last executing test programs: 9.062603078s ago: executing program 3 (id=938): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20}, [@RTA_SRC={0x8, 0x2, @broadcast}, @RTA_DST={0x8, 0x1, @local}]}, 0x2c}}, 0x0) 8.876694103s ago: executing program 3 (id=940): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 8.736789774s ago: executing program 3 (id=944): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) writev(r0, &(0x7f0000000200)=[{&(0x7f00000001c0)="684671aa3699cf0cc37efd222214b373e60c67c5fef4ce55f513ab0c394a8c3f451fcb7d86", 0x25}, {&(0x7f0000000280)="e27b86ef10d347cd74805913ec2ce34c11481eb1a5e942f9e637fb6db813907dbae5a5a8efa88a91aa680dc312b1f87768c7c9a69a66350164ed98ee9636400d5b609f3ce6cf9eecf73ffa0859a7bf1e444e6935b9d4a47f350e34183b16161cb9f3ce3c9ec5d00181f8e599de0aee26034764366c388b84e44817d7f921b677f3fe6654c7e83d975f1055e39a58537ca4122ca150f9d293abdce2d1fac7b98eabf2bc970593b53adc11dc0d63404759ab099839b3bc8eb30e7a0cae3ce79e6b9254fbbb2ec8a78e478b", 0xca}, {&(0x7f0000000380)="01f9bf1d3d5a0c10f53e4f3cd4856bd58df9539bbd86948b121a72db4f7538ba2ba374afaa8eb3b07222685c4ee24221ea0b3fc11cd02a6122a2658839b2cbc5f66d45c2d3c7b5e7b5ed232b3ca48f5f62644b7c48f427f7dcfaa3030cc435bca0539a217b5388eae3fca6392e3857ab8881bf0c11b443d135b837a7ca", 0x7d}, {&(0x7f0000000a80)="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", 0x695}], 0x4) 8.671026079s ago: executing program 3 (id=946): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}) 8.524802581s ago: executing program 3 (id=950): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}]}) 7.839272437s ago: executing program 3 (id=960): r0 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x200000000114, 0x5, &(0x7f000002a0c0)=""/102398, &(0x7f0000000180)=0x18ffe) 4.33315975s ago: executing program 4 (id=1001): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f733e1a", 0xa, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, 0x0, 0x0, 0x0) 4.120589957s ago: executing program 4 (id=1005): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x28bd, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1, 0x80, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xec, 0x13}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x7, "852f6bfc"}]}}, 0x0}, 0x0) 2.60003545s ago: executing program 0 (id=1026): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x18, r1, 0x801, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) 2.393551636s ago: executing program 0 (id=1027): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71187a000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x4}, 0x94) 2.327902062s ago: executing program 0 (id=1028): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6d1cb49ada2c127b, 0x59032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 2.255018758s ago: executing program 0 (id=1030): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x45e, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x40, 0x23, 0x7, {0x7, 0x24, "8625378b27"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.942659653s ago: executing program 4 (id=1032): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x28) 1.794445715s ago: executing program 4 (id=1033): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x68, 0x0, &(0x7f0000000040)) 1.673685735s ago: executing program 4 (id=1034): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x4446, &(0x7f00000088c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0xc3) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1.621875339s ago: executing program 2 (id=1035): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, 0x0, 0x25, 0x3, @void}, 0x10) 1.438345254s ago: executing program 2 (id=1037): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x80000001}, 0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x4b47, &(0x7f0000000180)) 1.339466401s ago: executing program 2 (id=1038): syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000b80)={[{@utf8no}, {@uni_xlate}, {@shortname_mixed}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@utf8no}, {@fat=@umask={'umask', 0x3d, 0xcf7f}}, {@rodir}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@uni_xlateno}, {@rodir}, {@numtail}, {@uni_xlate}, {}, {@shortname_win95}]}, 0x26, 0x34b, &(0x7f0000000700)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 794.402985ms ago: executing program 1 (id=1042): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x2}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) 794.314296ms ago: executing program 2 (id=1043): r0 = semget(0x1, 0x5, 0x6b4) semop(r0, &(0x7f00000004c0)=[{0x4, 0xfff9}, {0x1, 0xaaf3, 0x800}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x41, 0x5, 0x4, 0x9]) 679.667795ms ago: executing program 1 (id=1044): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="24000000700039022abd7000fbdbdf2507000000", @ANYRES32=r1, @ANYBLOB="0c000180080005"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 570.716444ms ago: executing program 1 (id=1045): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x1d, r0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, r0, 0x0) 480.250671ms ago: executing program 1 (id=1046): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x19, 0x4, 0x8, 0xb}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 469.780572ms ago: executing program 2 (id=1047): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a310000000018000780050003001f0000000c00018008000140ffffffff05000500020000000500010006"], 0x60}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280"], 0x44}, 0x1, 0x0, 0x0, 0x34008005}, 0x4000050) 352.918811ms ago: executing program 1 (id=1048): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xab4, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x183341, 0x0) truncate(&(0x7f0000000040)='./file2\x00', 0x1) 334.747163ms ago: executing program 4 (id=1049): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1f) 313.748264ms ago: executing program 2 (id=1050): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xcc, 0x2c, 0xdf, 0x40, 0x763, 0x2030, 0x7979, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5f, 0x65, 0x60, 0x70, [{{0x9, 0x4, 0x1, 0x8, 0x0, 0xff, 0xa2, 0x7d, 0x9}}]}}]}}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) 104.478551ms ago: executing program 0 (id=1051): r0 = socket$inet(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(r0, 0x402, 0x0) 513.62µs ago: executing program 1 (id=1052): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900040000005300000057000e0048"], 0x80}}, 0x0) 0s ago: executing program 0 (id=1053): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a310000000028000480240001800b000100736f636b6574000014000280080002400000001508000140000000010900020073797a32"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20000050) kernel console output (not intermixed with test programs): 57.747957][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.756812][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.765987][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.776772][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.785790][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.794735][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.803879][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.815423][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.826552][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.839780][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.853608][ T4191] device veth0_macvtap entered promiscuous mode [ 57.865571][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.879525][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.889220][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.898249][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.907633][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.917564][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.928905][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.939046][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.947974][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.956935][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.975440][ T4191] device veth1_macvtap entered promiscuous mode [ 58.036863][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.047901][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.061582][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.073345][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.084790][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.094810][ T4181] device veth0_macvtap entered promiscuous mode [ 58.108336][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.117805][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.126287][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.135881][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.162291][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.173791][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.185028][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.196148][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.207570][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.224868][ T4181] device veth1_macvtap entered promiscuous mode [ 58.246690][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.256750][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.265999][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.274942][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.291272][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.301036][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.309841][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.319036][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.374435][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.383550][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.419448][ T4182] device veth0_vlan entered promiscuous mode [ 58.428375][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.436629][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.457236][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.468204][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.480516][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.489098][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.501432][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.512208][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.522706][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.534128][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.545534][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.553724][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 58.559902][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 58.562530][ T4182] device veth1_vlan entered promiscuous mode [ 58.583041][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.587148][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.593017][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 58.602364][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.610159][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.615621][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.622627][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 58.629172][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.643296][ T4250] Bluetooth: hci1: command 0x040f tx timeout [ 58.651531][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.661701][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.672982][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.682981][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.693710][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.703778][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.715147][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.726914][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.758465][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.767181][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.776614][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.788230][ T4181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.798826][ T4181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.807896][ T4181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.817157][ T4181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.850409][ T4182] device veth0_macvtap entered promiscuous mode [ 58.857888][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.867544][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.882490][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.900248][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.908888][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.918292][ T4182] device veth1_macvtap entered promiscuous mode [ 58.934537][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.945082][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.979459][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.991807][ T659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.000355][ T659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.003328][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.018834][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.029568][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.043614][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.054680][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.064886][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.075575][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.087813][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.116269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.129738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.146920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.158744][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.173307][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.184206][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.197043][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.207252][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.217940][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.228006][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.238763][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.249881][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.298835][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.316750][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.330889][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.339618][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.385595][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.396858][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.414512][ T659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.428551][ T659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.446105][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.464267][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.470196][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.533280][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.572325][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.581646][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.607294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.642686][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.667365][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.688400][ T659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.707717][ T659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.732527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.768549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.848071][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.867664][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.881744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.164835][ T4312] team0: Device gtp0 is of different type [ 60.624176][ T4320] loop2: detected capacity change from 0 to 8192 [ 60.632933][ T4250] Bluetooth: hci3: command 0x0419 tx timeout [ 60.646687][ T4250] Bluetooth: hci2: command 0x0419 tx timeout [ 60.675975][ T4250] Bluetooth: hci4: command 0x0419 tx timeout [ 60.710117][ T4334] loop1: detected capacity change from 0 to 128 [ 60.721055][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 60.737096][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 60.834805][ T4334] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 60.905457][ T4334] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 60.949999][ T4313] loop0: detected capacity change from 0 to 32768 [ 61.010618][ T4313] ======================================================= [ 61.010618][ T4313] WARNING: The mand mount option has been deprecated and [ 61.010618][ T4313] and is ignored by this kernel. Remove the mand [ 61.010618][ T4313] option from the mount to silence this warning. [ 61.010618][ T4313] ======================================================= [ 61.264974][ T4348] netlink: 'syz.2.26': attribute type 2 has an invalid length. [ 61.281245][ T4313] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 61.379431][ T4356] loop1: detected capacity change from 0 to 256 [ 61.403313][ T4313] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 61.434948][ T4356] exfat: Deprecated parameter 'namecase' [ 61.497284][ T659] (kworker/u4:3,659,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 61.503729][ T4356] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 61.532293][ T4360] loop3: detected capacity change from 0 to 1024 [ 61.707143][ T4182] ocfs2: Unmounting device (7,0) on (node local) [ 61.892797][ T144] hfsplus: b-tree write err: -5, ino 8 [ 62.011519][ T4376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.38'. [ 62.043010][ T4321] loop4: detected capacity change from 0 to 32768 [ 62.079871][ T4376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.38'. [ 62.142634][ T4376] netlink: 'syz.2.38': attribute type 13 has an invalid length. [ 62.152076][ T4321] gfs2: fsid=__Š°"_½z'²˱1Ä ¢ “I¡3ØÆÆåwÕøx9: Trying to join cluster "lock_nolock", "__Š°"_½z'²˱1Ä ¢ “I¡3ØÆÆåwÕøx9" [ 62.165831][ T4374] loop3: detected capacity change from 0 to 4096 [ 62.188510][ T4376] netlink: 'syz.2.38': attribute type 11 has an invalid length. [ 62.236714][ T4374] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 62.245436][ T4321] gfs2: fsid=__Š°"_½z'²˱1Ä ¢ “I¡3ØÆÆåwÕøx9: Now mounting FS (format 1801)... [ 62.455402][ T4321] gfs2: fsid=__Š°"_½z'²˱1Ä ¢ “I¡3ØÆÆåwÕøx9.s: journal 0 mapped with 16 extents in 0ms [ 62.478316][ T4374] ntfs: volume version 3.1. [ 62.496497][ T4389] loop1: detected capacity change from 0 to 256 [ 62.595613][ T4389] exfat: Deprecated parameter 'namecase' [ 62.694913][ T4389] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 62.780901][ T4321] gfs2: fsid=__Š°"_½z'²˱1Ä ¢ “I¡3ØÆÆåwÕøx9.s: first mount done, others may mount [ 62.804818][ T4390] loop2: detected capacity change from 0 to 4096 [ 62.840256][ T659] ntfs: (device loop3): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 62.948115][ T4390] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 62.986924][ T4390] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 63.008790][ T4400] loop1: detected capacity change from 0 to 256 [ 63.069066][ T4390] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 63.152782][ T4390] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 63.212256][ T4390] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 63.260308][ T4390] ntfs: volume version 3.1. [ 63.321547][ T4390] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 63.370616][ T4390] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 63.447614][ T4390] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 63.554071][ T4416] capability: warning: `syz.3.56' uses 32-bit capabilities (legacy support in use) [ 63.802014][ T4422] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.099752][ T4440] netlink: 'syz.1.67': attribute type 2 has an invalid length. [ 64.133063][ T4440] netlink: 244 bytes leftover after parsing attributes in process `syz.1.67'. [ 64.238770][ T4398] loop0: detected capacity change from 0 to 32768 [ 64.319392][ T4398] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.50 (4398) [ 64.341716][ T4452] loop2: detected capacity change from 0 to 1024 [ 64.432646][ T4398] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 64.495321][ T4398] BTRFS info (device loop0): force zlib compression, level 3 [ 64.546910][ T4398] BTRFS info (device loop0): force clearing of disk cache [ 64.596450][ T4398] BTRFS info (device loop0): setting nodatasum [ 64.622931][ T4398] BTRFS info (device loop0): allowing degraded mounts [ 64.674325][ T4398] BTRFS info (device loop0): enabling disk space caching [ 64.691993][ T4398] BTRFS info (device loop0): disk space caching is enabled [ 64.731890][ T4398] BTRFS info (device loop0): has skinny extents [ 65.065179][ T4485] loop3: detected capacity change from 0 to 1024 [ 65.338315][ T144] hfsplus: b-tree write err: -5, ino 4 [ 65.375767][ T4398] BTRFS info (device loop0): clearing free space tree [ 65.421930][ T4398] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 65.435380][ T4398] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 65.826699][ T4542] netlink: 152 bytes leftover after parsing attributes in process `syz.4.99'. [ 65.830404][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 65.850276][ T4542] tipc: Started in network mode [ 65.855302][ T4542] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 65.888520][ T4542] tipc: Enabled bearer , priority 10 [ 66.120298][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 66.175252][ T4557] netlink: zone id is out of range [ 66.241641][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.262280][ T4562] loop1: detected capacity change from 0 to 512 [ 66.268802][ T13] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 66.280278][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.292821][ T13] usb 3-1: config 0 descriptor?? [ 66.448690][ T4562] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 66.487790][ T4562] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.628465][ T4583] fscrypt (loop1, inode 15): Error -61 getting encryption context [ 66.678862][ T4591] loop3: detected capacity change from 0 to 64 [ 66.774297][ T13] greenasia 0003:0E8F:0012.0001: unknown main item tag 0xd [ 66.798683][ T13] greenasia 0003:0E8F:0012.0001: item fetching failed at offset 4/5 [ 66.817337][ T13] greenasia 0003:0E8F:0012.0001: parse failed [ 66.846601][ T13] greenasia: probe of 0003:0E8F:0012.0001 failed with error -22 [ 67.001696][ T13] tipc: Node number set to 4269801514 [ 67.007931][ T4600] loop0: detected capacity change from 0 to 128 [ 67.122405][ T4606] loop1: detected capacity change from 0 to 1024 [ 67.130459][ T13] usb 3-1: USB disconnect, device number 2 [ 67.150781][ T4600] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 67.206187][ T4600] System zones: 1-3, 19-19, 35-36 [ 67.213338][ T4600] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 67.225050][ T4600] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.621001][ T4623] loop1: detected capacity change from 0 to 512 [ 67.642371][ T4623] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.703114][ T4627] sctp: [Deprecated]: syz.0.126 (pid 4627) Use of int in maxseg socket option. [ 67.703114][ T4627] Use struct sctp_assoc_value instead [ 67.714887][ T4623] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 67.747818][ T4623] FAT-fs (loop1): Filesystem has been set read-only [ 67.768108][ T4623] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 67.769994][ T4625] loop4: detected capacity change from 0 to 4096 [ 67.784913][ T23] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 67.812950][ T4629] loop0: detected capacity change from 0 to 256 [ 67.973785][ T4629] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d) [ 68.030309][ T4636] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.101531][ T4634] loop1: detected capacity change from 0 to 4096 [ 68.210228][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 68.259457][ T23] usb 4-1: not running at top speed; connect to a high speed hub [ 68.410354][ T23] usb 4-1: config 2 has an invalid interface number: 212 but max is 1 [ 68.422569][ T23] usb 4-1: config 2 has an invalid interface number: 226 but max is 1 [ 68.437175][ T4642] loop0: detected capacity change from 0 to 512 [ 68.451741][ T23] usb 4-1: config 2 has no interface number 0 [ 68.468100][ T23] usb 4-1: config 2 has no interface number 1 [ 68.485320][ T23] usb 4-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 68.509898][ T23] usb 4-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 68.515608][ T4181] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 68.543753][ T4642] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.548730][ T23] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 68.585613][ T4181] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 68.589183][ T23] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 68.610493][ T23] usb 4-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 68.624305][ T23] usb 4-1: config 2 interface 212 has no altsetting 0 [ 68.790622][ T23] usb 4-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 68.801577][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.812998][ T23] usb 4-1: Product: syz [ 68.817213][ T23] usb 4-1: Manufacturer: syz [ 68.855514][ T23] usb 4-1: SerialNumber: syz [ 68.919364][ T4281] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.084134][ T4638] loop2: detected capacity change from 0 to 32768 [ 69.210809][ T4281] usb 5-1: Using ep0 maxpacket: 16 [ 69.284663][ T23] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.226/input/input6 [ 69.344319][ T23] usb 4-1: USB disconnect, device number 2 [ 69.350877][ C1] xpad 4-1:2.226: xpad_irq_in - usb_submit_urb failed with result -19 [ 69.387290][ T4281] usb 5-1: config 4 has an invalid interface number: 51 but max is 0 [ 69.404819][ T4281] usb 5-1: config 4 has no interface number 0 [ 69.435253][ T4281] usb 5-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 69.465970][ T4281] usb 5-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 69.520084][ T4281] usb 5-1: config 4 interface 51 has no altsetting 0 [ 69.722552][ T4281] usb 5-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 69.734071][ T4281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.753165][ T4281] usb 5-1: Product: syz [ 69.757396][ T4281] usb 5-1: Manufacturer: syz [ 69.783569][ T4281] usb 5-1: SerialNumber: syz [ 69.833307][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 69.834759][ T4644] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 69.886062][ T4644] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 70.017787][ T4663] loop0: detected capacity change from 0 to 32768 [ 70.034373][ T4663] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.144 (4663) [ 70.110493][ T4663] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 70.130270][ T4663] BTRFS info (device loop0): using free space tree [ 70.180769][ T4686] netlink: 60 bytes leftover after parsing attributes in process `syz.1.152'. [ 70.186874][ T4663] BTRFS info (device loop0): has skinny extents [ 70.227748][ T4281] cdc_eem: probe of 5-1:4.51 failed with error -71 [ 70.270950][ T4281] usb 5-1: USB disconnect, device number 2 [ 70.393680][ T4670] loop2: detected capacity change from 0 to 40427 [ 70.438918][ T4700] loop1: detected capacity change from 0 to 1024 [ 70.500834][ T4670] F2FS-fs (loop2): invalid crc value [ 70.508347][ T4663] BTRFS info (device loop0): enabling ssd optimizations [ 70.537883][ T4670] F2FS-fs (loop2): Found nat_bits in checkpoint [ 70.569624][ T4663] BTRFS warning (device loop0): can't set the mixed_backref feature bit while mounted [ 70.850240][ T4670] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 70.889271][ T4670] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 70.911779][ T4258] hfsplus: b-tree write err: -5, ino 8 [ 71.032609][ T4726] netlink: 16 bytes leftover after parsing attributes in process `syz.1.155'. [ 71.130178][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.136879][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.595389][ T4751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.170'. [ 71.605081][ T4752] usb usb8: usbfs: process 4752 (syz.0.169) did not claim interface 0 before use [ 72.138304][ T4784] loop4: detected capacity change from 0 to 512 [ 72.231552][ T4784] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 72.241661][ T4784] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 72.250750][ T4784] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #13: comm syz.4.185: iget: bad i_size value: 12154757448730 [ 72.265601][ T4784] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.185: couldn't read orphan inode 13 (err -117) [ 72.424911][ T4784] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 72.444102][ C0] vkms_vblank_simulate: vblank timer overrun [ 72.746391][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 72.868320][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 72.947879][ T4812] netlink: 'syz.3.197': attribute type 1 has an invalid length. [ 73.142416][ T13] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 73.154863][ T4818] loop1: detected capacity change from 0 to 4096 [ 73.170159][ T13] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 73.195151][ T13] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 73.210173][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.227097][ T4818] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 73.240513][ T4799] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 73.316307][ T4818] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 73.435928][ T4827] loop0: detected capacity change from 0 to 64 [ 73.559073][ T4181] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 73.683216][ T13] usb 3-1: USB disconnect, device number 3 [ 73.876264][ T4838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 73.973472][ T4846] CUSE: DEVNAME unspecified [ 74.396609][ T4869] loop0: detected capacity change from 0 to 512 [ 74.559154][ T4869] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 74.607612][ T4869] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 74.687042][ T4876] loop4: detected capacity change from 0 to 1764 [ 74.704379][ T4869] EXT4-fs (loop0): 1 truncate cleaned up [ 74.782073][ T4869] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,noquota,inode_readahead_blks=0x0000000008000000,debug_want_extra_isize=0x0000000000000040,noinit_itable,jqfmt=vfsv1,. Quota mode: none. [ 74.863423][ T4876] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 74.874051][ T4869] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #15: comm syz.0.223: corrupted in-inode xattr [ 74.954420][ T4869] EXT4-fs (loop0): Remounting filesystem read-only [ 74.990194][ T4869] EXT4-fs warning (device loop0): ext4_xattr_set_entry:1760: inode #15: comm syz.0.223: unable to update i_inline_off [ 75.035143][ T4869] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 75.071734][ T4885] EXT4-fs error (device loop0): ext4_xattr_ibody_list:748: inode #15: comm syz.0.223: corrupted in-inode xattr [ 75.136580][ T4885] EXT4-fs (loop0): Remounting filesystem read-only [ 75.473659][ T4870] loop2: detected capacity change from 0 to 32768 [ 75.548615][ T4911] netlink: 'syz.0.242': attribute type 1 has an invalid length. [ 75.663630][ T4870] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 75.897635][ T4928] loop4: detected capacity change from 0 to 256 [ 75.908303][ T4186] ocfs2: Unmounting device (7,2) on (node local) [ 76.232675][ T1108] cfg80211: failed to load regulatory.db [ 76.537374][ T4949] loop4: detected capacity change from 0 to 256 [ 76.599847][ T4953] 9p: Unknown Cache mode readahead [ 76.618935][ T4949] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d) [ 76.811658][ T4956] netlink: 40 bytes leftover after parsing attributes in process `syz.1.261'. [ 76.840440][ T4924] loop3: detected capacity change from 0 to 32768 [ 76.923972][ T4924] XFS: ikeep mount option is deprecated. [ 76.955394][ T4924] XFS: ikeep mount option is deprecated. [ 76.981938][ T4924] XFS: noikeep mount option is deprecated. [ 77.230763][ T4924] XFS (loop3): Mounting V5 Filesystem [ 77.245915][ T4932] loop0: detected capacity change from 0 to 40427 [ 77.309425][ T4932] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 77.317217][ T4932] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 77.405803][ T4932] F2FS-fs (loop0): Found nat_bits in checkpoint [ 77.587770][ T4986] loop2: detected capacity change from 0 to 4096 [ 77.625634][ T4932] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 77.628845][ T4924] XFS (loop3): Ending clean mount [ 77.644826][ T4932] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 77.689776][ T4994] loop1: detected capacity change from 0 to 512 [ 77.754816][ T4994] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 77.818214][ T4996] loop4: detected capacity change from 0 to 256 [ 77.825940][ T4924] XFS: ikeep mount option is deprecated. [ 77.843648][ T4924] XFS: ikeep mount option is deprecated. [ 77.857194][ T4994] EXT4-fs (loop1): 1 truncate cleaned up [ 77.867706][ T4996] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 77.908438][ T4994] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.259334][ T4182] attempt to access beyond end of device [ 78.259334][ T4182] loop0: rw=2049, want=45104, limit=40427 [ 78.302829][ T4187] XFS (loop3): Unmounting Filesystem [ 78.479599][ T5011] netlink: 'syz.1.284': attribute type 196 has an invalid length. [ 78.963144][ T5017] tipc: Started in network mode [ 78.968082][ T5017] tipc: Node identity ac14140d, cluster identity 4711 [ 79.020208][ T5017] vcan0: MTU too low for tipc bearer [ 79.046691][ T5017] tipc: Enabling of bearer rejected, failed to enable media [ 79.101493][ T5002] loop4: detected capacity change from 0 to 32768 [ 79.121758][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 79.121774][ T26] audit: type=1326 audit(1756511144.522:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5018 comm="syz.3.282" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fecb229abe9 code=0x0 [ 79.239007][ T5002] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 79.291805][ T5006] loop2: detected capacity change from 0 to 40427 [ 79.321813][ T5028] loop0: detected capacity change from 0 to 64 [ 79.343500][ T5006] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 79.389880][ T4191] ocfs2: Unmounting device (7,4) on (node local) [ 79.405284][ T5006] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 79.406507][ T5030] loop1: detected capacity change from 0 to 256 [ 79.467753][ T5006] F2FS-fs (loop2): invalid crc value [ 79.500396][ T5006] F2FS-fs (loop2): Found nat_bits in checkpoint [ 79.606419][ T1108] kernel write not supported for file /snd/seq (pid: 1108 comm: kworker/1:2) [ 79.688248][ T5006] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 79.718283][ T5006] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 79.903342][ T1108] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 79.941354][ T4186] attempt to access beyond end of device [ 79.941354][ T4186] loop2: rw=2049, want=45104, limit=40427 [ 80.024019][ T5052] netlink: 56 bytes leftover after parsing attributes in process `syz.3.300'. [ 80.087126][ T5052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.300'. [ 80.122305][ T5051] loop0: detected capacity change from 0 to 4096 [ 80.323830][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.357683][ T1108] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 80.370667][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.387926][ T4182] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 80.402604][ T1108] usb 5-1: config 0 descriptor?? [ 80.407741][ T4182] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 80.724099][ T5069] loop2: detected capacity change from 0 to 512 [ 80.786282][ T5069] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 80.875235][ T5054] loop1: detected capacity change from 0 to 32768 [ 80.877663][ T5069] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.298: iget: bad i_size value: 360287970189639680 [ 80.898589][ T1108] hid-generic 0003:057E:200E.0002: unbalanced delimiter at end of report description [ 80.902365][ T5069] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.298: couldn't read orphan inode 15 (err -117) [ 80.921718][ T5069] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.927491][ T1108] hid-generic: probe of 0003:057E:200E.0002 failed with error -22 [ 80.980232][ T21] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 81.019501][ T5069] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 13: comm syz.2.298: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=1 [ 81.050460][ T5069] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz.2.298: directory missing '.' [ 81.156646][ T1108] usb 5-1: USB disconnect, device number 3 [ 81.391353][ T21] usb 1-1: config 0 has an invalid interface number: 90 but max is 0 [ 81.398053][ T5087] netlink: 20 bytes leftover after parsing attributes in process `syz.2.315'. [ 81.410085][ T21] usb 1-1: config 0 has no interface number 0 [ 81.417134][ T21] usb 1-1: config 0 interface 90 altsetting 0 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 81.576789][ T5083] loop1: detected capacity change from 0 to 32768 [ 81.620437][ T21] usb 1-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=3a.fa [ 81.630194][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.638327][ T21] usb 1-1: Product: syz [ 81.643979][ T21] usb 1-1: Manufacturer: syz [ 81.649008][ T21] usb 1-1: SerialNumber: syz [ 81.656634][ T21] usb 1-1: config 0 descriptor?? [ 81.670568][ T5083] XFS (loop1): Mounting V5 Filesystem [ 81.690387][ T5065] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 81.797513][ T5083] XFS (loop1): Ending clean mount [ 81.978008][ T4181] XFS (loop1): Unmounting Filesystem [ 81.983823][ T21] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 82.009519][ T21] input: Griffin PowerMate as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.90/input/input8 [ 82.067292][ T5107] loop3: detected capacity change from 0 to 2048 [ 82.122038][ T5111] capability: warning: `syz.2.322' uses deprecated v2 capabilities in a way that may be insecure [ 82.216383][ T5113] loop2: detected capacity change from 0 to 64 [ 82.300351][ T5107] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.340090][ T5107] EXT4-fs error (device loop3): ext4_free_inode:355: comm syz.3.319: bit already cleared for inode 15 [ 82.370289][ T5113] hfs: unable to locate alternate MDB [ 82.385381][ T5113] hfs: continuing without an alternate MDB [ 82.437291][ T5100] loop4: detected capacity change from 0 to 32768 [ 82.446562][ T21] usb 1-1: USB disconnect, device number 2 [ 82.450699][ T5116] EXT4-fs error (device loop3): __ext4_new_inode:1076: comm syz.3.319: reserved inode found cleared - inode=1 [ 82.470065][ C1] powermate: config urb returned -71 [ 82.478880][ C1] powermate: usb_submit_urb(config) failed [ 82.609901][ T5100] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 82.785743][ T4191] ocfs2: Unmounting device (7,4) on (node local) [ 82.881256][ T5124] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:20004 [ 83.101992][ T5132] loop0: detected capacity change from 0 to 8 [ 83.363629][ T4567] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 83.536614][ T5148] loop2: detected capacity change from 0 to 256 [ 83.625911][ T5121] loop1: detected capacity change from 0 to 40427 [ 83.716791][ T5121] F2FS-fs (loop1): invalid crc value [ 83.748383][ T5121] F2FS-fs (loop1): Found nat_bits in checkpoint [ 83.755263][ T4567] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 83.810769][ T4567] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.825183][ T5160] loop0: detected capacity change from 0 to 2048 [ 83.839912][ T4567] usb 4-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 83.892129][ T4567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.898954][ T5121] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 83.950674][ T5121] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 83.959442][ T5160] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.969025][ T4567] usb 4-1: config 0 descriptor?? [ 84.445340][ T4567] uclogic 0003:2179:0077.0003: No inputs registered, leaving [ 84.508370][ T4567] uclogic 0003:2179:0077.0003: hidraw0: USB HID v3.0e Device [HID 2179:0077] on usb-dummy_hcd.3-1/input0 [ 84.592895][ T5181] loop0: detected capacity change from 0 to 1024 [ 84.655534][ T5188] netlink: 72 bytes leftover after parsing attributes in process `syz.4.356'. [ 84.756378][ T4258] hfsplus: b-tree write err: -5, ino 4 [ 84.777445][ T4566] usb 4-1: USB disconnect, device number 3 [ 84.833389][ T5187] fido_id[5187]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 84.873815][ T5197] loop0: detected capacity change from 0 to 8 [ 84.909375][ T5200] netlink: 100 bytes leftover after parsing attributes in process `syz.2.361'. [ 84.959280][ T5197] unable to read id index table [ 84.991777][ T5204] loop1: detected capacity change from 0 to 512 [ 85.016063][ T5204] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.124610][ T5204] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.363: invalid indirect mapped block 4294967295 (level 1) [ 85.278705][ T5204] EXT4-fs (loop1): Remounting filesystem read-only [ 85.294725][ T5204] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.363: invalid indirect mapped block 4294967295 (level 1) [ 85.378302][ T5216] loop2: detected capacity change from 0 to 512 [ 85.403198][ T5204] EXT4-fs (loop1): Remounting filesystem read-only [ 85.433874][ T5204] EXT4-fs (loop1): 2 truncates cleaned up [ 85.456550][ T5204] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000005,dioread_nolock,auto_da_alloc=0x000000007fffffff,. Quota mode: writeback. [ 85.491143][ T5216] EXT4-fs (loop2): orphan cleanup on readonly fs [ 85.501863][ T5216] EXT4-fs error (device loop2): ext4_quota_enable:6413: comm syz.2.368: Bad quota inum: 11, type: 1 [ 85.520418][ T5216] EXT4-fs warning (device loop2): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-117, ino=11). Please run e2fsck to fix. [ 85.575481][ T5216] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 85.582764][ T5216] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 85.600279][ T4566] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 85.748089][ T5226] loop2: detected capacity change from 0 to 128 [ 85.809727][ T5206] loop4: detected capacity change from 0 to 40427 [ 85.839512][ T5226] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 85.862415][ T5226] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.892101][ T5206] F2FS-fs (loop4): build fault injection attr: rate: 694, type: 0x1ffff [ 85.958262][ T5206] F2FS-fs (loop4): invalid crc value [ 85.970433][ T4566] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.989354][ T4566] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.019930][ T4566] usb 1-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 86.037518][ T5206] F2FS-fs (loop4): Found nat_bits in checkpoint [ 86.056881][ T4566] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.123467][ T4566] usb 1-1: config 0 descriptor?? [ 86.226852][ T5206] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 86.244609][ T26] audit: type=1326 audit(1756511151.642:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.1.380" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f812e975be9 code=0x0 [ 86.472011][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 86.524013][ T4191] attempt to access beyond end of device [ 86.524013][ T4191] loop4: rw=2049, want=45104, limit=40427 [ 86.593660][ T4566] viewsonic 0003:0543:E621.0004: item fetching failed at offset 3/5 [ 86.623605][ T4566] viewsonic: probe of 0003:0543:E621.0004 failed with error -22 [ 86.730737][ T5261] netlink: 763 bytes leftover after parsing attributes in process `syz.2.388'. [ 86.883405][ T1108] usb 1-1: USB disconnect, device number 3 [ 86.913830][ T5270] netlink: 128 bytes leftover after parsing attributes in process `syz.2.392'. [ 86.929359][ T5270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.392'. [ 87.042567][ T5272] loop3: detected capacity change from 0 to 2048 [ 87.147028][ T5272] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.237730][ T5285] loop2: detected capacity change from 0 to 512 [ 87.286976][ T5288] loop4: detected capacity change from 0 to 256 [ 87.312885][ T5285] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.398: invalid indirect mapped block 10 (level 1) [ 87.337271][ T5285] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.398: invalid indirect mapped block 8 (level 1) [ 87.353450][ T5285] EXT4-fs (loop2): 1 truncate cleaned up [ 87.359146][ T5285] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 87.370968][ T5288] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.383542][ T5288] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 