][ T9605] loop4: detected capacity change from 0 to 256 [ 299.971032][ T9605] exfat: Deprecated parameter 'namecase' [ 300.065364][ T9576] BTRFS info (device loop3): enabling ssd optimizations [ 300.103367][ T3568] XFS (loop1): Unmounting Filesystem [ 300.187203][ T9605] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011fc6, chksum : 0x5c39844e, utbl_chksum : 0xe619d30d) [ 300.715529][ T9599] loop2: detected capacity change from 0 to 32768 [ 300.966411][ T9599] XFS (loop2): Mounting V5 Filesystem [ 300.995569][ T9620] xt_CT: You must specify a L4 protocol and not use inversions on it [ 301.119633][ T9625] loop4: detected capacity change from 0 to 4096 [ 301.279733][ T9625] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 301.389328][ T9611] loop0: detected capacity change from 0 to 32768 [ 301.426914][ T9625] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 301.464092][ T9599] XFS (loop2): Ending clean mount [ 301.467261][ T9625] ntfs3: loop4: Failed to load $Extend. [ 301.584917][ T3574] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 301.698813][ T9631] loop1: detected capacity change from 0 to 2048 [ 301.743250][ T9599] syz.2.2075 (9599) used greatest stack depth: 18776 bytes left [ 301.785663][ T9611] XFS (loop0): Mounting V5 Filesystem [ 301.808614][ T7211] XFS (loop2): Unmounting Filesystem [ 301.986195][ T9641] loop4: detected capacity change from 0 to 2048 [ 302.013751][ T9616] loop3: detected capacity change from 0 to 32768 [ 302.033119][ T9611] XFS (loop0): Ending clean mount [ 302.059146][ T9631] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 302.090659][ T9631] ext4 filesystem being mounted at /394/file0 supports timestamps until 2038 (0x7fffffff) [ 302.236521][ T9645] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 302.326365][ T5865] XFS (loop0): Unmounting Filesystem [ 302.422230][ T9647] program syz.4.2089 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 303.118229][ T9672] program syz.1.2100 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 303.269130][ T9683] loop2: detected capacity change from 0 to 512 [ 303.512698][ T9693] loop1: detected capacity change from 0 to 2048 [ 303.693710][ T9693] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 303.729280][ T9683] EXT4-fs (loop2): 1 orphan inode deleted [ 303.729308][ T9683] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 303.729408][ T9683] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038 (0x7fffffff) [ 303.931695][ T9697] loop1: detected capacity change from 0 to 512 [ 304.238569][ T9689] loop4: detected capacity change from 0 to 32768 [ 304.275507][ T9697] EXT4-fs (loop1): 1 orphan inode deleted [ 304.279393][ T9685] loop3: detected capacity change from 0 to 32768 [ 304.287966][ T9697] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 304.371027][ T9689] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.2107 (9689) [ 304.412206][ T9697] ext4 filesystem being mounted at /404/file1 supports timestamps until 2038 (0x7fffffff) [ 304.412529][ T4193] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 304.537388][ T9685] XFS (loop3): Mounting V5 Filesystem [ 304.576362][ T9689] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 304.604926][ T9689] BTRFS info (device loop4): turning off barriers [ 304.662617][ T9689] BTRFS info (device loop4): enabling auto defrag [ 304.669283][ T9689] BTRFS info (device loop4): ignoring bad roots [ 304.677792][ T9689] BTRFS info (device loop4): force zlib compression, level 3 [ 304.690858][ T9689] BTRFS info (device loop4): enabling ssd optimizations [ 304.698496][ T9689] BTRFS info (device loop4): using spread ssd allocation scheme [ 304.706973][ T9689] BTRFS info (device loop4): using free space tree [ 304.714062][ T9689] BTRFS info (device loop4): has skinny extents [ 304.721464][ T9689] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 304.721525][ T9720] xt_CT: You must specify a L4 protocol and not use inversions on it [ 304.733807][ T9689] workqueue: max_active 2097158 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 