last executing test programs: 1m59.002966731s ago: executing program 3 (id=45): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x13, 0x0, 0x0) 1m58.539262487s ago: executing program 3 (id=48): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000040)={[{@autodefrag}, {@clear_cache}, {@space_cache_v1}, {@max_inline={'max_inline', 0x3d, [0x2d]}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x8000, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0x3, 0x9, 0xc, 0x7}) 1m56.36849443s ago: executing program 3 (id=65): r0 = socket$inet_sctp(0x2, 0x1, 0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x1000000, 0x4, 0x6}, 0x10) 1m55.572475709s ago: executing program 3 (id=73): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x884022, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]}) 1m55.351879281s ago: executing program 3 (id=77): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000001, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m54.44840432s ago: executing program 3 (id=82): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x28}}, 0x2000c050) 1m47.102946623s ago: executing program 2 (id=116): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f00000004c0)=ANY=[@ANYBLOB="726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c636f6465706167653d3836342c636f6465706167653d3836352c726f6469722c696f636861727365743d63703934392c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d312c001ea57eb6973f88cba67dc1a955271abe9f7d72185d9011f33c2503d7b48e1f8ff1587f033e7285d5d72f"], 0x1, 0x280, &(0x7f0000000200)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="54000000190001002dbd7000000000001d010000080005000100fa0017000300"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20004880) 1m46.777844505s ago: executing program 2 (id=118): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="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", 0x15d}], 0x1}, 0x20000044) 1m45.978398164s ago: executing program 2 (id=122): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000940)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='contention_begin\x00', r0}, 0x18) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) 1m45.555395595s ago: executing program 2 (id=124): r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000340)=0x1, 0x4) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) 1m45.239455596s ago: executing program 2 (id=126): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000001, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m44.581035721s ago: executing program 2 (id=129): timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/55, 0x37}], 0x35) 1m39.054448096s ago: executing program 32 (id=82): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x28}}, 0x2000c050) 1m29.036353452s ago: executing program 33 (id=129): timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/55, 0x37}], 0x35) 4.472261079s ago: executing program 1 (id=825): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d34, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.922512103s ago: executing program 0 (id=829): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xfe, 0xa15, &(0x7f00000002c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 3.518579573s ago: executing program 4 (id=831): r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x3000) msgctl$IPC_RMID(r0, 0x0) 3.366846728s ago: executing program 0 (id=833): set_mempolicy(0x3, &(0x7f0000000240)=0x1020fff, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.180730497s ago: executing program 4 (id=835): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x16a) fallocate(r0, 0x20, 0x0, 0x8000) 3.100445574s ago: executing program 0 (id=836): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000040)=0x9, 0x4) sendmmsg$inet6(r0, &(0x7f0000002ec0)=[{{&(0x7f0000000180)={0xa, 0x5e23, 0xfc96, @loopback, 0x3}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000002d80)="cc", 0x1}], 0x1}}], 0x1, 0x4010040) 2.871567957s ago: executing program 0 (id=838): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.582498635s ago: executing program 4 (id=840): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x680102, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x82, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.561987757s ago: executing program 1 (id=841): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, 0x0) 2.419144831s ago: executing program 4 (id=842): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0xfffffffffffffe96, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x27dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 2.12656642s ago: executing program 1 (id=843): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000380)={0x0, 0x0, 0x80004, 0x4}) read$msr(r0, &(0x7f0000000040)=""/53, 0x35) 2.12623694s ago: executing program 4 (id=844): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}}], 0x1, 0x10022, 0x0) 1.991583184s ago: executing program 1 (id=845): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x6, 0x0, 0x2, "57d4915b52cdfd4e8ea56ed6c1ca719a"}) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc12, &(0x7f00000002c0)={[{@map_off}, {@check_strict}, {@map_acorn}, {@check_strict}, {@check_relaxed}, {@hide}, {@dmode={'dmode', 0x3d, 0x6}}, {@block={'block', 0x3d, 0x74bfb7b70526c42a}}, {@overriderock}, {@map_acorn}, {@sbsector={'sbsector', 0x3d, 0xfffdffffffffffb1}}, {@uid}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}], 0x2c}, 0x1, 0x9be, &(0x7f0000004180)="$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") 1.917085681s ago: executing program 4 (id=846): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4fc, 0x5d8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffd, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x0, 0x23, 0xa0, {0xa0, 0xc, "82a0b506d18388d96a8860aad541520a4843319eabc3da3490ea5a227cf7ec2cea9a503e5d05b0775fd90119fd6c1a82a53552ac1d979939df30db2e596c69486dd650ef60ec5f4c8fc6dce9541d5fff27832e7ab4f8f940758f968e0adf2e647631969f52696b2633b31446e1f0f933bb5c7ad293068ccd90733cd032b878b9c017c67f7fe76826b4e7be5031d6961dd1809a28eba8d68c148302e435ae"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.672826705s ago: executing program 1 (id=848): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'geneve0\x00', 0x2a34}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) 1.308666081s ago: executing program 1 (id=851): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x500) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f00000014c0)}) 985.021893ms ago: executing program 0 (id=853): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1aca438, &(0x7f00000008c0)=ANY=[], 0x9, 0x0, &(0x7f0000000000)) 898.413271ms ago: executing program 5 (id=854): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x8, 0xe, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) 845.001036ms ago: executing program 5 (id=855): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000380)={0x18, 0x1, 0x0, 0x0, r1, 0x1}) 725.665188ms ago: executing program 5 (id=856): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) close(0x3) 526.554168ms ago: executing program 5 (id=857): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff, 0x2}, 0xe) 372.875513ms ago: executing program 5 (id=858): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250c000000180001801400020076657468315f746f5f62617461647600200003800c000180"], 0x4c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) 143.734016ms ago: executing program 5 (id=859): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r0) 0s ago: executing program 0 (id=860): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) kernel console output (not intermixed with test programs): d valid F2FS filesystem in 1th superblock [ 120.585582][ T6314] F2FS-fs (loop0): invalid crc value [ 120.666859][ T6314] F2FS-fs (loop0): Found nat_bits in checkpoint [ 120.903446][ T6314] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 120.927533][ T6314] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 121.123472][ T6334] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 121.216909][ T6299] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.240365][ T6299] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.269701][ T6299] bridge_slave_0: entered allmulticast mode [ 121.282159][ T6299] bridge_slave_0: entered promiscuous mode [ 121.385468][ T6299] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.400628][ T6299] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.422419][ T6299] bridge_slave_1: entered allmulticast mode [ 121.438424][ T6299] bridge_slave_1: entered promiscuous mode [ 121.628128][ T6299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.746845][ T6299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.918226][ T6299] team0: Port device team_slave_0 added [ 121.966189][ T6299] team0: Port device team_slave_1 added [ 122.115239][ T5789] EXT4-fs error: 28 callbacks suppressed [ 122.115256][ T5789] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 122.143540][ T5789] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /47/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 122.303182][ T6348] loop1: detected capacity change from 0 to 4096 [ 122.356887][ T6348] __ntfs_error: 6 callbacks suppressed [ 122.356905][ T6348] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 122.382480][ T6299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.389520][ T6299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.430650][ T5789] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 122.450767][ T6348] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 122.465274][ T6299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.478248][ T6348] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 122.493854][ T5789] EXT4-fs warning: 9 callbacks suppressed [ 122.493867][ T5789] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 122.524794][ T6299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.532205][ T6348] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 122.547247][ T5789] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /47/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 122.568376][ T6299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.596506][ T6348] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 122.609438][ T6299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.621983][ T5802] Bluetooth: hci4: command tx timeout [ 122.629191][ T6348] ntfs: volume version 3.1. [ 122.642770][ T6348] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 122.673293][ T6348] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 122.690791][ T6348] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 122.731627][ T6348] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 122.761592][ T6348] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 122.841474][ T5789] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 122.858632][ T6348] ptrace attach of "./syz-executor exec"[5790] was attempted by "Þ¤=éJ:Gþõ!EI\x09R˜”&EHQR˜”!¥H\x09Rè¶³™BÉÎlþÜϔՄpAýÃ\x0dõ7æ®ù6Eþó„j„)E\x0bwËÿºõrùh“„éŽV\x09ÓÄåi}ý?q½»MÍí¥¾þÿûó?wÒvh\x22“”×ÿ\x09_‰‹î;áÓEβøèzCH{2\x0c$ý£ýÒ~àÀþER>Ÿ»Ãó‹þöü¢¿w^²š.¨¸¡þá&Ý!ÿéHþ›)ÞÿFuB\x229v»»åžö\x09¹|¹OÂtÈà„iâò´æâzw›F_ÞO’:ÿ‹Þa;ì]·“ØïÄiÊíäÎ~·í‹<þ;Ï3jGTNv?Oâ\x5cåÛðmýN˜Ê$+S%ÒÞŸ£”£Âõ7ù_ÿ³„wxÇènùmdB^V\x1b›|š¸üNùÿÛëå\x0ci–\x22—×»Û´[ŠöÛ—’r¹ éHú’^¤S¤g>Ç%m‡&R½ð¿›!¿›ëxÿ/ÜPÿpCýÃ\x0dõ\x07 €аq®IHŒ™ðØ%„Є˜bäQ:r‹ÊB(:ò€‹!„ÄÄÏ+é⛩–7áùTÂr;þÅMxîíˈKÞ œ¤ç)IÏ£N&[FÒ‘ÕÄN¶ý¬¿miªå ð‡Ý~­žüº þ?ªÓ zËÜDJµ<7!d\x0bOÈY#áq:r”ºÓúlôÿn•šDæ¸èÿqÍ\x0a÷™tó(u·)‰Þo@ä„\x09}(2±¤\x0aH’þ¤ú’ÄMR$á~‘t#iÜN\x0a·o§*iO:‘j¤DD–\x0aѯó¤iô§ö§rŠí‘ít'IoÒžô#Bt;íH½´µm0&yû\x5c¤ý¾¤/Hº“^$á¾\x09åö?ùÇÉLì\x0d2„\x0 [ 122.884664][ T5789] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 123.001720][ T5789] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /47/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 123.103994][ T5789] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 123.162598][ T5789] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 123.180405][ T6299] hsr_slave_0: entered promiscuous mode [ 123.212623][ T5789] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /47/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 123.254562][ T6299] hsr_slave_1: entered promiscuous mode [ 123.272520][ T6299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.298275][ T6299] Cannot create hsr debugfs directory [ 123.399357][ T5789] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 123.433956][ T5789] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 123.462437][ T5789] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /47/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 123.512395][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 123.633193][ T1081] hsr_slave_0: left promiscuous mode [ 123.663560][ T1081] hsr_slave_1: left promiscuous mode [ 123.672048][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.679804][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.704677][ T5789] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 123.718887][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.732485][ T8] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 123.742291][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.751435][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.773357][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.793167][ T1081] bridge_slave_1: left allmulticast mode [ 123.793882][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.798953][ T1081] bridge_slave_1: left promiscuous mode [ 123.824380][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.834480][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.840084][ T1081] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.865005][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.896134][ T1081] bridge_slave_0: left allmulticast mode [ 123.903471][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.922408][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.928644][ T1081] bridge_slave_0: left promiscuous mode [ 123.934995][ T5789] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 123.950971][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.974888][ T1081] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.995624][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.023095][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.072139][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 