last executing test programs: 4.563255736s ago: executing program 2 (id=716): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r0, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1) 4.420434649s ago: executing program 1 (id=718): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000400)={[{@max_dir_size_kb}, {@data_err_abort}, {@sysvgroups}, {@grpid}, {@data_err_ignore}, {@barrier}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x40000000) 4.291473225s ago: executing program 0 (id=719): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 4.26783424s ago: executing program 2 (id=720): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES32=r0, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 3.919113124s ago: executing program 2 (id=722): io_setup(0xe, &(0x7f0000000040)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000002ec0)="f60b", 0x2, 0x7}]) 3.875375329s ago: executing program 0 (id=723): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b1600000000000000000200000844000480100001800a000100726564697200000030000180080001006e6174002400028008000140000002000800054000000017080006400000001208000240000000020900010073797a30000000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 3.694574387s ago: executing program 1 (id=724): capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0x0) 3.548303694s ago: executing program 0 (id=725): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x12c, 0x0, 0x0, 0x0, 0x7fff}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 3.443397008s ago: executing program 0 (id=726): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000280), 0x227, 0x1) 3.382892999s ago: executing program 2 (id=727): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000280)={0x2, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x566e, 0x8}, 0x0, 0x0, 0x2, 0xffff, 0x5, 0x7, 0x32, 0xc7}}, @rdma_dest={0x18, 0x114, 0x2, {0x1, 0xe79}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xf09}, @cswp={0x58, 0x114, 0x7, {{0x8, 0x9}, 0x0, 0x0, 0x0, 0x7, 0x9, 0x1, 0x4, 0x6}}], 0xe0}, 0x0) 3.309315528s ago: executing program 1 (id=729): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x23, 0x4, 0x9, 0x0, r0}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, r1, 0x4}, 0x38) 3.117424908s ago: executing program 0 (id=731): syz_mount_image$jfs(&(0x7f0000005d00), &(0x7f0000005d40)='./file0\x00', 0x0, &(0x7f0000000100)={[{@quota}]}, 0x1, 0x5dae, &(0x7f0000005d80)="$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") open(&(0x7f0000000180)='./bus\x00', 0x16d042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 3.037959273s ago: executing program 2 (id=732): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004480)='./file0\x00', 0x10040, &(0x7f00000000c0)={[{@journal_async_commit}, {@noacl}, {@coherency_full}, {@heartbeat_none}, {@journal_async_commit}, {@user_xattr}]}, 0x1, 0x444c, &(0x7f000000cd40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0x18000) 2.978419081s ago: executing program 1 (id=733): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x638f, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) bind$tipc(r0, 0x0, 0x0) 2.672806426s ago: executing program 1 (id=737): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@RTM_NEWMDB={0x18, 0x55, 0x1, 0x70bd2b, 0x25dfdbfe, {0x7, r1}}, 0x18}, 0x1, 0x0, 0x0, 0x2000000}, 0x40080c0) 2.539196715s ago: executing program 3 (id=738): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 2.387552784s ago: executing program 1 (id=739): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x8, 0x9e7a, 0xc, 0x1, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x20000000) 2.31713608s ago: executing program 4 (id=740): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000800000000000000000850000004f0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000690f0000850000002300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.265681727s ago: executing program 3 (id=741): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/5, 0x5}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x124411, 0x0) 1.786130631s ago: executing program 4 (id=742): syz_mount_image$vfat(&(0x7f0000003240), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000180)=ANY=[], 0x4, 0x2b8, &(0x7f0000002f80)="$eJzs209PE1sYx/EftPy/pb2Xe+GCMZ7oRjcTqK+gIZAYm2iQGv8kJoNMpWlpsdNgaozgyq2vg7h0Z2J8A2x8BS7csWHJwjiGzlRbbENDgCnN97OZB855OmfOc6Y5i569B+/W81nXytoV9fcZRaVBHUgJ9SsiX19w7a/Fg2q0rRsT6a+X7z18dDuVTi8sGbOYWr6ZNMaMX/n04tX7q58rY/c/jH8c0m7iyd5+8tvu5O703o/ltZxrcq4plirGNiulUsVeKThmNefmLWPuFhzbdUyu6DrlpvZsobSxUTV2cTU2ulF2XNfYxarJO1VTKZlKuWrsZ3auaCzLMrFR4TiZnaUlOxX2KHC2yuWUPS9p5o+WzE4oAwIAAKFqsf/f9vf/sZ7f/3veGUzohcL+v9dFg/3/4+D9bcb+HwAAAAAAAAAAAAAAAAAAAACAi+DA8+Ke58Xr1wGpdsLHC/4ekTQqaUzSX5JiksYlxSUlJP0t6R9JE5L+lfSfpElJU5L+lzTd8FktDiAgZO3qH2lf/74T1x9d51zff3Sd4+s/QP17WMPB3WFp/e1mZjPjX/32VFY5FeRoVnF9r9Uy4MeLt9ILs6YmoUvrW0H+1mYm0pw/p/jhgmmVP+fnm+b8odq6+5WfVPxwgbXKT7bMH9b1aw35luL68lQlFbQanP2t57+ei5j5O+kj+TO1fr3OOpy4N5La1M+yTN2Rdj+/g/XhzbasT1Qz0XCfHZJbfZm3CwWnfDrB8046j/jBlE7ppgQnC4bVSWed1k1HOu281iXzcyZBpDuG0UHd29uvf8Pjovtd9Pp/IuEOCAAAAAAAAAAAAAAAAADQkfP4OWHYzwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFE/AwAA//9Vb2Vh") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd6) pwrite64(r0, &(0x7f00000007c0)="cfac", 0x2, 0x7ff) 1.603109005s ago: executing program 3 (id=743): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x23ac, 0xffffffff, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001a00010a29bd70000000000080"], 0x14}}, 0x4000000) 1.542654818s ago: executing program 3 (id=744): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006600)={0x34, r1, 0x431, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x34}}, 0x0) 1.370572517s ago: executing program 4 (id=745): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x5) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 1.203134428s ago: executing program 3 (id=746): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000240)='H', 0x1) setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000380)="d1af93021a35446faaa109692687003e", 0x10) 1.076048738s ago: executing program 4 (id=747): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002280)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@creator={'creator', 0x3d, "a8215961"}}, {@umask={'umask', 0x3d, 0xb}}, {@nls={'nls', 0x3d, 'iso8859-14'}}, {@uid={'uid', 0x3d, 0xee01}}, {@uid}, {@gid}]}, 0x1d, 0x6ea, &(0x7f00000005c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 646.310517ms ago: executing program 0 (id=748): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000500)=ANY=[], 0x8) getsockopt$inet6_opts(r0, 0x29, 0x36, 0xffffffffffffffff, &(0x7f00000000c0)) 467.593253ms ago: executing program 4 (id=749): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f00000020c0)=""/4130, &(0x7f0000000000)=0x1022) 429.85242ms ago: executing program 3 (id=750): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000180)=0xffff0018) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000140)=0x6) 85.044589ms ago: executing program 4 (id=751): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x0, &(0x7f0000000f40)={[{@file_umask={'file_umask', 0x3d, 0xa6de}}, {@umask={'umask', 0x3d, 0x836f}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@codepage={'codepage', 0x3d, 'default'}}]}, 0x2, 0x342, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/54, 0x36) 0s ago: executing program 2 (id=752): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r0, @ANYBLOB="01000000000000000000011500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b0073697000060001"], 0xc4}}, 0x4008800) kernel console output (not intermixed with test programs): t 2(bridge_slave_1) entered disabled state [ 87.871517][ T5825] bridge_slave_1: entered allmulticast mode [ 87.874894][ T5825] bridge_slave_1: entered promiscuous mode [ 87.912163][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.912306][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.912868][ T5823] bridge_slave_0: entered allmulticast mode [ 87.915056][ T5823] bridge_slave_0: entered promiscuous mode [ 87.957168][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.957281][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.959135][ T5835] bridge_slave_0: entered allmulticast mode [ 87.961197][ T5835] bridge_slave_0: entered promiscuous mode [ 87.965488][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.965606][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.966104][ T5824] bridge_slave_0: entered allmulticast mode [ 87.969376][ T5824] bridge_slave_0: entered promiscuous mode [ 87.975278][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.975407][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.976094][ T5823] bridge_slave_1: entered allmulticast mode [ 87.979866][ T5823] bridge_slave_1: entered promiscuous mode [ 88.034548][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.034775][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.034944][ T5835] bridge_slave_1: entered allmulticast mode [ 88.039872][ T5835] bridge_slave_1: entered promiscuous mode [ 88.044334][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.044455][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.044619][ T5824] bridge_slave_1: entered allmulticast mode [ 88.047383][ T5824] bridge_slave_1: entered promiscuous mode [ 88.069086][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.069234][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.069391][ T5837] bridge_slave_0: entered allmulticast mode [ 88.071954][ T5837] bridge_slave_0: entered promiscuous mode [ 88.085409][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.093813][ T5143] Bluetooth: hci1: command tx timeout [ 88.093981][ T5828] Bluetooth: hci2: command tx timeout [ 88.158269][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.158430][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.158609][ T5837] bridge_slave_1: entered allmulticast mode [ 88.160814][ T5837] bridge_slave_1: entered promiscuous mode [ 88.169221][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.172789][ T5828] Bluetooth: hci0: command tx timeout [ 88.214462][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.246199][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.250482][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.253252][ T5828] Bluetooth: hci3: command tx timeout [ 88.264521][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.304001][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.306821][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.332321][ T5828] Bluetooth: hci4: command tx timeout [ 88.342844][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.347090][ T5825] team0: Port device team_slave_0 added [ 88.396395][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.398135][ T5825] team0: Port device team_slave_1 added [ 88.434366][ T5823] team0: Port device team_slave_0 added [ 88.465028][ T5835] team0: Port device team_slave_0 added [ 88.468061][ T5824] team0: Port device team_slave_0 added [ 88.470206][ T5823] team0: Port device team_slave_1 added [ 88.526156][ T5835] team0: Port device team_slave_1 added [ 88.527887][ T5824] team0: Port device team_slave_1 added [ 88.548470][ T5837] team0: Port device team_slave_0 added [ 88.549670][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.549680][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.549697][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.614975][ T5837] team0: Port device team_slave_1 added [ 88.615636][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.615651][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.615678][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.658424][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.658442][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.658467][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.700014][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.700032][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.700057][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.703089][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.703106][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.703129][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.705999][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.706013][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.706037][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.744326][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.744343][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.744367][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.745584][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.745596][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.745627][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.761037][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.761053][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.761077][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.825102][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.825119][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.825144][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.907855][ T5825] hsr_slave_0: entered promiscuous mode [ 88.909250][ T5825] hsr_slave_1: entered promiscuous mode [ 89.021321][ T5823] hsr_slave_0: entered promiscuous mode [ 89.024886][ T5823] hsr_slave_1: entered promiscuous mode [ 89.026010][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 89.026108][ T5823] Cannot create hsr debugfs directory [ 89.057981][ T5835] hsr_slave_0: entered promiscuous mode [ 89.058803][ T5835] hsr_slave_1: entered promiscuous mode [ 89.059391][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 89.059408][ T5835] Cannot create hsr debugfs directory [ 89.105479][ T5824] hsr_slave_0: entered promiscuous mode [ 89.106340][ T5824] hsr_slave_1: entered promiscuous mode [ 89.106953][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 89.106970][ T5824] Cannot create hsr debugfs directory [ 89.149295][ T5837] hsr_slave_0: entered promiscuous mode [ 89.150122][ T5837] hsr_slave_1: entered promiscuous mode [ 89.150884][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 89.150901][ T5837] Cannot create hsr debugfs directory [ 90.173675][ T5143] Bluetooth: hci1: command tx timeout [ 90.173837][ T5828] Bluetooth: hci2: command tx timeout [ 90.252685][ T5828] Bluetooth: hci0: command tx timeout [ 90.343364][ T5828] Bluetooth: hci3: command tx timeout [ 90.346589][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.378359][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.380864][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.412716][ T5828] Bluetooth: hci4: command tx timeout [ 90.417750][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.420313][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.458463][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.477010][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.508148][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.624107][ T5824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.657841][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.664973][ T5824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.697496][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.700660][ T5824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.741104][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.767753][ T5824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.798532][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.931051][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.968346][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.980502][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.005507][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.010791][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.035312][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.057441][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.096714][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.272958][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.327933][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.335592][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.376962][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.383143][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.405314][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.410524][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.448305][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.485039][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.625941][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.665257][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.671515][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.679689][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.718180][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.733779][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.777630][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.785631][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.815015][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.837709][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.837857][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.846268][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.884521][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.884775][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.980610][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.026979][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.027110][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.070196][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.070330][ T3543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.086998][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.216959][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.256974][ T5828] Bluetooth: hci2: command tx timeout [ 92.257011][ T5828] Bluetooth: hci1: command tx timeout [ 92.332275][ T5143] Bluetooth: hci0: command tx timeout [ 92.336275][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.337023][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.391489][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.391646][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.412454][ T5143] Bluetooth: hci3: command tx timeout [ 92.419396][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.492610][ T5143] Bluetooth: hci4: command tx timeout [ 92.636289][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.681132][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.743138][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.743222][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.790874][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.791061][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.852145][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.910437][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.925824][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.957048][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.010424][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.010654][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.185964][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.361004][ T5825] veth0_vlan: entered promiscuous mode [ 93.479518][ T5825] veth1_vlan: entered promiscuous mode [ 93.619279][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.791150][ T5825] veth0_macvtap: entered promiscuous mode [ 93.884448][ T5825] veth1_macvtap: entered promiscuous mode [ 93.912482][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.018607][ T5837] veth0_vlan: entered promiscuous mode [ 94.027516][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.061653][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.090806][ T5837] veth1_vlan: entered promiscuous mode [ 94.115883][ T92] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.123925][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.132708][ T92] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.146734][ T92] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.160403][ T92] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.334195][ T5143] Bluetooth: hci1: command tx timeout [ 94.334234][ T5143] Bluetooth: hci2: command tx timeout [ 94.354953][ T5823] veth0_vlan: entered promiscuous mode [ 94.412655][ T5828] Bluetooth: hci0: command tx timeout [ 94.474644][ T5824] veth0_vlan: entered promiscuous mode [ 94.492548][ T5828] Bluetooth: hci3: command tx timeout [ 94.565360][ T5823] veth1_vlan: entered promiscuous mode [ 94.569424][ T5837] veth0_macvtap: entered promiscuous mode [ 94.573476][ T5828] Bluetooth: hci4: command tx timeout [ 94.626291][ T5824] veth1_vlan: entered promiscuous mode [ 94.639550][ T5837] veth1_macvtap: entered promiscuous mode [ 94.665326][ T3543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.665342][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.707446][ T5835] veth0_vlan: entered promiscuous mode [ 94.768649][ T5835] veth1_vlan: entered promiscuous mode [ 94.799883][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.858543][ T164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.858567][ T164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.860781][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.863212][ T5823] veth0_macvtap: entered promiscuous mode [ 94.945736][ T164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.946191][ T5823] veth1_macvtap: entered promiscuous mode [ 94.947658][ T5824] veth0_macvtap: entered promiscuous mode [ 94.980646][ T164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.994632][ T164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.999575][ T164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.015415][ T5824] veth1_macvtap: entered promiscuous mode [ 95.188038][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.191928][ T5835] veth0_macvtap: entered promiscuous mode [ 95.304626][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.355692][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.363983][ T5835] veth1_macvtap: entered promiscuous mode [ 95.417706][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.450742][ T154] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.464057][ T154] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.474752][ T154] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.481653][ T154] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.519293][ T154] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.534112][ T154] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.559037][ T154] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.568979][ T154] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.630294][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.630317][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.649081][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.795196][ T5945] loop0: detected capacity change from 0 to 256 [ 95.884439][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.276065][ T5945] FAT-fs (loop0): Directory bread(block 64) failed [ 96.276092][ T5945] FAT-fs (loop0): Directory bread(block 65) failed [ 96.276160][ T5945] FAT-fs (loop0): Directory bread(block 66) failed [ 96.276174][ T5945] FAT-fs (loop0): Directory bread(block 67) failed [ 96.276234][ T5945] FAT-fs (loop0): Directory bread(block 68) failed [ 96.276248][ T5945] FAT-fs (loop0): Directory bread(block 69) failed [ 96.276306][ T5945] FAT-fs (loop0): Directory bread(block 70) failed [ 96.276324][ T5945] FAT-fs (loop0): Directory bread(block 71) failed [ 96.276387][ T5945] FAT-fs (loop0): Directory bread(block 72) failed [ 96.276402][ T5945] FAT-fs (loop0): Directory bread(block 73) failed [ 96.400373][ T1750] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.418056][ T1750] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.457383][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.457405][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.459156][ T1750] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.519575][ T1750] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.628016][ T5947] loop0: detected capacity change from 0 to 512 [ 96.643364][ T3506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.643387][ T3506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.874448][ T5947] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 96.881503][ T5947] EXT4-fs (loop0): 1 truncate cleaned up [ 96.918803][ T5947] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.961532][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.961565][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.226892][ T164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.226917][ T164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.263849][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.540163][ T164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.540186][ T164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.731957][ T5956] loop0: detected capacity change from 0 to 512 [ 97.739613][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.739635][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.794712][ T5956] EXT4-fs: Ignoring removed nobh option [ 97.794739][ T5956] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.923470][ T5956] EXT4-fs (loop0): orphan cleanup on readonly fs [ 97.923495][ T5956] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 98.026043][ T5956] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.10: attempt to clear invalid blocks 2 len 1 [ 98.026236][ T5956] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 98.032393][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 98.032421][ C1] EXT4-fs (loop0): initial error at time 1776124108: ext4_clear_blocks:876: inode 13 [ 98.032452][ C1] EXT4-fs (loop0): last error at time 1776124108: ext4_clear_blocks:876: inode 13 [ 98.195460][ T5956] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 98.237721][ T5956] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.10: invalid indirect mapped block 1819239214 (level 0) [ 98.237763][ T5956] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 98.244062][ T5963] mmap: syz.2.11 (5963) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 98.290103][ T5956] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.10: invalid indirect mapped block 1819239214 (level 1) [ 98.291041][ T5956] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 98.294353][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.294375][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.451478][ T5956] EXT4-fs (loop0): 1 truncate cleaned up [ 98.535342][ T5965] loop4: detected capacity change from 0 to 1024 [ 98.579491][ T5956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.755793][ T5956] EXT4-fs (loop0): Quota file not on filesystem root. Journaled quota will not work [ 99.188067][ T5951] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 99.235816][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.452010][ T5968] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 99.687626][ T5951] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 99.687657][ T5951] usb 2-1: config 0 has no interface number 0 [ 99.688360][ T5951] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 99.688391][ T5951] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 99.688421][ T5951] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 99.688451][ T5951] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 99.688479][ T5951] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 99.688503][ T5951] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 99.688549][ T5951] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 99.688575][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.019017][ T5965] hfsplus: bad catalog entry type [ 100.201204][ T5951] usb 2-1: config 0 descriptor?? [ 100.331827][ T5962] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 100.461137][ T92] hfsplus: b-tree write err: -5, ino 25 [ 100.476734][ T92] hfsplus: b-tree write err: -5, ino 4 [ 100.477157][ T92] hfsplus: b-tree write err: -5, ino 2 [ 101.014882][ T5951] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 101.275823][ T5951] usb 2-1: USB disconnect, device number 2 [ 101.502474][ T5986] loop0: detected capacity change from 0 to 4096 [ 101.503582][ T5986] ======================================================= [ 101.503582][ T5986] WARNING: The mand mount option has been deprecated and [ 101.503582][ T5986] and is ignored by this kernel. Remove the mand [ 101.503582][ T5986] option from the mount to silence this warning. [ 101.503582][ T5986] ======================================================= [ 101.698981][ T5993] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.737398][ T5951] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 103.078459][ T6001] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.847648][ T5985] loop4: detected capacity change from 0 to 32768 [ 104.282979][ T5985] read_mapping_page failed! [ 104.303952][ T5985] jfs_mount: Failed to read AGGREGATE_I [ 104.303970][ T5985] Mount JFS Failure: -5 [ 104.303983][ T5985] jfs_mount failed w/return code = -5 [ 104.456227][ T5992] loop1: detected capacity change from 0 to 32768 [ 104.702628][ T5992] read_mapping_page failed! [ 104.716311][ T5992] jfs_mount: Failed to read AGGREGATE_I [ 104.716327][ T5992] Mount JFS Failure: -5 [ 105.306258][ T6000] loop2: detected capacity change from 0 to 32768 [ 105.658693][ T6013] loop0: detected capacity change from 0 to 1764 [ 105.944665][ T6013] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 106.304777][ T6019] netlink: 'syz.1.29': attribute type 62 has an invalid length. [ 107.023824][ T6027] loop4: detected capacity change from 0 to 4096 [ 107.063691][ T820] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 107.283568][ T820] usb 2-1: Using ep0 maxpacket: 16 [ 107.286993][ T820] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 107.287023][ T820] usb 2-1: config 0 has no interface number 0 [ 107.294406][ T5884] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 107.330249][ T820] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 107.330292][ T820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.330316][ T820] usb 2-1: Product: syz [ 107.330332][ T820] usb 2-1: Manufacturer: syz [ 107.330347][ T820] usb 2-1: SerialNumber: syz [ 107.358102][ T6030] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.428526][ T820] usb 2-1: config 0 descriptor?? [ 107.477209][ T820] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 107.582106][ T5884] usb 4-1: Using ep0 maxpacket: 8 [ 107.618770][ T5884] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.618896][ T5884] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 107.618923][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.703548][ T5884] usb 4-1: config 0 descriptor?? [ 107.846338][ T5884] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 108.119792][ T820] gspca_spca1528: reg_w err -71 [ 108.147086][ T820] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 108.270442][ T820] usb 2-1: USB disconnect, device number 3 [ 108.581101][ T5884] gspca_vc032x: reg_r err -71 [ 108.581272][ T5884] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 108.663655][ T5884] usb 4-1: USB disconnect, device number 2 [ 108.679904][ T6035] program syz.2.38 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.517436][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.42'. [ 109.517790][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.42'. [ 109.718618][ T6054] loop3: detected capacity change from 0 to 1024 [ 109.886356][ T5966] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 110.072247][ T5966] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 110.072280][ T5966] usb 2-1: config 0 has no interface number 0 [ 110.072339][ T5966] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 110.072367][ T5966] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 110.072397][ T5966] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 110.072425][ T5966] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 110.072454][ T5966] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 110.072484][ T5966] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 110.072529][ T5966] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 110.072553][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.237167][ T6059] Bluetooth: MGMT ver 1.23 [ 110.308311][ T5966] usb 2-1: config 0 descriptor?? [ 110.309400][ T6055] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 110.309539][ T6055] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 110.487125][ T5966] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 110.592477][ T5966] usb 2-1: USB disconnect, device number 4 [ 110.677390][ T6066] capability: warning: `syz.4.48' uses 32-bit capabilities (legacy support in use) [ 110.700252][ T6065] capability: warning: `syz.3.49' uses deprecated v2 capabilities in a way that may be insecure [ 110.701084][ T5966] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 111.123140][ T6074] loop3: detected capacity change from 0 to 128 [ 111.296088][ T6078] Illegal XDP return value 4294967274 on prog (id 4) dev N/A, expect packet loss! [ 111.656598][ T6083] vlan2: entered promiscuous mode [ 111.656625][ T6083] bridge0: entered promiscuous mode [ 111.656836][ T6083] vlan2: entered allmulticast mode [ 111.656853][ T6083] bridge0: entered allmulticast mode [ 112.207274][ T820] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 112.230480][ T6098] loop2: detected capacity change from 0 to 64 [ 112.365077][ T820] usb 2-1: Using ep0 maxpacket: 16 [ 112.377254][ T820] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.377291][ T820] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.377315][ T820] usb 2-1: config 0 interface 0 has no altsetting 0 [ 112.377352][ T820] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 112.377377][ T820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.522207][ T820] usb 2-1: config 0 descriptor?? [ 112.995516][ T6084] loop4: detected capacity change from 0 to 32768 [ 113.101426][ T820] nzxt-smart2 0003:1E71:2009.0001: collection stack underflow [ 113.101461][ T820] nzxt-smart2 0003:1E71:2009.0001: item 0 4 0 12 parsing failed [ 113.119649][ T820] nzxt-smart2 0003:1E71:2009.0001: probe with driver nzxt-smart2 failed with error -22 [ 113.218770][ T5966] usb 2-1: USB disconnect, device number 5 [ 114.857994][ T6131] loop1: detected capacity change from 0 to 256 [ 114.859151][ T6131] exfat: Deprecated parameter 'namecase' [ 115.073698][ T5966] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 115.093422][ T6131] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 115.239370][ T5966] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.239399][ T5966] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 115.239453][ T5966] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 115.239478][ T5966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.299064][ T5966] usb 3-1: config 0 descriptor?? [ 115.320229][ T6145] tracefs: Bad value for 'gid' [ 115.320248][ T6145] tracefs: Bad value for 'gid' [ 115.360026][ T5966] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 115.360368][ T5966] dvb-usb: bulk message failed: -22 (3/0) [ 115.583822][ T5966] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 115.585993][ T5966] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 115.586101][ T5966] usb 3-1: media controller created [ 115.597059][ T5966] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.641392][ T6133] dibusb: i2c wr: len=61 is too big! [ 115.641392][ T6133] [ 115.648363][ T5966] dvb-usb: bulk message failed: -22 (6/0) [ 115.648507][ T5966] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 115.840988][ T5966] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 115.845616][ T6150] loop0: detected capacity change from 0 to 512 [ 115.859854][ T6150] EXT4-fs: inline encryption not supported [ 115.859887][ T6150] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.876804][ T6150] EXT4-fs (loop0): Test dummy encryption mode enabled [ 115.949454][ T6150] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.89: inode #13: comm syz.0.89: iget: illegal inode # [ 115.949646][ T6150] loop0: lost filesystem error report for type 5 error -117 [ 115.951082][ T6150] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.89: couldn't read orphan inode 13 (err -117) [ 115.951119][ T6150] loop0: lost filesystem error report for type 5 error -117 [ 115.985073][ T6150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.138882][ T6150] EXT4-fs error (device loop0): ext4_resize_begin:60: comm syz.0.89: resize_inode disabled but reserved GDT blocks non-zero [ 116.165101][ T6143] loop3: detected capacity change from 0 to 32768 [ 116.266515][ T5966] dvb-usb: schedule remote query interval to 150 msecs. [ 116.266544][ T5966] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 116.322802][ T5966] usb 3-1: USB disconnect, device number 2 [ 116.438636][ T6143] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.86 (6143) [ 116.554046][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.579926][ T6155] loop2: detected capacity change from 0 to 256 [ 116.602959][ T6155] vfat: Unknown parameter 'utD8' [ 117.070904][ T6159] loop0: detected capacity change from 0 to 256 [ 117.250037][ T6143] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 117.250081][ T6143] BTRFS info (device loop3): using crc32c checksum algorithm [ 117.636198][ T6159] FAT-fs (loop0): Directory bread(block 64) failed [ 117.636236][ T6159] FAT-fs (loop0): Directory bread(block 65) failed [ 117.636338][ T6159] FAT-fs (loop0): Directory bread(block 66) failed [ 117.636364][ T6159] FAT-fs (loop0): Directory bread(block 67) failed [ 117.636517][ T6159] FAT-fs (loop0): Directory bread(block 68) failed [ 117.636541][ T6159] FAT-fs (loop0): Directory bread(block 69) failed [ 117.636648][ T6159] FAT-fs (loop0): Directory bread(block 70) failed [ 117.636672][ T6159] FAT-fs (loop0): Directory bread(block 71) failed [ 117.636776][ T6159] FAT-fs (loop0): Directory bread(block 72) failed [ 117.636802][ T6159] FAT-fs (loop0): Directory bread(block 73) failed [ 117.785317][ T6151] loop4: detected capacity change from 0 to 40427 [ 118.081555][ T5966] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 118.177582][ T6151] F2FS-fs (loop4): build fault injection rate: 771 [ 118.460528][ T6151] F2FS-fs (loop4): invalid crc value [ 118.967095][ T6155] loop2: detected capacity change from 0 to 40427 [ 118.984581][ T6155] F2FS-fs: heap/no_heap options were deprecated [ 119.020760][ T6155] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 119.020792][ T6155] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 119.042055][ T6155] F2FS-fs (loop2): invalid crc value [ 119.164128][ T6184] netlink: 'syz.1.97': attribute type 6 has an invalid length. [ 119.537740][ T6143] BTRFS error (device loop3): open_ctree failed: -4 [ 119.829293][ T6151] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 120.101271][ T37] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 120.234065][ T6155] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 120.252203][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 120.254324][ T37] usb 2-1: config 0 has an invalid interface number: 9 but max is 0 [ 120.254350][ T37] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.254369][ T37] usb 2-1: config 0 has no interface number 0 [ 120.270982][ T37] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 120.271013][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.271033][ T37] usb 2-1: Product: syz [ 120.271048][ T37] usb 2-1: Manufacturer: syz [ 120.271062][ T37] usb 2-1: SerialNumber: syz [ 120.281453][ T37] usb 2-1: config 0 descriptor?? [ 120.618648][ T37] imon 2-1:0.9: unable to register, err -19 [ 120.652411][ T37] usb 2-1: USB disconnect, device number 6 [ 120.654542][ T6155] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 120.655314][ T6155] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 120.884237][ T6202] netlink: 'syz.3.102': attribute type 10 has an invalid length. [ 120.932311][ T6205] netlink: 'syz.3.102': attribute type 10 has an invalid length. [ 120.932334][ T6205] netlink: 40 bytes leftover after parsing attributes in process `syz.3.102'. [ 121.606051][ T6202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.626748][ T6207] loop4: detected capacity change from 0 to 4096 [ 121.672151][ T5966] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 121.709238][ T6207] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 121.824611][ T6213] loop0: detected capacity change from 0 to 256 [ 121.825565][ T6202] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 121.826008][ T6205] batadv0: entered promiscuous mode [ 121.826032][ T6205] batadv0: entered allmulticast mode [ 121.863655][ T5966] usb 2-1: Using ep0 maxpacket: 16 [ 121.881817][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.881854][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.881879][ T5966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 121.881925][ T5966] usb 2-1: New USB device found, idVendor=045e, idProduct=fc40, bcdDevice=72.a8 [ 121.881950][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.980650][ T6205] bond0: (slave batadv0): Releasing backup interface [ 122.009171][ T5966] usb 2-1: config 0 descriptor?? [ 122.205237][ T6205] bridge0: port 3(batadv0) entered blocking state [ 122.206418][ T6205] bridge0: port 3(batadv0) entered disabled state [ 122.442877][ T1750] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 122.442900][ T1750] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 122.802001][ T6207] ntfs3(loop4): ino=19, mi_enum_attr [ 122.802274][ T6207] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 122.974835][ T6219] netlink: 16 bytes leftover after parsing attributes in process `syz.0.109'. [ 123.224728][ T5966] hid-generic 0003:045E:FC40.0002: hidraw0: USB HID v0.00 Device [HID 045e:fc40] on usb-dummy_hcd.1-1/input0 [ 123.275558][ T5966] usb 2-1: USB disconnect, device number 7 [ 123.303443][ T6207] ntfs3(loop4): failed to convert "c46c" to iso8859-13 [ 123.333558][ T6207] ntfs3(loop4): ino=20, mi_enum_attr [ 123.555776][ T6222] fido_id[6222]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 124.337470][ T6241] macvlan2: entered promiscuous mode [ 124.349488][ T6243] loop3: detected capacity change from 0 to 1024 [ 124.407131][ T6247] loop4: detected capacity change from 0 to 512 [ 124.417692][ T6243] hfsplus: b-tree write err: -5, ino 2 [ 124.599225][ T13] hfsplus: b-tree write err: -5, ino 25 [ 124.599469][ T13] hfsplus: b-tree write err: -5, ino 4 [ 124.599615][ T13] hfsplus: b-tree write err: -5, ino 2 [ 124.599733][ T13] hfsplus: b-tree write err: -5, ino 26 [ 124.649070][ T6247] EXT4-fs (loop4): 1 truncate cleaned up [ 124.804523][ T6247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.046779][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.147436][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'. [ 125.434977][ T6266] loop1: detected capacity change from 0 to 512 [ 125.554015][ T6266] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 125.554039][ T6266] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 125.646007][ T6266] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.127: bad orphan inode 131083 [ 125.646064][ T6266] loop1: lost filesystem error report for type 5 error -117 [ 125.749832][ T6266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.787535][ T6278] loop3: detected capacity change from 0 to 128 [ 125.862534][ T6280] loop0: detected capacity change from 0 to 128 [ 126.089090][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.258608][ T6278] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 126.258648][ T6278] hpfs: filesystem error: improperly stopped [ 126.258664][ T6278] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 126.258681][ T6278] hpfs: You really don't want any checks? You are crazy... [ 126.258696][ T6278] hpfs: Code page index out of array [ 126.258705][ T6278] hpfs: code page support is disabled [ 126.259757][ T6278] hpfs: hpfs_map_4sectors(): unaligned read [ 126.260259][ T6278] hpfs: hpfs_map_4sectors(): unaligned read [ 126.260273][ T6278] hpfs: filesystem error: unable to find root dir [ 126.470875][ T6278] hpfs: hpfs_map_4sectors(): unaligned read [ 126.583164][ T6292] loop0: detected capacity change from 0 to 64 [ 126.641690][ T6291] loop1: detected capacity change from 0 to 2048 [ 126.888006][ T6291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.287749][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.540547][ T6305] loop1: detected capacity change from 0 to 256 [ 127.725060][ T6305] FAT-fs (loop1): Directory bread(block 64) failed [ 127.725101][ T6305] FAT-fs (loop1): Directory bread(block 65) failed [ 127.725344][ T6305] FAT-fs (loop1): Directory bread(block 66) failed [ 127.725373][ T6305] FAT-fs (loop1): Directory bread(block 67) failed [ 127.725491][ T6305] FAT-fs (loop1): Directory bread(block 68) failed [ 127.725517][ T6305] FAT-fs (loop1): Directory bread(block 69) failed [ 127.725629][ T6305] FAT-fs (loop1): Directory bread(block 70) failed [ 127.725654][ T6305] FAT-fs (loop1): Directory bread(block 71) failed [ 127.725763][ T6305] FAT-fs (loop1): Directory bread(block 72) failed [ 127.725788][ T6305] FAT-fs (loop1): Directory bread(block 73) failed [ 128.088544][ T6285] loop4: detected capacity change from 0 to 32768 [ 128.555957][ T5966] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 128.659100][ T6319] netlink: 32 bytes leftover after parsing attributes in process `syz.1.148'. [ 128.716219][ T5966] usb 3-1: Using ep0 maxpacket: 32 [ 128.725116][ T5966] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 128.725149][ T5966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.725169][ T5966] usb 3-1: Product: syz [ 128.725183][ T5966] usb 3-1: Manufacturer: syz [ 128.725198][ T5966] usb 3-1: SerialNumber: syz [ 128.756393][ T5966] usb 3-1: config 0 descriptor?? [ 128.881837][ T5966] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 128.885354][ T5966] dvb-usb: bulk message failed: -22 (4/0) [ 128.885376][ T5966] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 