last executing test programs: 23.63530149s ago: executing program 4 (id=1051): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}]}, 0x2c}}, 0x0) 23.520326317s ago: executing program 4 (id=1052): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1008040, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESDEC=0x0], 0xd3, 0x599, &(0x7f00000005c0)="$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") r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x564) 23.095333421s ago: executing program 4 (id=1056): syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000c00)=ANY=[], 0x1, 0xa77, &(0x7f0000000e80)="$eJzs3U1sHFcBAOA3a68TJynZlISaJLRJgbb81G4cE34iaKrmQtRU3CpVXKI0LRFpQKQStKpEklNvtKrClR9xKocKEFJ7QVFPXCrRSFx6Khw4EAWpEgcoJItsv7c/L7vM2LG9u97vk57fvnmz+96MZ2ZnZ+a9F4CxVVv6u7AwU4Rw5e3Xj//9gb9NL055tDVHY+nvZEeqHkIoYnoy+7wPJpbjmx++fLpXXIT5pb8pHZ680Xrv9hDCxXAgXA2NsPfKtdfenX/i5KUTlw++98bR6+uz9AAAMF6+dfXowp6//Gnfro/evPdY2NKans7PGzG9I573H4sn/un8vxa600VH6DSVzTcZQy2bb6LHfJ3l1LP5JvuUP5V9br2Vv69rvi0l5U90TOu13DDK0nbcCEVttitdq83OLv8mD0u/66eK2fNnzz17YUAVBdbcP+8LIRwQVhqazeaPl1bgENRFEFYbmjsHfQQCWJbfL7zNxfzKwp1pfdpktfJvPFbr/X5YAxu9/f+/8vNraBtdfs8Zxrz8X11yxGHtbNatKS1X2o92xHR+HyF/fmml+3/6vPx+RL1iPfvdRxiV+wv96jmxwfVYrX71z7eLzerrMU7r4RtZfuf+k/9PR+V/DPT2rzG7/n9gCOqwqUN9COogVA7NQR+AgKHVfm5uWTNK+flzfXn+lpL8rSX50yX520ryt5fkwzj73Qs/Ca8W7d/5+W/6lV4PS9fZ7orxx1ZYn/x65ErL73nPYgPLz58nhmH21qmnznzlmaevLT//X7S2/1txez8Q0424b12NM6Trhfl19daz/43ucmp95rs7q89dt83fXC5xd/d8xe7254SO48xt9Zjpft/OfvPt756vkc03HcPWrL75+cm27H3p/CMdV9P6msyWt54tx1RWj3Rc2RXjvB6wGml77Pf8f9o+Z0K9ePbsuTOPxHTaTv84Ud+yOP1Q54f+emPqDtyZqu1/ZkJ3+58dren1WudxYWd7etF5XGhk0+eXk63b5Gn64ZhO33PfmZhemj57+nvnnlnrhYcxd+HFl7576ty5Mz/wIr2YtlrW6cXFMBTV8KLKi0EfmYD1NvfC89+fu/DiSw+fff7Uc2eeO3P+8JEjh+fnj3z18MLc0nn9XOfZPbCZtL/0B10TAAAAAAAAAAAAoKofnjh+7c/vfPn95fb/7fZ/qf1/evI3tf9/JWv/n7eTT+3gUzvAXT3yl8bde6u7HlPZfPUYPp7Vd3dWzp7sfZ+IcWscv9j+P7W3z/t1TfW5J5ue99+b5su6E7itv5SprA+SfLzA+2N8Oca/DDBAxXTvyTEu6986beupfwr9Uoym9H9LW0PqxyS1/+7Xr1M6/u/agDqy9jaiOeGglxHo7R9D3/93x5n4wOsyBsF6HqvQbBrFAxgOgx7/M133TPH5P3xz62JIs914rPt4mfdfCndi2MefVP7mGv+zNf5dpeNfj97Vu/p5rj66wr9/dv39jmLD3krlN8KNfPlTP9C7qyxt20ex/LT8D4Yq5YfQ/EVWfn5DqKL/ZOVvq1j+4vK/0vkVtH915f83lp9W20Ofrlr+co2LWvd6yK8bp/t/+XXj5Ga2/KlvzyrL32WVAzXeiuXDOOs/zmzVEWyH06iM/9tP/hzGl2I6HQjTcw75N/JK65+er0jfA3uyzy9Kvt9GZZzifsZ9/N+vxbhsf0jj/6btsdEjXetI13us21HfVmCz+WDo7/+NWLg4BHUQNiDc396JKr9negjq3R2azeb6XtAqMdDCGfj6H/Td50GXP+j1XyYf/zc/h8/H/61lPyDy8X/z9+fj/+b5+fh6eX4+/m++PvPxf/P8e7LPza9gz5Tkf7Ikf29J/r52/nSv/P0l7/9USf7Bkvx7S/LvK8m/uyR/oiT/MyX5ny3Jf6Ak/6GS/M+V5G926SxmXJcfxlnePs/+D+Mj3f/pt//vLskHRtdP3zz0+NO//XZjuf3/VOv3WrqPdyym6/G3849iOr/vHTrSi3nvxPRfs/xhv94B4yTvPyP/fn+wJB8YXek5L/s3jKGid489Vfut6neez2j5fIy/EOMvxvjhGM/GeC7Gh2I8v0H1Y308/pvfH321aP/e35nlV32ePG8PlPcTdbhiffLrAyt9nj3vx2+l7rT8VTYHAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGJja0t+FhZkihCtvv378qZNn5xanPNqao7H0d7IjVW+9L4RHYjwR45/HFzc/fPl0Z3wrxkWYD0UoWtPDkzdaJW0PIVwMB8LV0Ah7r1x77d35J05eOnH54HtvHL2+fmsAAAAANr//BQAA//9uaBiO") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x192) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) 22.380547258s ago: executing program 4 (id=1060): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 21.602565262s ago: executing program 4 (id=1070): r0 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_RMID(r0, 0x0) 20.725487986s ago: executing program 4 (id=1080): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x108005, 0x4) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1}, 0x0) 20.633810208s ago: executing program 32 (id=1080): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x108005, 0x4) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1}, 0x0) 8.868839319s ago: executing program 5 (id=1081): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 8.197560874s ago: executing program 5 (id=1179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) 7.457384156s ago: executing program 5 (id=1183): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2c004010) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000180)={0x0}) 7.22953431s ago: executing program 33 (id=1183): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2c004010) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000180)={0x0}) 3.661037925s ago: executing program 1 (id=1217): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004480)='./file0\x00', 0x10040, &(0x7f00000000c0)={[{@journal_async_commit}, {@noacl}, {@coherency_full}, {@heartbeat_none}, {@journal_async_commit}, {@user_xattr}]}, 0x1, 0x444c, &(0x7f000000cd40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0xb, 0x1, 0x0, [{0x5, 0xb, 0x6, '\x00', 0x8}]}) 1.705489033s ago: executing program 3 (id=1234): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x14, r1, 0x50be6fea6f3bdfbb, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 1.669958115s ago: executing program 1 (id=1235): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x7d) 1.19308876s ago: executing program 3 (id=1237): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="e17ae85394697cd1125cc49ab46501", 0xf}], 0x1}, 0x10) 1.169105255s ago: executing program 2 (id=1238): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x28, r1, 0x64bc7c9305072889, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) 1.09255543s ago: executing program 3 (id=1239): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c00000014"], 0x28}}, 0x0) 1.053814661s ago: executing program 1 (id=1240): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x1391ccd1beab952f}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2={0xff, 0x5}}]}}}]}, 0x4c}}, 0x0) 1.010089033s ago: executing program 2 (id=1242): r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x1, 0x800, 0x1800}, {0x1, 0xe65b}], 0x3) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1, 0x9d]) 965.085854ms ago: executing program 3 (id=1243): r0 = socket(0x2, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000004a80)=[{{&(0x7f0000000080)={0x2, 0x4e1d, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f00000000c0)="639a68bf7871573aa5415ce7b0bf185e7d592193", 0x14}], 0x1, &(0x7f0000000040)=[@ip_ttl={{0x14, 0x0, 0x34, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @private=0xa010102, @multicast2}}}], 0x38}}], 0x1, 0x48c0) 938.982089ms ago: executing program 0 (id=1244): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000180)={0x0, 0x54a, 0x8, 0x8f7f}) 861.289773ms ago: executing program 3 (id=1245): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 842.008539ms ago: executing program 1 (id=1246): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x40, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x400c844) 769.417515ms ago: executing program 2 (id=1247): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001880)={0x3c, r1, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) 749.432821ms ago: executing program 0 (id=1248): unshare(0x2000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x10, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001280)={r0, 0x0, 0x0, 0x4}, 0x20) 701.202171ms ago: executing program 3 (id=1249): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 644.246369ms ago: executing program 2 (id=1250): syz_mount_image$hfsplus(&(0x7f0000000400), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nobarrier}, {@nobarrier}, {@type={'type', 0x3d, "aa58ce62"}}, {@nls={'nls', 0x3d, 'koi8-ru'}}, {@force}, {@nobarrier}, {@nobarrier}]}, 0x0, 0x718, &(0x7f00000011c0)="$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") lsetxattr$trusted_overlay_redirect(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x1) llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 562.542333ms ago: executing program 0 (id=1251): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x80001, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000440)=0x10) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x53fffffe) 541.940459ms ago: executing program 1 (id=1252): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setuid(0xee01) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f00000001c0)) 440.074769ms ago: executing program 1 (id=1253): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='clear_refs\x00') exit(0x2) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)='2', 0x1}], 0x1) 439.426328ms ago: executing program 0 (id=1254): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff3, 0x5}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0xffffffff, 0x8, 0x10, 0x14, 0x1, 0x3, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "cb030890171319da1db2ec01d014fa61c20db9d1aae91311e2fa1fbaa1b121dbc9bcb117c6d06e02899d62bff57c457012e3ede4edd01614d35a2b4811b96355622adb97b2b5d959ad0701bdb9c7ca9fa090d8fa9aa9b6d66e507bf362e54e58a05278c77be644c2166e269cfaea59f28d065bd081bae32b1b5bf1275793ff29544807b351a156f03e898356441281edfe501d38fcbc8d970ecd330863d4a6f56f2c0bf2e469dfc9c17d200edc77b7f3318b487c855b4ef49c0dd30fdaea6ac1f97860e2bedd01502759b7df9bf98fd36cd8be5045fc3c5a0aea1c48f7858aaee1d51d4137da7af9c7c68900"}, @TCA_RED_MAX_P={0x8, 0x3, 0x2}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4048801}, 0x0) 323.242015ms ago: executing program 0 (id=1255): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 176.879926ms ago: executing program 2 (id=1256): ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)) 101.609021ms ago: executing program 0 (id=1257): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="4d01000000000100000000000014090b00a79200bf12a6680b58b60de7d848d280236ddc8146e3c9e6a0281f09e1f2ea8804d4d4", 0x34, 0x8081, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x5e, 0x6, @broadcast}, 0x14) 0s ago: executing program 2 (id=1258): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0x12, 0x0, &(0x7f0000000540)="c1dfb080cd21d308098e00008100568186dd", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 4.514605][ T5172] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 94.547001][ T5155] EXT4-fs warning (device loop1): empty_inline_dir:1880: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 94.610919][ T5170] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.611625][ T5172] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.363: iget: bad i_size value: 38620345925642 [ 94.649000][ T5170] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.665338][ T5172] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.363: couldn't read orphan inode 15 (err -117) [ 94.716673][ T3160] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.737209][ T5172] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 94.846081][ T4704] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 94.991347][ T3160] usb 4-1: Using ep0 maxpacket: 16 [ 95.124837][ T3160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.136084][ T4704] usb 3-1: Using ep0 maxpacket: 32 [ 95.151847][ T3160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.172783][ T3160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 95.194794][ T3160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 95.214138][ T3160] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 95.241909][ T3160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.262732][ T3160] usb 4-1: config 0 descriptor?? [ 95.284608][ T4704] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 95.300728][ T4704] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.351226][ T4704] usb 3-1: config 0 has no interface number 0 [ 95.358378][ T4704] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.454403][ T5191] rock: directory entry would overflow storage [ 95.476617][ T5191] rock: sig=0x3b10, size=4, remaining=3 [ 95.598777][ T4704] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 95.612511][ T5182] non-latin1 character 0xffff found in JFS file name [ 95.634314][ T5182] mount with iocharset=utf8 to access [ 95.636926][ T5187] XFS: attr2 mount option is deprecated. [ 95.644502][ T4704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.681897][ T4704] usb 3-1: Product: syz [ 95.686309][ T4704] usb 3-1: Manufacturer: syz [ 95.691292][ T4704] usb 3-1: SerialNumber: syz [ 95.733566][ T4704] usb 3-1: config 0 descriptor?? [ 95.766273][ T3160] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 95.802708][ T4704] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 95.821323][ T3160] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 95.828874][ T3160] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 95.845797][ T4704] radio-si470x: probe of 3-1:0.35 failed with error -5 [ 95.846597][ T5187] XFS (loop0): Mounting V5 Filesystem [ 95.871360][ T3160] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 95.899523][ T5198] EXT4-fs (loop4): Ignoring removed orlov option [ 95.906222][ T3160] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 95.935819][ T3160] hid-u2fzero 0003:10C4:8ACF.0003: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.3-1/input0 [ 95.960376][ T3160] hid-u2fzero 0003:10C4:8ACF.0003: U2F Zero LED initialised [ 95.976660][ T5198] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,errors=remount-ro,quota,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,nodelalloc,noauto_da_alloc,stripe=0x0000000000000085,orlov,. Quota mode: writeback. [ 96.001048][ T3160] hid-u2fzero 0003:10C4:8ACF.0003: usb_submit_urb failed: -90 [ 96.009125][ T3160] hid-u2fzero 0003:10C4:8ACF.0003: U2F Zero RNG initialised [ 96.021492][ T4704] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 96.034411][ T3160] usb 4-1: USB disconnect, device number 2 [ 96.062279][ T5187] XFS (loop0): Ending clean mount [ 96.084798][ T5198] EXT4-fs error (device loop4): ext4_check_all_de:667: inode #12: block 7: comm syz.4.373: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 96.110997][ T5187] XFS (loop0): Quotacheck needed: Please wait. [ 96.128601][ T5198] EXT4-fs (loop4): Remounting filesystem read-only [ 96.136419][ T5208] fido_id[5208]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 96.173066][ T5187] XFS (loop0): Quotacheck: Done. [ 96.243599][ T4704] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 96.392215][ T4184] XFS (loop0): Unmounting Filesystem [ 96.457303][ T1324] usb 3-1: USB disconnect, device number 3 [ 96.464011][ T1324] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 96.709950][ T26] audit: type=1326 audit(1772546929.742:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5220 comm="syz.4.380" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c6bb6a799 code=0x0 [ 96.759073][ T5224] netlink: 91 bytes leftover after parsing attributes in process `syz.1.381'. [ 97.214196][ T5246] set_capacity_and_notify: 7 callbacks suppressed [ 97.214213][ T5246] loop3: detected capacity change from 0 to 128 [ 97.243641][ T5247] mkiss: ax0: crc mode is auto. [ 97.280411][ T5246] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 97.333020][ T5246] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.588352][ T5260] loop0: detected capacity change from 0 to 2048 [ 97.645000][ T5264] loop4: detected capacity change from 0 to 512 [ 97.662919][ T5266] loop3: detected capacity change from 0 to 512 [ 97.690306][ T5264] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.399: iget: bad i_size value: 38620345925642 [ 97.692175][ T5260] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.703961][ T4704] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 97.713932][ T4232] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 97.779470][ T5264] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.399: couldn't read orphan inode 15 (err -117) [ 97.803479][ T5264] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,init_itable,data_err=ignore,nojournal_checksum,data_err=ignore,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 98.072233][ T4704] usb 2-1: Using ep0 maxpacket: 32 [ 98.123725][ T4232] usb 3-1: unable to get BOS descriptor or descriptor too short [ 98.181466][ T4232] usb 3-1: not running at top speed; connect