124.103192][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.132488][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.161984][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 124.172859][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.192121][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.205265][ T1081] veth1_macvtap: left promiscuous mode [ 124.211753][ T1081] veth0_macvtap: left promiscuous mode [ 124.222136][ T1081] veth1_vlan: left promiscuous mode [ 124.227738][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 124.235408][ T1081] veth0_vlan: left promiscuous mode [ 124.260491][ T5789] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 124.262827][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.322356][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.357460][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 124.371416][ T6378] loop0: detected capacity change from 0 to 512 [ 124.403707][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.413524][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.443767][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 124.454974][ T6378] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 124.475140][ T8] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 124.512905][ T8] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 124.521509][ T8] usb 2-1: Product: syz [ 124.531579][ T6378] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 124.532577][ T5789] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 124.554319][ T6378] EXT4-fs (loop0): orphan cleanup on readonly fs [ 124.560741][ T6378] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.165: bad orphan inode 267 [ 124.573862][ T6378] EXT4-fs (loop0): Remounting filesystem read-only [ 124.585252][ T8] usb 2-1: Manufacturer: syz [ 124.589938][ T8] usb 2-1: SerialNumber: syz [ 124.610972][ T6378] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 124.653588][ T8] usb 2-1: config 0 descriptor?? [ 124.692031][ T5802] Bluetooth: hci4: command tx timeout [ 124.739206][ T5789] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 124.773087][ T8] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 124.864239][ T6378] System zones: 1-12 [ 124.868424][ T6378] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000007. [ 124.965999][ T5789] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 125.046456][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 125.144979][ T23] usb 2-1: USB disconnect, device number 2 [ 125.172993][ T23] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 126.117340][ T1081] team0 (unregistering): Port device team_slave_1 removed [ 126.242452][ T1081] team0 (unregistering): Port device team_slave_0 removed [ 126.367015][ T1081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.494303][ T1081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.772382][ T5802] Bluetooth: hci4: command tx timeout [ 127.192257][ T5789] EXT4-fs error: 44 callbacks suppressed [ 127.192274][ T5789] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 127.221043][ T5789] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /47/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 127.321684][ T5789] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 127.346727][ T5789] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /47/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 127.400803][ T1081] bond0 (unregistering): Released all slaves [ 127.471305][ T5789] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 127.502406][ T5789] EXT4-fs warning: 18 callbacks suppressed [ 127.502423][ T5789] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 127.867341][ T6409] netlink: 28 bytes leftover after parsing attributes in process `syz.0.177'. [ 127.914094][ T6406] netlink: 16 bytes leftover after parsing attributes in process `syz.1.178'. [ 128.462671][ T6299] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 128.531188][ T786] IPVS: starting estimator thread 0... [ 128.568560][ T6299] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 128.642276][ T6424] IPVS: using max 21 ests per chain, 50400 per kthread [ 128.656806][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 128.682458][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 128.691215][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 128.714443][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 128.723898][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 128.731491][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 128.871156][ T6299] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 128.887949][ T6299] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 128.955504][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.415304][ T6447] loop1: detected capacity change from 0 to 128 [ 129.448773][ T1081] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.473828][ T6447] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 129.506380][ T6447] hpfs: filesystem error: improperly stopped [ 129.549453][ T6447] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 129.590066][ T6447] hpfs: You really don't want any checks? You are crazy... [ 129.615457][ T6447] hpfs: hpfs_map_sector(): read error [ 129.620925][ T6447] hpfs: code page support is disabled [ 129.633894][ T1081] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.647108][ T6447] hpfs: hpfs_map_4sectors(): unaligned read [ 129.658411][ T6447] hpfs: hpfs_map_4sectors(): unaligned read [ 129.665036][ T6447] hpfs: filesystem error: unable to find root dir [ 129.678889][ T6299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.748638][ T6431] loop0: detected capacity change from 0 to 32768 [ 129.775627][ T1081] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.831408][ T6431] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 129.957738][ T6431] XFS (loop0): Ending clean mount [ 130.031055][ T6431] XFS (loop0): Quotacheck needed: Please wait. [ 130.103523][ T6431] XFS (loop0): Quotacheck: Done. [ 130.158059][ T1081] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.331116][ T6299] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.366228][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.373471][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.450585][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.457875][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.513687][ T5798] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 130.662056][ T6425] chnl_net:caif_netlink_parms(): no params data found [ 130.773326][ T5802] Bluetooth: hci1: command tx timeout [ 131.589296][ T6425] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.608002][ T6425] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.627599][ T6425] bridge_slave_0: entered allmulticast mode [ 131.646019][ T6425] bridge_slave_0: entered promiscuous mode [ 131.676572][ T6425] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.698801][ T6425] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.716676][ T6425] bridge_slave_1: entered allmulticast mode [ 131.725083][ T6425] bridge_slave_1: entered promiscuous mode [ 131.878475][ T6425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.891252][ T6490] loop0: detected capacity change from 0 to 32768 [ 131.979325][ T6425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.993948][ T6490] [ 131.993948][ T6490] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.993948][ T6490] [ 132.095333][ T6490] [ 132.095333][ T6490] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.095333][ T6490] [ 132.111575][ T6490] [ 132.111575][ T6490] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.111575][ T6490] [ 132.180515][ T5798] [ 132.180515][ T5798] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.180515][ T5798] [ 132.200581][ T6425] team0: Port device team_slave_0 added [ 132.220169][ T5798] [ 132.220169][ T5798] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.220169][ T5798] [ 132.306785][ T6425] team0: Port device team_slave_1 added [ 132.327611][ T6299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.552606][ T785] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 132.586684][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.601902][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.650149][ T6425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.664935][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.683416][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.732135][ T6425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.764992][ T785] usb 2-1: Using ep0 maxpacket: 16 [ 132.774158][ T785] usb 2-1: too many endpoints for config 0 interface 0 altsetting 109: 65, using maximum allowed: 30 [ 132.790611][ T785] usb 2-1: config 0 interface 0 altsetting 109 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.810895][ T785] usb 2-1: config 0 interface 0 altsetting 109 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 132.824744][ T785] usb 2-1: config 0 interface 0 has no altsetting 0 [ 132.845620][ T785] usb 2-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 132.855454][ T5802] Bluetooth: hci1: command tx timeout [ 132.862302][ T785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.903476][ T785] usb 2-1: config 0 descriptor?? [ 133.081682][ T6523] loop0: detected capacity change from 0 to 512 [ 133.115636][ T6523] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 133.135403][ T6523] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 133.156401][ T6425] hsr_slave_0: entered promiscuous mode [ 133.170408][ T6425] hsr_slave_1: entered promiscuous mode [ 133.172958][ T6523] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 133.186246][ T6425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.221061][ T6425] Cannot create hsr debugfs directory [ 133.229910][ T6523] System zones: 1-12 [ 133.259080][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.266582][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.291570][ T6523] EXT4-fs (loop0): 1 truncate cleaned up [ 133.337595][ T785] waltop 0003:172F:0500.0003: unknown main item tag 0x0 [ 133.357285][ T6523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.391708][ T785] waltop 0003:172F:0500.0003: unknown main item tag 0x0 [ 133.414573][ T785] waltop 0003:172F:0500.0003: unknown main item tag 0x0 [ 133.421662][ T785] waltop 0003:172F:0500.0003: unknown main item tag 0x0 [ 133.445834][ T785] waltop 0003:172F:0500.0003: unknown main item tag 0x0 [ 133.507350][ T785] waltop 0003:172F:0500.0003: hidraw0: USB HID v0.05 Device [HID 172f:0500] on usb-dummy_hcd.1-1/input0 [ 133.526288][ T6523] EXT4-fs warning (device loop0): ext4_group_extend:1868: can't shrink FS - resize aborted [ 133.578418][ T785] usb 2-1: USB disconnect, device number 3 [ 133.684771][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.737418][ T6533] fido_id[6533]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 133.832528][ T1081] hsr_slave_0: left promiscuous mode [ 133.858003][ T1081] hsr_slave_1: left promiscuous mode [ 133.861611][ T6537] capability: warning: `syz.0.201' uses deprecated v2 capabilities in a way that may be insecure [ 133.891949][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.899613][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.912721][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.920447][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.929381][ T1081] bridge_slave_1: left allmulticast mode [ 133.937737][ T1081] bridge_slave_1: left promiscuous mode [ 133.947265][ T1081] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.961279][ T1081] bridge_slave_0: left allmulticast mode [ 133.984933][ T1081] bridge_slave_0: left promiscuous mode [ 133.990788][ T1081] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.028409][ T1081] veth1_macvtap: left promiscuous mode [ 134.034289][ T1081] veth0_macvtap: left promiscuous mode [ 134.040126][ T1081] veth1_vlan: left promiscuous mode [ 134.050069][ T1081] veth0_vlan: left promiscuous mode [ 134.269455][ T6542] capability: warning: `syz.1.203' uses 32-bit capabilities (legacy support in use) [ 134.708153][ T6540] loop0: detected capacity change from 0 to 32768 [ 134.747780][ T6540] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 134.883810][ T6540] XFS (loop0): Ending clean mount [ 134.932048][ T5802] Bluetooth: hci1: command tx timeout [ 134.959073][ T6546] loop1: detected capacity change from 0 to 32768 [ 135.032030][ T6546] [ 135.032030][ T6546] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.032030][ T6546] [ 135.117119][ T6546] [ 135.117119][ T6546] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.117119][ T6546] [ 135.143355][ T6546] [ 135.143355][ T6546] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.143355][ T6546] [ 135.215043][ T5790] [ 135.215043][ T5790] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.215043][ T5790] [ 135.256759][ T5790] [ 135.256759][ T5790] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.256759][ T5790] [ 135.259913][ T5798] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 135.534912][ T1081] team0 (unregistering): Port device team_slave_1 removed [ 135.710042][ T1081] team0 (unregistering): Port device team_slave_0 removed [ 135.825956][ T1081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.894043][ T1081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.328296][ T6568] use of bytesused == 0 is deprecated and will be removed in the future, [ 136.337904][ T6568] use the actual size instead. [ 136.789271][ T1081] bond0 (unregistering): Released all slaves [ 137.012445][ T5802] Bluetooth: hci1: command tx timeout [ 137.048293][ T6581] ptrace attach of "./syz-executor exec"[5798] was attempted by ""[6581] [ 137.148700][ T6299] veth0_vlan: entered promiscuous mode [ 137.230051][ T6299] veth1_vlan: entered promiscuous mode [ 137.374874][ T6585] TCP: TCP_TX_DELAY enabled [ 137.443813][ T6299] veth0_macvtap: entered promiscuous mode [ 137.477180][ T6299] veth1_macvtap: entered promiscuous mode [ 137.600819][ T6425] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 137.694257][ T6425] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 137.734789][ T6425] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 137.762132][ T6596] loop1: detected capacity change from 0 to 256 [ 137.782158][ T6425] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 137.825575][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.852060][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.873481][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.907975][ T6596] FAT-fs (loop1): Directory bread(block 64) failed [ 137.914911][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.941323][ T6596] FAT-fs (loop1): Directory bread(block 65) failed [ 137.957700][ T6299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.975476][ T6596] FAT-fs (loop1): Directory bread(block 66) failed [ 137.989805][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.000904][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.012452][ T6596] FAT-fs (loop1): Directory bread(block 67) failed [ 138.019317][ T6596] FAT-fs (loop1): Directory bread(block 68) failed [ 138.021100][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.041917][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.053697][ T6596] FAT-fs (loop1): Directory bread(block 69) failed [ 138.073226][ T6596] FAT-fs (loop1): Directory bread(block 70) failed [ 138.073932][ T6299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.080163][ T6596] FAT-fs (loop1): Directory bread(block 71) failed [ 138.119375][ T6596] FAT-fs (loop1): Directory bread(block 72) failed [ 138.149235][ T6596] FAT-fs (loop1): Directory bread(block 73) failed [ 138.149971][ T6299] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.211278][ T6299] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.229869][ T6299] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.242036][ T6299] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.600074][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.663240][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.715233][ T6425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.877957][ T6425] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.914007][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.933603][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.940941][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.955733][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.973218][ T6629] netlink: 20 bytes leftover after parsing attributes in process `syz.1.229'. [ 139.005504][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.012762][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.222892][ T6425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.309050][ T6638] loop4: detected capacity change from 0 to 16 [ 139.382324][ T6638] erofs: (device loop4): mounted with root inode @ nid 36. [ 139.901373][ T6425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.637068][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 140.637085][ T28] audit: type=1326 audit(1760696168.813:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6678efc9 code=0x7ffc0000 [ 140.685143][ T6687] loop0: detected capacity change from 0 to 256 [ 140.696467][ T6687] exfat: Deprecated parameter 'namecase' [ 140.709723][ T28] audit: type=1326 audit(1760696168.853:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6678efc9 code=0x7ffc0000 [ 140.753696][ T6687] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 140.796846][ T28] audit: type=1326 audit(1760696168.863:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdb6678efc9 code=0x7ffc0000 [ 140.878882][ T28] audit: type=1326 audit(1760696168.863:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdb6678f003 code=0x7ffc0000 [ 140.962545][ T28] audit: type=1326 audit(1760696168.863:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdb6678da7f code=0x7ffc0000 [ 141.027484][ T6425] veth0_vlan: entered promiscuous mode [ 141.035145][ T28] audit: type=1326 audit(1760696168.873:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fdb6678f057 code=0x7ffc0000 [ 141.118320][ T6425] veth1_vlan: entered promiscuous mode [ 141.136115][ T28] audit: type=1326 audit(1760696168.873:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb6678d810 code=0x7ffc0000 [ 141.235589][ T28] audit: type=1326 audit(1760696168.873:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb6678ebcb code=0x7ffc0000 [ 141.255975][ T6425] veth0_macvtap: entered promiscuous mode [ 141.306506][ T6425] veth1_macvtap: entered promiscuous mode [ 141.362113][ T28] audit: type=1326 audit(1760696168.883:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdb6678dc2a code=0x7ffc0000 [ 141.404845][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.424075][ T6696] loop0: detected capacity change from 0 to 4096 [ 141.450071][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.451950][ T28] audit: type=1326 audit(1760696168.883:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdb6678dc2a code=0x7ffc0000 [ 141.494095][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.539329][ T6696] ntfs: volume version 3.1. [ 141.550625][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.590707][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.640300][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.660460][ T6425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.687144][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.707797][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.739753][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.756047][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.766588][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.795488][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.827608][ T6425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.903228][ T6425] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.930839][ T6425] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.959855][ T6425] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.983526][ T6425] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.308427][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.351313][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.435323][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.456725][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.520471][ T6719] loop4: detected capacity change from 0 to 4096 [ 142.691157][ T6719] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 142.729028][ T6726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.259'. [ 143.498833][ T6716] loop1: detected capacity change from 0 to 32768 [ 143.942001][ T23] IPVS: starting estimator thread 0... [ 144.032282][ T6755] IPVS: using max 19 ests per chain, 45600 per kthread [ 144.435084][ T6743] loop4: detected capacity change from 0 to 32768 [ 144.492148][ T6743] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.263 (6743) [ 144.547530][ T6743] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 144.570261][ T6743] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 144.588921][ T6743] BTRFS info (device loop4): enabling auto defrag [ 144.602260][ T6743] BTRFS info (device loop4): use no compression [ 144.633105][ T6743] BTRFS info (device loop4): force clearing of disk cache [ 144.658225][ T6743] BTRFS info (device loop4): max_inline at 4096 [ 144.686997][ T6743] BTRFS info (device loop4): disabling free space tree [ 144.914710][ T6743] BTRFS info (device loop4): enabling ssd optimizations [ 144.924726][ T6743] BTRFS info (device loop4): auto enabling async discard [ 144.986390][ T6743] BTRFS info (device loop4): rebuilding free space tree [ 145.075134][ T6743] BTRFS info (device loop4): disabling free space tree [ 145.114922][ T6743] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 145.186612][ T6743] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 145.226032][ T6745] loop0: detected capacity change from 0 to 32768 [ 145.291121][ T6745] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 145.302350][ T6745] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 145.500103][ T6745] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 145.524374][ T6760] loop5: detected capacity change from 0 to 32768 [ 145.566881][ T5781] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 145.600995][ T5781] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 145.620638][ T6760] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 145.703607][ T5781] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 102ms [ 145.719458][ T6760] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 145.770306][ T5781] gfs2: fsid=syz:syz.0: jid=0: Done [ 145.786725][ T6745] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 145.915746][ T6299] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 146.095968][ T5982] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 13 /dev/loop4 scanned by udevd (5982) [ 146.164618][ T6760] XFS (loop5): Ending clean mount [ 146.223175][ T6760] XFS (loop5): Quotacheck needed: Please wait. [ 146.390444][ T6745] gfs2: fsid=syz:syz.0: found 1 quota changes [ 146.398326][ T6760] XFS (loop5): Quotacheck: Done. [ 146.657737][ T5798] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 146.657737][ T5798] inode = 11 2339 [ 146.657737][ T5798] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 472 [ 146.702439][ T5798] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 146.711786][ T5798] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5798 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 146.776423][ T6425] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 146.794390][ T5798] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 146.821919][ T5798] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 146.892969][ T5798] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 146.933783][ T5798] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 146.954304][ T5798] gfs2: fsid=syz:syz.0: File system withdrawn [ 146.960472][ T5798] CPU: 1 PID: 5798 Comm: syz-executor Not tainted syzkaller #0 [ 146.968064][ T5798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 146.978330][ T5798] Call Trace: [ 146.981741][ T5798] [ 146.984737][ T5798] dump_stack_lvl+0x16c/0x230 [ 146.989643][ T5798] ? kobject_uevent_env+0x363/0x8c0 [ 146.994916][ T5798] ? show_regs_print_info+0x20/0x20 [ 147.000272][ T5798] ? load_image+0x3b0/0x3b0 [ 147.004840][ T5798] ? kobject_uevent_env+0x363/0x8c0 [ 147.010163][ T5798] gfs2_withdraw+0xe50/0x13b0 [ 147.015020][ T5798] ? gfs2_lm+0x220/0x220 [ 147.019547][ T5798] ? preempt_schedule+0xab/0xc0 [ 147.024469][ T5798] ? gfs2_consist_inode_i+0xf5/0x110 [ 147.029908][ T5798] gfs2_inode_refresh+0xb83/0xff0 [ 147.035179][ T5798] ? gfs2_inode_metasync+0xf0/0xf0 [ 147.040441][ T5798] ? gfs2_glock_nq+0xd4f/0x1420 [ 147.045369][ T5798] gfs2_instantiate+0x162/0x220 [ 147.050576][ T5798] gfs2_glock_wait+0x1d4/0x2a0 [ 147.055924][ T5798] do_sync+0x47d/0xe00 [ 147.060208][ T5798] ? gfs2_quota_sync+0x411/0x5a0 [ 147.065450][ T5798] ? bh_get+0x710/0x710 [ 147.069926][ T5798] ? __lock_acquire+0x7c80/0x7c80 [ 147.075508][ T5798] ? do_raw_spin_lock+0x121/0x2c0 [ 147.083131][ T5798] ? gfs2_quota_sync+0x411/0x5a0 [ 147.090273][ T5798] ? do_raw_spin_unlock+0x121/0x230 [ 147.096068][ T5798] gfs2_quota_sync+0x411/0x5a0 [ 147.101999][ T5798] gfs2_sync_fs+0x4c/0xb0 [ 147.107372][ T5798] sync_filesystem+0xea/0x220 [ 147.112699][ T5798] generic_shutdown_super+0x6f/0x2b0 [ 147.118201][ T5798] kill_block_super+0x44/0x90 [ 147.123776][ T5798] deactivate_locked_super+0x97/0x100 [ 147.129777][ T5798] cleanup_mnt+0x429/0x4c0 [ 147.135332][ T5798] task_work_run+0x1ce/0x250 [ 147.140355][ T5798] ? task_work_cancel+0x240/0x240 [ 147.146564][ T5798] ? exit_to_user_mode_loop+0x3b/0x110 [ 147.153027][ T5798] exit_to_user_mode_loop+0xe6/0x110 [ 147.158734][ T5798] exit_to_user_mode_prepare+0xf6/0x180 [ 147.164808][ T5798] syscall_exit_to_user_mode+0x1a/0x50 [ 147.170523][ T5798] do_syscall_64+0x61/0xb0 [ 147.175054][ T5798] ? clear_bhb_loop+0x40/0x90 [ 147.179951][ T5798] ? clear_bhb_loop+0x40/0x90 [ 147.184859][ T5798] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.190819][ T5798] RIP: 0033:0x7fdb667902f7 [ 147.195374][ T5798] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 147.215357][ T5798] RSP: 002b:00007ffec4b661d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 147.224083][ T5798] RAX: 0000000000000000 RBX: 00007fdb66811d7d RCX: 00007fdb667902f7 [ 147.232468][ T5798] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec4b66290 [ 147.240500][ T5798] RBP: 00007ffec4b66290 R08: 0000000000000000 R09: 0000000000000000 [ 147.248525][ T5798] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffec4b67320 [ 147.256800][ T5798] R13: 00007fdb66811d7d R14: 0000000000022fdc R15: 00007ffec4b67360 [ 147.264864][ T5798] [ 148.245938][ T6857] loop5: detected capacity change from 0 to 64 [ 148.289884][ T6857] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 148.469912][ T6862] loop0: detected capacity change from 0 to 2048 [ 148.500624][ T6862] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 148.560306][ T6865] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.573351][ T6862] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 148.611020][ T6862] Remounting filesystem read-only [ 148.721402][ T6868] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 148.721402][ T6868] program syz.5.294 not setting count and/or reply_len properly [ 148.745495][ T6862] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 148.783153][ T6862] NILFS (loop0): error -5 reading inode: ino=15 [ 148.952059][ T6871] netlink: 16 bytes leftover after parsing attributes in process `syz.4.295'. [ 149.162079][ T6875] comedi comedi0: Minor -2147450880 is invalid! [ 149.262481][ T6881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.299'. [ 149.287982][ T6881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.299'. [ 149.342494][ T6881] netlink: 'syz.4.299': attribute type 19 has an invalid length. [ 150.073245][ T6904] loop4: detected capacity change from 0 to 512 [ 150.110730][ T6904] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 150.134455][ T6907] [U] ¹ÉMÙ­ÕÁQ&’Ù Kœ4 [ 150.149812][ T6904] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 150.159630][ T6904] System zones: 1-12 [ 150.171174][ T6904] EXT4-fs (loop4): orphan cleanup on readonly fs [ 150.180231][ T6904] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.307: attempt to clear invalid blocks 1024 len 1 [ 150.203478][ T6904] EXT4-fs (loop4): Remounting filesystem read-only [ 150.217603][ T6904] EXT4-fs (loop4): 1 truncate cleaned up [ 150.224762][ T6904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 150.348667][ T6299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 150.589188][ T6919] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.312'. [ 150.612481][ T6918] netlink: 16 bytes leftover after parsing attributes in process `syz.4.311'. [ 