last executing test programs: 11.786426731s ago: executing program 3 (id=584): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c935954a335f6469a793"], 0x138) write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4) 11.636561543s ago: executing program 3 (id=587): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2060a9, &(0x7f00000000c0)={[{@huge_never}]}) 11.491161796s ago: executing program 3 (id=589): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000280)=""/207, &(0x7f0000000380)=0xcf) 11.207051102s ago: executing program 3 (id=593): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@usrjquota}, {@abort}, {@nombcache}, {@noload}, {@jqfmt_vfsv0}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@oldalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@bsdgroups}, {@bh}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 10.559907885s ago: executing program 3 (id=602): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0xe}, 0x20, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r0, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) 8.985640315s ago: executing program 3 (id=615): r0 = io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80000000, 0xfefffffd}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x10000008}) 8.531416684s ago: executing program 32 (id=615): r0 = io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80000000, 0xfefffffd}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x10000008}) 4.041113351s ago: executing program 2 (id=648): sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000000400)={[{@barrier}, {@rescan_uuid_tree}, {@nossd_spread}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@compress}, {@max_inline={'max_inline', 0x3d, [0x30, 0x6b, 0x37, 0x74]}}, {@barrier}, {@datasum}]}, 0x2, 0x55ae, &(0x7f000000ac40)="$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") link(&(0x7f0000000200)='./file2\x00', &(0x7f0000000300)='./bus\x00') 3.514498851s ago: executing program 0 (id=654): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x1010081, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1129028, 0x0) 3.395917174s ago: executing program 0 (id=655): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xa00, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f0000000880)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff, r0, 0x0, 0x0, 0x42e4}]) 3.132765029s ago: executing program 0 (id=656): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "e3de3d7b4cd07ec3ee777de774fc7987cca41989065ddcc3eb552e6c57314dd4f60841e1"}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 2.728086357s ago: executing program 2 (id=658): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x20008000) 2.494834231s ago: executing program 1 (id=659): setuid(0xee01) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) 2.341581394s ago: executing program 1 (id=660): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) syz_usb_connect(0x3, 0x3d, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002a91d21402577a8b046070102030109022b00010000000009045f00020103df000905050008000200e5090501020800010000072501"], 0x0) 1.01037514s ago: executing program 2 (id=661): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 1.0040912s ago: executing program 0 (id=662): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x180000c, &(0x7f0000002a40)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRES16, @ANYRESOCT=0x0, @ANYRESDEC, @ANYBLOB="060000bd00", @ANYBLOB="7c9a8f64826fbfe463a086da931bf33336d4893a5c6f33b2db7a2165ab323a17af216ec394e6423164cc220a38738a0a2beac79131ebc3199dc0d4712f14c586677e07476ec3a8157add5a1d8632458da7d445cd657b1ebbc4c88f82e29d82", @ANYRES8], 0x1, 0x6eb, &(0x7f0000000dc0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) 688.409727ms ago: executing program 2 (id=663): timerfd_create(0x0, 0x800) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 619.434438ms ago: executing program 1 (id=664): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0xc0f85403, &(0x7f0000000040)) 594.034428ms ago: executing program 0 (id=665): set_mempolicy(0x4005, &(0x7f0000000000)=0x1, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) 449.286361ms ago: executing program 2 (id=666): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16], 0x5, 0x236, &(0x7f00000027c0)="$eJzsmDGLE0EUx/8z2ewlInI2V9goeOCJXnLZQ7kmnAqClc2dqJUGbz3O7F0kt4IJCAYbG+0sBBsLv4DFFVdZ2PkFBC1UECxMYWFjs/J2ZjezN9HENd29XzH8Z957M/PeZF8RMAyzb/ny+eenJxeWVk8DOIhZTOn1bwVACKWl4f/x+b1Tz+oXX7z+8Ort1qEHu3v3o5Aoyi6U/nK+A+DN+QLC9KQ0+heJWT1ZhUz1FUic1PoqBCpa34QsJvv6ELiu9R1Dt8i/Urm9EfiVW61gjcQCDTUaPBoy+dL9+j2BNT2PoigShn270202gsBvG8LRtiGmXCI9rDlj1a8IgX4PqBv3o/tfe/yoR/OkNgtG/WqQqOkkFiGwoteXMJXURpXEyP+IM9i/YOU/NFtyJcOoJEtK1H9MpFimODyfL3yO0jlnm6aR5xoYRC3DbxcxMFEls87H/i9lTO/96cTCMV4Hw8OX9YPmOPSylUWzEZSyK5LE0zKAib+yLXJlkYiZ/u472/R1VHgkRh8hxv/9lMa9c/Ih/kumyQesVsroNmW+inXsdzcu9n5H9Y/opcAJoz85Rv+ohpt3q9ud7vzGZmPdX/e3PG/xrAAenvGqcSNSo9X3Bv25HPenA8b+xT/4utLF/UYYtmtqdIWLMsKw7cVzz/hsVnZa32/osBCXABxXE2qbbrpjwTpDuMpHxr6k5mwnhmEYhmEYhmEYhmEYhmGYccn84XkUIv4XdASe8v4dAAD//9FzXEo=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x101000, 0x118) getdents64(r0, 0x0, 0x0) 413.942482ms ago: executing program 1 (id=667): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = io_uring_setup(0x3f1, &(0x7f0000000140)={0x0, 0x0, 0x3000}) poll(&(0x7f0000000080)=[{r0, 0x200}], 0x1, 0x6) 270.941855ms ago: executing program 1 (id=668): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0xa002a0, 0x0, 0x18, 0x0, &(0x7f0000000040)=""/24, 0x6414, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 131.002867ms ago: executing program 0 (id=669): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r0, 0x89f3, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) 72.422168ms ago: executing program 1 (id=670): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0xffffffff}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x10001}]}}]}, 0x40}}, 0x0) 0s ago: executing program 2 (id=671): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2d, 0x0, 0x0, 0xcbf, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x700, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', r1, 0x4, 0xfe, 0x2, 0x4038a0d, 0xb, @empty, @mcast2={0xff, 0x5}, 0x0, 0x8000, 0x0, 0x5}}) kernel console output (not intermixed with test programs): ff, continuing anyway [ 70.936394][ T5826] usb 2-1: USB disconnect, device number 2 [ 71.105895][ T5979] fido_id[5979]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 71.288847][ T5987] loop2: detected capacity change from 0 to 1024 [ 71.341381][ T5987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.373596][ T5991] netlink: 56 bytes leftover after parsing attributes in process `syz.0.55'. [ 71.404469][ T5992] netlink: 128 bytes leftover after parsing attributes in process `syz.3.54'. [ 71.539993][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.546694][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.627399][ T5996] loop0: detected capacity change from 0 to 512 [ 71.651164][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.735556][ T5996] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.827178][ T6004] netlink: 56 bytes leftover after parsing attributes in process `syz.1.60'. [ 71.835317][ T5996] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.863390][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.60'. [ 71.931941][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.546930][ T6021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.68'. [ 72.652131][ T6013] loop1: detected capacity change from 0 to 40427 [ 72.697920][ T6013] F2FS-fs (loop1): invalid crc value [ 72.720497][ T6013] F2FS-fs (loop1): Found nat_bits in checkpoint [ 72.739373][ T6026] loop0: detected capacity change from 0 to 128 [ 72.763327][ T6026] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 72.764626][ T6015] loop3: detected capacity change from 0 to 32768 [ 72.836263][ T6026] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 72.866763][ T6030] raw_sendmsg: syz.2.70 forgot to set AF_INET. Fix it! [ 72.895735][ T6015] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 72.932466][ T6013] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 73.151470][ T6015] XFS (loop3): Ending clean mount [ 73.354272][ T5780] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 73.582052][ T6052] netlink: 16 bytes leftover after parsing attributes in process `syz.1.76'. [ 73.656418][ T6056] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 73.766125][ T6058] loop0: detected capacity change from 0 to 64 [ 73.989664][ T6066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'. [ 74.203251][ T5826] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.315925][ T6078] IPv6: NLM_F_CREATE should be specified when creating new route [ 74.340894][ T6078] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 74.348515][ T6078] IPv6: NLM_F_CREATE should be set when creating new route [ 74.355848][ T6078] IPv6: NLM_F_CREATE should be set when creating new route [ 74.358296][ T6082] CUSE: info not properly terminated [ 74.394054][ T5826] usb 4-1: Using ep0 maxpacket: 8 [ 74.401670][ T5826] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 74.443661][ T5826] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 74.463626][ T5826] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 74.471739][ T5826] usb 4-1: Product: syz [ 74.490508][ T5826] usb 4-1: Manufacturer: syz [ 74.503350][ T5826] usb 4-1: SerialNumber: syz [ 74.687717][ T6093] loop2: detected capacity change from 0 to 8 [ 74.746746][ T5826] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 74.765103][ T5826] usb 4-1: Handspring Visor / Palm OS: port 0, is for HotSync use [ 74.780725][ T5826] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 74.781014][ T6093] SQUASHFS error: lzo decompression failed, data probably corrupt [ 74.794131][ T5826] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 74.806650][ T6093] SQUASHFS error: Failed to read block 0x202: -5 [ 74.821873][ T6093] SQUASHFS error: Unable to read metadata cache entry [200] [ 74.935454][ T6095] loop0: detected capacity change from 0 to 512 [ 74.953774][ T5826] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 74.964783][ T6095] EXT4-fs: Ignoring removed i_version option [ 74.980141][ T5826] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 74.991606][ T6095] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.013771][ T5826] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 75.032127][ T5826] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 75.061229][ T5826] usb 4-1: USB disconnect, device number 2 [ 75.092074][ T5826] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 75.110019][ T6095] EXT4-fs (loop0): Test dummy encryption mode enabled [ 75.112758][ T5826] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 75.120093][ T6095] EXT4-fs (loop0): orphan cleanup on readonly fs [ 75.128365][ T5826] visor 4-1:1.0: device disconnected [ 75.140758][ T6095] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.96: inode #13: comm syz.0.96: iget: illegal inode # [ 75.165213][ T6095] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.96: couldn't read orphan inode 13 (err -117) [ 75.179657][ T6095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 75.245677][ T6095] EXT4-fs error (device loop0): ext4_resize_begin:62: comm syz.0.96: resize_inode disabled but reserved GDT blocks non-zero [ 75.300532][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.421809][ T6108] loop0: detected capacity change from 0 to 8 [ 75.438273][ T6108] SQUASHFS error: lzo decompression failed, data probably corrupt [ 75.461317][ T6108] SQUASHFS error: Failed to read block 0x91: -5 [ 75.465816][ T6109] loop1: detected capacity change from 0 to 2048 [ 75.467970][ T6108] SQUASHFS error: Unable to read metadata cache entry [8f] [ 75.481820][ T6108] SQUASHFS error: Unable to read inode 0x11f [ 75.524651][ T6109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.537704][ T6109] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.600013][ T6109] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.100: bg 0: block 345: padding at end of block bitmap is not set [ 75.771999][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.782860][ T6116] loop0: detected capacity change from 0 to 2048 [ 75.836329][ T6116] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 75.857803][ T6116] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 75.873179][ T6116] UDF-fs: Scanning with blocksize 512 failed [ 75.918545][ T6116] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 76.562892][ T6142] loop2: detected capacity change from 0 to 64 [ 76.600363][ T6145] loop0: detected capacity change from 0 to 256 [ 76.608027][ T6142] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 76.638798][ T6145] exfat: Deprecated parameter 'utf8' [ 76.670796][ T6145] exfat: Deprecated parameter 'namecase' [ 76.732385][ T6145] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 76.744849][ T5826] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 76.905252][ T6150] ax25_connect(): syz.1.118 uses autobind, please contact jreuter@yaina.de [ 76.933439][ T5846] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.963123][ T5826] usb 4-1: Using ep0 maxpacket: 16 [ 76.975501][ T5826] usb 4-1: unable to get BOS descriptor or descriptor too short [ 76.994543][ T5826] usb 4-1: config 249 has an invalid interface number: 115 but max is 0 [ 77.002915][ T5826] usb 4-1: config 249 has no interface number 0 [ 77.019524][ T5826] usb 4-1: config 249 interface 115 has no altsetting 0 [ 77.055723][ T5826] usb 4-1: New USB device found, idVendor=413c, idProduct=8195, bcdDevice= 1.f8 [ 77.075232][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.098041][ T5826] usb 4-1: Product: syz [ 77.105976][ T5826] usb 4-1: Manufacturer: syz [ 77.110622][ T5826] usb 4-1: SerialNumber: syz [ 77.135586][ T5846] usb 3-1: Using ep0 maxpacket: 16 [ 77.158928][ T5846] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 77.170884][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.193120][ T5846] usb 3-1: Product: syz [ 77.197386][ T5846] usb 3-1: Manufacturer: syz [ 77.202022][ T5846] usb 3-1: SerialNumber: syz [ 77.226070][ T5846] usb 3-1: config 0 descriptor?? [ 77.271692][ T6156] loop0: detected capacity change from 0 to 4096 [ 77.353216][ T5847] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 77.363604][ T5826] qmi_wwan: probe of 4-1:249.115 failed with error -22 [ 77.387403][ T6156] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 77.398028][ T5826] usb 4-1: USB disconnect, device number 3 [ 77.404186][ T6156] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 77.439153][ T5846] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 77.482077][ T5846] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 77.548401][ T6155] ntfs3: loop0: ino=1e, "file1" attr_set_size [ 77.553343][ T5847] usb 2-1: Using ep0 maxpacket: 32 [ 77.582349][ T5847] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 77.591643][ T5847] usb 2-1: config 0 has no interface number 0 [ 77.605365][ T5847] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 