last executing test programs: 22.197958998s ago: executing program 2 (id=2057): r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000280), 0x0, 0x0) close$fd_v4l2_buffer(r0) socket(0x25, 0x1, 0x0) read$FUSE(r0, &(0x7f0000006f40)={0x2020}, 0x2020) 22.033713243s ago: executing program 2 (id=2060): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) unshare(0x26020280) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r0, r0], 0x2}, 0x58) 21.578258945s ago: executing program 2 (id=2064): r0 = socket$nl_route(0x10, 0x3, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 8.518668442s ago: executing program 3 (id=2160): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket(0x0, 0x0, 0x0) r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000003c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@nossd}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_BALANCE_V2(r0, 0x40089413, &(0x7f0000000c40)={0xa, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 6.033422772s ago: executing program 3 (id=2177): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x1, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r1}}, 0x18) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 5.167583692s ago: executing program 3 (id=2180): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000500), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000006c0)={"00000010e5ffe40f0000001500"}) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1806453, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000003c0)) 4.443128389s ago: executing program 0 (id=2181): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50ec, &(0x7f00000051c0)="$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") truncate(&(0x7f0000000040)='./file1\x00', 0x6fe) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000200), &(0x7f0000000080)=ANY=[], 0x700, 0x0) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='./file2\x00') 3.340499241s ago: executing program 3 (id=2187): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000140)={{@any, 0xffffffff}, 0x1, 0x2}) 2.976387025s ago: executing program 4 (id=2190): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x4e20, 0x0, 0x2}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) 2.715063359s ago: executing program 0 (id=2192): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x1}}], 0x8) bind$can_raw(r0, &(0x7f0000000100), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x8) 2.695613701s ago: executing program 4 (id=2193): r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001300f5a1abdaff00000000000000001f000000004000000200000000bc72f8e91e884e000000000000000000000000002000000031e9da8bde6e1388e8b71850e98e"], 0x54}}, 0x0) 2.220428115s ago: executing program 4 (id=2197): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000810}, 0x0) 2.05331724s ago: executing program 1 (id=2198): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f297c0eccf859705acf9834f5b4b6039b63eac610b", 0x15}, {&(0x7f0000001400)="c98812c1be8a", 0x6}, {&(0x7f0000000140)="406f2bef596a8a3130012ee7bf1c92e0c8e21b745443ef02bceeab6887655164a1a59b46361a227676524c9b4ea5812335f4739f47eb790fd363fc30071f0c884022467b7b96ae7ca07906ec18b0e2ae9661eb696d3b3b965629", 0x5a}, {&(0x7f0000000000)="7f5549", 0x3}], 0x4}, 0x0) 1.920092143s ago: executing program 4 (id=2199): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1802"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) 1.816588703s ago: executing program 1 (id=2200): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.701285953s ago: executing program 1 (id=2201): socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@local}, {@in=@loopback, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in=@loopback}}]}, 0x154}}, 0x0) 1.698336173s ago: executing program 3 (id=2202): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020206e2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000888500000073000000850000000e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000730117000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.63172192s ago: executing program 4 (id=2203): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000002280)={'#! ', './file0', [{0x20, '\xa0\x0f\xb9\xe46\xe8c\xa7\xdd@\xcfp\x81\xe9*\xcd\xc9\xf1\x9f\xf8\xc1\r\xaa\x1c$\x83\xadP\xfdj\xc7\x03;\xa4QtX\x7f#m\xbe\xa7\xe4z!\x9d\x05\x12\xf2\xdb\xcfo\xd4\xd8\xf1\xd80xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x0) 289.605054ms ago: executing program 2 (id=2213): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x38}}, 0x0) 0s ago: executing program 0 (id=2214): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): ][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 262.954265][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 262.961750][ T5272] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 263.015572][ T7944] device veth1_vlan entered promiscuous mode [ 263.043936][ T7436] EXT4-fs (loop2): unmounting filesystem. [ 263.147623][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 263.186259][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 263.224001][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 263.236138][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 263.245990][ T5272] usb 5-1: Using ep0 maxpacket: 16 [ 263.288087][ T8186] netlink: 'syz.2.1423': attribute type 7 has an invalid length. [ 263.309998][ T7944] device veth0_macvtap entered promiscuous mode [ 263.341293][ T7944] device veth1_macvtap entered promiscuous mode [ 263.367572][ T5272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.384702][ T8189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1424'. [ 263.408053][ T5272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.413724][ T7944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.433594][ T5272] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 263.453601][ T5272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.487141][ T7944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.497048][ T7944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.517772][ T5272] usb 5-1: config 0 descriptor?? [ 263.529756][ T7944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.539826][ T3850] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 263.562235][ T7944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.584437][ T7944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.609314][ T7944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.630407][ T7944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.651998][ T7944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.674328][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 263.693759][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 263.709317][ T7944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.730948][ T7944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.747484][ T7944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.758081][ T7944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.768173][ T7944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.778964][ T7944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.809488][ T7944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.831453][ T7944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.846363][ T7944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.868922][ T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 263.886538][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 263.912869][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 263.925455][ T7944] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.937778][ T3850] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 263.938857][ T7944] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.946412][ T3850] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 263.946437][ T3850] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 263.946479][ T3850] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 263.956236][ T7944] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.997360][ T8170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.037551][ T3850] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 264.044567][ T7944] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.058879][ T8170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.098542][ T5272] hid (null): bogus close delimiter [ 264.135095][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 264.208788][ T3850] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 264.234822][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.251345][ T3850] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 264.264910][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.267751][ T7] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 264.273459][ T3850] usb 2-1: Product: syz [ 264.296331][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 264.307323][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 264.326999][ T3850] usb 2-1: Manufacturer: syz [ 264.329876][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 264.367340][ T5272] usb 5-1: string descriptor 0 read error: -71 [ 264.373691][ T7] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.393392][ T7] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 264.405763][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.418681][ T3850] cdc_wdm 2-1:1.0: skipping garbage [ 264.421189][ T5272] usb 5-1: Max retries (5) exceeded reading string descriptor 200 [ 264.428218][ T3850] cdc_wdm 2-1:1.0: skipping garbage [ 264.446793][ T5272] letsketch: probe of 0003:6161:4D15.0012 failed with error -32 [ 264.470080][ T3850] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 264.476051][ T3850] cdc_wdm 2-1:1.0: Unknown control protocol [ 264.507465][ T5272] usb 5-1: USB disconnect, device number 10 [ 264.555376][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.574902][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.600078][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 264.687761][ T3859] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 264.698278][ T7] usb 4-1: GET_CAPABILITIES returned 0 [ 264.704282][ T7] usbtmc 4-1:16.0: can't read capabilities [ 264.744713][ T8218] loop0: detected capacity change from 0 to 128 [ 264.801124][ T8218] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 264.830175][ T8218] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.919705][ T7] usb 4-1: USB disconnect, device number 9 [ 264.938095][ T3687] usb 2-1: USB disconnect, device number 13 [ 264.957485][ T3859] usb 3-1: Using ep0 maxpacket: 32 [ 265.247470][ T3859] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 265.258735][ T3859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.267044][ T3859] usb 3-1: Product: syz [ 265.271958][ T3859] usb 3-1: Manufacturer: syz [ 265.276609][ T3859] usb 3-1: SerialNumber: syz [ 265.305670][ T3859] usb 3-1: config 0 descriptor?? [ 265.375493][ T8239] loop4: detected capacity change from 0 to 512 [ 265.464411][ T8239] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 265.494093][ T8239] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038 (0x7fffffff) [ 265.668939][ T27] audit: type=1800 audit(1726689440.186:29): pid=8239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1435" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 265.785945][ T5429] EXT4-fs (loop4): unmounting filesystem. [ 265.828030][ T3859] airspy 3-1:0.0: Board ID: 00 [ 265.832979][ T3859] airspy 3-1:0.0: Firmware version: [ 266.277521][ T3859] airspy 3-1:0.0: usb_control_msg() failed -71 request 0e [ 266.340161][ T3859] airspy 3-1:0.0: Registered as swradio16 [ 266.345961][ T3859] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 266.421729][ T3859] usb 3-1: USB disconnect, device number 14 [ 267.130098][ T8281] loop3: detected capacity change from 0 to 4096 [ 267.217472][ T8281] ntfs: (device loop3): load_attribute_list(): Cannot read attribute list since runlist is missing. [ 267.277447][ T8281] ntfs: (device loop3): ntfs_read_locked_inode(): Failed to load attribute list attribute. [ 267.307620][ T3859] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 267.318833][ T8281] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 267.357650][ T8281] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 267.384076][ T8263] loop4: detected capacity change from 0 to 32768 [ 267.393426][ T8263] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1440 (8263) [ 267.412598][ T8281] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 267.428081][ T8252] loop1: detected capacity change from 0 to 40427 [ 267.438919][ T8281] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 267.465887][ T8252] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 267.473414][ T8281] ntfs: (device loop3): ntfs_read_locked_inode(): Failed to lookup $DATA attribute. [ 267.485509][ T8263] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 267.496015][ T8252] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 267.522936][ T8263] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 267.537826][ T8281] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x3 as bad. Run chkdsk. [ 267.561422][ T8263] BTRFS info (device loop4): using free space tree [ 267.573220][ T8252] F2FS-fs (loop1): invalid crc value [ 267.597199][ T3859] usb 3-1: Using ep0 maxpacket: 16 [ 267.623648][ T8281] ntfs: (device loop3): load_system_files(): Failed to load $Volume. [ 267.640152][ T8252] F2FS-fs (loop1): Found nat_bits in checkpoint [ 267.727264][ T3859] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 267.747449][ T8263] BTRFS info (device loop4): enabling ssd optimizations [ 267.917657][ T3859] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 267.960765][ T3859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.981888][ T8252] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 267.989471][ T3859] usb 3-1: Product: syz [ 267.989496][ T3859] usb 3-1: Manufacturer: syz [ 267.989515][ T3859] usb 3-1: SerialNumber: syz [ 268.016439][ T3859] usb 3-1: config 0 descriptor?? [ 268.017327][ T8252] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 268.083743][ T3859] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 268.108124][ T5429] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 268.139146][ T3859] usb 3-1: Detected FT232R [ 268.307832][ T3859] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 268.575016][ T3859] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 268.576827][ T102] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 268.665629][ T102] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 268.806842][ T3859] usb 3-1: USB disconnect, device number 15 [ 268.869839][ T3859] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 268.914352][ T3859] ftdi_sio 3-1:0.0: device disconnected [ 269.140397][ T8311] loop3: detected capacity change from 0 to 40427 [ 269.187848][ T8311] F2FS-fs (loop3): Found nat_bits in checkpoint [ 269.265049][ T8311] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 269.414463][ T6475] syz-executor: attempt to access beyond end of device [ 269.414463][ T6475] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 269.593019][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1460'. [ 269.788177][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1463'. [ 269.939812][ T8350] loop1: detected capacity change from 0 to 64 [ 270.547404][ T3686] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 270.709029][ T8366] loop1: detected capacity change from 0 to 1024 [ 270.777977][ T8346] loop2: detected capacity change from 0 to 32768 [ 270.785331][ T8346] XFS: noikeep mount option is deprecated. [ 270.907412][ T3686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.912132][ T8346] XFS (loop2): Mounting V5 Filesystem [ 270.918634][ T3686] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 270.934322][ T3686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.947398][ T3686] usb 4-1: config 0 descriptor?? [ 270.971083][ T8380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1477'. [ 271.121549][ T8346] XFS (loop2): Ending clean mount [ 271.149188][ T8346] XFS (loop2): Quotacheck needed: Please wait. [ 271.252414][ T8346] XFS (loop2): Quotacheck: Done. [ 271.372449][ T7436] XFS (loop2): Unmounting Filesystem [ 271.433459][ T3686] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 271.481043][ T3686] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0013/input/input36 [ 271.709916][ T3686] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 272.121545][ T8410] netlink: 'syz.0.1490': attribute type 7 has an invalid length. [ 272.291717][ T8414] Bluetooth: MGMT ver 1.22 [ 272.351451][ T8315] usb 4-1: USB disconnect, device number 10 [ 272.813917][ T8423] IPVS: persistence engine module ip_vs_pe_X not found [ 272.892407][ T8419] loop0: detected capacity change from 0 to 32768 [ 272.925820][ T8419] XFS: noikeep mount option is deprecated. [ 272.971805][ T8419] XFS (loop0): Mounting V5 Filesystem [ 273.034232][ T8436] netlink: 4156 bytes leftover after parsing attributes in process `syz.3.1508'. [ 273.081864][ T8419] XFS (loop0): Ending clean mount [ 273.097992][ T3642] Bluetooth: hci0: command 0x0406 tx timeout [ 273.099423][ T8419] XFS (loop0): Quotacheck needed: Please wait. [ 273.195187][ T8419] XFS (loop0): Quotacheck: Done. [ 273.254880][ T8440] loop3: detected capacity change from 0 to 128 [ 273.333990][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 273.334008][ T27] audit: type=1800 audit(1726689447.846:30): pid=8440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1499" name="file1" dev="loop3" ino=1048694 res=0 errno=0 [ 273.350759][ T8440] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 273.417457][ T8440] FAT-fs (loop3): Filesystem has been set read-only [ 273.433241][ T27] audit: type=1800 audit(1726689447.846:31): pid=8440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1499" name="file1" dev="loop3" ino=1048694 res=0 errno=0 [ 273.459932][ T8440] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 273.475930][ T7944] XFS (loop0): Unmounting Filesystem [ 273.569360][ T8315] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 273.967504][ T8315] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 273.997022][ T8315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.016616][ T8315] usb 2-1: config 0 descriptor?? [ 274.069279][ T8315] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 274.133192][ T8438] loop4: detected capacity change from 0 to 40427 [ 274.206813][ T8438] F2FS-fs (loop4): Found nat_bits in checkpoint [ 274.307373][ T8315] gp8psk: usb in 128 operation failed. [ 274.367239][ T8438] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 274.514808][ T5429] syz-executor: attempt to access beyond end of device [ 274.514808][ T5429] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 274.567305][ T8315] gp8psk: FW Version = 241.01.130 (0xf10182) Build 2088/100/55 [ 274.704099][ T8448] loop3: detected capacity change from 0 to 40427 [ 274.738578][ T8448] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 274.745239][ T8448] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 274.787613][ T8315] gp8psk: usb in 149 operation failed. [ 274.793155][ T8315] gp8psk: failed to get FPGA version [ 274.842712][ T8315] gp8psk: usb in 138 operation failed. [ 274.849809][ T8315] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 274.859587][ T8452] loop0: detected capacity change from 0 to 32768 [ 274.885524][ T8452] jfs_mkdir: dtInsert returned -EIO [ 274.912350][ T8315] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 274.914757][ T8452] ERROR: (device loop0): jfs_mkdir: [ 274.914757][ T8452] [ 274.930069][ T8315] usb 2-1: USB disconnect, device number 14 [ 274.959665][ T8448] F2FS-fs (loop3): Found nat_bits in checkpoint [ 275.013386][ T8452] ERROR: (device loop0): remounting filesystem as read-only [ 275.073387][ T8452] jfs_lookup: iget failed on inum 4 [ 275.092231][ T8448] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 275.109618][ T8448] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 275.177885][ T3650] Bluetooth: hci0: command tx timeout [ 275.240808][ T8448] syz.3.1504: attempt to access beyond end of device [ 275.240808][ T8448] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 275.447168][ T6475] syz-executor: attempt to access beyond end of device [ 275.447168][ T6475] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 276.128657][ T8487] Zero length message leads to an empty skb [ 276.332772][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1521'. [ 276.543954][ T8481] loop2: detected capacity change from 0 to 32768 [ 276.635949][ T8499] loop3: detected capacity change from 0 to 1024 [ 276.654254][ T8481] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 276.931060][ T7436] ocfs2: Unmounting device (7,2) on (node local) [ 276.933540][ T8506] loop0: detected capacity change from 0 to 64 [ 277.023686][ T27] audit: type=1326 audit(1726689451.536:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.3.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591d17def9 code=0x7ffc0000 [ 277.104611][ T8483] loop4: detected capacity change from 0 to 40427 [ 277.119268][ T27] audit: type=1326 audit(1726689451.536:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.3.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591d17def9 code=0x7ffc0000 [ 277.188154][ T8483] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 277.196039][ T8483] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 277.220595][ T27] audit: type=1326 audit(1726689451.576:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.3.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f591d17def9 code=0x7ffc0000 [ 277.281750][ T8483] F2FS-fs (loop4): invalid crc value [ 277.329803][ T8483] F2FS-fs (loop4): Found nat_bits in checkpoint [ 277.347822][ T27] audit: type=1326 audit(1726689451.576:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.3.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591d17def9 code=0x7ffc0000 [ 277.382815][ T8518] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1534'. [ 277.402659][ T8520] Attempt to restore checkpoint with obsolete wellknown handles [ 277.440672][ T27] audit: type=1326 audit(1726689451.576:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.3.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591d17def9 code=0x7ffc0000 [ 277.514187][ T27] audit: type=1326 audit(1726689451.586:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.3.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f591d17def9 code=0x7ffc0000 [ 277.577879][ T27] audit: type=1326 audit(1726689451.586:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.3.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591d17def9 code=0x7ffc0000 [ 277.605840][ T27] audit: type=1326 audit(1726689451.586:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.3.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591d17def9 code=0x7ffc0000 [ 277.628959][ T8483] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 277.636032][ T8483] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 277.713040][ T3707] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 277.745230][ T3707] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 277.910832][ T8483] F2FS-fs (loop4): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [ 278.480015][ T8548] netlink: 'syz.1.1543': attribute type 25 has an invalid length. [ 278.498544][ T8548] netlink: 'syz.1.1543': attribute type 7 has an invalid length. [ 278.697049][ T8555] loop3: detected capacity change from 0 to 64 [ 278.705902][ T8554] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 278.759961][ T8554] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.769656][ T8554] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.424105][ T8573] loop1: detected capacity change from 0 to 4096 [ 279.482360][ T8577] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 279.507905][ T3653] Bluetooth: hci4: unknown advertising packet type: 0x6b [ 279.508032][ T3653] Bluetooth: hci4: unknown advertising packet type: 0x09 [ 279.515838][ T3653] Bluetooth: hci4: unknown advertising packet type: 0x05 [ 279.524855][ T3653] Bluetooth: hci4: Malformed LE Event: 0x02 [ 279.527720][ T8546] loop4: detected capacity change from 0 to 32768 [ 279.598922][ T8546] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1540 (8546) [ 279.618199][ T8546] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 279.628754][ T8546] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 279.637991][ T8546] BTRFS info (device loop4): using free space tree [ 279.686932][ T8546] BTRFS info (device loop4): enabling ssd optimizations [ 279.842446][ T5429] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 280.597209][ T5269] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 280.801505][ T8626] tap0: tun_chr_ioctl cmd 1074025676 [ 280.812891][ T8626] tap0: owner set to 0 [ 280.886895][ T8613] loop1: detected capacity change from 0 to 32768 [ 280.914385][ T8613] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1566 (8613) [ 280.962151][ T8613] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 280.967289][ T5269] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.980866][ T8613] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 281.016333][ T8613] BTRFS info (device loop1): using free space tree [ 281.017310][ T5269] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 281.032365][ T3690] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 281.127442][ T5269] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 281.146926][ T5269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 281.165240][ T5269] usb 1-1: SerialNumber: syz [ 281.277209][ T3690] usb 3-1: Using ep0 maxpacket: 8 [ 281.288063][ T8613] BTRFS info (device loop1): enabling ssd optimizations [ 281.371529][ T8620] loop4: detected capacity change from 0 to 40427 [ 281.403505][ T3690] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 281.407491][ T8620] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 281.423939][ T3690] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 281.460264][ T5269] usb 1-1: 0:2 : does not exist [ 281.477233][ T3690] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 281.492466][ T8620] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 281.530730][ T3690] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 281.536598][ T8620] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x3ffff [ 281.565034][ T5269] usb 1-1: USB disconnect, device number 7 [ 281.576683][ T3690] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 281.593634][ T5411] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 281.614989][ T8620] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x6 [ 281.625841][ T8620] F2FS-fs (loop4): invalid crc value [ 281.630429][ T3690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.698517][ T8620] F2FS-fs (loop4): Found nat_bits in checkpoint [ 281.728937][ T3641] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 281.772684][ T8620] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 281.780275][ T8620] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 281.954658][ T3690] usb 3-1: GET_CAPABILITIES returned 0 [ 281.964768][ T3690] usbtmc 3-1:16.0: can't read capabilities [ 282.001830][ T8620] syz.4.1564: attempt to access beyond end of device [ 282.001830][ T8620] loop4: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 282.131822][ T5429] syz-executor: attempt to access beyond end of device [ 282.131822][ T5429] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 282.187453][ T3690] usb 3-1: USB disconnect, device number 16 [ 282.463177][ T8665] loop0: detected capacity change from 0 to 512 [ 282.576525][ T8665] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #3: comm syz.0.1580: corrupted inode contents [ 282.639549][ T8674] loop4: detected capacity change from 0 to 512 [ 282.665345][ T8674] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.1579: corrupted in-inode xattr [ 282.689345][ T8665] EXT4-fs error (device loop0): ext4_dirty_inode:6086: inode #3: comm syz.0.1580: mark_inode_dirty error [ 282.712762][ T8665] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #3: comm syz.0.1580: corrupted inode contents [ 282.764216][ T8674] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.1579: couldn't read orphan inode 15 (err -117) [ 282.784940][ T8665] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.1580: mark_inode_dirty error [ 282.808793][ T8674] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 282.830608][ T8665] Quota error (device loop0): write_blk: dquota write failed [ 282.852296][ T8665] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 282.878340][ T8665] EXT4-fs error (device loop0): ext4_acquire_dquot:6800: comm syz.0.1580: Failed to acquire dquot type 0 [ 282.929975][ T5429] EXT4-fs (loop4): unmounting filesystem. [ 282.933662][ T8665] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.1580: corrupted inode contents [ 282.970174][ T8665] EXT4-fs error (device loop0): ext4_dirty_inode:6086: inode #16: comm syz.0.1580: mark_inode_dirty error [ 283.030703][ T8665] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.1580: corrupted inode contents [ 283.082638][ T8683] loop3: detected capacity change from 0 to 1024 [ 283.108065][ T8665] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.1580: mark_inode_dirty error [ 283.153108][ T8683] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 283.161356][ T8665] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.1580: corrupted inode contents [ 283.184819][ T8683] EXT4-fs (loop3): orphan cleanup on readonly fs [ 283.193109][ T8683] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz.3.1587: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 283.206914][ T8665] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 283.224643][ T8683] EXT4-fs (loop3): Remounting filesystem read-only [ 283.231861][ T8683] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.1587: couldn't read orphan inode 11 (err -117) [ 283.248067][ T8683] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 283.278617][ T8665] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.1580: corrupted inode contents [ 283.298224][ T8665] EXT4-fs error (device loop0): ext4_truncate:4311: inode #16: comm syz.0.1580: mark_inode_dirty error [ 283.325229][ T8665] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 283.363580][ T6475] EXT4-fs (loop3): unmounting filesystem. [ 283.375922][ T8665] EXT4-fs (loop0): 1 truncate cleaned up [ 283.381911][ T8665] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 283.394099][ T8665] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038 (0x7fffffff) [ 283.561719][ T7944] EXT4-fs (loop0): unmounting filesystem. [ 