87.403800][ T5288] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 87.420108][ T4566] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.455160][ T5293] loop0: detected capacity change from 0 to 512 [ 87.533519][ T5293] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 87.547654][ T5293] System zones: 1-12 [ 87.553513][ T5293] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.401: Directory hole found for htree index block 0 [ 87.570429][ T5293] EXT4-fs (loop0): Remounting filesystem read-only [ 87.577304][ T5293] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 87.586416][ T5293] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.401: Directory hole found for htree index block 0 [ 87.599903][ T5293] EXT4-fs (loop0): Remounting filesystem read-only [ 87.688325][ T5293] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 87.780311][ T4566] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 87.788833][ T4566] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.800823][ T5293] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 87.930368][ T4566] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 87.956612][ T5293] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.401: Directory hole found for htree index block 0 [ 87.970103][ T4566] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 87.970132][ T4566] usb 2-1: Manufacturer: syz [ 87.991356][ T4566] usb 2-1: config 0 descriptor?? [ 88.008178][ T5303] netlink: 132 bytes leftover after parsing attributes in process `syz.2.405'. [ 88.018561][ T5293] EXT4-fs (loop0): Remounting filesystem read-only [ 88.150694][ T4566] rc_core: IR keymap rc-hauppauge not found [ 88.157825][ T4566] Registered IR keymap rc-empty [ 88.198346][ T4566] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 88.224804][ T5308] loop0: detected capacity change from 0 to 512 [ 88.244775][ T4566] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 88.299673][ T5297] loop3: detected capacity change from 0 to 32768 [ 88.329315][ T5308] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.406: bg 0: block 16: invalid block bitmap [ 88.382150][ T5308] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 88.418015][ T5308] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.406: attempt to clear invalid blocks 1669132790 len 1 [ 88.474484][ T5299] loop4: detected capacity change from 0 to 32768 [ 88.482186][ T5316] loop2: detected capacity change from 0 to 1024 [ 88.487992][ T5308] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.406: invalid indirect mapped block 4294967295 (level 1) [ 88.541607][ T5308] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.406: invalid indirect mapped block 4294967295 (level 2) [ 88.555083][ T5316] hfsplus: bad catalog entry type [ 88.569083][ T5308] EXT4-fs (loop0): 1 truncate cleaned up [ 88.576919][ T5308] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000000,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 88.583207][ T5299] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.404 (5299) [ 88.592774][ C0] igorplugusb 2-1:0.0: receive overflow invalid: 154 [ 88.638051][ T5297] XFS (loop3): Mounting V5 Filesystem [ 88.648161][ T4258] hfsplus: b-tree write err: -5, ino 4 [ 88.790396][ T5299] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 88.799325][ T5299] BTRFS info (device loop4): enabling disk space caching [ 88.807670][ T5299] BTRFS info (device loop4): enabling auto defrag [ 88.815326][ T5299] BTRFS info (device loop4): doing ref verification [ 88.822311][ T5299] BTRFS info (device loop4): use no compression [ 88.827887][ T1108] usb 2-1: USB disconnect, device number 2 [ 88.828666][ T5299] BTRFS info (device loop4): force clearing of disk cache [ 88.856598][ T5299] BTRFS info (device loop4): disabling disk space caching [ 88.863906][ T5299] BTRFS info (device loop4): has skinny extents [ 88.908413][ T5297] XFS (loop3): Ending clean mount [ 88.984511][ T5297] XFS (loop3): Quotacheck needed: Please wait. [ 89.072739][ T5297] XFS (loop3): Quotacheck: Done. [ 89.156596][ T4187] XFS (loop3): Unmounting Filesystem [ 89.256497][ T5299] BTRFS info (device loop4): enabling ssd optimizations [ 89.282862][ T5299] BTRFS info (device loop4): clearing free space tree [ 89.318348][ T5299] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 89.339428][ T5299] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 89.947712][ T5375] loop3: detected capacity change from 0 to 1024 [ 90.025724][ T5375] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 90.043130][ T5375] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 90.079598][ T5375] EXT4-fs error (device loop3): ext4_get_journal_inode:5160: inode #5: comm syz.3.417: unexpected bad inode w/o EXT4_IGET_BAD [ 90.111629][ T5375] EXT4-fs (loop3): no journal found [ 90.117262][ T5375] EXT4-fs (loop3): can't get journal size [ 90.145222][ T5375] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 90.618514][ T5404] loop3: detected capacity change from 0 to 1024 [ 90.626813][ T5406] QAT: Invalid ioctl 21531 [ 90.667285][ T5411] loop2: detected capacity change from 0 to 16 [ 90.739639][ T5413] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 90.766955][ T4271] hfsplus: b-tree write err: -5, ino 4 [ 90.794981][ T5411] erofs: (device loop2): mounted with root inode @ nid 36. [ 91.018843][ T26] audit: type=1400 audit(1756511156.412:4): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3A14 pid=5418 comm="syz.3.444" [ 91.166260][ T5423] loop3: detected capacity change from 0 to 256 [ 91.376744][ T5429] loop0: detected capacity change from 0 to 256 [ 91.462718][ T5392] loop4: detected capacity change from 0 to 40427 [ 91.470213][ T5433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'. [ 91.512216][ T5429] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb75ad3fb, utbl_chksum : 0xe619d30d) [ 91.564765][ T5392] F2FS-fs (loop4): invalid crc value [ 91.605225][ T5392] F2FS-fs (loop4): Found nat_bits in checkpoint [ 91.801007][ T5443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.456'. [ 91.813552][ T5392] F2FS-fs (loop4): Start checkpoint disabled! [ 91.896376][ T5392] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 91.940289][ T23] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 92.218740][ T5462] loop0: detected capacity change from 0 to 256 [ 92.340557][ T23] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 92.348615][ T23] usb 4-1: config 0 has no interface number 0 [ 92.386017][ T23] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 92.403159][ T5466] Zero length message leads to an empty skb [ 92.425847][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.466123][ T23] usb 4-1: config 0 descriptor?? [ 92.532535][ T23] usb 4-1: selecting invalid altsetting 1 [ 92.561067][ T23] dvb_ttusb_budget: ttusb_init_controller: error [ 92.598688][ T23] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 92.815088][ T23] DVB: Unable to find symbol cx22700_attach() [ 92.933018][ T23] DVB: Unable to find symbol tda10046_attach() [ 92.944985][ T23] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 92.974790][ T23] usb 4-1: USB disconnect, device number 4 [ 93.061112][ T5491] loop0: detected capacity change from 0 to 256 [ 93.087330][ T5457] loop1: detected capacity change from 0 to 32768 [ 93.142100][ T5457] XFS: noikeep mount option is deprecated. [ 93.149258][ T5498] netlink: 200 bytes leftover after parsing attributes in process `syz.4.479'. [ 93.156923][ T5457] XFS (loop1): Mounting V5 Filesystem [ 93.210167][ T4556] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 93.211590][ T5491] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 93.319640][ T5457] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 93.411599][ T5457] XFS (loop1): Starting recovery (logdev: internal) [ 93.450161][ T4556] usb 3-1: Using ep0 maxpacket: 16 [ 93.480765][ T5457] XFS (loop1): Ending recovery (logdev: internal) [ 93.532914][ T5516] loop0: detected capacity change from 0 to 64 [ 93.570274][ T4556] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.610312][ T4556] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.666183][ T5518] loop4: detected capacity change from 0 to 4096 [ 93.670557][ T4556] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 93.692015][ T5514] loop3: detected capacity change from 0 to 4096 [ 93.712365][ T4556] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 93.730220][ T4556] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.769803][ T5514] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 93.820307][ T4556] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 93.829405][ T4556] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 93.866644][ T4556] usb 3-1: Manufacturer: syz [ 93.879266][ T5521] loop0: detected capacity change from 0 to 64 [ 93.906793][ T4556] usb 3-1: config 0 descriptor?? [ 93.912321][ T4181] XFS (loop1): Unmounting Filesystem [ 93.916376][ T5514] ntfs3: loop3: Failed to load $Extend. [ 94.284139][ T5527] loop0: detected capacity change from 0 to 1024 [ 94.370113][ T4556] rc_core: IR keymap rc-hauppauge not found [ 94.380794][ T4556] Registered IR keymap rc-empty [ 94.402719][ T4556] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.480322][ T4556] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.492550][ T4271] hfsplus: b-tree write err: -5, ino 4 [ 94.512083][ T4556] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 94.572380][ T4556] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 94.598701][ T4556] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.632950][ T4556] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.680181][ T4556] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.730286][ T4556] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.779619][ T4556] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.834149][ T4556] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.873769][ T4556] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.920361][ T4556] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.960197][ T4556] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.966231][ T5557] loop0: detected capacity change from 0 to 1024 [ 95.000358][ T4556] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 95.032000][ T4556] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 95.051483][ T4556] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 95.141310][ T5557] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,nobarrier,errors=remount-ro,. Quota mode: none. [ 95.494720][ T5379] usb 3-1: USB disconnect, device number 4 [ 95.635270][ T5593] loop1: detected capacity change from 0 to 64 [ 95.814808][ T5597] loop0: detected capacity change from 0 to 2048 [ 95.864240][ T5597] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.924161][ T5599] netlink: 32 bytes leftover after parsing attributes in process `syz.1.519'. [ 96.149271][ T5604] loop3: detected capacity change from 0 to 2048 [ 96.245336][ T5604] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 96.339279][ T5615] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.553253][ T5595] loop4: detected capacity change from 0 to 40427 [ 96.656117][ T5595] F2FS-fs (loop4): Invalid log blocks per segment (83886089) [ 96.675893][ T5595] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 96.775755][ T5595] F2FS-fs (loop4): invalid crc value [ 96.817636][ T5595] F2FS-fs (loop4): Found nat_bits in checkpoint [ 96.869549][ T5639] loop1: detected capacity change from 0 to 512 [ 96.986310][ T5639] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.536: iget: bad extended attribute block 1 [ 97.012736][ T5649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.539'. [ 97.049852][ T5595] F2FS-fs (loop4): Start checkpoint disabled! [ 97.077692][ T5639] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.536: couldn't read orphan inode 15 (err -117) [ 97.090169][ T5379] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 97.139241][ T5595] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 97.149899][ T5639] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 97.160878][ T5595] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 97.357487][ T5595] ceph: Unexpected value for 'acl' [ 97.416569][ T5379] usb 4-1: Using ep0 maxpacket: 8 [ 97.416973][ T5663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.544'. [ 97.516462][ T5666] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.547'. [ 97.521038][ T4363] attempt to access beyond end of device [ 97.521038][ T4363] loop4: rw=2049, want=40976, limit=40427 [ 97.561707][ T5666] openvswitch: netlink: Message has 13056 unknown bytes. [ 97.580200][ T1108] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 97.590658][ T5379] usb 4-1: unable to get BOS descriptor or descriptor too short [ 97.691159][ T5379] usb 4-1: config 9 has an invalid interface number: 5 but max is 1 [ 97.692608][ T5670] loop0: detected capacity change from 0 to 2048 [ 97.699219][ T5379] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 97.699242][ T5379] usb 4-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 97.699262][ T5379] usb 4-1: config 9 has no interface number 0 [ 97.699296][ T5379] usb 4-1: config 9 interface 5 altsetting 9 has an ignored endpoint with address 0x81, skipping [ 97.742668][ T5379] usb 4-1: config 9 interface 5 has no altsetting 0 [ 97.810902][ T5670] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.880304][ T1108] usb 3-1: Using ep0 maxpacket: 8 [ 97.956701][ T5379] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 97.970876][ T5379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.979254][ T5379] usb 4-1: Product: syz [ 98.004644][ T5379] usb 4-1: Manufacturer: syz [ 98.009308][ T5379] usb 4-1: SerialNumber: syz [ 98.135260][ T5685] netlink: 'syz.0.554': attribute type 21 has an invalid length. [ 98.164062][ T5685] IPv6: NLM_F_CREATE should be specified when creating new route [ 98.174954][ T5685] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 98.182758][ T5685] IPv6: NLM_F_CREATE should be set when creating new route [ 98.190099][ T5685] IPv6: NLM_F_CREATE should be set when creating new route [ 98.197355][ T5685] IPv6: NLM_F_CREATE should be set when creating new route [ 98.220425][ T5689] process 'syz.1.557' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 98.250449][ T1108] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 98.444535][ T5379] usb 4-1: USB disconnect, device number 5 [ 98.515211][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.526349][ T1108] usb 3-1: Product: syz [ 98.530993][ T1108] usb 3-1: Manufacturer: syz [ 98.535759][ T1108] usb 3-1: SerialNumber: syz [ 98.559659][ T1108] usb 3-1: config 0 descriptor?? [ 98.852452][ T1108] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 98.895509][ T5692] loop4: detected capacity change from 0 to 32768 [ 99.034100][ T5715] loop3: detected capacity change from 0 to 256 [ 99.048136][ T5715] exfat: Deprecated parameter 'namecase' [ 99.070842][ T5715] exfat: Deprecated parameter 'utf8' [ 99.119580][ T5715] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 99.155976][ T4556] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 99.181336][ T5719] loop4: detected capacity change from 0 to 256 [ 99.267547][ T4567] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.300485][ T1108] gspca_sunplus: reg_w_riv err -71 [ 99.305771][ T1108] sunplus: probe of 3-1:0.0 failed with error -71 [ 99.366455][ T1108] usb 3-1: USB disconnect, device number 5 [ 99.420221][ T4556] usb 1-1: Using ep0 maxpacket: 8 [ 99.550432][ T4556] usb 1-1: config 140 has an invalid interface number: 41 but max is 0 [ 99.558832][ T4556] usb 1-1: config 140 has no interface number 0 [ 99.563852][ T5729] loop4: detected capacity change from 0 to 2048 [ 99.565503][ T4567] usb 2-1: Using ep0 maxpacket: 32 [ 99.586811][ T4556] usb 1-1: config 140 interface 41 altsetting 0 endpoint 0x6 has invalid maxpacket 926, setting to 64 [ 99.638159][ T5729] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.700295][ T4567] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 99.720251][ T4567] usb 2-1: config 0 interface 0 has no altsetting 0 [ 99.737177][ T4567] usb 2-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 99.750258][ T4567] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.765240][ T4567] usb 2-1: config 0 descriptor?? [ 99.770609][ T4556] usb 1-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=77.86 [ 99.779675][ T4556] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.787996][ T4556] usb 1-1: Product: syz [ 99.792606][ T4556] usb 1-1: Manufacturer: syz [ 99.797485][ T4556] usb 1-1: SerialNumber: syz [ 99.923614][ T5736] netlink: 96 bytes leftover after parsing attributes in process `syz.2.577'. [ 99.954977][ T5723] loop3: detected capacity change from 0 to 32768 [ 100.053058][ T5723] ERROR: (device loop3): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 100.053058][ T5723] [ 100.092850][ T5723] ERROR: (device loop3): remounting filesystem as read-only [ 100.115542][ T5723] jfs_readdir: unexpected rc = -5 from dtReadNext [ 100.138007][ T4556] rndis_wlan 1-1:140.41: invalid descriptor buffer length [ 100.190097][ T4556] usb 1-1: bad CDC descriptors [ 100.242586][ T4556] rndis_host 1-1:140.41: invalid descriptor buffer length [ 100.265129][ T4567] smartjoyplus 0003:6666:8801.0005: hidraw0: USB HID vf.fe Device [HID 6666:8801] on usb-dummy_hcd.1-1/input0 [ 100.328041][ T4556] usb 1-1: bad CDC descriptors [ 100.334407][ T4567] smartjoyplus 0003:6666:8801.0005: Force feedback for SmartJoy PLUS PS2/USB adapter [ 100.350437][ T4556] cdc_acm 1-1:140.41: invalid descriptor buffer length [ 100.384911][ T5750] loop2: detected capacity change from 0 to 512 [ 100.405704][ T4556] usb 1-1: USB disconnect, device number 4 [ 100.436661][ T5751] vivid-000: disconnect [ 100.467442][ T4567] usb 2-1: USB disconnect, device number 3 [ 100.493302][ T5747] vivid-000: reconnect [ 100.532431][ T5750] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,,errors=continue. Quota mode: none. [ 100.614207][ T5753] fido_id[5753]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 100.869804][ T5761] loop2: detected capacity change from 0 to 1024 [ 100.906690][ T5763] IPVS: Error joining to the multicast group [ 101.025771][ T5761] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,errors=remount-ro,. Quota mode: none. [ 101.049071][ T5769] loop4: detected capacity change from 0 to 64 [ 101.156402][ T5761] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.228121][ T5769] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 101.396618][ T5777] netlink: 404 bytes leftover after parsing attributes in process `syz.3.594'. [ 101.452836][ T5777] netlink: 28 bytes leftover after parsing attributes in process `syz.3.594'. [ 101.478537][ T5777] netlink: 28 bytes leftover after parsing attributes in process `syz.3.594'. [ 101.536298][ T5779] loop1: detected capacity change from 0 to 1024 [ 101.558484][ T5777] netlink: 20 bytes leftover after parsing attributes in process `syz.3.594'. [ 101.590571][ T5779] EXT4-fs (loop1): Ignoring removed orlov option [ 101.609845][ T5779] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 101.625994][ T5783] tipc: Enabled bearer , priority 0 [ 101.643473][ T5781] loop2: detected capacity change from 0 to 2048 [ 101.721642][ T5779] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,mblk_io_submit,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 101.748063][ T5781] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.760532][ T5781] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.890468][ T26] audit: type=1800 audit(1756511167.282:5): pid=5781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.595" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 102.690261][ T4567] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 102.716863][ T5808] loop0: detected capacity change from 0 to 8 [ 102.764008][ T4339] udevd[4339]: incorrect cramfs checksum on /dev/loop0 [ 102.771726][ T5808] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 102.876825][ T4339] udevd[4339]: incorrect cramfs checksum on /dev/loop0 [ 102.950233][ T5802] loop3: detected capacity change from 0 to 32768 [ 102.981981][ T5802] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.604 (5802) [ 102.985151][ T5799] loop4: detected capacity change from 0 to 32768 [ 103.074922][ T5802] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 103.090494][ T5802] BTRFS info (device loop3): using free space tree [ 103.107345][ T5802] BTRFS info (device loop3): has skinny extents [ 103.201456][ T5799] XFS (loop4): Mounting V5 Filesystem [ 103.241937][ T4567] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 103.277824][ T4567] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.353951][ T4567] usb 2-1: Product: syz [ 103.358183][ T4567] usb 2-1: Manufacturer: syz [ 103.403700][ T4567] usb 2-1: SerialNumber: syz [ 103.452053][ T4567] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 103.586689][ T5799] XFS (loop4): Ending clean mount [ 103.611109][ T5802] BTRFS info (device loop3): enabling ssd optimizations [ 103.612257][ T5799] XFS (loop4): Quotacheck needed: Please wait. [ 103.742295][ T5799] XFS (loop4): Quotacheck: Done. [ 104.239267][ T4567] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 104.338758][ T4191] XFS (loop4): Unmounting Filesystem [ 104.658589][ T1108] usb 2-1: USB disconnect, device number 4 [ 104.793725][ T5860] loop2: detected capacity change from 0 to 32768 [ 104.926368][ T5860] JBD2: Ignoring recovery information on journal [ 105.092847][ T5887] netlink: 192 bytes leftover after parsing attributes in process `syz.3.629'. [ 105.110344][ T5887] netlink: 56 bytes leftover after parsing attributes in process `syz.3.629'. [ 105.154193][ T5860] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 105.270210][ T4567] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 105.277714][ T4567] ath9k_htc: Failed to initialize the device [ 105.309843][ T5894] loop1: detected capacity change from 0 to 512 [ 105.328363][ T1108] usb 2-1: ath9k_htc: USB layer deinitialized [ 105.355927][ T5860] (syz.2.619,5860,1):ocfs2_reflink_ioctl:4454 ERROR: status = -14 [ 105.417488][ T5894] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 105.418614][ T5894] EXT4-fs (loop1): orphan cleanup on readonly fs [ 105.419032][ T5894] Quota error (device loop1): v2_read_file_info: Free block number too big (0 >= 0). [ 105.419287][ T5894] EXT4-fs warning (device loop1): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 105.419315][ T5894] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 105.427328][ T5894] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.632: bg 0: block 40: padding at end of block bitmap is not set [ 105.429633][ T5894] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 105.434286][ T5894] EXT4-fs (loop1): 1 truncate cleaned up [ 105.434312][ T5894] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,user_xattr,journal_dev=0x0000000000000008,max_batch_time=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 105.456849][ T4186] ocfs2: Unmounting device (7,2) on (node local) [ 105.528733][ T5894] EXT4-fs warning (device loop1): ext4_resize_begin:83: There are errors in the filesystem, so online resizing is not allowed [ 106.024991][ T5917] loop2: detected capacity change from 0 to 1024 [ 106.178381][ T5917] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,i_version,,errors=continue. Quota mode: none. [ 106.221303][ T5917] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.548150][ T5948] netlink: 100 bytes leftover after parsing attributes in process `syz.1.655'. [ 106.663024][ T26] audit: type=1326 audit(1756511172.062:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.658" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ffd533be9 code=0x0 [ 106.676657][ T5958] loop0: detected capacity change from 0 to 512 [ 106.772012][ T5958] EXT4-fs (loop0): orphan cleanup on readonly fs [ 106.793596][ T5958] EXT4-fs error (device loop0): ext4_quota_enable:6413: comm syz.0.670: Bad quota inum: 11, type: 1 [ 106.833529][ T5958] EXT4-fs warning (device loop0): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-117, ino=11). Please run e2fsck to fix. [ 106.940238][ T5958] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 106.996364][ T5958] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 107.151136][ T5970] loop1: detected capacity change from 0 to 64 [ 107.213475][ T5970] hfs: unable to locate alternate MDB [ 107.227930][ T5951] loop2: detected capacity change from 0 to 32768 [ 107.245236][ T5970] hfs: continuing without an alternate MDB [ 107.326622][ T5951] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.656 (5951) [ 107.383588][ T5951] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 107.428241][ T5951] BTRFS info (device loop2): using free space tree [ 107.449046][ T5951] BTRFS info (device loop2): has skinny extents [ 107.794224][ T6006] loop4: detected capacity change from 0 to 128 [ 107.834634][ T5951] BTRFS info (device loop2): enabling ssd optimizations [ 107.921702][ T6006] EXT4-fs (loop4): Ignoring removed nobh option [ 107.929326][ T4567] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 107.981671][ T6006] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 108.006261][ T5951] BTRFS info (device loop2): device stats zeroed by syz.2.656 (5951) [ 108.010451][ T6006] ext4 filesystem being mounted at /132/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.170176][ T4567] usb 4-1: Using ep0 maxpacket: 32 [ 108.290505][ T4567] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 108.308781][ T4567] usb 4-1: config 0 has no interface number 0 [ 108.480308][ T4567] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 108.489493][ T4567] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.504590][ T4567] usb 4-1: Product: syz [ 108.508939][ T4567] usb 4-1: Manufacturer: syz [ 108.515214][ T4567] usb 4-1: SerialNumber: syz [ 108.525877][ T5978] loop0: detected capacity change from 0 to 40427 [ 108.535340][ T4567] usb 4-1: config 0 descriptor?? [ 108.582080][ T4567] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 108.602333][ T4567] usb 4-1: selecting invalid altsetting 1 [ 108.606907][ T5978] F2FS-fs (loop0): invalid crc value [ 108.608952][ T4567] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 108.637087][ T4567] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 108.669429][ T4567] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 108.671596][ T5978] F2FS-fs (loop0): Found nat_bits in checkpoint [ 108.684229][ T4567] usb 4-1: media controller created [ 108.722477][ T4567] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.838698][ T5978] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 109.072667][ T5978] attempt to access beyond end of device [ 109.072667][ T5978] loop0: rw=2049, want=45184, limit=40427 [ 109.086509][ T6018] loop1: detected capacity change from 0 to 32768 [ 109.151618][ T4182] attempt to access beyond end of device [ 109.151618][ T4182] loop0: rw=2049, want=45192, limit=40427 [ 109.155842][ T6018] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.688 (6018) [ 109.200156][ T6020] loop4: detected capacity change from 0 to 32768 [ 109.231481][ T6018] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 109.277216][ T6020] XFS (loop4): Mounting V5 Filesystem [ 109.310093][ T6018] BTRFS info (device loop1): enabling disk space caching [ 109.317279][ T6018] BTRFS info (device loop1): force clearing of disk cache [ 109.419122][ T6018] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 109.440123][ T6018] BTRFS info (device loop1): use zstd compression, level 3 [ 109.447392][ T6018] BTRFS info (device loop1): disk space caching is enabled [ 109.468416][ T6020] XFS (loop4): Ending clean mount [ 109.512103][ T6020] XFS (loop4): Quotacheck needed: Please wait. [ 109.540102][ T6018] BTRFS info (device loop1): has skinny extents [ 109.605104][ T6020] XFS (loop4): Quotacheck: Done. [ 109.773520][ T4191] XFS (loop4): Unmounting Filesystem [ 109.825812][ T6025] loop2: detected capacity change from 0 to 32768 [ 109.851537][ T4567] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 109.872677][ T4567] zl10353_read_register: readreg error (reg=127, ret==-110) [ 109.880751][ T6018] BTRFS info (device loop1): enabling ssd optimizations [ 109.901019][ T6018] BTRFS info (device loop1): clearing free space tree [ 109.913222][ T4567] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 109.924588][ T6018] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 109.946247][ T6018] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 110.032962][ T6057] sp0: Synchronizing with TNC [ 110.060785][ T4567] usb 4-1: USB disconnect, device number 6 [ 110.169336][ T6025] XFS (loop2): Mounting V5 Filesystem [ 110.316357][ T6025] XFS (loop2): Ending clean mount [ 110.415831][ T4186] XFS (loop2): Unmounting Filesystem [ 110.807875][ T6077] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 110.886730][ T6077] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 110.921787][ T6077] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 110.930581][ T6077] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 110.951286][ T6077] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 110.988040][ T6077] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 111.002525][ T6077] comedi comedi3: 8255: I/O port conflict (0x400000a,4) [ 111.009794][ T6077] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 111.037928][ T6077] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 111.044961][ T6077] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 111.087127][ T6077] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 111.101874][ T6085] loop0: detected capacity change from 0 to 1024 [ 111.108729][ T6077] comedi comedi3: 8255: I/O port conflict (0x101,4) [ 111.121169][ T6077] comedi comedi3: 8255: I/O port conflict (0x40,4) [ 111.127843][ T6077] comedi