last executing test programs: 1m34.912191747s ago: executing program 0 (id=450): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000040)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) 1m34.523111223s ago: executing program 0 (id=454): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x10001}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000001c0)='\x00', 0x1, 0x8000c61) fallocate(r0, 0x3, 0x8000000, 0x8000c62) 1m33.453927553s ago: executing program 0 (id=464): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2000c10, &(0x7f0000000180)={[{@nobh}, {@abort}, {@nogrpid}, {@nodiscard}, {@user_xattr}]}, 0xff, 0x258, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000200)={0x7, 0x8005, 0x5, 0xb}) 1m32.995204484s ago: executing program 0 (id=459): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f00000005c0)={[{@errors_remount}, {}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000004c0)='./file0\x00') 1m32.406432493s ago: executing program 0 (id=466): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) syz_usb_disconnect(r0) 1m31.258706839s ago: executing program 0 (id=473): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x1e) 1m30.796898269s ago: executing program 32 (id=473): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x1e) 42.817481025s ago: executing program 2 (id=816): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000fedbdf250b00000008000300", @ANYRES32=r2, @ANYBLOB="0c006e8005000200"], 0x28}}, 0x40000) 42.539905693s ago: executing program 2 (id=820): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x40) write$dsp(r0, &(0x7f00000004c0)='\x00', 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 41.718264668s ago: executing program 2 (id=827): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 41.304870155s ago: executing program 2 (id=831): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x10042, &(0x7f0000000280)={[{@discard_size={'discard', 0x3d, 0xf4}}, {@nodiscard}, {@errors_continue}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {}, {@nointegrity}, {@errors_remount}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x25, 0x6276, &(0x7f0000002080)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 39.86861119s ago: executing program 2 (id=839): socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000000000800", @ANYRES64=r0], 0x24}}, 0x4000000) 38.717349587s ago: executing program 2 (id=849): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f00000003c0)={[{}, {@dir_umask={'dir_umask', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@codepage={'codepage', 0x3d, 'koi8-ru'}}, {}, {@uid}, {@file_umask={'file_umask', 0x3d, 0x2b4}}, {@creator={'creator', 0x3d, "8c10b081"}}]}, 0x2, 0x36b, &(0x7f0000000d80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001f80)=""/4098, 0x1002) 38.179702873s ago: executing program 33 (id=849): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f00000003c0)={[{}, {@dir_umask={'dir_umask', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@codepage={'codepage', 0x3d, 'koi8-ru'}}, {}, {@uid}, {@file_umask={'file_umask', 0x3d, 0x2b4}}, {@creator={'creator', 0x3d, "8c10b081"}}]}, 0x2, 0x36b, &(0x7f0000000d80)="$eJzs3c1O1EAAB/D/tPspBCtgMN5ETTyRBQ8aY6Ix3HwBD4aIUBJCxQQwUaIBPXgyxpuJiUdvno2+gl6ML6AnDsSTXggx1Mx0uu2Wme4uHwXC/5ewdNv5nnY6g+4WRHRs3Rr/+eHymvwRZQAugGuAA6AGlACcxlDt0fzS7FLgT+cl5KoY8kcgiim2hZma901RZTwVQ/PkuxJ60/tof4RhGP5qG+pPIWWhgyOia38bB6jqq1MdrxVesh1Z7SBAtZiiHCKpHhYb2DD3OBERHSf6/u/ou0Svnr87DnBRz8OP0v0/ll5BtNztNoCnJ4svz6Gh7v+Pk94MhWwf1SIiWe+pJZxsQydeJZrSUqmUMzvDpLkriM6slg4QhlVly4xMlcWpz8wG/siqSuAFbmipYIPqdTo6dWO20laiX8OGtWmOvLrn61F1KMs6lC3lH+g6xy/reGvObuJbpX2ZxFfxXUwID+8wjT69sxQK2TgqugfU9e64TWcDv2FPUdXSU7VstNQyufpOqUzOxj3w+WNSy7qtXWtwZVlMZCoiO3/XJQDeWFpB7e5vHRR074zaa6diDRhjjTXfbxpjDWZj1WfKgT8y9TCITvpwxZ7tXjDO78VrcUcM4zc+YbzZ/7KrXTnUW67M7MgvVMioFRrN+piUVEhLP7ZQJ9uDrq5Mwua/MKLfZ8dhMw+vcB9X0bf4ZHluMgj8hcI25GhhPBRfKgWXx7YRnYj6dJR75O9UGNTkhmzuPct0KwxD46GSucXiDaejLCpxUW1ljk6dK++bVVbDrP5Tyu4qiNWoDVOHbtoDJ8OmqrvWZaYq+kozlrxbdBP9b5S77HdjGJGUcKGyvydknNVkEJxpdpyLakdXSn0Hmd5+NjcZ7HhEoiNk8eU5PeZg6O769YMuDhVPzrtEtP5LrVcaatSRL17OaiRsl3gqxVHLCqhfvZ5IVhtC//0+Z83VY1/B9cQbgT+Wt+Y6fwm4kNopc3MQ5/g8m6yHeLJ+CP9VsmoqVj27Yzm1LcbxA/dS838iIiIiIiIiIiIiIiIiIiIiIiIiIjoSkv/07+3y4wRb+nNI5k9iJNaO4RdvEBERERERERERERERERERERERERERERHtTur5v4CrnhhT2fPn/8Zf7N3p83/dDp7/K9o+4pOI2vgfAAD//xhyY3Q=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001f80)=""/4098, 