283.599642][ T8699] loop2: detected capacity change from 0 to 128 [ 283.871668][ T8700] loop3: detected capacity change from 0 to 4096 [ 283.880157][ T8708] loop0: detected capacity change from 0 to 64 [ 283.944666][ T8702] loop4: detected capacity change from 0 to 8192 [ 283.979775][ T8702] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 284.004799][ T8702] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 284.021555][ T8702] REISERFS (device loop4): using ordered data mode [ 284.045265][ T8702] reiserfs: using flush barriers [ 284.085522][ T8715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1600'. [ 284.089520][ T3712] kernel write not supported for file /sg0 (pid: 3712 comm: kworker/1:6) [ 284.154400][ T8717] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1601'. [ 284.158138][ T8702] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 284.184728][ T27] audit: type=1800 audit(1726689458.696:40): pid=8700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1591" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 284.267971][ T8702] REISERFS (device loop4): checking transaction log (loop4) [ 284.315761][ T8702] REISERFS (device loop4): Using r5 hash to sort names [ 284.332955][ T8702] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 284.387251][ T8702] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 285.017389][ T3848] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 285.145516][ T8738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1605'. [ 285.325014][ T8746] loop2: detected capacity change from 0 to 2048 [ 285.331720][ T3848] usb 4-1: Using ep0 maxpacket: 32 [ 285.442085][ T8746] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 285.583911][ T7436] EXT4-fs (loop2): unmounting filesystem. [ 285.637480][ T3848] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 285.646670][ T3848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.669492][ T8763] loop0: detected capacity change from 0 to 8 [ 285.700350][ T3848] usb 4-1: Product: syz [ 285.725683][ T3848] usb 4-1: Manufacturer: syz [ 285.738365][ T8768] loop2: detected capacity change from 0 to 47 [ 285.747017][ T3848] usb 4-1: SerialNumber: syz [ 285.796535][ T3848] usb 4-1: config 0 descriptor?? [ 286.162010][ T8777] vivid-004: disconnect [ 286.198612][ T8775] vivid-004: reconnect [ 286.277739][ T3848] airspy 4-1:0.0: Board ID: 00 [ 286.282589][ T3848] airspy 4-1:0.0: Firmware version: [ 286.415371][ T8766] loop1: detected capacity change from 0 to 32768 [ 286.510829][ T8766] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1622 (8766) [ 286.606211][ T8766] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 286.653692][ T8766] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 286.705785][ T8766] BTRFS info (device loop1): using free space tree [ 286.717347][ T3848] airspy 4-1:0.0: usb_control_msg() failed -71 request 0e [ 286.747475][ T3848] airspy 4-1:0.0: Registered as swradio16 [ 286.769728][ T3848] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 286.793290][ T8792] netlink: 'syz.0.1632': attribute type 1 has an invalid length. [ 286.861104][ T3848] usb 4-1: USB disconnect, device number 11 [ 287.057352][ T8766] BTRFS info (device loop1): enabling ssd optimizations [ 287.211687][ T3641] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 287.576327][ T8822] loop2: detected capacity change from 0 to 1024 [ 287.697319][ T8822] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 287.718059][ T3653] Bluetooth: hci0: unexpected event for opcode 0x0809 [ 287.952547][ T7436] EXT4-fs (loop2): unmounting filesystem. [ 288.018462][ T8838] ALSA: mixer_oss: invalid OSS volume '' [ 288.216811][ T8846] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 288.216811][ T8846] The task syz.3.1646 (8846) triggered the difference, watch for misbehavior. [ 288.286321][ T8848] program syz.4.1647 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.491459][ T8817] loop0: detected capacity change from 0 to 32768 [ 288.562430][ T8817] XFS (loop0): Mounting V5 Filesystem [ 288.651707][ T8817] XFS (loop0): Ending clean mount [ 288.831429][ T7944] XFS (loop0): Unmounting Filesystem [ 288.844340][ T8840] loop1: detected capacity change from 0 to 40427 [ 288.907617][ T8840] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 288.914633][ T8840] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 288.989546][ T8840] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x3ffff [ 289.033528][ T8840] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x6 [ 289.085377][ T8840] F2FS-fs (loop1): invalid crc value [ 289.113927][ T8840] F2FS-fs (loop1): Found nat_bits in checkpoint [ 289.267494][ T8840] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 289.267539][ T8840] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 289.337862][ T8840] syz.1.1645: attempt to access beyond end of device [ 289.337862][ T8840] loop1: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 289.441660][ T3641] syz-executor: attempt to access beyond end of device [ 289.441660][ T3641] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 289.524730][ T8883] loop4: detected capacity change from 0 to 2048 [ 289.610408][ T8883] loop4: p1 < > p4 [ 289.620730][ T8883] loop4: p4 size 8388608 extends beyond EOD, truncated [ 290.121967][ T8899] loop3: detected capacity change from 0 to 512 [ 290.265582][ T8899] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #3: comm syz.3.1667: corrupted inode contents [ 290.295899][ T8899] EXT4-fs error (device loop3): ext4_dirty_inode:6086: inode #3: comm syz.3.1667: mark_inode_dirty error [ 290.348552][ T8899] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #3: comm syz.3.1667: corrupted inode contents [ 290.436477][ T8899] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.1667: mark_inode_dirty error [ 290.465341][ T8899] Quota error (device loop3): write_blk: dquota write failed [ 290.487775][ T8899] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 290.517593][ T8899] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.1667: Failed to acquire dquot type 0 [ 290.524176][ T8916] loop2: detected capacity change from 0 to 64 [ 290.548579][ T8899] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #16: comm syz.3.1667: corrupted inode contents [ 290.583623][ T8899] EXT4-fs error (device loop3): ext4_dirty_inode:6086: inode #16: comm syz.3.1667: mark_inode_dirty error [ 290.677838][ T8899] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #16: comm syz.3.1667: corrupted inode contents [ 290.712948][ T8899] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.1667: mark_inode_dirty error [ 290.750171][ T8899] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #16: comm syz.3.1667: corrupted inode contents [ 290.796825][ T8899] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 290.827300][ T8899] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #16: comm syz.3.1667: corrupted inode contents [ 290.856736][ T8899] EXT4-fs error (device loop3): ext4_truncate:4311: inode #16: comm syz.3.1667: mark_inode_dirty error [ 290.877900][ T8899] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 290.898201][ T8899] EXT4-fs (loop3): 1 truncate cleaned up [ 290.903933][ T8899] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 290.927372][ T8899] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038 (0x7fffffff) [ 291.041272][ T6475] EXT4-fs (loop3): unmounting filesystem. [ 291.082091][ T8911] loop1: detected capacity change from 0 to 32768 [ 291.107730][ T3848] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 291.174421][ T8911] XFS (loop1): Mounting V5 Filesystem [ 291.246301][ T8904] loop0: detected capacity change from 0 to 32768 [ 291.271999][ T8911] XFS (loop1): Ending clean mount [ 291.362260][ T8904] XFS (loop0): Mounting V5 Filesystem [ 291.377532][ T3848] usb 3-1: Using ep0 maxpacket: 32 [ 291.415457][ T3641] XFS (loop1): Unmounting Filesystem [ 291.513605][ T8904] XFS (loop0): Ending clean mount [ 291.519284][ T3848] usb 3-1: config 0 has no interfaces? [ 291.571407][ T8904] XFS (loop0): Quotacheck needed: Please wait. [ 291.657569][ T3848] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 291.686891][ T3848] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 291.696092][ T8904] XFS (loop0): Quotacheck: Done. [ 291.756748][ T3848] usb 3-1: Product: syz [ 291.766895][ T3848] usb 3-1: Manufacturer: syz [ 291.789827][ T27] audit: type=1800 audit(1726689466.306:41): pid=8904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1669" name="bus" dev="loop0" ino=9291 res=0 errno=0 [ 291.838260][ T3848] usb 3-1: config 0 descriptor?? [ 291.897876][ T27] audit: type=1800 audit(1726689466.316:42): pid=8904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1669" name="bus" dev="loop0" ino=9291 res=0 errno=0 [ 291.935499][ T7944] XFS (loop0): Unmounting Filesystem [ 292.168271][ T5269] usb 3-1: USB disconnect, device number 17 [ 292.660234][ T8958] loop1: detected capacity change from 0 to 4096 [ 292.672187][ T8960] loop0: detected capacity change from 0 to 512 [ 292.700359][ T8960] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 292.774681][ T8960] EXT4-fs (loop0): 1 truncate cleaned up [ 292.804564][ T8960] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 292.852065][ T8964] netlink: 'syz.2.1687': attribute type 5 has an invalid length. [ 292.856285][ T8958] ntfs3: loop1: ino=1f, "file2" ntfs_rename [ 293.150414][ T8953] loop4: detected capacity change from 0 to 32768 [ 293.192831][ T8953] XFS: attr2 mount option is deprecated. [ 293.219340][ T8953] XFS: ikeep mount option is deprecated. [ 293.225070][ T8953] XFS: noikeep mount option is deprecated. [ 293.316155][ T8951] loop3: detected capacity change from 0 to 32768 [ 293.338879][ T8951] XFS: attr2 mount option is deprecated. [ 293.361255][ T8951] XFS: ikeep mount option is deprecated. [ 293.401516][ T7944] EXT4-fs (loop0): unmounting filesystem. [ 293.412116][ T8953] XFS (loop4): Mounting V5 Filesystem [ 293.427183][ T8951] XFS: noikeep mount option is deprecated. [ 293.519230][ T8951] XFS (loop3): Mounting V5 Filesystem [ 293.607412][ T8953] XFS (loop4): Ending clean mount [ 293.636076][ T8953] XFS (loop4): Quotacheck needed: Please wait. [ 293.685607][ T8951] XFS (loop3): Ending clean mount [ 293.719053][ T8951] XFS (loop3): Quotacheck needed: Please wait. [ 293.811286][ T8951] XFS (loop3): Quotacheck: Done. [ 293.886662][ T8953] XFS (loop4): Quotacheck: Done. [ 294.093457][ T5429] XFS (loop4): Unmounting Filesystem [ 294.106352][ T6475] XFS (loop3): Unmounting Filesystem [ 294.251912][ T9004] loop0: detected capacity change from 0 to 8192 [ 294.280166][ T9004] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 294.366202][ T9004] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 294.427315][ T9004] REISERFS (device loop0): using ordered data mode [ 294.433890][ T9004] reiserfs: using flush barriers [ 294.522569][ T9004] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 294.593326][ T9004] REISERFS (device loop0): checking transaction log (loop0) [ 294.658140][ T9004] REISERFS (device loop0): Using r5 hash to sort names [ 294.665079][ T9004] REISERFS (device loop0): using 3.5.x disk format [ 294.705464][ T9004] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 295.095216][ T8974] loop2: detected capacity change from 0 to 40427 [ 295.139691][ T8974] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 295.187443][ T8974] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 295.236488][ T8974] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x3ffff [ 295.256120][ T8974] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x6 [ 295.283437][ T8974] F2FS-fs (loop2): invalid crc value [ 295.355111][ T8974] F2FS-fs (loop2): Found nat_bits in checkpoint [ 295.492871][ T9040] loop1: detected capacity change from 0 to 256 [ 295.569465][ T8974] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 295.596990][ T8974] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 295.746196][ T8974] syz.2.1690: attempt to access beyond end of device [ 295.746196][ T8974] loop2: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 295.895139][ T9050] loop1: detected capacity change from 0 to 164 [ 296.008977][ T102] kworker/u4:4: attempt to access beyond end of device [ 296.008977][ T102] loop2: rw=1048577, sector=53248, nr_sectors = 8 limit=40427 [ 296.102007][ T7436] syz-executor: attempt to access beyond end of device [ 296.102007][ T7436] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 296.260293][ T9051] loop4: detected capacity change from 0 to 4096 [ 296.368046][ T9051] ntfs: volume version 3.1. [ 296.533808][ T9024] loop3: detected capacity change from 0 to 32768 [ 296.651845][ T9024] XFS (loop3): Mounting V5 Filesystem [ 296.750924][ T9024] XFS (loop3): Ending clean mount [ 296.753268][ T9024] XFS (loop3): Quotacheck needed: Please wait. [ 296.889009][ T9024] XFS (loop3): Quotacheck: Done. [ 297.022444][ T6475] XFS (loop3): Unmounting Filesystem [ 297.116648][ T9071] loop1: detected capacity change from 0 to 4096 [ 297.177254][ T9071] ntfs: (device loop1): map_mft_record_page(): Mft record 0xa is corrupt. Run chkdsk. [ 297.194656][ T9071] ntfs: (device loop1): map_mft_record(): Failed with error code 5. [ 297.237929][ T9071] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 297.315521][ T9071] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 297.347281][ T9071] ntfs: (device loop1): map_mft_record_page(): Mft record 0x4 is corrupt. Run chkdsk. [ 297.371291][ T9084] loop4: detected capacity change from 0 to 256 [ 297.389881][ T9071] ntfs: (device loop1): map_mft_record(): Failed with error code 5. [ 297.399832][ T9071] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x4 as bad. Run chkdsk. [ 297.415484][ T9071] ntfs: (device loop1): load_and_init_attrdef(): Failed to initialize attribute definition table. [ 297.427755][ T9071] ntfs: (device loop1): ntfs_fill_super(): Failed to load system files. [ 297.473147][ T9084] FAT-fs (loop4): Directory bread(block 64) failed [ 297.521717][ T9084] FAT-fs (loop4): Directory bread(block 65) failed [ 297.530523][ T9084] FAT-fs (loop4): Directory bread(block 66) failed [ 297.586659][ T9084] FAT-fs (loop4): Directory bread(block 67) failed [ 297.593772][ T9084] FAT-fs (loop4): Directory bread(block 68) failed [ 297.616089][ T9084] FAT-fs (loop4): Directory bread(block 69) failed [ 297.632634][ T9084] FAT-fs (loop4): Directory bread(block 70) failed [ 297.651784][ T9084] FAT-fs (loop4): Directory bread(block 71) failed [ 297.666184][ T9084] FAT-fs (loop4): Directory bread(block 72) failed [ 297.698172][ T9084] FAT-fs (loop4): Directory bread(block 73) failed [ 298.620128][ T9120] tap0: tun_chr_ioctl cmd 1074025677 [ 298.625809][ T9120] tap0: linktype set to 780 [ 298.667224][ T3725] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 298.813721][ T9126] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1734'. [ 298.907213][ T3725] usb 5-1: Using ep0 maxpacket: 8 [ 299.037734][ T3725] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 299.058038][ T3725] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 299.089675][ T3725] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 299.127544][ T3725] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 299.191893][ T3725] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 299.245547][ T3725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.281573][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1744'. [ 299.490929][ T9149] loop0: detected capacity change from 0 to 4096 [ 299.567590][ T3725] usb 5-1: GET_CAPABILITIES returned 0 [ 299.573234][ T3725] usbtmc 5-1:16.0: can't read capabilities [ 299.679752][ T9149] ntfs3: loop0: failed to convert "0080" to cp936 [ 299.762874][ T9149] ntfs3: loop0: failed to convert name for inode 1e. [ 299.791255][ T9113] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 299.819355][ T3690] usb 5-1: USB disconnect, device number 11 [ 300.071835][ T9163] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1750'. [ 301.009207][ T9185] loop0: detected capacity change from 0 to 1024 [ 301.033370][ T9188] loop4: detected capacity change from 0 to 256 [ 301.077245][ T9185] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 301.088162][ T9188] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 301.146754][ T9185] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 301.365934][ T7944] EXT4-fs (loop0): unmounting filesystem. [ 301.948097][ T9214] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1775'. [ 302.086254][ T9182] loop1: detected capacity change from 0 to 32768 [ 302.111048][ T9220] loop4: detected capacity change from 0 to 512 [ 302.125420][ T9220] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 302.140649][ T9182] JBD2: Ignoring recovery information on journal [ 302.199231][ T9220] EXT4-fs (loop4): 1 truncate cleaned up [ 302.204949][ T9220] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 302.258221][ T9182] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 302.506378][ T3641] ocfs2: Unmounting device (7,1) on (node local) [ 302.513024][ T5269] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 302.595059][ T5429] EXT4-fs (loop4): unmounting filesystem. [ 302.743729][ T9233] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1783'. [ 302.887349][ T5269] usb 1-1: config 0 interface 0 has no altsetting 0 [ 302.894047][ T5269] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 302.914543][ T5269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.936223][ T9238] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1782'. [ 302.939847][ T27] audit: type=1326 audit(1726689477.456:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.4.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4a77def9 code=0x7ffc0000 [ 302.976234][ T5269] usb 1-1: config 0 descriptor?? [ 303.022192][ T27] audit: type=1326 audit(1726689477.496:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.4.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1a4a77def9 code=0x7ffc0000 [ 303.131663][ T27] audit: type=1326 audit(1726689477.496:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.4.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4a77def9 code=0x7ffc0000 [ 303.184180][ T27] audit: type=1326 audit(1726689477.496:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.4.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4a77def9 code=0x7ffc0000 [ 303.217406][ T27] audit: type=1326 audit(1726689477.496:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.4.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f1a4a77def9 code=0x7ffc0000 [ 303.240469][ T27] audit: type=1326 audit(1726689477.496:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.4.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4a77def9 code=0x7ffc0000 [ 303.279088][ T27] audit: type=1326 audit(1726689477.496:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.4.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4a77def9 code=0x7ffc0000 [ 303.379941][ T9252] loop4: detected capacity change from 0 to 512 [ 303.386420][ T27] audit: type=1326 audit(1726689477.496:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.4.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1a4a77def9 code=0x7ffc0000 [ 303.444306][ T9252] EXT4-fs: Ignoring removed i_version option [ 303.482904][ T9252] EXT4-fs: Ignoring removed nobh option [ 303.507200][ T27] audit: type=1326 audit(1726689477.496:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.4.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4a77def9 code=0x7ffc0000 [ 303.542184][ T9252] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 303.572698][ T9252] EXT4-fs (loop4): 1 truncate cleaned up [ 303.580998][ T9252] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 303.594614][ T27] audit: type=1326 audit(1726689477.496:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.4.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4a77def9 code=0x7ffc0000 [ 303.738472][ T5429] EXT4-fs (loop4): unmounting filesystem. [ 303.997282][ T5269] video4linux radio32: keene_cmd_main failed (-71) [ 304.004745][ T5269] radio-keene 1-1:0.0: V4L2 device registered as radio32 [ 304.049093][ T5269] usb 1-1: USB disconnect, device number 8 [ 304.461901][ T9273] loop2: detected capacity change from 0 to 1024 [ 304.465329][ T9249] loop3: detected capacity change from 0 to 40427 [ 304.499148][ T9249] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 304.517623][ T9249] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 304.581105][ T9249] F2FS-fs (loop3): Found nat_bits in checkpoint [ 304.828064][ T9249] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 304.835252][ T9249] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 305.051340][ T9287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1804'. [ 305.253024][ T9289] loop2: detected capacity change from 0 to 2048 [ 305.311859][ T9289] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 305.333553][ T9289] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038 (0x7fffffff) [ 305.482439][ T9289] fs-verity (loop2, inode 13): Unknown hash algorithm number: 0 [ 305.603661][ T7436] EXT4-fs (loop2): unmounting filesystem. [ 306.027239][ T3848] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 306.085991][ T9311] netlink: 'syz.3.1815': attribute type 25 has an invalid length. [ 306.228193][ T9315] loop4: detected capacity change from 0 to 512 [ 306.246758][ T9315] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 306.310227][ T9315] EXT4-fs (loop4): 1 orphan inode deleted [ 306.316037][ T9315] EXT4-fs (loop4): 1 truncate cleaned up [ 306.362923][ T9315] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 306.496526][ T9295] loop1: detected capacity change from 0 to 32768 [ 306.538250][ T9295] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.1808 (9295) [ 306.553436][ T5429] EXT4-fs (loop4): unmounting filesystem. [ 306.573520][ T9295] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 306.618340][ T3848] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 306.649366][ T9295] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 306.667251][ T3848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.694317][ T9295] BTRFS info (device loop1): using free space tree [ 306.707445][ T3848] usb 3-1: Product: syz [ 306.727964][ T3848] usb 3-1: Manufacturer: syz [ 306.740556][ T3848] usb 3-1: SerialNumber: syz [ 306.787659][ T3848] usb 3-1: config 0 descriptor?? [ 307.022556][ T9354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1828'. [ 307.042972][ T9295] BTRFS info (device loop1): enabling ssd optimizations [ 307.107743][ T9354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1828'. [ 307.186144][ T3641] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 307.307673][ T3848] usb 3-1: Firmware: major: 0, minor: 203, hardware type: UNKNOWN (143) [ 307.364364][ T9364] loop3: detected capacity change from 0 to 512 [ 307.489267][ T9364] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 307.520654][ T9364] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038 (0x7fffffff) [ 307.556954][ T3848] usb 3-1: failed to fetch extended address, random address set [ 307.576937][ T3848] usb 3-1: atusb_probe: initialization failed, error = -524 [ 307.648427][ T9373] tap0: tun_chr_ioctl cmd 2147767507 [ 307.657041][ T3848] atusb: probe of 3-1:0.0 failed with error -524 [ 307.669472][ T9364] EXT4-fs (loop3): shut down requested (1) [ 307.708370][ T3848] usb 3-1: USB disconnect, device number 18 [ 307.806343][ T6475] EXT4-fs (loop3): unmounting filesystem. [ 308.654669][ T9391] loop2: detected capacity change from 0 to 2048 [ 308.705898][ T9391] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 308.796840][ T9392] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 309.114502][ T9396] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.124890][ T9396] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.134115][ T9396] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.142968][ T9396] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.174065][ T9396] device vxlan0 entered promiscuous mode [ 309.192011][ T9396] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.201245][ T9396] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.210582][ T9396] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.219623][ T9396] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.308451][ T9381] loop0: detected capacity change from 0 to 40427 [ 309.381505][ T9381] F2FS-fs (loop0): invalid crc value [ 309.472126][ T9381] F2FS-fs (loop0): Found nat_bits in checkpoint [ 309.491980][ T9410] Cannot find set identified by id 0 to match [ 309.656751][ T9381] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 309.881770][ T9417] loop4: detected capacity change from 0 to 512 [ 309.933615][ T7944] syz-executor: attempt to access beyond end of device [ 309.933615][ T7944] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 309.970447][ T9417] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 309.987754][ T9417] ext4 filesystem being mounted at /255/file0 supports timestamps until 2038 (0x7fffffff) [ 310.119544][ T5429] EXT4-fs (loop4): unmounting filesystem. [ 310.507476][ T9429] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 310.536833][ T9403] loop1: detected capacity change from 0 to 32768 [ 310.634206][ T9427] loop3: detected capacity change from 0 to 4096 [ 310.641998][ T9427] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 310.677370][ T9403] XFS (loop1): Mounting V5 Filesystem [ 310.771244][ T9427] ntfs3: loop3: ino=1b, "file0" attr_set_size [ 310.815220][ T9427] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 310.887430][ T9403] XFS (loop1): Ending clean mount [ 311.048808][ T3641] XFS (loop1): Unmounting Filesystem [ 311.247414][ T3848] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 311.271075][ T9453] tun0: tun_chr_ioctl cmd 1074025677 [ 311.285201][ T9453] tun0: linktype set to 821 [ 311.559065][ T9464] loop1: detected capacity change from 0 to 128 [ 311.595943][ T9464] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 311.617346][ T9464] ext4 filesystem being mounted at /373/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 311.735790][ T9464] fscrypt (loop1, inode 12): Unsupported encryption flags (0x08) [ 311.747683][ T3848] usb 1-1: unable to get BOS descriptor or descriptor too short [ 311.786071][ T3641] EXT4-fs (loop1): unmounting filesystem. [ 311.797572][ T3848] usb 1-1: not running at top speed; connect to a high speed hub [ 311.887435][ T3848] usb 1-1: config 1 has an invalid interface descriptor of length 4, skipping [ 311.901362][ T3848] usb 1-1: config 1 has an invalid descriptor of length 192, skipping remainder of the config [ 311.915156][ T3848] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 312.016478][ T9451] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 312.079825][ T3848] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0301, bcdDevice= 0.40 [ 312.092526][ T3848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.102768][ T3848] usb 1-1: Product: syz [ 312.113760][ T3848] usb 1-1: Manufacturer: syz [ 312.119449][ T3848] usb 1-1: SerialNumber: syz [ 312.254625][ T9484] loop3: detected capacity change from 0 to 1764 [ 312.303709][ T9486] loop4: detected capacity change from 0 to 256 [ 312.347609][ T9486] FAT-fs (loop4): Directory bread(block 1285) failed [ 312.436524][ T3848] usb 1-1: USB disconnect, device number 9 [ 312.443378][ T9486] FAT-fs (loop4): FAT read failed (blocknr 1281) [ 312.590904][ T9492] loop2: detected capacity change from 0 to 128 [ 312.616589][ T9492] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 312.627252][ T9492] ext4 filesystem being mounted at /131/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 312.664641][ T9495] loop4: detected capacity change from 0 to 2048 [ 312.726306][ T9495] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 312.838824][ T7436] EXT4-fs (loop2): unmounting filesystem. [ 313.077322][ T3684] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 313.084032][ T3848] kernel read not supported for file /rfkill (pid: 3848 comm: kworker/1:10) [ 313.295688][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1890'. [ 313.327330][ T3684] usb 4-1: Using ep0 maxpacket: 8 [ 313.376664][ T9518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1892'. [ 313.462889][ T3684] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 313.484657][ T3684] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 313.506248][ T3684] usb 4-1: config 1 has no interface number 1 [ 313.516684][ T3684] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 313.544467][ T3684] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 313.594063][ T27] audit: type=1326 audit(1726689488.106:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9519 comm="syz.0.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe40457def9 code=0x7ffc0000 [ 313.683329][ T27] audit: type=1326 audit(1726689488.106:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9519 comm="syz.0.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe40457def9 code=0x7ffc0000 [ 313.747499][ T3684] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 313.760002][ T3684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.799090][ T3684] usb 4-1: Product: syz [ 313.803313][ T3684] usb 4-1: Manufacturer: syz [ 313.836444][ T27] audit: type=1326 audit(1726689488.136:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9519 comm="syz.0.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fe40457def9 code=0x7ffc0000 [ 313.839619][ T3684] usb 4-1: SerialNumber: syz [ 313.914620][ T27] audit: type=1326 audit(1726689488.136:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9519 comm="syz.0.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe40457def9 code=0x7ffc0000 [ 314.033760][ T27] audit: type=1326 audit(1726689488.136:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9519 comm="syz.0.