304.754405][ T9689] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 304.836180][ T9689] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 304.873674][ T9689] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 304.953399][ T9689] workqueue: max_active 2097158 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512 [ 305.005599][ T9685] XFS (loop3): Ending clean mount [ 305.020405][ T9689] workqueue: max_active 2097158 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 305.097391][ T9689] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 305.135237][ T9730] loop0: detected capacity change from 0 to 4096 [ 305.158496][ T4193] usb 3-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 305.171730][ T4193] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.179794][ T4193] usb 3-1: Product: syz [ 305.196900][ T9689] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 305.222000][ T9730] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 305.227739][ T4193] usb 3-1: Manufacturer: syz [ 305.255358][ T4193] usb 3-1: SerialNumber: syz [ 305.271540][ T7037] XFS (loop3): Unmounting Filesystem [ 305.279651][ T4193] usb 3-1: config 0 descriptor?? [ 305.290040][ T9689] workqueue: max_active 2097158 requested for btrfs-readahead is out of range, clamping between 1 and 512 [ 305.372905][ T4193] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 305.589718][ T9734] loop1: detected capacity change from 0 to 32768 [ 305.860077][ T4193] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input34 [ 306.085717][ T9734] XFS (loop1): Mounting V5 Filesystem [ 306.205647][ T4193] usb 3-1: USB disconnect, device number 21 [ 306.317249][ T9734] XFS (loop1): Ending clean mount [ 306.367995][ T9734] XFS (loop1): Quotacheck needed: Please wait. [ 306.507029][ T9734] XFS (loop1): Quotacheck: Done. [ 306.629412][ T3568] XFS (loop1): Unmounting Filesystem [ 306.743099][ T9769] loop0: detected capacity change from 0 to 2048 [ 306.833183][ T9769] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 306.833210][ T9769] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 306.833228][ T9769] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)! [ 306.833245][ T9769] EXT4-fs (loop0): group descriptors corrupted! [ 307.349514][ T9786] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2135'. [ 307.847758][ T9812] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2145'. [ 307.865300][ T9813] loop3: detected capacity change from 0 to 512 [ 307.925328][ T9817] netlink: 276 bytes leftover after parsing attributes in process `syz.2.2148'. [ 308.051656][ T9823] loop2: detected capacity change from 0 to 2048 [ 308.090314][ T9813] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 308.090346][ T9813] EXT4-fs (loop3): Ignoring removed nobh option [ 308.144030][ T3027] Alternate GPT is invalid, using primary GPT. [ 308.144211][ T3027] loop2: p1 p2 p3 [ 308.162327][ T9813] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e002e018, mo2=0000] [ 308.162404][ T9813] System zones: 0-2, 18-18, 34-34 [ 308.193890][ T9813] EXT4-fs (loop3): 1 orphan inode deleted [ 308.193919][ T9813] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,debug,nogrpid,grpjquota=,usrjquota=wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8/,barrier,nobh,bsddf,noquota,,errors=continue. Quota mode: writeback. [ 308.194047][ T9813] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038 (0x7fffffff) [ 308.227985][ T9813] EXT4-fs warning (device loop3): verify_group_input:165: Last group not full [ 308.325090][ T3027] Alternate GPT is invalid, using primary GPT. [ 308.325177][ T3027] loop2: p1 p2 p3 [ 308.371785][ T9823] Alternate GPT is invalid, using primary GPT. [ 308.371871][ T9823] loop2: p1 p2 p3 [ 308.595523][ T3027] Alternate GPT is invalid, using primary GPT. [ 308.609499][ T3027] loop2: p1 p2 p3 [ 308.628493][ T9837] netlink: 1776 bytes leftover after parsing attributes in process `syz.3.2157'. [ 308.941426][ T4193] Bluetooth: hci2: command 0x0406 tx timeout [ 309.002759][ T7263] udevd[7263]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 309.029018][ T9825] loop4: detected capacity change from 0 to 32768 [ 309.054851][ T3587] udevd[3587]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 309.088366][ T7263] udevd[7263]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 309.197302][ T9856] loop3: detected capacity change from 0 to 1024 [ 309.231485][ T9860] [U] ^R [ 309.307767][ T9825] ERROR: (device loop4): dbAllocAG: Corrupt dmapctl page [ 309.307767][ T9825] [ 309.339250][ T9825] ERROR: (device loop4): remounting filesystem as read-only [ 309.360521][ T9825] ERROR: (device loop4): dbDiscardAG: -EIO [ 309.360521][ T9825] [ 309.437252][ T9870] loop1: detected capacity change from 0 to 512 [ 309.684536][ T9880] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2179'. [ 309.710387][ T9880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2179'. [ 309.780879][ T9880] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2179'. [ 309.796913][ T9884] loop1: detected capacity change from 0 to 512 [ 309.860952][ T9886] loop4: detected capacity change from 0 to 512 [ 309.947202][ T9884] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,barrier=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback. [ 309.997840][ T9884] ext4 filesystem being mounted at /414/bus supports timestamps until 2038 (0x7fffffff) [ 310.144393][ T9886] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,block_validity,,errors=continue. Quota mode: writeback. [ 310.178814][ T9886] ext4 filesystem being mounted at /447/file0 supports timestamps until 2038 (0x7fffffff) [ 310.194638][ T9899] loop0: detected capacity change from 0 to 256 [ 310.363459][ T9886] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.2174: corrupted xattr block 33 [ 310.545266][ T9882] loop3: detected capacity change from 0 to 32768 [ 310.602712][ T7263] udevd[7263]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 310.662736][ T7263] udevd[7263]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 310.717967][ T3587] udevd[3587]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 310.797399][ T9916] loop4: detected capacity change from 0 to 64 [ 310.827123][ T9882] XFS (loop3): Mounting V5 Filesystem [ 310.834175][ T9879] loop2: detected capacity change from 0 to 40427 [ 310.907465][ T9882] XFS (loop3): Ending clean mount [ 310.915296][ T9882] XFS (loop3): Quotacheck needed: Please wait. [ 310.970041][ T9879] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 311.001828][ T9879] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 311.173422][ T9882] XFS (loop3): Quotacheck: Done. [ 311.223007][ T9879] F2FS-fs (loop2): Found nat_bits in checkpoint [ 311.262399][ T9926] loop4: detected capacity change from 0 to 1024 [ 311.319537][ T7037] XFS (loop3): Unmounting Filesystem [ 311.397052][ T9879] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 311.453028][ T3587] udevd[3587]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 311.467210][ T7263] udevd[7263]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 311.467300][ T4276] udevd[4276]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 311.480080][ T9879] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 311.629732][ T9926] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,min_batch_time=0x0000000000000004,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,errors=remount-ro,dioread_lock,user_xattr,quota,. Quota mode: writeback. [ 311.656977][ T7261] udevd[7261]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 311.857122][ T7211] attempt to access beyond end of device [ 311.857122][ T7211] loop2: rw=2049, want=45104, limit=40427 [ 311.885292][ T9926] EXT4-fs error (device loop4): ext4_lookup:1856: comm syz.4.2192: inode #12: comm syz.4.2192: iget: illegal inode # [ 312.000330][ T9926] EXT4-fs (loop4): Remounting filesystem read-only [ 312.032696][ T9943] EXT4-fs error (device loop4): ext4_lookup:1856: comm syz.4.2192: inode #12: comm syz.4.2192: iget: illegal inode # [ 312.403859][ T9956] loop0: detected capacity change from 0 to 512 [ 312.485203][ T9956] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 312.644170][ T9967] netlink: 'syz.3.2195': attribute type 1 has an invalid length. [ 312.675423][ T9956] EXT4-fs (loop0): 1 truncate cleaned up [ 312.687081][ T9956] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 312.833995][ T9970] loop3: detected capacity change from 0 to 4096 [ 312.990967][ T9979] UBIFS error (pid: 9979): cannot open "./file0", error -22 [ 313.040106][ T3618] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 313.146632][ T9985] sp0: Synchronizing with TNC [ 313.166692][ T4199] Bluetooth: hci0: command 0x0c1a tx timeout [ 313.420488][ T3618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.440095][ T3618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.453312][ T3618] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 313.480551][ T3618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.540882][ T3618] usb 5-1: config 0 descriptor?? [ 313.669057][T10012] smc: net device ip6tnl0 applied user defined pnetid SYZ0 [ 314.034238][ T3618] creative-sb0540 0003:041E:3100.002D: No inputs registered, leaving [ 314.060756][ T3618] creative-sb0540 0003:041E:3100.002D: hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.4-1/input0 [ 314.273213][ T3754] usb 5-1: USB disconnect, device number 20 [ 314.417912][T10049] loop1: detected capacity change from 0 to 64 [ 314.491123][ T3618] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 314.752525][ T3618] usb 4-1: Using ep0 maxpacket: 8 [ 314.980201][T10047] loop2: detected capacity change from 0 to 32768 [ 315.050384][ T3618] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 315.065743][ T3618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.109475][ T3618] usb 4-1: Product: syz [ 315.119467][T10059] hsr0: VLAN not yet supported [ 315.121176][T10047] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2237 (10047) [ 315.143655][ T3618] usb 4-1: Manufacturer: syz [ 315.156760][ T3618] usb 4-1: SerialNumber: syz [ 315.168981][ T3618] usb 4-1: config 0 descriptor?? [ 315.226000][T10047] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 315.248097][T10047] BTRFS info (device loop2): using free space tree [ 315.255565][ T4199] Bluetooth: hci0: command 0x0406 tx timeout [ 315.279317][T10047] BTRFS info (device loop2): has skinny extents [ 315.460215][ T3618] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 315.560399][T10047] BTRFS info (device loop2): enabling ssd optimizations [ 315.585948][ T4196] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 315.937139][ T4196] usb 2-1: Using ep0 maxpacket: 16 [ 315.990012][ T3618] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 316.017896][ T3618] usb 4-1: USB disconnect, device number 21 [ 316.087728][T10065] loop4: detected capacity change from 0 to 32768 [ 316.129287][ T4196] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.146246][ T4196] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.169352][ T4196] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 316.195873][ T4196] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 316.223520][ T4196] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.259984][ T4196] usb 2-1: config 0 descriptor?? [ 316.809421][ T4196] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 316.838660][ T4196] microsoft 0003:045E:07DA.002E: ignoring exceeding usage max [ 316.899223][ T4196] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.002E/input/input35 [ 317.013714][T10102] loop4: detected capacity change from 0 to 512 [ 317.043154][ T4196] microsoft 0003:045E:07DA.002E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 317.085998][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.095828][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.117741][ T4196] usb 2-1: USB disconnect, device number 22 [ 317.150343][T10102] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 317.220120][T10102] EXT4-fs (loop4): orphan cleanup on readonly fs [ 317.288618][T10102] Quota error (device loop4): v2_read_file_info: Free block number too big (0 >= 0). [ 317.328592][T10102] EXT4-fs warning (device loop4): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 317.340054][ T3614] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 317.405781][T10086] loop2: detected capacity change from 0 to 32768 [ 317.426057][T10102] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 317.438145][T10102] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2254: bg 0: block 40: padding at end of block bitmap is not set [ 317.460893][T10102] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 317.476849][T10102] EXT4-fs (loop4): 1 truncate cleaned up [ 317.515939][T10102] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 317.630269][ T3614] usb 4-1: Using ep0 maxpacket: 16 [ 317.807062][T10086] XFS (loop2): Mounting V5 Filesystem [ 317.920752][ T3614] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 317.957369][ T3614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.019054][ T3614] usb 4-1: Product: syz [ 318.055174][ T3614] usb 4-1: Manufacturer: syz [ 318.072387][ T3614] usb 4-1: SerialNumber: syz [ 318.104181][ T3614] usb 4-1: config 0 descriptor?? [ 318.155465][ T3614] hub 4-1:0.0: bad descriptor, ignoring hub [ 318.178206][ T3614] hub: probe of 4-1:0.0 failed with error -5 [ 318.236235][T10086] XFS (loop2): Ending clean mount [ 318.392284][ T3570] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 318.410638][ T7211] XFS (loop2): Unmounting Filesystem [ 318.455867][ T4199] usb 4-1: USB disconnect, device number 22 [ 318.536583][T10115] loop1: detected capacity change from 0 to 32768 [ 318.692848][ T3570] usb 5-1: Using ep0 maxpacket: 8 [ 318.714163][T10115] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2260 (10115) [ 318.761405][T10115] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 318.810847][ T3570] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.842082][ T3570] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.843552][T10115] BTRFS info (device loop1): setting nodatasum [ 318.863095][ T3570] usb 5-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 318.886733][T10115] BTRFS info (device loop1): enabling auto defrag [ 318.893973][T10115] BTRFS info (device loop1): disabling tree log [ 318.911528][T10115] BTRFS info (device loop1): using free space tree [ 318.925630][ T3570] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.928661][T10115] BTRFS info (device loop1): has skinny extents [ 318.956210][ T3570] usb 5-1: config 0 descriptor?? [ 319.131527][ C1] ================================================================== [ 319.141751][ C1] BUG: KASAN: use-after-free in __nft_trace_packet+0x137/0x150 [ 319.149582][ C1] Read of size 2 at addr ffff8880745b8a80 by task ksoftirqd/1/20 [ 319.158134][ C1] [ 319.158932][T10160] netlink: zone id is out of range [ 319.160701][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted 5.15.167-syzkaller #0 [ 319.160753][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 319.160776][ C1] Call Trace: [ 319.160783][ C1] [ 319.160790][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 319.160818][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 319.160836][ C1] ? _printk+0xd1/0x120 [ 319.175948][T10160] netlink: zone id is out of range [ 319.184499][ C1] ? __wake_up_klogd+0xcc/0x100 [ 319.184533][ C1] ? panic+0x860/0x860 [ 319.184550][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 319.184574][ C1] print_address_description+0x63/0x3b0 [ 319.184594][ C1] ? __nft_trace_packet+0x137/0x150 [ 319.184611][ C1] kasan_report+0x16b/0x1c0 [ 319.184628][ C1] ? __nft_trace_packet+0x137/0x150 [ 319.184646][ C1] __nft_trace_packet+0x137/0x150 [ 319.184663][ C1] nft_do_chain+0x1453/0x16b0 [ 319.184678][ C1] ? unwind_next_frame+0x1437/0x1fa0 [ 319.247407][T10160] netlink: zone id is out of range [ 319.251559][ C1] ? print_irqtrace_events+0x210/0x210 [ 319.251598][ C1] ? nft_fwd_dup_netdev_offload+0x130/0x130 [ 319.251646][ C1] ? ipv6_find_tlv+0x260/0x260 [ 319.251681][ C1] nft_do_chain_inet+0x3f8/0x680 [ 319.251699][ C1] ? nft_do_chain_arp+0x140/0x140 [ 