last executing test programs: 6.919926403s ago: executing program 3 (id=1571): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x2007, 0x401, 0xffffffff, 0x20000000, 0x84e}) 6.779879951s ago: executing program 3 (id=1575): r0 = socket(0x10, 0x2, 0x0) fcntl$setflags(r0, 0x40b, 0x1000000000000) 6.524034681s ago: executing program 3 (id=1578): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000940)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x38}}, 0x0) 6.25997078s ago: executing program 3 (id=1583): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000200), 0x84, 0x46c, &(0x7f0000000900)="$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") mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]}) 5.45447559s ago: executing program 3 (id=1589): open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000400)=@filename='\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x281a404, 0x0) 3.43319253s ago: executing program 3 (id=1626): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'nr0\x00', {0x2, 0x0, @broadcast}}) 3.319410564s ago: executing program 32 (id=1626): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'nr0\x00', {0x2, 0x0, @broadcast}}) 2.507969103s ago: executing program 2 (id=1640): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x80}], 0x1, 0x200) 2.168748255s ago: executing program 1 (id=1643): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @local}, 0xa, &(0x7f0000000440)=[{&(0x7f0000001840)="bf249e10cbda42dcf0242d3afc4afbc38766c2dfe52f4c7d049efa8377a4fbf29da6935b86d20c9e76288e157213f28490953eab743e8cbf5c0e2c97db265c1c7436be28cb49904f401f49c6a112d2840085e15e33331dd529258c0b17f241bf1c70c2c6eee18ba84c758534", 0x6c}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x17}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x0) 1.993301722s ago: executing program 1 (id=1645): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @private}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000007000000890704"], 0x18}, 0x0) 1.79985023s ago: executing program 2 (id=1647): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x1, @loopback}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x7a, {0x2, 0x4e24, @empty}}) 1.799640905s ago: executing program 1 (id=1648): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) 1.648006103s ago: executing program 1 (id=1650): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0x5, 0x1, 0x0, @mcast2, @loopback={0x0, 0x460c6}, 0x7801, 0x0, 0x40001}}) 1.351744581s ago: executing program 4 (id=1652): r0 = syz_io_uring_setup(0x93c, &(0x7f00000009c0)={0x0, 0x200d369, 0x10, 0x1, 0x2fc}, &(0x7f0000000a40), &(0x7f0000000a80)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000340)={0x1, 0x1, 0x0, &(0x7f0000000280)=[{0x0}], 0x0}, 0x20) 1.252846075s ago: executing program 0 (id=1653): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3e, &(0x7f0000000180), 0x8) 1.155995419s ago: executing program 4 (id=1654): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 1.015288077s ago: executing program 4 (id=1655): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2}}) 879.949395ms ago: executing program 4 (id=1656): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x8c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x21, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}]}}}]}, 0x8c}}, 0x0) 639.92841ms ago: executing program 0 (id=1657): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000d081000418e00000c04fcff", 0x58}], 0x1) 592.817873ms ago: executing program 0 (id=1658): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x48, &(0x7f0000000180)={0x0, 0x9, '\x00', [@ra, @generic={0x0, 0x42, "5ccbc6769d601b053a002fb610804d76b8789eaf75358988f6b1f3bea2e32c3ed13780dcdf8cae1dc6247e4404efaf0db7d4ae7e8678bac42afae8f381b5e4a3c42c"}]}, 0x50) 575.541679ms ago: executing program 2 (id=1659): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 483.979585ms ago: executing program 2 (id=1660): r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0xc0844123, &(0x7f0000000280)=0x39) 483.877865ms ago: executing program 1 (id=1661): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBLED(r0, 0x4b65, 0x80004) 415.814259ms ago: executing program 4 (id=1662): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, 0x0, 0x0) 382.093347ms ago: executing program 2 (id=1663): r0 = syz_io_uring_setup(0x4177, &(0x7f0000000640)={0x0, 0xca, 0x10100}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, 0x0, 0x1) 257.468135ms ago: executing program 4 (id=1664): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 208.410601ms ago: executing program 1 (id=1665): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 208.013275ms ago: executing program 0 (id=1666): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000240)) 130.416752ms ago: executing program 2 (id=1667): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x2}]}, 0x24}}, 0x0) 44.343069ms ago: executing program 0 (id=1668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}}, 0x0) 0s ago: executing program 0 (id=1669): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[], 0x1, 0x17d, &(0x7f00000004c0)="$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") lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000340)=@known='user.incfs.metadata\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): ge from 0 to 1024 [ 97.659419][ T6846] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 97.816487][ T61] hfsplus: b-tree write err: -5, ino 4 [ 97.819671][ T5877] rc_core: IR keymap rc-xbox-dvd not found [ 97.885130][ T5877] Registered IR keymap rc-empty [ 97.916048][ T6846] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 97.922857][ T6846] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 97.940868][ T5877] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 97.958826][ T6897] loop2: detected capacity change from 0 to 256 [ 97.984336][ T5877] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 97.995671][ T6846] vhci_hcd vhci_hcd.0: Device attached [ 98.122910][ T6894] vhci_hcd: connection closed [ 98.132001][ T3827] usb 2-1: USB disconnect, device number 4 [ 98.132093][ C0] xbox_remote 2-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 98.138429][ T35] vhci_hcd: stop threads [ 98.200661][ T35] vhci_hcd: release socket [ 98.233943][ T5879] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 98.249578][ T35] vhci_hcd: disconnect device [ 98.259623][ T5879] usb 35-1: enqueue for inactive port 0 [ 98.293378][ T6904] loop0: detected capacity change from 0 to 512 [ 98.361469][ T5879] vhci_hcd: vhci_device speed not set [ 98.434307][ T6904] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.335: attempt to clear invalid blocks 2 len 1 [ 98.490321][ T6904] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 98.540181][ T6904] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.335: invalid indirect mapped block 1819239214 (level 0) [ 98.567878][ T6923] loop3: detected capacity change from 0 to 256 [ 98.577373][ T6904] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.335: invalid indirect mapped block 1819239214 (level 1) [ 98.601815][ T6904] EXT4-fs (loop0): 1 truncate cleaned up [ 98.608428][ T6904] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.654320][ T6923] exfat: Deprecated parameter 'namecase' [ 98.679875][ T6904] tmpfs: Bad value for 'mpol' [ 98.681726][ T6923] exfat: Deprecated parameter 'namecase' [ 98.767946][ T6923] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 98.837317][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.884614][ T6936] loop1: detected capacity change from 0 to 256 [ 99.031814][ T6936] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 99.097690][ T29] audit: type=1326 audit(1734758027.184:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b2f85d29 code=0x7ffc0000 [ 99.171615][ T29] audit: type=1326 audit(1734758027.184:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b2f85d29 code=0x7ffc0000 [ 99.199427][ T29] audit: type=1326 audit(1734758027.184:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7ff9b2f85d29 code=0x7ffc0000 [ 99.223656][ T29] audit: type=1326 audit(1734758027.184:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b2f85d29 code=0x7ffc0000 [ 99.245897][ T29] audit: type=1326 audit(1734758027.184:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b2f85d29 code=0x7ffc0000 [ 99.367568][ T6935] loop2: detected capacity change from 0 to 32768 [ 99.577302][ T6935] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 99.653995][ T6935] XFS (loop2): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 99.869807][ T6935] XFS (loop2): Quotacheck needed: Please wait. [ 99.943311][ T6935] XFS (loop2): Quotacheck: Done. [ 100.149394][ T6989] loop3: detected capacity change from 0 to 16 [ 100.170563][ T6989] erofs (device loop3): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 100.200780][ T6989] erofs (device loop3): mounted with root inode @ nid 36. [ 100.210582][ T5842] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 100.548827][ T7000] loop1: detected capacity change from 0 to 256 [ 100.602645][ T7000] exfat: Deprecated parameter 'namecase' [ 100.703686][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.371'. [ 100.722886][ T7002] loop0: detected capacity change from 0 to 1764 [ 100.743449][ T7000] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 100.751828][ T7008] loop2: detected capacity change from 0 to 256 [ 100.783034][ T7004] netlink: 'syz.3.371': attribute type 1 has an invalid length. [ 100.808908][ T7008] exfat: Deprecated parameter 'utf8' [ 100.837036][ T7008] exfat: Deprecated parameter 'utf8' [ 100.876058][ T7008] exfat: Deprecated parameter 'utf8' [ 100.917327][ T7008] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x0f9af3fb, utbl_chksum : 0xe619d30d) [ 101.135687][ T7016] loop3: detected capacity change from 0 to 512 [ 101.186575][ T7016] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.376: bad orphan inode 768 [ 101.264287][ T7024] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 101.301539][ T7016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.360113][ T7016] ext4 filesystem being mounted at /70/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.409995][ T7031] netlink: 36 bytes leftover after parsing attributes in process `syz.1.381'. [ 101.465316][ T7016] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 101.491409][ T7016] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 101.528816][ T7016] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.376: Failed to acquire dquot type 0 [ 101.720510][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.780082][ T7045] xt_hashlimit: overflow, try lower: 35184372088832/511 [ 102.210342][ T7063] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 102.289665][ T7069] netlink: 'syz.1.401': attribute type 11 has an invalid length. [ 102.445958][ T7077] netlink: 830 bytes leftover after parsing attributes in process `syz.2.405'. [ 103.020594][ T7107] loop2: detected capacity change from 0 to 64 [ 103.570532][ T7122] loop3: detected capacity change from 0 to 4096 [ 103.589433][ T7122] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 103.705612][ T7122] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 103.743997][ T7132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.429'. [ 103.777521][ T7122] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 103.959659][ T836] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 103.997782][ T7114] loop0: detected capacity change from 0 to 32768 [ 104.119754][ T7114] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 104.146682][ T836] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 104.156699][ T7114] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 104.165593][ T836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.180144][ T7114] bcachefs (loop0): Version upgrade required: [ 104.180144][ T7114] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 104.180144][ T7114] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.19: autofix_errors [ 104.180144][ T7114] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 104.250603][ T836] usb 5-1: Product: syz [ 104.254799][ T836] usb 5-1: Manufacturer: syz [ 104.259419][ T836] usb 5-1: SerialNumber: syz [ 104.294553][ T836] r8152-cfgselector 5-1: Unknown version 0x0000 [ 104.316660][ T836] r8152-cfgselector 5-1: config 0 descriptor?? [ 104.450584][ T7114] bcachefs (loop0): dropping and reconstructing all alloc info [ 104.511272][ T7114] bcachefs (loop0): accounting_read... done [ 104.583581][ T7114] bcachefs (loop0): alloc_read... done [ 104.602839][ T7114] bcachefs (loop0): stripes_read... done [ 104.636400][ T7114] bcachefs (loop0): snapshots_read... done [ 104.666189][ T7114] bcachefs (loop0): done starting filesystem [ 104.765396][ T836] r8152-cfgselector 5-1: USB disconnect, device number 4 [ 104.822789][ T7173] netlink: 'syz.1.443': attribute type 13 has an invalid length. [ 104.852374][ T7173] veth0_macvtap: left promiscuous mode [ 104.858068][ T7173] macvtap0: entered allmulticast mode [ 104.887077][ T7173] macvtap0: refused to change device tx_queue_len [ 105.002921][ T5837] bcachefs (loop0): shutting down [ 105.162719][ T5837] bcachefs (loop0): shutdown complete [ 105.919720][ T7219] netlink: 'syz.1.462': attribute type 11 has an invalid length. [ 105.927634][ T7219] netlink: 132 bytes leftover after parsing attributes in process `syz.1.462'. [ 106.222792][ T7233] loop3: detected capacity change from 0 to 256 [ 106.289680][ T8] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 106.315148][ T7233] FAT-fs (loop3): Directory bread(block 64) failed [ 106.331622][ T7233] FAT-fs (loop3): Directory bread(block 65) failed [ 106.351750][ T7233] FAT-fs (loop3): Directory bread(block 66) failed [ 106.358332][ T7233] FAT-fs (loop3): Directory bread(block 67) failed [ 106.381579][ T7233] FAT-fs (loop3): Directory bread(block 68) failed [ 106.410096][ T7233] FAT-fs (loop3): Directory bread(block 69) failed [ 106.416746][ T7233] FAT-fs (loop3): Directory bread(block 70) failed [ 106.459714][ T7216] loop2: detected capacity change from 0 to 32768 [ 106.465623][ T7233] FAT-fs (loop3): Directory bread(block 71) failed [ 106.500097][ T8] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 106.509972][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.542664][ T7233] FAT-fs (loop3): Directory bread(block 72) failed [ 106.558175][ T8] usb 5-1: config 0 has no interface number 0 [ 106.583696][ T7233] FAT-fs (loop3): Directory bread(block 73) failed [ 106.590931][ T8] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 106.628041][ T8] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 106.664836][ T8] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.719536][ T8] usb 5-1: config 0 interface 52 has no altsetting 0 [ 106.747253][ T8] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 106.765516][ T8] usb 5-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 106.791149][ T8] usb 5-1: Product: syz [ 106.795616][ T8] usb 5-1: Manufacturer: syz [ 106.802693][ T8] usb 5-1: SerialNumber: syz [ 106.814683][ T8] usb 5-1: config 0 descriptor?? [ 107.088927][ T8] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 107.138905][ T8] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -5 [ 107.292472][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.475'. [ 107.327328][ T8] usb 5-1: USB disconnect, device number 5 [ 107.419712][ T7271] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 107.532189][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.477'. [ 108.222995][ T7304] loop3: detected capacity change from 0 to 1024 [ 108.380824][ T7304] hfsplus: trying to free free bnode 0(1) [ 108.512766][ T7318] loop4: detected capacity change from 0 to 256 [ 108.528773][ T12] hfsplus: b-tree write err: -5, ino 4 [ 108.626486][ T7318] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 108.916613][ T7300] loop2: detected capacity change from 0 to 32768 [ 108.949041][ T7300] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.483 (7300) [ 109.025243][ T7300] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.072424][ T7300] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 109.123769][ T7300] BTRFS info (device loop2): using free-space-tree [ 109.156625][ T7339] netlink: 'syz.3.499': attribute type 7 has an invalid length. [ 109.180250][ T7339] netlink: 'syz.3.499': attribute type 8 has an invalid length. [ 109.256098][ T7340] loop1: detected capacity change from 0 to 4096 [ 109.314818][ T7340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.431302][ T5842] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.583344][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.697733][ T7372] netlink: 16 bytes leftover after parsing attributes in process `syz.0.506'. [ 109.741204][ T7372] netlink: 16 bytes leftover after parsing attributes in process `syz.0.506'. [ 110.067354][ T7383] loop1: detected capacity change from 0 to 2048 [ 110.125385][ T7383] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 110.268190][ T7392] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.283481][ T7383] syz.1.513: attempt to access beyond end of device [ 110.283481][ T7383] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 110.488072][ T7383] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 16777227 [ 110.518829][ T7383] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=16) [ 110.573640][ T7383] Remounting filesystem read-only [ 110.591435][ T7383] NILFS (loop1): error -5 truncating bmap (ino=16) [ 110.762792][ T5828] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 110.822766][ T7400] loop0: detected capacity change from 0 to 32768 [ 110.842381][ T7400] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.520 (7400) [ 110.842890][ T29] audit: type=1400 audit(1734758038.941:13): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7406 comm="syz.4.524" [ 110.969179][ T7400] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 110.979683][ T7400] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 110.988700][ T7400] BTRFS info (device loop0): using free-space-tree [ 111.457874][ T7445] netlink: 'syz.3.533': attribute type 1 has an invalid length. [ 111.511400][ T7445] netlink: 224 bytes leftover after parsing attributes in process `syz.3.533'. [ 111.526471][ T7408] loop2: detected capacity change from 0 to 32768 [ 111.534678][ T5837] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 111.948071][ T7408] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=xxhash,data_checksum=xxhash,compression=lz4,str_hash=crc32c,norecovery,reconstruct_alloc,no_data_io [ 111.966760][ T7408] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 111.975022][ T7408] bcachefs (loop2): Version upgrade required: [ 111.975022][ T7408] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 111.975022][ T7408] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.19: autofix_errors [ 111.975022][ T7408] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 112.045071][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.052793][ T7408] bcachefs (loop2): dropping and reconstructing all alloc info [ 112.178944][ T7408] bcachefs (loop2): accounting_read... done [ 112.194482][ T7408] bcachefs (loop2): alloc_read... done [ 112.203627][ T7408] bcachefs (loop2): stripes_read... done [ 112.212130][ T7408] bcachefs (loop2): snapshots_read... done [ 112.219242][ T7408] bcachefs (loop2): done starting filesystem [ 112.592087][ T5842] bcachefs (loop2): shutting down [ 112.758064][ T25] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 112.792858][ T7489] loop3: detected capacity change from 0 to 32768 [ 112.853884][ T5842] bcachefs (loop2): shutdown complete [ 112.868490][ T7489] ERROR: (device loop3): diAllocAG: nfreeinos = 0, but iag on freelist [ 112.868490][ T7489] [ 112.911883][ T25] usb 5-1: config 8 has an invalid interface number: 187 but max is 0 [ 112.927069][ T25] usb 5-1: config 8 has no interface number 0 [ 112.944973][ T7489] ialloc: diAlloc returned -5! [ 112.952064][ T25] usb 5-1: config 8 interface 187 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 112.985225][ T25] usb 5-1: config 8 interface 187 has no altsetting 0 [ 113.042742][ T25] usb 5-1: New USB device found, idVendor=12d1, idProduct=b291, bcdDevice=37.7d [ 113.075371][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.083582][ T25] usb 5-1: Product: syz [ 113.087936][ T25] usb 5-1: Manufacturer: syz [ 113.092566][ T25] usb 5-1: SerialNumber: syz [ 113.394795][ T25] usbhid 5-1:8.187: couldn't find an input interrupt endpoint [ 113.406624][ T25] usb 5-1: USB disconnect, device number 6 [ 113.510533][ T7521] loop0: detected capacity change from 0 to 256 [ 113.568460][ T7520] xt_CT: No such helper "pptp" [ 113.858100][ T7514] loop1: detected capacity change from 0 to 32768 [ 113.908384][ T7514] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.556 (7514) [ 114.067638][ T7514] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 114.093046][ T7514] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 114.103684][ T7514] BTRFS info (device loop1): disk space caching is enabled [ 114.111261][ T7514] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 114.271922][ T7558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.567'. [ 114.312814][ T7514] BTRFS info (device loop1): rebuilding free space tree [ 114.430479][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.571'. [ 114.449906][ T7568] netlink: 16 bytes leftover after parsing attributes in process `syz.4.571'. [ 114.455285][ T7514] BTRFS info (device loop1): disabling free space tree [ 114.466369][ T7514] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 114.476089][ T7514] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 114.546119][ T7514] BTRFS info (device loop1): balance: start -f -sprofiles=system,usage=9223372041149743111,devid=0,limit=4..4 [ 114.559592][ T7514] BTRFS info (device loop1): balance: ended with status: 0 [ 114.702264][ T7572] loop0: detected capacity change from 0 to 512 [ 114.787103][ T7572] 9pnet_fd: p9_fd_create_unix (7572): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 114.860830][ T5828] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 114.929293][ T7579] xt_TCPMSS: Only works on TCP SYN packets [ 115.136255][ T7585] loop0: detected capacity change from 0 to 256 [ 115.692149][ T7606] loop4: detected capacity change from 0 to 2048 [ 115.705016][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.588'. [ 115.940216][ T7606] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.020757][ T7618] netlink: 132 bytes leftover after parsing attributes in process `syz.3.594'. [ 116.030333][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.594'. [ 116.046713][ T7620] syz.2.596: attempt to access beyond end of device [ 116.046713][ T7620] loop2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 116.061159][ T7620] qnx4: unable to read the superblock [ 116.302625][ T7629] loop3: detected capacity change from 0 to 1764 [ 116.365340][ T7629] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 116.379886][ T7610] loop1: detected capacity change from 0 to 32768 [ 116.387305][ T7610] XFS: ikeep mount option is deprecated. [ 116.526247][ T7638] netlink: 'syz.2.605': attribute type 2 has an invalid length. [ 116.538217][ T7640] netlink: 20 bytes leftover after parsing attributes in process `syz.3.606'. [ 116.605631][ T7645] loop0: detected capacity change from 0 to 256 [ 116.640958][ T7645] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 116.657578][ T7610] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 116.763140][ T7610] XFS (loop1): Ending clean mount [ 116.830062][ T7654] ip6gre1: entered allmulticast mode [ 116.846700][ T7610] XFS (loop1): Quotacheck needed: Please wait. [ 116.942697][ T7656] cgroup2: Unexpected value for 'nsdelegate' [ 116.987466][ T7610] XFS (loop1): Quotacheck: Done. [ 117.089775][ T5828] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 117.218217][ T7660] netlink: 'syz.3.611': attribute type 10 has an invalid length. [ 117.282141][ T7652] loop4: detected capacity change from 0 to 32768 [ 117.373113][ T7660] team0: Device ipvlan1 failed to register rx_handler [ 117.526996][ T7669] xfrm1: entered allmulticast mode [ 117.646596][ T7652] JBD2: Ignoring recovery information on journal [ 117.815280][ T7652] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 117.933306][ T7688] netlink: 596 bytes leftover after parsing attributes in process `syz.3.624'. [ 118.103727][ T5838] ocfs2: Unmounting device (7,4) on (node local) [ 118.154675][ T7695] netlink: 'syz.0.627': attribute type 21 has an invalid length. [ 118.619514][ T29] audit: type=1326 audit(1734758046.778:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7709 comm="syz.2.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a33985d29 code=0x7ffc0000 [ 118.704391][ T29] audit: type=1326 audit(1734758046.778:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7709 comm="syz.2.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a33985d29 code=0x7ffc0000 [ 118.756152][ T29] audit: type=1326 audit(1734758046.798:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7709 comm="syz.2.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f8a33985d29 code=0x7ffc0000 [ 118.825449][ T29] audit: type=1326 audit(1734758046.798:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7709 comm="syz.2.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a33985d29 code=0x7ffc0000 [ 118.872971][ T29] audit: type=1326 audit(1734758046.798:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7709 comm="syz.2.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a33985d29 code=0x7ffc0000 [ 118.902819][ T7690] loop1: detected capacity change from 0 to 32768 [ 118.942651][ T7690] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 118.942651][ T7690] [ 119.003186][ T3827] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.044504][ T61] read_mapping_page failed! [ 119.049656][ T61] ERROR: (device loop1): txCommit: [ 119.049656][ T61] [ 119.057447][ T61] jfs_write_inode: jfs_commit_inode failed! [ 119.073761][ T7722] ip6t_REJECT: ECHOREPLY is not supported [ 119.144460][ T7726] loop0: detected capacity change from 0 to 64 [ 119.197356][ T3827] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 119.250202][ T3827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.301094][ T3827] usb 4-1: Product: syz [ 119.305820][ T3827] usb 4-1: Manufacturer: syz [ 119.310750][ T3827] usb 4-1: SerialNumber: syz [ 119.386476][ T7726] Trying to free block not in datazone [ 119.398868][ T3827] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 119.412257][ T7726] Trying to free block not in datazone [ 119.418269][ T7726] Trying to free block not in datazone [ 119.437195][ T7726] Trying to free block not in datazone [ 119.465228][ T7726] minix_free_block (loop0:6): bit already cleared [ 119.509064][ T7726] Trying to free block not in datazone [ 119.553980][ T7726] Trying to free block not in datazone [ 119.796046][ T25] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 120.115610][ T836] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 120.284273][ T836] usb 2-1: unable to get BOS descriptor or descriptor too short [ 120.304214][ T8] usb 4-1: USB disconnect, device number 3 [ 120.316461][ T7752] loop4: detected capacity change from 0 to 32768 [ 120.322750][ T836] usb 2-1: string descriptor 0 read error: -22 [ 120.328846][ T7752] [ 120.328846][ T7752] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.328846][ T7752] [ 120.353301][ T836] usb 2-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=ad.c0 [ 120.372548][ T7752] ea_get: invalid extended attribute [ 120.388439][ T836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.398957][ T7752] ffff8880613b8330: 30 00 07 00 00 00 00 00 00 00 65 72 2e 78 61 74 0.........er.xat [ 120.416305][ T7752] ffff8880613b8340: 74 72 31 00 78 61 74 74 72 31 00 0b 06 00 75 73 tr1.xattr1....us [ 120.426083][ T7752] ffff8880613b8350: 65 72 2e 78 61 74 74 72 32 00 78 61 74 74 72 32 er.xattr2.xattr2 [ 120.442170][ T836] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 120.473575][ T5838] [ 120.473575][ T5838] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.473575][ T5838] [ 120.499246][ T5838] [ 120.499246][ T5838] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.499246][ T5838] [ 120.658393][ T836] dvb-usb: bulk message failed: -22 (1/0) [ 120.677363][ T836] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 120.693128][ T836] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 120.712868][ T7773] loop2: detected capacity change from 0 to 64 [ 120.729309][ T836] usb 2-1: media controller created [ 120.782322][ T7775] loop0: detected capacity change from 0 to 1024 [ 120.794550][ T836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.805438][ T7773] hfs: filesystem is marked locked, mounting read-only. [ 120.835397][ T7775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.858150][ T7773] hfs: filesystem is marked locked, leaving read-only. [ 120.881697][ T25] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 120.888681][ T25] ath9k_htc: Failed to initialize the device [ 120.918998][ T836] DVB: Unable to find symbol lgdt330x_attach() [ 120.925634][ T836] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 120.935477][ T836] dvb-usb: bulk message failed: -22 (1/0) [ 120.943761][ T836] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 120.953352][ T8] usb 4-1: ath9k_htc: USB layer deinitialized [ 120.968201][ T836] usb 2-1: USB disconnect, device number 5 [ 121.025863][ T836] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 121.044649][ T7775] EXT4-fs error (device loop0): __ext4_remount:6738: comm syz.0.668: Abort forced by user [ 121.085435][ T7775] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 121.282382][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.469689][ T7802] ip6gre1: entered allmulticast mode [ 121.713989][ T7810] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 121.729016][ T7810] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 121.796910][ T7784] loop3: detected capacity change from 0 to 32768 [ 121.983200][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 122.216196][ T7826] loop1: detected capacity change from 0 to 4096 [ 122.223869][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 122.230550][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.243827][ T8] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 122.254032][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 122.263763][ T8] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 122.274753][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 122.283982][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 122.292210][ T8] usb 1-1: SerialNumber: syz [ 122.311422][ T7812] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 122.320369][ T8] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 122.329561][ T8] usb-storage 1-1:1.0: USB Mass Storage device detected [ 122.372146][ T8] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 122.404420][ T8] scsi host1: usb-storage 1-1:1.0 [ 122.521332][ T7839] loop3: detected capacity change from 0 to 1764 [ 122.660683][ T5831] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 122.832482][ T5831] usb 5-1: config 0 interface 0 has no altsetting 0 [ 122.839444][ T5831] usb 5-1: New USB device found, idVendor=0e41, idProduct=4150, bcdDevice=1f.c8 [ 122.853882][ T8] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 122.860677][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.891697][ T5831] usb 5-1: config 0 descriptor?? [ 122.908899][ T5831] snd_usb_toneport 5-1:0.0: Line 6 POD Studio UX1 