128.885534][ T5966] dvb-usb: bulk message failed: -22 (5/0) [ 128.885548][ T5966] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 128.930115][ T6285] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 129.221824][ T5966] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 129.223159][ T5966] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 129.223215][ T5966] usb 3-1: media controller created [ 129.431462][ T6285] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 129.480711][ T6285] XFS (loop4): Starting recovery (logdev: internal) [ 129.620129][ T5966] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.702437][ T6285] XFS (loop4): Ending recovery (logdev: internal) [ 129.869677][ T5824] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 129.905963][ T5966] usb 3-1: selecting invalid altsetting 3 [ 129.905988][ T5966] ttusb2: set interface to alts=3 failed [ 130.453613][ T5966] DVB: Unable to find symbol tda10086_attach() [ 130.453632][ T5966] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 130.456542][ T5966] dvb-usb: bulk message failed: -22 (4/0) [ 130.456565][ T5966] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 130.456703][ T5966] dvb-usb: bulk message failed: -22 (5/0) [ 130.456720][ T5966] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 130.456783][ T5966] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 130.483598][ T5966] usb 3-1: USB disconnect, device number 3 [ 130.865448][ T5829] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 130.896803][ T5966] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 131.034616][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.034652][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.034673][ T5829] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 131.034715][ T5829] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 131.034739][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.334403][ T5829] usb 4-1: config 0 descriptor?? [ 131.351477][ T6370] loop1: detected capacity change from 0 to 2048 [ 131.744540][ T6375] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.968787][ T5829] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 131.968842][ T5829] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 131.968870][ T5829] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 131.968895][ T5829] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 131.968921][ T5829] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 132.084894][ T5829] kovaplus 0003:1E7D:2D50.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 132.369840][ T5829] usb 4-1: USB disconnect, device number 3 [ 132.533010][ T6378] fido_id[6378]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 132.711663][ T37] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 132.811808][ T6388] loop1: detected capacity change from 0 to 2048 [ 132.872725][ T37] usb 3-1: Using ep0 maxpacket: 8 [ 132.882871][ T37] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 132.882901][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 132.882923][ T37] usb 3-1: Product: syz [ 132.882938][ T37] usb 3-1: Manufacturer: syz [ 132.882952][ T37] usb 3-1: SerialNumber: syz [ 132.928658][ T37] usb 3-1: config 0 descriptor?? [ 133.078783][ T37] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 133.278427][ T37] gspca_sn9c2028: read1 error -32 [ 133.286795][ T5884] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 133.390265][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.399753][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.455720][ T6388] UDF-fs: warning (device loop1): udf_verify_domain_identifier: Not OSTA UDF compliant logical volume descriptor. [ 133.455787][ T6388] UDF-fs: warning (device loop1): udf_fill_super: No fileset found [ 133.501317][ T5884] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 133.501351][ T5884] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 133.501372][ T5884] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 133.501393][ T5884] usb 5-1: config 220 has no interface number 2 [ 133.501470][ T5884] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 133.501500][ T5884] usb 5-1: config 220 interface 0 has no altsetting 0 [ 133.501521][ T5884] usb 5-1: config 220 interface 76 has no altsetting 0 [ 133.501541][ T5884] usb 5-1: config 220 interface 1 has no altsetting 0 [ 133.508571][ T37] gspca_sn9c2028: read1 error -71 [ 133.508670][ T37] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -71 [ 133.597904][ T37] usb 3-1: USB disconnect, device number 4 [ 133.618117][ T5884] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 133.618150][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.618172][ T5884] usb 5-1: Product: syz [ 133.618188][ T5884] usb 5-1: Manufacturer: syz [ 133.618205][ T5884] usb 5-1: SerialNumber: syz [ 134.028033][ T5828] Bluetooth: hci4: command tx timeout [ 134.227746][ T5884] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 134.227787][ T5884] uvcvideo 5-1:220.0: No valid video chain found. [ 134.227916][ T5884] usb 5-1: selecting invalid altsetting 0 [ 134.344668][ T5884] usb 5-1: selecting invalid altsetting 0 [ 134.344707][ T5884] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 134.372728][ T5884] usb 5-1: USB disconnect, device number 2 [ 134.508042][ T6405] Dead loop on virtual device ip6_vti0 (net 26), fix it urgently! [ 134.871295][ T6424] netlink: 'syz.0.177': attribute type 2 has an invalid length. [ 135.089304][ T38] audit: type=1326 audit(1776124144.974:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.1.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4069c819 code=0x7ffc0000 [ 135.089362][ T38] audit: type=1326 audit(1776124145.014:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.1.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8b4065957b code=0x7ffc0000 [ 135.089407][ T38] audit: type=1326 audit(1776124145.014:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.1.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f8b40658c6c code=0x7ffc0000 [ 135.089459][ T38] audit: type=1326 audit(1776124145.094:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.1.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4069c819 code=0x7ffc0000 [ 135.089503][ T38] audit: type=1326 audit(1776124145.094:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.1.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8b40658cce code=0x7ffc0000 [ 135.089549][ T38] audit: type=1326 audit(1776124145.094:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.1.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4069c819 code=0x7ffc0000 [ 135.089594][ T38] audit: type=1326 audit(1776124145.094:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.1.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4069c819 code=0x7ffc0000 [ 135.089639][ T38] audit: type=1326 audit(1776124145.094:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.1.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8b4069c4ab code=0x7ffc0000 [ 135.089681][ T38] audit: type=1326 audit(1776124145.094:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.1.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8b4069c819 code=0x7ffc0000 [ 135.089728][ T38] audit: type=1326 audit(1776124145.094:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.1.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8b4069c582 code=0x7ffc0000 [ 135.149940][ T6430] loop1: detected capacity change from 0 to 256 [ 135.376530][ T6424] !©9: entered promiscuous mode [ 135.528327][ T6432] loop3: detected capacity change from 0 to 4096 [ 135.597872][ T6432] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 135.726278][ T6440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.953722][ T6427] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 135.953752][ T6427] FAT-fs (loop1): Filesystem has been set read-only [ 136.298665][ T6451] 9p: p9: multiple sources not supported [ 136.918431][ T6461] loop2: detected capacity change from 0 to 16 [ 137.448581][ T6461] erofs (device loop2): mounted with root inode @ nid 36. [ 137.589165][ T6449] loop0: detected capacity change from 0 to 32768 [ 137.661459][ T6449] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 137.962720][ T6449] XFS (loop0): Ending clean mount [ 138.435966][ T6457] loop1: detected capacity change from 0 to 40427 [ 138.453524][ T6457] F2FS-fs (loop1): build fault injection rate: 771 [ 138.480373][ T6457] F2FS-fs (loop1): invalid crc value [ 138.858590][ T6491] loop4: detected capacity change from 0 to 512 [ 139.084159][ T5825] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 139.216454][ T6457] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 139.306687][ T6491] FAT-fs (loop4): Directory bread(block 199916) failed [ 139.306729][ T6491] FAT-fs (loop4): Directory bread(block 199917) failed [ 139.306754][ T6491] FAT-fs (loop4): Directory bread(block 199918) failed [ 139.306779][ T6491] FAT-fs (loop4): Directory bread(block 199919) failed [ 139.306804][ T6491] FAT-fs (loop4): Directory bread(block 199920) failed [ 139.306828][ T6491] FAT-fs (loop4): Directory bread(block 199921) failed [ 139.306853][ T6491] FAT-fs (loop4): Directory bread(block 199922) failed [ 139.306878][ T6491] FAT-fs (loop4): Directory bread(block 199923) failed [ 139.362141][ T6457] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 139.450771][ T6457] F2FS-fs (loop1): Can't flush 4 in 0 for SEGS_PER_SEC 1 != 1 [ 139.460691][ T6491] FAT-fs (loop4): Directory bread(block 199916) failed [ 139.460728][ T6491] FAT-fs (loop4): Directory bread(block 199917) failed [ 139.639268][ T5823] syz-executor: attempt to access beyond end of device [ 139.639268][ T5823] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 139.708037][ T5823] CPU: 1 UID: 0 PID: 5823 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 139.708070][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 139.708083][ T5823] Call Trace: [ 139.708091][ T5823] [ 139.708100][ T5823] dump_stack_lvl+0xe8/0x150 [ 139.708135][ T5823] f2fs_stop_checkpoint+0x383/0x540 [ 139.708172][ T5823] f2fs_write_end_io+0x1274/0x1740 [ 139.708233][ T5823] __submit_merged_bio+0x256/0x6a0 [ 139.708274][ T5823] __submit_merged_write_cond+0x3c9/0x4e0 [ 139.708318][ T5823] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 139.708376][ T5823] f2fs_write_data_pages+0x287e/0x34f0 [ 139.708440][ T5823] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 139.708520][ T5823] ? do_raw_spin_lock+0x12b/0x2f0 [ 139.708561][ T5823] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 139.708594][ T5823] ? lockdep_hardirqs_on+0x7a/0x110 [ 139.708625][ T5823] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 139.708657][ T5823] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 139.708684][ T5823] ? reacquire_held_locks+0x104/0x190 [ 139.708716][ T5823] ? rt_spin_lock+0x1e0/0x400 [ 139.708751][ T5823] ? rt_spin_unlock+0x14f/0x200 [ 139.708782][ T5823] ? rt_spin_unlock+0x160/0x200 [ 139.708806][ T5823] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 139.708832][ T5823] do_writepages+0x32e/0x550 [ 139.708863][ T5823] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 139.708892][ T5823] ? rt_spin_unlock+0x14f/0x200 [ 139.708929][ T5823] filemap_fdatawrite+0x1ec/0x2f0 [ 139.708964][ T5823] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 139.708991][ T5823] ? __lock_acquire+0x6b5/0x2cf0 [ 139.709066][ T5823] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 139.709102][ T5823] ? rt_spin_unlock+0x160/0x200 [ 139.709131][ T5823] f2fs_sync_dirty_inodes+0x30e/0x830 [ 139.709174][ T5823] f2fs_write_checkpoint+0x9df/0x26a0 [ 139.709247][ T5823] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 139.709319][ T5823] ? kfree+0x1c5/0x6c0 [ 139.709345][ T5823] ? __wake_up_common_lock+0x18a/0x1e0 [ 139.709371][ T5823] ? f2fs_stop_gc_thread+0x82/0xb0 [ 139.709409][ T5823] kill_f2fs_super+0x314/0x730 [ 139.709440][ T5823] ? __pfx_kill_f2fs_super+0x10/0x10 [ 139.709480][ T5823] ? lockdep_hardirqs_on+0x7a/0x110 [ 139.709527][ T5823] deactivate_locked_super+0xbc/0x130 [ 139.709560][ T5823] cleanup_mnt+0x437/0x4d0 [ 139.709592][ T5823] ? _raw_spin_unlock_irq+0x23/0x50 [ 139.709627][ T5823] task_work_run+0x1d9/0x270 [ 139.709663][ T5823] ? __pfx_task_work_run+0x10/0x10 [ 139.709703][ T5823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.709728][ T5823] exit_to_user_mode_loop+0xed/0x480 [ 139.709755][ T5823] ? rcu_is_watching+0x15/0xb0 [ 139.709789][ T5823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.709814][ T5823] do_syscall_64+0x33e/0xf80 [ 139.709842][ T5823] ? trace_irq_disable+0x3b/0x140 [ 139.709868][ T5823] ? clear_bhb_loop+0x40/0x90 [ 139.709894][ T5823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.709915][ T5823] RIP: 0033:0x7f8b4069da57 [ 139.709937][ T5823] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 139.709954][ T5823] RSP: 002b:00007ffc7ec52148 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 139.709978][ T5823] RAX: 0000000000000000 RBX: 00007f8b40732048 RCX: 00007f8b4069da57 [ 139.709992][ T5823] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7ec52200 [ 139.710005][ T5823] RBP: 00007ffc7ec52200 R08: 00007ffc7ec53200 R09: 00000000ffffffff [ 139.710019][ T5823] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc7ec53290 [ 139.710033][ T5823] R13: 00007f8b40732048 R14: 0000000000021ee3 R15: 00007ffc7ec532d0 [ 139.710069][ T5823] [ 139.810220][ T5823] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 139.841332][ T6502] netlink: 'syz.3.208': attribute type 6 has an invalid length. [ 139.841354][ T6502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.208'. [ 140.023781][ T6503] loop2: detected capacity change from 0 to 256 [ 140.249140][ T6508] process 'syz.3.210' launched './file1' with NULL argv: empty string added [ 140.481118][ T6503] FAT-fs (loop2): Directory bread(block 64) failed [ 140.481156][ T6503] FAT-fs (loop2): Directory bread(block 65) failed [ 140.481277][ T6503] FAT-fs (loop2): Directory bread(block 66) failed [ 140.481303][ T6503] FAT-fs (loop2): Directory bread(block 67) failed [ 140.481420][ T6503] FAT-fs (loop2): Directory bread(block 68) failed [ 140.481444][ T6503] FAT-fs (loop2): Directory bread(block 69) failed [ 140.481550][ T6503] FAT-fs (loop2): Directory bread(block 70) failed [ 140.481574][ T6503] FAT-fs (loop2): Directory bread(block 71) failed [ 140.481703][ T6503] FAT-fs (loop2): Directory bread(block 72) failed [ 140.481727][ T6503] FAT-fs (loop2): Directory bread(block 73) failed [ 141.290000][ T6520] netlink: 56 bytes leftover after parsing attributes in process `syz.2.213'. [ 141.290260][ T6520] netlink: 24 bytes leftover after parsing attributes in process `syz.2.213'. [ 141.394687][ T6525] loop0: detected capacity change from 0 to 1024 [ 142.177745][ T6541] loop0: detected capacity change from 0 to 2048 [ 142.323099][ T6541] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 142.323300][ T6541] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 142.323316][ T6541] UDF-fs: Scanning with blocksize 512 failed [ 142.471131][ T6541] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.543807][ T6552] netlink: 56 bytes leftover after parsing attributes in process `syz.1.229'. [ 143.061501][ T6561] loop2: detected capacity change from 0 to 4096 [ 143.289710][ T6565] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.380630][ T6555] overlayfs: upper fs needs to support d_type. [ 143.661008][ T6561] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean [ 143.763214][ T6555] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 143.763262][ T6555] overlayfs: failed to set xattr on upper [ 143.763273][ T6555] overlayfs: ...falling back to redirect_dir=nofollow. [ 143.763283][ T6555] overlayfs: ...falling back to index=off. [ 143.763292][ T6555] overlayfs: ...falling back to uuid=null. [ 144.162587][ T6557] loop3: detected capacity change from 0 to 32768 [ 144.235756][ T6557] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.231 (6557) [ 144.670320][ T6557] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 144.670358][ T6557] BTRFS info (device loop3): using sha256 checksum algorithm [ 145.275467][ T6557] BTRFS info (device loop3): enabling ssd optimizations [ 145.275499][ T6557] BTRFS info (device loop3): turning on async discard [ 145.275520][ T6557] BTRFS info (device loop3): enabling free space tree [ 145.634088][ T5884] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 145.792889][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 145.792930][ T5884] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 145.792977][ T5884] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 145.793006][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.878894][ T5884] usb 5-1: config 0 descriptor?? [ 145.880207][ T6613] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 146.082144][ T5835] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.327913][ T5884] hid (null): usage index exceeded [ 146.327938][ T5884] hid (null): unknown global tag 0xe [ 146.327957][ T5884] hid (null): unknown global tag 0xe [ 146.425295][ T5884] input: HID 28bd:0909 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0909.0004/input/input6 [ 146.481238][ T6588] loop1: detected capacity change from 0 to 32768 [ 146.613073][ T6618] loop0: detected capacity change from 0 to 64 [ 146.957569][ T6598] loop2: detected capacity change from 0 to 32768 [ 147.027194][ T5884] uclogic 0003:28BD:0909.0004: input,hidraw0: USB HID v0.08 Mouse [HID 28bd:0909] on usb-dummy_hcd.4-1/input0 [ 147.121883][ T6598] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 147.150719][ T5884] usb 5-1: USB disconnect, device number 3 [ 147.367672][ T38] kauditd_printk_skb: 64 callbacks suppressed [ 147.367696][ T38] audit: type=1800 audit(1776124157.364:76): pid=6588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.248" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 147.628899][ T6598] XFS (loop2): Ending clean mount [ 147.780849][ T6637] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.256'. [ 148.257007][ T6638] fido_id[6638]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 148.320713][ T6598] XFS (loop2): Quotacheck needed: Please wait. [ 148.559546][ T6642] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 149.114477][ T6651] loop3: detected capacity change from 0 to 16 [ 149.196306][ T6651] erofs (device loop3): mounted with root inode @ nid 36. [ 149.478459][ T6655] loop0: detected capacity change from 0 to 512 [ 149.512729][ T6598] XFS (loop2): Quotacheck: Unsuccessful (Error -12): Disabling quotas. [ 149.739788][ T6598] loop2: lost filesystem error report for type 5 error -117 [ 149.768675][ T6655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.768864][ T6655] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.050676][ T5837] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 150.263718][ T5837] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 150.429634][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.272'. [ 150.429659][ T6673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.272'. [ 150.429685][ T6673] netlink: 'syz.4.272': attribute type 11 has an invalid length. [ 151.156356][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.358053][ T6692] Invalid ELF header type: 0 != 1 [ 152.071347][ T6707] loop1: detected capacity change from 0 to 2048 [ 152.089646][ T6707] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 152.122421][ T6710] warning: `syz.4.289' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 152.297271][ T6717] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.348716][ T6736] loop0: detected capacity change from 0 to 1024 [ 153.547822][ T6736] hfsplus: b-tree write err: -5, ino 2 [ 153.616504][ T5879] kernel read not supported for file /media2 (pid: 5879 comm: kworker/0:3) [ 153.780144][ T1750] hfsplus: b-tree write err: -5, ino 25 [ 153.780378][ T1750] hfsplus: b-tree write err: -5, ino 4 [ 153.780496][ T1750] hfsplus: b-tree write err: -5, ino 2 [ 153.780622][ T1750] hfsplus: b-tree write err: -5, ino 26 [ 153.854667][ T37] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 154.052691][ T37] usb 3-1: Using ep0 maxpacket: 16 [ 154.055479][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.055516][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.055541][ T37] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 154.055588][ T37] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 154.055615][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.091075][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.307'. [ 154.176018][ T37] usb 3-1: config 0 descriptor?? [ 154.277947][ T6756] loop4: detected capacity change from 0 to 64 [ 154.734842][ T6766] loop0: detected capacity change from 0 to 1024 [ 154.746760][ T37] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 154.749101][ T6766] EXT4-fs: Ignoring removed bh option [ 154.772278][ T6766] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 154.832115][ T37] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 154.832153][ T37] microsoft 0003:045E:07DA.0005: no inputs found [ 154.832168][ T37] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 154.995580][ T5879] usb 3-1: USB disconnect, device number 5 [ 155.208101][ T6766] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #3: block 1: comm syz.0.314: lblock 1 mapped to illegal pblock 1 (length 1) [ 155.246735][ T6766] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 155.320860][ T6775] loop1: detected capacity change from 0 to 1024 [ 155.339633][ T6775] EXT4-fs: Ignoring removed bh option [ 155.352013][ C1] EXT4-fs (loop0): initial error at time 1776124165: ext4_map_blocks:833: inode 3: block 1 [ 155.353332][ C1] EXT4-fs (loop0): last error at time 1776124165: ext4_map_blocks:833: inode 3: block 1 [ 155.364969][ T6766] Quota error (device loop0): write_blk: dquota write failed [ 155.365017][ T6766] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 155.365105][ T6766] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.314: Failed to acquire dquot type 0 [ 155.365129][ T6766] loop0: lost filesystem error report for type 5 error -117 [ 155.441703][ T6776] fido_id[6776]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 155.444412][ T6766] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.314: Freeing blocks not in datazone - block = 0, count = 4096 [ 155.444448][ T6766] loop0: lost filesystem error report for type 5 error -117 [ 155.521803][ T6775] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.838451][ T6766] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.314: Invalid inode bitmap blk 0 in block_group 0 [ 155.838492][ T6766] loop0: lost filesystem error report for type 5 error -117 [ 155.877533][ T6766] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 155.877565][ T6766] loop0: lost filesystem error report for type 5 error -117 [ 155.913678][ T6766] EXT4-fs (loop0): 1 orphan inode deleted [ 155.987519][ T164] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 155.987566][ T164] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 156.050911][ T6766] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.243054][ T164] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 156.244068][ T164] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 0 [ 156.385639][ T6786] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 156.405337][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.733540][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.980892][ T6806] macvlan2: entered promiscuous mode [ 157.042162][ T5966] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 157.212479][ T5966] usb 5-1: Using ep0 maxpacket: 16 [ 157.222527][ T5966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.222561][ T5966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.222583][ T5966] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 157.222626][ T5966] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 157.222649][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.355829][ T6813] usb usb1: usbfs: process 6813 (syz.2.331) did not claim interface 0 before use [ 157.368499][ T5966] usb 5-1: config 0 descriptor?? [ 157.448405][ T6816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.332'. [ 157.894759][ T5966] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 157.894798][ T5966] microsoft 0003:045E:07DA.0006: no inputs found [ 157.894814][ T5966] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 158.075807][ T5907] usb 5-1: USB disconnect, device number 4 [ 158.136445][ T6822] loop0: detected capacity change from 0 to 512 [ 158.137609][ T6822] EXT4-fs: Ignoring removed bh option [ 158.233351][ T6822] EXT4-fs (loop0): 1 truncate cleaned up [ 158.257622][ T6822] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.449472][ T6824] fido_id[6824]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 158.523979][ T6833] tipc: Started in network mode [ 158.524013][ T6833] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 158.524240][ T6833] tipc: Enabled bearer , priority 10 [ 158.921790][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.096595][ T6839] netlink: 'syz.4.342': attribute type 10 has an invalid length. [ 159.159505][ T6840] netlink: 'syz.4.342': attribute type 10 has an invalid length. [ 159.159530][ T6840] netlink: 40 bytes leftover after parsing attributes in process `syz.4.342'. [ 159.226925][ T6838] syz_tun: entered promiscuous mode [ 159.227131][ T6838] macvtap1: entered promiscuous mode [ 159.227292][ T6838] macvtap1: entered allmulticast mode [ 159.227301][ T6838] syz_tun: entered allmulticast mode [ 159.359477][ T6846] loop2: detected capacity change from 0 to 256 [ 159.375080][ T6838] syz_tun: left allmulticast mode [ 159.375475][ T6838] syz_tun: left promiscuous mode [ 159.851933][ T6839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.870064][ T6839] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 159.877334][ T6840] batadv0: entered promiscuous mode [ 159.877364][ T6840] batadv0: entered allmulticast mode [ 159.945197][ T6840] bond0: (slave batadv0): Releasing backup interface [ 160.015426][ T6840] bridge0: port 3(batadv0) entered blocking state [ 160.015617][ T6840] bridge0: port 3(batadv0) entered disabled state [ 160.031471][ T5827] tipc: Node number set to 8432298 [ 160.148623][ T3543] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 160.148638][ T3543] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 160.443258][ T6864] loop3: detected capacity change from 0 to 2048 [ 160.484660][ T6864] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 160.544231][ T6868] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.658808][ T6870] loop1: detected capacity change from 0 to 1024 [ 161.242531][ T6870] hfsplus: bad catalog file entry [ 161.375609][ T998] hfsplus: bad catalog file entry [ 161.585918][ T6888] netlink: 'syz.1.363': attribute type 10 has an invalid length. [ 161.670350][ T6891] netlink: 'syz.1.363': attribute type 10 has an invalid length. [ 161.670373][ T6891] netlink: 40 bytes leftover after parsing attributes in process `syz.1.363'. [ 161.754942][ T6888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.789574][ T6888] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 161.790444][ T6891] batadv0: entered promiscuous mode [ 161.790478][ T6891] batadv0: entered allmulticast mode [ 161.911924][ T6891] bond0: (slave batadv0): Releasing backup interface [ 161.915917][ T6897] netlink: 348 bytes leftover after parsing attributes in process `syz.3.366'. [ 161.945147][ T6865] loop0: detected capacity change from 0 to 32768 [ 162.099661][ T6891] bridge0: port 3(batadv0) entered blocking state [ 162.107361][ T6891] bridge0: port 3(batadv0) entered disabled state [ 162.221245][ T1310] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 162.221265][ T1310] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 162.552377][ T6906] netlink: zone id is out of range [ 162.552395][ T6906] netlink: zone id is out of range [ 162.552484][ T6906] netlink: zone id is out of range [ 162.552601][ T6906] netlink: zone id is out of range [ 162.552682][ T6906] netlink: zone id is out of range [ 162.558300][ T6906] netlink: zone id is out of range [ 162.558463][ T6906] netlink: zone id is out of range [ 162.558507][ T6906] netlink: zone id is out of range [ 162.558774][ T6906] netlink: zone id is out of range [ 162.558880][ T6906] netlink: zone id is out of range [ 163.232290][ T5884] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 163.295512][ T6903] Bad maxslot:44 in dtpage (expected 128) [ 163.295512][ T6903] [ 163.295541][ T6903] ERROR: (device loop0): dtSearch: DT_GETPAGE: dtree page corrupt [ 163.295541][ T6903] [ 163.426912][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.426949][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.427059][ T5884] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 163.427084][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.499046][ T5884] usb 2-1: config 0 descriptor?? [ 163.552225][ T6903] ERROR: (device loop0): remounting filesystem as read-only [ 163.552266][ T6903] jfs_mkdir: dtSearch returned -5 [ 163.962206][ T32] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 164.061923][ T5884] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0 [ 164.062004][ T5884] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0 [ 164.062032][ T5884] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0 [ 164.062059][ T5884] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0 [ 164.062085][ T5884] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0 [ 164.115047][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 164.142769][ T32] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.142805][ T32] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 164.142835][ T32] usb 3-1: config 0 interface 0 has no altsetting 0 [ 164.142869][ T32] usb 3-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 164.142893][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.211727][ T32] usb 3-1: config 0 descriptor?? [ 164.241749][ T5884] hid-steam 0003:28DE:1142.0007: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 164.277597][ T5884] usb 2-1: USB disconnect, device number 8 [ 164.411380][ T6930] loop3: detected capacity change from 0 to 512 [ 164.461537][ T6931] fido_id[6931]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 164.783269][ T32] steelseries 0003:1038:12C2.0008: unknown main item tag 0x0 [ 164.783310][ T32] steelseries 0003:1038:12C2.0008: unknown main item tag 0x0 [ 164.783336][ T32] steelseries 0003:1038:12C2.0008: unknown main item tag 0x0 [ 164.783362][ T32] steelseries 0003:1038:12C2.0008: unknown main item tag 0x0 [ 164.783388][ T32] steelseries 0003:1038:12C2.0008: unknown main item tag 0x0 [ 164.971360][ T820] usb 3-1: USB disconnect, device number 6 [ 165.220549][ T6936] loop1: detected capacity change from 0 to 1764 [ 165.462240][ T32] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 165.645618][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 165.648319][ T32] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 165.648352][ T32] usb 1-1: config 0 has no interface number 0 [ 165.648403][ T32] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 165.651428][ T32] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 165.651462][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.651485][ T32] usb 1-1: Product: syz [ 165.651501][ T32] usb 1-1: Manufacturer: syz [ 165.651517][ T32] usb 1-1: SerialNumber: syz [ 165.703224][ T32] usb 1-1: config 0 descriptor?? [ 165.705270][ T6938] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 165.866087][ T6944] loop2: detected capacity change from 0 to 256 [ 165.987806][ T6938] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 166.390764][ T38] audit: type=1326 audit(1776124176.394:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83fcac819 code=0x7ffc0000 [ 166.390926][ T38] audit: type=1326 audit(1776124176.394:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83fcac819 code=0x7ffc0000 [ 166.406806][ T32] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 166.407428][ T32] asix 1-1:0.188: probe with driver asix failed with error -71 [ 166.466850][ T38] audit: type=1326 audit(1776124176.474:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd83fcac819 code=0x7ffc0000 [ 166.477055][ T38] audit: type=1326 audit(1776124176.474:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83fcac819 code=0x7ffc0000 [ 166.477154][ T38] audit: type=1326 audit(1776124176.474:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83fcac819 code=0x7ffc0000 [ 166.477195][ T38] audit: type=1326 audit(1776124176.474:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd83fcac819 code=0x7ffc0000 [ 166.477235][ T38] audit: type=1326 audit(1776124176.474:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83fcac819 code=0x7ffc0000 [ 166.502707][ T32] usb 1-1: USB disconnect, device number 2 [ 166.625251][ T6934] loop4: detected capacity change from 0 to 32768 [ 166.649117][ T6934] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.384 (6934) [ 166.801647][ T6934] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 166.801687][ T6934] BTRFS info (device loop4): using blake2b checksum algorithm [ 166.874977][ T6972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.395'. [ 166.966069][ T6972] ipvlan2: entered allmulticast mode [ 166.966095][ T6972] syz_tun: entered allmulticast mode [ 167.115987][ T6934] BTRFS info (device loop4): enabling ssd optimizations [ 167.116016][ T6934] BTRFS info (device loop4): turning on async discard [ 167.116034][ T6934] BTRFS info (device loop4): enabling free space tree [ 167.812273][ T6994] loop3: detected capacity change from 0 to 128 [ 168.556582][ T5827] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 168.724580][ T5827] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 168.724615][ T5827] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 168.724642][ T5827] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 168.737507][ T5827] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 168.737538][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.737558][ T5827] usb 3-1: Product: syz [ 168.737573][ T5827] usb 3-1: Manufacturer: syz [ 168.737587][ T5827] usb 3-1: SerialNumber: syz [ 168.813435][ T5827] usb 3-1: config 0 descriptor?? [ 168.816481][ T7005] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 168.821112][ T7005] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 168.857480][ T5827] usb 3-1: ucan: probing device on interface #0 [ 169.101057][ T7016] loop3: detected capacity change from 0 to 512 [ 169.266029][ T5827] usb 3-1: ucan: device reported invalid device info [ 169.266057][ T5827] usb 3-1: ucan: probe failed; try to update the device firmware [ 169.335996][ T7016] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.412: missing EA_INODE flag [ 169.336035][ T7016] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 169.346584][ C0] EXT4-fs (loop3): initial error at time 1776124179: ext4_xattr_inode_iget:441: inode 12 [ 169.346628][ C0] EXT4-fs (loop3): last error at time 1776124179: ext4_xattr_inode_iget:441: inode 12 [ 169.380449][ T7022] syz.0.414 uses obsolete (PF_INET,SOCK_PACKET) [ 169.397926][ T7022] sock: sock_timestamping_bind_phc: sock not bind to device [ 169.400650][ T7016] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.412: error while reading EA inode 12 err=-117 [ 169.400689][ T7016] loop3: lost filesystem error report for type 5 error -117 [ 169.401141][ T7016] EXT4-fs (loop3): 1 orphan inode deleted [ 169.467963][ T7016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.502515][ T5884] usb 3-1: USB disconnect, device number 7 [ 169.633156][ T7016] EXT4-fs: can't change dax mount option while remounting [ 169.737434][ T7026] loop1: detected capacity change from 0 to 1024 [ 169.802146][ T7026] EXT4-fs (loop1): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 169.926451][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.999038][ T7026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.208629][ T7026] EXT4-fs: Ignoring removed orlov option [ 170.256847][ T7026] EXT4-fs (loop1): can't enable nombcache during remount [ 170.435218][ T7035] netlink: 24 bytes leftover after parsing attributes in process `syz.2.419'. [ 170.538716][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.538845][ T5824] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 171.868327][ T7063] input: syz0 as /devices/virtual/input/input9 [ 171.903300][ T5884] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 172.143861][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 172.155245][ T5884] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.155308][ T5884] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 172.155335][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.278555][ T5884] usb 3-1: config 0 descriptor?? [ 172.321436][ T5884] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 172.558876][ T5884] usb 3-1: USB disconnect, device number 8 [ 173.402161][ T7084] loop2: detected capacity change from 0 to 64 [ 174.163246][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.448'. [ 174.322916][ T7111] loop3: detected capacity change from 0 to 128 [ 174.477063][ T7113] loop0: detected capacity change from 0 to 1024 [ 174.559773][ T7113] hfsplus: bad catalog entry type [ 174.700192][ T3543] hfsplus: b-tree write err: -5, ino 25 [ 174.700516][ T3543] hfsplus: b-tree write err: -5, ino 4 [ 174.737797][ T3543] hfsplus: b-tree write err: -5, ino 2 [ 175.384892][ T7135] loop2: detected capacity change from 0 to 64 [ 175.626111][ T5879] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 175.735440][ T7140] comedi comedi3: pcl818: I/O base address or length out of range [ 175.804661][ T5879] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 175.804694][ T5879] usb 1-1: config 0 has no interface number 0 [ 175.808142][ T5879] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 175.808173][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.808195][ T5879] usb 1-1: Product: syz [ 175.808210][ T5879] usb 1-1: Manufacturer: syz [ 175.808225][ T5879] usb 1-1: SerialNumber: syz [ 175.875392][ T5879] usb 1-1: config 0 descriptor?? [ 175.922126][ T5879] usb 1-1: selecting invalid altsetting 1 [ 175.923424][ T5879] dvb_ttusb_budget: ttusb_init_controller: error [ 175.923444][ T5879] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 176.064548][ T5879] DVB: Unable to find symbol stv0299_attach() [ 176.164509][ T5879] DVB: Unable to find symbol tda8083_attach() [ 176.164525][ T5879] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 176.226484][ T5879] usb 1-1: USB disconnect, device number 3 [ 176.951565][ T7171] loop0: detected capacity change from 0 to 64 [ 177.009087][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.473'. [ 178.023891][ T7201] binder: BINDER_SET_CONTEXT_MGR already set [ 178.023909][ T7201] binder: 7200:7201 ioctl 40046207 0 returned -16 [ 178.056083][ T7171] minix-fs error (device loop0): minix_rename:227: inode #2: comm syz.0.472: inode has corrupted nlink [ 178.104926][ T7205] Zero length message leads to an empty skb [ 178.427059][ T7211] netlink: 'syz.2.486': attribute type 2 has an invalid length. [ 179.864568][ T7247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.500'. [ 180.890537][ T7233] loop1: detected capacity change from 0 to 40427 [ 180.921645][ T7269] loop4: detected capacity change from 0 to 16 [ 180.975769][ T7233] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 180.975796][ T7233] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 180.981595][ T7233] F2FS-fs (loop1): invalid crc value [ 181.049638][ T7269] erofs (device loop4): mounted with root inode @ nid 36. [ 181.165613][ T7233] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 181.413513][ T7233] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 181.413551][ T7233] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 181.877894][ T7255] loop0: detected capacity change from 0 to 32768 [ 181.939918][ T7255] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 182.048995][ T7255] XFS (loop0): Ending clean mount [ 182.378776][ T7303] loop3: detected capacity change from 0 to 128 [ 182.380006][ T7303] EXT4-fs: inline encryption not supported [ 182.419886][ T7303] EXT4-fs (loop3): Test dummy encryption mode enabled [ 182.801120][ T7303] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 182.801699][ T7303] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 182.935922][ T7303] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 183.087473][ T38] audit: type=1800 audit(1776124193.094:84): pid=7303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.519" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 183.362618][ T5825] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 183.389119][ T5835] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 183.407370][ T38] audit: type=1326 audit(1776124193.414:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7311 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e742c819 code=0x7ffc0000 [ 183.407537][ T38] audit: type=1326 audit(1776124193.414:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7311 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e742c819 code=0x7ffc0000 [ 183.496025][ T38] audit: type=1326 audit(1776124193.464:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7311 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e742c819 code=0x7ffc0000 [ 183.496078][ T38] audit: type=1326 audit(1776124193.474:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7311 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e742c819 code=0x7ffc0000 [ 183.496115][ T38] audit: type=1326 audit(1776124193.474:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7311 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f37e742c819 code=0x7ffc0000 [ 183.496152][ T38] audit: type=1326 audit(1776124193.474:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7311 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e742c819 code=0x7ffc0000 [ 183.496202][ T38] audit: type=1326 audit(1776124193.474:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7311 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e742c819 code=0x7ffc0000 [ 183.496239][ T38] audit: type=1326 audit(1776124193.474:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7311 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e742c819 code=0x7ffc0000 [ 183.496276][ T38] audit: type=1326 audit(1776124193.474:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7311 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f37e742c819 code=0x7ffc0000 [ 184.104768][ T5879] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 184.255940][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 184.258821][ T5879] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 184.258860][ T5879] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.258890][ T5879] usb 4-1: config 0 interface 0 has no altsetting 0 [ 184.258926][ T5879] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 184.258951][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.411822][ T5879] usb 4-1: config 0 descriptor?? [ 184.418435][ T7316] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 184.785441][ T7327] loop4: detected capacity change from 0 to 64 [ 185.056448][ T5879] hid_parser_main: 33 callbacks suppressed [ 185.056477][ T5879] samsung 0003:0419:0001.0009: unknown main item tag 0x0 [ 185.056507][ T5879] samsung 0003:0419:0001.0009: unknown main item tag 0x0 [ 185.056533][ T5879] samsung 0003:0419:0001.0009: unknown main item tag 0x0 [ 185.056559][ T5879] samsung 0003:0419:0001.0009: unknown main item tag 0x0 [ 185.056586][ T5879] samsung 0003:0419:0001.0009: unknown main item tag 0x0 [ 185.056611][ T5879] samsung 0003:0419:0001.0009: unknown main item tag 0x0 [ 185.056636][ T5879] samsung 0003:0419:0001.0009: unknown main item tag 0x0 [ 185.056662][ T5879] samsung 0003:0419:0001.0009: unknown main item tag 0x0 [ 185.056688][ T5879] samsung 0003:0419:0001.0009: unknown main item tag 0x0 [ 185.056714][ T5879] samsung 0003:0419:0001.0009: unknown main item tag 0x0 [ 185.102648][ T7330] loop2: detected capacity change from 0 to 512 [ 185.167372][ T7330] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 185.167414][ T7330] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (4742!