150.909004][ T6894] loop0: detected capacity change from 0 to 32768 [ 150.933618][ T6894] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 13 [ 151.217330][ T5982] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 13 [ 151.541980][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 151.541996][ T28] audit: type=1326 audit(1760696179.723:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140478efc9 code=0x50000 [ 151.621992][ T28] audit: type=1326 audit(1760696179.723:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140478efc9 code=0x50000 [ 151.678185][ T28] audit: type=1326 audit(1760696179.723:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140478efc9 code=0x50000 [ 151.731487][ T28] audit: type=1326 audit(1760696179.723:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140478efc9 code=0x50000 [ 151.786939][ T28] audit: type=1326 audit(1760696179.723:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140478efc9 code=0x50000 [ 151.882043][ T28] audit: type=1326 audit(1760696179.723:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140478efc9 code=0x50000 [ 151.920240][ T28] audit: type=1326 audit(1760696179.723:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140478efc9 code=0x50000 [ 151.965824][ T28] audit: type=1326 audit(1760696179.723:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140478efc9 code=0x50000 [ 152.038991][ T28] audit: type=1326 audit(1760696179.723:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140478efc9 code=0x50000 [ 152.081935][ T28] audit: type=1326 audit(1760696179.723:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140478efc9 code=0x50000 [ 152.625014][ T6951] loop5: detected capacity change from 0 to 32768 [ 152.687974][ T6951] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 152.711421][ T6951] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 152.964165][ T6425] ocfs2: Unmounting device (7,5) on (node local) [ 153.430886][ T6991] loop5: detected capacity change from 0 to 16 [ 153.448595][ T6991] erofs: (device loop5): mounted with root inode @ nid 36. [ 154.016057][ T7005] loop4: detected capacity change from 0 to 4096 [ 154.457729][ T7017] loop4: detected capacity change from 0 to 1024 [ 154.487293][ T7017] EXT4-fs: Ignoring removed nobh option [ 154.511935][ T7017] EXT4-fs: Ignoring removed bh option [ 154.533410][ T7016] loop1: detected capacity change from 0 to 4096 [ 154.540337][ T7017] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 154.576094][ T7016] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 154.632450][ T7016] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 154.650194][ T7017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.748055][ T7027] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.772637][ T5802] Bluetooth: hci1: command tx timeout [ 154.778687][ T5985] udevd[5985]: incorrect nilfs2 checksum on /dev/loop1 [ 154.966103][ T6299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.172513][ T7016] syz.1.341 (7016) used greatest stack depth: 19792 bytes left [ 155.532074][ T786] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 155.572075][ T5888] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 155.722377][ T786] usb 5-1: Using ep0 maxpacket: 16 [ 155.748887][ T786] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 155.777309][ T786] usb 5-1: config 0 interface 0 has no altsetting 0 [ 155.792238][ T786] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 155.842389][ T5888] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 155.857631][ T786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.865932][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.882120][ T5888] usb 6-1: Product: syz [ 155.886510][ T5888] usb 6-1: Manufacturer: syz [ 155.891141][ T5888] usb 6-1: SerialNumber: syz [ 155.898142][ T786] usb 5-1: config 0 descriptor?? [ 155.958965][ T5888] usb 6-1: config 0 descriptor?? [ 156.336123][ T7049] loop0: detected capacity change from 0 to 32768 [ 156.376119][ T786] cypress 0003:04B4:07B1.0004: unbalanced collection at end of report description [ 156.380997][ T7049] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.349 (7049) [ 156.413148][ T5888] airspy 6-1:0.0: Board ID: 00 [ 156.428146][ T5888] airspy 6-1:0.0: Firmware version: [ 156.442936][ T786] cypress 0003:04B4:07B1.0004: parse failed [ 156.458302][ T7049] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 156.463051][ T786] cypress: probe of 0003:04B4:07B1.0004 failed with error -22 [ 156.491096][ T7049] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 156.501329][ T7049] BTRFS info (device loop0): using free space tree [ 156.615781][ T5888] airspy 6-1:0.0: usb_control_msg() failed -71 request 11 [ 156.671179][ T23] usb 5-1: USB disconnect, device number 2 [ 156.673381][ T5888] airspy 6-1:0.0: Registered as swradio24 [ 156.752397][ T5888] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 156.772762][ T7049] BTRFS info (device loop0): enabling ssd optimizations [ 156.810797][ T7049] BTRFS info (device loop0): auto enabling async discard [ 156.849486][ T5888] usb 6-1: USB disconnect, device number 2 [ 157.006293][ T7089] netlink: 136 bytes leftover after parsing attributes in process `syz.1.355'. [ 157.049857][ T7089] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 157.078411][ T5798] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 157.519326][ T5985] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (5985) [ 158.034208][ T7108] loop4: detected capacity change from 0 to 4096 [ 158.700806][ T7132] loop5: detected capacity change from 0 to 512 [ 158.749402][ T7132] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.887725][ T7132] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 2: comm syz.5.370: invalid block [ 158.940480][ T7132] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.370: invalid indirect mapped block 10 (level 1) [ 158.960024][ T7140] process 'syz.0.372' launched './file0' with NULL argv: empty string added [ 158.971983][ T7132] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.370: invalid indirect mapped block 8 (level 1) [ 159.021666][ T7132] EXT4-fs (loop5): 1 truncate cleaned up [ 159.050846][ T7132] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.083310][ T7142] netlink: 'syz.1.373': attribute type 4 has an invalid length. [ 159.321393][ T6425] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.404044][ T7153] loop0: detected capacity change from 0 to 16 [ 159.453642][ T7153] erofs: (device loop0): mounted with root inode @ nid 36. [ 159.532869][ T7153] syz.0.377: attempt to access beyond end of device [ 159.532869][ T7153] loop0: rw=524288, sector=64, nr_sectors = 960 limit=16 [ 159.560337][ T7153] syz.0.377: attempt to access beyond end of device [ 159.560337][ T7153] loop0: rw=524288, sector=0, nr_sectors = 1024 limit=16 [ 159.603083][ T7153] syz.0.377: attempt to access beyond end of device [ 159.603083][ T7153] loop0: rw=524288, sector=0, nr_sectors = 576 limit=16 [ 159.702709][ T7160] loop1: detected capacity change from 0 to 256 [ 159.762704][ T7160] exfat: Deprecated parameter 'utf8' [ 159.809447][ T7160] exfat: Deprecated parameter 'namecase' [ 159.836469][ T7160] exfat: Deprecated parameter 'utf8' [ 159.891162][ T7164] netlink: 12 bytes leftover after parsing attributes in process `syz.5.381'. [ 159.924612][ T7160] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 160.044810][ T7160] syz.1.380: attempt to access beyond end of device [ 160.044810][ T7160] loop1: rw=0, sector=34359738495, nr_sectors = 1 limit=256 [ 160.757000][ T7191] loop4: detected capacity change from 0 to 128 [ 160.789040][ T7191] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 161.417114][ T7175] loop0: detected capacity change from 0 to 32768 [ 161.480692][ T7211] loop1: detected capacity change from 0 to 128 [ 161.555777][ T7211] ufs: You didn't specify the type of your ufs filesystem [ 161.555777][ T7211] [ 161.555777][ T7211] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 161.555777][ T7211] [ 161.555777][ T7211] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 161.587341][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.629277][ T7175] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 161.649706][ T7211] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 161.653930][ T7215] loop4: detected capacity change from 0 to 2048 [ 161.756106][ T7215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.862563][ T5798] ocfs2: Unmounting device (7,0) on (node local) [ 162.051652][ T7227] loop1: detected capacity change from 0 to 256 [ 162.067460][ T6299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.375533][ T7231] loop4: detected capacity change from 0 to 512 [ 162.412123][ T7231] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 162.507142][ T7231] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.404: invalid indirect mapped block 4294967295 (level 1) [ 162.515072][ T7234] loop1: detected capacity change from 0 to 512 [ 162.595546][ T7234] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 162.631954][ T7231] EXT4-fs (loop4): Remounting filesystem read-only [ 162.640154][ T7231] EXT4-fs (loop4): 2 truncates cleaned up [ 162.655673][ T7231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.685183][ T7234] EXT4-fs (loop1): orphan cleanup on readonly fs [ 162.752975][ T7234] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:512: comm syz.1.405: Block bitmap for bg 0 marked uninitialized [ 162.820295][ T7234] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 162.843381][ T7234] EXT4-fs (loop1): 1 orphan inode deleted [ 162.860933][ T7234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 162.919031][ T6299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.031636][ T7220] loop5: detected capacity change from 0 to 32768 [ 163.072047][ T7220] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 163.106977][ T7234] EXT4-fs: Ignoring sb option on remount [ 163.146775][ T7234] EXT4-fs: Ignoring removed orlov option [ 163.172200][ T7234] EXT4-fs: Ignoring removed nomblk_io_submit option [ 163.188787][ T7234] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 163.222846][ T7234] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 163.281990][ T7234] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 163.324171][ T5982] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 163.381496][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.683248][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'. [ 164.739361][ T7296] loop4: detected capacity change from 0 to 256 [ 164.804891][ T7296] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 164.972011][ T5844] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 165.122908][ T7268] loop5: detected capacity change from 0 to 40427 [ 165.182133][ T5844] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 165.201090][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.210114][ T7268] F2FS-fs (loop5): invalid crc value [ 165.221644][ T5844] usb 2-1: Product: syz [ 165.231062][ T5844] usb 2-1: Manufacturer: syz [ 165.243451][ T7268] F2FS-fs (loop5): Found nat_bits in checkpoint [ 165.251315][ T7306] netlink: 92 bytes leftover after parsing attributes in process `syz.0.427'. [ 165.252919][ T5844] usb 2-1: SerialNumber: syz [ 165.297026][ T5844] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 165.345449][ T5888] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 165.505321][ T7268] F2FS-fs (loop5): Start checkpoint disabled! [ 165.573992][ T7268] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 166.149493][ T8] usb 2-1: USB disconnect, device number 4 [ 166.185639][ T1081] kworker/u4:5: attempt to access beyond end of device [ 166.185639][ T1081] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 166.204771][ T1081] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 166.217707][ T1081] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 166.620188][ T5888] usb 2-1: Service connection timeout for: 256 [ 166.642083][ T5888] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 166.668921][ T5888] ath9k_htc: Failed to initialize the device [ 166.725548][ T8] usb 2-1: ath9k_htc: USB layer deinitialized [ 167.065666][ T7342] overlayfs: missing 'lowerdir' [ 167.221621][ T7326] loop0: detected capacity change from 0 to 32768 [ 167.241252][ T7326] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.432 (7326) [ 167.300080][ T7326] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 167.326006][ T7326] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 167.367676][ T7326] BTRFS info (device loop0): using free space tree [ 167.580831][ T7326] BTRFS info (device loop0): enabling ssd optimizations [ 167.588331][ T7326] BTRFS info (device loop0): auto enabling async discard [ 167.693177][ T7370] loop5: detected capacity change from 0 to 64 [ 167.802383][ T7370] syz.5.442: attempt to access beyond end of device [ 167.802383][ T7370] loop5: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 167.836412][ T5798] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 167.863377][ T7370] Buffer I/O error on dev loop5, logical block 134217734, lost async page write [ 167.883284][ T5888] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 167.983971][ T7336] loop4: detected capacity change from 0 to 32768 [ 168.113523][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 168.138571][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.159964][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.216860][ T5888] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 168.278638][ T5888] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 168.301942][ T7336] overlayfs: upper fs needs to support d_type. [ 168.309744][ T7336] overlayfs: upper fs does not support tmpfile. [ 168.321403][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.373897][ T5888] usb 2-1: config 0 descriptor?? [ 168.414560][ T7336] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 168.474493][ T7336] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 168.474493][ T7336] [ 168.561673][ T7336] ERROR: (device loop4): remounting filesystem as read-only [ 168.609446][ T7336] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null. [ 168.858152][ T5888] microsoft 0003:045E:07DA.0005: unknown main item tag 0x1 [ 168.901733][ T5888] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 168.932795][ T5888] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 168.949448][ T7388] loop0: detected capacity change from 0 to 4096 [ 