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe40457def9 code=0x7ffc0000 [ 314.125974][ T9539] loop1: detected capacity change from 0 to 8 [ 314.129980][ T9537] loop0: detected capacity change from 0 to 512 [ 314.148111][ T9535] loop2: detected capacity change from 0 to 4096 [ 314.170898][ T9535] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 314.193140][ T9535] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 314.226988][ T9542] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 314.228945][ T9537] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #3: comm syz.0.1900: corrupted inode contents [ 314.244007][ T3684] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 314.250414][ T9537] EXT4-fs error (device loop0): ext4_dirty_inode:6086: inode #3: comm syz.0.1900: mark_inode_dirty error [ 314.280301][ T9537] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #3: comm syz.0.1900: corrupted inode contents [ 314.298550][ T9537] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.1900: mark_inode_dirty error [ 314.311084][ T9537] Quota error (device loop0): write_blk: dquota write failed [ 314.319161][ T9537] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 314.329782][ T9537] EXT4-fs error (device loop0): ext4_acquire_dquot:6800: comm syz.0.1900: Failed to acquire dquot type 0 [ 314.347112][ T9537] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.1900: corrupted inode contents [ 314.359627][ T9537] EXT4-fs error (device loop0): ext4_dirty_inode:6086: inode #16: comm syz.0.1900: mark_inode_dirty error [ 314.372775][ T9537] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.1900: corrupted inode contents [ 314.389006][ T9537] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.1900: mark_inode_dirty error [ 314.414309][ T9537] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.1900: corrupted inode contents [ 314.417527][ T3684] usb 4-1: USB disconnect, device number 12 [ 314.438974][ T9537] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 314.494214][ T9537] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.1900: corrupted inode contents [ 314.548162][ T9537] EXT4-fs error (device loop0): ext4_truncate:4311: inode #16: comm syz.0.1900: mark_inode_dirty error [ 314.601447][ T9537] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 314.638145][ T9537] EXT4-fs (loop0): 1 truncate cleaned up [ 314.643878][ T9537] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 314.657457][ T9537] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038 (0x7fffffff) [ 314.761304][ T7944] EXT4-fs (loop0): unmounting filesystem. [ 315.021061][ T9550] loop4: detected capacity change from 0 to 1024 [ 315.202896][ T3720] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 315.439354][ T5268] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 315.590304][ T3720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.612929][ T3720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.633381][ T3720] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 315.640442][ T9563] loop4: detected capacity change from 0 to 164 [ 315.653642][ T3720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.681994][ T3720] usb 1-1: config 0 descriptor?? [ 315.743144][ T3650] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 315.767620][ T3650] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 315.782302][ T3650] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 315.790531][ T3650] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 315.798655][ T3650] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 315.806008][ T3650] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 315.980951][ T5268] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=3b.74 [ 315.999896][ T5268] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.021057][ T5268] usb 4-1: Product: syz [ 316.025304][ T5268] usb 4-1: Manufacturer: syz [ 316.035525][ T9564] chnl_net:caif_netlink_parms(): no params data found [ 316.043814][ T5268] usb 4-1: SerialNumber: syz [ 316.073284][ T5268] usb 4-1: config 0 descriptor?? [ 316.152259][ T5268] as10x_usb: device has been detected [ 316.174485][ T5268] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 316.194906][ T3720] konepure 0003:1E7D:2DB4.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.0-1/input0 [ 316.250854][ T5268] usb 4-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 316.316076][ T9564] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.346329][ T9561] loop1: detected capacity change from 0 to 32768 [ 316.353041][ T9564] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.383041][ T5268] as10x_usb: error during firmware upload part1 [ 316.390496][ T5268] Registered device PCTV Systems picoStick (74e) [ 316.412033][ T3684] usb 1-1: USB disconnect, device number 10 [ 316.413219][ T9564] device bridge_slave_0 entered promiscuous mode [ 316.439087][ T5268] usb 4-1: USB disconnect, device number 13 [ 316.507480][ T5268] Unregistered device PCTV Systems picoStick (74e) [ 316.512275][ T5268] as10x_usb: device has been disconnected [ 316.535376][ T9564] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.545305][ T102] read_mapping_page failed! [ 316.547296][ T9564] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.557547][ T102] ERROR: (device loop1): txCommit: [ 316.557547][ T102] [ 316.559636][ T9564] device bridge_slave_1 entered promiscuous mode [ 316.572773][ T102] ERROR: (device loop1): remounting filesystem as read-only [ 316.580727][ T102] jfs_write_inode: jfs_commit_inode failed! [ 316.632483][ T9564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.645654][ T9564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.683637][ T9564] team0: Port device team_slave_0 added [ 316.695383][ T9564] team0: Port device team_slave_1 added [ 316.739479][ T9564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.746904][ T9564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.774952][ T9564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.787325][ T9564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.794358][ T9564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.820611][ T9564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.857556][ T9564] device hsr_slave_0 entered promiscuous mode [ 316.864390][ T9564] device hsr_slave_1 entered promiscuous mode [ 316.871385][ T9564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.879352][ T9564] Cannot create hsr debugfs directory [ 317.098799][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.195783][ T9564] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.364268][ T9585] loop4: detected capacity change from 0 to 2048 [ 317.376688][ T9564] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.410620][ T9587] loop3: detected capacity change from 0 to 512 [ 317.431149][ T9587] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 317.441931][ T9585] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 317.465329][ T9587] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.1923: casefold flag without casefold feature [ 317.504211][ T9587] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.1923: couldn't read orphan inode 15 (err -117) [ 317.556848][ T9587] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 317.574256][ T9564] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.621865][ T5429] EXT4-fs (loop4): unmounting filesystem. [ 317.646996][ T9587] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.1923: Directory hole found for htree leaf block 0 [ 317.735447][ T6475] EXT4-fs (loop3): unmounting filesystem. [ 317.774020][ T9564] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.903438][ T3653] Bluetooth: hci1: command tx timeout [ 317.957618][ T9583] loop1: detected capacity change from 0 to 32768 [ 317.991400][ T9583] XFS (loop1): Mounting V5 Filesystem [ 318.148643][ T9583] XFS (loop1): Ending clean mount [ 318.293646][ T9607] loop3: detected capacity change from 0 to 512 [ 318.320755][ T9564] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 318.337975][ T9607] ext4: Unknown parameter 'fowner<00000000000000000000' [ 318.350931][ T9564] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 318.371241][ T9564] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 318.397722][ T9583] syz.1.1922 (9583) used greatest stack depth: 19240 bytes left [ 318.410752][ T9564] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 318.444746][ T3641] XFS (loop1): Unmounting Filesystem [ 318.469721][ T9613] tap0: tun_chr_ioctl cmd 1074025677 [ 318.486076][ T9613] tap0: linktype set to 0 [ 318.798090][ T9564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.861370][ T9564] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.884789][ T9602] loop4: detected capacity change from 0 to 32768 [ 318.898168][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 318.916549][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 318.961769][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 319.003154][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 319.057033][ T5411] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.064252][ T5411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.115202][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 319.171439][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 319.221356][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 319.251220][ T5411] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.258434][ T5411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.364075][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 319.398364][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 319.469351][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 319.522686][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 319.539894][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 319.561752][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 319.581297][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 319.597218][ T3720] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 319.615911][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 319.625681][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 319.653169][ T9564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.715714][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 319.735092][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 319.791795][ T9639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1940'. [ 319.887362][ T3720] usb 1-1: Using ep0 maxpacket: 32 [ 319.977463][ T3653] Bluetooth: hci1: command tx timeout [ 320.017635][ T3720] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 320.178455][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 320.206229][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 320.217351][ T3720] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 320.226447][ T3720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.248526][ T3720] usb 1-1: Product: syz [ 320.252857][ T3720] usb 1-1: Manufacturer: syz [ 320.257352][ T9564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.268241][ T9632] loop3: detected capacity change from 0 to 32768 [ 320.268427][ T3720] usb 1-1: SerialNumber: syz [ 320.308764][ T3720] usb 1-1: config 0 descriptor?? [ 320.326577][ T9632] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop3 scanned by syz.3.1938 (9632) [ 320.347815][ T9630] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 320.372492][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 320.376282][ T9632] BTRFS info (device loop3): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 320.392482][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 320.401993][ T3720] hub 1-1:0.0: bad descriptor, ignoring hub [ 320.404725][ T9632] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 320.408798][ T3720] hub: probe of 1-1:0.0 failed with error -5 [ 320.428515][ T9632] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 320.451832][ T9564] device veth0_vlan entered promiscuous mode [ 320.469597][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 320.478995][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 320.486796][ T3720] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input37 [ 320.487275][ T9632] BTRFS info (device loop3): use lzo compression, level 0 [ 320.524486][ T9564] device veth1_vlan entered promiscuous mode [ 320.548189][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 320.557480][ T9632] BTRFS info (device loop3): using free space tree [ 320.565695][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 320.584688][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 320.649582][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 320.658180][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 320.668635][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 320.735702][ T9564] device veth0_macvtap entered promiscuous mode [ 320.776137][ T9564] device veth1_macvtap entered promiscuous mode [ 320.785036][ T3684] usb 1-1: USB disconnect, device number 11 [ 320.881308][ T9564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.881322][ T9632] BTRFS info (device loop3): enabling ssd optimizations [ 320.909514][ T9564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.925075][ T9564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.963583][ T9564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.975433][ T9564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.993119][ T9564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.016452][ T9564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.037279][ T9564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.056715][ T9564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.075123][ T9564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.096499][ T9564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.108885][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 321.118944][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 321.138683][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 321.169405][ T9564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.207121][ T9564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.227721][ T9564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.247192][ T9564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.282967][ T9564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.292830][ T9670] loop4: detected capacity change from 0 to 8192 [ 321.304440][ T9564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.333635][ T9670] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 321.340882][ T9564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.367163][ T9670] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 321.404037][ T9670] REISERFS (device loop4): using ordered data mode [ 321.417098][ T9670] reiserfs: using flush barriers [ 321.429479][ T9670] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 321.444449][ T9564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.467505][ T9670] REISERFS (device loop4): checking transaction log (loop4) [ 321.477279][ T9564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.489205][ T9564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.507561][ T9670] REISERFS (device loop4): Using r5 hash to sort names [ 321.515033][ T9670] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 321.525595][ T9564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.534188][ T9677] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1945'. [ 321.600601][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 321.611222][ T6475] BTRFS info (device loop3): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 321.638289][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 321.671333][ T9564] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.689454][ T9564] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.708487][ T9564] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.725279][ T9564] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.058971][ T3653] Bluetooth: hci1: command tx timeout [ 322.211751][ T3668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.268817][ T3707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.272400][ T3668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.294665][ T3707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.327329][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 322.368370][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 322.755588][ T9705] netlink: 'syz.3.1955': attribute type 19 has an invalid length. [ 322.785348][ T9702] program syz.4.1953 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 323.490541][ T9724] loop2: detected capacity change from 0 to 1024 [ 323.523254][ T9724] EXT4-fs: Ignoring removed orlov option [ 323.537711][ T9724] EXT4-fs: Ignoring removed nomblk_io_submit option [ 323.619282][ T9724] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 323.710204][ T9724] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2738: inode #14: comm syz.2.1964: corrupted in-inode xattr [ 323.798491][ T9724] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #14: comm syz.2.1964: attempt to clear invalid blocks 1634560256 len 1 [ 323.936045][ T9738] loop3: detected capacity change from 0 to 4096 [ 323.953678][ T9564] EXT4-fs (loop2): unmounting filesystem. [ 323.995221][ T9738] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 324.138281][ T3653] Bluetooth: hci1: command tx timeout [ 324.141441][ T9742] loop2: detected capacity change from 0 to 1024 [ 324.355382][ T11] hfsplus: b-tree write err: -5, ino 4 [ 324.537613][ T9748] loop3: detected capacity change from 0 to 128 [ 324.592277][ T27] audit: type=1800 audit(1726689499.106:58): pid=9748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1974" name="bus" dev="loop3" ino=1048707 res=0 errno=0 [ 324.898231][ T9731] loop0: detected capacity change from 0 to 32768 [ 324.944457][ T9731] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1967 (9731) [ 325.006826][ T9736] loop4: detected capacity change from 0 to 32768 [ 325.032153][ T9731] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 325.067241][ T9731] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 325.076023][ T9731] BTRFS info (device loop0): use no compression [ 325.126607][ T9731] BTRFS info (device loop0): force zlib compression, level 3 [ 325.172985][ T9731] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 325.217134][ T9731] BTRFS info (device loop0): use lzo compression, level 0 [ 325.224333][ T9731] BTRFS info (device loop0): turning on flush-on-commit [ 325.267133][ T9731] BTRFS info (device loop0): enabling auto defrag [ 325.287164][ T9731] BTRFS info (device loop0): using free space tree [ 325.509705][ T9731] BTRFS info (device loop0): enabling ssd optimizations [ 325.605430][ T9744] loop1: detected capacity change from 0 to 32768 [ 325.633930][ T7944] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 325.661208][ T9746] loop2: detected capacity change from 0 to 40427 [ 325.695621][ T9746] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 325.703901][ T9746] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 325.731725][ T9744] XFS (loop1): Mounting V5 Filesystem [ 325.737576][ T9746] F2FS-fs (loop2): invalid crc value [ 325.832856][ T9746] F2FS-fs (loop2): Found nat_bits in checkpoint [ 326.004142][ T9746] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 326.031947][ T9746] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 326.204160][ T9564] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 326.204190][ T9564] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 326.262937][ T9564] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 326.289773][ T9564] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 326.304413][ T9744] XFS (loop1): Ending clean mount [ 326.337130][ T9564] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 326.337160][ T9564] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 326.347308][ T9564] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 326.524086][ T9798] mkiss: ax0: crc mode is auto. [ 326.768270][ T3641] XFS (loop1): Unmounting Filesystem [ 326.845902][ T9804] loop0: detected capacity change from 0 to 64 [ 327.127475][ T9809] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 327.634018][ T9819] loop2: detected capacity change from 0 to 1024 [ 327.684885][ T9819] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 327.942857][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1997'. [ 328.507231][ T5260] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 328.777266][ T5260] usb 5-1: Using ep0 maxpacket: 32 [ 328.897524][ T5260] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 328.905809][ T5260] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 328.969259][ T5260] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 329.009255][ T5260] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 329.021485][ T9858] loop3: detected capacity change from 0 to 256 [ 329.056285][ T5260] usb 5-1: config 0 interface 0 has no altsetting 0 [ 329.125363][ T9827] loop1: detected capacity change from 0 to 32768 [ 329.136824][ T9827] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1987 (9827) [ 329.159943][ T9827] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 329.177797][ T9827] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 329.232031][ T9827] BTRFS info (device loop1): using free space tree [ 329.247646][ T5260] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 329.278055][ T5260] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 329.286549][ T5260] usb 5-1: Product: syz [ 329.305169][ T9864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2012'. [ 329.335588][ T5260] usb 5-1: Manufacturer: syz [ 329.355961][ T5260] usb 5-1: SerialNumber: syz [ 329.379126][ T5260] usb 5-1: config 0 descriptor?? [ 329.419345][ T5260] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 329.517939][ T5260] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 329.526142][ T9827] BTRFS info (device loop1): enabling ssd optimizations [ 329.615254][ T27] audit: type=1800 audit(1726689504.126:59): pid=9827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1987" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 329.682263][ T5264] usb 5-1: USB disconnect, device number 12 [ 329.688310][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 329.730113][ T9848] loop0: detected capacity change from 0 to 32768 [ 329.743760][ T5264] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 329.756068][ T9848] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2006 (9848) [ 329.881467][ T9848] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 329.937278][ T9848] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 329.964158][ T3641] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 329.972060][ T9856] loop2: detected capacity change from 0 to 32768 [ 329.981731][ T9848] BTRFS info (device loop0): using free space tree [ 330.010842][ T9856] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.2010 (9856) [ 330.070885][ T3743] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (3743) [ 330.263406][ T9898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2017'. [ 330.297346][ T3653] Bluetooth: hci1: command 0x0406 tx timeout [ 330.315748][ T9901] loop2: detected capacity change from 0 to 128 [ 330.323879][ T9901] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 330.343576][ T9901] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 330.347722][ T9898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2017'. [ 330.433774][ T9848] BTRFS info (device loop0): enabling ssd optimizations [ 330.665776][ T9910] loop3: detected capacity change from 0 to 128 [ 331.023651][ T7944] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 331.069516][ T9916] input: syz1 as /devices/virtual/input/input39 [ 331.718309][ T9930] netlink: 'syz.0.2027': attribute type 4 has an invalid length. [ 331.974723][ T9934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2030'. [ 332.169495][ T9914] loop2: detected capacity change from 0 to 32768 [ 332.214304][ T9914] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2021 (9914) [ 332.293879][ T9914] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 332.327334][ T9914] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 332.356436][ T9914] BTRFS info (device loop2): using free space tree [ 332.434968][ T9945] loop4: detected capacity change from 0 to 4096 [ 332.524274][ T9945] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 332.575850][ T9920] loop3: detected capacity change from 0 to 32768 [ 332.596855][ T9945] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 332.605771][ T9945] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 332.614495][ T9914] BTRFS info (device loop2): enabling ssd optimizations [ 332.614604][ T9945] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 332.630811][ T9945] ntfs3: loop4: try to read out of volume at offset 0x3fffffc1c00 [ 332.639423][ T9945] ntfs3: loop4: try to read out of volume at offset 0x3fffffc2c00 [ 332.649925][ T9945] ntfs3: loop4: try to read out of volume at offset 0x3fffffc4c00 [ 332.701859][ T9920] XFS (loop3): Mounting V5 Filesystem [ 332.723944][ T9945] ntfs3: loop4: try to read out of volume at offset 0x3fffffc8c00 [ 332.731966][ T9945] ntfs3: loop4: try to read out of volume at offset 0x3fffffd0c00 [ 332.747701][ T9945] ntfs3: loop4: try to read out of volume at offset 0x3fffffe0c00 [ 332.858343][ T9920] XFS (loop3): Ending clean mount [ 332.907922][ T9920] XFS (loop3): Quotacheck needed: Please wait. [ 332.959798][ T9564] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 332.990025][ T9920] XFS (loop3): Quotacheck: Done. [ 333.050567][ T9920] XFS (loop3): User initiated shutdown received. [ 333.057466][ T9920] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 333.073332][ T9920] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 333.496573][ T9981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2041'. [ 333.535550][ T6475] XFS (loop3): Unmounting Filesystem [ 333.774440][ T9988] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2043'. [ 333.803735][ T9988] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2043'. [ 334.173363][T10000] loop0: detected capacity change from 0 to 256 [ 334.204179][T10000] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 334.216795][T10000] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 334.297365][ T5260] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 334.353521][T10004] loop3: detected capacity change from 0 to 256 [ 334.537226][ T5260] usb 2-1: Using ep0 maxpacket: 16 [ 334.658833][ T5260] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.697473][ T5260] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.724301][ T5260] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 334.784215][ T5260] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 334.811863][ T5260] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.831994][T10016] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 334.836911][ T5260] usb 2-1: config 0 descriptor?? [ 335.379736][ T5260] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 335.408953][ T5260] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 335.416265][ T5260] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 335.439899][ T5260] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 335.464002][ T5260] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 335.479108][ T5260] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 335.486429][ T5260] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 335.520463][ T5260] microsoft 0003:045E:07DA.0015: No inputs registered, leaving [ 335.548885][ T5260] microsoft 0003:045E:07DA.0015: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 335.603581][ T5260] microsoft 0003:045E:07DA.0015: no inputs found [ 335.613468][ T5260] microsoft 0003:045E:07DA.0015: could not initialize ff, continuing anyway [ 335.667467][ T5260] usb 2-1: USB disconnect, device number 15 [ 335.895275][T10043] loop3: detected capacity change from 0 to 136 [ 336.362079][T10048] loop0: detected capacity change from 0 to 32768 [ 337.394769][T10067] loop1: detected capacity change from 0 to 32768 [ 337.503143][T10067] XFS (loop1): Mounting V5 Filesystem [ 337.599780][T10071] loop0: detected capacity change from 0 to 32768 [ 337.608069][T10067] XFS (loop1): Ending clean mount [ 337.641410][T10071] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.2079 (10071) [ 337.728875][T10071] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 337.788457][T10071] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 337.827205][T10071] BTRFS info (device loop0): setting nodatacow, compression disabled [ 337.847531][T10071] BTRFS info (device loop0): max_inline at 0 [ 337.853603][T10071] BTRFS info (device loop0): turning off barriers [ 337.887423][T10071] BTRFS info (device loop0): enabling ssd optimizations [ 337.894436][T10071] BTRFS info (device loop0): using spread ssd allocation scheme [ 337.922046][ T3641] XFS (loop1): Unmounting Filesystem [ 337.953622][T10071] BTRFS info (device loop0): not using ssd optimizations [ 337.970452][T10071] BTRFS info (device loop0): not using spread ssd allocation scheme [ 337.991141][T10071] BTRFS info (device loop0): using free space tree [ 338.181916][T10112] loop3: detected capacity change from 0 to 4096 [ 338.227153][ T5268] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 338.303547][T10071] BTRFS info (device loop0): space_info DATA+METADATA has 4096 free, is not full [ 338.313924][T10071] BTRFS info (device loop0): space_info total=3276800, used=53248, pinned=0, reserved=12288, may_use=3207168, readonly=0 zone_unusable=0 [ 338.328306][T10071] BTRFS info (device loop0): global_block_rsv: size 917504 reserved 917504 [ 338.337961][T10071] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 338.345647][T10071] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 338.353374][T10071] BTRFS info (device loop0): delayed_block_rsv: size 98304 reserved 98304 [ 338.362045][T10071] BTRFS info (device loop0): delayed_refs_rsv: size 786432 reserved 786432 [ 338.497380][ T5268] usb 5-1: Using ep0 maxpacket: 8 [ 338.631336][ T5268] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 338.649027][ T5268] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 338.665232][ T7944] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 338.817534][ T5268] usb 5-1: New USB device found, idVendor=9dab, idProduct=cd84, bcdDevice= 4.75 [ 338.837357][ T5268] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 338.845675][ T5268] usb 5-1: Product: syz [ 338.860989][ T5268] usb 5-1: Manufacturer: syz [ 338.871113][ T5268] usb 5-1: SerialNumber: syz [ 338.891433][ T5268] usb 5-1: config 0 descriptor?? [ 339.215747][ T5268] usb 5-1: USB disconnect, device number 13 [ 339.386103][T10115] loop3: detected capacity change from 0 to 40427 [ 339.407719][T10115] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 339.436306][T10115] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 339.483987][T10115] F2FS-fs (loop3): invalid crc value [ 339.515325][T10115] F2FS-fs (loop3): Found nat_bits in checkpoint [ 339.602737][T10115] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 339.617319][T10115] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 339.657366][ T3642] Bluetooth: hci4: command 0x0406 tx timeout [ 340.016015][T10140] loop1: detected capacity change from 0 to 4096 [ 340.097562][T10140] ntfs: (device loop1): ntfs_external_attr_find(): Base inode 