0x1002) 3.190433568s ago: executing program 3 (id=1049): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000030c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c, 0x0, 0x0, 0x0, 0x150}}], 0x1, 0x20000800) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080"], 0x24}}, 0x0) 3.095535095s ago: executing program 4 (id=1051): unshare(0x26020480) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r0, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) fgetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0xffde) 2.882447978s ago: executing program 3 (id=1053): r0 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0x40008000, 0x4) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x22}, 0xfff}, {{&(0x7f0000000240)=@can, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000740)=""/226, 0xf0}, {&(0x7f0000000500)=""/121, 0x79}], 0x2}, 0x85dc}], 0x2, 0x0, 0x0) 2.843026671s ago: executing program 4 (id=1054): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x800, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$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") setresuid(0x0, 0xee00, 0x0) capset(0x0, 0x0) lchown(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 2.266502499s ago: executing program 4 (id=1058): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) 1.929888552s ago: executing program 1 (id=1062): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x211, &(0x7f0000000540)="$eJzs3UFr2g4UAPCn1ap//ofeBoNBdtqtbPsEHcPBmDDo8LDdCuupnvSiXtqPsa+w77UPMHryMjJcEnXR2iJT5/j9Ln3Ny0vyDCYB8ZlG5tujL9FsVqJ6FmcxqcRJVKNwE2W1pSUAwOGYpGl8TzPl3P13ec8BAHCI1t3/cz92fEgAwJZ9+Pjp3atOp32eJM2I25thd9jN/mb5N2877efJLyfzqtvhsHs0y79Iys8O03w9/svzL7P6ZJY+johu8flCpz3NvX7fSX6vb8TnLfYNAAAAAAAAAAAAAAAAAAAAAAD79CSSwsr5Pqen5Xwrz2f/LcwHKs3vqcXjYjzwfDxQer2LpgAAAAAAAAAAAAAAAAAAAODADEbjq4te77I/DxoRsbiktmKdu4NKvuEHrbz/oBqblbfyNjfYaSV/ibbbYGv1yX1IELW/5exsGiR/aoON4jQvp1pRWVOeptNg9bugGItxZ/lxRKw/sGfnm/Y1SdO09/VpfzCKdPU6tfI1orGD6xAAAAAAAAAAAAAAAAAAALD4FfHlXPNoH0cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALs3GI2LX/kfX130epf9wWhd0KhHzJZcR8T/cW9Vsa96NPfXKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+0nwEAAP//IQ8XMA==") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b0, &(0x7f0000000280)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) 1.846432737s ago: executing program 4 (id=1063): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000500)='./file1\x00', 0x800, &(0x7f0000000040)=ANY=[], 0x1, 0x17f, &(0x7f0000000380)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000001c0)=""/55, 0x37) getdents(r0, 0xfffffffffffffffd, 0x58) 1.846311677s ago: executing program 3 (id=1064): set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x5) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000002180)=""/4088, 0xff8}], 0x1, 0x304, 0x21000008) 1.743480184s ago: executing program 5 (id=1065): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x9, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000202073250000000000202020db1af8ff00000000bfa1fb0fffff"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) io_setup(0x30, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 1.614735243s ago: executing program 3 (id=1066): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101142, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000480)='ext3\x00', &(0x7f0000000440)='./file0\x00', 0x1f80f4, &(0x7f0000000100), 0x9, 0x7ae, &(0x7f0000000c80)="$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") ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r1, 0x4068aea3, &(0x7f0000000140)={0xda}) 1.391374477s ago: executing program 4 (id=1067): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r1, &(0x7f0000001300)=""/4114, 0x106e, 0x4b) 1.36302946s ago: executing program 1 (id=1068): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000080), 0x0}, 0x20) 1.315331263s ago: executing program 5 (id=1069): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000240)={0xa, 0x4f24, 0x400, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x3}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x20008080) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000640)=""/4139, &(0x7f0000000140)=0x102b) 1.040237611s