168.977777][ T5888] microsoft 0003:045E:07DA.0005: no inputs found [ 169.003493][ T5888] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 169.041984][ T7394] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.066733][ T5888] usb 2-1: USB disconnect, device number 5 [ 169.209448][ T7393] fido_id[7393]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 170.005130][ T7420] loop4: detected capacity change from 0 to 128 [ 170.023140][ T7420] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 170.098811][ T7420] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 170.190187][ T7428] loop5: detected capacity change from 0 to 1024 [ 170.244926][ T7428] EXT4-fs: Ignoring removed oldalloc option [ 170.251457][ T7428] EXT4-fs: Ignoring removed bh option [ 170.313503][ T7428] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 170.406921][ T7428] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.432677][ T7433] loop0: detected capacity change from 0 to 2048 [ 170.591641][ T6425] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.598181][ T7433] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.749635][ T7445] loop1: detected capacity change from 0 to 16 [ 170.801680][ T7445] erofs: (device loop1): mounted with root inode @ nid 36. [ 171.325336][ T7460] loop0: detected capacity change from 0 to 4096 [ 171.347550][ T7460] __ntfs_warning: 57 callbacks suppressed [ 171.347567][ T7460] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 171.486103][ T7460] ntfs: volume version 3.1. [ 171.620556][ T7460] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-9. You might want to try to use the mount option nls=utf8. [ 171.648839][ T7472] loop1: detected capacity change from 0 to 512 [ 171.727004][ T7472] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 171.745867][ T7460] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 171.794468][ T7472] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 171.812723][ T7476] loop4: detected capacity change from 0 to 64 [ 171.830857][ T7472] EXT4-fs (loop1): 1 truncate cleaned up [ 171.861096][ T7476] hfs: unable to locate alternate MDB [ 171.902759][ T7472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.923692][ T7476] hfs: continuing without an alternate MDB [ 172.259436][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.210725][ T7490] loop0: detected capacity change from 0 to 32768 [ 173.224705][ T7490] XFS: ikeep mount option is deprecated. [ 173.317407][ T7490] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 173.650152][ T7490] XFS (loop0): Ending clean mount [ 173.689430][ T7490] XFS (loop0): Quotacheck needed: Please wait. [ 173.796459][ T7490] XFS (loop0): Quotacheck: Done. [ 173.811239][ T7516] loop1: detected capacity change from 0 to 32768 [ 173.851606][ T7490] XFS (loop0): syz.0.477 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 173.888636][ T7516] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 173.955854][ T5798] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 173.977074][ T7516] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 174.304744][ T7550] loop4: detected capacity change from 0 to 512 [ 174.343451][ T7550] EXT4-fs: Ignoring removed nobh option [ 174.390389][ T5790] ocfs2: Unmounting device (7,1) on (node local) [ 174.405710][ T7550] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 174.442561][ T7550] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 174.474887][ T7550] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #13: comm syz.4.500: casefold flag without casefold feature [ 174.564023][ T7550] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.500: couldn't read orphan inode 13 (err -117) [ 174.601168][ T7550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.835717][ T6299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.949058][ T7569] loop5: detected capacity change from 0 to 256 [ 174.956739][ T7569] exfat: Deprecated parameter 'utf8' [ 174.963654][ T7569] exfat: Deprecated parameter 'utf8' [ 175.006386][ T7569] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 175.256695][ T7573] loop0: detected capacity change from 0 to 128 [ 175.285191][ T7573] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.322741][ T7573] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.436939][ T7579] loop5: detected capacity change from 0 to 128 [ 175.530757][ T7579] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 175.568860][ T5798] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 175.602001][ T7579] hpfs: filesystem error: improperly stopped [ 175.608174][ T7579] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 175.682094][ T7579] hpfs: You really don't want any checks? You are crazy... [ 175.693135][ T7579] hpfs: hpfs_map_sector(): read error [ 175.721976][ T7579] hpfs: code page support is disabled [ 175.742645][ T7579] hpfs: hpfs_map_4sectors(): unaligned read [ 175.748764][ T7579] hpfs: hpfs_map_4sectors(): unaligned read [ 175.810916][ T7579] hpfs: filesystem error: unable to find root dir [ 175.829000][ T7565] loop1: detected capacity change from 0 to 32768 [ 175.972504][ T7565] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 176.162709][ T7565] XFS (loop1): Ending clean mount [ 176.413960][ T5790] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 176.481688][ T7606] loop4: detected capacity change from 0 to 4096 [ 176.693134][ T5159] udevd[5159]: worker [5985] terminated by signal 33 (Unknown signal 33) [ 176.701726][ T5159] udevd[5159]: worker [5985] failed while handling '/devices/virtual/block/loop4' [ 176.760355][ T7606] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 176.886951][ T7606] overlayfs: upper fs does not support tmpfile. [ 176.935480][ T7606] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 176.960880][ T7606] overlayfs: failed to set uuid (/file0, err=-22); falling back to uuid=null. [ 176.980808][ T7606] overlayfs: failed to verify origin (/, ino=5, err=-22) [ 177.001480][ T7606] overlayfs: failed to verify upper root origin [ 177.176479][ T1081] ntfs3: loop4: ino=9, ntfs3_write_inode failed, -22. [ 177.201167][ T6299] ntfs3: loop4: ino=9, ntfs_sync_fs failed, -22. [ 177.396692][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.522'. [ 177.437852][ T7631] erspan0: entered promiscuous mode [ 177.461600][ T7631] erspan0: left promiscuous mode [ 177.482190][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 177.691938][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 177.708879][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.736653][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.772058][ T23] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 177.802232][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.833856][ T23] usb 2-1: config 0 descriptor?? [ 177.873252][ T7643] syz.0.526[7643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.873515][ T7643] syz.0.526[7643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.991409][ T7617] loop5: detected capacity change from 0 to 32768 [ 178.034071][ T7646] loop4: detected capacity change from 0 to 16 [ 178.053200][ T7617] XFS: noikeep mount option is deprecated. [ 178.086769][ T7646] erofs: (device loop4): mounted with root inode @ nid 36. [ 178.108858][ T7617] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 178.279782][ T23] aquacomputer_d5next 0003:0C70:F00A.0006: unknown main item tag 0x7 [ 178.356808][ T23] aquacomputer_d5next 0003:0C70:F00A.0006: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.1-1/input0 [ 178.429088][ T7660] loop0: detected capacity change from 0 to 128 [ 178.430395][ T7617] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 178.524190][ T23] usb 2-1: USB disconnect, device number 6 [ 178.537485][ T7660] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 178.565415][ T7617] XFS (loop5): Starting recovery (logdev: internal) [ 178.608184][ T7660] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 178.642709][ T7661] fido_id[7661]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 178.659425][ T7617] XFS (loop5): Ending recovery (logdev: internal) [ 178.880934][ T6425] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 179.527993][ T7684] loop4: detected capacity change from 0 to 64 [ 179.622380][ T7684] overlayfs: failed to resolve './file2:/': -2 [ 179.636827][ T7690] loop5: detected capacity change from 0 to 256 [ 179.697866][ T7690] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 179.729571][ T7690] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 179.810428][ T7690] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 179.936481][ T7696] loop4: detected capacity change from 0 to 1024 [ 179.965518][ T7698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.543'. [ 179.985201][ T7696] EXT4-fs: inline encryption not supported [ 179.991274][ T7696] EXT4-fs: Ignoring removed bh option [ 180.002236][ T7698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.543'. [ 180.045337][ T7698] netlink: 20 bytes leftover after parsing attributes in process `syz.1.543'. [ 180.066399][ T7696] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 180.102108][ T7701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.543'. [ 180.153766][ T7701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.543'. [ 180.190589][ T7696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.276143][ T7701] netlink: 20 bytes leftover after parsing attributes in process `syz.1.543'. [ 180.490277][ T6299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.746530][ T7692] loop0: detected capacity change from 0 to 32768 [ 180.796115][ T7692] XFS: noikeep mount option is deprecated. [ 180.881239][ T7692] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 181.093540][ T7735] vlan2: entered allmulticast mode [ 181.109965][ T7735] bond0: entered allmulticast mode [ 181.121986][ T7735] bond_slave_0: entered allmulticast mode [ 181.129136][ T7735] bond_slave_1: entered allmulticast mode [ 181.242099][ T785] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 181.257887][ T7692] XFS (loop0): Ending clean mount [ 181.306121][ T7692] XFS (loop0): Quotacheck needed: Please wait. [ 181.439963][ T7692] XFS (loop0): Quotacheck: Done. [ 181.452575][ T785] usb 5-1: Using ep0 maxpacket: 32 [ 181.471420][ T785] usb 5-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 181.512732][ T785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.556157][ T785] usb 5-1: config 0 descriptor?? [ 181.689531][ T5798] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 182.039918][ T785] thrustmaster 0003:044F:B65A.0007: hidraw0: USB HID v0.03 Device [HID 044f:b65a] on usb-dummy_hcd.4-1/input0 [ 182.102200][ T785] thrustmaster 0003:044F:B65A.0007: no inputs found [ 182.218642][ T5781] usb 5-1: USB disconnect, device number 3 [ 182.344402][ T7760] fido_id[7760]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 182.592048][ T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 182.803063][ T8] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 182.833134][ T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.852150][ T8] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.895007][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 182.914023][ T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.923880][ T8] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.973200][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 183.006883][ T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.032097][ T8] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.072038][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 183.087294][ T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.127490][ T8] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.165965][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 183.184029][ T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.223053][ T8] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.263298][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 183.286858][ T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.301693][ T8] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.352346][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 183.389585][ T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.415034][ T8] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.441968][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 183.472466][ T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.481446][ T8] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.508863][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 183.519957][ T8] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 183.542097][ T8] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 183.550546][ T8] usb 6-1: Product: syz [ 183.562238][ T8] usb 6-1: Manufacturer: syz [ 183.567870][ T8] usb 6-1: SerialNumber: syz [ 183.618981][ T8] usb 6-1: config 0 descriptor?? [ 183.671519][ T8] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 183.958093][ T785] usb 6-1: USB disconnect, device number 3 [ 183.987359][ T7813] loop0: detected capacity change from 0 to 256 [ 183.988391][ T785] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 184.042452][ T7813] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 184.513054][ T7827] loop1: detected capacity change from 0 to 64 [ 184.940677][ T7841] loop5: detected capacity change from 0 to 128 [ 184.971519][ T7841] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 185.016421][ T7841] hpfs: filesystem error: improperly stopped [ 185.028084][ T7844] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 185.035816][ T7844] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 185.042185][ T7841] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 185.082264][ T7841] hpfs: You really don't want any checks? You are crazy... [ 185.112563][ T7841] hpfs: hpfs_map_sector(): read error [ 185.118026][ T7841] hpfs: code page support is disabled [ 185.126321][ T7844] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 185.132978][ T7844] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 185.163695][ T7841] hpfs: hpfs_map_4sectors(): unaligned read [ 185.169827][ T7841] hpfs: hpfs_map_4sectors(): unaligned read [ 185.182601][ T7844] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 185.189242][ T7844] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 185.221976][ T7841] hpfs: filesystem error: unable to find root dir [ 185.240407][ T7844] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 185.247322][ T7844] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 185.287362][ T7844] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 185.294201][ T7844] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 185.368100][ T7854] netlink: 'syz.1.588': attribute type 2 has an invalid length. [ 186.116754][ T7877] Driver unsupported XDP return value 0 on prog (id 34) dev N/A, expect packet loss! [ 186.427781][ T7885] loop1: detected capacity change from 0 to 512 [ 186.488492][ T7885] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 186.520808][ T7856] loop0: detected capacity change from 0 to 32768 [ 186.531407][ T7885] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 186.557316][ T7885] EXT4-fs (loop1): 1 truncate cleaned up [ 186.564497][ T7885] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.611337][ T7892] loop4: detected capacity change from 0 to 16 [ 186.633781][ T7892] erofs: (device loop4): mounted with root inode @ nid 36. [ 186.645059][ T7856] read_mapping_page failed! [ 186.649973][ T7856] ERROR: (device loop0): txCommit: [ 186.649973][ T7856] [ 186.662297][ T7885] EXT4-fs: Ignoring removed orlov option [ 186.682558][ T7885] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 186.700423][ T7892] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 186.725208][ T7885] EXT4-fs: can't change dax mount option while remounting [ 186.734803][ T7856] ERROR: (device loop0): remounting filesystem as read-only [ 186.755281][ T7856] ERROR: (device loop0): diFree: numfree > numinos [ 186.755281][ T7856] [ 186.772921][ T7892] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[172] [ 186.804914][ T7892] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 186.822027][ T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 186.836768][ T7892] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 186.888522][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.054377][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 187.122011][ T8] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 187.130444][ T8] usb 6-1: config 179 has no interface number 0 [ 187.186425][ T8] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 187.221217][ T8] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 187.251606][ T8] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 187.330244][ T8] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 187.361898][ T8] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 187.390080][ T8] usb 6-1: config 179 interface 65 has no altsetting 0 [ 187.409500][ T8] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 187.439299][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.497750][ T7890] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 187.500012][ T7906] loop0: detected capacity change from 0 to 1764 [ 187.598399][ T8] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input6 [ 187.615044][ T7906] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 187.627269][ T7908] loop1: detected capacity change from 0 to 64 [ 187.836134][ T23] usb 6-1: USB disconnect, device number 4 [ 187.836283][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 187.838158][ T23] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 188.713804][ T7938] netlink: 132 bytes leftover after parsing attributes in process `syz.0.615'. [ 188.745250][ T7938] Zero length message leads to an empty skb [ 189.440449][ T7962] loop5: detected capacity change from 0 to 2048 [ 189.461212][ T7962] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 189.526841][ T7962] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.606405][ T28] audit: type=1800 audit(1760696217.793:92): pid=7962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.623" name="file1" dev="loop5" ino=1346 res=0 errno=0 [ 189.609300][ T7962] [syz.5.623/7962] FS: loop5 File: /file1 would truncate fibmap result [ 189.672397][ T5888] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 189.872086][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 189.880035][ T5888] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.895628][ T7941] loop4: detected capacity change from 0 to 40427 [ 189.904842][ T5888] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 189.935783][ T7941] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 189.938601][ T5888] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 189.962088][ T7941] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 189.973197][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.986611][ T5888] usb 2-1: Product: syz [ 189.990854][ T5888] usb 2-1: Manufacturer: syz [ 190.017491][ T5888] usb 2-1: SerialNumber: syz [ 190.026024][ T7941] F2FS-fs (loop4): Found nat_bits in checkpoint [ 190.050404][ T5888] usb 2-1: config 0 descriptor?? [ 190.210382][ T7941] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 190.233863][ T7951] loop0: detected capacity change from 0 to 40427 [ 190.242398][ T7941] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 190.295550][ T7951] F2FS-fs (loop0): invalid crc value [ 190.315531][ T5888] usb 2-1: USB disconnect, device number 7 [ 190.344555][ T7951] F2FS-fs (loop0): Found nat_bits in checkpoint [ 190.440055][ T6299] syz-executor: attempt to access beyond end of device [ 190.440055][ T6299] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 190.474651][ T6299] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 190.590692][ T7951] F2FS-fs (loop0): Start checkpoint disabled! [ 190.662096][ T7951] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 191.030232][ T11] kworker/u4:0: attempt to access beyond end of device [ 191.030232][ T11] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 191.093027][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 191.100432][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 191.162966][ T7993] loop5: detected capacity change from 0 to 1024 [ 191.266525][ T7993] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 191.329227][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.632'. [ 192.222106][ T8] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 192.237087][ T8025] loop1: detected capacity change from 0 to 1024 [ 192.425730][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 192.440224][ T8] usb 6-1: config 0 interface 0 altsetting 42 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.481244][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 192.490212][ T48] hfsplus: b-tree write err: -5, ino 8 [ 192.500906][ T8] usb 6-1: New USB device found, idVendor=056a, idProduct=00d6, bcdDevice= 0.00 [ 192.548696][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.581137][ T8] usb 6-1: config 0 descriptor?? [ 192.667024][ T8037] netlink: 'syz.1.643': attribute type 3 has an invalid length. [ 192.880882][ T8048] loop1: detected capacity change from 0 to 512 [ 192.930689][ T8048] EXT4-fs: Ignoring removed mblk_io_submit option [ 192.993139][ T8048] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 193.022985][ T8048] EXT4-fs (loop1): orphan cleanup on readonly fs [ 193.038166][ T8048] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 193.092407][ T8048] EXT4-fs warning (device loop1): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 193.113866][ T8] wacom 0003:056A:00D6.0008: Unknown device_type for 'HID 056a:00d6'. Assuming pen. [ 193.136778][ T8048] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 193.162116][ T8048] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.645: bg 0: block 40: padding at end of block bitmap is not set [ 193.200764][ T8] wacom 0003:056A:00D6.0008: hidraw0: USB HID v0.07 Device [HID 056a:00d6] on usb-dummy_hcd.5-1/input0 [ 193.242108][ T8048] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 193.248312][ T8] input: Wacom BambooPT 2FG 4x5 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:00D6.0008/input/input7 [ 193.271117][ T8048] EXT4-fs (loop1): 1 truncate cleaned up [ 193.330995][ T8048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 193.424964][ T8048] EXT4-fs error (device loop1): ext4_get_link:104: inode #16: comm syz.1.645: bad symlink. [ 193.473948][ T8] usb 6-1: USB disconnect, device number 5 [ 193.521915][ T8048] EXT4-fs error (device loop1): ext4_get_link:104: inode #16: comm syz.1.645: bad symlink. [ 193.542090][ T8061] fido_id[8061]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:00D6.0008/report_descriptor': No such device [ 193.642630][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.204325][ T8087] netlink: 'syz.1.655': attribute type 3 has an invalid length. [ 194.226690][ T8087] netlink: 'syz.1.655': attribute type 1 has an invalid length. [ 194.242083][ T8087] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.655'. [ 194.471959][ T8] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 194.698938][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.704308][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 194.705769][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.717737][ T8] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 194.726120][ T8] usb 6-1: config 0 has no interface number 0 [ 194.745548][ T8] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 194.779257][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.816376][ T8] usb 6-1: Product: syz [ 194.830998][ T8] usb 6-1: Manufacturer: syz [ 194.841378][ T8] usb 6-1: SerialNumber: syz [ 194.874954][ T8100] loop0: detected capacity change from 0 to 512 [ 194.877204][ T8] usb 6-1: config 0 descriptor?? [ 194.908527][ T8] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 194.927724][ T8100] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.658: casefold flag without casefold feature [ 194.956099][ T8100] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.658: couldn't read orphan inode 15 (err -117) [ 194.979764][ T8100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.104779][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.132759][ T8] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 195.162741][ T8] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 195.534545][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 195.549521][ T5844] usb 6-1: USB disconnect, device number 6 [ 195.579386][ T5844] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 195.615068][ T5844] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 195.648470][ T5844] quatech2 6-1:0.51: device disconnected [ 195.841032][ T8122] loop1: detected capacity change from 0 to 128 [ 195.881768][ T8122] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 195.938634][ T8111] loop0: detected capacity change from 0 to 32768 [ 195.971082][ T8122] ext4 filesystem being mounted at /212/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 195.993433][ T8126] loop4: detected capacity change from 0 to 256 [ 196.136381][ T8111] syz.0.660: attempt to access beyond end of device [ 196.136381][ T8111] loop0: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 196.170664][ T8126] FAT-fs (loop4): Directory bread(block 64) failed [ 196.171327][ T8122] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.1.661: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 196.184602][ T8126] FAT-fs (loop4): Directory bread(block 65) failed [ 196.197861][ T8111] metapage_write_end_io: I/O error [ 196.262834][ T8111] blkno = 8ed2c, nblocks = 1 [ 196.273690][ T8126] FAT-fs (loop4): Directory bread(block 66) failed [ 196.288842][ T8111] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 196.288842][ T8111] [ 196.291914][ T8126] FAT-fs (loop4): Directory bread(block 67) failed [ 196.308750][ T8122] EXT4-fs (loop1): Remounting filesystem read-only [ 196.338295][ T8111] ERROR: (device loop0): remounting filesystem as read-only [ 196.340747][ T28] audit: type=1326 audit(1760696224.523:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.5.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977cf8efc9 code=0x7ffc0000 [ 196.361595][ T8111] UFO tlock:0xffffc900027fa480 [ 196.393077][ T8126] FAT-fs (loop4): Directory bread(block 68) failed [ 196.404200][ T8111] ERROR: (device loop0): dtSearch: DT_GETPAGE: dtree page corrupt [ 196.404200][ T8111] [ 196.416525][ T8126] FAT-fs (loop4): Directory bread(block 69) failed [ 196.437070][ T28] audit: type=1326 audit(1760696224.523:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.5.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977cf8efc9 code=0x7ffc0000 [ 196.438707][ T8126] FAT-fs (loop4): Directory bread(block 70) failed [ 196.466990][ T8111] jfs_lookup: dtSearch returned -5 [ 196.492452][ T8126] FAT-fs (loop4): Directory bread(block 71) failed [ 196.510039][ T5790] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.513300][ T8126] FAT-fs (loop4): Directory bread(block 72) failed [ 196.532887][ T28] audit: type=1326 audit(1760696224.563:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.5.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f977cf8efc9 code=0x7ffc0000 [ 196.589057][ T8126] FAT-fs (loop4): Directory bread(block 73) failed [ 196.605348][ T28] audit: type=1326 audit(1760696224.563:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.5.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977cf8efc9 code=0x7ffc0000 [ 196.652864][ T111] blkno = 8ed2c, nblocks = 4 [ 196.661925][ T111] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 196.661925][ T111] [ 196.686630][ T28] audit: type=1326 audit(1760696224.563:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.5.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977cf8efc9 code=0x7ffc0000 [ 196.722554][ T5798] syz-executor: attempt to access beyond end of device [ 196.722554][ T5798] loop0: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 196.726894][ T28] audit: type=1326 audit(1760696224.563:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.5.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f977cf8efc9 code=0x7ffc0000 [ 196.786293][ T5798] metapage_write_end_io: I/O error [ 196.813166][ T5798] JFS: metapage_get_blocks failed [ 196.818466][ T5798] JFS: metapage_get_blocks failed [ 196.842709][ T5798] JFS: metapage_get_blocks failed [ 196.862622][ T5798] JFS: metapage_get_blocks failed [ 196.868022][ T28] audit: type=1326 audit(1760696224.563:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.5.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f977cf85e67 code=0x7ffc0000 [ 196.946199][ T28] audit: type=1326 audit(1760696224.563:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.5.