0x1 contains corrupt attribute list attribute. Unmount and run chkdsk. [ 340.172159][T10140] ntfs: (device loop1): ntfs_read_locked_inode(): Failed to lookup $DATA attribute. [ 340.199933][T10140] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 340.244074][T10140] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 340.276862][T10148] loop4: detected capacity change from 0 to 8 [ 340.306175][T10140] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 340.328836][T10140] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 340.377637][T10140] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 340.417746][T10140] ntfs: volume version 3.1. [ 340.454998][T10140] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 340.497354][T10140] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 340.564583][T10140] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 340.901910][T10158] loop3: detected capacity change from 0 to 8192 [ 340.921270][T10167] loop0: detected capacity change from 0 to 256 [ 340.933782][T10158] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 340.955339][T10158] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 340.974624][T10158] REISERFS (device loop3): using journaled data mode [ 340.981807][T10158] reiserfs: using flush barriers [ 340.997521][T10158] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 341.004952][T10167] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 341.015509][T10158] REISERFS (device loop3): checking transaction log (loop3) [ 341.056371][T10158] REISERFS (device loop3): Using r5 hash to sort names [ 341.064736][T10158] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 341.078924][T10158] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 341.798444][T10186] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 341.884311][T10184] loop4: detected capacity change from 0 to 4096 [ 341.946057][T10189] loop0: detected capacity change from 0 to 4096 [ 341.983333][T10189] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 341.999623][T10184] ntfs: volume version 3.1. [ 342.165899][T10189] ntfs3: loop0: failed to convert "c46c" to macromanian [ 342.666948][T10208] netlink: 'syz.0.2128': attribute type 29 has an invalid length. [ 342.685576][T10208] netlink: 'syz.0.2128': attribute type 29 has an invalid length. [ 342.716388][T10208] netlink: 'syz.0.2128': attribute type 29 has an invalid length. [ 342.736793][T10208] netlink: 'syz.0.2128': attribute type 29 has an invalid length. [ 342.837659][T10211] netlink: 'syz.4.2130': attribute type 2 has an invalid length. [ 342.868557][T10211] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 343.153695][T10216] loop0: detected capacity change from 0 to 2048 [ 343.225927][T10216] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 343.233162][T10195] loop1: detected capacity change from 0 to 40427 [ 343.249197][T10195] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 343.259443][T10195] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 343.283815][T10195] F2FS-fs (loop1): invalid crc value [ 343.316267][T10195] F2FS-fs (loop1): Found nat_bits in checkpoint [ 343.342007][ T7944] EXT4-fs (loop0): unmounting filesystem. [ 343.449727][T10195] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 343.462299][T10195] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 346.264653][T10246] loop3: detected capacity change from 0 to 128 [ 346.325144][T10246] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 346.345459][ T3650] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 346.357281][ T5260] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 346.360789][ T3650] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 346.375542][ T3650] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 346.383076][T10246] ext4 filesystem being mounted at /250/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 346.414610][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.423138][ T3650] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 346.432540][ T3650] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 346.440544][ T3650] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 346.617331][ T6475] EXT4-fs (loop3): unmounting filesystem. [ 346.879627][ T5260] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=3c.71 [ 346.933978][ T5260] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.985758][ T5260] usb 2-1: Product: syz [ 347.006000][ T5260] usb 2-1: Manufacturer: syz [ 347.043442][ T5260] usb 2-1: SerialNumber: syz [ 347.077932][ T5260] usb 2-1: config 0 descriptor?? [ 347.119629][ T5260] redrat3 2-1:0.0: Couldn't find all endpoints [ 347.121845][T10251] chnl_net:caif_netlink_parms(): no params data found [ 347.182591][T10250] loop0: detected capacity change from 0 to 32768 [ 347.305183][T10250] XFS (loop0): Mounting V5 Filesystem [ 347.353426][ T2617] usb 2-1: USB disconnect, device number 16 [ 347.461870][T10250] XFS (loop0): Ending clean mount [ 347.478644][T10250] XFS (loop0): Quotacheck needed: Please wait. [ 347.496698][T10251] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.539340][T10250] XFS (loop0): Quotacheck: Done. [ 347.541917][T10251] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.586657][T10251] device bridge_slave_0 entered promiscuous mode [ 347.598376][T10251] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.605644][T10251] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.614386][T10251] device bridge_slave_1 entered promiscuous mode [ 347.651657][T10251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.694895][T10251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.714709][ T7944] XFS (loop0): Unmounting Filesystem [ 347.833836][T10251] team0: Port device team_slave_0 added [ 347.849539][T10251] team0: Port device team_slave_1 added [ 348.045483][T10251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.072159][T10251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.154971][T10251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.185042][T10284] netlink: 'syz.1.2155': attribute type 21 has an invalid length. [ 348.204584][T10251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.213503][T10251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.319028][T10251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.342727][T10276] loop3: detected capacity change from 0 to 32768 [ 348.423870][T10276] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 348.458348][ T3650] Bluetooth: hci5: command tx timeout [ 348.592421][ T6475] ocfs2: Unmounting device (7,3) on (node local) [ 348.592432][T10251] device hsr_slave_0 entered promiscuous mode [ 348.605445][T10251] device hsr_slave_1 entered promiscuous mode [ 348.635156][T10251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.675818][T10251] Cannot create hsr debugfs directory [ 348.921453][T10306] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2161'. [ 349.185021][T10251] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.536541][T10251] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.735409][T10251] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.949807][T10251] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.979382][T10312] loop3: detected capacity change from 0 to 32768 [ 350.010106][T10312] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.2160 (10312) [ 350.100612][T10312] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 350.150221][T10312] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 350.199659][T10312] BTRFS info (device loop3): force zlib compression, level 3 [ 350.224801][T10312] BTRFS info (device loop3): force clearing of disk cache [ 350.235629][T10312] BTRFS info (device loop3): setting nodatasum [ 350.287180][T10312] BTRFS info (device loop3): allowing degraded mounts [ 350.294104][T10312] BTRFS info (device loop3): enabling disk space caching [ 350.308990][T10318] loop0: detected capacity change from 0 to 32768 [ 350.349581][T10312] BTRFS info (device loop3): disk space caching is enabled [ 350.359264][T10318] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2166 (10318) [ 350.437255][T10318] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 350.471610][T10251] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 350.506589][T10318] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 350.530924][T10251] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 350.547175][ T3650] Bluetooth: hci5: command tx timeout [ 350.549431][T10318] BTRFS info (device loop0): setting nodatacow, compression disabled [ 350.609642][T10341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2174'. [ 350.628165][T10341] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2174'. [ 350.638566][T10318] BTRFS info (device loop0): turning on flush-on-commit [ 350.645954][T10318] BTRFS info (device loop0): enabling auto defrag [ 350.654171][T10251] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 350.668538][T10318] BTRFS info (device loop0): max_inline at 0 [ 350.674590][T10318] BTRFS info (device loop0): using free space tree [ 350.699591][T10251] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 350.713619][T10312] BTRFS info (device loop3): rebuilding free space tree [ 350.861161][T10363] loop4: detected capacity change from 0 to 1024 [ 350.890506][T10312] BTRFS info (device loop3): disabling free space tree [ 350.908298][T10312] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 350.921441][T10312] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 350.955017][T10318] BTRFS info (device loop0): enabling ssd optimizations [ 350.983681][T10251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.010199][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 351.054454][ T6475] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 351.077834][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 351.097513][T10377] hfsplus: bad catalog entry type [ 351.132633][T10251] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.140934][ T22] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 351.240692][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 351.249845][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 351.292157][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.299372][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.357835][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 351.407678][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 351.437495][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.444676][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.501095][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 351.543972][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 351.554310][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 351.563078][ T22] usb 2-1: config 0 has no interfaces? [ 351.570173][ T22] usb 2-1: New USB device found, idVendor=046d, idProduct=20ee, bcdDevice= 0.00 [ 351.581055][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 351.589455][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.602681][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 351.623228][ T22] usb 2-1: config 0 descriptor?? [ 351.630026][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 351.641597][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 351.663144][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 351.693688][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 351.705596][ T5411] hfsplus: b-tree write err: -5, ino 4 [ 351.738647][ T7944] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 351.786134][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 351.819319][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 351.857534][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 351.909983][T10251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 351.921428][ T2617] usb 2-1: USB disconnect, device number 17 [ 352.393787][T10392] loop0: detected capacity change from 0 to 2048 [ 352.431809][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 352.443063][T10392] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 352.452270][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 352.460653][T10392] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038 (0x7fffffff) [ 352.483401][T10251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.545619][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 352.573444][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 352.624643][ T7944] EXT4-fs (loop0): unmounting filesystem. [ 352.630619][ T3653] Bluetooth: hci5: command tx timeout [ 352.650533][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 352.660460][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 352.671583][T10251] device veth0_vlan entered promiscuous mode [ 352.683870][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 352.693660][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 352.719739][T10251] device veth1_vlan entered promiscuous mode [ 352.782900][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 352.805067][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 352.819680][T10251] device veth0_macvtap entered promiscuous mode [ 352.836272][T10387] loop3: detected capacity change from 0 to 32768 [ 352.879186][T10251] device veth1_macvtap entered promiscuous mode [ 352.896809][T10387] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2180 (10387) [ 352.970830][T10251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.012864][T10251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.027121][T10387] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 353.060136][T10387] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 353.070196][T10251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.108611][T10387] BTRFS info (device loop3): using free space tree [ 353.115763][T10251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.136817][T10251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.197182][T10251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.225580][T10251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.281803][T10387] BTRFS info (device loop3): enabling ssd optimizations [ 353.290361][T10251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.322150][T10251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.355631][T10251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.385836][T10251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.428936][T10251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.437876][T10397] loop0: detected capacity change from 0 to 32768 [ 353.458264][T10397] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.2181 (10397) [ 353.465756][T10251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.504509][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 353.516374][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 353.572141][T10397] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 353.573439][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 353.613162][T10397] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 353.641112][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 353.643557][T10397] BTRFS info (device loop0): using free space tree [ 