77.621089][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.632281][ T5847] usb 2-1: Product: syz [ 77.637294][ T5847] usb 2-1: Manufacturer: syz [ 77.638447][ T2903] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 77.641913][ T5847] usb 2-1: SerialNumber: syz [ 77.659480][ T5781] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 77.664423][ T5847] usb 2-1: config 0 descriptor?? [ 77.681509][ T5847] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 77.690428][ T5781] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 77.694427][ T5826] usb 3-1: USB disconnect, device number 2 [ 77.715318][ T5781] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 77.722899][ T12] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 77.900065][ T5847] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 77.915319][ T5847] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 78.280220][ T6158] loop0: detected capacity change from 0 to 32768 [ 78.352257][ T6166] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.395736][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 78.407507][ T5847] usb 2-1: USB disconnect, device number 3 [ 78.460441][ T5847] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 78.523626][ T5847] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 78.552213][ T5847] quatech2 2-1:0.51: device disconnected [ 78.567570][ T6171] loop0: detected capacity change from 0 to 4096 [ 78.634798][ T6173] sg_read: process 51 (syz.3.128) changed security contexts after opening file descriptor, this is not allowed. [ 78.655309][ T6171] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 78.678596][ T6171] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 78.812501][ T6171] ntfs3: loop0: ino=1e, "file1" attr_set_size [ 79.046765][ T6182] loop2: detected capacity change from 0 to 1024 [ 79.087556][ T6183] loop0: detected capacity change from 0 to 1024 [ 79.114781][ T6182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.238949][ T6183] hfsplus: bad catalog entry type [ 79.319885][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.347443][ T1129] hfsplus: b-tree write err: -5, ino 4 [ 79.648022][ T6200] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.140' resets device [ 80.140086][ T6198] loop0: detected capacity change from 0 to 32768 [ 80.167751][ T6192] loop1: detected capacity change from 0 to 32768 [ 80.213524][ T6192] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 80.231917][ T6194] loop3: detected capacity change from 0 to 32768 [ 80.252644][ T6198] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 80.324084][ T6194] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 80.337056][ T6194] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 80.345416][ T6198] (syz.0.139,6198,1):ocfs2_verify_group_and_input:420 ERROR: add a group which is in the current volume. [ 80.359783][ T6198] (syz.0.139,6198,1):ocfs2_group_add:503 ERROR: status = -22 [ 80.379196][ T6194] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 80.393905][ T2903] (kworker/u4:8,2903,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 80.481377][ T6192] XFS (loop1): Ending clean mount [ 80.505978][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 80.505990][ T27] audit: type=1800 audit(1758798035.083:4): pid=6194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.137" name="file2" dev="loop3" ino=17058 res=0 errno=0 [ 80.544931][ T6192] XFS (loop1): Quotacheck needed: Please wait. [ 80.550305][ T5781] ocfs2: Unmounting device (7,0) on (node local) [ 80.568028][ T6223] warning: `syz.2.145' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.672276][ T6192] XFS (loop1): Quotacheck: Done. [ 80.808520][ T5780] ocfs2: Unmounting device (7,3) on (node local) [ 80.981646][ T5783] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 81.569916][ T6228] loop3: detected capacity change from 0 to 40427 [ 81.594488][ T6228] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 81.602282][ T6228] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 81.644269][ T6228] F2FS-fs (loop3): Found nat_bits in checkpoint [ 81.771802][ T6228] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 81.785926][ T23] cfg80211: failed to load regulatory.db [ 81.813481][ T6228] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 81.829632][ T6242] loop2: detected capacity change from 0 to 64 [ 81.876444][ T6242] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 81.899471][ T6232] loop0: detected capacity change from 0 to 32768 [ 81.933315][ T5826] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 81.962683][ T6232] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 82.103605][ T5781] ocfs2: Unmounting device (7,0) on (node local) [ 82.187933][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 82.220206][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.244469][ T5826] usb 2-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 82.268443][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.299411][ T5826] usb 2-1: config 0 descriptor?? [ 82.305910][ T5847] hid-generic 0000:0000:0000.0002: item fetching failed at offset 0/1 [ 82.345880][ T5847] hid-generic: probe of 0000:0000:0000.0002 failed with error -22 [ 82.747544][ T5826] kye 0003:0458:5005.0003: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 82.767165][ T5826] kye 0003:0458:5005.0003: unknown main item tag 0x2 [ 82.786868][ T5826] kye 0003:0458:5005.0003: hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.1-1/input0 [ 82.809630][ T5826] kye 0003:0458:5005.0003: tablet-enabling feature report not found [ 82.834194][ T5826] kye 0003:0458:5005.0003: tablet enabling failed [ 82.978281][ T6252] loop0: detected capacity change from 0 to 32768 [ 82.991812][ T6252] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.157 (6252) [ 83.010991][ T5847] usb 2-1: USB disconnect, device number 4 [ 83.094569][ T6252] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 83.107179][ T6252] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 83.118190][ T6252] BTRFS info (device loop0): using free space tree [ 83.161700][ T6252] BTRFS info (device loop0): enabling ssd optimizations [ 83.168798][ T6252] BTRFS info (device loop0): auto enabling async discard [ 83.260402][ T27] audit: type=1800 audit(1758798037.833:5): pid=6252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.157" name="file2" dev="loop0" ino=261 res=0 errno=0 [ 83.305878][ T5781] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 83.405359][ T5775] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 9 /dev/loop0 scanned by udevd (5775) [ 83.717265][ T6288] loop2: detected capacity change from 0 to 64 [ 83.793707][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.008673][ T23] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 84.023167][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.048125][ T23] usb 1-1: Product: syz [ 84.052335][ T23] usb 1-1: Manufacturer: syz [ 84.066283][ T23] usb 1-1: SerialNumber: syz [ 84.094961][ T23] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 84.130414][ T42] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 84.233223][ T5846] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 84.333287][ T5847] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 84.343156][ T6294] loop3: detected capacity change from 0 to 32768 [ 84.380285][ T6294] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 84.425062][ T5846] usb 2-1: config 2 interface 0 altsetting 185 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.436992][ T6294] XFS (loop3): Ending clean mount [ 84.450086][ T5846] usb 2-1: config 2 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.470547][ T5846] usb 2-1: config 2 interface 0 has no altsetting 0 [ 84.483059][ T5846] usb 2-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 84.492125][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.556361][ T5847] usb 3-1: Using ep0 maxpacket: 32 [ 84.575902][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 81, changing to 10 [ 84.590408][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.592631][ T5780] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 84.603759][ T5847] usb 3-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 84.622141][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.639113][ T5847] usb 3-1: config 0 descriptor?? [ 84.843292][ T23] usb 1-1: USB disconnect, device number 2 [ 84.955486][ T5846] apple 0003:05AC:027A.0004: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.1-1/input0 [ 85.109786][ T5847] wacom 0003:056A:0315.0005: Unknown device_type for 'HID 056a:0315'. Assuming pen. [ 85.124949][ T5847] wacom 0003:056A:0315.0005: hidraw1: USB HID v0.07 Device [HID 056a:0315] on usb-dummy_hcd.2-1/input0 [ 85.183890][ T5847] input: Wacom Intuos Pro M Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0315.0005/input/input6 [ 85.221515][ T5846] usb 2-1: USB disconnect, device number 5 [ 85.339849][ T5826] usb 3-1: USB disconnect, device number 3 [ 85.454367][ T42] usb 1-1: Service connection timeout for: 256 [ 85.460839][ T42] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 85.484799][ T42] ath9k_htc: Failed to initialize the device [ 85.501366][ T23] usb 1-1: ath9k_htc: USB layer deinitialized [ 85.533112][ T786] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 85.723227][ T786] usb 4-1: Using ep0 maxpacket: 16 [ 85.731803][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.732294][ T6327] delete_channel: no stack [ 85.744560][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.757594][ T786] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 85.768586][ T6326] delete_channel: no stack [ 85.790377][ T786] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 85.819357][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.863941][ T786] usb 4-1: config 0 descriptor?? [ 85.934636][ T6331] loop1: detected capacity change from 0 to 512 [ 85.942122][ T6331] EXT4-fs: Ignoring removed nobh option [ 86.002418][ T6331] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 86.069524][ T6331] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #3: comm syz.1.177: corrupted inode contents [ 86.089080][ T6331] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #3: comm syz.1.177: mark_inode_dirty error [ 86.091575][ T6335] loop2: detected capacity change from 0 to 8192 [ 86.124759][ T6335] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 86.141800][ T6335] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 86.152050][ T6335] REISERFS (device loop2): using ordered data mode [ 86.152203][ T6331] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #3: comm syz.1.177: corrupted inode contents [ 86.158772][ T6335] reiserfs: using flush barriers [ 86.181186][ T6335] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 86.206043][ T6331] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.177: mark_inode_dirty error [ 86.211298][ T6335] REISERFS (device loop2): checking transaction log (loop2) [ 86.237678][ T6331] Quota error (device loop1): write_blk: dquota write failed [ 86.254272][ T6331] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 86.285363][ T6331] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.177: Failed to acquire dquot type 0 [ 86.324728][ T786] microsoft 0003:045E:07DA.0006: No inputs registered, leaving [ 86.340978][ T786] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 86.365572][ T6331] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.177: corrupted inode contents [ 86.375484][ T6335] REISERFS (device loop2): Using tea hash to sort names [ 86.389076][ T786] microsoft 0003:045E:07DA.0006: no inputs found [ 86.400306][ T6335] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 86.411352][ T6331] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #16: comm syz.1.177: mark_inode_dirty error [ 86.415660][ T786] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 86.427587][ T6331] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.177: corrupted inode contents [ 86.446281][ T6331] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.177: mark_inode_dirty error [ 86.494636][ T6331] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.177: corrupted inode contents [ 86.528361][ T27] audit: type=1800 audit(1758798041.103:6): pid=6335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.179" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 86.566435][ T6331] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 86.584477][ T6331] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.177: corrupted inode contents [ 86.605700][ T6331] EXT4-fs error (device loop1): ext4_truncate:4288: inode #16: comm syz.1.177: mark_inode_dirty error [ 86.622566][ T6331] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 86.636209][ T5826] usb 4-1: USB disconnect, device number 4 [ 86.690591][ T6331] EXT4-fs (loop1): 1 truncate cleaned up [ 86.711962][ T6331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.729643][ T6331] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.847909][ T6346] loop2: detected capacity change from 0 to 512 [ 86.854827][ T6331] Quota error (device loop1): do_check_range: Getting block 18 out of range 0-5 [ 86.912251][ T6346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.939326][ T6346] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.946415][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.028560][ T6352] loop1: detected capacity change from 0 to 512 [ 87.069012][ T6353] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz.2.182: invalid size [ 87.076466][ T6352] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.108884][ T6352] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.120638][ T6353] EXT4-fs (loop2): Remounting filesystem read-only [ 87.299416][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.314180][ T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 87.335949][ T12] Quota error (device loop2): write_blk: dquota write failed [ 87.360831][ T12] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 87.376308][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.649428][ T6370] Bluetooth: MGMT ver 1.22 [ 87.736629][ T6374] netlink: 28 bytes leftover after parsing attributes in process `syz.1.193'. [ 88.276951][ T6390] sp0: Synchronizing with TNC [ 88.612588][ T6378] loop0: detected capacity change from 0 to 32768 [ 88.683423][ T6378] [ 88.683423][ T6378] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.683423][ T6378] [ 88.777427][ T6378] find_entry called with index = 0 [ 88.787558][ T6378] read_mapping_page failed! [ 88.792136][ T6378] ERROR: (device loop0): txCommit: [ 88.792136][ T6378] [ 88.882103][ T12] ERROR: (device loop0): diWrite: ixpxd invalid [ 88.882103][ T12] [ 88.933478][ T12] ERROR: (device loop0): txCommit: [ 88.933478][ T12] [ 88.941099][ T12] jfs_write_inode: jfs_commit_inode failed! [ 88.961978][ T5781] [ 88.961978][ T5781] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.961978][ T5781] [ 89.053242][ T5781] [ 89.053242][ T5781] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 89.053242][ T5781] [ 89.972956][ C0] sched: RT throttling