to a high speed hub [ 98.251047][ T4704] usb 2-1: unable to get BOS descriptor or descriptor too short [ 98.270677][ T4232] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 196, changing to 4 [ 98.378595][ T4704] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 98.406958][ T4704] usb 2-1: config 7 has no interface number 0 [ 98.426402][ T4704] usb 2-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 98.447283][ T4704] usb 2-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0 [ 98.460154][ T4232] usb 3-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice= 0.40 [ 98.479707][ T4704] usb 2-1: config 7 interface 187 has no altsetting 0 [ 98.488169][ T5283] loop4: detected capacity change from 0 to 4096 [ 98.495653][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.509627][ T4232] usb 3-1: Product: syz [ 98.513987][ T4232] usb 3-1: Manufacturer: syz [ 98.529256][ T4232] usb 3-1: SerialNumber: syz [ 98.602764][ T5284] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.657951][ T5283] NILFS (loop4): the device already has a read-only mount. [ 98.669304][ T4704] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 98.705446][ T4704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.733727][ T4704] usb 2-1: Product: syz [ 98.737969][ T4704] usb 2-1: Manufacturer: syz [ 98.753066][ T4704] usb 2-1: SerialNumber: syz [ 98.791734][ T5270] loop0: detected capacity change from 0 to 40427 [ 98.801902][ T5272] loop3: detected capacity change from 0 to 40427 [ 98.852466][ T5272] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 98.862899][ T5272] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 98.875880][ T5272] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 98.886245][ T5272] F2FS-fs (loop3): Found nat_bits in checkpoint [ 98.893550][ T4232] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 98.918376][ T4232] usb 3-1: unit 1 not found! [ 98.942594][ T5270] F2FS-fs (loop0): Found nat_bits in checkpoint [ 98.990000][ T5272] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 99.036946][ T5272] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 99.046483][ T4232] usb 3-1: USB disconnect, device number 4 [ 99.050278][ T4704] usb 2-1: Unknown endpoint type found, address 0x07 [ 99.096952][ T4704] usb 2-1: Not enough endpoints found in device, aborting! [ 99.197817][ T5270] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 99.243667][ T5270] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 99.260929][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.285220][ T26] audit: type=1800 audit(1772546932.323:6): pid=5272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.402" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 99.351032][ T4706] usb 2-1: USB disconnect, device number 6 [ 99.970010][ T5289] loop4: detected capacity change from 0 to 40427 [ 100.038522][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 100.069447][ T5289] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 100.095999][ T5289] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 100.145226][ T5289] F2FS-fs (loop4): invalid crc value [ 100.168435][ T5310] sg_write: process 162 (syz.3.415) changed security contexts after opening file descriptor, this is not allowed. [ 100.178923][ T5315] netlink: 19 bytes leftover after parsing attributes in process `syz.0.417'. [ 100.249675][ T5289] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 100.460984][ T5289] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 100.477913][ T5289] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 100.500061][ T5331] netlink: 40 bytes leftover after parsing attributes in process `syz.3.423'. [ 101.191198][ T5350] loop3: detected capacity change from 0 to 512 [ 101.246887][ T5319] loop2: detected capacity change from 0 to 32768 [ 101.265347][ T5350] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 101.329822][ T5350] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 101.396653][ T5358] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 101.451125][ T5350] EXT4-fs (loop3): 1 truncate cleaned up [ 101.457095][ T5350] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000008,stripe=0x0000000000000007,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,noquota,,errors=continue. Quota mode: none. [ 101.490797][ T5358] hpfs: filesystem error: improperly stopped [ 101.497551][ T5358] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 101.512869][ T5358] hpfs: You really don't want any checks? You are crazy... [ 101.529063][ T5358] hpfs: hpfs_map_sector(): read error [ 101.534867][ T5358] hpfs: code page support is disabled [ 101.551436][ T5358] hpfs: hpfs_map_4sectors(): unaligned read [ 101.561901][ T5358] hpfs: hpfs_map_4sectors(): unaligned read [ 101.581017][ T5350] EXT4-fs warning (device loop3): verify_group_input:147: Cannot add at group 3 (only 1 groups) [ 101.598638][ T5358] hpfs: filesystem error: unable to find root dir [ 101.657350][ T5358] hpfs: hpfs_map_4sectors(): unaligned read [ 101.673828][ T26] audit: type=1326 audit(1772546934.721:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5368 comm="syz.4.441" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c6bb6a799 code=0x0 [ 101.822947][ T5376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.443'. [ 101.833939][ T5376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.443'. [ 101.871721][ T5374] EXT4-fs (loop1): Ignoring removed orlov option [ 101.907976][ T5374] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 102.614509][ T5404] set_capacity_and_notify: 2 callbacks suppressed [ 102.614526][ T5404] loop0: detected capacity change from 0 to 1024 [ 102.634306][ T5407] loop3: detected capacity change from 0 to 64 [ 103.058632][ T5420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 103.098869][ T5420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.461'. [ 103.128365][ T5420] netlink: 'syz.0.461': attribute type 13 has an invalid length. [ 103.182280][ T5420] netlink: 'syz.0.461': attribute type 11 has an invalid length. [ 103.202465][ T5426] netlink: 'syz.4.467': attribute type 30 has an invalid length. [ 103.329835][ T5395] loop2: detected capacity change from 0 to 32768 [ 103.350815][ T5432] loop0: detected capacity change from 0 to 164 [ 103.488509][ T5432] isofs: isofs_export_get_parent(): child directory not normalized! [ 103.543110][ T5441] loop3: detected capacity change from 0 to 1024 [ 103.765654][ T4211] hfsplus: b-tree write err: -5, ino 4 [ 104.632166][ T5437] loop4: detected capacity change from 0 to 40427 [ 104.685222][ T5437] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 104.702224][ T5437] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 104.793413][ T5437] F2FS-fs (loop4): Found nat_bits in checkpoint [ 104.943979][ T5459] loop1: detected capacity change from 0 to 32768 [ 104.956900][ T5437] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 104.978803][ T5437] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 105.089851][ T5459] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 105.120078][ T5461] loop2: detected capacity change from 0 to 32768 [ 105.140711][ T5459] JBD2: Ignoring recovery information on journal [ 105.321444][ T5459] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 105.387970][ T5493] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 105.394718][ T5493] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 105.412797][ T5461] XFS (loop2): Mounting V5 Filesystem [ 105.487655][ T5493] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 105.508325][ T5493] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 105.527130][ T5493] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 105.536047][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 105.538493][ T5493] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 105.557251][ T5493] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 105.721148][ T5461] XFS (loop2): Ending clean mount [ 105.899710][ T4185] XFS (loop2): Unmounting Filesystem [ 106.076516][ T5515] capability: warning: `syz.0.503' uses 32-bit capabilities (legacy support in use) [ 106.153163][ T5518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.505'. [ 106.213035][ T5522] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (192) [ 106.493790][ T5535] loop4: detected capacity change from 0 to 1024 [ 106.524867][ T4704] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 106.804588][ T5550] loop2: detected capacity change from 0 to 512 [ 106.813104][ T4211] hfsplus: b-tree write err: -5, ino 4 [ 106.886794][ T5550] EXT4-fs (loop2): inline encryption not supported [ 106.898343][ T5550] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 106.946125][ T5559] program syz.4.520 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.964503][ T5550] EXT4-fs (loop2): 1 truncate cleaned up [ 106.974078][ T5550] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000002000000,block_validity,inlinecrypt,noblock_validity,usrjquota=,,errors=continue. Quota mode: none. [ 107.154801][ T4704] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 107.193792][ T4704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.211407][ T4704] usb 2-1: Product: syz [ 107.213435][ T5568] tipc: Enabling of bearer rejected, failed to enable media [ 107.222993][ T4704] usb 2-1: Manufacturer: syz [ 107.230161][ T4704] usb 2-1: SerialNumber: syz [ 107.248145][ T4704] usb 2-1: config 0 descriptor?? [ 107.295086][ T4704] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 107.367663][ T4704] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 107.403245][ T4704] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 107.414023][ T4262] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 107.432036][ T4704] usb 2-1: media controller created [ 107.475782][ T4704] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.511219][ T5527] dvb-usb: bulk message failed: -22 (7/0) [ 107.579801][ T4704] DVB: Unable to find symbol mt352_attach() [ 107.596524][ T5576] EXT4-fs (loop0): bad geometry: first data block 0 is beyond end of filesystem (0) [ 107.691178][ T4704] DVB: Unable to find symbol nxt6000_attach() [ 107.706476][ T4704] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 107.788764][ T4704] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 107.840149][ T5565] set_capacity_and_notify: 1 callbacks suppressed [ 107.840169][ T5565] loop4: detected capacity change from 0 to 40427 [ 107.858339][ T4704] dvb-usb: schedule remote query interval to 1000 msecs. [ 107.865975][ T4262] usb 4-1: unable to get BOS descriptor or descriptor too short [ 107.879019][ T4704] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 107.890554][ T4704] dvb-usb: bulk message failed: -22 (7/0) [ 107.898027][ T4704] dvb-usb: bulk message failed: -22 (7/0) [ 107.914750][ T4262] usb 4-1: not running at top speed; connect to a high speed hub [ 107.947165][ T5565] F2FS-fs (loop4): invalid crc value [ 107.958482][ T4704] usb 2-1: USB disconnect, device number 7 [ 108.023106][ T5565] F2FS-fs (loop4): Found nat_bits in checkpoint [ 108.042973][ T4262] usb 4-1: config 15 has an invalid interface number: 131 but max is 0 [ 108.070037][ T4262] usb 4-1: config 15 has no interface number 0 [ 108.085960][ T4262] usb 4-1: config 15 interface 131 has no altsetting 0 [ 108.189632][ T5565] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 108.191419][ T4704] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 108.286392][ T5599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.539'. [ 108.311129][ T4262] usb 4-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=ea.30 [ 108.316157][ T5600] loop1: detected capacity change from 0 to 512 [ 108.343971][ T4262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.368151][ T4262] usb 4-1: Product: syz [ 108.385052][ T5600] EXT4-fs (loop1): Ignoring removed bh option [ 108.395747][ T4262] usb 4-1: Manufacturer: syz [ 108.406494][ T4262] usb 4-1: SerialNumber: syz [ 108.450486][ T5600] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 108.463391][ T4188] attempt to access beyond end of device [ 108.463391][ T4188] loop4: rw=2049, want=45104, limit=40427 [ 108.549385][ T5606] loop0: detected capacity change from 0 to 128 [ 108.558088][ T5600] EXT4-fs error (device loop1): ext4_iget_extra_inode:4566: inode #15: comm syz.1.540: corrupted in-inode xattr [ 108.647782][ T5606] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 108.658054][ T5600] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.540: couldn't read orphan inode 15 (err -117) [ 108.683488][ T5612] loop2: detected capacity change from 0 to 128 [ 108.690520][ T5600] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 108.782638][ T4262] gspca_main: mr97310a-2.14.0 probing 093a:010f [ 108.789277][ T4262] gspca_mr97310a: reg write [21] error -22 [ 108.836238][ T4262] mr97310a: probe of 4-1:15.131 failed with error -22 [ 108.875603][ T4262] usb 4-1: USB disconnect, device number 3 [ 108.906330][ T4291] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.083735][ T5616] netlink: 28 bytes leftover after parsing attributes in process `syz.1.549'. [ 109.367691][ T5633] loop0: detected capacity change from 0 to 256 [ 109.496055][ T5633] FAT-fs (loop0): Directory bread(block 64) failed [ 109.532648][ T5633] FAT-fs (loop0): Directory bread(block 65) failed [ 109.562526][ T5633] FAT-fs (loop0): Directory bread(block 66) failed [ 109.587909][ T5633] FAT-fs (loop0): Directory bread(block 67) failed [ 109.608607][ T5633] FAT-fs (loop0): Directory bread(block 68) failed [ 109.638548][ T5633] FAT-fs (loop0): Directory bread(block 69) failed [ 109.658350][ T5633] FAT-fs (loop0): Directory bread(block 70) failed [ 109.664984][ T5633] FAT-fs (loop0): Directory bread(block 71) failed [ 109.707317][ T5645] netlink: 209848 bytes leftover after parsing attributes in process `syz.1.561'. [ 109.717455][ T5633] FAT-fs (loop0): Directory bread(block 72) failed [ 109.737419][ T5633] FAT-fs (loop0): Directory bread(block 73) failed [ 109.783275][ T5633] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.875222][ T5651] xt_l2tp: unknown flags: 1f [ 109.923927][ T5655] loop3: detected capacity change from 0 to 1024 [ 110.085379][ T5655] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,data_err=ignore,,errors=continue. Quota mode: none. [ 110.212681][ T5667] loop0: detected capacity change from 0 to 1024 [ 110.359245][ T5667] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 69: comm syz.0.571: lblock 8 mapped to illegal pblock 69 (length 1) [ 110.520854][ T5667] Quota error (device loop0): write_blk: dquota write failed [ 110.539900][ T5667] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 68: comm syz.0.571: lblock 7 mapped to illegal pblock 68 (length 1) [ 110.572705][ T5662] loop2: detected capacity change from 0 to 40427 [ 110.583231][ T5677] loop3: detected capacity change from 0 to 1024 [ 110.592763][ T5667] Quota error (device loop0): write_blk: dquota write failed [ 110.600997][ T5667] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 67: comm syz.0.571: lblock 6 mapped to illegal pblock 67 (length 1) [ 110.623510][ T5667] Quota error (device loop0): write_blk: dquota write failed [ 110.631378][ T5667] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 110.636447][ T4704] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 110.647341][ T5667] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 48: comm syz.0.571: lblock 0 mapped to illegal pblock 48 (length 1) [ 110.684514][ T5667] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 110.707426][ T5662] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 110.723281][ T5667] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.571: Failed to acquire dquot type 0 [ 110.754303][ T5667] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 110.754795][ T5662] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 110.781414][ T5667] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #11: comm syz.0.571: mark_inode_dirty error [ 110.811420][ T4497] hfsplus: b-tree write err: -5, ino 4 [ 110.824535][ T5667] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 110.833599][ T5662] F2FS-fs (loop2): invalid crc value [ 110.863927][ T5667] EXT4-fs (loop0): 1 orphan inode deleted [ 110.867600][ T5662] F2FS-fs (loop2): Found nat_bits in checkpoint [ 110.873749][ T5667] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,noblock_validity,data_err=ignore,nouid32,nodiscard,stripe=0x0000000000000001,acl,,errors=continue. Quota mode: none. [ 110.902001][ T4257] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 110.928711][ T4704] usb 2-1: Using ep0 maxpacket: 8 [ 110.985782][ T4257] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 111.045864][ T4257] EXT4-fs error (device loop0): ext4_release_dquot:6270: comm kworker/u4:5: Failed to release dquot type 0 [ 111.095343][ T5662] F2FS-fs (loop2): Start checkpoint disabled! [ 111.105911][ T4704] usb 2-1: unable to get BOS descriptor or descriptor too short [ 111.131925][ T5662] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 111.135216][ T5667] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 111.205849][ T4704] usb 2-1: config 140 has an invalid interface number: 182 but max is 1 [ 111.224814][ T4704] usb 2-1: config 140 has no interface number 1 [ 111.248801][ T4704] usb 2-1: config 140 interface 182 has no altsetting 0 [ 111.268755][ T5685] loop3: detected capacity change from 0 to 1024 [ 111.272513][ T26] audit: type=1800 audit(1772546944.344:8): pid=5662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.570" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 111.301268][ T5685] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 111.316008][ T4184] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 111.328086][ T5662] F2FS-fs (loop2) : inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2b6/0x550 [ 111.337216][ T4184] EXT4-fs error (device loop0): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 111.368273][ T5685] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 111.377385][ T5662] attempt to access beyond end of device [ 111.377385][ T5662] loop2: rw=2049, want=78240, limit=40427 [ 111.400357][ T5685] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 111.413259][ T5685] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 111.431959][ T5685] EXT4-fs error (device loop3): ext4_get_journal_inode:5185: inode #5: comm syz.3.579: unexpected bad inode w/o EXT4_IGET_BAD [ 111.455303][ T4704] usb 2-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 111.500011][ T5685] EXT4-fs (loop3): no journal found [ 111.507181][ T5685] EXT4-fs (loop3): can't get journal size [ 111.509272][ T5679] JBD2: Ignoring recovery information on journal [ 111.525286][ T4704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.547870][ T5685] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,grpjquota=./file0,norecovery,min_batch_time=0x000000000000071d,abort,jqfmt=vfsold,delalloc,,errors=continue. Quota mode: writeback. [ 111.599840][ T4704] usb 2-1: Product: syz [ 111.608498][ T5679] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 111.617626][ T4704] usb 2-1: Manufacturer: syz [ 111.630800][ T4704] usb 2-1: SerialNumber: syz [ 111.695921][ T5679] (syz.4.576,5679,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10 [ 111.703903][ T4291] attempt to access beyond end of device [ 111.703903][ T4291] loop2: rw=2049, want=40976, limit=40427 [ 111.859626][ T4188] ocfs2: Unmounting device (7,4) on (node local) [ 112.035588][ T4704] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 112.136493][ T5695] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 112.167902][ T5695] REISERFS (device loop0): using ordered data mode [ 112.175271][ T5695] reiserfs: using flush barriers [ 112.193740][ T5695] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 112.210810][ T5695] REISERFS (device loop0): checking transaction log (loop0) [ 112.237360][ T5695] REISERFS (device loop0): Using tea hash to sort names [ 112.254318][ T5695] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 112.321604][ T5703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.582'. [ 112.523531][ T4704] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 112.719066][ T5701] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.585 (5701) [ 112.839862][ T5701] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 112.900500][ T5701] BTRFS info (device loop4): setting nodatacow, compression disabled [ 112.933888][ T5701] BTRFS info (device loop4): turning on flush-on-commit [ 112.949964][ T5701] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 112.962716][ T4704] usb 2-1: unable to get BOS descriptor or descriptor too short [ 112.983575][ T5724] set_capacity_and_notify: 3 callbacks suppressed [ 112.983591][ T5724] loop0: detected capacity change from 0 to 128 [ 113.000662][ T5701] BTRFS info (device loop4): use lzo compression, level 0 [ 113.001939][ T5701] BTRFS info (device loop4): setting nodatasum [ 113.001964][ T5701] BTRFS info (device loop4): use no compression [ 113.002002][ T5701] BTRFS info (device loop4): trying to use backup root at mount time [ 113.002060][ T5701] BTRFS info (device loop4): max_inline at 0 [ 113.002078][ T5701] BTRFS info (device loop4): using free space tree [ 113.002093][ T5701] BTRFS info (device loop4): has skinny extents [ 113.034400][ T5727] loop3: detected capacity change from 0 to 512 [ 113.049887][ T4704] usb 2-1: device firmware changed [ 113.051802][ T4704] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 113.053578][ T4704] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 113.062010][ T4704] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 113.062044][ T4704] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 113.062094][ T4704] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 113.064842][ T4699] usb 2-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 113.064884][ T4699] usb 2-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 113.067799][ T4704] usb 2-1: USB disconnect, device number 8 [ 113.082843][ T4704] usb 2-1: [ueagle-atm] ADSL device removed [ 113.126967][ T5727] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.597: inode has both inline data and extents flags [ 113.132747][ T5724] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.262801][ T5727] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.597: couldn't read orphan inode 15 (err -117) [ 113.263475][ T5727] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.376316][ T5724] ext4 filesystem being mounted at /148/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 113.459473][ T4257] BTRFS warning (device loop4): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 113.459842][ T5701] BTRFS warning (device loop4): couldn't read tree root [ 113.460228][ T4257] BTRFS warning (device loop4): checksum verify failed on 5324800 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 113.460325][ T5701] BTRFS warning (device loop4): couldn't read tree root [ 113.460925][ T5701] BTRFS error (device loop4): parent transid verify failed on 5255168 wanted 5 found 7 [ 113.461172][ T5701] BTRFS warning (device loop4): couldn't read tree root [ 113.501039][ T5724] EXT4-fs warning (device loop0): verify_group_input:147: Cannot add at group 127 (only 1 groups) [ 113.539414][ T5701] BTRFS info (device loop4): enabling ssd optimizations [ 113.657197][ T5701] BTRFS info (device loop4): clearing free space tree [ 113.657699][ T5701] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 113.657778][ T5701] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 113.819834][ T5701] BTRFS info (device loop4): creating free space tree [ 113.888636][ T5701] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 113.899927][ T5701] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 114.455867][ T5798] loop2: detected capacity change from 0 to 512 [ 114.712019][ T5798] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 114.768547][ T5798] EXT4-fs (loop2): orphan cleanup on readonly fs [ 114.829876][ T5798] EXT4-fs error (device loop2): __ext4_iget:4912: inode #11: block 8: comm syz.2.613: invalid block [ 114.835903][ T5820] netlink: 260 bytes leftover after parsing attributes in process `syz.0.616'. [ 114.904402][ T5798] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.613: couldn't read orphan inode 11 (err -117) [ 114.929724][ T5814] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.969077][ T5798] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.026411][ T5798] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (57259!=33349) [ 115.145600][ T5826] loop0: detected capacity change from 0 to 4096 [ 115.159668][ T5815] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 115.229382][ T5814] usb 4-1: Using ep0 maxpacket: 16 [ 115.274816][ T5835] tipc: Started in network mode [ 115.280674][ T5835] tipc: Node identity , cluster identity 4711 [ 115.287410][ T5835] tipc: Failed to obtain node identity [ 115.299211][ T5835] tipc: Enabling of bearer rejected, failed to enable media [ 115.341302][ T5826] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 115.346006][ T5838] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 115.356823][ T5838] IPv6: NLM_F_CREATE should be set when creating new route [ 115.364423][ T5838] IPv6: NLM_F_CREATE should be set when creating new route [ 115.378488][ T5826] ntfs3: loop0: Failed to load $Extend. [ 115.389453][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.422468][ T5836] sch_fq: defrate 4294967295 ignored. [ 115.441441][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.480654][ T5814] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 115.549311][ T5815] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.568185][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.587749][ T5815] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 115.612774][ T5814] usb 4-1: config 0 descriptor?? [ 115.641570][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.663775][ T5815] usb 2-1: config 0 descriptor?? [ 115.813786][ T5846] loop0: detected capacity change from 0 to 8192 [ 115.828615][ T4232] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 115.840957][ T5852] loop2: detected capacity change from 0 to 4096 [ 115.903397][ T5852] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 115.919890][ T5846] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 115.955629][ T5846] REISERFS (device loop0): using ordered data mode [ 115.963343][ T5846] reiserfs: using flush barriers [ 115.971685][ T5846] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 115.989025][ T5815] usb 2-1: string descriptor 0 read error: -71 [ 115.997592][ T5846] REISERFS (device loop0): checking transaction log (loop0) [ 116.068232][ T4232] usb 5-1: Using ep0 maxpacket: 16 [ 116.110951][ T5814] hid-multitouch 0003:1FD2:6007.0004: unknown main item tag 0x0 [ 116.128176][ T5814] hid-multitouch 0003:1FD2:6007.0004: unknown main item tag 0x0 [ 116.149837][ T5814] hid-multitouch 0003:1FD2:6007.0004: unknown main item tag 0x0 [ 116.157866][ T5814] hid-multitouch 0003:1FD2:6007.0004: unknown main item tag 0x0 [ 116.176634][ T5814] hid-multitouch 0003:1FD2:6007.0004: unknown main item tag 0x0 [ 116.188330][ T4232] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 116.200679][ T5814] hid-multitouch 0003:1FD2:6007.0004: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 116.211662][ T4232] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 116.243907][ T4232] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 116.256124][ T4232] usb 5-1: config 0 has no interface number 0 [ 116.272283][ T4232] usb 5-1: config 0 interface 104 has no altsetting 1 [ 116.286847][ T5846] REISERFS (device loop0): Using tea hash to sort names [ 116.303721][ T5846] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 116.378072][ T1107] usb 4-1: USB disconnect, device number 4 [ 116.438036][ T4232] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 116.460621][ T5815] usb 2-1: reset high-speed USB device number 9 using dummy_hcd [ 116.460987][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.478522][ T4232] usb 5-1: Product: syz [ 116.482844][ T4232] usb 5-1: Manufacturer: syz [ 116.487756][ T4232] usb 5-1: SerialNumber: syz [ 116.495156][ T4232] usb 5-1: config 0 descriptor?? [ 116.542820][ T4232] asix: probe of 5-1:0.104 failed with error -22 [ 116.789484][ T5862] loop0: detected capacity change from 0 to 164 [ 116.806519][ T5842] loop4: detected capacity change from 0 to 512 [ 116.853638][ T5862] rock: directory entry would overflow storage [ 116.883936][ T5862] rock: sig=0x66, size=4, remaining=3 [ 116.912813][ T5862] rock: directory entry would overflow storage [ 116.931134][ T5842] EXT4-fs (loop4): bad s_want_extra_isize: 1056 [ 116.966431][ T5815] usb 5-1: USB disconnect, device number 5 [ 116.972206][ T5862] rock: sig=0x66, size=4, remaining=3 [ 117.024289][ T5862] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 117.091994][ T5860] loop2: detected capacity change from 0 to 32768 [ 117.170670][ T4232] usb 2-1: USB disconnect, device number 9 [ 117.177630][ T5860] JBD2: Ignoring recovery information on journal [ 117.263937][ T5869] loop3: detected capacity change from 0 to 2048 [ 117.302854][ T5860] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 117.335181][ T5869] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 117.374815][ T5873] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.477273][ T4185] ocfs2: Unmounting device (7,2) on (node local) [ 117.700230][ T5881] hfsplus: bad catalog entry type [ 118.191334][ T1107] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 118.367509][ T5905] team0 (unregistering): Port device team_slave_0 removed [ 118.412963][ T5905] team0 (unregistering): Port device team_slave_1 removed [ 118.575486][ T1107] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 118.579713][ T5917] netlink: 'syz.1.659': attribute type 2 has an invalid length. [ 118.608387][ T1107] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 118.651178][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.738250][ T1107] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 118.750335][ T5925] set_capacity_and_notify: 1 callbacks suppressed [ 118.750355][ T5925] loop0: detected capacity change from 0 to 128 [ 118.831040][ T5930] loop1: detected capacity change from 0 to 512 [ 118.875090][ T26] audit: type=1800 audit(1772546951.955:9): pid=5925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.662" name="bus" dev="loop0" ino=1048609 res=0 errno=0 [ 118.903249][ T5930] EXT4-fs (loop1): Ignoring removed nobh option [ 118.920984][ T5930] EXT4-fs (loop1): Test dummy encryption mode enabled [ 118.944238][ T5930] EXT4-fs error (device loop1): __ext4_iget:4912: inode #11: block 1: comm syz.1.665: invalid block [ 118.989317][ T5930] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.665: couldn't read orphan inode 11 (err -117) [ 119.084696][ T5930] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,nobh,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,sysvgroups,debug_want_extra_isize=0x0000000000000004,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 119.152461][ T5940] binder: 5939:5940 ioctl c00c620f 200000000180 returned -22 [ 119.511872][ T5953] team0 (unregistering): Port device team_slave_0 removed [ 119.548867][ T5953] team0 (unregistering): Port device team_slave_1 removed [ 119.843972][ T1107] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 119.884082][ T1107] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 119.926599][ T5976] loop1: detected capacity change from 0 to 24 [ 120.088114][ T1107] usb 5-1: USB disconnect, device number 6 [ 120.286687][ T5989] loop2: detected capacity change from 0 