ago: executing program 4 (id=1070): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000780)={[{@bsdgroups}, {@grpid}, {@uqnoenforce}, {@gquota}, {@grpquota}, {@pqnoenforce}, {@gquota}], [{@flag='sync'}]}, 0x4, 0x967e, &(0x7f0000009680)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) sendfile(r0, r0, 0x0, 0xe0000000) 942.469067ms ago: executing program 1 (id=1071): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xff00) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x2, 0x4000810) 942.295647ms ago: executing program 5 (id=1072): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @random="4489a2bc242d", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x1, 0x0, @broadcast=0xac14140a, @broadcast=0xac1414bb, {[@timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@local}, {@loopback}, {@rand_addr=0x64010102}, {@dev}, {@empty}, {@broadcast, 0x8000}]}, @cipso={0x86, 0xa, 0x0, [{0x0, 0x2}, {0x0, 0x2}]}]}}}}}}}, 0x0) 801.102026ms ago: executing program 3 (id=1073): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x28c}]}) 646.449307ms ago: executing program 5 (id=1074): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffffff9}]}}]}, 0x40}}, 0x20000000) 643.221527ms ago: executing program 1 (id=1075): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 354.398076ms ago: executing program 5 (id=1076): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x2c, 0x4, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4840}, 0x4000810) 352.356696ms ago: executing program 3 (id=1077): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d00010000600209040010050300010009210000360122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000880)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 349.541676ms ago: executing program 1 (id=1078): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c050}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000440)=[@in6={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2}], 0x1c) 121.978651ms ago: executing program 5 (id=1079): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) 0s ago: executing program 1 (id=1080): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000380)=ANY=[], 0xfd, 0x2ea, &(0x7f0000000700)="$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") syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x3214212, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x7, 0xf11, &(0x7f0000001100)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) link(&(0x7f0000000000)='./file1\x00', 0x0) kernel console output (not intermixed with test programs): roduct=2, SerialNumber=3 [ 115.570848][ T785] usb 2-1: Product: syz [ 115.579907][ T785] usb 2-1: Manufacturer: syz [ 115.598495][ T785] usb 2-1: SerialNumber: syz [ 115.614642][ T785] usb 2-1: config 0 descriptor?? [ 116.014903][ T6367] loop3: detected capacity change from 0 to 64 [ 116.165929][ T6357] loop2: detected capacity change from 0 to 32768 [ 116.270694][ T785] peak_usb 2-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 116.287427][ T6357] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 116.311874][ T785] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 116.320226][ T785] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 116.383107][ T785] peak_usb: probe of 2-1:0.0 failed with error -22 [ 116.560844][ T6357] XFS (loop2): Ending clean mount [ 116.579153][ T6357] XFS (loop2): Quotacheck needed: Please wait. [ 116.595405][ T785] usb 2-1: USB disconnect, device number 3 [ 116.662208][ T6357] XFS (loop2): Quotacheck: Done. [ 116.707185][ T6365] loop0: detected capacity change from 0 to 40427 [ 116.764721][ T6365] F2FS-fs (loop0): invalid crc value [ 116.823510][ T6365] F2FS-fs (loop0): Found nat_bits in checkpoint [ 116.961937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.012257][ T6365] F2FS-fs (loop0): Start checkpoint disabled! [ 117.072817][ T5787] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 117.111756][ T6365] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 117.510391][ T1117] kworker/u4:9: attempt to access beyond end of device [ 117.510391][ T1117] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 117.546164][ T1117] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 117.565676][ T1117] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 