activated [ 89.983066][ T6426] loop2: detected capacity change from 0 to 256 [ 90.097993][ T6408] loop1: detected capacity change from 0 to 131072 [ 90.121040][ T6426] FAT-fs (loop2): Directory bread(block 64) failed [ 90.127974][ T6408] F2FS-fs (loop1): invalid crc value [ 90.163438][ T6408] F2FS-fs (loop1): Mismatch valid blocks 0 vs. 4 [ 90.176070][ T6426] FAT-fs (loop2): Directory bread(block 65) failed [ 90.183125][ T6426] FAT-fs (loop2): Directory bread(block 66) failed [ 90.191772][ T6408] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 90.233752][ T6426] FAT-fs (loop2): Directory bread(block 67) failed [ 90.240555][ T6426] FAT-fs (loop2): Directory bread(block 68) failed [ 90.273073][ T6426] FAT-fs (loop2): Directory bread(block 69) failed [ 90.293745][ T6426] FAT-fs (loop2): Directory bread(block 70) failed [ 90.311777][ T6426] FAT-fs (loop2): Directory bread(block 71) failed [ 90.329088][ T6426] FAT-fs (loop2): Directory bread(block 72) failed [ 90.346568][ T6426] FAT-fs (loop2): Directory bread(block 73) failed [ 90.350264][ T6435] netlink: 'syz.0.219': attribute type 1 has an invalid length. [ 90.956290][ T6453] loop1: detected capacity change from 0 to 1024 [ 90.961229][ T6452] loop3: detected capacity change from 0 to 4096 [ 91.033873][ T6453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.123399][ T786] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.153157][ T6452] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 91.264536][ T6452] ntfs3: loop3: ino=5, "/" attr_set_size [ 91.297200][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.320393][ T6461] mmap: syz.2.231 (6461) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 91.363148][ T786] usb 1-1: Using ep0 maxpacket: 16 [ 91.394513][ T786] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 91.433059][ T786] usb 1-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 91.442141][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.511946][ T6463] loop1: detected capacity change from 0 to 128 [ 91.523218][ T786] usb 1-1: config 0 descriptor?? [ 91.712003][ T6471] loop3: detected capacity change from 0 to 512 [ 91.770837][ T6471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.798249][ T6471] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.888910][ T6471] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 91.978395][ T786] apple 0003:05AC:029F.0007: unknown main item tag 0x0 [ 91.979380][ T6480] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.996719][ T786] apple 0003:05AC:029F.0007: unknown main item tag 0x0 [ 92.003632][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.007101][ T786] apple 0003:05AC:029F.0007: unknown main item tag 0x0 [ 92.019943][ T786] apple 0003:05AC:029F.0007: unknown main item tag 0x0 [ 92.049300][ T786] apple 0003:05AC:029F.0007: unknown main item tag 0x0 [ 92.073337][ T786] apple 0003:05AC:029F.0007: hidraw0: USB HID v0.fe Device [HID 05ac:029f] on usb-dummy_hcd.0-1/input0 [ 92.281601][ T786] usb 1-1: USB disconnect, device number 3 [ 92.346897][ T6490] loop3: detected capacity change from 0 to 512 [ 92.352902][ T6485] loop1: detected capacity change from 0 to 8192 [ 92.382909][ T6485] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 92.397846][ T6485] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 92.399646][ T6490] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 92.415389][ T6490] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 92.424383][ T6485] REISERFS (device loop1): using ordered data mode [ 92.430907][ T6485] reiserfs: using flush barriers [ 92.442504][ T6490] EXT4-fs (loop3): 1 truncate cleaned up [ 92.450064][ T6485] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 92.506195][ T6490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.535740][ T6485] REISERFS (device loop1): checking transaction log (loop1) [ 92.564876][ T6485] REISERFS (device loop1): Using r5 hash to sort names [ 92.572167][ T6485] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 92.628444][ T6485] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 92.711831][ T6490] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 92.748239][ T6485] REISERFS warning (device loop1): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=2, len=0 - odd [ 92.816714][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.930565][ T6494] loop2: detected capacity change from 0 to 32768 [ 93.058448][ T6494] ialloc: diAlloc returned -5! [ 93.147121][ T6494] ialloc: diAlloc returned -5! [ 93.209527][ T6501] netlink: 108 bytes leftover after parsing attributes in process `syz.1.246'. [ 93.263448][ T6501] netlink: 20 bytes leftover after parsing attributes in process `syz.1.246'. [ 93.435547][ T6510] loop3: detected capacity change from 0 to 1024 [ 93.521482][ T6510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.637599][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.789309][ T6524] loop2: detected capacity change from 0 to 1024 [ 93.803180][ T5873] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 94.019801][ T5873] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.045236][ T5873] usb 1-1: config 0 interface 0 has no altsetting 0 [ 94.067998][ T5873] usb 1-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 94.093116][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.117239][ T5873] usb 1-1: config 0 descriptor?? [ 94.592588][ T5873] nintendo 0003:057E:2009.0008: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.0-1/input0 [ 94.685775][ T6531] loop1: detected capacity change from 0 to 32768 [ 94.690129][ T5873] nintendo 0003:057E:2009.0008: failed reading SPI flash; ret=-38 [ 94.712712][ T5873] nintendo 0003:057E:2009.0008: using factory cal for left stick [ 94.733162][ T5873] nintendo 0003:057E:2009.0008: failed reading SPI flash; ret=-38 [ 94.743396][ T5873] nintendo 0003:057E:2009.0008: using factory cal for right stick [ 94.751433][ T5873] nintendo 0003:057E:2009.0008: failed reading SPI flash; ret=-38 [ 94.760014][ T5873] nintendo 0003:057E:2009.0008: Failed to read left stick cal, using defaults; e=-38 [ 94.781902][ T5873] nintendo 0003:057E:2009.0008: failed reading SPI flash; ret=-38 [ 94.797081][ T6531] ialloc: diAlloc returned -5! [ 94.798732][ T5873] nintendo 0003:057E:2009.0008: Failed to read right stick cal, using defaults; e=-38 [ 94.827749][ T5873] nintendo 0003:057E:2009.0008: failed reading SPI flash; ret=-38 [ 94.872122][ T6531] ialloc: diAlloc returned -5! [ 94.877325][ T5873] nintendo 0003:057E:2009.0008: using factory cal for IMU [ 94.896002][ T5873] nintendo 0003:057E:2009.0008: failed reading SPI flash; ret=-38 [ 94.931854][ T5873] nintendo 0003:057E:2009.0008: Failed to read IMU cal, using defaults; ret=-38 [ 94.966768][ T5873] nintendo 0003:057E:2009.0008: Unable to read IMU calibration data [ 94.990350][ T5873] nintendo 0003:057E:2009.0008: Failed to set report mode; ret=-38 [ 95.013203][ T5873] nintendo 0003:057E:2009.0008: Failed to initialize controller; ret=-38 [ 95.035307][ T6552] loop2: detected capacity change from 0 to 1024 [ 95.071866][ T5873] nintendo 0003:057E:2009.0008: probe - fail = -38 [ 95.098515][ T5873] nintendo: probe of 0003:057E:2009.0008 failed with error -38 [ 95.120485][ T6556] netlink: 36 bytes leftover after parsing attributes in process `syz.1.272'. [ 95.148046][ T5873] usb 1-1: USB disconnect, device number 4 [ 95.817092][ T6554] loop3: detected capacity change from 0 to 32768 [ 95.865989][ T6554] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 95.925030][ T6577] loop1: detected capacity change from 0 to 512 [ 95.943432][ T786] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 95.990246][ T6577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.992901][ T6554] XFS (loop3): Ending clean mount [ 96.025498][ T6577] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.041258][ T6554] XFS (loop3): Quotacheck needed: Please wait. [ 96.070291][ T6577] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 96.117942][ T6554] XFS (loop3): Quotacheck: Done. [ 96.169345][ T786] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.197706][ T786] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.232692][ T786] usb 1-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 96.260145][ T786] usb 1-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 96.281195][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.290365][ T786] usb 1-1: config 1 interface 1 has no altsetting 0 [ 96.307825][ T786] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 96.323793][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.332615][ T786] usb 1-1: Product: syz [ 96.363033][ T786] usb 1-1: Manufacturer: syz [ 96.373276][ T786] usb 1-1: SerialNumber: syz [ 96.388281][ T5780] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 96.399403][ T786] cdc_acm: probe of 1-1:1.0 failed with error -22 [ 96.654634][ T5826] usb 1-1: USB disconnect, device number 5 [ 97.050737][ T6590] loop3: detected capacity change from 0 to 128 [ 97.124630][ T6586] loop1: detected capacity change from 0 to 32768 [ 97.130558][ T6590] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.146447][ T6586] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.282 (6586) [ 97.181729][ T6590] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.210933][ T6586] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 97.258422][ T5780] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.286895][ T6586] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 97.326286][ T6586] BTRFS info (device loop1): metadata ratio 1025 [ 97.348367][ T6586] BTRFS info (device loop1): enabling disk space caching [ 97.369185][ T6586] BTRFS info (device loop1): force clearing of disk cache [ 97.392876][ T6586] BTRFS info (device loop1): turning off barriers [ 97.413528][ T6586] BTRFS info (device loop1): setting nodatacow, compression disabled [ 97.442122][ T6586] BTRFS info (device loop1): enabling ssd optimizations [ 97.453346][ T6586] BTRFS info (device loop1): using spread ssd allocation scheme [ 97.480184][ T6586] BTRFS info (device loop1): disk space caching is enabled [ 97.573833][ T786] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 97.606835][ T6586] BTRFS info (device loop1): rebuilding free space tree [ 97.705367][ T6586] BTRFS info (device loop1): disabling free space tree [ 97.716137][ T6586] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 97.728502][ T6586] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 97.764273][ T786] usb 3-1: Using ep0 maxpacket: 16 [ 97.782794][ T786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.835189][ T786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.875498][ T786] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 97.912016][ T786] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 97.921269][ T27] audit: type=1800 audit(1758798052.483:7): pid=6586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.282" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 97.956546][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.989331][ T786] usb 3-1: config 0 descriptor?? [ 98.103347][ T5783] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 98.455422][ T786] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0009/input/input10 [ 98.491913][ T786] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 98.720270][ T6643] loop3: detected capacity change from 0 to 512 [ 98.850454][ T786] usb 3-1: USB disconnect, device number 4 [ 98.876895][ T6641] fido_id[6641]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0009/report_descriptor': No such file or directory [ 98.910714][ T6643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.925310][ T6643] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.052581][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.133895][ T6648] loop1: detected capacity change from 0 to 8192 [ 99.157664][ T6648] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 99.236700][ T6648] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 99.276693][ T6648] REISERFS (device loop1): using ordered data mode [ 99.313926][ T6648] reiserfs: using flush barriers [ 99.339947][ T6640] loop0: detected capacity change from 0 to 32768 [ 99.350528][ T6648] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 99.414593][ T6640] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 99.432805][ T6648] REISERFS (device loop1): checking transaction log (loop1) [ 99.443148][ T6648] REISERFS (device loop1): Using r5 hash to sort names [ 99.451313][ T6648] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 99.465771][ T6648] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 99.510746][ T6640] XFS (loop0): Ending clean mount [ 99.522377][ T6640] XFS (loop0): Quotacheck needed: Please wait. [ 99.621838][ T6640] XFS (loop0): Quotacheck: Done. [ 99.797217][ T5781] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 99.907812][ T6663] loop2: detected capacity change from 0 to 512 [ 99.965898][ T6663] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 100.043691][ T6663] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 100.052065][ T6651] loop3: detected capacity change from 0 to 32768 [ 100.086874][ T6651] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.300 (6651) [ 100.115323][ T6663] EXT4-fs (loop2): 1 truncate cleaned up [ 100.120129][ T6666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.302'. [ 100.126170][ T6663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.181245][ T6651] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 100.230746][ T6651] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 100.244703][ T6651] BTRFS info (device loop3): metadata ratio 1025 [ 100.251079][ T6651] BTRFS info (device loop3): enabling disk space caching [ 100.273982][ T6651] BTRFS info (device loop3): force clearing of disk cache [ 100.321281][ T6651] BTRFS info (device loop3): turning off barriers [ 100.341337][ T6651] BTRFS info (device loop3): setting nodatacow, compression disabled [ 100.351249][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.371293][ T6651] BTRFS info (device loop3): enabling ssd optimizations [ 100.412755][ T6651] BTRFS info (device loop3): using spread ssd allocation scheme [ 100.421449][ T6651] BTRFS info (device loop3): disk space caching is enabled [ 100.629803][ T6651] BTRFS info (device loop3): rebuilding free space tree [ 100.683080][ T5826] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 100.695393][ T6651] BTRFS info (device loop3): disabling free space tree [ 100.702356][ T6651] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 100.731095][ T6651] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 100.750450][ T6694] loop0: detected capacity change from 0 to 512 [ 100.826808][ T6694] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.842164][ T6694] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.852672][ T27] audit: type=1800 audit(1758798055.423:8): pid=6651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.300" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 100.923943][ T5826] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.960713][ T5780] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 