to 64 [ 120.517004][ T5972] loop3: detected capacity change from 0 to 32768 [ 120.857709][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.698'. [ 120.876413][ T5999] loop2: detected capacity change from 0 to 4096 [ 121.032012][ T5999] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 121.083259][ T5987] loop1: detected capacity change from 0 to 40427 [ 121.109320][ T6006] loop4: detected capacity change from 0 to 256 [ 121.131717][ T5987] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 121.162460][ T5987] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1ffff [ 121.185978][ T5987] F2FS-fs (loop1): invalid crc value [ 121.232589][ T5987] F2FS-fs (loop1): Found nat_bits in checkpoint [ 121.263730][ T6006] FAT-fs (loop4): Directory bread(block 64) failed [ 121.270665][ T6006] FAT-fs (loop4): Directory bread(block 65) failed [ 121.334074][ T6006] FAT-fs (loop4): Directory bread(block 66) failed [ 121.341099][ T6006] FAT-fs (loop4): Directory bread(block 67) failed [ 121.403226][ T6006] FAT-fs (loop4): Directory bread(block 68) failed [ 121.410595][ T6006] FAT-fs (loop4): Directory bread(block 69) failed [ 121.440403][ T5987] F2FS-fs (loop1): Start checkpoint disabled! [ 121.470239][ T5987] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 121.489313][ T6006] FAT-fs (loop4): Directory bread(block 70) failed [ 121.501790][ T6009] loop2: detected capacity change from 0 to 512 [ 121.519865][ T6006] FAT-fs (loop4): Directory bread(block 71) failed [ 121.529056][ T6006] FAT-fs (loop4): Directory bread(block 72) failed [ 121.542448][ T6006] FAT-fs (loop4): Directory bread(block 73) failed [ 121.569564][ T6009] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 121.600156][ T26] audit: type=1800 audit(1772546954.687:10): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.690" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 121.647966][ T6009] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.700: invalid indirect mapped block 256 (level 2) [ 121.716838][ T5987] F2FS-fs (loop1) : inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2b6/0x550 [ 121.745794][ T6009] EXT4-fs (loop2): 2 truncates cleaned up [ 121.752081][ T6009] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,dioread_nolock,,errors=continue. Quota mode: writeback. [ 121.765141][ T6001] loop3: detected capacity change from 0 to 32768 [ 121.786227][ T6009] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.700: bg 0: block 5: invalid block bitmap [ 121.804355][ T6009] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 121.822673][ T5987] attempt to access beyond end of device [ 121.822673][ T5987] loop1: rw=2049, want=78240, limit=40427 [ 121.840466][ T6009] EXT4-fs (loop2): This should not happen!! Data will be lost [ 121.840466][ T6009] [ 121.868179][ T6009] EXT4-fs (loop2): Total free blocks count 0 [ 121.887326][ T6009] EXT4-fs (loop2): Free/Dirty block details [ 121.914420][ T6009] EXT4-fs (loop2): free_blocks=0 [ 121.937823][ T6009] EXT4-fs (loop2): dirty_blocks=2 [ 121.976861][ T6009] EXT4-fs (loop2): Block reservation details [ 122.002029][ T6009] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 122.032567][ T4211] attempt to access beyond end of device [ 122.032567][ T4211] loop1: rw=2049, want=40976, limit=40427 [ 122.683714][ T6035] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 122.839241][ T6039] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 122.947218][ T6039] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.714: invalid indirect mapped block 10 (level 1) [ 123.035628][ T6039] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.714: invalid indirect mapped block 8 (level 1) [ 123.062910][ T6039] EXT4-fs (loop1): 1 truncate cleaned up [ 123.069000][ T6039] EXT4-fs (loop1): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 123.744776][ T6074] netlink: 165 bytes leftover after parsing attributes in process `syz.1.729'. [ 123.757101][ T6072] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 123.767189][ T6044] set_capacity_and_notify: 2 callbacks suppressed [ 123.767205][ T6044] loop4: detected capacity change from 0 to 32768 [ 123.890766][ T6044] ialloc: diAlloc returned -5! [ 124.094972][ T6081] loop3: detected capacity change from 0 to 512 [ 124.148939][ T6081] EXT4-fs (loop3): Ignoring removed oldalloc option [ 124.170693][ T6081] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 124.204291][ T6081] EXT4-fs (loop3): 1 truncate cleaned up [ 124.224327][ T6081] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 124.311947][ T6068] loop2: detected capacity change from 0 to 32768 [ 124.344657][ T6081] syz.3.733 (6081) used greatest stack depth: 20728 bytes left [ 124.398278][ T6068] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.726 (6068) [ 124.499469][ T6068] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 124.552056][ T6068] BTRFS info (device loop2): setting nodatacow, compression disabled [ 124.588064][ T6068] BTRFS info (device loop2): turning on flush-on-commit [ 124.598859][ T6068] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 124.627159][ T6068] BTRFS info (device loop2): use lzo compression, level 0 [ 124.636936][ T6068] BTRFS info (device loop2): setting nodatasum [ 124.645278][ T6068] BTRFS info (device loop2): use no compression [ 124.661014][ T6068] BTRFS info (device loop2): trying to use backup root at mount time [ 124.670852][ T6068] BTRFS info (device loop2): max_inline at 0 [ 124.677335][ T6068] BTRFS info (device loop2): using free space tree [ 124.685921][ T6068] BTRFS info (device loop2): has skinny extents [ 124.771375][ T6102] netlink: 56 bytes leftover after parsing attributes in process `syz.3.739'. [ 124.791251][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.739'. [ 125.061142][ T144] BTRFS warning (device loop2): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 125.076292][ T6116] loop3: detected capacity change from 0 to 8192 [ 125.152721][ T6116] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 125.179613][ T6068] BTRFS warning (device loop2): couldn't read tree root [ 125.187533][ T4291] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 125.219643][ T6116] REISERFS (device loop3): using ordered data mode [ 125.226810][ T6116] reiserfs: using flush barriers [ 125.255894][ T6068] BTRFS warning (device loop2): couldn't read tree root [ 125.272909][ T6068] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7 [ 125.289343][ T6112] loop4: detected capacity change from 0 to 32768 [ 125.303147][ T6068] BTRFS warning (device loop2): couldn't read tree root [ 125.357790][ T6116] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 125.377646][ T6116] REISERFS (device loop3): checking transaction log (loop3) [ 125.418249][ T6112] XFS (loop4): Mounting V5 Filesystem [ 125.421307][ T6116] REISERFS (device loop3): Using r5 hash to sort names [ 125.424050][ T6068] BTRFS info (device loop2): enabling ssd optimizations [ 125.473136][ T6116] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 125.487770][ T6068] BTRFS info (device loop2): clearing free space tree [ 125.509390][ T6068] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 125.581217][ T6068] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 125.706170][ T6068] BTRFS info (device loop2): creating free space tree [ 125.742884][ T6068] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 125.830584][ T6068] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 125.862173][ T6112] XFS (loop4): Ending clean mount [ 125.912136][ T6112] XFS (loop4): Quotacheck needed: Please wait. [ 126.069566][ T6112] XFS (loop4): Quotacheck: Done. [ 126.239834][ T4188] XFS (loop4): Unmounting Filesystem [ 126.334073][ T6161] sp0: Synchronizing with TNC [ 126.388371][ T6160] [U] è [ 126.574066][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.760'. [ 126.742037][ T6181] loop0: detected capacity change from 0 to 512 [ 126.853038][ T6181] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 126.925774][ T6181] EXT4-fs (loop0): 1 truncate cleaned up [ 126.958454][ T6181] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000007,journal_dev=0x0000000000000001,debug_want_extra_isize=0x000000000000006a,auto_da_alloc=0x0000000000008001,errors=remount-ro,nouid32,. Quota mode: none. [ 127.036167][ T6190] loop1: detected capacity change from 0 to 128 [ 127.133400][ T6181] process 'syz.0.762' launched './file1' with NULL argv: empty string added [ 127.703639][ T6211] loop4: detected capacity change from 0 to 2048 [ 127.791787][ T6217] loop3: detected capacity change from 0 to 1024 [ 127.843932][ T6211] netlink: zone id is out of range [ 127.877803][ T6211] netlink: zone id is out of range [ 127.900114][ T6217] EXT4-fs (loop3): Test dummy encryption mode enabled [ 127.931571][ T6211] netlink: zone id is out of range [ 127.935037][ T6217] EXT4-fs (loop3): inline encryption not supported [ 127.982105][ T6211] netlink: zone id is out of range [ 127.984775][ T6217] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 128.011287][ T6211] netlink: zone id is out of range [ 128.021414][ T6211] netlink: zone id is out of range [ 128.026597][ T6211] netlink: zone id is out of range [ 128.068755][ T6211] netlink: zone id is out of range [ 128.074258][ T6211] netlink: zone id is out of range [ 128.080363][ T6211] netlink: zone id is out of range [ 128.098749][ T6217] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000003,abort,auto_da_alloc,lazytime,noauto_da_alloc,mblk_io_submit,,errors=continue. Quota mode: writeback. [ 128.489756][ T6241] loop3: detected capacity change from 0 to 2048 [ 128.654661][ T6246] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.996090][ T6219] set_capacity_and_notify: 1 callbacks suppressed [ 128.996106][ T6219] loop0: detected capacity change from 0 to 32768 [ 129.157559][ T6219] XFS (loop0): Mounting V5 Filesystem [ 129.336651][ T6219] XFS (loop0): Ending clean mount [ 129.407213][ T6219] XFS (loop0): Quotacheck needed: Please wait. [ 129.424718][ T6236] loop4: detected capacity change from 0 to 32768 [ 129.442252][ T6269] loop1: detected capacity change from 0 to 4096 [ 129.480693][ T6179] kernel write not supported for file /adsp1 (pid: 6179 comm: kworker/0:15) [ 129.516926][ T6219] XFS (loop0): Quotacheck: Done. [ 129.547064][ T6236] [ 129.547064][ T6236] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.547064][ T6236] [ 129.561412][ T6269] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.828120][ T4184] XFS (loop0): Unmounting Filesystem [ 129.834606][ T4291] read_mapping_page failed! [ 129.864282][ T4291] ERROR: (device loop4): txCommit: [ 129.864282][ T4291] [ 129.979976][ T1324] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 130.025022][ T4291] jfs_write_inode: jfs_commit_inode failed! [ 130.054433][ T4188] [ 130.054433][ T4188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.054433][ T4188] [ 130.083371][ T4188] [ 130.083371][ T4188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.083371][ T4188] [ 130.225368][ T6295] netlink: 6 bytes leftover after parsing attributes in process `syz.2.812'. [ 130.281416][ T6299] netlink: 16 bytes leftover after parsing attributes in process `syz.1.814'. [ 130.416734][ T1324] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.455333][ T1324] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 130.486324][ T1324] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 130.506231][ T1324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.534388][ T1324] usb 4-1: config 0 descriptor?? [ 130.588196][ T1324] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 130.606583][ T1324] dvb-usb: bulk message failed: -22 (3/0) [ 130.635396][ T1324] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 130.681946][ T6309] loop4: detected capacity change from 0 to 1024 [ 130.707247][ T1324] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 130.722358][ T1324] usb 4-1: media controller created [ 130.729374][ T1324] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.770907][ T1324] dvb-usb: bulk message failed: -22 (6/0) [ 130.810730][ T6280] dibusb: i2c wr: len=61 is too big! [ 130.810730][ T6280] [ 130.811502][ T1324] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 130.891262][ T4497] hfsplus: b-tree write err: -5, ino 4 [ 130.927680][ T1324] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 130.987312][ T6322] loop4: detected capacity change from 0 to 64 [ 131.008447][ T1324] dvb-usb: schedule remote query interval to 150 msecs. [ 131.016477][ T6321] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 131.023586][ T6320] loop0: detected capacity change from 0 to 1024 [ 131.038668][ T1324] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 131.071343][ T1324] usb 4-1: USB disconnect, device number 5 [ 131.168493][ T6320] hfsplus: failed to load root directory [ 131.184447][ T1324] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 131.300267][ T6326] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.314154][ T6326] exFAT-fs (loop2): unable to read boot sector [ 131.320755][ T6326] exFAT-fs (loop2): failed to read boot sector [ 131.327160][ T6326] exFAT-fs (loop2): failed to recognize exfat type [ 131.411750][ T6330] netlink: 'syz.0.827': attribute type 2 has an invalid length. [ 131.431308][ T6330] netlink: 44 bytes leftover after parsing attributes in process `syz.0.827'. [ 131.857093][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 131.895589][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 131.927093][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 131.961431][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 131.996689][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.005764][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.013562][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.025905][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.039299][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.053729][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.068442][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.084656][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.102223][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.111132][ T6364] loop0: detected capacity change from 0 to 256 [ 132.117839][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.117905][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.117927][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.117949][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.117970][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.117992][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.118013][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.177277][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.186578][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.196908][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.210056][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.211879][ T6364] exfat: Deprecated parameter 'namecase' [ 132.225493][ T6364] exfat: Deprecated parameter 'namecase' [ 132.231292][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.244319][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.259194][ T6364] exFAT-fs (loop0): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 132.284541][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.298201][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.306127][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.314126][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.341150][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.352893][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.369864][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.380608][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.392294][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.396228][ T6346] loop4: detected capacity change from 