117.652637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.472480][ T6406] loop3: detected capacity change from 0 to 1024 [ 118.491843][ T785] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 118.691245][ T985] hfsplus: b-tree write err: -5, ino 4 [ 118.728088][ T785] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 118.752682][ T785] usb 3-1: config 0 has no interface number 0 [ 118.756303][ T6411] netlink: 128 bytes leftover after parsing attributes in process `syz.0.201'. [ 118.769703][ T785] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 118.798033][ T6411] netlink: 40 bytes leftover after parsing attributes in process `syz.0.201'. [ 118.807882][ T785] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 118.838194][ T785] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 118.867393][ T785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.894730][ T785] usb 3-1: config 0 descriptor?? [ 118.902260][ T6398] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 118.949994][ T785] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 119.041500][ T6400] loop1: detected capacity change from 0 to 32768 [ 119.059027][ T6400] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.197 (6400) [ 119.076819][ T6400] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 119.118153][ T6400] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 119.165646][ T6400] BTRFS info (device loop1): enabling ssd optimizations [ 119.193188][ T6400] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 119.198758][ T6417] loop3: detected capacity change from 0 to 1024 [ 119.240355][ T6400] BTRFS info (device loop1): force zstd compression, level 3 [ 119.285547][ T6400] BTRFS info (device loop1): ignoring data csums [ 119.298617][ T5842] usb 3-1: USB disconnect, device number 2 [ 119.323721][ T6400] BTRFS info (device loop1): turning on async discard [ 119.348054][ T6400] BTRFS warning (device loop1): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 119.354215][ T6419] loop0: detected capacity change from 0 to 128 [ 119.374315][ T6400] BTRFS info (device loop1): metadata ratio 0 [ 119.383417][ T6400] BTRFS info (device loop1): using free space tree [ 119.766873][ T5785] BTRFS info (device loop1: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 119.915435][ T5960] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by udevd (5960) [ 120.585052][ T6454] loop1: detected capacity change from 0 to 4096 [ 120.621965][ T6454] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 120.955186][ T6467] loop0: detected capacity change from 0 to 8 [ 120.978500][ T6467] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 121.029372][ T5802] udevd[5802]: incorrect cramfs checksum on /dev/loop0 [ 121.155830][ T5802] udevd[5802]: incorrect cramfs checksum on /dev/loop0 [ 121.261835][ T785] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 121.276860][ T6471] loop1: detected capacity change from 0 to 4096 [ 121.322558][ T6471] ntfs: (device loop1): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 121.335313][ T6471] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 121.357664][ T6471] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 121.377805][ T6471] ntfs: volume version 3.1. [ 121.481799][ T785] usb 3-1: Using ep0 maxpacket: 16 [ 121.499174][ T785] usb 3-1: config 0 has no interfaces? [ 121.512403][ T785] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 121.530633][ T785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.542102][ T785] usb 3-1: config 0 descriptor?? [ 121.659150][ T5785] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 121.792701][ T5842] usb 3-1: USB disconnect, device number 3 [ 122.000454][ T6473] loop3: detected capacity change from 0 to 32768 [ 122.070678][ T6473] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 122.244966][ T6490] loop1: detected capacity change from 0 to 512 [ 122.560745][ T5786] (syz-executor,5786,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 122.594525][ T5786] ocfs2: Unmounting device (7,3) on (node local) [ 123.087628][ T6512] Driver unsupported XDP return value 0 on prog (id 24) dev N/A, expect packet loss! [ 124.246681][ T6537] netlink: 104 bytes leftover after parsing attributes in process `syz.2.250'. [ 125.229956][ T6566] vxcan1: tx address claim with dest, not