found [ 123.055702][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.073300][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 123.093686][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 123.108800][ T5831] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 123.120463][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 123.126394][ T5831] snd_usb_toneport 5-1:0.0: Line 6 POD Studio UX1 now disconnected [ 123.141366][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.157054][ T5831] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 123.182258][ T8] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 123.192730][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.210730][ T8] usb 3-1: Product: syz [ 123.222943][ T8] usb 3-1: Manufacturer: syz [ 123.243928][ T8] usb 3-1: SerialNumber: syz [ 123.262041][ T8] usb 3-1: config 0 descriptor?? [ 123.275315][ T7844] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 123.370159][ T9] usb 5-1: USB disconnect, device number 7 [ 123.404028][ T8] rc_core: IR keymap rc-xbox-dvd not found [ 123.409972][ T8] Registered IR keymap rc-empty [ 123.419369][ T8] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 123.464615][ T8] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 123.573171][ T7844] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 123.579739][ T7844] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 123.603429][ T7833] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 123.641059][ T7844] vhci_hcd vhci_hcd.0: Device attached [ 123.675989][ T7870] vhci_hcd: connection closed [ 123.676377][ T12] vhci_hcd: stop threads [ 123.692376][ T12] vhci_hcd: release socket [ 123.702494][ T12] vhci_hcd: disconnect device [ 123.714339][ T3827] usb 3-1: USB disconnect, device number 3 [ 123.714430][ C0] xbox_remote 3-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 123.973225][ T7861] loop1: detected capacity change from 0 to 32768 [ 123.984449][ T7861] XFS: noikeep mount option is deprecated. [ 124.028955][ T7861] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 124.230399][ T7861] XFS (loop1): Ending clean mount [ 124.257392][ T7861] XFS (loop1): Quotacheck needed: Please wait. [ 124.374018][ T7861] XFS (loop1): Quotacheck: Done. [ 124.457625][ T836] usb 1-1: USB disconnect, device number 6 [ 124.516321][ T5828] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.054594][ T7886] loop3: detected capacity change from 0 to 32768 [ 125.333556][ T7921] loop1: detected capacity change from 0 to 256 [ 125.361095][ T7891] loop4: detected capacity change from 0 to 40427 [ 125.409159][ T7921] FAT-fs (loop1): Directory bread(block 64) failed [ 125.417133][ T7891] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 125.427732][ T7921] FAT-fs (loop1): Directory bread(block 65) failed [ 125.434646][ T7891] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 125.443185][ T7921] FAT-fs (loop1): Directory bread(block 66) failed [ 125.450164][ T7921] FAT-fs (loop1): Directory bread(block 67) failed [ 125.462014][ T7921] FAT-fs (loop1): Directory bread(block 68) failed [ 125.468665][ T7921] FAT-fs (loop1): Directory bread(block 69) failed [ 125.510886][ T7891] F2FS-fs (loop4): invalid crc value [ 125.537142][ T7921] FAT-fs (loop1): Directory bread(block 70) failed [ 125.555168][ T7891] F2FS-fs (loop4): Found nat_bits in checkpoint [ 125.565479][ T7921] FAT-fs (loop1): Directory bread(block 71) failed [ 125.585918][ T7921] FAT-fs (loop1): Directory bread(block 72) failed [ 125.610195][ T7921] FAT-fs (loop1): Directory bread(block 73) failed [ 125.629833][ T7932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.706187][ T7891] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 125.752603][ T7891] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 125.950313][ T7944] netlink: 24 bytes leftover after parsing attributes in process `syz.3.733'. [ 126.338681][ T7952] loop0: detected capacity change from 0 to 4096 [ 126.746721][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.739'. [ 126.763545][ T7975] loop2: detected capacity change from 0 to 8 [ 126.867875][ T7975] SQUASHFS error: xz decompression failed, data probably corrupt [ 126.907742][ T7975] SQUASHFS error: Failed to read block 0x249: -5 [ 126.937792][ T7975] SQUASHFS error: Unable to read metadata cache entry [247] [ 126.946804][ T7975] SQUASHFS error: Unable to read directory block [247:26] [ 127.123483][ T7980] loop0: detected capacity change from 0 to 4096 [ 127.142738][ T7980] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 127.210711][ T7980] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 127.521979][ T7996] loop3: detected capacity change from 0 to 128 [ 127.547551][ T7964] loop1: detected capacity change from 0 to 40427 [ 127.559628][ T7964] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 127.566278][ T7964] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 127.600161][ T7964] F2FS-fs (loop1): Found nat_bits in checkpoint [ 127.646797][ T7996] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 127.657492][ T7964] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 127.664866][ T7964] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 127.684885][ T7996] FAT-fs (loop3): Filesystem has been set read-only [ 127.857209][ T5833] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 128.420263][ T8020] loop4: detected capacity change from 0 to 164 [ 128.469547][ T8002] loop0: detected capacity change from 0 to 32768 [ 128.484066][ T8020] rock: directory entry would overflow storage [ 128.496610][ T8020] rock: sig=0x4543, size=28, remaining=18 [ 128.705246][ T8010] loop3: detected capacity change from 0 to 32768 [ 128.718386][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.771'. [ 128.743137][ T8010] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.764 (8010) [ 128.777762][ T8028] loop1: detected capacity change from 0 to 64 [ 128.794038][ T8002] JBD2: Ignoring recovery information on journal [ 128.813277][ T8010] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 128.864597][ T8010] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 129.020897][ T8010] BTRFS info (device loop3): disk space caching is enabled [ 129.028165][ T8010] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 129.101547][ T8002] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 129.225067][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.777'. [ 129.247095][ T5837] ocfs2: Unmounting device (7,0) on (node local) [ 129.350415][ T8010] BTRFS info (device loop3): rebuilding free space tree [ 129.489487][ T8010] BTRFS info (device loop3): disabling free space tree [ 129.496544][ T8010] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 129.513087][ T8010] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 129.696284][ T8077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.787'. [ 129.810398][ T5833] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 130.369066][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.796'. [ 130.637422][ T8110] loop1: detected capacity change from 0 to 256 [ 130.719142][ T8110] FAT-fs (loop1): Directory bread(block 64) failed [ 130.754927][ T8110] FAT-fs (loop1): Directory bread(block 65) failed [ 130.773922][ T8110] FAT-fs (loop1): Directory bread(block 66) failed [ 130.783944][ T8110] FAT-fs (loop1): Directory bread(block 67) failed [ 130.802482][ T8114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.826916][ T8110] FAT-fs (loop1): Directory bread(block 68) failed [ 130.859079][ T8110] FAT-fs (loop1): Directory bread(block 69) failed [ 130.878485][ T8110] FAT-fs (loop1): Directory bread(block 70) failed [ 130.888383][ T8110] FAT-fs (loop1): Directory bread(block 71) failed [ 130.911118][ T8083] loop0: detected capacity change from 0 to 32768 [ 130.924852][ T8110] FAT-fs (loop1): Directory bread(block 72) failed [ 130.937005][ T8110] FAT-fs (loop1): Directory bread(block 73) failed [ 131.184017][ T8083] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 131.243296][ T8083] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 131.327125][ T8083] bcachefs (loop0): Version upgrade required: [ 131.327125][ T8083] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 131.327125][ T8083] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.19: autofix_errors [ 131.327125][ T8083] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 131.397246][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.476122][ T8083] bcachefs (loop0): dropping and reconstructing all alloc info [ 131.576747][ T8148] loop1: detected capacity change from 0 to 16 [ 131.605203][ T8083] bcachefs (loop0): accounting_read... done [ 131.625295][ T8083] bcachefs (loop0): alloc_read... done [ 131.636042][ T8144] loop2: detected capacity change from 0 to 4096 [ 131.653120][ T8083] bcachefs (loop0): stripes_read... done [ 131.660747][ T8144] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 131.671739][ T8148] erofs (device loop1): mounted with root inode @ nid 36. [ 131.696542][ T8083] bcachefs (loop0): snapshots_read... done [ 131.757603][ T8083] bcachefs (loop0): done starting filesystem [ 131.774783][ T8152] loop3: detected capacity change from 0 to 4096 [ 131.863492][ T5837] bcachefs (loop0): shutting down [ 131.878334][ T8152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.956083][ T5837] bcachefs (loop0): shutdown complete [ 131.992916][ T8144] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 132.009309][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.259597][ T8150] loop4: detected capacity change from 0 to 32768 [ 132.366464][ T8150] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 132.579772][ T3827] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 132.640749][ T8150] XFS (loop4): Ending clean mount [ 132.661115][ T8150] XFS (loop4): Quotacheck needed: Please wait. [ 132.703715][ T8175] loop2: detected capacity change from 0 to 32768 [ 132.768459][ T8150] XFS (loop4): Quotacheck: Done. [ 132.798294][ T8175] (syz.2.826,8175,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 132.828556][ T8175] (syz.2.826,8175,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 132.842698][ T3827] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.854921][ T3827] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 132.874649][ T5838] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 132.897564][ T3827] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 132.907369][ T3827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.914501][ T8175] JBD2: Ignoring recovery information on journal [ 132.936452][ T3827] hub 4-1:1.0: bad descriptor, ignoring hub [ 132.943454][ T3827] hub 4-1:1.0: probe with driver hub failed with error -5 [ 132.983561][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.990110][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.011441][ T8175] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 133.146656][ T836] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 133.243938][ T5842] ocfs2: Unmounting device (7,2) on (node local) [ 133.267811][ T8] usb 4-1: USB disconnect, device number 4 [ 133.315607][ T836] usb 2-1: Using ep0 maxpacket: 16 [ 133.329951][ T836] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 133.339595][ T8189] netlink: 'syz.4.833': attribute type 1 has an invalid length. [ 133.354828][ T836] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 133.384839][ T836] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 133.440917][ T836] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 133.454958][ T836] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 133.489318][ T836] usb 2-1: config 0 has no interface number 0 [ 133.495896][ T836] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 133.519847][ T836] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 133.530634][ T836] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 133.553091][ T836] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 133.613773][ T836] usb 2-1: config 0 interface 125 has no altsetting 0 [ 133.643920][ T836] usb 2-1: config 0 interface 125 has no altsetting 2 [ 133.661800][ T836] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 133.671406][ T836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.691570][ T836] usb 2-1: Product: syz [ 133.695907][ T836] usb 2-1: Manufacturer: syz [ 133.700530][ T836] usb 2-1: SerialNumber: syz [ 133.709012][ T8195] loop2: detected capacity change from 0 to 64 [ 133.721043][ T836] usb 2-1: config 0 descriptor?? [ 133.729782][ T836] usb 2-1: selecting invalid altsetting 2 [ 133.958727][ T8201] vcan0 speed is unknown, defaulting to 1000 [ 133.984980][ T8201] vcan0 speed is unknown, defaulting to 1000 [ 134.001063][ T8201] vcan0 speed is unknown, defaulting to 1000 [ 134.174116][ T5831] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 134.238070][ C0] usb 2-1: async_complete: urb error -71 [ 134.243841][ C0] usb 2-1: async_complete: urb error -71 [ 134.249556][ C0] usb 2-1: async_complete: urb error -71 [ 134.256552][ T836] get_1284_register: usb error -71 [ 134.264313][ T836] uss720 2-1:0.125: probe with driver uss720 failed with error -71 [ 134.277529][ T836] usb 2-1: USB disconnect, device number 6 [ 134.288062][ T3827] vcan0 speed is unknown, defaulting to 1000 [ 134.313639][ T8201] infiniband syz0: set active [ 134.323541][ T8201] infiniband syz0: added vcan0 [ 134.389886][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 134.401882][ T5831] usb 3-1: config 1 interface 0 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 64 [ 134.403467][ T8201] RDS/IB: syz0: added [ 134.416823][ T8201] smc: adding ib device syz0 with port count 1 [ 134.424809][ T8201] smc: ib device syz0 port 1 has pnetid [ 134.435282][ T8] vcan0 speed is unknown, defaulting to 1000 [ 134.435866][ T5831] usb 3-1: config 1 interface 0 altsetting 16 endpoint 0x3 has invalid wMaxPacketSize 0 [ 134.467062][ T8201] vcan0 speed is unknown, defaulting to 1000 [ 134.532806][ T5831] usb 3-1: config 1 interface 0 altsetting 16 bulk endpoint 0x3 has invalid maxpacket 0 [ 134.562014][ T5831] usb 3-1: config 1 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.588835][ T5831] usb 3-1: config 1 interface 0 has no altsetting 0 [ 134.600752][ T5831] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 134.611776][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.628498][ T5831] usb 3-1: Product: syz [ 134.632862][ T5831] usb 3-1: Manufacturer: syz [ 134.642969][ T5831] usb 3-1: SerialNumber: syz [ 134.656140][ T8199] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 134.669499][ T5831] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 134.815966][ T8201] vcan0 speed is unknown, defaulting to 1000 [ 134.899957][ T8199] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 134.974795][ T5831] usbtest 3-1:1.0: Linux user mode ISO test driver [ 134.979341][ T8213] loop0: detected capacity change from 0 to 32768 [ 135.036434][ T5831] usbtest 3-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 135.066246][ T8213] (syz.0.842,8213,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 135.104273][ T8213] (syz.0.842,8213,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 135.125661][ T8222] loop3: detected capacity change from 0 to 8 [ 135.172409][ T8213] JBD2: Ignoring recovery information on journal [ 135.284109][ T8213] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 135.300793][ T836] usb 3-1: USB disconnect, device number 4 [ 135.539521][ T8201] vcan0 speed is unknown, defaulting to 1000 [ 135.598595][ T5837] ocfs2: Unmounting device (7,0) on (node local) [ 135.934090][ T8201] vcan0 speed is unknown, defaulting to 1000 [ 136.385257][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 136.414023][ T8201] vcan0 speed is unknown, defaulting to 1000 [ 136.583195][ T25] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 