319.251712][ C1] ? nf_nat_ipv6_fn+0x2c7/0x3d0 [ 319.251735][ C1] ? nf_nat_ipv6_local_fn+0x3b0/0x3b0 [ 319.251750][ C1] ? nf_nat_ipv6_fn+0x2c7/0x3d0 [ 319.251772][ C1] ? nf_nat_ipv6_local_fn+0x3b0/0x3b0 [ 319.251792][ C1] ? nft_do_chain_arp+0x140/0x140 [ 319.251806][ C1] nf_hook_slow+0xae/0x1e0 [ 319.251828][ C1] NF_HOOK+0x26b/0x410 [ 319.251848][ C1] ? ip6_input+0x80/0x80 [ 319.287131][T10160] netlink: zone id is out of range [ 319.288197][ C1] ? ip6_rcv_core+0x15d0/0x15d0 [ 319.288231][ C1] ? ip6_input+0x80/0x80 [ 319.288250][ C1] ? ip6_rcv_finish_core+0x201/0x410 [ 319.288271][ C1] ? ip6_rcv_finish+0x16b/0x250 [ 319.288292][ C1] NF_HOOK+0x364/0x410 [ 319.288314][ C1] ? refcount_add+0x70/0x70 [ 319.318065][T10160] netlink: zone id is out of range [ 319.318976][ C1] ? ip6_rcv_core+0x15d0/0x15d0 [ 319.339013][T10160] netlink: zone id is out of range [ 319.342055][ C1] ? refcount_add+0x70/0x70 [ 319.342092][ C1] ? ip6_rcv_finish_core+0x410/0x410 [ 319.342119][ C1] __netif_receive_skb+0x1c6/0x530 [ 319.342140][ C1] ? read_lock_is_recursive+0x10/0x10 [ 319.342160][ C1] ? deliver_ptype_list_skb+0x3a0/0x3a0 [ 319.342177][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 319.342195][ C1] ? print_irqtrace_events+0x210/0x210 [ 319.361530][T10160] netlink: zone id is out of range [ 319.365691][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 319.365727][ C1] process_backlog+0x363/0x7f0 [ 319.376015][T10160] netlink: zone id is out of range [ 319.380755][ C1] ? rps_trigger_softirq+0x230/0x230 [ 319.380782][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 319.380802][ C1] ? print_irqtrace_events+0x210/0x210 [ 319.380817][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 319.380838][ C1] __napi_poll+0xc7/0x440 [ 319.380860][ C1] net_rx_action+0x617/0xda0 [ 319.380887][ C1] ? net_tx_action+0x8e0/0x8e0 [ 319.387761][T10160] netlink: zone id is out of range [ 319.390677][ C1] handle_softirqs+0x3a7/0x930 [ 319.390709][ C1] ? run_ksoftirqd+0xc6/0x120 [ 319.390730][ C1] ? do_softirq+0x240/0x240 [ 319.390744][ C1] ? preempt_schedule_common+0xa6/0xd0 [ 319.390763][ C1] ? run_ksoftirqd+0xa3/0x120 [ 319.390778][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 319.390802][ C1] run_ksoftirqd+0xc6/0x120 [ 319.390819][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 319.390837][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 319.390857][ C1] ? smpboot_thread_fn+0x4d6/0x9d0 [ 319.390872][ C1] ? smpboot_thread_fn+0x5d5/0x9d0 [ 319.390886][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 319.390903][ C1] smpboot_thread_fn+0x51b/0x9d0 [ 319.403683][T10160] netlink: zone id is out of range [ 319.406940][ C1] kthread+0x3f6/0x4f0 [ 319.406968][ C1] ? cpu_report_death+0x180/0x180 [ 319.406984][ C1] ? kthread_blkcg+0xd0/0xd0 [ 319.407003][ C1] ret_from_fork+0x1f/0x30 [ 319.469592][ T3570] wacom 0003:056A:003F.002F: hidraw0: USB HID v0.00 Device [HID 056a:003f] on usb-dummy_hcd.4-1/input0 [ 319.472561][ C1] [ 319.472574][ C1] [ 319.472579][ C1] Allocated by task 20: [ 319.472588][ C1] __kasan_slab_alloc+0x8e/0xc0 [ 319.472608][ C1] slab_post_alloc_hook+0x53/0x380 [ 319.472625][ C1] kmem_cache_alloc_node+0x121/0x2c0 [ 319.472640][ C1] __alloc_skb+0xdd/0x590 [ 319.472656][ C1] synproxy_send_client_synack_ipv6+0x1b6/0xc30 [ 319.472674][ C1] nft_synproxy_do_eval+0x733/0xa60 [ 319.472690][ C1] nft_do_chain+0x467/0x16b0 [ 319.472703][ C1] nft_do_chain_inet+0x3f8/0x680 [ 319.472716][ C1] nf_hook_slow+0xae/0x1e0 [ 319.472730][ C1] NF_HOOK+0x26b/0x410 [ 319.472746][ C1] NF_HOOK+0x364/0x410 [ 319.472761][ C1] __netif_receive_skb+0x1c6/0x530 [ 319.472777][ C1] process_backlog+0x363/0x7f0 [ 319.472792][ C1] __napi_poll+0xc7/0x440 [ 319.472806][ C1] net_rx_action+0x617/0xda0 [ 319.668849][ C1] handle_softirqs+0x3a7/0x930 [ 319.673721][ C1] run_ksoftirqd+0xc6/0x120 [ 319.678235][ C1] smpboot_thread_fn+0x51b/0x9d0 [ 319.679582][ T3570] usb 5-1: USB disconnect, device number 21 [ 319.683269][ C1] kthread+0x3f6/0x4f0 [ 319.683295][ C1] ret_from_fork+0x1f/0x30 [ 319.683311][ C1] [ 319.683316][ C1] Freed by task 20: [ 319.683324][ C1] kasan_set_track+0x4b/0x80 [ 319.683340][ C1] kasan_set_free_info+0x1f/0x40 [ 319.683353][ C1] ____kasan_slab_free+0xd8/0x120 [ 319.683366][ C1] slab_free_freelist_hook+0xdd/0x160 [ 319.683381][ C1] kmem_cache_free+0x91/0x1f0 [ 319.683396][ C1] nft_synproxy_do_eval+0x740/0xa60 [ 319.683415][ C1] nft_do_chain+0x467/0x16b0 [ 319.683429][ C1] nft_do_chain_inet+0x3f8/0x680 [ 319.683442][ C1] nf_hook_slow+0xae/0x1e0 [ 319.683455][ C1] NF_HOOK+0x26b/0x410 [ 319.683471][ C1] NF_HOOK+0x364/0x410 [ 319.759610][ C1] __netif_receive_skb+0x1c6/0x530 [ 319.764709][ C1] process_backlog+0x363/0x7f0 [ 319.769457][ C1] __napi_poll+0xc7/0x440 [ 319.773866][ C1] net_rx_action+0x617/0xda0 [ 319.778509][ C1] handle_softirqs+0x3a7/0x930 [ 319.783318][ C1] run_ksoftirqd+0xc6/0x120 [ 319.787809][ C1] smpboot_thread_fn+0x51b/0x9d0 [ 319.792730][ C1] kthread+0x3f6/0x4f0 [ 319.796931][ C1] ret_from_fork+0x1f/0x30 [ 319.801552][ C1] [ 319.803867][ C1] The buggy address belongs to the object at ffff8880745b8a00 [ 319.803867][ C1] which belongs to the cache skbuff_head_cache of size 232 [ 319.818442][ C1] The buggy address is located 128 bytes inside of [ 319.818442][ C1] 232-byte region [ffff8880745b8a00, ffff8880745b8ae8) [ 319.832472][ C1] The buggy address belongs to the page: [ 319.838150][ C1] page:ffffea0001d16e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x745b8 [ 319.848468][ C1] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 319.856308][ C1] raw: 00fff00000000200 ffffea0001e18a00 0000000300000003 ffff88801bfe4140 [ 319.866194][ C1] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 319.874988][ C1] page dumped because: kasan: bad access detected [ 319.881676][ C1] page_owner tracks the page as allocated [ 319.887614][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 4356, ts 187984021142, free_ts 183597980953 [ 319.905235][ C1] get_page_from_freelist+0x322a/0x33c0 [ 319.910813][ C1] __alloc_pages+0x272/0x700 [ 319.915404][ C1] new_slab+0xbb/0x4b0 [ 319.919508][ C1] ___slab_alloc+0x6f6/0xe10 [ 319.924090][ C1] kmem_cache_alloc+0x18e/0x280 [ 319.928972][ C1] skb_clone+0x1bb/0x350 [ 319.933206][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x5dd/0x800 [ 319.940235][ C1] process_one_work+0x8a1/0x10c0 [ 319.945178][ C1] worker_thread+0xaca/0x1280 [ 319.949853][ C1] kthread+0x3f6/0x4f0 [ 319.953932][ C1] ret_from_fork+0x1f/0x30 [ 319.958371][ C1] page last free stack trace: [ 319.963040][ C1] free_unref_page_prepare+0xc34/0xcf0 [ 319.968831][ C1] free_unref_page+0x95/0x2d0 [ 319.973515][ C1] __unfreeze_partials+0x1b7/0x210 [ 319.978670][ C1] put_cpu_partial+0x132/0x1a0 [ 319.983422][ C1] ___cache_free+0xe3/0x100 [ 319.987914][ C1] qlist_free_all+0x36/0x90 [ 319.992413][ C1] kasan_quarantine_reduce+0x162/0x180 [ 319.997897][ C1] __kasan_slab_alloc+0x2f/0xc0 [ 320.002843][ C1] slab_post_alloc_hook+0x53/0x380 [ 320.008275][ C1] kmem_cache_alloc_node+0x121/0x2c0 [ 320.013564][ C1] __alloc_skb+0xdd/0x590 [ 320.017909][ C1] alloc_skb_with_frags+0xa3/0x780 [ 320.023804][ C1] sock_alloc_send_pskb+0x915/0xa50 [ 320.029076][ C1] unix_dgram_sendmsg+0x6fd/0x2090 [ 320.034176][ C1] __sys_sendto+0x564/0x720 [ 320.038699][ C1] __x64_sys_sendto+0xda/0xf0 [ 320.043487][ C1] [ 320.045835][ C1] Memory state around the buggy address: [ 320.051552][ C1] ffff8880745b8980: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 320.059628][ C1] ffff8880745b8a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 320.068216][ C1] >ffff8880745b8a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 320.076278][ C1] ^ [ 320.080493][ C1] ffff8880745b8b00: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 320.089073][ C1] ffff8880745b8b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 320.097936][ C1] ================================================================== [ 320.106588][ C1] Disabling lock debugging due to kernel taint [ 320.112778][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 320.119972][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Tainted: G B 5.15.167-syzkaller #0 [ 320.129443][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 320.139476][ C1] Call Trace: [ 320.142736][ C1] [ 320.145643][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 320.150306][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 320.155947][ C1] ? panic+0x860/0x860 [ 320.160115][ C1] ? lock_release+0xb9/0x9a0 [ 320.164789][ C1] ? rcu_is_watching+0x11/0xa0 [ 320.169538][ C1] panic+0x318/0x860 [ 320.173427][ C1] ? check_panic_on_warn+0x1d/0xa0 [ 320.178545][ C1] ? fb_is_primary_device+0xd0/0xd0 [ 320.183829][ C1] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 320.189809][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 320.195706][ C1] ? _raw_spin_unlock+0x40/0x40 [ 320.200628][ C1] ? print_memory_metadata+0xe2/0x140 [ 320.205979][ C1] check_panic_on_warn+0x7e/0xa0 [ 320.210910][ C1] ? __nft_trace_packet+0x137/0x150 [ 320.216110][ C1] end_report+0x6d/0xf0 [ 320.220369][ C1] kasan_report+0x18e/0x1c0 [ 320.224879][ C1] ? __nft_trace_packet+0x137/0x150 [ 320.230089][ C1] __nft_trace_packet+0x137/0x150 [ 320.235134][ C1] nft_do_chain+0x1453/0x16b0 [ 320.240010][ C1] ? unwind_next_frame+0x1437/0x1fa0 [ 320.245305][ C1] ? print_irqtrace_events+0x210/0x210 [ 320.250931][ C1] ? nft_fwd_dup_netdev_offload+0x130/0x130 [ 320.256998][ C1] ? ipv6_find_tlv+0x260/0x260 [ 320.261773][ C1] nft_do_chain_inet+0x3f8/0x680 [ 320.266788][ C1] ? nft_do_chain_arp+0x140/0x140 [ 320.271810][ C1] ? nf_nat_ipv6_fn+0x2c7/0x3d0 [ 320.276656][ C1] ? nf_nat_ipv6_local_fn+0x3b0/0x3b0 [ 320.282281][ C1] ? nf_nat_ipv6_fn+0x2c7/0x3d0 [ 320.287115][ C1] ? nf_nat_ipv6_local_fn+0x3b0/0x3b0 [ 320.292469][ C1] ? nft_do_chain_arp+0x140/0x140 [ 320.297477][ C1] nf_hook_slow+0xae/0x1e0 [ 320.301892][ C1] NF_HOOK+0x26b/0x410 [ 320.305953][ C1] ? ip6_input+0x80/0x80 [ 320.310181][ C1] ? ip6_rcv_core+0x15d0/0x15d0 [ 320.315039][ C1] ? ip6_input+0x80/0x80 [ 320.319266][ C1] ? ip6_rcv_finish_core+0x201/0x410 [ 320.324537][ C1] ? ip6_rcv_finish+0x16b/0x250 [ 320.329377][ C1] NF_HOOK+0x364/0x410 [ 320.333429][ C1] ? refcount_add+0x70/0x70 [ 320.337937][ C1] ? ip6_rcv_core+0x15d0/0x15d0 [ 320.342769][ C1] ? refcount_add+0x70/0x70 [ 320.347257][ C1] ? ip6_rcv_finish_core+0x410/0x410 [ 320.352521][ C1] __netif_receive_skb+0x1c6/0x530 [ 320.357622][ C1] ? read_lock_is_recursive+0x10/0x10 [ 320.360061][T10115] BTRFS info (device loop1): enabling ssd optimizations [ 320.363163][ C1] ? deliver_ptype_list_skb+0x3a0/0x3a0 [ 320.363189][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 320.381626][ C1] ? print_irqtrace_events+0x210/0x210 [ 320.387532][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 320.392931][ C1] process_backlog+0x363/0x7f0 [ 320.397836][ C1] ? rps_trigger_softirq+0x230/0x230 [ 320.403289][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 320.409297][ C1] ? print_irqtrace_events+0x210/0x210 [ 320.414786][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 320.420749][ C1] __napi_poll+0xc7/0x440 [ 320.425058][ C1] net_rx_action+0x617/0xda0 [ 320.429858][ C1] ? net_tx_action+0x8e0/0x8e0 [ 320.434746][ C1] handle_softirqs+0x3a7/0x930 [ 320.439644][ C1] ? run_ksoftirqd+0xc6/0x120 [ 320.444411][ C1] ? do_softirq+0x240/0x240 [ 320.449281][ C1] ? preempt_schedule_common+0xa6/0xd0 [ 320.454905][ C1] ? run_ksoftirqd+0xa3/0x120 [ 320.459710][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 320.465191][ C1] run_ksoftirqd+0xc6/0x120 [ 320.469698][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 320.474883][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 320.480242][ C1] ? smpboot_thread_fn+0x4d6/0x9d0 [ 320.485420][ C1] ? smpboot_thread_fn+0x5d5/0x9d0 [ 320.490738][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 320.495952][ C1] smpboot_thread_fn+0x51b/0x9d0 [ 320.500880][ C1] kthread+0x3f6/0x4f0 [ 320.504957][ C1] ? cpu_report_death+0x180/0x180 [ 320.510064][ C1] ? kthread_blkcg+0xd0/0xd0 [ 320.514751][ C1] ret_from_fork+0x1f/0x30 [ 320.519262][ C1] [ 320.522571][ C1] Kernel Offset: disabled [ 320.526936][ C1] Rebooting in 86400 seconds..