0 to 32768 [ 132.404127][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.416531][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.424126][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.431938][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.443857][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.450397][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.458913][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.466431][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.474089][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.481704][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.490002][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.498544][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.507510][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.515821][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.523416][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.531293][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.539306][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.547535][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.555729][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.563417][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.571403][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.579211][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.587179][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.595447][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.603144][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.611526][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.619447][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.627357][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.635039][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.642843][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.651266][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.659060][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.666962][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.674612][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.683078][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.690959][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.698707][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.707425][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.715509][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.723272][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.731021][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.738739][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.746818][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.754310][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.762180][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.769924][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.777706][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.785540][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.793234][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.801581][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.809793][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.818509][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.826184][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.834496][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.843276][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.851386][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.859498][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.867883][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.875919][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.884651][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.893049][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.900914][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.909033][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.917752][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.925261][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.933178][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.940751][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.948218][ T5814] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 132.976774][ T5814] hid-generic 0000:0000:0004.0005: hidraw0: HID v0.03 Device [syz0] on syz1 [ 133.003665][ T6346] XFS (loop4): Mounting V5 Filesystem [ 133.142102][ T6346] XFS (loop4): Ending clean mount [ 133.147754][ T6385] loop1: detected capacity change from 0 to 8 [ 133.192164][ T6385] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 133.211395][ T6346] XFS (loop4): Quotacheck needed: Please wait. [ 133.222786][ T4178] udevd[4178]: incorrect cramfs checksum on /dev/loop1 [ 133.276783][ T6389] loop3: detected capacity change from 0 to 512 [ 133.319918][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.853'. [ 133.378822][ T6389] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 133.433945][ T4178] udevd[4178]: incorrect cramfs checksum on /dev/loop1 [ 133.442207][ T6346] XFS (loop4): Quotacheck: Done. [ 133.498877][ T4178] udevd[4178]: incorrect cramfs checksum on /dev/loop1 [ 133.543275][ T6389] EXT4-fs (loop3): 1 orphan inode deleted [ 133.556757][ T6388] fido_id[6388]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 133.581475][ T4178] udevd[4178]: incorrect cramfs checksum on /dev/loop1 [ 133.589391][ T6389] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.657206][ T6402] netlink: 'syz.1.857': attribute type 10 has an invalid length. [ 133.672457][ T6402] netlink: 40 bytes leftover after parsing attributes in process `syz.1.857'. [ 133.694181][ T6402] device bond0 entered promiscuous mode [ 133.760419][ T6402] device bond_slave_0 entered promiscuous mode [ 133.791435][ T6402] device bond_slave_1 entered promiscuous mode [ 133.812496][ T6402] bridge0: port 3(bond0) entered blocking state [ 133.828702][ T6402] bridge0: port 3(bond0) entered disabled state [ 133.838393][ T6402] bridge0: port 3(bond0) entered blocking state [ 133.845485][ T6402] bridge0: port 3(bond0) entered forwarding state [ 133.955317][ T4188] XFS (loop4): Unmounting Filesystem [ 134.105870][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.862'. [ 134.258775][ T6419] loop1: detected capacity change from 0 to 1024 [ 134.400959][ T6423] binder: BINDER_SET_CONTEXT_MGR already set [ 134.427667][ T6423] binder: 6422:6423 ioctl 40046207 0 returned -16 [ 134.472103][ T6426] loop0: detected capacity change from 0 to 256 [ 134.501178][ T6419] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,auto_da_alloc,,errors=continue. Quota mode: none. [ 134.529523][ T6403] loop2: detected capacity change from 0 to 32768 [ 134.615430][ T6435] loop4: detected capacity change from 0 to 1024 [ 134.621034][ T6426] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x22932667, utbl_chksum : 0xe619d30d) [ 134.787426][ T6435] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.898202][ T6439] loop1: detected capacity change from 0 to 512 [ 134.921812][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.874'. [ 134.976899][ T6445] loop3: detected capacity change from 0 to 128 [ 135.019055][ T6439] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.870: bad orphan inode 15 [ 135.065039][ T6447] loop0: detected capacity change from 0 to 8192 [ 135.072435][ T6439] ext4_test_bit(bit=14, block=5) = 0 [ 135.078674][ T6439] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000001,journal_dev=0x0000000000000003,grpid,journal_ioprio=0x0000000000000002,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 135.293552][ T6456] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 135.471448][ T6464] netlink: 100 bytes leftover after parsing attributes in process `syz.1.884'. [ 135.740788][ T6478] loop1: detected capacity change from 0 to 2048 [ 135.779318][ T6482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.892'. [ 135.894320][ T6478] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.963147][ T6478] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.994137][ T6493] loop0: detected capacity change from 0 to 64 [ 136.083644][ T6493] attempt to access beyond end of device [ 136.083644][ T6493] loop0: rw=0, want=550, limit=64 [ 136.096257][ T26] audit: type=1800 audit(1772546969.176:11): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.889" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 136.154810][ T6493] Buffer I/O error on dev loop0, logical block 274, async page read [ 136.187531][ T6496] Trying to free block not in datazone [ 136.203827][ T6496] Trying to free block not in datazone [ 136.249683][ T6493] attempt to access beyond end of device [ 136.249683][ T6493] loop0: rw=0, want=550, limit=64 [ 136.321166][ T6496] Trying to free block not in datazone [ 136.327300][ T6493] Buffer I/O error on dev loop0, logical block 274, async page read [ 136.398836][ T26] audit: type=1800 audit(1772546969.496:12): pid=6493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.896" name="file3" dev="loop0" ino=6 res=0 errno=0 [ 136.461472][ T6496] Trying to free block not in datazone [ 136.518656][ T6496] Trying to free block not in datazone [ 136.565568][ T6496] Trying to free block not in datazone [ 136.603773][ T6496] Trying to free block not in datazone [ 136.634521][ T6496] Trying to free block not in datazone [ 136.672518][ T6496] Trying to free block not in datazone [ 136.716560][ T6496] Trying to free block not in datazone [ 136.744690][ T6496] Trying to free block not in datazone [ 136.783662][ T6496] Trying to free block not in datazone [ 136.798510][ T6496] minix_free_block (loop0:6): bit already cleared [ 136.869800][ T6496] Trying to free block not in datazone [ 136.921643][ T6496] Trying to free block not in datazone [ 136.950735][ T6496] Trying to free block not in datazone [ 136.966986][ T6496] minix_free_block (loop0:7): bit already cleared [ 136.981709][ T6476] loop3: detected capacity change from 0 to 40427 [ 136.989294][ T4231] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 136.994408][ T6496] Trying to free block not in datazone [ 137.017391][ T6496] Trying to free block not in datazone [ 137.023049][ T6496] Trying to free block not in datazone [ 137.059555][ T6496] Trying to free block not in datazone [ 137.101010][ T6476] F2FS-fs (loop3): invalid crc value [ 137.102568][ T6496] Trying to free block not in datazone [ 137.179800][ T6496] minix_free_block (loop0:6): bit already cleared [ 137.180750][ T6476] F2FS-fs (loop3): Found nat_bits in checkpoint [ 137.393969][ T4231] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.422904][ T4231] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.423061][ T6476] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 137.452532][ T6489] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 137.491175][ T4231] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 137.525479][ T6489] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 137.538797][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.593362][ T6489] F2FS-fs (loop2): invalid crc value [ 137.594195][ T4231] usb 5-1: config 0 descriptor?? [ 137.611886][ T6510] tipc: Started in network mode [ 137.648854][ T6510] tipc: Node identity 2d000000000000000000000000000001, cluster identity 4711 [ 137.661391][ T4186] attempt to access beyond end of device [ 137.661391][ T4186] loop3: rw=2049, want=45104, limit=40427 [ 137.716332][ T6489] F2FS-fs (loop2): Found nat_bits in checkpoint [ 137.722990][ T6510] tipc: Enabling of bearer rejected, failed to enable media [ 137.734696][ T6512] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 137.879156][ T6489] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 137.932948][ T6489] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 138.037538][ T6519] xt_hashlimit: max too large, truncated to 1048576 [ 138.047490][ T6519] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 138.066429][ T4497] hfsplus: b-tree write err: -5, ino 4 [ 138.312769][ T6521] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 138.356406][ T4231] hid-led: probe of 0003:27B8:01ED.0006 failed with error -71 [ 138.368980][ T6521] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 138.405587][ T4231] usb 5-1: USB disconnect, device number 7 [ 138.487144][ T6521] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.907: Invalid block bitmap block 0 in block_group 0 [ 138.569040][ T6521] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 138.689230][ T6521] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.907: attempt to clear invalid blocks 983261 len 1 [ 138.758265][ T6521] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz.1.907: Invalid inode table block 0 in block_group 0 [ 138.782777][ T6521] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 138.793658][ T6521] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 138.809367][ T6521] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz.1.907: Invalid inode table block 0 in block_group 0 [ 138.849469][ T6521] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 138.870590][ T6521] EXT4-fs error (device loop1): ext4_truncate:4279: inode #11: comm syz.1.907: mark_inode_dirty error [ 138.891743][ T6521] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 138.902046][ T6521] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz.1.907: Invalid inode table block 0 in block_group 0 [ 138.939953][ T6521] EXT4-fs (loop1): 1 truncate cleaned up [ 138.950891][ T6521] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none. [ 138.987853][ T6542] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 139.003243][ T6542] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 139.043034][ T6542] System zones: 0-1, 15-15, 18-18, 34-34 [ 139.078928][ T6542] EXT4-fs (loop2): orphan cleanup on readonly fs [ 139.086329][ T6542] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 139.096485][ T6542] EXT4-fs warning (device loop2): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 139.113703][ T6542] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 139.136410][ T6542] EXT4-fs (loop2): 1 truncate cleaned up [ 139.142200][ T6542] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,,errors=continue. Quota mode: writeback. [ 139.221304][ T6542] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 139.269313][ T6557] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 139.294287][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.921'. [ 139.323961][ T6550] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 139.366091][ T6550] System zones: 0-2, 18-18, 34-34 [ 139.454492][ T6523] set_capacity_and_notify: 6 callbacks suppressed [ 139.454510][ T6523] loop0: detected capacity change from 0 to 40427 [ 139.480279][ T6550] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.918: bg 0: block 248: padding at end of block bitmap is not set [ 139.517068][ T6523] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 139.555956][ T6523] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 139.581312][ T26] audit: type=1326 audit(1772546972.677:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6563 comm="syz.2.923" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3084d10799 code=0x0 [ 139.621878][ T6523] F2FS-fs (loop0): invalid crc value [ 139.630160][ T6550] Quota error (device loop4): write_blk: dquota write failed [ 139.652415][ T6550] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 139.657413][ T6523] F2FS-fs (loop0): Found nat_bits in checkpoint [ 139.689192][ T6550] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.918: Failed to acquire dquot type 1 [ 139.731860][ T6550] EXT4-fs (loop4): 1 truncate cleaned up [ 139.744989][ T6550] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,noload,,errors=continue. Quota mode: writeback. [ 139.791237][ T6573] loop1: detected capacity change from 0 to 1024 [ 139.795124][ T6523] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 139.804327][ T6550] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.812187][ T6523] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 140.040135][ T6523] attempt to access beyond end of device [ 140.040135][ T6523] loop0: rw=2051, want=45064, limit=40427 [ 140.062976][ T6523] attempt to access beyond end of device [ 140.062976][ T6523] loop0: rw=2051, want=65536, limit=40427 [ 140.085731][ T6523] F2FS-fs (loop0): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 140.085765][ T6523] F2FS-fs (loop0): Issue discard(5637, 5637, 2555) failed, ret: -5 [ 140.762586][ T5814] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 141.042481][ T5814] usb 4-1: Using ep0 maxpacket: 16 [ 141.169543][ T6584] loop4: detected capacity change from 0 to 32768 [ 141.176844][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.200522][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.231902][ T5814] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 141.262392][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.283344][ T5814] usb 4-1: config 0 descriptor?? [ 141.288895][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.947'. [ 141.373402][ T6600] loop2: detected capacity change from 0 to 32768 [ 141.569588][ T6626] loop1: detected capacity change from 0 to 64 [ 141.699113][ T6600] ialloc: diAlloc returned -5! [ 141.738998][ T6627] ialloc: diAlloc returned -5! [ 141.772943][ T5814] hid (null): bogus close delimiter [ 141.787731][ T5814] wacom 0003:056A:0084.0007: bogus close delimiter [ 141.805196][ T5814] wacom 0003:056A:0084.0007: item 0 4 2 10 parsing failed [ 141.836199][ T5814] wacom 0003:056A:0084.0007: parse failed [ 141.862231][ T5814] wacom: probe of 0003:056A:0084.0007 failed with error -22 [ 142.006866][ T5821] usb 4-1: USB disconnect, device number 6 [ 142.299831][ T6639] binder: 6638:6639 ioctl 541b 0 returned -22 [ 142.505651][ T6644] loop2: detected capacity change from 0 to 512 [ 142.626578][ T6644] EXT4-fs (loop2): 1 truncate cleaned up [ 142.632766][ T6644] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,jqfmt=vfsv1,noload,inode_readahead_blks=0x0000000000000001,nouid32,,errors=continue. Quota mode: none. [ 142.750057][ T6629] loop4: detected capacity change from 0 to 32768 [ 143.121945][ T4231] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 143.555455][ T4231] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.581056][ T4231] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.589406][ T6684] loop1: detected capacity change from 0 to 1024 [ 143.616884][ T6688] loop4: detected capacity change from 0 to 8 [ 143.672071][ T4231] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 143.691601][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 143.722625][ T4231] usb 3-1: SerialNumber: syz [ 143.809764][ T6684] attempt to access beyond end of device [ 143.809764][ T6684] loop1: rw=0, want=393222, limit=1024 [ 143.951815][ T6688] SQUASHFS error: Unable to read directory block [2c0:35] [ 144.004519][ T4231] usb 3-1: 0:2 : does not exist [ 144.041866][ T4231] usb 3-1: USB disconnect, device number 5 [ 144.189637][ T6704] loop0: detected capacity change from 0 to 1024 [ 144.269434][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.387306][ T4257] hfsplus: b-tree write err: -5, ino 4 [ 144.628988][ T6715] loop0: detected capacity change from 0 to 256 [ 144.957458][ T6725] loop2: detected capacity change from 0 to 64 [ 145.027157][ T6727] loop0: detected capacity change from 0 to 512 [ 145.145324][ T6727] EXT4-fs (loop0): Ignoring removed bh option [ 145.246727][ T6727] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.998: invalid indirect mapped block 4294967295 (level 1) [ 145.281595][ T6735] loop3: detected capacity change from 0 to 164 [ 145.295057][ T6708] loop1: detected capacity change from 0 to 32768 [ 145.357650][ T6727] EXT4-fs (loop0): Remounting filesystem read-only [ 145.365207][ T6727] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.998: invalid indirect mapped block 4294967295 (level 1) [ 145.399247][ T6727] EXT4-fs (loop0): Remounting filesystem read-only [ 145.407427][ T6727] EXT4-fs (loop0): 2 truncates cleaned up [ 145.414022][ T6727] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000005,bh,auto_da_alloc=0x000000007fffffff,. Quota mode: writeback. [ 145.426494][ T6743] loop4: detected capacity change from 0 to 256 [ 145.497687][ T6743] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 145.533488][ T6708] XFS (loop1): Mounting V5 Filesystem [ 145.588528][ T6743] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2048) [ 145.596758][ T6743] FAT-fs (loop4): Filesystem has been set read-only [ 145.694288][ T6753] tipc: Started in network mode [ 145.699447][ T6753] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 145.704656][ T6708] XFS (loop1): Ending clean mount [ 145.716465][ T6708] XFS (loop1): Quotacheck needed: Please wait. [ 145.752104][ T6753] tipc: Enabled bearer , priority 12 [ 145.894434][ T6708] XFS (loop1): Quotacheck: Done. [ 146.099092][ T4187] XFS (loop1): Unmounting Filesystem [ 146.467224][ T6754] loop3: detected capacity change from 0 to 32768 [ 146.489966][ T6754] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1008 (6754) [ 146.577181][ T6754] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 146.625955][ T6754] BTRFS info (device loop3): force zlib compression, level 3 [ 146.646417][ T6754] BTRFS info (device loop3): turning on flush-on-commit [ 146.661202][ T6754] BTRFS info (device loop3): max_inline at 4096 [ 146.678031][ T6754] BTRFS info (device loop3): using free space tree [ 146.695320][ T6754] BTRFS info (device loop3): has skinny extents [ 146.883462][ T1324] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 146.901599][ T6179] tipc: Node number set to 15444650 [ 146.920196][ T6754] BTRFS info (device loop3): enabling ssd optimizations [ 147.312253][ T1324] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 147.324591][ T1324] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 147.371072][ T1324] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.389629][ T1324] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 147.413343][ T1324] usb 5-1: config 0 interface 0 has no altsetting 0 [ 147.420305][ T1324] usb 5-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 147.435001][ T6806] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 147.444367][ T6806] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 147.453470][ T1324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.471940][ T1324] usb 5-1: config 0 descriptor?? [ 147.478188][ T6806] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 147.498170][ T6806] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 147.535040][ T6806] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 147.587035][ T6806] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 147.609755][ T6806] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 147.616947][ T6806] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 147.640579][ T6806] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 147.655049][ T6806] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 147.707947][ T6806] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 147.731737][ T6806] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 147.749477][ T6812] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1025'. [ 147.888453][ T6817] loop2: detected capacity change from 0 to 1024 [ 147.919738][ T6817] EXT4-fs (loop2): Ignoring removed orlov option [ 147.964455][ T1324] hid-alps 0003:044E:120C.0008: unknown main item tag 0x2 [ 147.983738][ T1324] hid-alps 0003:044E:120C.0008: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.4-1/input0 [ 147.984199][ T6817] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000009,inode_readahead_blks=0x0000000000200000,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 148.045130][ T6826] loop3: detected capacity change from 0 to 764 [ 148.083478][ T6817] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 148.138817][ T6826] rock: directory entry would overflow storage [ 148.154240][ T6826] rock: sig=0x4654, size=5, remaining=4 [ 148.216819][ T1324] usb 5-1: USB disconnect, device number 8 [ 148.395638][ T6829] loop2: detected capacity change from 0 to 8192 [ 148.479220][ T6829] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 148.491159][ T6829] REISERFS (device loop2): using ordered data mode [ 148.497716][ T6829] reiserfs: using flush barriers [ 148.505370][ T6829] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 148.523402][ T6829] REISERFS (device loop2): checking transaction log (loop2) [ 148.549887][ T6829] REISERFS (device loop2): Using r5 hash to sort names [ 148.557668][ T6829] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 148.652035][ T6829] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "dax=never" [ 148.674806][ T6841] netlink: 'syz.3.1034': attribute type 1 has an invalid length. [ 149.454473][ T6867] EXT4-fs (loop2): inline encryption not supported [ 149.480918][ T6867] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 149.575109][ T6867] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,journal_dev=0x0000000000000d5b,data_err=ignore,nodiscard,user_xattr,grpquota,init_itable,user_xattr,mb_optimize_scan=0x0000000000000001,errors=remount-ro,lazytime,. Quota mode: writeback. [ 149.716106][ T6858] XFS (loop0): Mounting V5 Filesystem [ 149.731375][ T6847] set_capacity_and_notify: 2 callbacks suppressed [ 149.731400][ T6847] loop3: detected capacity change from 0 to 32768 [ 149.800925][ T6883] netlink: 'syz.4.1049': attribute type 1 has an invalid length. [ 149.897021][ T6847] XFS (loop3): Mounting V5 Filesystem [ 149.922660][ T6890] tipc: Started in network mode [ 149.928250][ T6890] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 149.936722][ T6890] tipc: Enabled bearer , priority 10 [ 149.984306][ T6858] XFS (loop0): Ending clean mount [ 149.991759][ T6895] loop4: detected capacity change from 0 to 512 [ 150.094869][ T6847] XFS (loop3): Ending clean mount [ 150.095246][ T6858] XFS (loop0): Quotacheck needed: Please wait. [ 150.107069][ T6895] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 150.142495][ T6847] XFS (loop3): Quotacheck needed: Please wait. [ 150.237119][ T6858] XFS (loop0): Quotacheck: Done. [ 150.245831][ T26] audit: type=1400 audit(1772546983.349:14): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name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loop3): Quotacheck: Done. [ 150.502602][ T4184] XFS (loop0): Unmounting Filesystem [ 150.589257][ T4186] XFS (loop3): Unmounting Filesystem [ 150.656425][ T6906] loop4: detected capacity change from 0 to 2048 [ 150.773370][ T6907] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.862741][ T6906] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 150.943423][ T6906] Remounting filesystem read-only [ 150.952116][ T6908] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 150.970685][ T6815] tipc: Node number set to 10005162 [ 151.244775][ T6916] loop4: detected capacity change from 0 to 128 [ 151.336325][ T6920] loop0: detected capacity change from 0 to 1024 [ 151.346343][ T6904] loop2: detected capacity change from 0 to 32768 [ 151.385968][ T6916] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 151.427703][ T6920] hfsplus: request for non-existent node 3 in B*Tree [ 151.461717][ T6920] hfsplus: request for non-existent node 3 in B*Tree [ 151.499726][ T6916] overlayfs: upper fs needs to support d_type. [ 151.529698][ T6904] XFS (loop2): Mounting V5 Filesystem [ 151.562996][ T6916] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 151.570275][ T6916] overlayfs: failed to set xattr on upper [ 151.725626][ T6904] XFS (loop2): Ending clean mount [ 151.736294][ T6904] XFS (loop2): Quotacheck needed: Please wait. [ 151.767849][ T6916] overlayfs: ...falling back to index=off,metacopy=off. [ 151.799446][ T6904] XFS (loop2): Quotacheck: Done. [ 151.998668][ T4185] XFS (loop2): Unmounting Filesystem [ 152.033897][ T4188] UDF-fs: error (device loop4): udf_read_inode: (ino 114) failed !bh [ 152.101438][ T4188] UDF-fs: error (device loop4): udf_read_inode: (ino 114) failed !bh [ 152.217298][ T6931] loop1: detected capacity change from 0 to 32768 [ 152.315140][ T6931] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1066 (6931) [ 152.396275][ T6931] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 152.438722][ T6931] BTRFS info (device loop1): force clearing of disk cache [ 152.455267][ T6931] BTRFS info (device loop1): force zlib compression, level 3 [ 152.489623][ T6931] BTRFS info (device loop1): enabling auto defrag [ 152.509423][ T6931] BTRFS info (device loop1): metadata ratio 257 [ 152.534846][ T6931] BTRFS info (device loop1): enabling disk space caching [ 152.563301][ T6931] BTRFS info (device loop1): disk space caching is enabled [ 152.586766][ T6931] BTRFS info (device loop1): has skinny extents [ 152.811783][ T4497] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.890460][ T5821] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 152.899960][ T6931] BTRFS info (device loop1): enabling ssd optimizations [ 152.950795][ T6931] BTRFS info (device loop1): clearing free space tree [ 152.957854][ T6931] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 152.983396][ T6931] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 153.022918][ T4497] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.142729][ T4497] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.264136][ T5821] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 153.275546][ T5821] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 153.286897][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.290033][ T6986] loop2: detected capacity change from 0 to 4096 [ 153.366768][ T5821] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 153.386506][ T6986] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 153.457226][ T6986] ntfs: (device loop2): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 153.501090][ T6986] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 153.560913][ T6986] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 153.589451][ T4497] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.614241][ T6986] ntfs: volume version 3.1. [ 153.732400][ T6986] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 153.836651][ T154] ntfs: (device loop2): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 153.883404][ T4185] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 153.906345][ T6995] udc-core: couldn't find an available UDC or it's busy [ 153.927130][ T6995] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 153.952822][ T6983] chnl_net:caif_netlink_parms(): no params data found [ 153.994867][ T6997] loop1: detected capacity change from 0 to 1764 [ 154.303935][ T4497] tipc: Disabling bearer [ 154.317346][ T4497] tipc: Left network mode [ 154.317434][ T6983] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.365676][ T6983] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.382448][ T6983] device bridge_slave_0 entered promiscuous mode [ 154.401156][ T6983] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.408352][ T6983] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.417733][ T6983] device bridge_slave_1 entered promiscuous mode [ 154.470201][ T5821] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 154.495981][ T5821] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 154.530193][ T5821] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 154.548137][ T5821] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 154.570287][ T5809] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 154.591668][ T5821] usb 4-1: USB disconnect, device number 7 [ 154.615786][ T6983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.672268][ T6983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.752497][ T6983] team0: Port device team_slave_0 added [ 154.784727][ T6983] team0: Port device team_slave_1 added [ 154.870506][ T6983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.893720][ T6983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.930498][ T5809] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 154.949405][ T5809] usb 2-1: config 0 has no interface number 0 [ 154.956220][ T6983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.980238][ T7034] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1094'. [ 154.989140][ T5809] usb 2-1: too many endpoints for config 0 interface 2 altsetting 0: 129, using maximum allowed: 30 [ 155.049788][ T6983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.056883][ T5809] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.056920][ T5809] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.056943][ T5809] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 155.056991][ T5809] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 155.108348][ T6983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.148628][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.180160][ T6983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.194660][ T5809] usb 2-1: config 0 descriptor?? [ 155.202677][ T6988] Bluetooth: hci4: command 0x0409 tx timeout [ 155.351234][ T6983] device hsr_slave_0 entered promiscuous mode [ 155.384762][ T6983] device hsr_slave_1 entered promiscuous mode [ 155.432153][ T7047] loop0: detected capacity change from 0 to 256 [ 155.439827][ T6983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.460324][ T6983] Cannot create hsr debugfs directory [ 155.513665][ T7047] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 155.683684][ T5809] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 155.695371][ T7047] exFAT-fs (loop0): hint_cluster is invalid (17) [ 155.706468][ T5809] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 155.729685][ T5809] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 155.767754][ T5809] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 155.792816][ T5809] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 155.820154][ T5809] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 155.840519][ T5809] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 155.918208][ T5809] wacom 0003:056A:0084.0009: hidraw0: USB HID vff.ea Device [HID 056a:0084] on usb-dummy_hcd.1-1/input2 [ 155.950615][ T7039] loop3: detected capacity change from 0 to 32768 [ 155.986694][ T5809] usb 2-1: USB disconnect, device number 10 [ 156.103611][ T7039] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1096 (7039) [ 156.242848][ T7039] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 156.260055][ T7039] BTRFS info (device loop3): using free space tree [ 156.264927][ T7064] fido_id[7064]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 156.272005][ T7039] BTRFS info (device loop3): has skinny extents [ 156.437855][ T4497] device hsr_slave_0 left promiscuous mode [ 156.445459][ T4497] device hsr_slave_1 left promiscuous mode [ 156.463808][ T4497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.475869][ T4497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.511580][ T4497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.519193][ T4497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.590181][ T7039] BTRFS info (device loop3): enabling ssd optimizations [ 156.630921][ T4497] device bridge_slave_1 left promiscuous mode [ 156.640615][ T4497] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.740265][ T7039] BTRFS warning (device loop3): can't clear the compat:0 feature bit while mounted [ 156.816120][ T4497] device bridge_slave_0 left promiscuous mode [ 156.868546][ T7088] loop0: detected capacity change from 0 to 32768 [ 156.884796][ T4497] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.229941][ T5815] Bluetooth: hci4: command 0x041b tx timeout [ 157.250496][ T7088] XFS (loop0): Mounting V5 Filesystem [ 157.254427][ T7084] loop2: detected capacity change from 0 to 32768 [ 157.281319][ T4497] device veth1_macvtap left promiscuous mode [ 157.289034][ T4497] device veth0_macvtap left promiscuous mode [ 157.296861][ T4497] device veth1_vlan left promiscuous mode [ 157.304203][ T4497] device veth0_vlan left promiscuous mode [ 157.327630][ T7088] XFS (loop0): Ending clean mount [ 157.346851][ T7088] XFS (loop0): Quotacheck needed: Please wait. [ 157.387036][ T7084] XFS (loop2): Mounting V5 Filesystem [ 157.444423][ T7088] XFS (loop0): Quotacheck: Done. [ 157.569546][ T7084] XFS (loop2): Ending clean mount [ 157.579155][ T4184] XFS (loop0): Unmounting Filesystem [ 157.588293][ T7084] XFS (loop2): Quotacheck needed: Please wait. [ 157.728387][ T7084] XFS (loop2): Quotacheck: Done. [ 157.800713][ T4497] team0 (unregistering): Port device team_slave_1 removed [ 157.880145][ T4497] team0 (unregistering): Port device team_slave_0 removed [ 157.908486][ T4497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.929100][ T4185] XFS (loop2): Unmounting Filesystem [ 157.939256][ T4497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.147385][ T4497] bond0 (unregistering): Released all slaves [ 158.312241][ T7108] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1113'. [ 158.344021][ T6983] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 158.426127][ T6983] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 158.462395][ T7138] loop0: detected capacity change from 0 to 512 [ 158.473695][ T6983] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 158.536933][ T6983] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 158.622320][ T7138] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2757: inode #11: comm syz.0.1121: corrupted xattr block 95 [ 158.697977][ T6983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.711396][ T7138] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1121: bg 0: block 7: invalid block bitmap [ 158.740512][ T7138] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 158.750938][ T7138] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2923: inode #11: comm syz.0.1121: corrupted xattr block 95 [ 158.754813][ T6983] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.783314][ T7138] EXT4-fs warning (device loop0): ext4_evict_inode:302: xattr delete (err -117) [ 158.810264][ T7138] EXT4-fs (loop0): 1 orphan inode deleted [ 158.826155][ T7134] loop3: detected capacity change from 0 to 32768 [ 158.834167][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.844186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.846237][ T7138] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 158.868556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.894486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.914556][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.921912][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.953080][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.019414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.033990][ T7134] JFS: Invalid stbl[2] = -55 for inode 2, block = 0 [ 159.054028][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.111889][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.119485][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.158428][ T6809] kernel write not supported for file /vcsa1 (pid: 6809 comm: kworker/0:16) [ 159.220038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.256026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.338453][ T5821] Bluetooth: hci4: command 0x040f tx timeout [ 159.358589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.393554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.428013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.467333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.487037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.536732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.567368][ T7181] loop1: detected capacity change from 0 to 64 [ 159.580890][ T7173] netlink: 'syz.0.1131': attribute type 2 has an invalid length. [ 159.602063][ T6983] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.640850][ T6983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.660219][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.668952][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.711134][ T7181] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 159.720571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.303394][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.335654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.398867][ T6983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.988747][ T7182] loop2: detected capacity change from 0 to 32768 [ 161.075343][ T7237] loop3: detected capacity change from 0 to 256 [ 161.099703][ T7182] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.1133 (7182) [ 161.192953][ T7237] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 161.226621][ T7182] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 161.296388][ T7182] BTRFS info (device loop2): force zlib compression, level 3 [ 161.346236][ T7182] BTRFS info (device loop2): force clearing of disk cache [ 161.387026][ T7182] BTRFS info (device loop2): setting nodatasum [ 161.393923][ T5815] Bluetooth: hci4: command 0x0419 tx timeout [ 161.440380][ T7182] BTRFS info (device loop2): allowing degraded mounts [ 161.489750][ T7182] BTRFS info (device loop2): enabling disk space caching [ 161.517661][ T7182] BTRFS info (device loop2): disk space caching is enabled [ 161.547131][ T7182] BTRFS info (device loop2): has skinny extents [ 161.712553][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 161.749093][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 161.960833][ T7182] BTRFS info (device loop2): clearing free space tree [ 161.967839][ T7182] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 161.983803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 162.017145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 162.067190][ T6983] device veth0_vlan entered promiscuous mode [ 162.079749][ T7182] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 162.107359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 162.140554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 162.233000][ T6983] device veth1_vlan entered promiscuous mode [ 162.297381][ T7304] loop3: detected capacity change from 0 to 256 [ 162.376818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 162.420268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 162.424371][ T7182] BTRFS info (device loop2): balance: start -susage=281474976710656,vrange=1024..13,limit=5 [ 162.450289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 162.470258][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.478012][ T7182] BTRFS info (device loop2): balance: ended with status: 0 [ 162.506707][ T6983] device veth0_macvtap entered promiscuous mode [ 162.538607][ T7300] loop0: detected capacity change from 0 to 8192 [ 162.577045][ T6983] device veth1_macvtap entered promiscuous mode [ 162.704403][ T6983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.779371][ T6983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.832672][ T6983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.887419][ T6983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.939151][ T6983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.956716][ T7312] loop1: detected capacity change from 0 to 8192 [ 162.984148][ T6983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.998598][ T7312] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 163.014119][ T7312] REISERFS (device loop1): using ordered data mode [ 163.023747][ T7312] reiserfs: using flush barriers [ 163.030053][ T6983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.030207][ T7312] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 163.040900][ T6983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.069550][ T6983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.076971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 163.094319][ T7312] REISERFS (device loop1): checking transaction log (loop1) [ 163.150590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 163.182184][ T7312] REISERFS (device loop1): Using r5 hash to sort names [ 163.214199][ T7312] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 163.225465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 163.316146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.377510][ T6983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.437610][ T6983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.496251][ T6983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.537545][ T6983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.589353][ T6983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.620364][ T6983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.678516][ T6983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.716694][ T6983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.756782][ T6983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.784657][ T7315] loop3: detected capacity change from 0 to 32768 [ 163.810899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 163.826693][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 163.894303][ T6983] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.929174][ T6983] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.991470][ T6983] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.008617][ T7315] XFS (loop3): Mounting V5 Filesystem [ 164.025770][ T6983] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.238951][ T7315] XFS (loop3): Ending clean mount [ 164.252951][ T4211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.295576][ T6902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.297071][ T4211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.329865][ T6902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.367490][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 164.393459][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 164.478622][ T4186] XFS (loop3): Unmounting Filesystem [ 164.562957][ T7351] loop1: detected capacity change from 0 to 128 [ 164.647379][ T7355] loop5: detected capacity change from 0 to 128 [ 164.689080][ T7351] EXT4-fs (loop1): Ignoring removed nobh option [ 164.723426][ T7351] EXT4-fs (loop1): Ignoring removed oldalloc option [ 164.767889][ T7351] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,oldalloc,,errors=continue. Quota mode: none. [ 164.805354][ T7351] ext4 filesystem being mounted at /228/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 164.812190][ T7355] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 164.820822][ T7351] EXT4-fs (loop1): resizing filesystem from 64 to 1 blocks [ 164.833666][ T7351] EXT4-fs warning (device loop1): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 165.029069][ T7355] overlayfs: upper fs needs to support d_type. [ 165.073402][ T7355] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 165.088961][ T7367] loop2: detected capacity change from 0 to 1024 [ 165.124975][ T7355] overlayfs: failed to set xattr on upper [ 165.161686][ T7355] overlayfs: ...falling back to index=off,metacopy=off. [ 165.173155][ T7367] hfsplus: bad catalog entry type [ 165.179097][ T7377] net_ratelimit: 19 callbacks suppressed [ 165.179114][ T7377] netlink: zone id is out of range [ 165.363429][ T6902] hfsplus: b-tree write err: -5, ino 4 [ 165.419099][ T6983] UDF-fs: error (device loop5): udf_read_inode: (ino 114) failed !bh [ 165.470467][ T6983] UDF-fs: error (device loop5): udf_read_inode: (ino 114) failed !bh [ 165.807269][ T7387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1181'. [ 166.306220][ T4497] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.489891][ T4497] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.633023][ T4497] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.648733][ T7415] binder: 7414:7415 ioctl c0306201 0 returned -14 [ 166.743064][ T4497] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.876977][ T7426] loop2: detected capacity change from 0 to 8 [ 166.909906][ T7424] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1192'. [ 166.975295][ T7385] loop3: detected capacity change from 0 to 32768 [ 166.982681][ T7426] SQUASHFS error: Unable to read inode 0x11f [ 167.341212][ T7440] loop2: detected capacity change from 0 to 2048 [ 167.349221][ T7385] XFS (loop3): Mounting V5 Filesystem [ 167.436036][ T7440] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 167.448229][ T7421] chnl_net:caif_netlink_parms(): no params data found [ 167.533726][ T7385] XFS (loop3): Ending clean mount [ 167.557498][ T7440] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.650213][ T4186] XFS (loop3): Unmounting Filesystem [ 167.949617][ T7421] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.956915][ T7421] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.006639][ T7435] loop1: detected capacity change from 0 to 32768 [ 168.018427][ T7421] device bridge_slave_0 entered promiscuous mode [ 168.043339][ T7456] loop2: detected capacity change from 0 to 2048 [ 168.143258][ T7435] read_mapping_page failed! [ 168.153451][ T7421] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.180928][ T7421] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.181134][ T7435] ERROR: (device loop1): txCommit: [ 168.181134][ T7435] [ 168.201242][ T7421] device bridge_slave_1 entered promiscuous mode [ 168.249321][ T7456] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 168.326026][ T7435] ERROR: (device loop1): remounting filesystem as read-only [ 168.421609][ T7421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.542166][ T7421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.548657][ T7473] loop3: detected capacity change from 0 to 64 [ 168.619435][ T7474] loop0: detected capacity change from 0 to 1024 [ 168.710077][ T7421] team0: Port device team_slave_0 added [ 168.716407][ T7478] loop2: detected capacity change from 0 to 256 [ 168.750707][ T7421] team0: Port device team_slave_1 added [ 168.909508][ T6988] Bluetooth: hci4: command 0x0409 tx timeout [ 168.952188][ T144] hfsplus: b-tree write err: -5, ino 4 [ 168.980339][ T7480] loop1: detected capacity change from 0 to 1764 [ 169.101876][ T7486] loop2: detected capacity change from 0 to 512 [ 169.129731][ T7421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.136870][ T7421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.241201][ T7421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.253556][ T7486] EXT4-fs (loop2): Test dummy encryption mode enabled [ 169.292837][ T7486] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 169.329841][ T7486] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.1206: bad orphan inode 131083 [ 169.330304][ T7421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.360358][ T7421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.396571][ T7486] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 169.538792][ T7421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.793278][ T7421] device hsr_slave_0 entered promiscuous mode [ 169.876000][ T7486] fscrypt (loop2): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 169.903860][ T7421] device hsr_slave_1 entered promiscuous mode [ 169.945915][ T7421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.972034][ T7421] Cannot create hsr debugfs directory [ 170.304493][ T7533] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 170.420912][ T7533] EXT4-fs error (device loop3): ext4_iget_extra_inode:4566: inode #15: comm syz.3.1223: corrupted in-inode xattr [ 170.433944][ T7533] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1223: couldn't read orphan inode 15 (err -117) [ 170.447435][ T7533] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,inode_readahead_blks=0x0000000000000001,grpid,noload,delalloc,max_batch_time=0x0000000000000001,discard,inode_readahead_blks=0x0000000000004000,nomblk_io_submit,init_itable=0x0000000000000a,errors=continue. Quota mode: none. [ 170.483030][ T4497] device hsr_slave_0 left promiscuous mode [ 170.491641][ T7533] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 7: comm syz.3.1223: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=255, size=56 fake=0 [ 170.572449][ T4497] device hsr_slave_1 left promiscuous mode [ 170.647633][ T4497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.672029][ T4497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.739261][ T4497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.781022][ T4497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.811171][ T4497] device bridge_slave_1 left promiscuous mode [ 170.832369][ T4497] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.848360][ T7558] EXT4-fs (loop0): Test dummy encryption mode enabled [ 170.869599][ T7556] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,min_batch_time=0x0000000000000007,max_batch_time=0x0000000000040fff,,errors=continue. Quota mode: none. [ 170.914761][ T7558] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 170.929898][ T7558] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.1230: bad orphan inode 131083 [ 170.941990][ T4497] device bridge_slave_0 left promiscuous mode [ 170.948341][ T4497] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.967087][ T7558] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 170.985204][ T4497] device veth1_macvtap left promiscuous mode [ 170.989229][ T4229] Bluetooth: hci4: command 0x041b tx timeout [ 171.007294][ T7556] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #12: block 7: comm syz.3.1228: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 171.024937][ T4497] device veth0_macvtap left promiscuous mode [ 171.108496][ T4497] device veth1_vlan left promiscuous mode [ 171.123301][ T4497] device veth0_vlan left promiscuous mode [ 171.361033][ T7522] JBD2: Ignoring recovery information on journal [ 171.402223][ T7568] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.422232][ T7558] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 171.452417][ T7522] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 171.834838][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 171.968031][ T4497] team0 (unregistering): Port device team_slave_1 removed [ 171.996147][ T4497] team0 (unregistering): Port device team_slave_0 removed [ 172.023948][ T4497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.075401][ T4497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.155492][ T4497] bond0 (unregistering): Released all slaves [ 172.723008][ T7421] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 172.770556][ T7610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1246'. [ 172.839814][ T7421] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 172.911406][ T7421] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 172.970388][ T7617] set_capacity_and_notify: 6 callbacks suppressed [ 172.970406][ T7617] loop2: detected capacity change from 0 to 1024 [ 172.986474][ T7421] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 173.069402][ T4229] Bluetooth: hci4: command 0x040f tx timeout [ 173.114897][ T6809] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 173.308227][ T1134] hfsplus: b-tree write err: -5, ino 4 [ 173.329606][ T7421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.369027][ T6809] usb 4-1: Using ep0 maxpacket: 16 [ 173.387926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.400899][ T4699] ------------[ cut here ]------------ [ 173.406835][ T4699] sysfs group 'power' not found for kobject 'ueagle-atm!eagleI.fw' [ 173.415641][ T3160] usb 2-1: [UEAGLE-ATM] firmware is not available [ 173.416540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.465502][ T4699] WARNING: CPU: 1 PID: 4699 at fs/sysfs/group.c:281 sysfs_remove_group+0x174/0x290 [ 173.506296][ T4699] Modules linked in: [ 173.515293][ T7421] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.517460][ T4699] CPU: 1 PID: 4699 Comm: kworker/1:11 Not tainted syzkaller #0 [ 173.522513][ T6809] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 173.551776][ T6809] usb 4-1: config 1 has no interface number 0 [ 173.555495][ T4699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 173.558683][ T6809] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 173.594653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.604017][ T4699] Workqueue: events request_firmware_work_func [ 173.617287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.636914][ T4699] RIP: 0010:sysfs_remove_group+0x174/0x290 [ 173.656128][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.664102][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.670061][ T6809] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 173.674777][ T4699] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 3e 31 d0 ff 49 8b 17 48 c7 c7 00 b4 39 8a 48 89 de e8 6c 3c c3 07 <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 36 25 8b ff [ 173.719410][ T6809] usb 4-1: config 1 interface 105 has no altsetting 0 [ 173.732348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.765350][ T4699] RSP: 0018:ffffc9000456f9a0 EFLAGS: 00010246 [ 173.769728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.785923][ T4699] RAX: d4b764dbb75d9c00 RBX: ffffffff8a9c55e0 RCX: ffff88802184d940 [ 173.796672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.813748][ T4699] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 173.828053][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.835295][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.851547][ T4699] RBP: dffffc0000000000 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 173.873179][ T4699] R10: dffffc0000000000 R11: ffffed10172267b0 R12: 1ffffffff1538ac0 [ 173.888030][ T4699] R13: 1ffff920008adf48 R14: ffff88807cd8be80 R15: ffff888060c33008 [ 173.904047][ T4699] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 173.909398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.915456][ T4699] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.936276][ T4699] CR2: 00007f3084f5a158 CR3: 000000007d0f0000 CR4: 00000000003506e0 [ 173.949293][ T6809] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 173.958471][ T6809] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 173.959472][ T4699] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 173.979820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.988717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.010213][ T6809] usb 4-1: Product: syz [ 174.014536][ T6809] usb 4-1: Manufacturer: syz [ 174.037568][ T4699] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 174.041022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.053765][ T6809] usb 4-1: SerialNumber: syz [ 174.063026][ T4699] Call Trace: [ 174.077250][ T4699] [ 174.080199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.085606][ T4699] ? sysfs_unmerge_group+0x109/0x130 [ 174.099319][ T7615] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 174.100882][ T4699] device_del+0x2cb/0xaf0 [ 174.106402][ T7615] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 174.114550][ T4699] ? mutex_unlock+0x10/0x10 [ 174.121344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.128667][ T4699] ? kill_device+0x160/0x160 [ 174.139877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.148684][ T4699] ? swake_up_all_locked+0x93/0x170 [ 174.159493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.166676][ T4699] firmware_fallback_sysfs+0x8d1/0xbc0 [ 174.185249][ T4699] _request_firmware+0xc86/0x12b0 [ 174.194847][ T7421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.195150][ T4699] request_firmware_work_func+0xac/0x1b0 [ 174.212603][ T4699] process_one_work+0x85f/0x1010 [ 174.217897][ T4699] ? worker_detach_from_pool+0x240/0x240 [ 174.224359][ T4699] ? lockdep_hardirqs_off+0x70/0x100 [ 174.229990][ T4699] ? _raw_spin_lock_irq+0xb7/0xf0 [ 174.236183][ T7421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.251177][ T4699] ? _raw_spin_lock_irqsave+0x100/0x100 [ 174.256782][ T4699] ? wq_worker_running+0x97/0x170 [ 174.267962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.271431][ T4699] worker_thread+0xaa6/0x1290 [ 174.283366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.287610][ T4699] ? lockdep_hardirqs_on+0x94/0x140 [ 174.302875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.303483][ T4699] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 174.318441][ T4699] kthread+0x436/0x520 [ 174.344500][ T4699] ? rcu_lock_release+0x20/0x20 [ 174.362607][ T4699] ? kthread_blkcg+0xd0/0xd0 [ 174.367441][ T4699] ret_from_fork+0x1f/0x30 [ 174.397382][ T4699] [ 174.419650][ T4699] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 174.427101][ T4699] CPU: 1 PID: 4699 Comm: kworker/1:11 Not tainted syzkaller #0 [ 174.434974][ T4699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 174.445420][ T4699] Workqueue: events request_firmware_work_func [ 174.451846][ T4699] Call Trace: [ 174.455333][ T4699] [ 174.458384][ T4699] dump_stack_lvl+0x188/0x250 [ 174.463192][ T4699] ? show_regs_print_info+0x20/0x20 [ 174.468441][ T4699] ? load_image+0x400/0x400 [ 174.473008][ T4699] panic+0x2e5/0x810 [ 174.477041][ T4699] ? bpf_jit_dump+0xd0/0xd0 [ 174.481591][ T4699] ? ret_from_fork+0x1f/0x30 [ 174.486431][ T4699] ? sysfs_remove_group+0x174/0x290 [ 174.491754][ T4699] __warn+0x248/0x2b0 [ 174.495771][ T4699] ? sysfs_remove_group+0x174/0x290 [ 174.501100][ T4699] report_bug+0x1b7/0x2e0 [ 174.505465][ T4699] handle_bug+0x3a/0x70 [ 174.509649][ T4699] exc_invalid_op+0x16/0x40 [ 174.514179][ T4699] asm_exc_invalid_op+0x16/0x20 [ 174.519076][ T4699] RIP: 0010:sysfs_remove_group+0x174/0x290 [ 174.525263][ T4699] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 3e 31 d0 ff 49 8b 17 48 c7 c7 00 b4 39 8a 48 89 de e8 6c 3c c3 07 <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 36 25 8b ff [ 174.546374][ T4699] RSP: 0018:ffffc9000456f9a0 EFLAGS: 00010246 [ 174.552701][ T4699] RAX: d4b764dbb75d9c00 RBX: ffffffff8a9c55e0 RCX: ffff88802184d940 [ 174.560943][ T4699] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 174.569042][ T4699] RBP: dffffc0000000000 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 174.577918][ T4699] R10: dffffc0000000000 R11: ffffed10172267b0 R12: 1ffffffff1538ac0 [ 174.586123][ T4699] R13: 1ffff920008adf48 R14: ffff88807cd8be80 R15: ffff888060c33008 [ 174.594254][ T4699] ? sysfs_unmerge_group+0x109/0x130 [ 174.599684][ T4699] device_del+0x2cb/0xaf0 [ 174.604087][ T4699] ? mutex_unlock+0x10/0x10 [ 174.608643][ T4699] ? kill_device+0x160/0x160 [ 174.613541][ T4699] ? swake_up_all_locked+0x93/0x170 [ 174.619130][ T4699] firmware_fallback_sysfs+0x8d1/0xbc0 [ 174.624744][ T4699] _request_firmware+0xc86/0x12b0 [ 174.629867][ T4699] request_firmware_work_func+0xac/0x1b0 [ 174.636022][ T4699] process_one_work+0x85f/0x1010 [ 174.641143][ T4699] ? worker_detach_from_pool+0x240/0x240 [ 174.647257][ T4699] ? lockdep_hardirqs_off+0x70/0x100 [ 174.652837][ T4699] ? _raw_spin_lock_irq+0xb7/0xf0 [ 174.658917][ T4699] ? _raw_spin_lock_irqsave+0x100/0x100 [ 174.669505][ T4699] ? wq_worker_running+0x97/0x170 [ 174.674773][ T4699] worker_thread+0xaa6/0x1290 [ 174.679881][ T4699] ? lockdep_hardirqs_on+0x94/0x140 [ 174.685358][ T4699] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 174.691427][ T4699] kthread+0x436/0x520 [ 174.695528][ T4699] ? rcu_lock_release+0x20/0x20 [ 174.700488][ T4699] ? kthread_blkcg+0xd0/0xd0 [ 174.705389][ T4699] ret_from_fork+0x1f/0x30 [ 174.709986][ T4699] [ 174.713108][ T4699] Kernel Offset: disabled [ 174.717914][ T4699] Rebooting in 86400 seconds..