136.603480][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.628883][ T25] usb 4-1: Product: syz [ 136.642550][ T8264] loop0: detected capacity change from 0 to 32768 [ 136.659248][ T25] usb 4-1: Manufacturer: syz [ 136.660186][ T8264] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.866 (8264) [ 136.677063][ T25] usb 4-1: SerialNumber: syz [ 136.679304][ T25] usb 4-1: config 0 descriptor?? [ 136.720761][ T25] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 136.725648][ T8264] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 136.737349][ T8264] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 136.746305][ T8264] BTRFS info (device loop0): using free-space-tree [ 137.130979][ T25] gspca_sunplus: reg_w_riv err -71 [ 137.137115][ T25] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 137.186016][ T25] usb 4-1: USB disconnect, device number 5 [ 137.195442][ T8299] loop2: detected capacity change from 0 to 24 [ 137.202310][ T8299] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 137.223555][ T8299] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 137.269867][ T8299] VFS: Lookup of 'file0' in romfs loop2 would have caused loop [ 137.313703][ T5837] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 137.465543][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.879'. [ 137.474555][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.879'. [ 137.483375][ T8306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.879'. [ 137.885982][ T8318] netlink: 'syz.4.884': attribute type 6 has an invalid length. [ 138.179828][ T8332] netlink: 16 bytes leftover after parsing attributes in process `syz.3.888'. [ 138.663166][ T8345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.846994][ T8354] capability: warning: `syz.0.901' uses 32-bit capabilities (legacy support in use) [ 139.334028][ T8371] loop0: detected capacity change from 0 to 2048 [ 139.357882][ T8351] loop2: detected capacity change from 0 to 32768 [ 139.372166][ T8351] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.899 (8351) [ 139.392051][ T8351] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 139.395479][ T8371] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.403758][ T8351] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 139.420817][ T8351] BTRFS info (device loop2): disk space caching is enabled [ 139.432392][ T8351] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 139.699033][ T8351] BTRFS info (device loop2): rebuilding free space tree [ 139.743988][ T8351] BTRFS info (device loop2): disabling free space tree [ 139.750936][ T8351] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 139.760757][ T8351] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 139.859195][ T8405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.919'. [ 139.871438][ T8406] netlink: 68 bytes leftover after parsing attributes in process `syz.1.918'. [ 139.884477][ T8351] BTRFS info (device loop2): balance: start -f -sdrange=0..0,vrange=0..18446744073709551613,limit=17179869188,limit=4..4,stripes=8..255 [ 139.895437][ T8405] xfrm1: entered promiscuous mode [ 139.903736][ T8405] xfrm1: entered allmulticast mode [ 139.910006][ T8351] BTRFS info (device loop2): balance: ended with status: 0 [ 140.022805][ T29] audit: type=1326 audit(1734758068.283:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.0.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe509585d29 code=0x7ffc0000 [ 140.045626][ T29] audit: type=1326 audit(1734758068.283:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.0.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7fe509585d29 code=0x7ffc0000 [ 140.068389][ T29] audit: type=1326 audit(1734758068.283:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.0.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe509585d29 code=0x7ffc0000 [ 140.090906][ T29] audit: type=1326 audit(1734758068.283:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.0.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe509585d29 code=0x7ffc0000 [ 140.130635][ T5842] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 140.238110][ T8417] loop4: detected capacity change from 0 to 64 [ 140.253482][ T8417] hfs: unable to locate alternate MDB [ 140.258984][ T8417] hfs: continuing without an alternate MDB [ 140.696994][ T8426] loop3: detected capacity change from 0 to 32768 [ 140.743045][ T8434] loop0: detected capacity change from 0 to 512 [ 140.786262][ T8426] (syz.3.930,8426,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 140.808620][ T8426] (syz.3.930,8426,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 140.927027][ T8434] EXT4-fs (loop0): orphan cleanup on readonly fs [ 140.980486][ T8434] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.928: casefold flag without casefold feature [ 141.016499][ T8434] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.928: couldn't read orphan inode 15 (err -117) [ 141.049182][ T8434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 141.101280][ T8426] JBD2: Ignoring recovery information on journal [ 141.174769][ T8429] loop1: detected capacity change from 0 to 32768 [ 141.202289][ T8445] loop2: detected capacity change from 0 to 256 [ 141.207319][ T8426] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 141.231428][ T8445] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 141.277384][ T8429] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 141.294332][ T8445] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 141.320507][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.320904][ T8445] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 141.371721][ T8445] UDF-fs: Scanning with blocksize 512 failed [ 141.386831][ T8445] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 141.436832][ T8445] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.511923][ T5833] ocfs2: Unmounting device (7,3) on (node local) [ 141.535430][ T5828] ocfs2: Unmounting device (7,1) on (node local) [ 141.794226][ T5831] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 141.991747][ T5831] usb 1-1: Using ep0 maxpacket: 8 [ 142.003196][ T5831] usb 1-1: unable to get BOS descriptor or descriptor too short [ 142.015620][ T8471] netlink: 36 bytes leftover after parsing attributes in process `syz.4.947'. [ 142.030947][ T5831] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 142.030966][ T8471] netlink: 36 bytes leftover after parsing attributes in process `syz.4.947'. [ 142.051064][ T8469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.948'. [ 142.061075][ T5831] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.061258][ T8471] netlink: 36 bytes leftover after parsing attributes in process `syz.4.947'. [ 142.079252][ T5831] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 142.096156][ T5831] usb 1-1: config 1 has no interface number 1 [ 142.102767][ T5831] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 142.125106][ T5831] usb 1-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x1E, changing to 0xE [ 142.144406][ T5831] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 142.165869][ T8475] loop2: detected capacity change from 0 to 4096 [ 142.192796][ T8475] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 142.200039][ T5831] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.259357][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.274955][ T5831] usb 1-1: Product: syz [ 142.286028][ T5831] usb 1-1: Manufacturer: syz [ 142.316982][ T5831] usb 1-1: SerialNumber: syz [ 142.334836][ T8475] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 142.343420][ T8475] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 142.750852][ T5831] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 142.759128][ T5831] usb 1-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 142.767619][ T5831] usb 1-1: found format II with max.bitrate = 0, frame size=39301 [ 142.775671][ T5831] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 142.783601][ T5831] usb 1-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 142.792514][ T5831] usb 1-1: found format II with max.bitrate = 0, frame size=39301 [ 142.867318][ T8501] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 143.030510][ T5831] usb 1-1: USB disconnect, device number 7 [ 143.220361][ T8512] loop2: detected capacity change from 0 to 512 [ 143.256898][ T8512] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 143.299993][ T8512] EXT4-fs (loop2): orphan cleanup on readonly fs [ 143.319815][ T8512] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #3: comm syz.2.966: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 143.344383][ T8519] netlink: 'syz.3.970': attribute type 10 has an invalid length. [ 143.400713][ T8521] loop0: detected capacity change from 0 to 256 [ 143.445868][ T8512] EXT4-fs error (device loop2): ext4_quota_enable:7104: comm syz.2.966: Bad quota inode: 3, type: 0 [ 143.471782][ T6314] udevd[6314]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.479148][ T8519] team0: Port device wlan1 added [ 143.571097][ T8512] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 143.663767][ T8512] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 143.671376][ T8512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 143.829886][ T8512] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 143.858175][ T8512] EXT4-fs warning (device loop2): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 143.907828][ T8541] infiniband syz0: set active [ 143.913605][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.951678][ T836] vcan0 speed is unknown, defaulting to 1000 [ 144.002520][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 144.060240][ T8543] __nla_validate_parse: 6 callbacks suppressed [ 144.060259][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.983'. [ 144.174577][ T8] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 144.199046][ T8] usb 2-1: config 0 has no interface number 0 [ 144.214119][ T8] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 144.243855][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.275087][ T8] usb 2-1: config 0 descriptor?? [ 144.283506][ T8] usb 2-1: selecting invalid altsetting 1 [ 144.333210][ T8] dvb_ttusb_budget: ttusb_init_controller: error [ 144.370559][ T8] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 144.544629][ T8] DVB: Unable to find symbol cx22700_attach() [ 144.646679][ T8] DVB: Unable to find symbol tda10046_attach() [ 144.653465][ T8] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 144.753238][ T8575] loop3: detected capacity change from 0 to 256 [ 144.824587][ T8575] FAT-fs (loop3): Directory bread(block 64) failed [ 144.836830][ T8] usb 2-1: USB disconnect, device number 7 [ 144.845134][ T8578] loop2: detected capacity change from 0 to 64 [ 144.848395][ T8575] FAT-fs (loop3): Directory bread(block 65) failed [ 144.876050][ T8579] loop0: detected capacity change from 0 to 256 [ 144.883322][ T8575] FAT-fs (loop3): Directory bread(block 66) failed [ 144.914288][ T8578] Bad inode number on dev loop2: 6 is out of range [ 144.922363][ T8575] FAT-fs (loop3): Directory bread(block 67) failed [ 144.954946][ T8575] FAT-fs (loop3): Directory bread(block 68) failed [ 144.979810][ T8575] FAT-fs (loop3): Directory bread(block 69) failed [ 144.986461][ T8579] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 145.017880][ T8575] FAT-fs (loop3): Directory bread(block 70) failed [ 145.024470][ T8575] FAT-fs (loop3): Directory bread(block 71) failed [ 145.058943][ T8575] FAT-fs (loop3): Directory bread(block 72) failed [ 145.065855][ T8575] FAT-fs (loop3): Directory bread(block 73) failed [ 145.120289][ T1006] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 145.226663][ T29] audit: type=1800 audit(1734758073.527:23): pid=8575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.995" name="file1" dev="loop3" ino=1048612 res=0 errno=0 [ 145.378113][ T8597] loop2: detected capacity change from 0 to 64 [ 145.870038][ T8595] loop0: detected capacity change from 0 to 32768 [ 145.887740][ T8595] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1006 (8595) [ 146.023375][ T8595] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 146.033839][ T8595] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 146.042729][ T8595] BTRFS info (device loop0): using free-space-tree [ 146.313834][ T8590] loop4: detected capacity change from 0 to 32768 [ 146.354805][ T8590] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1005 (8590) [ 146.575961][ T8590] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.592533][ T8590] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 146.601398][ T8590] BTRFS info (device loop4): using free-space-tree [ 146.760953][ T3827] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 146.908489][ T5837] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 146.909713][ T5831] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 146.933430][ T5838] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.949070][ T3827] usb 2-1: Using ep0 maxpacket: 32 [ 146.955874][ T3827] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 146.973366][ T3827] usb 2-1: config 0 has no interface number 0 [ 146.985069][ T3827] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 146.995144][ T3827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.020695][ T3827] usb 2-1: Product: syz [ 147.025011][ T3827] usb 2-1: Manufacturer: syz [ 147.061435][ T3827] usb 2-1: SerialNumber: syz [ 147.070462][ T5831] usb 3-1: config 238 has too many interfaces: 176, using maximum allowed: 32 [ 147.088419][ T5831] usb 3-1: config 238 has an invalid descriptor of length 0, skipping remainder of the config [ 147.117280][ T3827] usb 2-1: config 0 descriptor?? [ 147.128306][ T5831] usb 3-1: config 238 has 3 interfaces, different from the descriptor's value: 176 [ 147.142342][ T3827] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 147.182141][ T5831] usb 3-1: config 238 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 147.201575][ T3827] usb 2-1: selecting invalid altsetting 1 [ 147.227751][ T3827] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 147.247653][ T5831] usb 3-1: config 238 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 147.269346][ T3827] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 147.287816][ T5831] usb 3-1: config 238 interface 1 has no altsetting 0 [ 147.310824][ T5831] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 147.337332][ T3827] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 147.345751][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.377456][ T3827] usb 2-1: media controller created [ 147.382815][ T5831] usb 3-1: Product: syz [ 147.397158][ T5831] usb 3-1: Manufacturer: syz [ 147.401800][ T5831] usb 3-1: SerialNumber: syz [ 147.442673][ T3827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.551753][ T3827] usb 2-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 147.597688][ T3827] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 147.677224][ T5831] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 147.697580][ T5831] usb 3-1: MIDIStreaming interface descriptor not found [ 147.801714][ T3827] DVB: Unable to find symbol mxl5005s_attach() [ 147.836542][ T5831] usb 3-1: USB disconnect, device number 5 [ 147.855264][ T3827] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 147.996008][ T3827] usb 2-1: USB disconnect, device number 8 [ 148.144711][ T8676] loop3: detected capacity change from 0 to 32768 [ 148.155397][ T8676] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1030 (8676) [ 148.185465][ T5994] udevd[5994]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:238.