100.982642][ T5826] usb 2-1: config 0 interface 0 has no altsetting 0 [ 101.008674][ T5826] usb 2-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 101.041683][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.057164][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.060096][ T5826] usb 2-1: config 0 descriptor?? [ 101.513366][ T5826] nintendo 0003:057E:2009.000A: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.1-1/input0 [ 101.593265][ T5826] nintendo 0003:057E:2009.000A: failed reading SPI flash; ret=-38 [ 101.602976][ T5826] nintendo 0003:057E:2009.000A: using factory cal for left stick [ 101.621587][ T5826] nintendo 0003:057E:2009.000A: failed reading SPI flash; ret=-38 [ 101.639010][ T5826] nintendo 0003:057E:2009.000A: using factory cal for right stick [ 101.648205][ T5826] nintendo 0003:057E:2009.000A: failed reading SPI flash; ret=-38 [ 101.697142][ T5826] nintendo 0003:057E:2009.000A: Failed to read left stick cal, using defaults; e=-38 [ 101.727626][ T5826] nintendo 0003:057E:2009.000A: failed reading SPI flash; ret=-38 [ 101.753062][ T5826] nintendo 0003:057E:2009.000A: Failed to read right stick cal, using defaults; e=-38 [ 101.780393][ T5826] nintendo 0003:057E:2009.000A: failed reading SPI flash; ret=-38 [ 101.794611][ T5826] nintendo 0003:057E:2009.000A: using factory cal for IMU [ 101.826060][ T5826] nintendo 0003:057E:2009.000A: failed reading SPI flash; ret=-38 [ 101.868710][ T5826] nintendo 0003:057E:2009.000A: Failed to read IMU cal, using defaults; ret=-38 [ 101.907511][ T5826] nintendo 0003:057E:2009.000A: Unable to read IMU calibration data [ 101.944179][ T5826] nintendo 0003:057E:2009.000A: Failed to set report mode; ret=-38 [ 101.963521][ T5826] nintendo 0003:057E:2009.000A: Failed to initialize controller; ret=-38 [ 101.978160][ T5826] nintendo 0003:057E:2009.000A: probe - fail = -38 [ 101.985134][ T5826] nintendo: probe of 0003:057E:2009.000A failed with error -38 [ 102.005270][ T5826] usb 2-1: USB disconnect, device number 6 [ 102.228473][ T6710] loop2: detected capacity change from 0 to 32768 [ 102.258536][ T6710] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 102.273974][ T6733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.322'. [ 102.335355][ T6710] XFS (loop2): Ending clean mount [ 102.384135][ T6710] XFS (loop2): Quotacheck needed: Please wait. [ 102.559702][ T6710] XFS (loop2): Quotacheck: Done. [ 102.748995][ T6752] genirq: Flags mismatch irq 31. 00000000 (comedi_parport) vs. 00000000 (virtio1-input.0) [ 102.795771][ T5782] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 102.996538][ T6731] loop0: detected capacity change from 0 to 32768 [ 103.009965][ T6756] vlan2: entered promiscuous mode [ 103.027866][ T6756] macvtap0: entered promiscuous mode [ 103.035523][ T6731] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.320 (6731) [ 103.110137][ T6731] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 103.136605][ T6731] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 103.146418][ T6731] BTRFS info (device loop0): metadata ratio 1025 [ 103.181817][ T6731] BTRFS info (device loop0): enabling disk space caching [ 103.212515][ T6731] BTRFS info (device loop0): force clearing of disk cache [ 103.221930][ T6731] BTRFS info (device loop0): turning off barriers [ 103.238692][ T6731] BTRFS info (device loop0): setting nodatacow, compression disabled [ 103.258655][ T6731] BTRFS info (device loop0): enabling ssd optimizations [ 103.272982][ T6731] BTRFS info (device loop0): using spread ssd allocation scheme [ 103.290934][ T6731] BTRFS info (device loop0): disk space caching is enabled [ 103.313785][ T5826] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 103.449474][ T6731] BTRFS info (device loop0): rebuilding free space tree [ 103.475214][ T6731] BTRFS info (device loop0): disabling free space tree [ 103.485681][ T6731] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 103.513302][ T6731] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 103.533096][ T5826] usb 4-1: Using ep0 maxpacket: 8 [ 103.543738][ T5826] usb 4-1: unable to get BOS descriptor or descriptor too short [ 103.563955][ T5826] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 103.583053][ T5826] usb 4-1: config 4 has no interface number 0 [ 103.589192][ T5826] usb 4-1: config 4 interface 30 has no altsetting 0 [ 103.616103][ T5826] usb 4-1: string descriptor 0 read error: -22 [ 103.622425][ T5826] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 103.643917][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.669899][ T27] audit: type=1800 audit(1758798058.243:9): pid=6731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.320" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 103.677551][ T5826] dw2102: su3000_identify_state [ 103.737361][ T5826] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 103.744653][ T5826] dw2102: su3000_power_ctrl: 1, initialized 0 [ 103.751355][ T5826] dvb-usb: bulk message failed: -22 (2/0) [ 103.782574][ T5781] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 103.798684][ T5826] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 103.837534][ T5826] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 103.868305][ T5826] usb 4-1: media controller created [ 103.902444][ T5826] dvb-usb: bulk message failed: -22 (6/0) [ 103.931157][ T5826] dw2102: i2c transfer failed. [ 103.948424][ T6760] dw2102: i2c rd: len=65 is too big! [ 103.948424][ T6760] [ 103.975480][ T5826] dvb-usb: bulk message failed: -22 (6/0) [ 103.981381][ T5826] dw2102: i2c transfer failed. [ 103.998919][ T5826] dvb-usb: bulk message failed: -22 (6/0) [ 104.007559][ T6763] loop2: detected capacity change from 0 to 32768 [ 104.016281][ T5826] dw2102: i2c transfer failed. [ 104.021085][ T5826] dvb-usb: bulk message failed: -22 (6/0) [ 104.028382][ T6763] XFS: ikeep mount option is deprecated. [ 104.043563][ T5826] dw2102: i2c transfer failed. [ 104.048373][ T5826] dvb-usb: bulk message failed: -22 (6/0) [ 104.074742][ T5826] dw2102: i2c transfer failed. [ 104.080470][ T5826] dvb-usb: bulk message failed: -22 (6/0) [ 104.120771][ T6763] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 104.129556][ T5826] dw2102: i2c transfer failed. [ 104.135410][ T5826] dvb-usb: MAC address: 02:02:02:02:02:02 [ 104.192766][ T5826] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.230644][ T5826] dvb-usb: bulk message failed: -22 (3/0) [ 104.238679][ T5826] dw2102: command 0x0e transfer failed. [ 104.246231][ T5826] dvb-usb: bulk message failed: -22 (3/0) [ 104.252072][ T5826] dw2102: command 0x0e transfer failed. [ 104.280571][ T6763] XFS (loop2): Ending clean mount [ 104.351148][ T5782] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 104.580186][ T5826] dvb-usb: bulk message failed: -22 (3/0) [ 104.596350][ T5826] dw2102: command 0x0e transfer failed. [ 104.601944][ T5826] dvb-usb: bulk message failed: -22 (3/0) [ 104.651016][ T5826] dw2102: command 0x0e transfer failed. [ 104.663074][ T5826] dvb-usb: bulk message failed: -22 (1/0) [ 104.673267][ T5826] dw2102: command 0x51 transfer failed. [ 104.683362][ T5826] dvb-usb: bulk message failed: -22 (5/0) [ 104.693003][ T5826] dw2102: i2c probe for address 0x68 failed. [ 104.699143][ T5826] dvb-usb: bulk message failed: -22 (5/0) [ 104.713015][ T5826] dw2102: i2c probe for address 0x69 failed. [ 104.725958][ T5826] dvb-usb: bulk message failed: -22 (5/0) [ 104.753079][ T5826] dw2102: i2c probe for address 0x6a failed. [ 104.769492][ T5826] dw2102: probing for demodulator failed. Is the external power switched on? [ 104.796228][ T5826] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 104.816850][ T786] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 104.903015][ T5826] rc_core: IR keymap rc-tt-1500 not found [ 104.908783][ T5826] Registered IR keymap rc-empty [ 104.938304][ T6790] loop0: detected capacity change from 0 to 32768 [ 104.938384][ T5826] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 104.970465][ T5826] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input11 [ 104.972134][ T6790] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 105.004542][ T5826] dvb-usb: schedule remote query interval to 250 msecs. [ 105.012339][ T5826] dw2102: su3000_power_ctrl: 0, initialized 1 [ 105.023291][ T786] usb 2-1: Using ep0 maxpacket: 8 [ 105.031016][ T6790] XFS (loop0): Ending clean mount [ 105.037515][ T5826] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 105.046316][ T786] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.057688][ T786] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.067529][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 105.074421][ T786] usb 2-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 105.083577][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.091780][ T5826] usb 4-1: USB disconnect, device number 5 [ 105.100308][ T786] usb 2-1: config 0 descriptor?? [ 105.103109][ T5846] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 105.127814][ T6790] XFS (loop0): Quotacheck needed: Please wait. [ 105.208930][ T6790] XFS (loop0): Quotacheck: Done. [ 105.218042][ T5826] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 105.310700][ T5846] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.322768][ T5846] usb 3-1: config 0 interface 0 has no altsetting 0 [ 105.323195][ T5781] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 105.329915][ T5846] usb 3-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 105.349735][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.361699][ T5846] usb 3-1: config 0 descriptor?? [ 105.557566][ T786] a4tech 0003:09DA:000A.000B: unbalanced collection at end of report description [ 105.568929][ T786] a4tech 0003:09DA:000A.000B: parse failed [ 105.579085][ T786] a4tech: probe of 0003:09DA:000A.000B failed with error -22 [ 105.785529][ T786] usb 2-1: USB disconnect, device number 7 [ 105.803058][ T5846] nintendo 0003:057E:2009.000C: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.2-1/input0 [ 105.894208][ T5846] nintendo 0003:057E:2009.000C: failed reading SPI flash; ret=-38 [ 105.902093][ T5846] nintendo 0003:057E:2009.000C: using factory cal for left stick [ 105.911173][ T5846] nintendo 0003:057E:2009.000C: failed reading SPI flash; ret=-38 [ 105.919310][ T5846] nintendo 0003:057E:2009.000C: using factory cal for right stick [ 105.927233][ T5846] nintendo 0003:057E:2009.000C: failed reading SPI flash; ret=-38 [ 105.935129][ T5846] nintendo 0003:057E:2009.000C: Failed to read left stick cal, using defaults; e=-38 [ 105.945304][ T5846] nintendo 0003:057E:2009.000C: failed reading SPI flash; ret=-38 [ 105.954401][ T5846] nintendo 0003:057E:2009.000C: Failed to read right stick cal, using defaults; e=-38 [ 105.964935][ T5846] nintendo 0003:057E:2009.000C: failed reading SPI flash; ret=-38 [ 105.972786][ T5846] nintendo 0003:057E:2009.000C: using factory cal for IMU [ 105.980074][ T5846] nintendo 0003:057E:2009.000C: failed reading SPI flash; ret=-38 [ 105.988312][ T5846] nintendo 0003:057E:2009.000C: Failed to read IMU cal, using defaults; ret=-38 [ 105.997859][ T5846] nintendo 0003:057E:2009.000C: Unable to read IMU calibration data [ 106.006040][ T5846] nintendo 0003:057E:2009.000C: Failed to set report mode; ret=-38 [ 106.017099][ T5846] nintendo 0003:057E:2009.000C: Failed to initialize controller; ret=-38 [ 106.027728][ T5846] nintendo 0003:057E:2009.000C: probe - fail = -38 [ 106.034489][ T5846] nintendo: probe of 0003:057E:2009.000C failed with error -38 [ 106.047527][ T5846] usb 3-1: USB disconnect, device number 5 [ 106.682395][ T6819] netlink: 'syz.3.342': attribute type 1 has an invalid length. [ 106.705526][ T6819] netlink: 144 bytes leftover after parsing attributes in process `syz.3.342'. [ 106.723180][ T6819] netlink: 'syz.3.342': attribute type 1 has an invalid length. [ 106.741080][ T6819] netlink: 76 bytes leftover after parsing attributes in process `syz.3.342'. [ 106.973377][ T6817] loop1: detected capacity change from 0 to 32768 [ 107.042067][ T6817] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 107.204805][ T6823] loop2: detected capacity change from 0 to 32768 [ 107.227617][ T6823] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.341 (6823) [ 107.247868][ T6817] XFS (loop1): Ending clean mount [ 107.270741][ T6817] XFS (loop1): Quotacheck needed: Please wait. [ 107.313090][ T6823] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 107.350723][ T6817] XFS (loop1): Quotacheck: Done. [ 107.360969][ T6823] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 107.423604][ T6823] BTRFS info (device loop2): metadata ratio 1025 [ 107.453184][ T6823] BTRFS info (device loop2): enabling disk space caching [ 107.483401][ T6823] BTRFS info (device loop2): force clearing of disk cache [ 107.514944][ T6823] BTRFS info (device loop2): turning off barriers [ 107.533518][ T6823] BTRFS info (device loop2): setting nodatacow, compression disabled [ 107.541648][ T6823] BTRFS info (device loop2): enabling ssd optimizations [ 107.561554][ T5783] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 107.584380][ T6823] BTRFS info (device loop2): using spread ssd allocation scheme [ 107.608198][ T6823] BTRFS info (device loop2): disk space caching is enabled [ 107.779220][ T5826] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 107.800690][ T6823] BTRFS info (device loop2): rebuilding free space tree [ 107.882900][ T6823] BTRFS info (device loop2): disabling free space tree [ 107.900738][ T6823] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 107.927528][ T6823] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 108.021939][ T5826] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.045111][ T27] audit: type=1800 audit(1758798062.623:10): pid=6823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.341" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 108.057215][ T5826] usb 4-1: config 0 interface 0 has no altsetting 0 [ 108.107254][ T5826] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 108.133783][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.200318][ T5826] usb 4-1: config 0 descriptor?? [ 108.207546][ T5782] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 108.701031][ T5826] nintendo 0003:057E:2009.000D: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.3-1/input0 [ 108.893209][ T5826] nintendo 0003:057E:2009.000D: failed reading SPI flash; ret=-38 [ 108.901077][ T5826] nintendo 0003:057E:2009.000D: using factory cal for left stick [ 108.949777][ T5826] nintendo 0003:057E:2009.000D: failed reading SPI flash; ret=-38 [ 108.961538][ T5826] nintendo 0003:057E:2009.000D: using factory cal for right stick [ 108.976911][ T5826] nintendo 0003:057E:2009.000D: failed reading SPI flash; ret=-38 [ 108.988741][ T5826] nintendo 0003:057E:2009.000D: Failed to read left stick cal, using defaults; e=-38 [ 109.001788][ T5826] nintendo 0003:057E:2009.000D: failed reading SPI flash; ret=-38 [ 109.010871][ T5826] nintendo 0003:057E:2009.000D: Failed to read right stick cal, using defaults; e=-38 [ 109.024294][ T5826] nintendo 0003:057E:2009.000D: failed reading SPI flash; ret=-38 [ 109.037648][ T5826] nintendo 0003:057E:2009.000D: using factory cal for IMU [ 109.047093][ T5826] nintendo 0003:057E:2009.000D: failed reading SPI flash; ret=-38 [ 109.058618][ T5826] nintendo 0003:057E:2009.000D: Failed to read IMU cal, using defaults; ret=-38 [ 109.083032][ T5826] nintendo 0003:057E:2009.000D: Unable to read IMU calibration data [ 109.091135][ T5826] nintendo 0003:057E:2009.000D: Failed to set report mode; ret=-38 [ 109.123003][ T5826] nintendo 0003:057E:2009.000D: Failed to initialize controller; ret=-38 [ 109.158394][ T5826] nintendo 0003:057E:2009.000D: probe - fail = -38 [ 109.166703][ T5826] nintendo: probe of 0003:057E:2009.000D failed with error -38 [ 109.207650][ T5826] usb 4-1: USB disconnect, device number 6 [ 109.580172][ T6895] loop1: detected capacity change from 0 to 40427 [ 109.605403][ T6895] F2FS-fs (loop1): invalid crc value [ 109.649921][ T6895] F2FS-fs (loop1): Found nat_bits in checkpoint [ 109.823923][ T6895] F2FS-fs (loop1): Start checkpoint disabled! [ 109.847483][ T6895] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 110.051409][ T6897] loop0: detected capacity change from 0 to 32768 [ 110.114878][ T6897] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.366 (6897) [ 110.178516][ T2881] kworker/u4:7: attempt to access beyond end of device [ 110.178516][ T2881] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 110.205017][ T6897] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 110.219570][ T2881] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 110.250581][ T2881] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 110.273107][ T6897] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 110.294748][ T6897] BTRFS info (device loop0): metadata ratio 1025 [ 110.301140][ T6897] BTRFS info (device loop0): enabling disk space caching [ 110.355291][ T6897] BTRFS info (device loop0): force clearing of disk cache [ 110.397031][ T6897] BTRFS info (device loop0): turning off barriers [ 110.431514][ T6897] BTRFS info (device loop0): setting nodatacow, compression disabled [ 110.547539][ T6897] BTRFS info (device loop0): enabling ssd optimizations [ 110.583165][ T6897] BTRFS info (device loop0): using spread ssd allocation scheme [ 110.590876][ T6897] BTRFS info (device loop0): disk space caching is enabled [ 110.775596][ T6925] netlink: 'syz.1.371': attribute type 11 has an invalid length. [ 110.793294][ T5846] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 110.965106][ T6913] loop2: detected capacity change from 0 to 32768 [ 111.003442][ T5846] usb 4-1: Using ep0 maxpacket: 16 [ 111.014913][ T6913] (syz.2.373,6913,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 111.032012][ T5846] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 111.071928][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.072086][ T6897] BTRFS info (device loop0): rebuilding free space tree [ 111.121388][ T5846] usb 4-1: Product: syz [ 111.128795][ T6913] (syz.2.373,6913,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 111.146876][ T5846] usb 4-1: Manufacturer: syz [ 111.151513][ T5846] usb 4-1: SerialNumber: syz [ 111.180082][ T6897] BTRFS info (device loop0): disabling free space tree [ 111.181192][ T5846] usb 4-1: config 0 descriptor?? [ 111.210783][ T6897] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 111.225917][ T5846] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 111.242113][ T6913] JBD2: Ignoring recovery information on journal [ 111.251001][ T6897] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 111.433825][ T6913] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 111.554506][ T6946] loop1: detected capacity change from 0 to 256 [ 111.567124][ T27] audit: type=1800 audit(1758798066.143:11): pid=6897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.366" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 111.569918][ T6946] exfat: Deprecated parameter 'utf8' [ 111.637879][ T5782] ocfs2: Unmounting device (7,2) on (node local) [ 111.676457][ T6946] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011d93, chksum : 0x4501cc6b, utbl_chksum : 0xe619d30d) [ 111.854594][ T5781] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 111.872807][ T5846] ssu100: probe of 4-1:0.0 failed with error -71 [ 111.919805][ T5846] usb 4-1: USB disconnect, device number 7 [ 112.260323][ T6956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.384'. [ 112.282002][ T6956] Zero length message leads to an empty skb [ 112.538929][ T6962] loop3: detected capacity change from 0 to 512 [ 112.574981][ T6962] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.608794][ T6962] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 112.652503][ T6962] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e028, mo2=0002] [ 112.713447][ T6962] EXT4-fs (loop3): orphan cleanup on readonly fs [ 112.721801][ T6962] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.387: bg 0: block 361: padding at end of block bitmap is not set [ 112.806393][ T6962] EXT4-fs (loop3): Remounting filesystem read-only [ 112.843254][ T6962] EXT4-fs (loop3): 1 truncate cleaned up [ 112.850153][ T6962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 112.908358][ T6967] tipc: Started in network mode [ 112.923043][ T6967] tipc: Node identity b670353fe653, cluster identity 4711 [ 112.943269][ T6967] tipc: Enabled bearer , priority 10 [ 113.060785][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 113.090349][ T6971] loop2: detected capacity change from 0 to 64 [ 113.140422][ T5790] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 113.149902][ T5790] Bluetooth: hci2: Injecting HCI hardware error event [ 113.158485][ T5789] Bluetooth: hci2: hardware error 0x00 [ 113.361127][ T6960] loop1: detected capacity change from 0 to 32768 [ 113.504489][ T6960] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 113.549087][ T6989] loop3: detected capacity change from 0 to 256 [ 113.666570][ T6960] XFS (loop1): Ending clean mount [ 113.945293][ T5826] tipc: Node number set to 1344484671 [ 113.952252][ T5783] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 114.282368][ T7009] loop2: detected capacity change from 0 to 64 [ 114.706995][ T5826] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 114.764604][ T5790] Bluetooth: hci1: unknown advertising packet type: 0x69 [ 114.764752][ T5790] Bluetooth: hci1: Malformed LE Event: 0x02 [ 114.847455][ T27] audit: type=1800 audit(1758798069.423:12): pid=7027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.414" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 114.933162][ T5826] usb 4-1: Using ep0 maxpacket: 32 [ 114.953523][ T5826] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 114.961672][ T5826] usb 4-1: config 0 has no interface number 0 [ 114.995417][ T5826] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 115.005032][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.023033][ T5826] usb 4-1: Product: syz [ 115.027225][ T5826] usb 4-1: Manufacturer: syz [ 115.031818][ T5826] usb 4-1: SerialNumber: syz [ 115.074222][ T5826] usb 4-1: config 0 descriptor?? [ 115.101178][ T5826] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 115.306927][ T5826] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 115.347392][ T5826] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 115.453652][ T5789] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 115.513562][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 115.536921][ T7044] loop0: detected capacity change from 0 to 64 [ 115.595580][ T7025] loop2: detected capacity change from 0 to 32768 [ 115.663250][ T7025] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 115.714646][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 115.727028][ T5826] usb 4-1: USB disconnect, device number 8 [ 115.759436][ T7025] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 115.768004][ T5826] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 115.792520][ T1129] (kworker/u4:6,1129,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 115.861811][ T5826] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 115.897287][ T7052] loop1: detected capacity change from 0 to 64 [ 115.914503][ T5826] quatech2 4-1:0.51: device disconnected [ 115.925597][ T27] audit: type=1800 audit(1758798070.493:13): pid=7025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.413" name="file2" dev="loop2" ino=17058 res=0 errno=0 [ 116.063758][ T5782] ocfs2: Unmounting device (7,2) on (node local) [ 116.341504][ T7058] loop3: detected capacity change from 0 to 128 [ 116.398628][ T7058] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.482492][ T7050] loop0: detected capacity change from 0 to 40427 [ 116.490564][ T7058] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.532486][ T7050] F2FS-fs (loop0): invalid crc value [ 116.568852][ T7069] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.606816][ T7050] F2FS-fs (loop0): Found nat_bits in checkpoint [ 116.697005][ T5780] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.733207][ T7050] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 116.742914][ T7074] loop1: detected capacity change from 0 to 8 [ 116.813938][ T7074] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 116.862211][ T6098] udevd[6098]: incorrect cramfs checksum on /dev/loop1 [ 116.947135][ T5957] udevd[5957]: incorrect cramfs checksum on /dev/loop1 [ 117.323377][ T966] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 117.535494][ T966] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 117.550531][ T966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.579809][ T966] usb 4-1: config 0 descriptor?? [ 117.596919][ T966] cp210x 4-1:0.0: cp210x converter detected [ 117.663140][ T42] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 117.761350][ T7105] loop1: detected capacity change from 0 to 256 [ 117.769262][ T7105] exfat: Deprecated parameter 'utf8' [ 117.799958][ T7105] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 117.867638][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 117.894706][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 117.928186][ T42] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 117.962343][ T42] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 117.987770][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.017476][ T42] usb 3-1: config 0 descriptor?? [ 118.023325][ T7091] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 118.197409][ T966] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 118.218800][ T966] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 118.245779][ T966] usb 4-1: cp210x converter now attached to ttyUSB0 [ 118.276580][ T966] usb 4-1: USB disconnect, device number 9 [ 118.296684][ T966] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 118.320360][ T966] cp210x 4-1:0.0: device disconnected [ 118.485566][ T42] aureal 0003:0755:2626.000E: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor. [ 118.518104][ T42] aureal 0003:0755:2626.000E: unknown main item tag 0x6 [ 118.542439][ T42] aureal 0003:0755:2626.000E: report_id 29495 is invalid [ 118.560276][ T42] aureal 0003:0755:2626.000E: item 0 2 1 8 parsing failed [ 118.579312][ T42] aureal: probe of 0003:0755:2626.000E failed with error -22 [ 118.691053][ T42] usb 3-1: USB disconnect, device number 6 [ 118.723104][ T7131] loop1: detected capacity change from 0 to 64 [ 118.783457][ T7131] Trying to free block not in datazone [ 118.789232][ T7131] Trying to free block not in datazone [ 118.828871][ T7131] Trying to free block not in datazone [ 118.837866][ T7131] Trying to free block not in datazone [ 118.844962][ T7131] Trying to free block not in datazone [ 118.851646][ T7131] Trying to free block not in datazone [ 118.862709][ T7131] Trying to free block not in datazone [ 118.869538][ T7131] Trying to free block not in datazone [ 118.878493][ T7131] Trying to free block not in datazone [ 118.885340][ T7131] Trying to free block not in datazone [ 119.089146][ T7144] loop3: detected capacity change from 0 to 256 [ 119.099738][ T7144] exfat: Deprecated parameter 'utf8' [ 119.130026][ T7144] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011d93, chksum : 0x4501cc6b, utbl_chksum : 0xe619d30d) [ 119.133348][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'. [ 119.175564][ T7146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.466'. [ 119.400668][ T7154] process 'syz.0.471' launched './file0' with NULL argv: empty string added [ 119.603754][ T966] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 119.686087][ T7168] loop2: detected capacity change from 0 to 1024 [ 119.732909][ T7168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.788958][ T7168] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.2.478: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 119.812705][ T966] usb 2-1: config 255 has an invalid interface number: 175 but max is 0 [ 119.825502][ T7168] EXT4-fs (loop2): Remounting filesystem read-only [ 119.832461][ T966] usb 2-1: config 255 has no interface number 0 [ 119.850685][ T966] usb 2-1: config 255 interface 175 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 119.864848][ T966] usb 2-1: New USB device found, idVendor=04bb, idProduct=0930, bcdDevice= e.5d [ 119.874314][ T966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.875757][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.883571][ T966] usb 2-1: Product: syz [ 119.896545][ T966] usb 2-1: Manufacturer: syz [ 119.901154][ T966] usb 2-1: SerialNumber: syz [ 119.916763][ T7150] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 119.932280][ T7150] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 120.021249][ T7173] vlan2: entered promiscuous mode [ 120.028769][ T7173] macvtap0: entered promiscuous mode [ 120.094805][ T7164] loop0: detected capacity change from 0 to 32768 [ 120.163803][ T7150] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 120.174022][ T7150] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 120.414893][ T966] asix 2-1:255.175 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 120.441423][ T966] asix: probe of 2-1:255.175 failed with error -71 [ 120.454701][ T966] usb 2-1: USB disconnect, device number 8 [ 120.688435][ T7186] loop0: detected capacity change from 0 to 8192 [ 120.693167][ T5846] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x4 [ 120.710307][ T7186] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 120.711734][ T5846] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x2 [ 120.725298][ T7186] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 120.736384][ T5846] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x3 [ 120.741980][ T7186] REISERFS (device loop0): using ordered data mode [ 120.758559][ T7186] reiserfs: using flush barriers [ 120.779157][ T7186] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 120.801787][ T5846] hid-generic 0000:3000000:0000.000F: hidraw0: HID v0.00 Device [sy] on syz0 [ 120.827418][ T7186] REISERFS (device loop0): checking transaction log (loop0) [ 120.855606][ T7186] REISERFS (device loop0): Using r5 hash to sort names [ 120.865836][ T7186] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 