comedi3: 8255: I/O port conflict (0x1a449,4) [ 111.145221][ T6077] comedi comedi3: 8255: I/O port conflict (0x300000,4) [ 111.519295][ T6098] netlink: 40 bytes leftover after parsing attributes in process `syz.2.697'. [ 111.554342][ T151] hfsplus: b-tree write err: -5, ino 4 [ 111.910364][ T23] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 112.051754][ T6124] loop4: detected capacity change from 0 to 128 [ 112.069486][ T6123] loop0: detected capacity change from 0 to 512 [ 112.118868][ T6123] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 112.170709][ T6124] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 112.190304][ T6124] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.250328][ T23] usb 2-1: not running at top speed; connect to a high speed hub [ 112.268170][ T6123] EXT4-fs (loop0): 1 truncate cleaned up [ 112.294894][ T6123] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.340374][ T23] usb 2-1: config 95 has an invalid interface number: 1 but max is 0 [ 112.358778][ T23] usb 2-1: config 95 has no interface number 0 [ 112.375446][ T23] usb 2-1: config 95 interface 1 has no altsetting 0 [ 112.650391][ T23] usb 2-1: string descriptor 0 read error: -22 [ 112.656732][ T23] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 112.731094][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.874566][ T6141] loop4: detected capacity change from 0 to 32768 [ 112.943963][ T6141] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 112.952282][ T6141] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 112.970981][ T6141] gfs2: fsid=syz:syz.s: fatal: invalid metadata block [ 112.970981][ T6141] bh = 19 (type: exp=5, found=4) [ 112.970981][ T6141] function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 493 [ 112.992344][ T6141] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 112.999964][ T6141] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 113.009028][ T6141] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 113.018382][ T6141] gfs2: fsid=syz:syz.s: File system withdrawn [ 113.026142][ T6141] CPU: 0 PID: 6141 Comm: syz.4.713 Not tainted syzkaller #0 [ 113.033469][ T6141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.043640][ T6141] Call Trace: [ 113.047045][ T6141] [ 113.050008][ T6141] dump_stack_lvl+0x168/0x230 [ 113.054814][ T6141] ? kobject_uevent_env+0x371/0x890 [ 113.060034][ T6141] ? show_regs_print_info+0x20/0x20 [ 113.065248][ T6141] ? load_image+0x3b0/0x3b0 [ 113.069758][ T6141] ? kobject_uevent_env+0x371/0x890 [ 113.075058][ T6141] gfs2_withdraw+0x111b/0x1460 [ 113.079856][ T6141] ? gfs2_lm+0x220/0x220 [ 113.084103][ T6141] ? gfs2_meta_read+0x7d4/0xa50 [ 113.088961][ T6141] ? gfs2_meta_read+0x7d4/0xa50 [ 113.093911][ T6141] ? gfs2_meta_new+0x160/0x160 [ 113.098939][ T6141] gfs2_metatype_check_ii+0x74/0x90 [ 113.104228][ T6141] gfs2_meta_buffer+0x262/0x310 [ 113.109174][ T6141] __fillup_metapath+0x14d/0x340 [ 113.114120][ T6141] __gfs2_iomap_get+0x703/0x13e0 [ 113.119186][ T6141] ? gfs2_alloc_extent+0x4f0/0x4f0 [ 113.124302][ T6141] ? rcu_is_watching+0x11/0xa0 [ 113.129068][ T6141] ? trace_gfs2_bmap+0x8a/0x1f0 [ 113.134024][ T6141] gfs2_block_map+0x229/0x670 [ 113.138804][ T6141] ? gfs2_iomap_end+0x6b0/0x6b0 [ 113.143662][ T6141] ? mark_lock+0x94/0x320 [ 113.148128][ T6141] ? verify_lock_unused+0x140/0x140 [ 113.153360][ T6141] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 113.159448][ T6141] ? lockdep_hardirqs_on+0x94/0x140 [ 113.164741][ T6141] gfs2_write_alloc_required+0x362/0x610 [ 113.170379][ T6141] ? __rwlock_init+0x140/0x140 [ 113.175147][ T6141] ? gfs2_map_journal_extents+0xaa0/0xaa0 [ 113.181037][ T6141] ? _raw_spin_unlock+0x24/0x40 [ 113.185891][ T6141] ? gfs2_glock_nq+0xcb0/0x1550 [ 113.190751][ T6141] gfs2_jdesc_check+0x1c3/0x290 [ 113.195611][ T6141] check_journal_clean+0x151/0x300 [ 113.200729][ T6141] ? gfs2_trans_remove_revoke+0x370/0x370 [ 113.206457][ T6141] ? check_journal_clean+0x10d/0x300 [ 113.211743][ T6141] ? __rwlock_init+0x140/0x140 [ 113.216610][ T6141] ? do_raw_spin_unlock+0x11d/0x230 [ 113.221810][ T6141] ? _raw_spin_unlock+0x24/0x40 [ 113.226663][ T6141] ? gfs2_jdesc_find+0xa7/0xc0 [ 113.231426][ T6141] init_journal+0x179c/0x2220 [ 113.236119][ T6141] ? end_bio_io_page+0x100/0x100 [ 113.241058][ T6141] ? vsnprintf+0x1905/0x1a00 [ 113.245660][ T6141] ? snprintf+0xd7/0x120 [ 113.249907][ T6141] ? init_journal+0x710/0x2220 [ 113.254670][ T6141] ? vscnprintf+0x80/0x80 [ 113.259008][ T6141] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 113.264128][ T6141] init_inodes+0xdb/0x320 [ 113.268462][ T6141] gfs2_fill_super+0x1701/0x1f50 [ 113.273451][ T6141] ? gfs2_reconfigure+0xcd0/0xcd0 [ 113.278479][ T6141] ? gfs2_glock_nq_num+0x82/0x1b0 [ 113.283506][ T6141] ? preempt_count_add+0x8d/0x190 [ 113.288543][ T6141] ? sb_set_blocksize+0xa5/0xe0 [ 113.293399][ T6141] get_tree_bdev+0x3f1/0x610 [ 113.297993][ T6141] ? gfs2_reconfigure+0xcd0/0xcd0 [ 113.303029][ T6141] gfs2_get_tree+0x4d/0x1e0 [ 113.307535][ T6141] vfs_get_tree+0x88/0x270 [ 113.312229][ T6141] do_new_mount+0x24a/0xa40 [ 113.316742][ T6141] __se_sys_mount+0x2d6/0x3c0 [ 113.321422][ T6141] ? __x64_sys_mount+0xc0/0xc0 [ 113.326186][ T6141] ? lockdep_hardirqs_on+0x94/0x140 [ 113.331386][ T6141] ? __x64_sys_mount+0x1c/0xc0 [ 113.336241][ T6141] do_syscall_64+0x4c/0xa0 [ 113.340657][ T6141] ? clear_bhb_loop+0x30/0x80 [ 113.345330][ T6141] ? clear_bhb_loop+0x30/0x80 [ 113.350015][ T6141] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.356102][ T6141] RIP: 0033:0x7f9ffd53538a [ 113.360609][ T6141] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.380222][ T6141] RSP: 002b:00007f9ffb79ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 113.388727][ T6141] RAX: ffffffffffffffda RBX: 00007f9ffb79aef0 RCX: 00007f9ffd53538a [ 113.396720][ T6141] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f9ffb79aeb0 [ 113.404863][ T6141] RBP: 0000200000000400 R08: 00007f9ffb79aef0 R09: 0000000000200001 [ 113.412832][ T6141] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 113.420888][ T6141] R13: 00007f9ffb79aeb0 R14: 00000000000125bb R15: 0000200000000180 [ 113.428889][ T6141] [ 113.434389][ T6141] gfs2: fsid=syz:syz.s: Error checking journal for spectator mount. [ 113.613506][ T6142] loop0: detected capacity change from 0 to 32768 [ 113.730247][ T6142] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.714 (6142) [ 113.755559][ T6152] loop3: detected capacity change from 0 to 1764 [ 113.776772][ T4257] usb 2-1: USB disconnect, device number 5 [ 113.827817][ T6142] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 113.854438][ T6152] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 113.869115][ T6142] BTRFS info (device loop0): using free space tree [ 113.896814][ T6142] BTRFS info (device loop0): has skinny extents [ 114.178715][ T6142] BTRFS info (device loop0): enabling ssd optimizations [ 114.193587][ T6179] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 114.371417][ T6186] loop2: detected capacity change from 0 to 16 [ 114.466798][ T6186] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 115.109538][ T6207] loop3: detected capacity change from 0 to 128 [ 115.350305][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 115.575857][ T6221] loop1: detected capacity change from 0 to 1024 [ 115.680330][ T13] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 115.745831][ T6204] loop0: detected capacity change from 0 to 32768 [ 115.792508][ T23] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 115.813028][ T6204] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 115.843452][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.873836][ T6204] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 115.914947][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.970744][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 115.994023][ T23] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 116.003856][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.021690][ T6231] loop4: detected capacity change from 0 to 4096 [ 116.026072][ T23] usb 3-1: config 0 descriptor?? [ 116.044543][ T13] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 116.053440][ T4182] ocfs2: Unmounting device (7,0) on (node local) [ 116.058197][ T13] usb 4-1: config 1 has no interface number 0 [ 116.066279][ T13] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 116.087617][ T13] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 8 [ 116.120910][ T6231] ntfs: volume version 3.1. [ 116.260333][ T13] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 116.273156][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.313732][ T13] usb 4-1: Product: syz [ 116.318048][ T13] usb 4-1: Manufacturer: syz [ 116.325379][ T13] usb 4-1: SerialNumber: syz [ 116.371652][ T6215] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 116.378874][ T6215] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 116.411239][ T13] usb 4-1: Error in usbnet_get_endpoints (-22) [ 116.520536][ T4183] Bluetooth: hci4: link tx timeout [ 116.526499][ T4183] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 116.536769][ T23] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x7 [ 116.569776][ T6239] loop1: detected capacity change from 0 to 8192 [ 116.605244][ T6239] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 116.618714][ T6239] REISERFS (device loop1): using ordered data mode [ 116.625880][ T23] hid-picolcd 0003:04D8:C002.0006: No report with id 0x11 found [ 116.634366][ T13] usb 4-1: USB disconnect, device number 7 [ 116.635477][ T6239] reiserfs: using flush barriers [ 116.696118][ T6239] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 116.745785][ T4226] usb 3-1: USB disconnect, device number 6 [ 116.787109][ T6239] REISERFS (device loop1): checking transaction log (loop1) [ 116.836928][ T6251] loop4: detected capacity change from 0 to 512 [ 116.855820][ T6239] REISERFS (device loop1): Using r5 hash to sort names [ 116.873751][ T6239] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 116.971340][ T6251] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.756: bg 0: block 16: invalid block bitmap [ 117.003673][ T6251] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 117.055055][ T6251] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.756: attempt to clear invalid blocks 1669132790 len 1 [ 117.113556][ T6251] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.756: invalid indirect mapped block 4294967295 (level 1) [ 117.149213][ T6251] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.756: invalid indirect mapped block 4294967295 (level 2) [ 117.196991][ T6251] EXT4-fs (loop4): 1 truncate cleaned up [ 117.219732][ T6251] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000000,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 117.306511][ T26] audit: type=1400 audit(1756511182.702:7): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3A14 pid=6258 comm="syz.1.758" [ 117.606473][ T6252] loop0: detected capacity change from 0 to 40427 [ 117.676892][ T6269] loop3: detected capacity change from 0 to 2048 [ 117.680373][ T6252] F2FS-fs (loop0): invalid crc value [ 117.719517][ T6252] F2FS-fs (loop0): Found nat_bits in checkpoint [ 117.832834][ T6274] loop4: detected capacity change from 0 to 512 [ 117.865625][ T6269] NILFS (loop3): invalid segment: Magic number mismatch [ 117.887750][ T6252] F2FS-fs (loop0): Start checkpoint disabled! [ 117.900385][ T6269] NILFS (loop3): trying rollback from an earlier position [ 117.915830][ T6274] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 117.951829][ T6269] NILFS (loop3): recovery complete [ 117.977877][ T6252] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 117.988552][ T6274] EXT4-fs (loop4): 1 truncate cleaned up [ 118.042664][ T6274] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.054562][ T6277] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.237857][ T6262] loop2: detected capacity change from 0 to 32768 [ 118.560255][ T5379] Bluetooth: hci4: command 0x0406 tx timeout [ 118.570216][ T6288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.773'. [ 119.043384][ T6309] atomic_op ffff88801a9e7198 conn xmit_atomic 0000000000000000 [ 119.119897][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 119.594832][ T6342] loop3: detected capacity change from 0 to 1024 [ 119.684898][ T26] audit: type=1800 audit(1756511185.082:8): pid=6342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.796" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 119.820150][ T5377] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 119.876157][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.801'. [ 119.886138][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.801'. [ 119.897956][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.801'. [ 119.908279][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.801'. [ 119.980606][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.801'. [ 119.989959][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.801'. [ 120.029024][ T6358] loop4: detected capacity change from 0 to 512 [ 120.035899][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.801'. [ 120.081565][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.801'. [ 120.111453][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.801'. [ 120.113074][ T6358] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 120.164739][ T6358] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 120.225608][ T6358] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.803: corrupted in-inode xattr [ 120.250211][ T5377] usb 2-1: config 7 has an invalid interface number: 101 but max is 0 [ 120.258437][ T5377] usb 2-1: config 7 has no interface number 0 [ 120.277243][ T6358] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.803: couldn't read orphan inode 15 (err -117) [ 120.289846][ T5377] usb 2-1: config 7 interface 101 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 120.307437][ T6358] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 120.501307][ T5377] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 120.506255][ T6381] loop3: detected capacity change from 0 to 16 [ 120.520741][ T5377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.547058][ T5377] usb 2-1: Product: syz [ 120.571670][ T6381] erofs: (device loop3): mounted with root inode @ nid 36. [ 120.588728][ T5377] usb 2-1: Manufacturer: syz [ 120.604527][ T5377] usb 2-1: SerialNumber: syz [ 120.794137][ T6394] loop2: detected capacity change from 0 to 64 [ 120.975944][ T5377] as10x_usb: device has been detected [ 120.991789][ T6394] virtiofs: Unexpected value for 'dax' [ 121.009449][ T5377] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 121.054219][ T5377] usb 2-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 121.095394][ T6404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 121.153354][ T5377] as10x_usb: error during firmware upload part1 [ 121.160179][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 121.161043][ T5377] Registered device Elgato EyeTV DTT Deluxe [ 121.169502][ T5377] usb 2-1: USB disconnect, device number 6 [ 121.266862][ T5377] Unregistered device Elgato EyeTV DTT Deluxe [ 121.271185][ T5377] as10x_usb: device has been disconnected [ 121.342054][ T13] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 121.733833][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.910751][ T13] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 121.924862][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.954570][ T13] usb 5-1: Product: syz [ 121.959315][ T13] usb 5-1: Manufacturer: syz [ 121.977834][ T13] usb 5-1: SerialNumber: syz [ 122.006939][ T13] usb 5-1: config 0 descriptor?? [ 122.062102][ T13] hub 5-1:0.0: bad descriptor, ignoring hub [ 122.069951][ T13] hub: probe of 5-1:0.0 failed with error -5 [ 122.143131][ T13] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 122.181083][ T4339] udevd[4339]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.431589][ T13] usb 5-1: USB disconnect, device number 4 [ 122.508538][ T6454] loop1: detected capacity change from 0 to 40427 [ 122.573200][ T6454] F2FS-fs (loop1): build fault injection attr: rate: 694, type: 0x1ffff [ 122.608479][ T6454] F2FS-fs (loop1): invalid crc value [ 122.617547][ T6454] F2FS-fs (loop1): Found nat_bits in checkpoint [ 122.708821][ T6454] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 122.710533][ T6475] : renamed from bond0 [ 122.923693][ T6484] loop4: detected capacity change from 0 to 128 [ 123.035125][ T6484] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 123.047388][ T4181] attempt to access beyond end of device [ 123.047388][ T4181] loop1: rw=2049, want=45104, limit=40427 [ 123.070274][ T6484] FAT-fs (loop4): Filesystem has been set read-only [ 123.126230][ T6484] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 123.397396][ T6498] loop4: detected capacity change from 0 to 1024 [ 123.448785][ T6498] EXT4-fs (loop4): Ignoring removed orlov option [ 123.466661][ T6498] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 123.628555][ T6498] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,min_batch_time=0x00000000000000c0,delalloc,orlov,debug_want_extra_isize=0x0000000000000080,nouid32,resgid=0x0000000000000000,nomblk_io_submit,sysvgroups,,errors=continue. Quota mode: none. [ 123.701466][ T6508] loop0: detected capacity change from 0 to 16 [ 123.760331][ T6508] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300) [ 123.806944][ T6492] loop2: detected capacity change from 0 to 32768 [ 123.831050][ T6513] __nla_validate_parse: 14 callbacks suppressed [ 123.831068][ T6513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.874'. [ 123.923922][ T6492] XFS (loop2): Mounting V5 Filesystem [ 124.056479][ T6492] XFS (loop2): Ending clean mount [ 124.114610][ T6530] netlink: 'syz.1.878': attribute type 2 has an invalid length. [ 124.256173][ T4186] XFS (loop2): Unmounting Filesystem [ 124.417400][ T4566] hid-generic 0000:FFFFFFFD:0000.0007: unknown main item tag 0x0 [ 124.442376][ T4566] hid-generic 0000:FFFFFFFD:0000.0007: unknown main item tag 0x0 [ 124.482753][ T6545] loop1: detected capacity change from 0 to 1024 [ 124.526485][ T4566] hid-generic 0000:FFFFFFFD:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 124.563414][ T6545] hfsplus: bad catalog entry type [ 124.935271][ T6556] fido_id[6556]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 125.003140][ T6557] loop4: detected capacity change from 0 to 4096 [ 125.135644][ T6557] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 125.159417][ T6569] loop3: detected capacity change from 0 to 256 [ 125.168323][ T6557] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 125.199922][ T6557] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 125.239422][ T6557] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 125.279066][ T6557] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 125.307243][ T6569] FAT-fs (loop3): Directory bread(block 64) failed [ 125.330989][ T6569] FAT-fs (loop3): Directory bread(block 65) failed [ 125.337656][ T6569] FAT-fs (loop3): Directory bread(block 66) failed [ 125.352802][ T6557] ntfs: volume version 3.1. [ 125.371562][ T6557] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 125.417451][ T6569] FAT-fs (loop3): Directory bread(block 67) failed [ 125.436095][ T6557] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 125.456288][ T6569] FAT-fs (loop3): Directory bread(block 68) failed [ 125.474714][ T6569] FAT-fs (loop3): Directory bread(block 69) failed [ 125.494280][ T6557] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 125.510274][ T6569] FAT-fs (loop3): Directory bread(block 70) failed [ 125.517293][ T6569] FAT-fs (loop3): Directory bread(block 71) failed [ 125.548828][ T6557] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 125.570333][ T6569] FAT-fs (loop3): Directory bread(block 72) failed [ 125.590269][ T6557] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 125.620107][ T6569] FAT-fs (loop3): Directory bread(block 73) failed [ 125.721916][ T6585] netlink: 16 bytes leftover after parsing attributes in process `syz.2.904'. [ 125.769102][ T6555] loop1: detected capacity change from 0 to 32768 [ 125.895587][ T6555] MetaData crosses page boundary!! [ 125.912951][ T6587] loop2: detected capacity change from 0 to 1024 [ 125.920305][ T6555] lblock = 631800, size = 28672 [ 125.936901][ T6555] CPU: 0 PID: 6555 Comm: syz.1.889 Not tainted syzkaller #0 [ 125.944351][ T6555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 125.954565][ T6555] Call Trace: [ 125.957884][ T6555] [ 125.960848][ T6555] dump_stack_lvl+0x168/0x230 [ 125.965563][ T6555] ? show_regs_print_info+0x20/0x20 [ 125.970796][ T6555] ? load_image+0x3b0/0x3b0 [ 125.975348][ T6555] __get_metapage+0xbfa/0x1060 [ 125.980215][ T6555] dtSearch+0x5d5/0x2050 [ 125.984512][ T6555] jfs_lookup+0x152/0x380 [ 125.989040][ T6555] ? jfs_get_parent+0xa0/0xa0 [ 125.993766][ T6555] ? d_alloc_parallel+0x1203/0x12d0 [ 125.999007][ T6555] ? __init_waitqueue_head+0xa5/0x150 [ 126.004604][ T6555] __lookup_slow+0x27d/0x3d0 [ 126.009239][ T6555] ? lookup_one_len+0x2c0/0x2c0 [ 126.014263][ T6555] ? down_read+0x1aa/0x2e0 [ 126.018738][ T6555] lookup_slow+0x53/0x70 [ 126.023095][ T6555] walk_component+0x319/0x460 [ 126.027824][ T6555] path_lookupat+0x169/0x440 [ 126.032558][ T6555] do_o_path+0x94/0x1f0 [ 126.036762][ T6555] ? do_tmpfile+0x370/0x370 [ 126.041536][ T6555] path_openat+0x2954/0x2f30 [ 126.046188][ T6555] ? verify_lock_unused+0x140/0x140 [ 126.051502][ T6555] ? __kasan_slab_alloc+0xb3/0xd0 [ 126.056557][ T6555] ? __kasan_slab_alloc+0x9c/0xd0 [ 126.061612][ T6555] ? slab_post_alloc_hook+0x4c/0x380 [ 126.066929][ T6555] ? verify_lock_unused+0x140/0x140 [ 126.072263][ T6555] ? __x64_sys_open+0x11b/0x140 [ 126.077137][ T6555] ? do_syscall_64+0x4c/0xa0 [ 126.081750][ T6555] ? do_filp_open+0x3e0/0x3e0 [ 126.086477][ T6555] do_filp_open+0x1b3/0x3e0 [ 126.091011][ T6555] ? vfs_tmpfile+0x300/0x300 [ 126.095652][ T6555] ? _raw_spin_unlock+0x24/0x40 [ 126.100523][ T6555] ? alloc_fd+0x598/0x630 [ 126.105042][ T6555] do_sys_openat2+0x142/0x4a0 [ 126.109746][ T6555] ? do_sys_open+0xe0/0xe0 [ 126.114174][ T6555] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 126.120276][ T6555] ? lock_chain_count+0x20/0x20 [ 126.125150][ T6555] ? vtime_user_exit+0x2dc/0x400 [ 126.130129][ T6555] __x64_sys_open+0x11b/0x140 [ 126.134845][ T6555] do_syscall_64+0x4c/0xa0 [ 126.139510][ T6555] ? clear_bhb_loop+0x30/0x80 [ 126.144222][ T6555] ? clear_bhb_loop+0x30/0x80 [ 126.148937][ T6555] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.154949][ T6555] RIP: 0033:0x7f812e975be9 [ 126.159580][ T6555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.179513][ T6555] RSP: 002b:00007f812cbdd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 126.188004][ T6555] RAX: ffffffffffffffda RBX: 00007f812ebacfa0 RCX: 00007f812e975be9 [ 126.196008][ T6555] RDX: 0000000000000011 RSI: 0000000000648500 RDI: 0000200000000080 [ 126.204167][ T6555] RBP: 00007f812e9f8e19 R08: 0000000000000000 R09: 0000000000000000 [ 126.212170][ T6555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.220281][ T6555] R13: 00007f812ebad038 R14: 00007f812ebacfa0 R15: 00007ffd7d782408 [ 126.228387][ T6555] [ 126.231596][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.243472][ T4226] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.252252][ T6555] bread failed! [ 126.256059][ T6555] jfs_lookup: dtSearch returned -5 [ 126.298260][ T6589] loop3: detected capacity change from 0 to 32768 [ 126.356747][ T6587] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,data_err=ignore,,errors=continue. Quota mode: none. [ 126.584851][ T6589] XFS (loop3): Mounting V5 Filesystem [ 126.610296][ T4226] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 126.656271][ T4226] usb 1-1: config 0 interface 0 has no altsetting 0 [ 126.698344][ T6589] XFS (loop3): Ending clean mount [ 126.750850][ T4187] XFS (loop3): Unmounting Filesystem [ 126.796746][ T6597] loop4: detected capacity change from 0 to 40427 [ 126.852994][ T4226] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 126.879347][ T6597] F2FS-fs (loop4): build fault injection attr: rate: 694, type: 0x1ffff [ 126.901373][ T4226] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 126.909635][ T4226] usb 1-1: Product: syz [ 126.954653][ T6597] F2FS-fs (loop4): invalid crc value [ 126.977704][ T4226] usb 1-1: Manufacturer: syz [ 126.987631][ T4226] usb 1-1: SerialNumber: syz [ 127.008319][ T6597] F2FS-fs (loop4): Found nat_bits in checkpoint [ 127.046678][ T4226] usb 1-1: config 0 descriptor?? [ 127.133516][ T4226] usb 1-1: selecting invalid altsetting 0 [ 127.236220][ T6597] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 127.416631][ T13] usb 1-1: USB disconnect, device number 5 [ 127.506763][ T6626] loop2: detected capacity change from 0 to 512 [ 127.560735][ T6603] loop1: detected capacity change from 0 to 32768 [ 127.568676][ T4191] attempt to access beyond end of device [ 127.568676][ T4191] loop4: rw=2049, want=45104, limit=40427 [ 127.698584][ T6626] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.917: bad orphan inode 11862016 [ 127.732052][ T6626] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 127.743690][ T6626] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.392289][ T6653] sp0: Synchronizing with TNC [ 128.506836][ T6665] loop2: detected capacity change from 0 to 64 [ 129.225322][ T6655] loop4: detected capacity change from 0 to 32768 [ 129.297353][ T6702] loop3: detected capacity change from 0 to 512 [ 129.324905][ T6655] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.918 (6655) [ 129.396583][ T6655] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 129.437548][ T6655] BTRFS info (device loop4): using free space tree [ 129.440605][ T6702] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 129.445069][ T6655] BTRFS info (device loop4): has skinny extents [ 129.537802][ T6702] ext4 filesystem being mounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.669478][ T6737] netlink: 'syz.2.957': attribute type 1 has an invalid length. [ 129.757304][ T6655] BTRFS info (device loop4): enabling ssd optimizations [ 129.764990][ T6737] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.957'. [ 129.998149][ T4187] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /197/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 130.133027][ T4566] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 130.229078][ T4187] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 130.309290][ T4187] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 130.340500][ T4187] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /197/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 130.508157][ T6723] loop0: detected capacity change from 0 to 32768 [ 130.645769][ T4187] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 130.680455][ T4566] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 130.689680][ T4566] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.721972][ T4566] usb 3-1: Product: syz [ 130.726699][ T4566] usb 3-1: Manufacturer: syz [ 130.746735][ T4187] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 130.757568][ T4566] usb 3-1: SerialNumber: syz [ 130.778926][ T4187] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /197/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 130.821070][ T4566] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 131.081785][ T4187] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 131.130623][ T4187] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 131.154616][ T4187] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /197/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 131.270272][ T4567] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 131.307618][ T4187] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 131.349944][ T4187] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 131.362586][ T4187] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /197/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 131.404025][ T4566] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 131.450538][ T4187] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 131.479060][ T4187] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 131.588370][ T4187] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 131.662822][ T4567] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.690109][ T4567] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.741938][ T4187] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 131.770500][ T4567] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 131.779818][ T4567] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 131.799158][ T4567] usb 5-1: SerialNumber: syz [ 131.846450][ T4257] usb 3-1: USB disconnect, device number 7 [ 131.904817][ T4187] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 132.015121][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 132.015138][ T26] audit: type=1326 audit(1756511197.412:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.1.983" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f812e975be9 code=0x0 [ 132.049113][ T6796] loop0: detected capacity change from 0 to 2048 [ 132.055967][ T4187] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 132.102854][ T4567] usb 5-1: 0:2 : does not exist [ 132.110793][ T6796] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 132.148939][ T6798] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.163940][ T4187] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 132.175195][ T4567] usb 5-1: USB disconnect, device number 5 [ 132.445077][ T4339] udevd[4339]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.476615][ T4566] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 132.508841][ T4566] ath9k_htc: Failed to initialize the device [ 132.536111][ T4257] usb 3-1: ath9k_htc: USB layer deinitialized [ 