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.245863][ T8676] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 148.258862][ T8676] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 148.270213][ T8676] BTRFS info (device loop3): using free-space-tree [ 148.524331][ T8722] netlink: 'syz.1.1044': attribute type 39 has an invalid length. [ 148.566458][ T8676] BTRFS info (device loop3): rebuilding free space tree [ 148.741526][ T8732] ipt_ECN: cannot use operation on non-tcp rule [ 148.823615][ T5833] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 149.388581][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 149.583338][ T8] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 149.593119][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1059'. [ 149.597690][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.640825][ T8] usb 4-1: Product: syz [ 149.645039][ T8] usb 4-1: Manufacturer: syz [ 149.676612][ T8] usb 4-1: SerialNumber: syz [ 149.702651][ T8] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 149.727137][ T5879] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 149.731228][ T836] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 149.911869][ T8729] loop4: detected capacity change from 0 to 32768 [ 149.932796][ T5879] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 149.941420][ T5879] usb 1-1: config 0 has no interface number 0 [ 149.958491][ T5879] usb 1-1: config 0 interface 122 has no altsetting 0 [ 150.032588][ T5879] usb 1-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 150.048619][ T8729] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 150.094367][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.095687][ T8729] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 150.102961][ T5879] usb 1-1: Product: syz [ 150.113669][ T5879] usb 1-1: Manufacturer: syz [ 150.118740][ T5879] usb 1-1: SerialNumber: syz [ 150.126559][ T5879] usb 1-1: config 0 descriptor?? [ 150.167124][ T8748] loop2: detected capacity change from 0 to 32768 [ 150.375254][ T8729] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 150.429900][ T5879] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 150.451333][ T5879] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 150.536667][ T8748] JFS: charset not found [ 150.690655][ T3827] usb 1-1: USB disconnect, device number 8 [ 150.697029][ T3827] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 150.772808][ T5879] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 322ms [ 150.840660][ T5879] gfs2: fsid=syz:syz.0: jid=0: Done [ 150.874482][ T8729] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 150.962653][ T8770] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 150.990719][ T8770] [U] J"—e:ÀÆ" [ 152.487526][ T8794] netlink: 'syz.4.1077': attribute type 1 has an invalid length. [ 152.495310][ T8794] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1077'. [ 152.865986][ T8802] veth2: entered promiscuous mode [ 152.898230][ T8802] veth2: entered allmulticast mode [ 153.330829][ T8813] loop2: detected capacity change from 0 to 256 [ 153.392234][ T8813] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 153.830454][ T5879] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 153.855250][ T8826] loop4: detected capacity change from 0 to 64 [ 154.059870][ T5879] usb 3-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 154.120756][ T5879] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.193476][ T5879] usb 3-1: too many endpoints for config 1 interface 1 altsetting 78: 168, using maximum allowed: 30 [ 154.281420][ T5879] usb 3-1: config 1 interface 1 altsetting 78 has 0 endpoint descriptors, different from the interface descriptor's value: 168 [ 154.381589][ T5879] usb 3-1: config 1 interface 1 has no altsetting 0 [ 154.439901][ T5879] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.481716][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.547630][ T5879] usb 3-1: Product: syz [ 154.562467][ T5879] usb 3-1: Manufacturer: syz [ 154.567102][ T5879] usb 3-1: SerialNumber: syz [ 154.653604][ T5879] usb 3-1: selecting invalid altsetting 0 [ 154.690313][ T5879] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 154.854765][ T5879] usb 3-1: selecting invalid altsetting 0 [ 154.908243][ T5879] usbtest 3-1:1.1: probe with driver usbtest failed with error -22 [ 154.983831][ T5879] usb 3-1: USB disconnect, device number 6 [ 155.403662][ T16] sched: DL replenish lagged too much [ 156.263734][ T8864] xt_TCPMSS: Only works on TCP SYN packets [ 156.327414][ T8839] loop1: detected capacity change from 0 to 32768 [ 156.544397][ T8840] loop3: detected capacity change from 0 to 32768 [ 156.554634][ T8839] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 157.211147][ T5828] ocfs2: Unmounting device (7,1) on (node local) [ 157.785663][ T3827] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 157.813709][ T8884] netlink: 'syz.4.1122': attribute type 10 has an invalid length. [ 157.974289][ T3827] usb 3-1: config 7 interface 0 has no altsetting 0 [ 158.012616][ T8884] team0: Port device wlan1 added [ 158.044686][ T3827] usb 3-1: string descriptor 0 read error: -22 [ 158.074570][ T3827] usb 3-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44 [ 158.084083][ T3827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.215922][ T3827] usb 3-1: dvb_usb_v2: found a 'ZyDAS ZD1301 reference design' in warm state [ 158.318262][ T3827] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 158.388090][ T3827] dvbdev: DVB: registering new adapter (ZyDAS ZD1301 reference design) [ 158.481281][ T3827] usb 3-1: media controller created [ 158.495190][ T8896] loop4: detected capacity change from 0 to 128 [ 158.564704][ T836] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 158.571731][ T836] ath9k_htc: Failed to initialize the device [ 158.624322][ T3827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.180394][ T3827] usb 3-1: USB disconnect, device number 7 [ 159.809608][ T8918] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 159.877923][ T8918] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 159.926563][ T8918] overlayfs: missing 'lowerdir' [ 160.098931][ T8925] netlink: 'syz.0.1140': attribute type 11 has an invalid length. [ 161.354679][ T8951] loop2: detected capacity change from 0 to 64 [ 162.065959][ T8965] loop3: detected capacity change from 0 to 512 [ 162.216247][ T8965] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.1158: bad orphan inode 13 [ 162.304742][ T8965] ext4_test_bit(bit=12, block=4) = 1 [ 162.336265][ T8965] is_bad_inode(inode)=0 [ 162.399005][ T8965] NEXT_ORPHAN(inode)=0 [ 162.403126][ T8965] max_ino=32 [ 162.406332][ T8965] i_nlink=1 [ 162.482959][ T8965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.022111][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1166'. [ 163.162464][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.637923][ T8996] loop2: detected capacity change from 0 to 2048 [ 163.783803][ T8996] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.260412][ T9009] loop0: detected capacity change from 0 to 128 [ 164.266840][ T5879] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 164.288372][ T9009] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.302064][ T9009] ext4 filesystem being mounted at /217/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 164.313451][ T5877] usb 4-1: USB disconnect, device number 6 [ 164.320763][ T9009] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 3 (only 1 groups) [ 164.404603][ T9015] loop2: detected capacity change from 0 to 256 [ 164.432088][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 164.444747][ T5879] usb 5-1: config 1 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.486481][ T5877] usb 4-1: ath9k_htc: USB layer deinitialized [ 164.493424][ T5879] usb 5-1: config 1 interface 0 has no altsetting 0 [ 164.518430][ T9015] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 164.518446][ T5837] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.554906][ T5879] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.40 [ 164.593210][ T9017] loop3: detected capacity change from 0 to 256 [ 164.600510][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.642215][ T9015] exFAT-fs (loop2): valid_size(150994954) is greater than size(10) [ 164.651755][ T5879] usb 5-1: Product: syz [ 164.652651][ T9017] FAT-fs (loop3): Directory bread(block 1285) failed [ 164.655927][ T5879] usb 5-1: Manufacturer: syz [ 164.673645][ T5879] usb 5-1: SerialNumber: syz [ 164.710062][ T9017] FAT-fs (loop3): Directory bread(block 1286) failed [ 164.719341][ T9017] FAT-fs (loop3): Directory bread(block 1287) failed [ 164.726513][ T9017] FAT-fs (loop3): Directory bread(block 1288) failed [ 164.742256][ T9017] FAT-fs (loop3): Directory bread(block 1289) failed [ 164.749418][ T9017] FAT-fs (loop3): Directory bread(block 1290) failed [ 164.761458][ T9017] FAT-fs (loop3): Directory bread(block 1291) failed [ 164.801084][ T9017] FAT-fs (loop3): Directory bread(block 1292) failed [ 164.811107][ T9017] FAT-fs (loop3): Directory bread(block 1293) failed [ 164.832694][ T9017] FAT-fs (loop3): Directory bread(block 1294) failed [ 164.949021][ T5879] usbhid 5-1:1.0: can't add hid device: -71 [ 164.969872][ T5879] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 165.020883][ T5879] usb 5-1: USB disconnect, device number 8 [ 165.194813][ T29] audit: type=1326 audit(1734758093.574:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9034 comm="syz.0.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe509585d29 code=0x7ffc0000 [ 165.246591][ T29] audit: type=1326 audit(1734758093.574:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9034 comm="syz.0.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe509585d29 code=0x7ffc0000 [ 165.327607][ T29] audit: type=1326 audit(1734758093.594:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9034 comm="syz.0.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fe509585d29 code=0x7ffc0000 [ 165.434389][ T29] audit: type=1326 audit(1734758093.594:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9034 comm="syz.0.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe509585d29 code=0x7ffc0000 [ 165.482742][ T29] audit: type=1326 audit(1734758093.594:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9034 comm="syz.0.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe509585d29 code=0x7ffc0000 [ 165.914150][ T9063] loop3: detected capacity change from 0 to 8 [ 165.975979][ T9063] SQUASHFS error: Failed to read block 0x4de: -5 [ 165.982649][ T9063] SQUASHFS error: Failed to read block 0x4de: -5 [ 165.989683][ T9063] SQUASHFS error: Failed to read block 0x4de: -5 [ 165.996151][ T9063] SQUASHFS error: Failed to read block 0x4de: -5 [ 166.024759][ T9063] SQUASHFS error: Failed to read block 0x4de: -5 [ 166.087964][ T29] audit: type=1800 audit(1734758094.477:29): pid=9063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1205" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 166.136518][ T29] audit: type=1107 audit(1734758094.477:30): pid=9068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 166.232133][ T9073] loop0: detected capacity change from 0 to 128 [ 166.405694][ T9073] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 117440531)! [ 166.452457][ T9073] EXT4-fs (loop0): group descriptors corrupted! [ 166.637937][ T9083] loop1: detected capacity change from 0 to 64 [ 166.655645][ T9081] netlink: 'syz.2.1214': attribute type 21 has an invalid length. [ 166.663571][ T9081] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1214'. [ 166.691437][ T9066] loop4: detected capacity change from 0 to 32768 [ 166.933715][ T9093] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 166.963886][ T836] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 167.101894][ T9099] xt_TCPMSS: Only works on TCP SYN packets [ 167.123320][ T836] usb 4-1: Using ep0 maxpacket: 8 [ 167.131172][ T836] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 167.258968][ T9108] ipt_REJECT: TCP_RESET invalid for non-tcp [ 167.285357][ T836] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 167.312433][ T836] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 167.328976][ T836] usb 4-1: Product: syz [ 167.342836][ T836] usb 4-1: Manufacturer: syz [ 167.347473][ T836] usb 4-1: SerialNumber: syz [ 167.662335][ T29] audit: type=1326 audit(1734758096.032:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9120 comm="syz.0.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe509585d29 code=0x7ffc0000 [ 167.689321][ T836] usb 4-1: Invalid connection information received from device [ 167.701651][ T29] audit: type=1326 audit(1734758096.042:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9120 comm="syz.0.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe509585d29 code=0x7ffc0000 [ 167.724019][ T29] audit: type=1326 audit(1734758096.042:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9120 comm="syz.0.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fe509585d29 code=0x7ffc0000 [ 167.751771][ T9121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1232'. [ 167.760997][ T9121] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1232'. [ 167.924246][ T8] usb 4-1: USB disconnect, device number 7 [ 168.046308][ T9135] xt_CT: You must specify a L4 protocol and not use inversions on it [ 168.093925][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'. [ 168.110285][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'. [ 168.236620][ T9142] loop1: detected capacity change from 0 to 2048 [ 168.269304][ T9142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.320540][ T9142] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #16: comm syz.1.1244: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 255(4), depth 0(0) [ 168.367458][ T9151] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.374786][ T9151] IPv6: NLM_F_CREATE should be set when creating new route [ 168.382076][ T9151] IPv6: NLM_F_CREATE should be set when creating new route [ 168.389363][ T9151] IPv6: NLM_F_CREATE should be set when creating new route [ 168.544190][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.755435][ T9166] netlink: 'syz.4.1253': attribute type 46 has an invalid length. [ 168.765599][ T9167] loop0: detected capacity change from 0 to 512 [ 168.836655][ T9167] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 168.948926][ T9167] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 168.959887][ T9167] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 168.980440][ T9167] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 169.005155][ T9167] EXT4-fs (loop0): 1 truncate cleaned up [ 169.026229][ T9167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.105665][ T9167] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 169.189006][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1260'. [ 169.236054][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.244780][ T9185] netlink: 'syz.2.1262': attribute type 1 has an invalid length. [ 169.252924][ T9185] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1262'. [ 169.428629][ T9161] loop3: detected capacity change from 0 to 32768 [ 169.474146][ T9161] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1251 (9161) [ 169.505170][ T9161] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 169.521900][ T9161] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 169.547504][ T9161] BTRFS info (device loop3): using free-space-tree [ 169.797012][ T9196] Illegal XDP return value 2551178364 on prog (id 54) dev N/A, expect packet loss! [ 169.968925][ T9217] loop1: detected capacity change from 0 to 256 [ 170.034764][ T9217] FAT-fs (loop1): Directory bread(block 64) failed [ 170.041413][ T9217] FAT-fs (loop1): Directory bread(block 65) failed [ 170.048234][ T9217] FAT-fs (loop1): Directory bread(block 66) failed [ 170.055370][ T9217] FAT-fs (loop1): Directory bread(block 67) failed [ 170.061990][ T9217] FAT-fs (loop1): Directory bread(block 68) failed [ 170.084473][ T9217] FAT-fs (loop1): Directory bread(block 69) failed [ 170.091162][ T9217] FAT-fs (loop1): Directory bread(block 70) failed [ 170.111162][ T9217] FAT-fs (loop1): Directory bread(block 71) failed [ 170.130747][ T9217] FAT-fs (loop1): Directory bread(block 72) failed [ 170.143486][ T9217] FAT-fs (loop1): Directory bread(block 73) failed [ 170.243946][ T5833] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 170.413218][ T9232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1277'. [ 170.422258][ T9232] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1277'. [ 170.511115][ T9232] netlink: 'syz.2.1277': attribute type 3 has an invalid length. [ 170.553908][ T9232] netlink: 'syz.2.1277': attribute type 2 has an invalid length. [ 170.602592][ T9232] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1277'. [ 170.878074][ T5877] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 171.046569][ T5877] usb 2-1: config 0 has an invalid interface number: 108 but max is 0 [ 171.067944][ T9254] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1287'. [ 171.081778][ T5877] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.111198][ T9254] netlink: 'syz.3.1287': attribute type 1 has an invalid length. [ 171.124985][ T5877] usb 2-1: config 0 has no interface number 0 [ 171.134850][ T9254] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1287'. [ 171.144222][ T5877] usb 2-1: too many endpoints for config 0 interface 108 altsetting 111: 119, using maximum allowed: 30 [ 171.176375][ T5877] usb 2-1: config 0 interface 108 altsetting 111 has 0 endpoint descriptors, different from the interface descriptor's value: 119 [ 171.215921][ T5877] usb 2-1: config 0 interface 108 has no altsetting 0 [ 171.239919][ T5877] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 171.261089][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.318401][ T5877] usb 2-1: config 0 descriptor?? [ 171.546777][ T5877] usb 2-1: string descriptor 0 read error: -71 [ 171.586430][ T5877] usb 2-1: USB disconnect, device number 9 [ 172.178627][ T9294] loop4: detected capacity change from 0 to 256 [ 172.207608][ T9270] loop0: detected capacity change from 0 to 32768 [ 172.235724][ T9270] XFS: noikeep mount option is deprecated. [ 172.243122][ T9292] loop2: detected capacity change from 0 to 4096 [ 172.281659][ T9292] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 172.317656][ T9270] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 172.377532][ T9292] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 172.391884][ T9308] loop3: detected capacity change from 0 to 256 [ 172.440260][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 172.440277][ T29] audit: type=1326 audit(1734758100.847:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9309 comm="syz.4.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b2f85d29 code=0x7ffc0000 [ 172.507661][ T29] audit: type=1326 audit(1734758100.897:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9309 comm="syz.4.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b2f85d29 code=0x7ffc0000 [ 172.537643][ T9270] XFS (loop0): Ending clean mount [ 172.547381][ T9308] FAT-fs (loop3): Directory bread(block 64) failed [ 172.553943][ T9308] FAT-fs (loop3): Directory bread(block 65) failed [ 172.571865][ T9270] XFS (loop0): Quotacheck needed: Please wait. [ 172.580037][ T29] audit: type=1326 audit(1734758100.897:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9309 comm="syz.4.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7ff9b2f85d29 code=0x7ffc0000 [ 172.589380][ T9308] FAT-fs (loop3): Directory bread(block 66) failed [ 172.609141][ T9308] FAT-fs (loop3): Directory bread(block 67) failed [ 172.615889][ T9308] FAT-fs (loop3): Directory bread(block 68) failed [ 172.627728][ T9308] FAT-fs (loop3): Directory bread(block 69) failed [ 172.634382][ T9308] FAT-fs (loop3): Directory bread(block 70) failed [ 172.640001][ T29] audit: type=1326 audit(1734758100.897:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9309 comm="syz.4.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b2f85d29 code=0x7ffc0000 [ 172.662167][ T9308] FAT-fs (loop3): Directory bread(block 71) failed [ 172.680605][ T9308] FAT-fs (loop3): Directory bread(block 72) failed [ 172.698333][ T9308] FAT-fs (loop3): Directory bread(block 73) failed [ 172.740262][ T9315] xt_connbytes: Forcing CT accounting to be enabled [ 172.752681][ T9270] XFS (loop0): Quotacheck: Done. [ 172.764584][ T9316] netlink: 'syz.4.1314': attribute type 10 has an invalid length. [ 172.794813][ T9316] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.803687][ T9316] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.816974][ T8888] ntfs3(loop2): ino=5, ntfs3_write_inode failed, -22. [ 172.847679][ T9316] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.854879][ T9316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.862391][ T9316] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.869567][ T9316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.886019][ T9316] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 172.977538][ T5837] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 173.698731][ T9340] loop0: detected capacity change from 0 to 32768 [ 173.732577][ T9340] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 173.733359][ T9345] sit0: entered promiscuous mode [ 173.770159][ T9345] netlink: 'syz.1.1327': attribute type 1 has an invalid length. [ 173.797369][ T9340] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 174.057749][ T5837] ocfs2: Unmounting device (7,0) on (node local) [ 174.259798][ T9360] C: renamed from lo (while UP) [ 174.303176][ T9360] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 174.463605][ T9366] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 174.557888][ T9346] loop3: detected capacity change from 0 to 32768 [ 174.589129][ T9346] (syz.3.1329,9346,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 174.618254][ T9346] (syz.3.1329,9346,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 174.683665][ T9346] JBD2: Ignoring recovery information on journal [ 174.780500][ T5831] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 174.845860][ T9346] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 175.022230][ T5833] ocfs2: Unmounting device (7,3) on (node local) [ 175.114678][ T9374] loop0: detected capacity change from 0 to 32768 [ 175.155847][ T9374] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 175.164286][ T5831] usb 3-1: Using ep0 maxpacket: 16 [ 175.170023][ T9374] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 175.178649][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 175.188603][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 175.210983][ T5831] usb 3-1: New USB device found, idVendor=10bd, idProduct=1427, bcdDevice=60.d0 [ 175.220351][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.228362][ T5831] usb 3-1: Product: syz [ 175.239624][ T5831] usb 3-1: Manufacturer: syz [ 175.244258][ T5831] usb 3-1: SerialNumber: syz [ 175.251176][ T5831] usb 3-1: config 0 descriptor?? [ 175.283757][ T9390] loop3: detected capacity change from 0 to 1024 [ 175.336078][ T9374] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 175.348501][ T9390] hfsplus: invalid catalog entry type in lookup [ 175.351582][ T5879] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 175.411080][ T5879] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 175.506770][ T5831] kaweth 3-1:0.0: Firmware present in device. [ 175.619777][ T5879] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 209ms [ 175.640170][ T5879] gfs2: fsid=syz:syz.0: jid=0: Done [ 175.658141][ T9374] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 175.669107][ T5831] kaweth 3-1:0.0: Error reading configuration (-71), no net device created [ 175.682864][ T5831] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 175.718774][ T5831] usb 3-1: USB disconnect, device number 8 [ 176.280474][ T9413] loop3: detected capacity change from 0 to 4096 [ 176.316755][ T9413] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 176.499993][ T9413] overlayfs: workdir and upperdir must reside under the same mount [ 176.700501][ T9410] loop0: detected capacity change from 0 to 32768 [ 176.847337][ T9443] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1370'. [ 177.071190][ T9449] binder: 9448:9449 ioctl 400c620e 20000140 returned -22 [ 177.114669][ T9410] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 177.182890][ T9410] bcachefs (loop0): initializing new filesystem [ 177.287758][ T29] audit: type=1326 audit(1734758105.660:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.4.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b2f85d29 code=0x7ffc0000 [ 177.330124][ T9459] loop3: detected capacity change from 0 to 512 [ 177.337021][ T29] audit: type=1326 audit(1734758105.660:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.4.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b2f85d29 code=0x7ffc0000 [ 177.360586][ T29] audit: type=1326 audit(1734758105.670:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.4.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff9b2f85d29 code=0x7ffc0000 [ 177.383238][ T29] audit: type=1326 audit(1734758105.670:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.4.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b2f85d29 code=0x7ffc0000 [ 177.405847][ T29] audit: type=1326 audit(1734758105.670:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.4.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b2f85d29 code=0x7ffc0000 [ 177.412842][ T9410] bcachefs (loop0): going read-write [ 177.452543][ T9459] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 177.493266][ T9410] bcachefs (loop0): marking superblocks [ 177.548606][ T9459] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1376: bg 0: block 248: padding at end of block bitmap is not set [ 177.570895][ T9459] Quota error (device loop3): write_blk: dquota write failed [ 177.598794][ T9410] bcachefs (loop0): initializing freespace [ 177.639397][ T9459] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 177.674057][ T9410] bcachefs (loop0): done initializing freespace [ 177.739115][ T9459] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.1376: Failed to acquire dquot type 1 [ 177.822121][ T9459] EXT4-fs (loop3): 1 truncate cleaned up [ 177.837615][ T9459] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.844875][ T9410] bcachefs (loop0): reading snapshots table [ 177.856620][ T9410] bcachefs (loop0): reading snapshots done [ 177.873275][ T9459] ext4 filesystem being mounted at /270/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.955524][ T9410] bcachefs (loop0): done starting filesystem [ 178.025941][ T9485] batadv1: entered promiscuous mode [ 178.032861][ T9485] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 178.035765][ T9459] EXT4-fs: Cannot change quota options when quota turned on [ 178.099826][ T9410] syz.0.1357 (9410) used greatest stack depth: 11352 bytes left [ 178.122587][ T5837] bcachefs (loop0): shutting down [ 178.133953][ T5837] bcachefs (loop0): going read-only [ 178.151537][ T5837] bcachefs (loop0): finished waiting for writes to stop [ 178.202497][ T5837] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3 [ 178.245739][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.415773][ T9499] mmap: syz.4.1397 (9499): VmData 37482496 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 178.432515][ T9495] loop2: detected capacity change from 0 to 1024 [ 178.439658][ T9495] EXT4-fs: inline encryption not supported [ 178.489557][ T5837] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 5 [ 178.492294][ T9495] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 178.540606][ T5837] bcachefs (loop0): clean shutdown complete, journal seq 6 [ 178.548669][ T5837] bcachefs (loop0): marking filesystem clean [ 178.603528][ T9495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.651473][ T5837] bcachefs (loop0): shutdown complete [ 178.765980][ T9513] kAFS: unable to lookup cell 'syz0.r™iXýÕßðÒ<̧®© +âÔR!K+K™áû4ÚÍö[Ÿ“EšýÖîê¯dî<¾æ6ócº7Ë( nÅÙÓÅ@À×8A¯5W®/7|{ÒÚü?îÇhÇT•³8#&3ræ?3ÚUü<·ÚG`-իǾóQ8õ%¹$­lH•YïL5еžYÏ^÷!!–\p"È3¹Ä!£ò· [ 178.765980][ T9513] ÛñÙÔh1„#-¹ï*·º„EºÍ=î)ú½¥"À6<Ú—H#.‚ýLÝÊ(˜Ü[Ý1„hã¯uC8yÞê½Ða½HÚ'(ùè‘lÚ“—+#-€nоYMËÆî²Àÿð«%' [ 178.925303][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.584389][ T9542] loop1: detected capacity change from 0 to 256 [ 179.653094][ T9542] /dev/sg0: Can't lookup blockdev [ 179.736808][ T9531] loop2: detected capacity change from 0 to 32768 [ 179.858500][ T9531] ERROR: (device loop2): diAllocAG: error reading iag [ 179.858500][ T9531] [ 179.935120][ T9531] ERROR: (device loop2): remounting filesystem as read-only [ 179.960130][ T9531] ialloc: diAlloc returned -5! [ 179.986450][ T3827] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 180.156547][ T3827] usb 4-1: Using ep0 maxpacket: 32 [ 180.188248][ T3827] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 180.207902][ T3827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.225862][ T3827] usb 4-1: Product: syz [ 180.230150][ T3827] usb 4-1: Manufacturer: syz [ 180.235193][ T3827] usb 4-1: SerialNumber: syz [ 180.256647][ T3827] usb 4-1: config 0 descriptor?? [ 180.548016][ T5832] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 180.557900][ T5832] Bluetooth: hci4: Injecting HCI hardware error event [ 180.565015][ T5831] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 180.567710][ T5145] Bluetooth: hci4: hardware error 0x00 [ 180.575831][ T9555] loop1: detected capacity change from 0 to 32768 [ 180.628597][ T9555] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1424 (9555) [ 180.710913][ T3827] airspy 4-1:0.0: usb_control_msg() failed -71 request 0a [ 180.734910][ T3827] airspy 4-1:0.0: Could not detect board [ 180.754358][ T3827] airspy 4-1:0.0: probe with driver airspy failed with error -71 [ 180.764376][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 180.783874][ T9555] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 180.814263][ T5831] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 180.828992][ T3827] usb 4-1: USB disconnect, device number 8 [ 180.837715][ T9555] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 180.847054][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 34543, setting to 1024 [ 180.862941][ T5831] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 180.884455][ T9555] BTRFS info (device loop1): using free-space-tree [ 180.891488][ T5831] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 180.912784][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.926922][ T5831] usb 3-1: config 0 descriptor?? [ 180.944164][ T9561] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 180.951954][ T9561] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 181.115573][ T5828] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 181.194720][ T9] usb 3-1: USB disconnect, device number 9 [ 181.262612][ T9565] loop4: detected capacity change from 0 to 32768 [ 182.078449][ T9605] loop4: detected capacity change from 0 to 32768 [ 182.110672][ T9614] loop0: detected capacity change from 0 to 8 [ 182.285833][ T9614] SQUASHFS error: Failed to read block 0x2: -5 [ 182.366324][ T9627] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1447'. [ 182.369474][ T9614] SQUASHFS error: Unable to read metadata cache entry [0] [ 182.434651][ T9605] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 182.487268][ T9605] bcachefs (loop4): initializing new filesystem [ 182.509438][ T9605] bcachefs (loop4): going read-write [ 182.540130][ T9614] SQUASHFS error: Unable to read inode 0x127 [ 182.546905][ T9606] loop3: detected capacity change from 0 to 40427 [ 182.550112][ T9605] bcachefs (loop4): marking superblocks [ 182.576473][ T9606] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 182.588012][ T9606] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 182.614913][ T9605] bcachefs (loop4): initializing freespace [ 182.658795][ T9605] bcachefs (loop4): done initializing freespace [ 182.681719][ T9605] bcachefs (loop4): reading snapshots table [ 182.688391][ T9614] cgroup: release_agent respecified [ 182.698126][ T9605] bcachefs (loop4): reading snapshots done [ 182.723857][ T5145] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 182.755603][ T9639] ip6t_srh: unknown srh invflags 7863 [ 182.761301][ T9606] F2FS-fs (loop3): Found nat_bits in checkpoint [ 182.849354][ T9605] bcachefs (loop4): done starting filesystem [ 182.878018][ T9644] loop1: detected capacity change from 0 to 256 [ 182.967315][ T9646] loop2: detected capacity change from 0 to 64 [ 182.973930][ T9606] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 183.002452][ T9606] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 183.040401][ T9606] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 183.068484][ T9606] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 183.163247][ T9606] F2FS-fs (loop3): f2fs_new_node_page: inconsistent nat entry, ino:4, nid:4, blkaddr:4098, ver:0, flag:0 [ 183.176350][ T5838] bcachefs (loop4): shutting down [ 183.201984][ T5838] bcachefs (loop4): going read-only [ 183.207547][ T5838] bcachefs (loop4): finished waiting for writes to stop [ 183.266383][ T5838] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3 [ 183.366988][ T9656] loop1: detected capacity change from 0 to 512 [ 183.374679][ T9656] EXT4-fs: Ignoring removed oldalloc option [ 183.395576][ T9656] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 183.469492][ T5838] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 6 [ 183.510741][ T5838] bcachefs (loop4): clean shutdown complete, journal seq 7 [ 183.519447][ T5838] bcachefs (loop4): marking filesystem clean [ 183.526035][ T9666] loop2: detected capacity change from 0 to 256 [ 183.534264][ T9656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 183.540276][ T9666] exfat: Deprecated parameter 'utf8' [ 183.563644][ T9666] exfat: Deprecated parameter 'utf8' [ 183.580995][ T9656] ext4 filesystem being mounted at /327/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.605765][ T9666] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfa3b3837, utbl_chksum : 0xe619d30d) [ 183.651484][ T5838] bcachefs (loop4): shutdown complete [ 183.762885][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 183.935640][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1468'. [ 183.947572][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1468'. [ 184.602678][ T9704] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1478'. [ 184.811116][ T9711] CIFS: VFS: Malformed UNC in devname [ 185.065069][ T9720] loop3: detected capacity change from 0 to 256 [ 185.131533][ T9722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1489'. [ 185.170599][ T9720] FAT-fs (loop3): Directory bread(block 64) failed [ 185.183405][ T9720] FAT-fs (loop3): Directory bread(block 65) failed [ 185.191289][ T9722] tc_dump_action: action bad kind [ 185.206132][ T9720] FAT-fs (loop3): Directory bread(block 66) failed [ 185.212712][ T9720] FAT-fs (loop3): Directory bread(block 67) failed [ 185.243694][ T9720] FAT-fs (loop3): Directory bread(block 68) failed [ 185.250339][ T9720] FAT-fs (loop3): Directory bread(block 69) failed [ 185.276333][ T9720] FAT-fs (loop3): Directory bread(block 70) failed [ 185.282922][ T9720] FAT-fs (loop3): Directory bread(block 71) failed [ 185.347470][ T9720] FAT-fs (loop3): Directory bread(block 72) failed [ 185.354521][ T9720] FAT-fs (loop3): Directory bread(block 73) failed [ 185.489552][ T9716] loop2: detected capacity change from 0 to 32768 [ 185.492068][ T9720] syz.3.1488: attempt to access beyond end of device [ 185.492068][ T9720] loop3: rw=0, sector=1256, nr_sectors = 4 limit=256 [ 185.591765][ T9720] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 328) [ 185.602890][ T9720] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 328) [ 186.060248][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 186.066431][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 186.073411][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 186.074544][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 186.448143][ T9762] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 186.463730][ T9760] x_tables: duplicate entry at hook 2 [ 186.639992][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 186.813064][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 186.851421][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 186.869311][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.889268][ T9] usb 2-1: Product: syz [ 186.893482][ T9] usb 2-1: Manufacturer: syz [ 186.918419][ T9] usb 2-1: SerialNumber: syz [ 186.939658][ T9] usb 2-1: config 0 descriptor?? [ 187.248699][ T9] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 187.437649][ T9773] loop2: detected capacity change from 0 to 32768 [ 187.485778][ T9] usb write operation failed. (-71) [ 187.651196][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 187.700386][ T9] dvbdev: DVB: registering new adapter (Terratec H7) [ 187.738261][ T9] usb 2-1: media controller created [ 187.748944][ T9] usb read operation failed. (-71) [ 187.767850][ T9] usb write operation failed. (-71) [ 187.797748][ T9] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 187.897854][ T9] usb 2-1: USB disconnect, device number 10 [ 187.971279][ T9814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1524'. [ 189.279453][ T9836] loop3: detected capacity change from 0 to 32768 [ 189.294334][ T9836] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1529 (9836) [ 189.321383][ T9836] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 189.360387][ T9836] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 189.383716][ T9870] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1542'. [ 189.429153][ T9836] BTRFS info (device loop3): using free-space-tree [ 189.740490][ T9836] BTRFS info (device loop3): rebuilding free space tree [ 189.935361][ T9907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1552'. [ 190.055705][ T9911] loop2: detected capacity change from 0 to 256 [ 190.122213][ T9911] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 190.183163][ T9911] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 190.315003][ T5833] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 190.436938][ T9857] loop4: detected capacity change from 0 to 32768 [ 190.510856][ T9857] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1537 (9857) [ 190.665428][ T9857] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 190.731413][ T9857] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 190.781263][ T9857] BTRFS info (device loop4): using free-space-tree [ 190.899932][ T9944] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 191.001051][ T9944] CIFS mount error: No usable UNC path provided in device string! [ 191.001051][ T9944] [ 191.041105][ T9944] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 191.081367][ T9950] loop1: detected capacity change from 0 to 16 [ 191.101277][ T9933] loop0: detected capacity change from 0 to 32768 [ 191.122400][ T9958] sctp: [Deprecated]: syz.3.1563 (pid 9958) Use of int in maxseg socket option. [ 191.122400][ T9958] Use struct sctp_assoc_value instead [ 191.129120][ T9950] erofs (device loop1): mounted with root inode @ nid 36. [ 191.144722][ T9933] BTRFS: device /dev/loop0 (7:0) using temp-fsid fd71d894-c1a0-47b3-95d0-bcd8bbd2664b [ 191.222710][ T9933] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1560 (9933) [ 191.352408][ T9933] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 191.426793][ T9933] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 191.459243][ T9933] BTRFS info (device loop0): using free-space-tree [ 191.544541][ T5838] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 191.555198][ T9968] loop2: detected capacity change from 0 to 1024 [ 191.643579][ T9968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.686300][ T9968] EXT4-fs error (device loop2): ext4_xattr_inode_iget:440: inode #11: comm syz.2.1564: missing EA_INODE flag [ 191.719194][ T9968] EXT4-fs (loop2): Remounting filesystem read-only [ 191.909931][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.064496][T10003] loop2: detected capacity change from 0 to 512 [ 192.138396][T10003] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 192.163452][T10008] overlayfs: conflicting options: verity=on,redirect_dir=nofollow [ 192.180773][T10003] EXT4-fs (loop2): Remounting filesystem read-only [ 192.188865][T10003] EXT4-fs (loop2): 1 truncate cleaned up [ 192.195391][T10003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.239471][ T5837] BTRFS info (device loop0): last unmount of filesystem fd71d894-c1a0-47b3-95d0-bcd8bbd2664b [ 192.585115][T10023] loop3: detected capacity change from 0 to 512 [ 192.725041][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.725522][T10023] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.1583: attempt to clear invalid blocks 1 len 1 [ 192.810326][T10023] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1583: bg 0: block 343: padding at end of block bitmap is not set [ 192.896854][T10023] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 192.907865][T10023] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1583: invalid indirect mapped block 1819239214 (level 0) [ 193.009187][T10023] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1583: invalid indirect mapped block 1819239214 (level 1) [ 193.025706][ T29] audit: type=1326 audit(1734758121.448:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.4.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b2f85d29 code=0x7ffc0000 [ 193.064789][ T29] audit: type=1326 audit(1734758121.448:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.4.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b2f85d29 code=0x7ffc0000 [ 193.087441][ T29] audit: type=1326 audit(1734758121.448:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.4.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7ff9b2f85d29 code=0x7ffc0000 [ 193.110334][ T29] audit: type=1326 audit(1734758121.448:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.4.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b2f85d29 code=0x7ffc0000 [ 193.110511][T10037] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 193.133164][ T29] audit: type=1326 audit(1734758121.448:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.4.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b2f85d29 code=0x7ffc0000 [ 193.198990][T10023] EXT4-fs (loop3): 1 truncate cleaned up [ 193.212918][T10023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.264472][ T5833] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 193.308137][ T5833] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 19: comm syz-executor: path /309/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=2304, rec_len=1024, size=1024 fake=0 [ 193.470796][T10045] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1592'. [ 193.531972][ T5833] EXT4-fs error (device loop3): ext4_empty_dir:3135: inode #11: block 19: comm syz-executor: bad entry in directory: inode out of bounds - offset=5120, inode=2304, rec_len=1024, size=1024 fake=0 [ 193.589969][ T5833] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 19: comm syz-executor: path /309/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=2304, rec_len=1024, size=1024 fake=0 [ 193.621593][ T5833] EXT4-fs error (device loop3): ext4_empty_dir:3135: inode #11: block 19: comm syz-executor: bad entry in directory: inode out of bounds - offset=5120, inode=2304, rec_len=1024, size=1024 fake=0 [ 193.676658][ T5833] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 19: comm syz-executor: path /309/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=2304, rec_len=1024, size=1024 fake=0 [ 193.707008][ T5833] EXT4-fs error (device loop3): ext4_empty_dir:3135: inode #11: block 19: comm syz-executor: bad entry in directory: inode out of bounds - offset=5120, inode=2304, rec_len=1024, size=1024 fake=0 [ 193.899383][ T5833] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 19: comm syz-executor: path /309/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=2304, rec_len=1024, size=1024 fake=0 [ 194.037864][ T5833] EXT4-fs error (device loop3): ext4_empty_dir:3135: inode #11: block 19: comm syz-executor: bad entry in directory: inode out of bounds - offset=5120, inode=2304, rec_len=1024, size=1024 fake=0 [ 194.103787][ T5833] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 19: comm syz-executor: path /309/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=2304, rec_len=1024, size=1024 fake=0 [ 194.124763][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.188495][T10071] loop0: detected capacity change from 0 to 64 [ 194.214111][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.221830][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.525562][ T29] audit: type=1326 audit(1734758122.981:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.4.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b2f85d29 code=0x7ffc0000 [ 194.601223][ T29] audit: type=1326 audit(1734758123.021:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.4.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7ff9b2f85d29 code=0x7ffc0000 [ 194.716962][ T29] audit: type=1326 audit(1734758123.021:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.4.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b2f85d29 code=0x7ffc0000 [ 194.759896][ T29] audit: type=1326 audit(1734758123.021:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.4.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b2f85d29 code=0x7ffc0000 [ 194.936023][T10096] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 194.985971][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1618'. [ 195.091976][T10098] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 195.194021][T10104] overlayfs: conflicting options: metacopy=off,verity=on [ 195.248435][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.667792][ T3827] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 195.694853][ T5088] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.766002][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 195.831578][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 195.840291][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 195.849653][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 195.858581][ T3827] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.869312][T10123] loop1: detected capacity change from 0 to 1024 [ 195.872481][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 195.884642][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 195.893694][ T3827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 195.905914][ T3827] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 195.915298][ T3827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.924264][ T3827] usb 5-1: Product: syz [ 195.928554][ T3827] usb 5-1: Manufacturer: syz [ 195.933289][ T3827] usb 5-1: SerialNumber: syz [ 196.012640][ T3827] usb 5-1: config 0 descriptor?? [ 196.024442][ T5088] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.107807][T10123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.135278][T10123] EXT4-fs error (device loop1): ext4_empty_dir:3124: inode #11: block 623: comm syz.1.1630: Attempting to read directory block (623) that is past i_size (638464) [ 196.261965][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.292565][ T5877] usb 5-1: USB disconnect, device number 9 [ 196.390168][ T5088] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.410662][T10141] [U] ^C [ 196.425314][T10118] vcan0 speed is unknown, defaulting to 1000 [ 196.525457][ T5088] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.537268][T10146] xt_CT: No such helper "pptp" [ 196.781069][ T5088] bridge_slave_1: left allmulticast mode [ 196.793171][ T5088] bridge_slave_1: left promiscuous mode [ 196.806274][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.863181][ T5088] bridge_slave_0: left allmulticast mode [ 196.879292][ T5088] bridge_slave_0: left promiscuous mode [ 196.896198][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.303279][T10152] loop0: detected capacity change from 0 to 32768 [ 197.310663][T10152] btrfs: Deprecated parameter 'usebackuproot' [ 197.316902][T10152] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 197.331870][T10152] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1644 (10152) [ 197.360068][T10152] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 197.370597][T10152] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 197.379780][T10152] BTRFS info (device loop0): using free-space-tree [ 197.421289][ T8888] BTRFS warning (device loop0): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xdd624956 level 0 [ 197.445567][T10152] BTRFS warning (device loop0): couldn't read tree root [ 197.452920][T10152] BTRFS warning (device loop0): try to load backup roots slot 1 [ 197.533321][ T5837] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 198.010570][T10191] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1656'. [ 198.033379][ T5835] Bluetooth: hci1: command tx timeout [ 198.105155][ T5088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.125530][ T5088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.153676][ T5088] bond0 (unregistering): Released all slaves [ 198.749342][ T5088] [ 198.751717][ T5088] ====================================================== [ 198.758751][ T5088] WARNING: possible circular locking dependency detected [ 198.765787][ T5088] 6.13.0-rc3-next-20241220-syzkaller #0 Not tainted [ 198.772389][ T5088] ------------------------------------------------------ [ 198.779418][ T5088] kworker/u8:7/5088 is trying to acquire lock: [ 198.785586][ T5088] ffff888067a9ce00 (team->team_lock_key){+.