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f977cf2b099 code=0x7ffc0000 [ 197.000182][ T28] audit: type=1326 audit(1760696224.563:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.5.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977cf8efc9 code=0x7ffc0000 [ 197.087812][ T8139] loop5: detected capacity change from 0 to 4096 [ 197.131158][ T8139] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 197.573992][ T8154] netlink: 'syz.1.672': attribute type 32 has an invalid length. [ 197.599681][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.672'. [ 197.650109][ T8154] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 197.755367][ T8161] netlink: 128 bytes leftover after parsing attributes in process `syz.0.666'. [ 197.771805][ T8161] netlink: 'syz.0.666': attribute type 5 has an invalid length. [ 198.130279][ T8165] loop0: detected capacity change from 0 to 4096 [ 198.137133][ T28] audit: type=1326 audit(1760696226.313:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8172 comm="syz.4.677" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c8bd8efc9 code=0x0 [ 198.240810][ T8165] ntfs: volume version 3.1. [ 198.730353][ T8192] loop0: detected capacity change from 0 to 1024 [ 199.020424][ T8199] loop1: detected capacity change from 0 to 512 [ 199.104952][ T8199] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.686: invalid indirect mapped block 4294967295 (level 1) [ 199.206310][ T11] hfsplus: b-tree write err: -5, ino 4 [ 199.221927][ T8199] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.686: invalid indirect mapped block 4294967295 (level 1) [ 199.273866][ T8199] EXT4-fs (loop1): 2 truncates cleaned up [ 199.307511][ T8199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.489982][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.833006][ T8225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.697'. [ 200.348520][ T8246] netlink: 16 bytes leftover after parsing attributes in process `syz.5.707'. [ 200.391115][ T8248] loop0: detected capacity change from 0 to 256 [ 200.441288][ T8248] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 200.707847][ T8256] sctp: [Deprecated]: syz.5.712 (pid 8256) Use of int in max_burst socket option deprecated. [ 200.707847][ T8256] Use struct sctp_assoc_value instead [ 200.727059][ T8258] Bluetooth: MGMT ver 1.22 [ 201.172158][ T5796] Bluetooth: hci1: command tx timeout [ 202.136901][ T8311] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 202.162019][ T8311] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 202.168900][ T8311] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 202.177880][ T8311] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 202.189851][ T8311] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 202.197112][ T8311] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 202.208123][ T8311] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 202.217317][ T8311] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 202.228582][ T8311] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 202.235952][ T8311] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 202.380470][ T5864] IPVS: starting estimator thread 0... [ 202.391355][ T8316] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 202.495233][ T8319] IPVS: using max 17 ests per chain, 40800 per kthread [ 202.579199][ T8326] loop4: detected capacity change from 0 to 1024 [ 202.663990][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 202.664007][ T28] audit: type=1800 audit(1760696230.853:103): pid=8326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.743" name="bus" dev="loop4" ino=26 res=0 errno=0 [ 202.722925][ T11] hfsplus: b-tree write err: -5, ino 4 [ 202.732055][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 202.927632][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 202.942670][ T8] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 202.965860][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 202.976837][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 202.987167][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 202.998778][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 203.023239][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 203.025222][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.058358][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 203.080295][ T8] usb 2-1: SerialNumber: syz [ 203.094885][ T8322] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 203.113947][ T8] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 203.134151][ T8] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 203.212016][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 203.221546][ T23] usb 1-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 203.241935][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.271489][ T23] usb 1-1: config 0 descriptor?? [ 203.336089][ T8] usb 2-1: USB disconnect, device number 8 [ 203.690884][ T8353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.756'. [ 203.708852][ T23] viewsonic 0003:2133:0018.0009: item fetching failed at offset 0/4 [ 203.731129][ T23] viewsonic: probe of 0003:2133:0018.0009 failed with error -22 [ 203.913839][ T8] usb 1-1: USB disconnect, device number 5 [ 204.142004][ T5844] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 204.332322][ T5844] usb 5-1: Using ep0 maxpacket: 16 [ 204.349889][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 204.367022][ T5844] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.387827][ T5844] usb 5-1: New USB device found, idVendor=05ac, idProduct=021b, bcdDevice= 0.00 [ 204.400649][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.446600][ T5844] usb 5-1: config 0 descriptor?? [ 204.900842][ T5844] apple 0003:05AC:021B.000A: unknown main item tag 0x0 [ 204.921973][ T5844] apple 0003:05AC:021B.000A: unknown main item tag 0x0 [ 204.929058][ T5844] apple 0003:05AC:021B.000A: unknown main item tag 0x0 [ 204.972571][ T5844] apple 0003:05AC:021B.000A: unknown main item tag 0x0 [ 204.979540][ T5844] apple 0003:05AC:021B.000A: unknown main item tag 0x0 [ 205.011083][ T5844] apple 0003:05AC:021B.000A: hidraw0: USB HID v0.09 Device [HID 05ac:021b] on usb-dummy_hcd.4-1/input0 [ 205.115796][ T5844] usb 5-1: USB disconnect, device number 4 [ 205.167309][ T8388] fido_id[8388]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 205.263104][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 205.429531][ T8382] loop1: detected capacity change from 0 to 32768 [ 205.447395][ T8382] [ 205.447395][ T8382] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 205.447395][ T8382] [ 205.469758][ T8382] ERROR: (device loop1): diWrite: ixpxd invalid [ 205.469758][ T8382] [ 205.470603][ T8396] netlink: 4 bytes leftover after parsing attributes in process `syz.5.775'. [ 205.484152][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 205.501700][ T8382] ERROR: (device loop1): txCommit: [ 205.501700][ T8382] [ 205.519425][ T23] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 205.532152][ T23] usb 1-1: config 0 has no interface number 0 [ 205.573205][ T23] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=2c.d8 [ 205.597945][ T23] usb 1-1: New USB device strings: Mfr=193, Product=2, SerialNumber=3 [ 205.622000][ T23] usb 1-1: Product: syz [ 205.626257][ T23] usb 1-1: Manufacturer: syz [ 205.641970][ T23] usb 1-1: SerialNumber: syz [ 205.653362][ T23] usb 1-1: config 0 descriptor?? [ 205.673030][ T5790] [ 205.673030][ T5790] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 205.673030][ T5790] [ 205.686995][ T23] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 205.703962][ T5790] [ 205.703962][ T5790] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 205.703962][ T5790] [ 205.725764][ T23] usb 1-1: selecting invalid altsetting 1 [ 205.731597][ T23] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 205.803192][ T23] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 205.842726][ T23] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 205.851115][ T23] usb 1-1: media controller created [ 205.923276][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 206.252953][ T8410] fuse: Invalid rootmode [ 206.655937][ T8418] loop1: detected capacity change from 0 to 1024 [ 206.800839][ T11] hfsplus: b-tree write err: -5, ino 4 [ 206.824938][ T8400] loop4: detected capacity change from 0 to 32768 [ 206.851108][ T8400] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.778 (8400) [ 206.885805][ T8421] loop5: detected capacity change from 0 to 16 [ 206.902685][ T8421] erofs: (device loop5): mounted with root inode @ nid 36. [ 206.951798][ T8400] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 206.968963][ T8421] erofs: (device loop5): z_erofs_fill_inode_lazy: unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 206.991029][ T8400] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 207.007279][ T8400] BTRFS info (device loop4): setting nodatasum [ 207.012039][ T8421] erofs: (device loop5): z_erofs_fill_inode_lazy: unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 207.016332][ T8387] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 207.035906][ T8400] BTRFS info (device loop4): enabling auto defrag [ 207.044900][ T8400] BTRFS info (device loop4): disabling tree log [ 207.053643][ T8400] BTRFS info (device loop4): using free space tree [ 207.086177][ T8421] erofs: (device loop5): z_erofs_read_folio: read error -95 @ 0 of nid 36 [ 207.099268][ T23] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 207.121986][ T8421] erofs: (device loop5): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 207.152074][ T23] zl10353_read_register: readreg error (reg=127, ret==-71) [ 207.210314][ T23] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 207.280482][ T8400] BTRFS info (device loop4): enabling ssd optimizations [ 207.308159][ T8400] BTRFS info (device loop4): auto enabling async discard [ 207.402417][ T8445] loop5: detected capacity change from 0 to 512 [ 207.412208][ T23] usb 1-1: USB disconnect, device number 6 [ 207.419862][ T8445] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 207.474490][ T6299] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 207.543227][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 207.571600][ T8445] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 207.608271][ T8445] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 207.627800][ T8445] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 207.765639][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.791549][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.804140][ T8] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 207.826175][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.872889][ T8] usb 2-1: config 0 descriptor?? [ 207.875795][ T8450] loop4: detected capacity change from 0 to 256 [ 207.921717][ T8450] exfat: Deprecated parameter 'namecase' [ 207.942970][ T8450] exfat: Deprecated parameter 'utf8' [ 207.989995][ T8450] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 208.122113][ T5844] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 208.347516][ T8] sony 0003:054C:0268.000B: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.1-1/input0 [ 208.372192][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.412548][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.431953][ T8] sony 0003:054C:0268.000B: failed to claim input [ 208.469553][ T5844] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 208.515414][ T8] usb 2-1: USB disconnect, device number 9 [ 208.523529][ T5844] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 208.575475][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.606305][ T8466] loop5: detected capacity change from 0 to 256 [ 208.623328][ T5844] usb 1-1: config 0 descriptor?? [ 208.656286][ T8461] fido_id[8461]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 208.671152][ T8466] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a371bfb, utbl_chksum : 0xe619d30d) [ 209.006530][ T8473] loop4: detected capacity change from 0 to 2048 [ 209.046994][ T5844] plantronics 0003:047F:FFFF.000C: unbalanced delimiter at end of report description [ 209.075644][ T8473] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 209.083951][ T5844] plantronics 0003:047F:FFFF.000C: parse failed [ 209.105161][ T8473] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.124764][ T5844] plantronics: probe of 0003:047F:FFFF.000C failed with error -22 [ 209.250392][ T5844] usb 1-1: USB disconnect, device number 7 [ 209.346407][ T8477] loop1: detected capacity change from 0 to 256 [ 209.388488][ T8477] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 209.415224][ T8477] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 209.450906][ T8477] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 209.955540][ T8492] usb usb8: usbfs: process 8492 (syz.0.810) did not claim interface 4 before use [ 210.061950][ T5864] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 210.306787][ T5864] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 210.316661][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.331968][ T5864] usb 6-1: Product: syz [ 210.336206][ T5864] usb 6-1: Manufacturer: syz [ 210.365157][ T5864] usb 6-1: SerialNumber: syz [ 210.382798][ T5864] usb 6-1: config 0 descriptor?? [ 210.405295][ T5864] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 210.455546][ T5864] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 210.489206][ T5864] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 210.520385][ T5864] usb 6-1: media controller created [ 210.578325][ T5864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 210.586356][ T8504] loop1: detected capacity change from 0 to 1024 [ 210.783555][ T2944] hfsplus: b-tree write err: -5, ino 4 [ 210.820356][ T5864] DVB: Unable to find symbol mt352_attach() [ 211.005705][ T5864] DVB: Unable to find symbol nxt6000_attach() [ 211.032632][ T5864] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 211.075211][ T5864] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input10 [ 211.110434][ T5864] dvb-usb: schedule remote query interval to 1000 msecs. [ 211.142471][ T5864] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 211.167985][ T5864] dvb-usb: bulk message failed: -22 (7/0) [ 211.219949][ T5864] dvb-usb: bulk message failed: -22 (7/0) [ 211.247570][ T5864] usb 6-1: USB disconnect, device number 7 [ 211.436833][ T8502] loop0: detected capacity change from 0 to 32768 [ 211.472368][ T8502] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.814 (8502) [ 211.515787][ T5864] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 211.622841][ T8502] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 211.641039][ T8500] loop4: detected capacity change from 0 to 32768 [ 211.662126][ T8502] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 211.670868][ T8502] BTRFS info (device loop0): enabling auto defrag [ 211.732330][ T8502] BTRFS info (device loop0): use no compression [ 211.738668][ T8502] BTRFS info (device loop0): force clearing of disk cache [ 211.816921][ T8500] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 211.831368][ T8502] BTRFS info (device loop0): max_inline at 4096 [ 211.878525][ T8502] BTRFS info (device loop0): disabling free space tree [ 211.964948][ T8500] XFS (loop4): Ending clean mount [ 212.132274][ T5802] Bluetooth: hci0: command 0x0406 tx timeout [ 212.146447][ T8502] BTRFS info (device loop0): enabling ssd optimizations [ 212.184474][ T6299] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 212.193681][ T8502] BTRFS info (device loop0): auto enabling async discard [ 212.244076][ T8502] BTRFS info (device loop0): rebuilding free space tree [ 212.336928][ T8502] BTRFS info (device loop0): disabling free space tree [ 212.351993][ T5844] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 212.352457][ T8502] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 212.379951][ T8502] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 212.568670][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.605404][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.645485][ T5798] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 212.661938][ T5844] usb 2-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 212.675407][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.711355][ T5844] usb 2-1: config 0 descriptor?? [ 213.160438][ T5844] hid-led 0003:1D34:0004.000D: unknown main item tag 0x0 [ 213.359496][ T5844] hid-led: probe of 0003:1D34:0004.000D failed with error -71 [ 213.431680][ T5844] usb 2-1: USB disconnect, device number 10 [ 213.523765][ T8572] loop4: detected capacity change from 0 to 1024 [ 213.554682][ T8572] EXT4-fs: Ignoring removed nobh option [ 213.581328][ T8572] EXT4-fs: Ignoring removed bh option [ 213.609044][ T8572] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 213.610285][ T8576] loop5: detected capacity change from 0 to 512 [ 213.647707][ T8576] EXT4-fs: Ignoring removed orlov option [ 213.668554][ T8572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.685833][ T8576] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 213.742907][ T8576] EXT4-fs (loop5): orphan cleanup on readonly fs [ 213.767627][ T8576] EXT4-fs (loop5): 1 orphan inode deleted [ 213.789705][ T8576] EXT4-fs (loop5): 1 truncate cleaned up [ 213.798944][ T8576] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 213.863620][ T6425] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.889584][ T6299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.952321][ T5888] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 214.057565][ T8588] loop5: detected capacity change from 0 to 128 [ 214.094179][ T8588] FAT-fs (loop5): Directory bread(block 32) failed [ 214.101882][ T8588] FAT-fs (loop5): Directory bread(block 33) failed [ 214.111528][ T8588] FAT-fs (loop5): Directory bread(block 34) failed [ 214.120446][ T8588] FAT-fs (loop5): Directory bread(block 35) failed [ 214.129062][ T8588] FAT-fs (loop5): Directory bread(block 36) failed [ 214.140920][ T8588] FAT-fs (loop5): Directory bread(block 37) failed [ 214.149334][ T8588] FAT-fs (loop5): Directory bread(block 38) failed [ 214.157740][ T8588] FAT-fs (loop5): Directory bread(block 39) failed [ 214.164908][ T8588] FAT-fs (loop5): Directory bread(block 40) failed [ 214.172573][ T8588] FAT-fs (loop5): Directory bread(block 41) failed [ 214.197921][ T5888] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 214.216712][ T5888] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.230718][ T5888] usb 1-1: config 0 interface 0 has no altsetting 0 [ 214.238494][ T5888] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 214.247842][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.259225][ T5888] usb 1-1: config 0 descriptor?? [ 214.265141][ T8592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.842'. [ 214.294435][ T8592] netlink: 'syz.4.842': attribute type 5 has an invalid length. [ 214.457563][ T5844] Process accounting resumed [ 214.465590][ T5844] kworker/0:3: attempt to access beyond end of device [ 214.465590][ T5844] loop5: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 214.520098][ T5844] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 214.567411][ T5844] FAT-fs (loop5): Filesystem has been set read-only [ 214.706490][ T8598] loop1: detected capacity change from 0 to 1764 [ 214.720262][ T5888] hid-steam 0003:28DE:1102.000E: unknown main item tag 0x0 [ 214.747044][ T5888] hid-steam 0003:28DE:1102.000E: unknown main item tag 0x0 [ 214.756091][ T5888] hid-steam 0003:28DE:1102.000E: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 214.778856][ T5797] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 214.837741][ T5888] hid-steam 0003:28DE:1102.000E: Steam Controller 'XXXXXXXXXX' connected [ 214.867448][ T5888] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.000E/input/input11 [ 214.951929][ T5844] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 214.970481][ T5888] hid-steam 0003:28DE:1102.000F: unknown main item tag 0x0 [ 214.990570][ T5888] hid-steam 0003:28DE:1102.000F: unknown main item tag 0x0 [ 215.049652][ T8607] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve0, syncid = 10804, id = 0 [ 215.051169][ T5888] hid-steam 0003:28DE:1102.000F: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 215.152352][ T5844] usb 5-1: Using ep0 maxpacket: 16 [ 215.167754][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.233339][ T5888] usb 1-1: USB disconnect, device number 8 [ 215.240689][ T5844] usb 5-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 215.286503][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.333944][ T5844] usb 5-1: config 0 descriptor?? [ 215.360146][ T5888] hid-steam 0003:28DE:1102.000E: Steam Controller 'XXXXXXXXXX' disconnected [ 215.583264][ T5864] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 215.726809][ T8617] loop0: detected capacity change from 0 to 8192 [ 215.748650][ T8617] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 215.768227][ T8617] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 215.780817][ T8617] REISERFS (device loop0): using ordered data mode [ 215.787651][ T8617] reiserfs: using flush barriers [ 215.802124][ T8617] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 215.804792][ T5844] sunplus 0003:04FC:05D8.0010: unknown main item tag 0x6 [ 215.818860][ T5864] usb 2-1: Using ep0 maxpacket: 8 [ 215.827709][ T5844] sunplus 0003:04FC:05D8.0010: unknown main item tag 0x5 [ 215.839664][ T5844] sunplus 0003:04FC:05D8.0010: unknown main item tag 0x4 [ 215.846958][ T5844] sunplus 0003:04FC:05D8.0010: item fetching failed at offset 31/160 [ 215.856719][ T5844] sunplus: probe of 0003:04FC:05D8.0010 failed with error -22 [ 215.869041][ T8617] REISERFS (device loop0): checking transaction log (loop0) [ 215.879006][ T8617] REISERFS (device loop0): Using r5 hash to sort names [ 215.899607][ T5864] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 215.964766][ T5864] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 215.981969][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.988638][ T5844] usb 5-1: USB disconnect, device number 5 [ 215.990017][ T5864] usb 2-1: Product: syz [ 215.990034][ T5864] usb 2-1: Manufacturer: syz [ 215.990049][ T5864] usb 2-1: SerialNumber: syz [ 216.010640][ T8617] reiserfs: enabling write barrier flush mode [ 216.020654][ T5864] usb 2-1: config 0 descriptor?? [ 216.054585][ T5864] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 216.063862][ T5864] usb 2-1: setting power ON [ 216.069093][ T5864] dvb-usb: bulk message failed: -22 (2/0) [ 216.091620][ T8617] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 216.112882][ T5864] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 216.130922][ T8617] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 216.144020][ T5864] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 216.162131][ T5864] usb 2-1: media controller created [ 216.187444][ T8617] REISERFS (device loop0): Remounting filesystem read-only [ 216.198994][ T5864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 216.202268][ T8617] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 216.223329][ T8617] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 216.241270][ T8617] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 216.258038][ T8617] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error [ 216.270545][ T5864] usb 2-1: selecting invalid altsetting 6 [ 216.277465][ T8617] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 216.291950][ T5864] usb 2-1: digital interface selection failed (-22) [ 216.300597][ T8617] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 216.310102][ T5864] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 216.323532][ T8617] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 216.332113][ T5864] usb 2-1: setting power OFF [ 216.345335][ T8617] REISERFS warning (device loop0): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 216.360648][ T5864] dvb-usb: bulk message failed: -22 (2/0) [ 216.379938][ T5864] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 216.398612][ T5864] (NULL device *): no alternate interface [ 216.412559][ T8617] REISERFS warning (device loop0): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 216.468699][ T5864] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 216.482103][ T5798] ------------[ cut here ]------------ [ 216.487798][ T5798] kernel BUG at fs/reiserfs/journal.c:1916! [ 216.494460][ T5864] usb 2-1: USB disconnect, device number 11 [ 216.510826][ T5798] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 216.517411][ T5798] CPU: 0 PID: 5798 Comm: syz-executor Not tainted syzkaller #0 [ 216.525172][ T5798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 216.535361][ T5798] RIP: 0010:do_journal_release+0x53a/0x550 [ 216.541232][ T5798] Code: b6 ff e9 49 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c b9 fc ff ff 4c 89 ff e8 40 d3 b6 ff e9 ac fc ff ff e8 56 7a 5f ff <0f> 0b e8 4f 7a 5f ff 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 216.561154][ T5798] RSP: 0018:ffffc900043bfb00 EFLAGS: 00010293 [ 216.567277][ T5798] RAX: ffffffff8226107a RBX: ffff88802a306000 RCX: ffff88807a7c0000 [ 216.575557][ T5798] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 216.583851][ T5798] RBP: ffffc900043bfbf8 R08: ffffc900043bfb77 R09: 0000000000000000 [ 216.592053][ T5798] R10: ffffc900043bfb40 R11: fffff52000877f6f R12: ffffc9000f7f1000 [ 216.600411][ T5798] R13: 1ffff92000877f64 R14: ffff88802a306630 R15: 0000000000000000 [ 216.608427][ T5798] FS: 0000555562663500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 216.617490][ T5798] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 216.624816][ T5798] CR2: 00007eff9fe9e288 CR3: 0000000061056000 CR4: 00000000003506f0 [ 216.632834][ T5798] Call Trace: [ 216.636168][ T5798] [ 216.639149][ T5798] ? journal_release+0x30/0x30 [ 216.644098][ T5798] journal_release+0x1f/0x30 [ 216.648758][ T5798] reiserfs_put_super+0x222/0x480 [ 216.653925][ T5798] ? hook_inode_free_security+0xb0/0xb0 [ 216.659528][ T5798] ? reiserfs_dirty_inode+0x240/0x240 [ 216.665008][ T5798] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 216.670702][ T5798] ? reiserfs_dirty_inode+0x240/0x240 [ 216.676596][ T5798] generic_shutdown_super+0x134/0x2b0 [ 216.682474][ T5798] kill_block_super+0x44/0x90 [ 216.687546][ T5798] deactivate_locked_super+0x97/0x100 [ 216.693416][ T5798] cleanup_mnt+0x429/0x4c0 [ 216.697990][ T5798] task_work_run+0x1ce/0x250 [ 216.702637][ T5798] ? task_work_cancel+0x240/0x240 [ 216.707745][ T5798] ? exit_to_user_mode_loop+0x3b/0x110 [ 216.713393][ T5798] exit_to_user_mode_loop+0xe6/0x110 [ 216.718797][ T5798] exit_to_user_mode_prepare+0xf6/0x180 [ 216.724575][ T5798] syscall_exit_to_user_mode+0x1a/0x50 [ 216.730098][ T5798] do_syscall_64+0x61/0xb0 [ 216.734577][ T5798] ? clear_bhb_loop+0x40/0x90 [ 216.734870][ T8635] @: renamed from vlan0 (while UP) [ 216.739628][ T5798] ? clear_bhb_loop+0x40/0x90 [ 216.739659][ T5798] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.755693][ T5798] RIP: 0033:0x7fdb667902f7 [ 216.760341][ T5798] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 216.780282][ T5798] RSP: 002b:00007ffec4b661d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 216.788722][ T5798] RAX: 0000000000000000 RBX: 00007fdb66811d7d RCX: 00007fdb667902f7 [ 216.796925][ T5798] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec4b66290 [ 216.804949][ T5798] RBP: 00007ffec4b66290 R08: 0000000000000000 R09: 0000000000000000 [ 216.813060][ T5798] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffec4b67320 [ 216.821433][ T5798] R13: 00007fdb66811d7d R14: 0000000000034d53 R15: 00007ffec4b67360 [ 216.829547][ T5798] [ 216.832624][ T5798] Modules linked in: [ 216.851382][ T5798] ---[ end trace 0000000000000000 ]--- [ 216.857442][ T5798] RIP: 0010:do_journal_release+0x53a/0x550 [ 216.870787][ T5798] Code: b6 ff e9 49 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c b9 fc ff ff 4c 89 ff e8 40 d3 b6 ff e9 ac fc ff ff e8 56 7a 5f ff <0f> 0b e8 4f 7a 5f ff 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 216.900541][ T5798] RSP: 0018:ffffc900043bfb00 EFLAGS: 00010293 [ 216.910499][ T5798] RAX: ffffffff8226107a RBX: ffff88802a306000 RCX: ffff88807a7c0000 [ 216.924902][ T5798] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 216.951346][ T5798] RBP: ffffc900043bfbf8 R08: ffffc900043bfb77 R09: 0000000000000000 [ 216.972206][ T5798] R10: ffffc900043bfb40 R11: fffff52000877f6f R12: ffffc9000f7f1000 [ 216.984453][ T5798] R13: 1ffff92000877f64 R14: ffff88802a306630 R15: 0000000000000000 [ 216.993609][ T5798] FS: 0000555562663500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 217.003970][ T5798] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.010808][ T5798] CR2: 00007f9c8bfb12f8 CR3: 0000000061056000 CR4: 00000000003506e0 [ 217.019555][ T5798] Kernel panic - not syncing: Fatal exception [ 217.026101][ T5798] Kernel Offset: disabled [ 217.030449][ T5798] Rebooting in 86400 seconds..