120.903409][ T7186] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 121.006103][ T7192] fido_id[7192]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 121.176157][ T7201] vlan2: entered promiscuous mode [ 121.181247][ T7201] macvtap0: entered promiscuous mode [ 121.489176][ T7210] loop0: detected capacity change from 0 to 256 [ 121.593780][ T7210] FAT-fs (loop0): Directory bread(block 64) failed [ 121.611870][ T7210] FAT-fs (loop0): Directory bread(block 65) failed [ 121.629828][ T7210] FAT-fs (loop0): Directory bread(block 66) failed [ 121.631239][ T7212] tipc: Enabling of bearer rejected, failed to enable media [ 121.644152][ T7210] FAT-fs (loop0): Directory bread(block 67) failed [ 121.662617][ T7210] FAT-fs (loop0): Directory bread(block 68) failed [ 121.669302][ T7210] FAT-fs (loop0): Directory bread(block 69) failed [ 121.677635][ T7210] FAT-fs (loop0): Directory bread(block 70) failed [ 121.684243][ T7210] FAT-fs (loop0): Directory bread(block 71) failed [ 121.690907][ T7210] FAT-fs (loop0): Directory bread(block 72) failed [ 121.697642][ T7210] FAT-fs (loop0): Directory bread(block 73) failed [ 121.824222][ T7216] netlink: 100 bytes leftover after parsing attributes in process `syz.3.498'. [ 121.932196][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.499'. [ 122.157915][ T7224] loop0: detected capacity change from 0 to 512 [ 122.174278][ T7224] EXT4-fs: Ignoring removed nobh option [ 122.225363][ T7224] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #3: comm syz.0.502: corrupted inode contents [ 122.234626][ T7214] loop1: detected capacity change from 0 to 32768 [ 122.279534][ T7224] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #3: comm syz.0.502: mark_inode_dirty error [ 122.292431][ T7223] loop2: detected capacity change from 0 to 8192 [ 122.312296][ T7224] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #3: comm syz.0.502: corrupted inode contents [ 122.326835][ T7214] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 122.329060][ T7223] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 122.337936][ T7224] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.502: mark_inode_dirty error [ 122.365900][ T7224] Quota error (device loop0): write_blk: dquota write failed [ 122.376315][ T7224] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 122.379255][ T7223] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 122.389595][ T7224] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.502: Failed to acquire dquot type 0 [ 122.405521][ T7214] XFS (loop1): Ending clean mount [ 122.409904][ T7223] REISERFS (device loop2): using ordered data mode [ 122.415362][ T7214] XFS (loop1): Quotacheck needed: Please wait. [ 122.421053][ T7223] reiserfs: using flush barriers [ 122.443073][ T7223] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 122.457035][ T7224] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.502: corrupted inode contents [ 122.461191][ T7223] REISERFS (device loop2): checking transaction log (loop2) [ 122.493355][ T7223] REISERFS (device loop2): Using r5 hash to sort names [ 122.497019][ T7224] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #16: comm syz.0.502: mark_inode_dirty error [ 122.500536][ T7223] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 122.515359][ T7224] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.502: corrupted inode contents [ 122.542716][ T7224] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.502: mark_inode_dirty error [ 122.566751][ T7214] XFS (loop1): Quotacheck: Done. [ 122.567391][ T7224] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.502: corrupted inode contents [ 122.603192][ T7223] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 122.628658][ T7224] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 122.654526][ T7224] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.502: corrupted inode contents [ 122.681682][ T7224] EXT4-fs error (device loop0): ext4_truncate:4288: inode #16: comm syz.0.502: mark_inode_dirty error [ 122.730027][ T7224] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 122.746712][ T7224] EXT4-fs (loop0): 1 truncate cleaned up [ 122.755261][ T7224] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.784257][ T5783] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 122.797695][ T7224] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.037621][ T7224] Quota error (device loop0): do_check_range: Getting block 18 out of range 0-5 [ 123.151365][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.163231][ T5826] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 123.257457][ T27] audit: type=1800 audit(1758798077.833:14): pid=7249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.508" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 123.258980][ T7248] netlink: 96 bytes leftover after parsing attributes in process `syz.1.505'. [ 123.297103][ T7248] netlink: 80 bytes leftover after parsing attributes in process `syz.1.505'. [ 123.358974][ T5826] usb 3-1: Using ep0 maxpacket: 8 [ 123.391238][ T5826] usb 3-1: unable to get BOS descriptor or descriptor too short [ 123.419489][ T5826] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 123.441086][ T5826] usb 3-1: config 4 has no interface number 0 [ 123.463041][ T5826] usb 3-1: config 4 interface 30 has no altsetting 0 [ 123.476225][ T5826] usb 3-1: string descriptor 0 read error: -22 [ 123.488225][ T5826] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 123.497801][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.514076][ T5826] dw2102: su3000_identify_state [ 123.522073][ T966] hid-generic 0000:0000:0000.0010: item fetching failed at offset 0/1 [ 123.531591][ T5826] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 123.542479][ T966] hid-generic: probe of 0000:0000:0000.0010 failed with error -22 [ 123.550865][ T5826] dw2102: su3000_power_ctrl: 1, initialized 0 [ 123.557431][ T5826] dvb-usb: bulk message failed: -22 (2/0) [ 123.578084][ T5826] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 123.598934][ T5826] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 123.606947][ T5826] usb 3-1: media controller created [ 123.612751][ T5826] dvb-usb: bulk message failed: -22 (6/0) [ 123.620053][ T5826] dw2102: i2c transfer failed. [ 123.643026][ T5826] dvb-usb: bulk message failed: -22 (6/0) [ 123.652361][ T5826] dw2102: i2c transfer failed. [ 123.659943][ T5826] dvb-usb: bulk message failed: -22 (6/0) [ 123.672612][ T5826] dw2102: i2c transfer failed. [ 123.677918][ T5826] dvb-usb: bulk message failed: -22 (6/0) [ 123.689310][ T5826] dw2102: i2c transfer failed. [ 123.695619][ T5826] dvb-usb: bulk message failed: -22 (6/0) [ 123.701374][ T5826] dw2102: i2c transfer failed. [ 123.719378][ T5826] dvb-usb: bulk message failed: -22 (6/0) [ 123.732581][ T5826] dw2102: i2c transfer failed. [ 123.741073][ T5826] dvb-usb: MAC address: 02:02:02:02:02:02 [ 123.772128][ T5826] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.805944][ T5826] dvb-usb: bulk message failed: -22 (3/0) [ 123.811719][ T5826] dw2102: command 0x0e transfer failed. [ 123.818515][ T5826] dvb-usb: bulk message failed: -22 (3/0) [ 123.825345][ T5826] dw2102: command 0x0e transfer failed. [ 124.021804][ T7263] loop1: detected capacity change from 0 to 64 [ 124.144854][ T5826] dvb-usb: bulk message failed: -22 (3/0) [ 124.156339][ T5826] dw2102: command 0x0e transfer failed. [ 124.170860][ T5826] dvb-usb: bulk message failed: -22 (3/0) [ 124.177585][ T5826] dw2102: command 0x0e transfer failed. [ 124.190898][ T5826] dvb-usb: bulk message failed: -22 (1/0) [ 124.198085][ T5826] dw2102: command 0x51 transfer failed. [ 124.208398][ T5826] dvb-usb: bulk message failed: -22 (5/0) [ 124.214678][ T5826] dw2102: i2c probe for address 0x68 failed. [ 124.220790][ T5826] dvb-usb: bulk message failed: -22 (5/0) [ 124.230912][ T5826] dw2102: i2c probe for address 0x69 failed. [ 124.253055][ T5826] dvb-usb: bulk message failed: -22 (5/0) [ 124.258928][ T5826] dw2102: i2c probe for address 0x6a failed. [ 124.270080][ T5826] dw2102: probing for demodulator failed. Is the external power switched on? [ 124.290338][ T5826] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 124.475676][ T5826] rc_core: IR keymap rc-tt-1500 not found [ 124.481454][ T5826] Registered IR keymap rc-empty [ 124.525714][ T5826] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 124.563441][ T5826] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input12 [ 124.626704][ T5826] dvb-usb: schedule remote query interval to 250 msecs. [ 124.629854][ T7265] loop3: detected capacity change from 0 to 32768 [ 124.665820][ T5826] dw2102: su3000_power_ctrl: 0, initialized 1 [ 124.685143][ T5826] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 124.711039][ T7274] loop2: detected capacity change from 0 to 512 [ 124.730454][ T7265] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 124.742333][ T5826] usb 3-1: USB disconnect, device number 7 [ 124.763925][ T7274] EXT4-fs: Ignoring removed nobh option [ 124.910148][ T7265] XFS (loop3): Ending clean mount [ 124.940558][ T7274] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #3: comm syz.2.517: corrupted inode contents [ 124.966204][ T7274] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #3: comm syz.2.517: mark_inode_dirty error [ 124.977881][ T42] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 124.989382][ T7265] XFS (loop3): Quotacheck needed: Please wait. [ 125.010714][ T7274] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #3: comm syz.2.517: corrupted inode contents [ 125.030227][ T7274] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.517: mark_inode_dirty error [ 125.046670][ T5826] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 125.068151][ T7265] XFS (loop3): Quotacheck: Done. [ 125.081082][ T7274] Quota error (device loop2): write_blk: dquota write failed [ 125.090199][ T7274] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 125.100760][ T7274] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.517: Failed to acquire dquot type 0 [ 125.172839][ T7274] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.517: corrupted inode contents [ 125.190786][ T7274] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #16: comm syz.2.517: mark_inode_dirty error [ 125.202863][ T7274] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.517: corrupted inode contents [ 125.203352][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 125.233268][ T7274] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.517: mark_inode_dirty error [ 125.242880][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 81, changing to 10 [ 125.256489][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.266699][ T5780] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 125.269583][ T42] usb 1-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 125.277759][ T7274] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.517: corrupted inode contents [ 125.284505][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.315385][ T7274] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 125.315639][ T42] usb 1-1: config 0 descriptor?? [ 125.333514][ T7274] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.517: corrupted inode contents [ 125.355675][ T7274] EXT4-fs error (device loop2): ext4_truncate:4288: inode #16: comm syz.2.517: mark_inode_dirty error [ 125.368889][ T7274] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 125.380053][ T7274] EXT4-fs (loop2): 1 truncate cleaned up [ 125.394177][ T7274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.413433][ T7274] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.617971][ T7274] Quota error (device loop2): do_check_range: Getting block 18 out of range 0-5 [ 125.708580][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.793011][ T42] wacom 0003:056A:0315.0011: Unknown device_type for 'HID 056a:0315'. Assuming pen. [ 125.844113][ T42] wacom 0003:056A:0315.0011: hidraw0: USB HID v0.07 Device [HID 056a:0315] on usb-dummy_hcd.0-1/input0 [ 125.874621][ T42] input: Wacom Intuos Pro M Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0315.0011/input/input13 [ 125.993006][ T42] usb 1-1: USB disconnect, device number 6 [ 126.498901][ T27] audit: type=1800 audit(1758798081.073:15): pid=7326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.518" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 126.591191][ T7329] loop1: detected capacity change from 0 to 512 [ 126.629753][ T7329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.645478][ T7333] loop3: detected capacity change from 0 to 64 [ 126.661739][ T7329] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.816963][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.033259][ T5846] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 127.176450][ T7352] loop3: detected capacity change from 0 to 512 [ 127.199848][ T7352] EXT4-fs: Ignoring removed nobh option [ 127.223114][ T5846] usb 1-1: Using ep0 maxpacket: 8 [ 127.234048][ T5846] usb 1-1: unable to get BOS descriptor or descriptor too short [ 127.254409][ T5846] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 127.273229][ T5846] usb 1-1: config 4 has no interface number 0 [ 127.283054][ T5846] usb 1-1: config 4 interface 30 has no altsetting 0 [ 127.306030][ T5846] usb 1-1: string descriptor 0 read error: -22 [ 127.312598][ T5846] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 127.334252][ T7352] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #3: comm syz.3.532: corrupted inode contents [ 127.366944][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.376551][ T7357] loop1: detected capacity change from 0 to 8192 [ 127.391621][ T7357] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 127.392351][ T7352] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #3: comm syz.3.532: mark_inode_dirty error [ 127.407174][ T7357] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 127.425525][ T7357] REISERFS (device loop1): using ordered data mode [ 127.429201][ T5846] dw2102: su3000_identify_state [ 127.432022][ T7357] reiserfs: using flush barriers [ 127.445661][ T7357] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 127.448499][ T5826] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 127.464503][ T7357] REISERFS (device loop1): checking transaction log (loop1) [ 127.481825][ T7352] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #3: comm syz.3.532: corrupted inode contents [ 127.484486][ T5846] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 127.505742][ T5846] dw2102: su3000_power_ctrl: 1, initialized 0 [ 127.512421][ T5846] dvb-usb: bulk message failed: -22 (2/0) [ 127.521856][ T7352] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.532: mark_inode_dirty error [ 127.527823][ T5846] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 127.551307][ T5846] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 127.567627][ T5846] usb 1-1: media controller created [ 127.582202][ T7352] Quota error (device loop3): write_blk: dquota write failed [ 127.584407][ T5846] dvb-usb: bulk message failed: -22 (6/0) [ 127.600351][ T5846] dw2102: i2c transfer failed. [ 127.610475][ T5846] dvb-usb: bulk message failed: -22 (6/0) [ 127.617768][ T5846] dw2102: i2c transfer failed. [ 127.648936][ T7352] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 127.659588][ T5846] dvb-usb: bulk message failed: -22 (6/0) [ 127.681682][ T5846] dw2102: i2c transfer failed. [ 127.689433][ T7352] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.532: Failed to acquire dquot type 0 [ 127.691278][ T5846] dvb-usb: bulk message failed: -22 (6/0) [ 127.712487][ T7352] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.532: corrupted inode contents [ 127.728214][ T5826] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.731513][ T7352] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #16: comm syz.3.532: mark_inode_dirty error [ 127.739717][ T5826] usb 3-1: config 0 interface 0 has no altsetting 0 [ 127.756643][ T5846] dw2102: i2c transfer failed. [ 127.761446][ T5846] dvb-usb: bulk message failed: -22 (6/0) [ 127.768921][ T5846] dw2102: i2c transfer failed. [ 127.774020][ T7357] REISERFS (device loop1): Using tea hash to sort names [ 127.777384][ T7352] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.532: corrupted inode contents [ 127.781442][ T7357] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 127.802035][ T5826] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 127.811206][ T5846] dvb-usb: bulk message failed: -22 (6/0) [ 127.817284][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.825767][ T5846] dw2102: i2c transfer failed. [ 127.830626][ T7352] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.532: mark_inode_dirty error [ 127.830967][ T5846] dvb-usb: MAC address: 02:02:02:02:02:02 [ 127.850283][ T5826] usb 3-1: config 0 descriptor?? [ 127.893067][ T7352] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.532: corrupted inode contents [ 127.922889][ T27] audit: type=1800 audit(1758798082.493:16): pid=7357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.535" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 127.929472][ T7352] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 127.960464][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.990041][ T7352] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.532: corrupted inode contents [ 128.023509][ T5846] dvb-usb: bulk message failed: -22 (3/0) [ 128.029317][ T5846] dw2102: command 0x0e transfer failed. [ 128.043131][ T5846] dvb-usb: bulk message failed: -22 (3/0) [ 128.049119][ T5846] dw2102: command 0x0e transfer failed. [ 128.056909][ T7352] EXT4-fs error (device loop3): ext4_truncate:4288: inode #16: comm syz.3.532: mark_inode_dirty error [ 128.116267][ T7352] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 128.146226][ T7352] EXT4-fs (loop3): 1 truncate cleaned up [ 128.172599][ T7352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.207706][ T7352] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.282679][ T5826] gt683r_led 0003:1770:FF00.0012: item fetching failed at offset 0/3 [ 128.309872][ T5826] gt683r_led 0003:1770:FF00.0012: hid parsing failed [ 128.340343][ T5826] gt683r_led: probe of 0003:1770:FF00.0012 failed with error -22 [ 128.378622][ T5846] dvb-usb: bulk message failed: -22 (3/0) [ 128.396139][ T5846] dw2102: command 0x0e transfer failed. [ 128.401736][ T5846] dvb-usb: bulk message failed: -22 (3/0) [ 128.404052][ T7352] Quota error (device loop3): do_check_range: Getting block 18 out of range 0-5 [ 128.407608][ T5846] dw2102: command 0x0e transfer failed. [ 128.422285][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 128.429431][ T5846] dw2102: command 0x51 transfer failed. [ 128.435141][ T5846] dvb-usb: bulk message failed: -22 (5/0) [ 128.440883][ T5846] dw2102: i2c probe for address 0x68 failed. [ 128.447045][ T5846] dvb-usb: bulk message failed: -22 (5/0) [ 128.452783][ T5846] dw2102: i2c probe for address 0x69 failed. [ 128.469659][ T5846] dvb-usb: bulk message failed: -22 (5/0) [ 128.479352][ T5846] dw2102: i2c probe for address 0x6a failed. [ 128.490654][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.503281][ T5846] dw2102: probing for demodulator failed. Is the external power switched on? [ 128.512072][ T5846] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 128.527714][ T5873] usb 3-1: USB disconnect, device number 8 [ 128.702850][ T7385] loop3: detected capacity change from 0 to 512 [ 128.723257][ T5846] rc_core: IR keymap rc-tt-1500 not found [ 128.731552][ T5846] Registered IR keymap rc-empty [ 128.765642][ T5846] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 128.800007][ T7385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.826204][ T5846] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input16 [ 128.841892][ T7385] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.889650][ T5846] dvb-usb: schedule remote query interval to 250 msecs. [ 128.922695][ T5846] dw2102: su3000_power_ctrl: 0, initialized 1 [ 128.946900][ T5846] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 128.982484][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.995009][ T5846] usb 1-1: USB disconnect, device number 7 [ 129.189400][ T5846] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 129.368420][ T7403] loop2: detected capacity change from 0 to 8192 [ 129.386393][ T7403] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 129.403071][ T7403] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 129.448938][ T7403] REISERFS (device loop2): using ordered data mode [ 129.478165][ T7403] reiserfs: using flush barriers [ 129.511528][ T7403] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 129.573568][ T7403] REISERFS (device loop2): checking transaction log (loop2) [ 129.595524][ T7403] REISERFS (device loop2): Using r5 hash to sort names [ 129.613372][ T7403] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 129.747750][ T7409] loop0: detected capacity change from 0 to 128 [ 129.759973][ T7399] loop1: detected capacity change from 0 to 32768 [ 129.793712][ T7399] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.542 (7399) [ 129.797364][ T7409] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 129.878248][ T7409] hpfs: filesystem error: improperly stopped [ 129.894955][ T7399] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 129.908653][ T7409] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 129.950618][ T7409] hpfs: You really don't want any checks? You are crazy... [ 129.951611][ T7399] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 129.973491][ T7409] hpfs: hpfs_map_sector(): read error [ 129.978897][ T7409] hpfs: code page support is disabled [ 130.016826][ T7399] BTRFS info (device loop1): force zlib compression, level 3 [ 130.017411][ T7409] hpfs: hpfs_map_4sectors(): unaligned read [ 130.043458][ T7399] BTRFS info (device loop1): force clearing of disk cache [ 130.062434][ T7399] BTRFS info (device loop1): turning off barriers [ 130.078768][ T7399] BTRFS info (device loop1): doing ref verification [ 130.094502][ T7409] hpfs: hpfs_map_4sectors(): unaligned read [ 130.113231][ T7399] BTRFS info (device loop1): enabling disk space caching [ 130.120798][ T7409] hpfs: filesystem error: unable to find root dir [ 130.140629][ T7399] BTRFS info (device loop1): disk space caching is enabled [ 130.245342][ T7409] hpfs: hpfs_map_4sectors(): unaligned read [ 130.326085][ T7399] BTRFS info (device loop1): enabling ssd optimizations [ 130.381371][ T7399] BTRFS info (device loop1): auto enabling async discard [ 130.434766][ T7399] BTRFS info (device loop1): rebuilding free space tree [ 130.495659][ T7399] BTRFS info (device loop1): disabling free space tree [ 130.502614][ T7399] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 130.517532][ T7399] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 130.649345][ T7399] BTRFS info (device loop1): balance: start -slimit=4,stripes=7..9 [ 130.672028][ T7443] loop0: detected capacity change from 0 to 4096 [ 130.686646][ T7399] BTRFS info (device loop1): balance: ended with status: 0 [ 130.923363][ T5783] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 130.968773][ T7451] loop2: detected capacity change from 0 to 1024 [ 131.011535][ T7451] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 131.061781][ T7451] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 131.199333][ T7451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.228097][ T7462] netlink: 32 bytes leftover after parsing attributes in process `syz.1.561'. [ 131.404178][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.834764][ T786] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x4 [ 131.857644][ T786] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x2 [ 131.875685][ T786] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x3 [ 131.901776][ T786] hid-generic 0000:3000000:0000.0013: hidraw0: HID v0.00 Device [sy] on syz0 [ 132.081725][ T7484] fido_id[7484]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 132.141132][ T7489] sp0: Synchronizing with TNC [ 132.243435][ T7494] netlink: 'syz.1.576': attribute type 1 has an invalid length. [ 132.269196][ T7494] netlink: 144 bytes leftover after parsing attributes in process `syz.1.576'. [ 132.283806][ T7494] netlink: 'syz.1.576': attribute type 1 has an invalid length. [ 132.294346][ T7494] netlink: 76 bytes leftover after parsing attributes in process `syz.1.576'. [ 132.984517][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.992559][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.020879][ T7526] loop1: detected capacity change from 0 to 256 [ 133.060053][ T7526] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.080757][ T7526] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 133.105307][ T7526] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 133.165933][ T5775] udevd[5775]: symlink '../../loop1' '/dev/disk/by-diskseq/287.tmp-b7:1' failed: Read-only file system [ 133.195401][ T5775] udevd[5775]: symlink '../../loop1' '/dev/disk/by-uuid/1234-1234.tmp-b7:1' failed: Read-only file system [ 133.220005][ T7530] loop3: detected capacity change from 0 to 512 [ 133.264814][ T5775] udevd[5775]: symlink '../../loop1' '/dev/disk/by-diskseq/287.tmp-b7:1' failed: Read-only file system [ 133.274078][ T7530] EXT4-fs: Ignoring removed oldalloc option [ 133.290946][ T7530] EXT4-fs: Ignoring removed bh option [ 133.317517][ T5775] udevd[5775]: symlink '../../loop1' '/dev/disk/by-diskseq/287.tmp-b7:1' failed: Read-only file system [ 133.334478][ T7530] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.593: corrupted in-inode xattr: e_value size too large [ 133.384426][ T5957] udevd[5957]: symlink '../../loop3' '/dev/disk/by-diskseq/288.tmp-b7:3' failed: Read-only file system [ 133.403037][ T7530] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.593: couldn't read orphan inode 15 (err -117) [ 133.419740][ T5775] udevd[5775]: symlink '../../loop1' '/dev/disk/by-diskseq/287.tmp-b7:1' failed: Read-only file system [ 133.455726][ T5957] udevd[5957]: symlink '../../loop3' '/dev/disk/by-label/\x86\x5b.tmp-b7:3' failed: Read-only file system [ 133.469445][ T7530] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.489375][ T5957] udevd[5957]: symlink '../../loop3' '/dev/disk/by-diskseq/288.tmp-b7:3' failed: Read-only file system [ 133.500856][ T7515] loop2: detected capacity change from 0 to 32768 [ 133.525571][ T5775] udevd[5775]: symlink '../../loop1' '/dev/disk/by-diskseq/289.tmp-b7:1' failed: Read-only file system [ 133.534543][ T5957] udevd[5957]: symlink '../../loop3' '/dev/disk/by-label/\x86\x5b.tmp-b7:3' failed: Read-only file system [ 133.633583][ T7530] overlayfs: upper fs needs to support d_type. [ 133.787162][ T7541] loop0: detected capacity change from 0 to 1024 [ 133.840015][ T7541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.853345][ T5780] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 133.873640][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.907546][ T5780] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 134.005680][ T5780] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 134.057356][ T5780] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 134.124844][ T5780] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 134.145820][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.187982][ T5780] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 134.216704][ T5780] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 134.269273][ T5780] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 134.314719][ T5780] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 134.361349][ T5780] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 134.776118][ T7552] loop0: detected capacity change from 0 to 32768 [ 134.833142][ T7552] JBD2: Ignoring recovery information on journal [ 134.923850][ T7552] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 135.016879][ T7552] (syz.0.605,7552,1):ocfs2_file_write_iter:2445 ERROR: status = -27 [ 135.118533][ T5781] ocfs2: Unmounting device (7,0) on (node local) [ 135.274874][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.461612][ T7570] loop2: detected capacity change from 0 to 4096 [ 135.499064][ T1129] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.511153][ T7570] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 135.526563][ T7560] loop1: detected capacity change from 0 to 32768 [ 135.575244][ T7572] loop0: detected capacity change from 0 to 128 [ 135.578978][ T7570] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 135.617720][ T7560] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 135.773563][ T7572] syz.0.613: attempt to access beyond end of device [ 135.773563][ T7572] loop0: rw=2051, sector=104, nr_sectors = 25 limit=128 [ 135.791412][ T1129] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.821500][ T7570] overlayfs: upper fs does not support tmpfile. [ 135.849798][ T7570] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 135.879002][ T7570] overlayfs: failed to get uuid (/file0, err=0); falling back to uuid=null. [ 135.889758][ T7560] XFS (loop1): Ending clean mount [ 135.944562][ T7570] ntfs3: loop2: ino=1b, "file0" failed to parse mft record [ 135.962988][ T7570] ntfs3: loop2: ino=1b, "file0" attr_set_size [ 135.976430][ T1129] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.993535][ T7570] overlayfs: failed to verify origin (/, ino=5, err=-2) [ 136.010427][ T7570] overlayfs: failed to verify upper root origin [ 136.075968][ T5783] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 136.200495][ T1129] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.227943][ T5782] ntfs3: loop2: ino=1a, ntfs_sync_fs failed, -22. [ 136.621837][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 136.642058][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 136.650280][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 136.668020][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 136.690806][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 136.704597][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 136.929870][ T7594] loop2: detected capacity change from 0 to 4096 [ 137.058212][ T7603] loop0: detected capacity change from 0 to 128 [ 137.199007][ T7607] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.689089][ T7622] netlink: 'syz.0.627': attribute type 21 has an invalid length. [ 137.718785][ T7622] netlink: 14532 bytes leftover after parsing attributes in process `syz.0.627'. [ 137.781079][ T7626] loop2: detected capacity change from 0 to 1024 [ 137.807376][ T7626] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 137.892652][ T7626] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.007637][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.149282][ T7636] netlink: 5 bytes leftover after parsing attributes in process `syz.0.631'. [ 138.184014][ T7636] gretap0: entered promiscuous mode [ 138.215327][ T7636] netlink: 'syz.0.631': attribute type 1 has an invalid length. [ 138.253050][ T7636] netlink: 3 bytes leftover after parsing attributes in process `syz.0.631'. [ 138.362363][ T5775] udevd[5775]: symlink '../../loop2' '/dev/disk/by-diskseq/308.tmp-b7:2' failed: Read-only file system [ 138.382171][ T5957] udevd[5957]: symlink '../../loop0' '/dev/disk/by-diskseq/305.tmp-b7:0' failed: Read-only file system [ 138.407584][ T7588] chnl_net:caif_netlink_parms(): no params data found [ 138.582154][ T5775] udevd[5775]: symlink '../../loop2' '/dev/disk/by-diskseq/308.tmp-b7:2' failed: Read-only file system [ 138.595892][ T7628] loop1: detected capacity change from 0 to 32768 [ 138.626425][ T5957] udevd[5957]: symlink '../../loop0' '/dev/disk/by-diskseq/305.tmp-b7:0' failed: Read-only file system [ 138.797703][ T5775] udevd[5775]: symlink '../../loop2' '/dev/disk/by-diskseq/308.tmp-b7:2' failed: Read-only file system [ 138.813158][ T5789] Bluetooth: hci0: command tx timeout [ 138.933532][ T6098] udevd[6098]: symlink '../../loop1' '/dev/disk/by-diskseq/309.tmp-b7:1' failed: Read-only file system [ 138.994331][ T6098] udevd[6098]: symlink '../../loop1' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:1' failed: Read-only file system [ 139.140762][ T5775] udevd[5775]: symlink '../../loop2' '/dev/disk/by-diskseq/308.tmp-b7:2' failed: Read-only file system [ 139.196438][ T7661] netlink: 6 bytes leftover after parsing attributes in process `syz.2.639'. [ 139.341796][ T5775] udevd[5775]: symlink '../../loop1' '/dev/disk/by-diskseq/309.tmp-b7:1' failed: Read-only file system [ 139.421361][ T5775] udevd[5775]: symlink '../../loop1' '/dev/disk/by-diskseq/309.tmp-b7:1' failed: Read-only file system [ 139.453565][ T7661] netlink: 6 bytes leftover after parsing attributes in process `syz.2.639'. [ 139.519080][ T7668] loop1: detected capacity change from 0 to 16 [ 139.535440][ T7588] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.542598][ T7588] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.578519][ T7668] erofs: (device loop1): mounted with root inode @ nid 36. [ 139.593242][ T7588] bridge_slave_0: entered allmulticast mode [ 139.600531][ T7588] bridge_slave_0: entered promiscuous mode [ 139.651933][ T7588] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.674596][ T7588] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.708619][ T7588] bridge_slave_1: entered allmulticast mode [ 139.739177][ T7588] bridge_slave_1: entered promiscuous mode [ 139.795321][ T7673] loop2: detected capacity change from 0 to 1024 [ 139.941810][ T7677] loop0: detected capacity change from 0 to 1024 [ 140.144222][ T48] hfsplus: b-tree write err: -5, ino 4 [ 140.272380][ T7588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.369921][ T7588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.711856][ T7588] team0: Port device team_slave_0 added [ 140.723112][ T7588] team0: Port device team_slave_1 added [ 140.817910][ T1129] hsr_slave_0: left promiscuous mode [ 140.842983][ T1129] hsr_slave_1: left promiscuous mode [ 140.864290][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.883031][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.893089][ T5789] Bluetooth: hci0: command tx timeout [ 140.900546][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.920797][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.952855][ T1129] bridge_slave_1: left allmulticast mode [ 140.980738][ T1129] bridge_slave_1: left promiscuous mode [ 141.005161][ T1129] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.027937][ T1129] bridge_slave_0: left allmulticast mode [ 141.037865][ T7689] loop2: detected capacity change from 0 to 32768 [ 141.040865][ T1129] bridge_slave_0: left promiscuous mode [ 141.047603][ T7689] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.648 (7689) [ 141.066054][ T1129] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.084051][ T7689] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 141.101404][ T7689] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 141.123077][ T7689] BTRFS info (device loop2): use no compression [ 141.133854][ T7689] BTRFS info (device loop2): force clearing of disk cache [ 141.141244][ T7689] BTRFS info (device loop2): use zlib compression, level 3 [ 141.149531][ T7689] BTRFS info (device loop2): max_inline at 0 [ 141.156107][ T7689] BTRFS info (device loop2): using free space tree [ 141.163380][ T1129] veth1_macvtap: left promiscuous mode [ 141.170904][ T1129] veth0_macvtap: left promiscuous mode [ 141.176666][ T1129] veth1_vlan: left promiscuous mode [ 141.185390][ T1129] veth0_vlan: left promiscuous mode [ 141.272304][ T7689] BTRFS info (device loop2): enabling ssd optimizations [ 141.290781][ T7689] BTRFS info (device loop2): auto enabling async discard [ 141.326160][ T7689] BTRFS info (device loop2): rebuilding free space tree [ 141.367147][ T7689] BTRFS info (device loop2): checking UUID tree [ 141.627787][ T7724] use of bytesused == 0 is deprecated and will be removed in the future, [ 141.641478][ T5782] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 141.660286][ T7724] use the actual size instead. [ 142.319734][ T1129] team0 (unregistering): Port device team_slave_1 removed [ 142.359375][ T5826] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 142.375655][ T1129] team0 (unregistering): Port device team_slave_0 removed [ 142.412823][ T1129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.459811][ T1129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.559014][ T5826] usb 2-1: config 0 has an invalid interface number: 95 but max is 0 [ 142.567559][ T5826] usb 2-1: config 0 has no interface number 0 [ 142.574228][ T5826] usb 2-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 142.586480][ T5826] usb 2-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 142.595638][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.603736][ T5826] usb 2-1: Product: syz [ 142.607918][ T5826] usb 2-1: Manufacturer: syz [ 142.612522][ T5826] usb 2-1: SerialNumber: syz [ 142.624528][ T5826] usb 2-1: config 0 descriptor?? [ 142.632068][ T7733] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 142.878051][ T5826] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 142.901551][ T5826] usb 2-1: MIDIStreaming interface descriptor not found [ 142.974525][ T5789] Bluetooth: hci0: command tx timeout [ 142.988822][ T1129] bond0 (unregistering): Released all slaves [ 143.011734][ T5826] usb 2-1: USB disconnect, device number 9 [ 143.170316][ T7588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.177362][ T7588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.203708][ T7588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.235195][ T7588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.242165][ T7588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.355986][ T7588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.431444][ T5775] udevd[5775]: symlink '../../loop2' '/dev/disk/by-diskseq/318.tmp-b7:2' failed: Read-only file system [ 143.447339][ T5957] udevd[5957]: symlink '../../loop0' '/dev/disk/by-diskseq/316.tmp-b7:0' failed: Read-only file system [ 143.512858][ T7743] loop0: detected capacity change from 0 to 1024 [ 143.616791][ T5957] udevd[5957]: symlink '../../loop0' '/dev/disk/by-diskseq/319.tmp-b7:0' failed: Read-only file system [ 143.622641][ T7588] hsr_slave_0: entered promiscuous mode [ 143.671514][ T5957] udevd[5957]: symlink '../../loop0' '/dev/disk/by-label/untitled.tmp-b7:0' failed: Read-only file system [ 143.675286][ T5775] udevd[5775]: symlink '../../loop2' '/dev/disk/by-diskseq/318.tmp-b7:2' failed: Read-only file system [ 143.726962][ T5957] udevd[5957]: symlink '../../loop0' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:0' failed: Read-only file system [ 143.743047][ T7588] hsr_slave_1: entered promiscuous mode [ 143.749446][ T7588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.762997][ T7588] Cannot create hsr debugfs directory [ 143.768294][ T41] hfsplus: b-tree write err: -5, ino 4 [ 143.789297][ T6098] udevd[6098]: symlink '../../loop1' '/dev/disk/by-diskseq/313.tmp-b7:1' failed: Read-only file system [ 143.858548][ T5775] udevd[5775]: symlink '../../loop0' '/dev/disk/by-diskseq/319.tmp-b7:0' failed: Read-only file system [ 143.927037][ T5775] udevd[5775]: symlink '../../loop0' '/dev/disk/by-diskseq/319.tmp-b7:0' failed: Read-only file system [ 143.947712][ T5957] udevd[5957]: symlink '../../loop2' '/dev/disk/by-diskseq/318.tmp-b7:2' failed: Read-only file system [ 144.028067][ T7757] loop2: detected capacity change from 0 to 16 [ 144.092730][ T7757] erofs: (device loop2): mounted with root inode @ nid 36. [ 144.193265][ T7757] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 144.372290][ T1129] ------------[ cut here ]------------ [ 144.378082][ T1129] WARNING: CPU: 1 PID: 1129 at net/xfrm/xfrm_state.c:2997 xfrm_state_fini+0x25c/0x2b0 [ 144.387760][ T1129] Modules linked in: [ 144.391677][ T1129] CPU: 1 PID: 1129 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 144.399717][ T1129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 144.410077][ T1129] Workqueue: netns cleanup_net [ 144.415219][ T1129] RIP: 0010:xfrm_state_fini+0x25c/0x2b0 [ 144.420801][ T1129] Code: 5c 41 5d 41 5e 41 5f 5d e9 81 20 00 00 e8 fc b7 66 f8 0f 0b e9 2c fe ff ff e8 f0 b7 66 f8 0f 0b e9 91 fe ff ff e8 e4 b7 66 f8 <0f> 0b 43 80 3c 2c 00 0f 85 fa fe ff ff e9 fd fe ff ff e8 cd b7 66 [ 144.440658][ T1129] RSP: 0018:ffffc900048cfa98 EFLAGS: 00010293 [ 144.446920][ T1129] RAX: ffffffff891edfbc RBX: ffff88802b181d40 RCX: ffff888023640000 [ 144.454988][ T1129] RDX: 0000000000000000 RSI: ffffffff8aaabca0 RDI: ffffffff8afc71c0 [ 144.463557][ T1129] RBP: 0000000000000040 R08: ffffffff90da650f R09: 1ffffffff21b4ca1 [ 144.471548][ T1129] R10: dffffc0000000000 R11: fffffbfff21b4ca2 R12: 1ffff1100563061c [ 144.479785][ T1129] R13: dffffc0000000000 R14: ffff88802b1830e0 R15: ffff88802e7a2680 [ 144.487808][ T1129] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 144.497102][ T1129] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.503750][ T1129] CR2: 0000001b2e320ff8 CR3: 000000005dfa9000 CR4: 00000000003506e0 [ 144.511747][ T1129] Call Trace: [ 144.515093][ T1129] [ 144.518055][ T1129] xfrm_net_exit+0x25/0x60 [ 144.522491][ T1129] cleanup_net+0x6f4/0xb90 [ 144.526993][ T1129] ? ops_free_list+0x3b0/0x3b0 [ 144.531784][ T1129] ? _raw_spin_unlock_irq+0x23/0x50 [ 144.537070][ T1129] ? process_scheduled_works+0x957/0x15b0 [ 144.542815][ T1129] ? process_scheduled_works+0x957/0x15b0 [ 144.548629][ T1129] process_scheduled_works+0xa45/0x15b0 [ 144.554300][ T1129] ? assign_work+0x400/0x400 [ 144.558920][ T1129] ? assign_work+0x39e/0x400 [ 144.564118][ T1129] worker_thread+0xa55/0xfc0 [ 144.568738][ T1129] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 144.574851][ T1129] ? _raw_spin_unlock+0x40/0x40 [ 144.579719][ T1129] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 144.585699][ T1129] kthread+0x2fa/0x390 [ 144.589785][ T1129] ? pr_cont_work+0x560/0x560 [ 144.594558][ T1129] ? kthread_blkcg+0xd0/0xd0 [ 144.599168][ T1129] ret_from_fork+0x48/0x80 [ 144.603631][ T1129] ? kthread_blkcg+0xd0/0xd0 [ 144.608237][ T1129] ret_from_fork_asm+0x11/0x20 [ 144.613085][ T1129] [ 144.616555][ T1129] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 144.623840][ T1129] CPU: 1 PID: 1129 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 144.631388][ T1129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 144.641452][ T1129] Workqueue: netns cleanup_net [ 144.646242][ T1129] Call Trace: [ 144.649525][ T1129] [ 144.652463][ T1129] dump_stack_lvl+0x16c/0x230 [ 144.657158][ T1129] ? show_regs_print_info+0x20/0x20 [ 144.662372][ T1129] ? load_image+0x3b0/0x3b0 [ 144.666896][ T1129] panic+0x2c0/0x710 [ 144.670824][ T1129] ? bpf_jit_dump+0xd0/0xd0 [ 144.675343][ T1129] ? ret_from_fork_asm+0x11/0x20 [ 144.680277][ T1129] __warn+0x2e0/0x470 [ 144.684253][ T1129] ? xfrm_state_fini+0x25c/0x2b0 [ 144.689178][ T1129] ? xfrm_state_fini+0x25c/0x2b0 [ 144.694103][ T1129] report_bug+0x2be/0x4f0 [ 144.698421][ T1129] ? xfrm_state_fini+0x25c/0x2b0 [ 144.703347][ T1129] ? xfrm_state_fini+0x25c/0x2b0 [ 144.708271][ T1129] ? xfrm_state_fini+0x25e/0x2b0 [ 144.713196][ T1129] handle_bug+0xcf/0x120 [ 144.717428][ T1129] exc_invalid_op+0x1a/0x50 [ 144.721916][ T1129] asm_exc_invalid_op+0x1a/0x20 [ 144.726771][ T1129] RIP: 0010:xfrm_state_fini+0x25c/0x2b0 [ 144.732319][ T1129] Code: 5c 41 5d 41 5e 41 5f 5d e9 81 20 00 00 e8 fc b7 66 f8 0f 0b e9 2c fe ff ff e8 f0 b7 66 f8 0f 0b e9 91 fe ff ff e8 e4 b7 66 f8 <0f> 0b 43 80 3c 2c 00 0f 85 fa fe ff ff e9 fd fe ff ff e8 cd b7 66 [ 144.751923][ T1129] RSP: 0018:ffffc900048cfa98 EFLAGS: 00010293 [ 144.757998][ T1129] RAX: ffffffff891edfbc RBX: ffff88802b181d40 RCX: ffff888023640000 [ 144.765966][ T1129] RDX: 0000000000000000 RSI: ffffffff8aaabca0 RDI: ffffffff8afc71c0 [ 144.773929][ T1129] RBP: 0000000000000040 R08: ffffffff90da650f R09: 1ffffffff21b4ca1 [ 144.781888][ T1129] R10: dffffc0000000000 R11: fffffbfff21b4ca2 R12: 1ffff1100563061c [ 144.789847][ T1129] R13: dffffc0000000000 R14: ffff88802b1830e0 R15: ffff88802e7a2680 [ 144.797815][ T1129] ? xfrm_state_fini+0x25c/0x2b0 [ 144.802748][ T1129] ? xfrm_state_fini+0x25c/0x2b0 [ 144.807682][ T1129] xfrm_net_exit+0x25/0x60 [ 144.812086][ T1129] cleanup_net+0x6f4/0xb90 [ 144.816495][ T1129] ? ops_free_list+0x3b0/0x3b0 [ 144.821335][ T1129] ? _raw_spin_unlock_irq+0x23/0x50 [ 144.826526][ T1129] ? process_scheduled_works+0x957/0x15b0 [ 144.832231][ T1129] ? process_scheduled_works+0x957/0x15b0 [ 144.837936][ T1129] process_scheduled_works+0xa45/0x15b0 [ 144.843485][ T1129] ? assign_work+0x400/0x400 [ 144.848070][ T1129] ? assign_work+0x39e/0x400 [ 144.852736][ T1129] worker_thread+0xa55/0xfc0 [ 144.857314][ T1129] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 144.863194][ T1129] ? _raw_spin_unlock+0x40/0x40 [ 144.868029][ T1129] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 144.873920][ T1129] kthread+0x2fa/0x390 [ 144.877972][ T1129] ? pr_cont_work+0x560/0x560 [ 144.882636][ T1129] ? kthread_blkcg+0xd0/0xd0 [ 144.887214][ T1129] ret_from_fork+0x48/0x80 [ 144.891617][ T1129] ? kthread_blkcg+0xd0/0xd0 [ 144.896191][ T1129] ret_from_fork_asm+0x11/0x20 [ 144.900956][ T1129] [ 144.904182][ T1129] Kernel Offset: disabled [ 144.908542][ T1129] Rebooting in 86400 seconds..