+.}-{4:4}, at: team_del_slave+0x32/0x1d0 [ 198.786210][T10223] loop0: detected capacity change from 0 to 16 [ 198.795002][ T5088] [ 198.795002][ T5088] but task is already holding lock: [ 198.795015][ T5088] ffff888060fc8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700 [ 198.795070][ T5088] [ 198.795070][ T5088] which lock already depends on the new lock. [ 198.795070][ T5088] [ 198.795076][ T5088] [ 198.795076][ T5088] the existing dependency chain (in reverse order) is: [ 198.795083][ T5088] [ 198.795083][ T5088] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 198.804246][T10223] erofs (device loop0): mounted with root inode @ nid 36. [ 198.808588][ T5088] lock_acquire+0x1ed/0x550 [ 198.808618][ T5088] __mutex_lock+0x1ac/0xee0 [ 198.863359][ T5088] ieee80211_open+0xe9/0x1e0 [ 198.868495][ T5088] __dev_open+0x2d3/0x450 [ 198.873367][ T5088] dev_open+0xae/0x1b0 [ 198.877976][ T5088] team_add_slave+0x9c8/0x2760 [ 198.883288][ T5088] do_setlink+0xe40/0x4210 [ 198.888249][ T5088] rtnl_newlink+0x1bb6/0x2210 [ 198.893461][ T5088] rtnetlink_rcv_msg+0x791/0xcf0 [ 198.898941][ T5088] netlink_rcv_skb+0x1e3/0x430 [ 198.904248][ T5088] netlink_unicast+0x7f6/0x990 [ 198.909551][ T5088] netlink_sendmsg+0x8e4/0xcb0 [ 198.914855][ T5088] __sock_sendmsg+0x221/0x270 [ 198.920071][ T5088] ____sys_sendmsg+0x52a/0x7e0 [ 198.925361][ T5088] __sys_sendmsg+0x269/0x350 [ 198.930490][ T5088] do_syscall_64+0xf3/0x230 [ 198.935530][ T5088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.941959][ T5088] [ 198.941959][ T5088] -> #0 (team->team_lock_key){+.+.}-{4:4}: [ 198.949946][ T5088] validate_chain+0x18ef/0x5920 [ 198.955321][ T5088] __lock_acquire+0x1397/0x2100 [ 198.960693][ T5088] lock_acquire+0x1ed/0x550 [ 198.965715][ T5088] __mutex_lock+0x1ac/0xee0 [ 198.970747][ T5088] team_del_slave+0x32/0x1d0 [ 198.975937][ T5088] team_device_event+0x200/0x5b0 [ 198.981564][ T5088] notifier_call_chain+0x1a5/0x3f0 [ 198.987203][ T5088] unregister_netdevice_many_notify+0xedd/0x1da0 [ 198.994070][ T5088] unregister_netdevice_queue+0x303/0x370 [ 199.000337][ T5088] _cfg80211_unregister_wdev+0x163/0x590 [ 199.006521][ T5088] ieee80211_remove_interfaces+0x4ef/0x700 [ 199.012870][ T5088] ieee80211_unregister_hw+0x5d/0x2c0 [ 199.018783][ T5088] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 199.024868][ T5088] hwsim_exit_net+0x5c1/0x670 [ 199.030088][ T5088] cleanup_net+0x802/0xd50 [ 199.035046][ T5088] process_scheduled_works+0xa66/0x1840 [ 199.041122][ T5088] worker_thread+0x870/0xd30 [ 199.046226][ T5088] kthread+0x7a9/0x920 [ 199.050823][ T5088] ret_from_fork+0x4b/0x80 [ 199.055870][ T5088] ret_from_fork_asm+0x1a/0x30 [ 199.061172][ T5088] [ 199.061172][ T5088] other info that might help us debug this: [ 199.061172][ T5088] [ 199.071422][ T5088] Possible unsafe locking scenario: [ 199.071422][ T5088] [ 199.078864][ T5088] CPU0 CPU1 [ 199.084220][ T5088] ---- ---- [ 199.089578][ T5088] lock(&rdev->wiphy.mtx); [ 199.094084][ T5088] lock(team->team_lock_key); [ 199.101364][ T5088] lock(&rdev->wiphy.mtx); [ 199.108381][ T5088] lock(team->team_lock_key); [ 199.113138][ T5088] [ 199.113138][ T5088] *** DEADLOCK *** [ 199.113138][ T5088] [ 199.121273][ T5088] 5 locks held by kworker/u8:7/5088: [ 199.126545][ T5088] #0: ffff88801baf5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 199.137421][ T5088] #1: ffffc900106b7c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 199.147952][ T5088] #2: ffffffff8fcae690 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x16a/0xd50 [ 199.157351][ T5088] #3: ffffffff8fcbab48 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 199.167177][ T5088] #4: ffff888060fc8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700 [ 199.178045][ T5088] [ 199.178045][ T5088] stack backtrace: [ 199.183930][ T5088] CPU: 1 UID: 0 PID: 5088 Comm: kworker/u8:7 Not tainted 6.13.0-rc3-next-20241220-syzkaller #0 [ 199.183951][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 199.183962][ T5088] Workqueue: netns cleanup_net [ 199.183980][ T5088] Call Trace: [ 199.183986][ T5088] [ 199.183992][ T5088] dump_stack_lvl+0x241/0x360 [ 199.184008][ T5088] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.184021][ T5088] ? __pfx__printk+0x10/0x10 [ 199.184043][ T5088] print_circular_bug+0x13a/0x1b0 [ 199.184059][ T5088] check_noncircular+0x36a/0x4a0 [ 199.184072][ T5088] ? __pfx_check_noncircular+0x10/0x10 [ 199.184086][ T5088] ? lockdep_lock+0x123/0x2b0 [ 199.184103][ T5088] ? lockdep_unlock+0x16a/0x300 [ 199.184117][ T5088] ? __pfx_lockdep_unlock+0x10/0x10 [ 199.184132][ T5088] validate_chain+0x18ef/0x5920 [ 199.184158][ T5088] ? __pfx_validate_chain+0x10/0x10 [ 199.184177][ T5088] ? __pfx_validate_chain+0x10/0x10 [ 199.184204][ T5088] ? mark_lock+0x9a/0x360 [ 199.184221][ T5088] __lock_acquire+0x1397/0x2100 [ 199.184242][ T5088] lock_acquire+0x1ed/0x550 [ 199.184258][ T5088] ? team_del_slave+0x32/0x1d0 [ 199.184276][ T5088] ? __pfx_lock_acquire+0x10/0x10 [ 199.184292][ T5088] ? __pfx___might_resched+0x10/0x10 [ 199.184316][ T5088] __mutex_lock+0x1ac/0xee0 [ 199.184329][ T5088] ? team_del_slave+0x32/0x1d0 [ 199.184343][ T5088] ? trace_contention_end+0x3c/0x120 [ 199.184356][ T5088] ? __mutex_lock+0x37f/0xee0 [ 199.184369][ T5088] ? lockdep_hardirqs_on+0x99/0x150 [ 199.184386][ T5088] ? team_del_slave+0x32/0x1d0 [ 199.184401][ T5088] ? __pfx___mutex_lock+0x10/0x10 [ 199.184413][ T5088] ? __mutex_unlock_slowpath+0x21e/0x790 [ 199.184434][ T5088] ? __asan_memset+0x23/0x50 [ 199.184451][ T5088] team_del_slave+0x32/0x1d0 [ 199.184467][ T5088] team_device_event+0x200/0x5b0 [ 199.184484][ T5088] ? notifier_call_chain+0x15a/0x3f0 [ 199.184501][ T5088] notifier_call_chain+0x1a5/0x3f0 [ 199.184518][ T5088] unregister_netdevice_many_notify+0xedd/0x1da0 [ 199.184538][ T5088] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 199.184554][ T5088] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 199.184570][ T5088] ? __pfx_lock_release+0x10/0x10 [ 199.184592][ T5088] unregister_netdevice_queue+0x303/0x370 [ 199.184605][ T5088] ? __pfx_up_write+0x10/0x10 [ 199.184618][ T5088] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 199.184633][ T5088] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 199.184647][ T5088] _cfg80211_unregister_wdev+0x163/0x590 [ 199.184665][ T5088] ieee80211_remove_interfaces+0x4ef/0x700 [ 199.184684][ T5088] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 199.184700][ T5088] ? rcu_is_watching+0x15/0xb0 [ 199.184715][ T5088] ieee80211_unregister_hw+0x5d/0x2c0 [ 199.184731][ T5088] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 199.184748][ T5088] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 199.184766][ T5088] hwsim_exit_net+0x5c1/0x670 [ 199.184785][ T5088] ? __pfx_hwsim_exit_net+0x10/0x10 [ 199.184805][ T5088] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 199.184822][ T5088] cleanup_net+0x802/0xd50 [ 199.184840][ T5088] ? __pfx_cleanup_net+0x10/0x10 [ 199.184860][ T5088] ? process_scheduled_works+0x976/0x1840 [ 199.184875][ T5088] process_scheduled_works+0xa66/0x1840 [ 199.184898][ T5088] ? __pfx_process_scheduled_works+0x10/0x10 [ 199.184915][ T5088] ? assign_work+0x364/0x3d0 [ 199.184930][ T5088] worker_thread+0x870/0xd30 [ 199.184947][ T5088] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 199.184965][ T5088] ? __kthread_parkme+0x169/0x1d0 [ 199.184981][ T5088] ? __pfx_worker_thread+0x10/0x10 [ 199.184995][ T5088] kthread+0x7a9/0x920 [ 199.185011][ T5088] ? __pfx_kthread+0x10/0x10 [ 199.185028][ T5088] ? __pfx_worker_thread+0x10/0x10 [ 199.185042][ T5088] ? __pfx_kthread+0x10/0x10 [ 199.185058][ T5088] ? __pfx_kthread+0x10/0x10 [ 199.185074][ T5088] ? __pfx_kthread+0x10/0x10 [ 199.185090][ T5088] ? _raw_spin_unlock_irq+0x23/0x50 [ 199.185105][ T5088] ? lockdep_hardirqs_on+0x99/0x150 [ 199.185122][ T5088] ? __pfx_kthread+0x10/0x10 [ 199.185138][ T5088] ret_from_fork+0x4b/0x80 [ 199.185154][ T5088] ? __pfx_kthread+0x10/0x10 [ 199.185170][ T5088] ret_from_fork_asm+0x1a/0x30 [ 199.185189][ T5088] [ 199.630616][ T5088] team0: Port device wlan1 removed [ 199.722385][T10118] chnl_net:caif_netlink_parms(): no params data found [ 199.731465][T10229] loop0: detected capacity change from 0 to 764 [ 199.740587][T10229] iso9660: Unknown parameter 'ÿÿÿÿÿ' [ 199.926668][T10118] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.938311][T10118] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.965853][T10118] bridge_slave_0: entered allmulticast mode [ 199.977875][T10118] bridge_slave_0: entered promiscuous mode [ 199.993235][T10118] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.000393][T10118] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.016751][T10118] bridge_slave_1: entered allmulticast mode [ 200.025264][T10118] bridge_slave_1: entered promiscuous mode [ 200.035179][ T5088] hsr_slave_0: left promiscuous mode [ 200.040866][ T5088] hsr_slave_1: left promiscuous mode [ 200.046762][ T5088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.054343][ T5088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.064067][ T5088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.071587][ T5088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.080086][ T5088] veth1_macvtap: left promiscuous mode [ 200.085694][ T5088] veth0_macvtap: left promiscuous mode [ 200.091213][ T5088] veth1_vlan: left promiscuous mode [ 200.096662][ T5088] veth0_vlan: left promiscuous mode [ 200.111565][ T5835] Bluetooth: hci1: command tx timeout [ 200.228965][ T5088] team0 (unregistering): Port device team_slave_1 removed [ 200.254726][ T5088] team0 (unregistering): Port device team_slave_0 removed [ 200.418166][T10118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.430439][T10118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.465160][T10118] team0: Port device team_slave_0 added [ 200.475038][T10118] team0: Port device team_slave_1 added [ 200.493085][T10118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.500108][T10118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.526180][T10118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.537963][T10118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.544996][T10118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.571980][T10118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.619090][T10118] hsr_slave_0: entered promiscuous mode [ 200.626575][T10118] hsr_slave_1: entered promiscuous mode [ 200.769510][T10118] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 200.784035][T10118] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 200.793124][T10118] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 200.804341][T10118] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 200.825318][T10118] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.832467][T10118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.839875][T10118] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.847070][T10118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.892239][T10118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.908018][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.918176][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.930987][T10118] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.950094][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.957212][ T5088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.970528][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.977611][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.097393][T10118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.263583][T10118] veth0_vlan: entered promiscuous mode [ 201.281237][T10118] veth1_vlan: entered promiscuous mode [ 201.313118][T10118] veth0_macvtap: entered promiscuous mode [ 201.323462][T10118] veth1_macvtap: entered promiscuous mode [ 201.336549][T10118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.347770][T10118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.365973][T10118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.378789][T10118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.390464][T10118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.401293][T10118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.411385][T10118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.424280][T10118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.435262][T10118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.446949][T10118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.458027][T10118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.472048][T10118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.482706][T10118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.496097][T10118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.506720][T10118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.516770][T10118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.527992][T10118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.539363][T10118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.553046][T10118] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.564268][T10118] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.575520][T10118] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.585717][T10118] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.624375][T10118] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 201.647526][ T8888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.649739][T10118] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 201.661372][ T8888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.709313][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.717150][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.177753][ T5835] Bluetooth: hci1: command tx timeout [ 204.254035][ T5835] Bluetooth: hci1: command tx timeout