=33349) [ 185.183259][ T7330] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 185.183581][ T7330] EXT4-fs (loop2): orphan cleanup on readonly fs [ 185.261431][ T5879] samsung 0003:0419:0001.0009: hidraw0: USB HID v7f.fd Device [HID 0419:0001] on usb-dummy_hcd.3-1/input0 [ 185.298371][ T5879] usb 4-1: USB disconnect, device number 4 [ 185.343434][ T7330] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.531: invalid indirect mapped block 2185560079 (level 1) [ 185.343478][ T7330] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 185.352832][ C1] EXT4-fs (loop2): initial error at time 1776124195: ext4_free_branches:1023: inode 11 [ 185.352870][ C1] EXT4-fs (loop2): last error at time 1776124195: ext4_free_branches:1023: inode 11 [ 185.498829][ T7337] loop1: detected capacity change from 0 to 1024 [ 185.589925][ T7330] EXT4-fs (loop2): Remounting filesystem read-only [ 185.615465][ T7338] fido_id[7338]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 185.695615][ T7330] EXT4-fs (loop2): 1 truncate cleaned up [ 185.749846][ T7330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 185.770136][ T7337] hfsplus: bad catalog entry type [ 185.806529][ T7330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 185.923088][ T154] hfsplus: b-tree write err: -5, ino 25 [ 185.923244][ T154] hfsplus: b-tree write err: -5, ino 4 [ 185.923372][ T154] hfsplus: b-tree write err: -5, ino 2 [ 185.977536][ T7343] loop4: detected capacity change from 0 to 512 [ 186.074500][ T7343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.074660][ T7343] ext4 filesystem being mounted at /100/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.541337][ T7356] loop0: detected capacity change from 0 to 256 [ 186.779524][ T7362] loop3: detected capacity change from 0 to 128 [ 186.794535][ T5884] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 186.911577][ T7362] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.922306][ T7362] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 186.982174][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 186.984793][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.984827][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.984851][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 186.984893][ T5884] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 186.984917][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.146125][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.166821][ T5884] usb 3-1: config 0 descriptor?? [ 187.280713][ T5835] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.451533][ T7372] loop1: detected capacity change from 0 to 1024 [ 187.600196][ T7372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.785130][ T5884] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 187.864035][ T5884] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 187.972540][ T5884] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 187.972580][ T5884] microsoft 0003:045E:07DA.000A: no inputs found [ 187.972595][ T5884] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 188.043807][ T5884] usb 3-1: USB disconnect, device number 9 [ 188.061400][ T7385] loop3: detected capacity change from 0 to 1024 [ 188.147242][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.174304][ T7388] fido_id[7388]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 189.131422][ T7406] loop4: detected capacity change from 0 to 128 [ 189.197126][ T7406] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 189.197169][ T7406] hpfs: filesystem error: improperly stopped [ 189.197186][ T7406] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 189.197202][ T7406] hpfs: You really don't want any checks? You are crazy... [ 189.197215][ T7406] hpfs: Code page index out of array [ 189.197223][ T7406] hpfs: code page support is disabled [ 189.197618][ T7406] hpfs: hpfs_map_4sectors(): unaligned read [ 189.197718][ T7406] hpfs: hpfs_map_4sectors(): unaligned read [ 189.197729][ T7406] hpfs: filesystem error: unable to find root dir [ 190.131488][ T7396] loop1: detected capacity change from 0 to 32768 [ 190.393109][ T7396] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 190.594882][ T7396] XFS (loop1): Ending clean mount [ 190.910199][ T7461] loop3: detected capacity change from 0 to 128 [ 191.239396][ T7418] loop2: detected capacity change from 0 to 32768 [ 191.329691][ T5823] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 191.345085][ T7418] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 191.392076][ T7418] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 191.594451][ T7418] XFS (loop2): Ending clean mount [ 191.761121][ T7479] netlink: 32 bytes leftover after parsing attributes in process `syz.0.582'. [ 192.155246][ T7418] XFS (loop2): Quotacheck needed: Please wait. [ 192.531297][ T7464] loop4: detected capacity change from 0 to 32768 [ 192.545910][ T7464] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.578 (7464) [ 193.069821][ T7464] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 193.069856][ T7464] BTRFS info (device loop4): using sha256 checksum algorithm [ 193.215683][ T7501] loop3: detected capacity change from 0 to 512 [ 193.216898][ T7501] EXT4-fs: Ignoring removed nobh option [ 193.350327][ T7501] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 193.499377][ T7522] loop1: detected capacity change from 0 to 764 [ 193.700580][ T7464] BTRFS info (device loop4): enabling ssd optimizations [ 193.700619][ T7464] BTRFS info (device loop4): turning on async discard [ 193.700638][ T7464] BTRFS info (device loop4): enabling free space tree [ 193.775054][ T7501] EXT4-fs (loop3): 1 truncate cleaned up [ 193.778519][ T7501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.869079][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 193.869098][ T38] audit: type=1800 audit(1776124203.814:98): pid=7501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.591" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 194.169960][ T7418] XFS (loop2): Quotacheck: Done. [ 194.213712][ T5824] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 194.264743][ T7522] Symlink component flag not implemented [ 194.288367][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.393960][ T7522] Symlink component flag not implemented (116) [ 194.471562][ T5837] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 194.899306][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.899387][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.064491][ T7543] loop3: detected capacity change from 0 to 16 [ 195.138415][ T7543] erofs (device loop3): mounted with root inode @ nid 36. [ 195.287651][ T7543] erofs (device loop3): unsupported i_format 1796 of nid 86 [ 195.586038][ T7548] loop0: detected capacity change from 0 to 64 [ 196.695977][ T7558] loop0: detected capacity change from 0 to 16 [ 196.717321][ T7558] erofs (device loop0): mounted with root inode @ nid 36. [ 196.869417][ T7552] loop1: detected capacity change from 0 to 32768 [ 196.884751][ T7552] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.608 (7552) [ 196.980812][ T7535] loop4: detected capacity change from 0 to 32768 [ 197.178163][ T7550] loop3: detected capacity change from 0 to 32768 [ 197.236621][ T7535] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 197.328319][ T7552] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 197.328355][ T7552] BTRFS info (device loop1): using crc32c checksum algorithm [ 197.616292][ T7535] XFS (loop4): Ending clean mount [ 197.965543][ T7535] XFS (loop4): Quotacheck needed: Please wait. [ 198.123197][ T7552] BTRFS info (device loop1): enabling ssd optimizations [ 198.123219][ T7552] BTRFS info (device loop1): turning on flush-on-commit [ 198.123236][ T7552] BTRFS info (device loop1): enabling free space tree [ 198.123254][ T7552] BTRFS info (device loop1): enabling auto defrag [ 198.123274][ T7552] BTRFS info (device loop1): use lzo compression, level 1 [ 198.123295][ T7552] BTRFS info (device loop1): max_inline set to 4096 [ 198.155403][ T7550] JBD2: Ignoring recovery information on journal [ 198.470766][ T7552] BTRFS info (device loop1 state M): max_inline set to 4096 [ 198.471674][ T7591] BTRFS info (device loop1 state M): max_inline set to 4096 [ 198.557063][ T5823] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 198.733563][ T5827] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 198.788243][ T7550] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 198.897624][ T5827] usb 1-1: Using ep0 maxpacket: 16 [ 198.900303][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.900339][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.900364][ T5827] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 198.900408][ T5827] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 198.900433][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.041464][ T5827] usb 1-1: config 0 descriptor?? [ 199.045235][ T7535] XFS (loop4): Quotacheck: Done. [ 199.277936][ T5824] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 199.673724][ T5827] microsoft 0003:045E:07DA.000B: ignoring exceeding usage max [ 199.763156][ T5827] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 199.763193][ T5827] microsoft 0003:045E:07DA.000B: no inputs found [ 199.763208][ T5827] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway [ 199.821512][ T5827] usb 1-1: USB disconnect, device number 4 [ 200.191713][ T7599] fido_id[7599]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 200.767040][ T7608] loop0: detected capacity change from 0 to 512 [ 200.782447][ T7608] EXT4-fs: Ignoring removed nobh option [ 200.794916][ T7608] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 200.834983][ T7608] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 200.835149][ T7608] System zones: 1-12 [ 200.841408][ T7608] EXT4-fs (loop0): 1 truncate cleaned up [ 200.863819][ T7608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.141062][ T7622] loop1: detected capacity change from 0 to 1024 [ 201.149273][ T7622] EXT4-fs: Ignoring removed bh option [ 201.196889][ T7622] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 201.217115][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.434491][ T7622] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #3: block 1: comm syz.1.625: lblock 1 mapped to illegal pblock 1 (length 1) [ 201.434534][ T7622] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 201.470943][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 201.470970][ C1] EXT4-fs (loop1): initial error at time 1776124211: ext4_map_blocks:833: inode 3: block 1 [ 201.471004][ C1] EXT4-fs (loop1): last error at time 1776124211: ext4_map_blocks:833: inode 3: block 1 [ 201.483301][ T7626] i2c i2c-0: dtv_property_process_set: SET cmd 0x00002000 undefined [ 201.532429][ T7622] Quota error (device loop1): write_blk: dquota write failed [ 201.532474][ T7622] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 201.532555][ T7622] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.625: Failed to acquire dquot type 0 [ 201.532579][ T7622] loop1: lost filesystem error report for type 5 error -117 [ 201.535991][ T5835] ocfs2: Unmounting device (7,3) on (node local) [ 201.575930][ T7622] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.625: Freeing blocks not in datazone - block = 0, count = 4096 [ 201.575970][ T7622] loop1: lost filesystem error report for type 5 error -117 [ 201.662518][ T7622] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.625: Invalid inode bitmap blk 0 in block_group 0 [ 201.662560][ T7622] loop1: lost filesystem error report for type 5 error -117 [ 201.726143][ T164] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 201.726184][ T164] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 201.745898][ T7622] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 201.745927][ T7622] loop1: lost filesystem error report for type 5 error -117 [ 201.910596][ T164] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 201.910647][ T164] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 0 [ 201.910667][ T164] loop1: lost filesystem error report for type 5 error -117 [ 201.989278][ T7622] EXT4-fs (loop1): 1 orphan inode deleted [ 202.010770][ T7622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.290624][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.511769][ T7668] netlink: 'syz.3.642': attribute type 1 has an invalid length. [ 203.511796][ T7668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.642'. [ 203.511814][ T7668] netlink: 658 bytes leftover after parsing attributes in process `syz.3.642'. [ 203.511830][ T7668] netlink: 'syz.3.642': attribute type 1 has an invalid length. [ 203.682687][ T7675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.643'. [ 203.932438][ T5828] Bluetooth: hci4: command 0x0405 tx timeout [ 204.336571][ T7688] IPVS: Error connecting to the multicast addr [ 205.302350][ T7682] loop0: detected capacity change from 0 to 131072 [ 205.309772][ T7682] F2FS-fs (loop0): Test dummy encryption mode enabled [ 205.313374][ T7682] F2FS-fs (loop0): invalid crc value [ 205.421511][ T7682] F2FS-fs (loop0): access invalid blkaddr:0 [ 205.421551][ T7682] CPU: 1 UID: 0 PID: 7682 Comm: syz.0.649 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 205.421587][ T7682] Tainted: [L]=SOFTLOCKUP [ 205.421596][ T7682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 205.421610][ T7682] Call Trace: [ 205.421620][ T7682] [ 205.421631][ T7682] dump_stack_lvl+0xe8/0x150 [ 205.421666][ T7682] __f2fs_is_valid_blkaddr+0xe52/0x14f0 [ 205.421709][ T7682] ? __pfx_f2fs_need_inode_block_update+0x10/0x10 [ 205.421746][ T7682] sanity_check_extent_cache+0x1a3/0x620 [ 205.421773][ T7682] ? f2fs_sanity_check_inline_data+0x75/0x780 [ 205.421805][ T7682] ? set_nlink+0x5f/0x170 [ 205.421835][ T7682] f2fs_iget+0x3cbd/0x5a50 [ 205.421898][ T7682] f2fs_fill_super+0x4fca/0x7850 [ 205.421982][ T7682] get_tree_bdev_flags+0x431/0x4f0 [ 205.422032][ T7682] ? __pfx_f2fs_fill_super+0x10/0x10 [ 205.422059][ T7682] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 205.422108][ T7682] vfs_get_tree+0x92/0x2a0 [ 205.422148][ T7682] do_new_mount+0x341/0xd30 [ 205.422174][ T7682] ? apparmor_capable+0x126/0x170 [ 205.422213][ T7682] ? __pfx_do_new_mount+0x10/0x10 [ 205.422242][ T7682] ? ns_capable+0x89/0xe0 [ 205.422272][ T7682] ? user_path_at+0xd4/0x160 [ 205.422308][ T7682] ? user_path_at+0xd4/0x160 [ 205.422343][ T7682] __se_sys_mount+0x31d/0x420 [ 205.422379][ T7682] ? __pfx___se_sys_mount+0x10/0x10 [ 205.422416][ T7682] ? __x64_sys_mount+0x20/0xc0 [ 205.422443][ T7682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.422469][ T7682] do_syscall_64+0x15f/0xf80 [ 205.422503][ T7682] ? trace_irq_disable+0x3b/0x140 [ 205.422532][ T7682] ? clear_bhb_loop+0x40/0x90 [ 205.422561][ T7682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.422585][ T7682] RIP: 0033:0x7fa4cd3bda8a [ 205.422609][ T7682] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.422630][ T7682] RSP: 002b:00007fa4cb615e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 205.422656][ T7682] RAX: ffffffffffffffda RBX: 00007fa4cb615ee0 RCX: 00007fa4cd3bda8a [ 205.422673][ T7682] RDX: 0000200000000100 RSI: 0000200000010600 RDI: 00007fa4cb615ea0 [ 205.422690][ T7682] RBP: 0000200000000100 R08: 00007fa4cb615ee0 R09: 0000000000000010 [ 205.422706][ T7682] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000010600 [ 205.422721][ T7682] R13: 00007fa4cb615ea0 R14: 00000000000105d6 R15: 0000200000000280 [ 205.422759][ T7682] [ 205.423783][ T7682] F2FS-fs (loop0): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 4128768] is incorrect, run fsck to fix [ 205.423948][ T7682] F2FS-fs (loop0): Failed to read root inode [ 205.567628][ T7686] loop1: detected capacity change from 0 to 32768 [ 205.677681][ T7704] loop2: detected capacity change from 0 to 1024 [ 205.726713][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.650'. [ 205.726740][ T7696] netlink: 5 bytes leftover after parsing attributes in process `syz.3.650'. [ 205.950165][ T7707] loop4: detected capacity change from 0 to 128 [ 205.974313][ T7686] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 206.010618][ T7707] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 206.049946][ T7707] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.331081][ T7719] loop3: detected capacity change from 0 to 736 [ 206.622375][ T3543] hfsplus: b-tree write err: -5, ino 25 [ 206.622558][ T3543] hfsplus: b-tree write err: -5, ino 4 [ 206.622683][ T3543] hfsplus: b-tree write err: -5, ino 2 [ 206.908639][ T7724] loop4: detected capacity change from 0 to 128 [ 206.971130][ T7724] EXT4-fs (loop4): Test dummy encryption mode enabled [ 207.030163][ T7686] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 207.061566][ T7686] XFS (loop1): Starting recovery (logdev: internal) [ 207.149963][ T7724] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 207.154061][ T7724] ext4 filesystem being mounted at /124/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 207.275861][ T7686] XFS (loop1): Ending recovery (logdev: internal) [ 207.517557][ T5824] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 207.550931][ T5823] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 208.156633][ C0] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 208.999475][ T7761] loop2: detected capacity change from 0 to 2048 [ 209.091134][ T7764] loop1: detected capacity change from 0 to 512 [ 209.100774][ T7764] EXT4-fs: Ignoring removed nomblk_io_submit option [ 209.120411][ T7761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 209.365944][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.428233][ T7764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.458021][ T7764] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.479646][ T7764] EXT4-fs warning (device loop1): verify_group_input:156: Last group not full [ 209.507935][ T7775] netlink: 20 bytes leftover after parsing attributes in process `syz.3.683'. [ 209.653173][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.989977][ T38] audit: type=1326 audit(1776124220.984:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83fcac819 code=0x7ffc0000 [ 210.990040][ T38] audit: type=1326 audit(1776124220.984:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83fcac819 code=0x7ffc0000 [ 211.001335][ T38] audit: type=1326 audit(1776124221.004:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83fcac819 code=0x7ffc0000 [ 211.001389][ T38] audit: type=1326 audit(1776124221.004:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83fcac819 code=0x7ffc0000 [ 211.001448][ T38] audit: type=1326 audit(1776124221.004:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd83fcac819 code=0x7ffc0000 [ 211.001488][ T38] audit: type=1326 audit(1776124221.004:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83fcac819 code=0x7ffc0000 [ 211.008209][ T38] audit: type=1326 audit(1776124221.014:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fd83fcac819 code=0x7ffc0000 [ 211.008270][ T38] audit: type=1326 audit(1776124221.014:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83fcac819 code=0x7ffc0000 [ 211.008327][ T38] audit: type=1326 audit(1776124221.014:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83fcac819 code=0x7ffc0000 [ 211.026160][ T38] audit: type=1326 audit(1776124221.024:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83fcac819 code=0x7ffc0000 [ 211.677956][ T7824] loop3: detected capacity change from 0 to 256 [ 211.691491][ T7824] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 211.864736][ T7829] netlink: 96 bytes leftover after parsing attributes in process `syz.1.708'. [ 211.988418][ T7829] vlan3: entered allmulticast mode [ 211.988445][ T7829] gretap0: entered allmulticast mode [ 212.238670][ T7781] loop4: detected capacity change from 0 to 32768 [ 212.265758][ T7835] loop1: detected capacity change from 0 to 512 [ 212.266979][ T7835] EXT4-fs: Ignoring removed nomblk_io_submit option [ 212.316876][ T7781] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 212.419214][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 212.435678][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 212.435726][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 212.435749][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 212.468529][ T7835] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 212.468551][ T7835] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 212.468967][ T7835] EXT4-fs (loop1): orphan cleanup on readonly fs [ 212.469159][ T7835] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 212.469191][ T7835] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 212.734704][ T7835] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.711: bg 0: block 40: padding at end of block bitmap is not set [ 212.734748][ T7835] loop1: lost filesystem error report for type 5 error -117 [ 212.742136][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 212.742162][ C0] EXT4-fs (loop1): initial error at time 1776124222: ext4_validate_block_bitmap:441 [ 212.742187][ C0] EXT4-fs (loop1): last error at time 1776124222: ext4_validate_block_bitmap:441 [ 212.748738][ T7835] EXT4-fs (loop1): Remounting filesystem read-only [ 212.748909][ T7835] EXT4-fs (loop1): 1 truncate cleaned up [ 213.052362][ T7781] XFS (loop4): Ending clean mount [ 213.118723][ T7835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 213.150159][ T5824] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 213.578510][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.917510][ T7862] loop1: detected capacity change from 0 to 1024 [ 214.013571][ T7862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.256573][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.107260][ T7898] usb usb8: usbfs: process 7898 (syz.4.735) did not claim interface 0 before use [ 215.469633][ T7905] netlink: 'syz.3.738': attribute type 4 has an invalid length. [ 216.208401][ T7916] loop4: detected capacity change from 0 to 128 [ 216.517636][ T7892] loop2: detected capacity change from 0 to 32768 [ 216.677111][ T7893] loop0: detected capacity change from 0 to 32768 [ 216.836499][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 216.836520][ T38] audit: type=1800 audit(1776124226.844:112): pid=7893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.731" name="bus" dev="loop0" ino=7 res=0 errno=0 [ 217.015573][ T7929] loop4: detected capacity change from 0 to 1024 [ 217.158012][ T7892] JBD2: Ignoring recovery information on journal [ 217.241841][ T7929] hfsplus: bad catalog entry type [ 217.477585][ T998] hfsplus: b-tree write err: -5, ino 25 [ 217.477749][ T998] hfsplus: b-tree write err: -5, ino 4 [ 217.480122][ T998] hfsplus: b-tree write err: -5, ino 2 [ 217.668179][ T7892] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 217.901436][ T1750] ================================================================== [ 217.901456][ T1750] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 217.901496][ T1750] Read of size 4096 at addr ffff888027c37000 by task kworker/u8:11/1750 [ 217.901513][ T1750] [ 217.901527][ T1750] CPU: 0 UID: 0 PID: 1750 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 217.901555][ T1750] Tainted: [L]=SOFTLOCKUP [ 217.901561][ T1750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 217.901575][ T1750] Workqueue: loop0 loop_workfn [ 217.901599][ T1750] Call Trace: [ 217.901619][ T1750] [ 217.901629][ T1750] dump_stack_lvl+0xe8/0x150 [ 217.901653][ T1750] print_address_description+0x55/0x1e0 [ 217.901670][ T1750] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 217.901694][ T1750] print_report+0x58/0x70 [ 217.901709][ T1750] kasan_report+0x117/0x150 [ 217.901742][ T1750] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 217.901771][ T1750] kasan_check_range+0x264/0x2c0 [ 217.901795][ T1750] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 217.901821][ T1750] __asan_memcpy+0x29/0x70 [ 217.901842][ T1750] copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 217.901877][ T1750] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 217.901902][ T1750] ? rcu_is_watching+0x15/0xb0 [ 217.901936][ T1750] ? shmem_write_begin+0x1ce/0x320 [ 217.901964][ T1750] generic_perform_write+0x5b1/0x8b0 [ 217.901990][ T1750] ? __pfx_generic_perform_write+0x10/0x10 [ 217.902028][ T1750] ? __mark_inode_dirty+0x4cf/0x13b0 [ 217.902054][ T1750] ? preempt_count_add+0x91/0x190 [ 217.902071][ T1750] ? mnt_put_write_access_file+0xbf/0x100 [ 217.902097][ T1750] ? file_update_time_flags+0x406/0x4b0 [ 217.902097][ T1750] ? file_update_time_flags+0x406/0x4b0 [ 217.902123][ T1750] shmem_file_write_iter+0xfb/0x120 [ 217.902142][ T1750] lo_rw_aio+0xc80/0xf00 [ 217.902168][ T1750] ? __pfx_lo_rw_aio+0x10/0x10 [ 217.902191][ T1750] ? kthread_associate_blkcg+0x490/0x600 [ 217.902214][ T1750] ? rt_spin_unlock+0x160/0x200 [ 217.902235][ T1750] loop_process_work+0x637/0x11b0 [ 217.902263][ T1750] ? __pfx_loop_process_work+0x10/0x10 [ 217.902282][ T1750] ? __lock_acquire+0x6b5/0x2cf0 [ 217.902303][ T1750] ? look_up_lock_class+0x57/0x110 [ 217.902326][ T1750] ? register_lock_class+0x31/0x2e0 [ 217.902348][ T1750] ? __lock_acquire+0x6b5/0x2cf0 [ 217.902370][ T1750] ? timerqueue_linked_add+0x287/0x2e0 [ 217.902390][ T1750] ? do_raw_spin_lock+0x12b/0x2f0 [ 217.902407][ T1750] ? lock_acquire+0x106/0x350 [ 217.902428][ T1750] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 217.902447][ T1750] ? process_scheduled_works+0xa69/0x1910 [ 217.902465][ T1750] ? process_scheduled_works+0xa69/0x1910 [ 217.902485][ T1750] ? process_scheduled_works+0xa69/0x1910 [ 217.902502][ T1750] ? process_scheduled_works+0xa69/0x1910 [ 217.902521][ T1750] process_scheduled_works+0xb68/0x1910 [ 217.902551][ T1750] ? __pfx_process_scheduled_works+0x10/0x10 [ 217.902571][ T1750] ? assign_work+0x3d5/0x5e0 [ 217.902589][ T1750] worker_thread+0xa90/0x1040 [ 217.902619][ T1750] kthread+0x388/0x470 [ 217.902641][ T1750] ? __pfx_worker_thread+0x10/0x10 [ 217.902657][ T1750] ? __pfx_kthread+0x10/0x10 [ 217.902678][ T1750] ret_from_fork+0x514/0xb70 [ 217.902697][ T1750] ? __pfx_ret_from_fork+0x10/0x10 [ 217.902718][ T1750] ? __switch_to+0xc79/0x1410 [ 217.902761][ T1750] ? __pfx_kthread+0x10/0x10 [ 217.902787][ T1750] ret_from_fork_asm+0x1a/0x30 [ 217.902820][ T1750] [ 217.902828][ T1750] [ 217.902833][ T1750] The buggy address belongs to the physical page: [ 217.902842][ T1750] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27c37 [ 217.902863][ T1750] flags: 0x80000000000000(node=0|zone=1) [ 217.902889][ T1750] raw: 0080000000000000 0000000000000000 dead000000000122 0000000000000000 [ 217.902908][ T1750] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 217.902920][ T1750] page dumped because: kasan: bad access detected [ 217.902931][ T1750] page_owner tracks the page as freed [ 217.902939][ T1750] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 7893, tgid 7890 (syz.0.731), ts 216719963715, free_ts 217899437895 [ 217.902975][ T1750] post_alloc_hook+0x231/0x280 [ 217.903016][ T1750] get_page_from_freelist+0x27d6/0x2850 [ 217.903048][ T1750] __alloc_frozen_pages_noprof+0x18d/0x380 [ 217.903080][ T1750] alloc_pages_mpol+0xd1/0x380 [ 217.903109][ T1750] alloc_pages_noprof+0xd2/0x2f0 [ 217.903138][ T1750] lmLogInit+0x357/0x1a00 [ 217.903166][ T1750] lmLogOpen+0x4e1/0xfa0 [ 217.903193][ T1750] jfs_mount_rw+0xee/0x670 [ 217.903219][ T1750] jfs_fill_super+0x754/0xd80 [ 217.903240][ T1750] get_tree_bdev_flags+0x431/0x4f0 [ 217.903267][ T1750] vfs_get_tree+0x92/0x2a0 [ 217.903293][ T1750] do_new_mount+0x341/0xd30 [ 217.903314][ T1750] __se_sys_mount+0x31d/0x420 [ 217.903336][ T1750] do_syscall_64+0x15f/0xf80 [ 217.903364][ T1750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.903384][ T1750] page last free pid 5825 tgid 5825 stack trace: [ 217.903396][ T1750] __free_frozen_pages+0xf9b/0x10f0 [ 217.903423][ T1750] lmLogShutdown+0x44e/0x850 [ 217.903452][ T1750] lmLogClose+0x28a/0x520 [ 217.903479][ T1750] jfs_umount+0x2fb/0x3d0 [ 217.903506][ T1750] jfs_put_super+0x8c/0x190 [ 217.903526][ T1750] generic_shutdown_super+0x13d/0x2d0 [ 217.903551][ T1750] kill_block_super+0x44/0x90 [ 217.903579][ T1750] deactivate_locked_super+0xbc/0x130 [ 217.903603][ T1750] cleanup_mnt+0x437/0x4d0 [ 217.903627][ T1750] task_work_run+0x1d9/0x270 [ 217.903653][ T1750] exit_to_user_mode_loop+0xed/0x480 [ 217.903676][ T1750] do_syscall_64+0x33e/0xf80 [ 217.903701][ T1750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.903720][ T1750] [ 217.903726][ T1750] Memory state around the buggy address: [ 217.903737][ T1750] ffff888027c36f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 217.903752][ T1750] ffff888027c36f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 217.903767][ T1750] >ffff888027c37000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 217.903778][ T1750] ^ [ 217.903789][ T1750] ffff888027c37080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 217.903803][ T1750] ffff888027c37100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 217.903814][ T1750] ================================================================== [ 217.920548][ T7937] loop4: detected capacity change from 0 to 64 [ 218.094812][ T1750] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 218.094839][ T1750] CPU: 1 UID: 0 PID: 1750 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 218.094868][ T1750] Tainted: [L]=SOFTLOCKUP [ 218.094875][ T1750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 218.094889][ T1750] Workqueue: loop0 loop_workfn [ 218.094918][ T1750] Call Trace: [ 218.094926][ T1750] [ 218.094933][ T1750] vpanic+0x56c/0xa60 [ 218.094959][ T1750] ? __pfx_vpanic+0x10/0x10 [ 218.094984][ T1750] panic+0xc5/0xd0 [ 218.095003][ T1750] ? __pfx_panic+0x10/0x10 [ 218.095023][ T1750] ? preempt_schedule_thunk+0x16/0x30 [ 218.095152][ T1750] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 218.095197][ T1750] ? preempt_schedule_thunk+0x16/0x30 [ 218.095227][ T1750] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 218.095254][ T1750] check_panic_on_warn+0x89/0xb0 [ 218.095283][ T1750] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 218.095310][ T1750] end_report+0x73/0x170 [ 218.095338][ T1750] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 218.095366][ T1750] kasan_report+0x128/0x150 [ 218.095395][ T1750] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 218.095492][ T1750] kasan_check_range+0x264/0x2c0 [ 218.095584][ T1750] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 218.095672][ T1750] __asan_memcpy+0x29/0x70 [ 218.095696][ T1750] copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 218.095796][ T1750] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 218.095824][ T1750] ? rcu_is_watching+0x15/0xb0 [ 218.095859][ T1750] ? shmem_write_begin+0x1ce/0x320 [ 218.095889][ T1750] generic_perform_write+0x5b1/0x8b0 [ 218.095917][ T1750] ? __pfx_generic_perform_write+0x10/0x10 [ 218.095939][ T1750] ? __mark_inode_dirty+0x4cf/0x13b0 [ 218.095968][ T1750] ? preempt_count_add+0x91/0x190 [ 218.095998][ T1750] ? mnt_put_write_access_file+0xbf/0x100 [ 218.096026][ T1750] ? file_update_time_flags+0x406/0x4b0 [ 218.096054][ T1750] shmem_file_write_iter+0xfb/0x120 [ 218.096076][ T1750] lo_rw_aio+0xc80/0xf00 [ 218.096104][ T1750] ? __pfx_lo_rw_aio+0x10/0x10 [ 218.096127][ T1750] ? kthread_associate_blkcg+0x490/0x600 [ 218.096153][ T1750] ? rt_spin_unlock+0x160/0x200 [ 218.096177][ T1750] loop_process_work+0x637/0x11b0 [ 218.096207][ T1750] ? __pfx_loop_process_work+0x10/0x10 [ 218.096228][ T1750] ? __lock_acquire+0x6b5/0x2cf0 [ 218.096250][ T1750] ? look_up_lock_class+0x57/0x110 [ 218.096277][ T1750] ? register_lock_class+0x31/0x2e0 [ 218.096301][ T1750] ? __lock_acquire+0x6b5/0x2cf0 [ 218.096326][ T1750] ? timerqueue_linked_add+0x287/0x2e0 [ 218.096349][ T1750] ? do_raw_spin_lock+0x12b/0x2f0 [ 218.096368][ T1750] ? lock_acquire+0x106/0x350 [ 218.096391][ T1750] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 218.096412][ T1750] ? process_scheduled_works+0xa69/0x1910 [ 218.096432][ T1750] ? process_scheduled_works+0xa69/0x1910 [ 218.096455][ T1750] ? process_scheduled_works+0xa69/0x1910 [ 218.096473][ T1750] ? process_scheduled_works+0xa69/0x1910 [ 218.096493][ T1750] process_scheduled_works+0xb68/0x1910 [ 218.096524][ T1750] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.096546][ T1750] ? assign_work+0x3d5/0x5e0 [ 218.096566][ T1750] worker_thread+0xa90/0x1040 [ 218.096596][ T1750] kthread+0x388/0x470 [ 218.096620][ T1750] ? __pfx_worker_thread+0x10/0x10 [ 218.096639][ T1750] ? __pfx_kthread+0x10/0x10 [ 218.096662][ T1750] ret_from_fork+0x514/0xb70 [ 218.096686][ T1750] ? __pfx_ret_from_fork+0x10/0x10 [ 218.096706][ T1750] ? __switch_to+0xc79/0x1410 [ 218.096734][ T1750] ? __pfx_kthread+0x10/0x10 [ 218.096759][ T1750] ret_from_fork_asm+0x1a/0x30 [ 218.096788][ T1750] [ 218.097272][ T1750] Kernel Offset: disabled