132.562566][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.568985][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.711991][ T6811] loop4: detected capacity change from 0 to 128 [ 132.741486][ T6810] use of bytesused == 0 is deprecated and will be removed in the future, [ 132.761648][ T6813] loop2: detected capacity change from 0 to 512 [ 132.770092][ T6810] use the actual size instead. [ 132.789250][ T6811] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 132.866325][ T6811] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.948411][ T6813] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 133.032640][ T6813] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.525383][ T6838] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 133.818890][ T6854] loop0: detected capacity change from 0 to 64 [ 133.929007][ T6854] hfs: unable to locate alternate MDB [ 133.950080][ T6854] hfs: continuing without an alternate MDB [ 133.990140][ T4566] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 134.230243][ T4566] usb 5-1: Using ep0 maxpacket: 32 [ 134.350311][ T4566] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.395858][ T4566] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.419571][ T4566] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 134.437192][ T4566] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.451281][ T6870] loop2: detected capacity change from 0 to 256 [ 134.510592][ T4566] usb 5-1: config 0 descriptor?? [ 134.609107][ T6853] loop1: detected capacity change from 0 to 32768 [ 134.808017][ T6853] XFS (loop1): Mounting V5 Filesystem [ 134.979103][ T6891] loop0: detected capacity change from 0 to 128 [ 134.990896][ T4566] hid (null): invalid report_size -60084347 [ 134.999407][ T4566] uclogic 0003:28BD:0042.0008: invalid report_size -60084347 [ 135.011772][ T4566] uclogic 0003:28BD:0042.0008: item 0 4 1 7 parsing failed [ 135.019687][ T4566] uclogic 0003:28BD:0042.0008: parse failed [ 135.027509][ T4566] uclogic: probe of 0003:28BD:0042.0008 failed with error -22 [ 135.043609][ T4187] EXT4-fs error: 41 callbacks suppressed [ 135.043626][ T4187] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 135.076996][ T6891] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.078754][ T6853] XFS (loop1): Ending clean mount [ 135.088295][ T6891] ext4 filesystem being mounted at /223/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 135.139393][ T4187] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /197/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 135.179042][ T6853] XFS (loop1): Quotacheck needed: Please wait. [ 135.245288][ T1108] usb 5-1: USB disconnect, device number 6 [ 135.288216][ T6853] XFS (loop1): Quotacheck: Done. [ 135.385007][ T6895] loop2: detected capacity change from 0 to 4096 [ 135.411882][ T4187] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 135.452658][ T4187] EXT4-fs warning: 16 callbacks suppressed [ 135.452675][ T4187] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 135.479403][ T4187] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /197/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 135.505967][ T4181] XFS (loop1): Unmounting Filesystem [ 135.635338][ T6895] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 135.637303][ T4187] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 135.666843][ T6895] ntfs3: loop2: Failed to load $Extend. [ 135.695094][ T4187] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 135.729504][ T4187] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /197/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 135.860281][ T1108] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 135.965746][ T4187] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 136.021235][ T4187] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 136.040877][ T4187] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /197/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 136.244191][ T4187] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 136.268681][ T1108] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.300038][ T1108] usb 1-1: config 0 interface 0 has no altsetting 0 [ 136.306862][ T1108] usb 1-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 136.323410][ T4187] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 136.345604][ T4187] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /197/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 136.374464][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.388508][ T1108] usb 1-1: config 0 descriptor?? [ 136.530364][ T6921] loop2: detected capacity change from 0 to 256 [ 136.537003][ T4187] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 136.661196][ T6921] FAT-fs (loop2): Directory bread(block 64) failed [ 136.667799][ T6921] FAT-fs (loop2): Directory bread(block 65) failed [ 136.687328][ T6925] tipc: Enabled bearer , priority 10 [ 136.715519][ T6921] FAT-fs (loop2): Directory bread(block 66) failed [ 136.743922][ T6921] FAT-fs (loop2): Directory bread(block 67) failed [ 136.753925][ T4187] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 136.765316][ T6921] FAT-fs (loop2): Directory bread(block 68) failed [ 136.765390][ T6921] FAT-fs (loop2): Directory bread(block 69) failed [ 136.765462][ T6921] FAT-fs (loop2): Directory bread(block 70) failed [ 136.765494][ T6921] FAT-fs (loop2): Directory bread(block 71) failed [ 136.765562][ T6921] FAT-fs (loop2): Directory bread(block 72) failed [ 136.781042][ T6913] loop4: detected capacity change from 0 to 32768 [ 136.806763][ T6921] FAT-fs (loop2): Directory bread(block 73) failed [ 136.861897][ T1108] microsoft 0003:045E:00F9.0009: item fetching failed at offset 5/7 [ 136.881368][ T1108] microsoft 0003:045E:00F9.0009: parse failed [ 136.903112][ T1108] microsoft: probe of 0003:045E:00F9.0009 failed with error -22 [ 136.965237][ T6913] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 137.035695][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1042'. [ 137.044990][ T4187] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 137.125954][ T4567] usb 1-1: USB disconnect, device number 6 [ 137.226490][ T6933] (syz.4.1034,6933,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 137.256302][ T4187] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 137.341779][ T6933] (syz.4.1034,6933,1):__ocfs2_delete_entry:1162 ERROR: status = -5 [ 137.349944][ T6933] (syz.4.1034,6933,1):ocfs2_unlink:990 ERROR: status = -5 [ 137.362094][ T6933] (syz.4.1034,6933,1):ocfs2_unlink:1042 ERROR: status = -5 [ 137.378090][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'. [ 137.463454][ T6946] loop1: detected capacity change from 0 to 2048 [ 137.466365][ T4187] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 137.503193][ T4191] ocfs2: Unmounting device (7,4) on (node local) [ 137.580100][ T6949] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.662433][ T6950] NILFS (loop1): error -2 truncating bmap (ino=16) [ 137.742690][ T4187] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 137.796423][ T6949] ------------[ cut here ]------------ [ 137.802432][ T6949] WARNING: CPU: 0 PID: 6949 at fs/nilfs2/dat.c:200 nilfs_dat_commit_end+0x5ac/0x6b0 [ 137.810102][ T1108] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 137.811997][ T6949] Modules linked in: [ 137.824227][ T6949] CPU: 0 PID: 6949 Comm: segctord Not tainted syzkaller #0 [ 137.831803][ T6949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 137.842145][ T6949] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 137.848188][ T6949] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a8 4c 03 00 e8 33 d6 6e fe e8 fe 85 f7 fd e9 b8 fc ff ff e8 24 d6 6e fe <0f> 0b e9 16 fc ff ff e8 18 d6 6e fe e8 e3 85 f7 fd e9 74 fe ff ff [ 137.867978][ T6949] RSP: 0018:ffffc9000319f390 EFLAGS: 00010293 [ 137.874206][ T6949] RAX: ffffffff8308f48c RBX: ffff8880267dd1a0 RCX: ffff888029075940 [ 137.882273][ T6949] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 137.890393][ T6949] RBP: 0000000000000003 R08: dffffc0000000000 R09: ffffed100e59f6e9 [ 137.898389][ T6949] R10: ffffed100e59f6e9 R11: 1ffff1100e59f6e8 R12: ffff8880290770c8 [ 137.906448][ T6949] R13: ffff88805ff539e0 R14: 00000000003f0002 R15: ffff88805c744430 [ 137.914578][ T6949] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 137.923601][ T6949] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.930531][ T6949] CR2: 00007f28865c76c0 CR3: 0000000064778000 CR4: 00000000003506f0 [ 137.938627][ T6949] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 137.946683][ T6949] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 137.954712][ T6949] Call Trace: [ 137.958013][ T6949] [ 137.961011][ T6949] nilfs_dat_commit_update+0x24/0x40 [ 137.966329][ T6949] nilfs_btree_commit_update_v+0x93/0x400 [ 137.972173][ T6949] nilfs_btree_propagate+0x974/0xd40 [ 137.977620][ T6949] nilfs_bmap_propagate+0x70/0x120 [ 137.982835][ T6949] nilfs_segctor_apply_buffers+0x15d/0x320 [ 137.988673][ T6949] ? nilfs_collect_file_data+0xc0/0xc0 [ 137.994223][ T6949] nilfs_segctor_scan_file+0x75f/0x960 [ 137.999712][ T6949] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 138.006929][ T6949] ? nilfs_segbuf_extend_segsum+0x25d/0x360 [ 138.012892][ T6949] ? rcu_is_watching+0x11/0xa0 [ 138.017692][ T6949] nilfs_segctor_do_construct+0x1c09/0x6be0 [ 138.023828][ T6949] ? nilfs_transaction_unlock+0x220/0x220 [ 138.029787][ T6949] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 138.036046][ T6949] ? clear_nonspinnable+0x60/0x60 [ 138.041153][ T6949] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 138.046738][ T6949] ? __lock_acquire+0x7c60/0x7c60 [ 138.052022][ T6949] ? __rwlock_init+0x140/0x140 [ 138.056812][ T6949] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 138.063056][ T6949] ? do_raw_spin_unlock+0x11d/0x230 [ 138.068461][ T6949] ? _raw_spin_unlock+0x24/0x40 [ 138.073391][ T6949] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 138.078978][ T6949] nilfs_segctor_construct+0x17b/0x690 [ 138.084553][ T6949] nilfs_segctor_thread+0x50a/0x1120 [ 138.089903][ T6949] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 138.095891][ T6949] ? nilfs_iput_work_func+0x70/0x70 [ 138.101183][ T6949] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 138.107104][ T6949] ? _raw_spin_unlock+0x40/0x40 [ 138.112029][ T6949] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 138.117946][ T6949] ? init_wait_entry+0xd0/0xd0 [ 138.122785][ T6949] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 138.128699][ T6949] ? __kthread_parkme+0x157/0x1b0 [ 138.133820][ T6949] kthread+0x436/0x520 [ 138.137910][ T6949] ? nilfs_iput_work_func+0x70/0x70 [ 138.143192][ T6949] ? kthread_blkcg+0xd0/0xd0 [ 138.147803][ T6949] ret_from_fork+0x1f/0x30 [ 138.152396][ T6949] [ 138.155439][ T6949] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 138.162727][ T6949] CPU: 0 PID: 6949 Comm: segctord Not tainted syzkaller #0 [ 138.170087][ T6949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.180433][ T6949] Call Trace: [ 138.183735][ T6949] [ 138.186682][ T6949] dump_stack_lvl+0x168/0x230 [ 138.191562][ T6949] ? show_regs_print_info+0x20/0x20 [ 138.196876][ T6949] ? load_image+0x3b0/0x3b0 [ 138.201415][ T6949] panic+0x2c9/0x7f0 [ 138.205507][ T6949] ? bpf_jit_dump+0xd0/0xd0 [ 138.210037][ T6949] ? ret_from_fork+0x1f/0x30 [ 138.214647][ T6949] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 138.220044][ T6949] __warn+0x248/0x2b0 [ 138.224049][ T6949] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 138.229451][ T6949] report_bug+0x1b7/0x2e0 [ 138.233893][ T6949] handle_bug+0x3a/0x70 [ 138.238098][ T6949] exc_invalid_op+0x16/0x40 [ 138.242639][ T6949] asm_exc_invalid_op+0x16/0x20 [ 138.247513][ T6949] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 138.253515][ T6949] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a8 4c 03 00 e8 33 d6 6e fe e8 fe 85 f7 fd e9 b8 fc ff ff e8 24 d6 6e fe <0f> 0b e9 16 fc ff ff e8 18 d6 6e fe e8 e3 85 f7 fd e9 74 fe ff ff [ 138.268000][ T1108] usb 3-1: not running at top speed; connect to a high speed hub [ 138.273240][ T6949] RSP: 0018:ffffc9000319f390 EFLAGS: 00010293 [ 138.273270][ T6949] RAX: ffffffff8308f48c RBX: ffff8880267dd1a0 RCX: ffff888029075940 [ 138.273286][ T6949] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 138.273299][ T6949] RBP: 0000000000000003 R08: dffffc0000000000 R09: ffffed100e59f6e9 [ 138.311276][ T6949] R10: ffffed100e59f6e9 R11: 1ffff1100e59f6e8 R12: ffff8880290770c8 [ 138.319272][ T6949] R13: ffff88805ff539e0 R14: 00000000003f0002 R15: ffff88805c744430 [ 138.327280][ T6949] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 138.332705][ T6949] nilfs_dat_commit_update+0x24/0x40 [ 138.338024][ T6949] nilfs_btree_commit_update_v+0x93/0x400 [ 138.343794][ T6949] nilfs_btree_propagate+0x974/0xd40 [ 138.349120][ T6949] nilfs_bmap_propagate+0x70/0x120 [ 138.354266][ T6949] nilfs_segctor_apply_buffers+0x15d/0x320 [ 138.360097][ T6949] ? nilfs_collect_file_data+0xc0/0xc0 [ 138.365680][ T6949] nilfs_segctor_scan_file+0x75f/0x960 [ 138.371189][ T6949] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 138.378440][ T6949] ? nilfs_segbuf_extend_segsum+0x25d/0x360 [ 138.384615][ T6949] ? rcu_is_watching+0x11/0xa0 [ 138.389496][ T6949] nilfs_segctor_do_construct+0x1c09/0x6be0 [ 138.395738][ T6949] ? nilfs_transaction_unlock+0x220/0x220 [ 138.401477][ T6949] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 138.408096][ T6949] ? clear_nonspinnable+0x60/0x60 [ 138.413160][ T6949] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 138.418645][ T6949] ? __lock_acquire+0x7c60/0x7c60 [ 138.423698][ T6949] ? __rwlock_init+0x140/0x140 [ 138.428478][ T6949] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 138.434783][ T6949] ? do_raw_spin_unlock+0x11d/0x230 [ 138.440000][ T6949] ? _raw_spin_unlock+0x24/0x40 [ 138.444968][ T6949] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 138.450450][ T6949] nilfs_segctor_construct+0x17b/0x690 [ 138.455953][ T6949] nilfs_segctor_thread+0x50a/0x1120 [ 138.461288][ T6949] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 138.465482][ T1108] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 138.467197][ T6949] ? nilfs_iput_work_func+0x70/0x70 [ 138.467224][ T6949] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 138.479789][ T1108] usb 3-1: config 95 has no interface number 0 [ 138.480479][ T6949] ? _raw_spin_unlock+0x40/0x40 [ 138.480507][ T6949] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 138.480532][ T6949] ? init_wait_entry+0xd0/0xd0 [ 138.497014][ T1108] usb 3-1: config 95 interface 1 has no altsetting 0 [ 138.497584][ T6949] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 138.497618][ T6949] ? __kthread_parkme+0x157/0x1b0 [ 138.526296][ T6949] kthread+0x436/0x520 [ 138.530840][ T6949] ? nilfs_iput_work_func+0x70/0x70 [ 138.536096][ T6949] ? kthread_blkcg+0xd0/0xd0 [ 138.540810][ T6949] ret_from_fork+0x1f/0x30 [ 138.545263][ T6949] [ 138.548521][ T6949] Kernel Offset: disabled [ 138.553065][ T6949] Rebooting in 86400 seconds..