353.668994][T10251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.709385][T10251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.738184][T10251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.757397][T10251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.783326][T10251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.825351][T10251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.853107][T10251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.873538][T10251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.905527][T10251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.917455][T10251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.934586][T10251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.936655][T10397] BTRFS info (device loop0): enabling ssd optimizations [ 353.949263][T10251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.962877][ T6475] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 353.969602][T10251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.015493][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 354.044220][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 354.126921][T10251] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.166121][T10251] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.223567][T10251] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.228893][T10451] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2190'. [ 354.266261][T10251] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.642606][ T7944] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 354.698771][ T3650] Bluetooth: hci5: command tx timeout [ 354.860509][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.897768][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.003590][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 355.125850][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.180895][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.306257][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 355.995455][ T22] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 356.079281][T10492] loop0: detected capacity change from 0 to 4096 [ 356.110202][T10492] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 356.165513][T10492] EXT4-fs (loop0): shut down requested (2) [ 356.212404][T10492] EXT4-fs warning (device loop0): ext4_empty_dir:3154: inode #12: comm syz.0.2208: directory missing '..' [ 356.387601][ T7944] EXT4-fs (loop0): unmounting filesystem. [ 356.400055][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.422413][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.457832][ T22] usb 4-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 356.487802][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.528548][ T22] usb 4-1: config 0 descriptor?? [ 356.636820][T10499] input: syz0 as /devices/virtual/input/input42 [ 356.825552][T10494] loop1: detected capacity change from 0 to 32768 [ 356.892192][T10494] JBD2: Ignoring recovery information on journal [ 356.953437][T10494] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 356.955307][T10490] loop4: detected capacity change from 0 to 32768 [ 356.978875][T10490] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 356.987243][T10490] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 357.007855][T10490] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 357.009011][T10486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.049544][ T3689] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 357.056779][ T3689] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 357.066014][T10486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.112111][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 357.112131][ T27] audit: type=1804 audit(1726689531.626:60): pid=10494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2209" name="/newroot/440/file1/file1" dev="loop1" ino=16946 res=1 errno=0 [ 357.144574][ T22] wacom 0003:056A:0065.0016: unknown main item tag 0x7 [ 357.171922][ T22] wacom 0003:056A:0065.0016: unknown main item tag 0x4 [ 357.184505][T10494] [ 357.186888][T10494] ====================================================== [ 357.193930][T10494] WARNING: possible circular locking dependency detected [ 357.200981][T10494] 6.1.111-syzkaller #0 Not tainted [ 357.206111][T10494] ------------------------------------------------------ [ 357.211872][T10509] loop0: detected capacity change from 0 to 512 [ 357.213121][T10494] syz.1.2209/10494 is trying to acquire lock: [ 357.213136][T10494] ffff8880520bbf60 (&oi->ip_alloc_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb2/0x330 [ 357.236198][T10494] [ 357.236198][T10494] but task is already holding lock: [ 357.243579][T10494] ffff8880520bbff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x330 [ 357.254228][T10494] [ 357.254228][T10494] which lock already depends on the new lock. [ 357.254228][T10494] [ 357.264773][T10494] [ 357.264773][T10494] the existing dependency chain (in reverse order) is: [ 357.273968][T10494] [ 357.273968][T10494] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 357.281799][T10494] lock_acquire+0x1f8/0x5a0 [ 357.286835][T10494] down_read+0xad/0xa30 [ 357.291605][T10494] ocfs2_init_acl+0x398/0x930 [ 357.296805][T10494] ocfs2_mknod+0x1f75/0x2e20 [ 357.301924][T10494] ocfs2_mkdir+0x1c0/0x4e0 [ 357.306872][T10494] vfs_mkdir+0x3b6/0x590 [ 357.311645][T10494] do_mkdirat+0x225/0x360 [ 357.316581][T10494] __x64_sys_mkdirat+0x85/0x90 [ 357.321871][T10494] do_syscall_64+0x3b/0xb0 [ 357.326815][T10494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.333251][T10494] [ 357.333251][T10494] -> #3 (jbd2_handle){++++}-{0:0}: [ 357.340562][T10494] lock_acquire+0x1f8/0x5a0 [ 357.345609][T10494] start_this_handle+0x1f71/0x21b0 [ 357.351259][T10494] jbd2__journal_start+0x2d1/0x5c0 [ 357.356913][T10494] jbd2_journal_start+0x25/0x30 [ 357.362296][T10494] ocfs2_start_trans+0x3c0/0x6f0 [ 357.367764][T10494] ocfs2_mknod+0x1638/0x2e20 [ 357.372886][T10494] ocfs2_create+0x1c0/0x4e0 [ 357.377937][T10494] path_openat+0x12f1/0x2e60 [ 357.383053][T10494] do_filp_open+0x230/0x480 [ 357.388168][T10494] do_sys_openat2+0x13b/0x4f0 [ 357.393382][T10494] __x64_sys_openat+0x243/0x290 [ 357.398764][T10494] do_syscall_64+0x3b/0xb0 [ 357.403794][T10494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.410215][T10494] [ 357.410215][T10494] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 357.418730][T10494] lock_acquire+0x1f8/0x5a0 [ 357.423760][T10494] down_read+0xad/0xa30 [ 357.428436][T10494] ocfs2_start_trans+0x3b5/0x6f0 [ 357.433904][T10494] ocfs2_mknod+0x1638/0x2e20 [ 357.439028][T10494] ocfs2_create+0x1c0/0x4e0 [ 357.444056][T10494] path_openat+0x12f1/0x2e60 [ 357.449172][T10494] do_filp_open+0x230/0x480 [ 357.454196][T10494] do_sys_openat2+0x13b/0x4f0 [ 357.459401][T10494] __x64_sys_openat+0x243/0x290 [ 357.464778][T10494] do_syscall_64+0x3b/0xb0 [ 357.469723][T10494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.476140][T10494] [ 357.476140][T10494] -> #1 (sb_internal#6){.+.+}-{0:0}: [ 357.483617][T10494] lock_acquire+0x1f8/0x5a0 [ 357.488651][T10494] ocfs2_start_trans+0x2b0/0x6f0 [ 357.494117][T10494] ocfs2_write_begin_nolock+0x2073/0x4e40 [ 357.500360][T10494] ocfs2_write_begin+0x201/0x390 [ 357.505822][T10494] generic_perform_write+0x2fc/0x5e0 [ 357.511628][T10494] __generic_file_write_iter+0x176/0x400 [ 357.517789][T10494] ocfs2_file_write_iter+0x17c6/0x2020 [ 357.523857][T10494] vfs_write+0x857/0xbc0 [ 357.528685][T10494] ksys_write+0x19c/0x2c0 [ 357.533533][T10494] do_syscall_64+0x3b/0xb0 [ 357.538481][T10494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.544902][T10494] [ 357.544902][T10494] -> #0 (&oi->ip_alloc_sem){++++}-{3:3}: [ 357.552742][T10494] validate_chain+0x1661/0x5950 [ 357.558116][T10494] __lock_acquire+0x125b/0x1f80 [ 357.563589][T10494] lock_acquire+0x1f8/0x5a0 [ 357.568728][T10494] down_write+0x36/0x60 [ 357.573408][T10494] ocfs2_try_remove_refcount_tree+0xb2/0x330 [ 357.580096][T10494] ocfs2_truncate_file+0xea2/0x1630 [ 357.585823][T10494] ocfs2_setattr+0x18bc/0x1f80 [ 357.591114][T10494] notify_change+0xce3/0xfc0 [ 357.596237][T10494] do_truncate+0x21c/0x300 [ 357.601198][T10494] path_openat+0x27e2/0x2e60 [ 357.606411][T10494] do_filp_open+0x230/0x480 [ 357.611471][T10494] do_sys_openat2+0x13b/0x4f0 [ 357.616706][T10494] __x64_sys_openat+0x243/0x290 [ 357.622180][T10494] do_syscall_64+0x3b/0xb0 [ 357.627137][T10494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.633561][T10494] [ 357.633561][T10494] other info that might help us debug this: [ 357.633561][T10494] [ 357.643790][T10494] Chain exists of: [ 357.643790][T10494] &oi->ip_alloc_sem --> jbd2_handle --> &oi->ip_xattr_sem [ 357.643790][T10494] [ 357.656846][T10494] Possible unsafe locking scenario: [ 357.656846][T10494] [ 357.664290][T10494] CPU0 CPU1 [ 357.669740][T10494] ---- ---- [ 357.675099][T10494] lock(&oi->ip_xattr_sem); [ 357.679691][T10494] lock(jbd2_handle); [ 357.686278][T10494] lock(&oi->ip_xattr_sem); [ 357.693387][T10494] lock(&oi->ip_alloc_sem); [ 357.697983][T10494] [ 357.697983][T10494] *** DEADLOCK *** [ 357.697983][T10494] [ 357.706131][T10494] 3 locks held by syz.1.2209/10494: [ 357.711320][T10494] #0: ffff8880577a2460 (sb_writers#24){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 357.720564][T10494] #1: ffff8880520bc2c8 (&sb->s_type->i_mutex_key#31){+.+.}-{3:3}, at: do_truncate+0x208/0x300 [ 357.730947][T10494] #2: ffff8880520bbff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x330 [ 357.742042][T10494] [ 357.742042][T10494] stack backtrace: [ 357.747965][T10494] CPU: 1 PID: 10494 Comm: syz.1.2209 Not tainted 6.1.111-syzkaller #0 [ 357.756143][T10494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 357.766211][T10494] Call Trace: [ 357.769519][T10494] [ 357.772450][T10494] dump_stack_lvl+0x1e3/0x2cb [ 357.777179][T10494] ? nf_tcp_handle_invalid+0x642/0x642 [ 357.782669][T10494] ? print_circular_bug+0x12b/0x1a0 [ 357.787872][T10494] check_noncircular+0x2fa/0x3b0 [ 357.792995][T10494] ? deref_stack_reg+0x17c/0x210 [ 357.797955][T10494] ? add_chain_block+0x850/0x850 [ 357.802901][T10494] ? lockdep_lock+0x11f/0x2a0 [ 357.807593][T10494] ? 0xffffffffa0001d48 [ 357.811768][T10494] ? 0xffffffffa0001d48 [ 357.815925][T10494] ? _find_first_zero_bit+0xd0/0x100 [ 357.821223][T10494] validate_chain+0x1661/0x5950 [ 357.826079][T10494] ? kernel_text_address+0x9f/0xd0 [ 357.831205][T10494] ? stack_trace_save+0x113/0x1c0 [ 357.836234][T10494] ? reacquire_held_locks+0x660/0x660 [ 357.841693][T10494] ? stack_trace_snprint+0xe0/0xe0 [ 357.846816][T10494] ? lockdep_unlock+0x165/0x300 [ 357.851677][T10494] ? mark_lock+0x9a/0x340 [ 357.856018][T10494] __lock_acquire+0x125b/0x1f80 [ 357.860884][T10494] lock_acquire+0x1f8/0x5a0 [ 357.865395][T10494] ? ocfs2_try_remove_refcount_tree+0xb2/0x330 [ 357.871553][T10494] ? read_lock_is_recursive+0x10/0x10 [ 357.876931][T10494] ? ocfs2_truncate_file+0x712/0x1630 [ 357.882307][T10494] ? ocfs2_journal_access+0x30/0x30 [ 357.887511][T10494] ? __might_sleep+0xb0/0xb0 [ 357.892101][T10494] ? rwsem_write_trylock+0x166/0x210 [ 357.897394][T10494] ? clear_nonspinnable+0x60/0x60 [ 357.902426][T10494] ? ocfs2_truncate_inline+0x797/0x880 [ 357.907907][T10494] down_write+0x36/0x60 [ 357.912077][T10494] ? ocfs2_try_remove_refcount_tree+0xb2/0x330 [ 357.918236][T10494] ocfs2_try_remove_refcount_tree+0xb2/0x330 [ 357.924247][T10494] ? ocfs2_remove_refcount_tree+0x1000/0x1000 [ 357.930336][T10494] ? ocfs2_resv_discard+0xa2/0x230 [ 357.935457][T10494] ocfs2_truncate_file+0xea2/0x1630 [ 357.940667][T10494] ? ocfs2_inode_lock_tracker+0x455/0x750 [ 357.946392][T10494] ? ocfs2_simple_size_update+0x4d0/0x4d0 [ 357.952115][T10494] ? do_raw_spin_unlock+0x137/0x8a0 [ 357.957314][T10494] ? memset+0x1f/0x40 [ 357.961302][T10494] ? _raw_spin_unlock+0x24/0x40 [ 357.966156][T10494] ? ocfs2_inode_lock_tracker+0x455/0x750 [ 357.971878][T10494] ? ocfs2_inode_lock_atime+0x5a0/0x5a0 [ 357.977421][T10494] ? ocfs2_rw_lock+0x13a/0x250 [ 357.982286][T10494] ? ocfs2_create_new_inode_locks+0x6d0/0x6d0 [ 357.988366][T10494] ? setattr_prepare+0x1e0/0xc20 [ 357.993317][T10494] ? jbd2_journal_begin_ordered_truncate+0xbc/0x150 [ 358.000087][T10494] ocfs2_setattr+0x18bc/0x1f80 [ 358.004863][T10494] ? ocfs2_extend_allocation+0x1d00/0x1d00 [ 358.010674][T10494] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 358.016928][T10494] ? ktime_get_coarse_real_ts64+0x107/0x120 [ 358.022833][T10494] ? current_time+0x1ba/0x300 [ 358.027517][T10494] ? atime_needs_update+0x7b0/0x7b0 [ 358.032727][T10494] ? rwsem_write_trylock+0x166/0x210 [ 358.038016][T10494] ? bpf_lsm_inode_setattr+0x5/0x10 [ 358.043219][T10494] ? ocfs2_extend_allocation+0x1d00/0x1d00 [ 358.049031][T10494] notify_change+0xce3/0xfc0 [ 358.053636][T10494] do_truncate+0x21c/0x300 [ 358.058068][T10494] ? put_page_bootmem+0x2e0/0x2e0 [ 358.063099][T10494] ? ima_bprm_check+0x2b0/0x2b0 [ 358.067956][T10494] ? bpf_lsm_path_truncate+0x5/0x10 [ 358.073157][T10494] path_openat+0x27e2/0x2e60 [ 358.077756][T10494] ? mark_lock+0x9a/0x340 [ 358.082117][T10494] ? do_filp_open+0x480/0x480 [ 358.086801][T10494] do_filp_open+0x230/0x480 [ 358.091307][T10494] ? vfs_tmpfile+0x4a0/0x4a0 [ 358.095909][T10494] ? _raw_spin_unlock+0x24/0x40 [ 358.100762][T10494] ? alloc_fd+0x5a0/0x640 [ 358.105092][T10494] do_sys_openat2+0x13b/0x4f0 [ 358.109783][T10494] ? do_sys_open+0x220/0x220 [ 358.114386][T10494] __x64_sys_openat+0x243/0x290 [ 358.119250][T10494] ? __ia32_sys_open+0x270/0x270 [ 358.124198][T10494] ? syscall_enter_from_user_mode+0x2e/0x230 [ 358.130179][T10494] ? lockdep_hardirqs_on+0x94/0x130 [ 358.135377][T10494] ? syscall_enter_from_user_mode+0x2e/0x230 [ 358.141364][T10494] do_syscall_64+0x3b/0xb0 [ 358.145786][T10494] ? clear_bhb_loop+0x45/0xa0 [ 358.150470][T10494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.156381][T10494] RIP: 0033:0x7f7aee77def9 [ 358.160796][T10494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.180404][T10494] RSP: 002b:00007f7aef65f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 358.188819][T10494] RAX: ffffffffffffffda RBX: 00007f7aee935f80 RCX: 00007f7aee77def9 [ 358.196788][T10494] RDX: 0000000000026300 RSI: 0000000020000680 RDI: ffffffffffffff9c [ 358.204756][T10494] RBP: 00007f7aee7f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 358.212726][T10494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.220694][T10494] R13: 0000000000000000 R14: 00007f7aee935f80 R15: 00007ffd8d0249b8 [ 358.228674][T10494] [ 358.268708][ T22] wacom 0003:056A:0065.0016: Unknown device_type for 'HID 056a:0065'. Assuming pen. [ 358.289418][T10509] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.2214: casefold flag without casefold feature [ 358.305723][T10509] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.2214: couldn't read orphan inode 15 (err -117) [ 358.318552][T10509] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 358.319731][ T22] wacom 0003:056A:0065.0016: hidraw0: USB HID v0.00 Device [HID 056a:0065] on usb-dummy_hcd.3-1/input0 [ 358.341645][ T3689] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1284ms [ 358.350237][ T3689] gfs2: fsid=syz:syz.0: jid=0: Done [ 358.355583][T10490] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 358.359973][T10509] EXT4-fs (loop0): shut down requested (0) [ 358.380291][ T22] input: Wacom Bamboo Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0065.0016/input/input43 [ 358.420627][ T3641] ocfs2: Unmounting device (7,1) on (node local) [ 358.461151][ T7944] EXT4-fs (loop0): unmounting filesystem. [ 358.474982][ T22] usb 4-1: USB disconnect, device number 14