broadcast [ 125.618483][ T6575] netlink: 'syz.1.265': attribute type 8 has an invalid length. [ 125.709249][ T6558] loop0: detected capacity change from 0 to 32768 [ 125.820629][ T6558] jfs_strtoUCS: char2uni returned -22. [ 125.837325][ T6558] charset = cp936, char = 0xfc [ 125.876358][ T6579] loop1: detected capacity change from 0 to 1024 [ 126.103494][ T6579] hfsplus: bad catalog folder thread [ 126.158739][ T6583] loop0: detected capacity change from 0 to 512 [ 126.194059][ T6583] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 126.325137][ T6583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.351370][ T6585] loop2: detected capacity change from 0 to 2048 [ 126.365810][ T6583] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.372000][ T6585] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 126.496276][ T5958] udevd[5958]: incorrect nilfs2 checksum on /dev/loop2 [ 126.529456][ T6592] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.546346][ T6573] loop3: detected capacity change from 0 to 32768 [ 126.593981][ T6573] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.264 (6573) [ 126.693726][ T6573] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 126.731777][ T6573] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 126.773732][ T6573] BTRFS info (device loop3): turning on flush-on-commit [ 126.780866][ T6573] BTRFS info (device loop3): enabling disk space caching [ 126.784318][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.790422][ T6573] BTRFS info (device loop3): turning off barriers [ 126.833328][ T6573] BTRFS info (device loop3): doing ref verification [ 126.840203][ T6573] BTRFS info (device loop3): enabling auto defrag [ 126.870049][ T6573] BTRFS info (device loop3): force clearing of disk cache [ 126.896222][ T6573] BTRFS info (device loop3): enabling ssd optimizations [ 126.905400][ T6573] BTRFS info (device loop3): using spread ssd allocation scheme [ 126.913907][ T6573] BTRFS info (device loop3): using default commit interval 30s [ 126.923577][ T6573] BTRFS info (device loop3): disk space caching is enabled [ 127.217727][ T6573] BTRFS info (device loop3): rebuilding free space tree [ 127.249611][ T6615] loop2: detected capacity change from 0 to 512 [ 127.402283][ T6615] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.274: invalid indirect mapped block 10 (level 1) [ 127.459540][ T6615] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.274: invalid indirect mapped block 8 (level 1) [ 127.487086][ T6573] BTRFS info (device loop3): disabling free space tree [ 127.499930][ T6615] EXT4-fs (loop2): 1 truncate cleaned up [ 127.522058][ T6573] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 127.523639][ T6615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.587831][ T6573] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 127.613625][ T6615] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz.2.274: unexpected EA_INODE flag [ 127.780852][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.993148][ T5786] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 128.260569][ T6621] loop1: detected capacity change from 0 to 32768 [ 128.291964][ T6631] netlink: 108 bytes leftover after parsing attributes in process `syz.3.281'. [ 128.373075][ T6621] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 128.721900][ T6621] XFS (loop1): Ending clean mount [ 128.952911][ T5785] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 129.324059][ T6653] loop3: detected capacity change from 0 to 1024 [ 129.688511][ T6665] loop3: detected capacity change from 0 to 256 [ 131.261798][ T965] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 131.504370][ T965] usb 3-1: config 0 has no interfaces? [ 131.562011][ T965] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 131.583459][ T965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.616389][ T965] usb 3-1: Product: syz [ 131.620664][ T965] usb 3-1: Manufacturer: syz [ 131.635291][ T965] usb 3-1: SerialNumber: syz [ 131.655456][ T965] usb 3-1: config 0 descriptor?? [ 131.850072][ T6706] loop0: detected capacity change from 0 to 32768 [ 131.931346][ T6706] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 132.110949][ T5842] usb 3-1: USB disconnect, device number 4 [ 132.240133][ T6706] XFS (loop0): Ending clean mount [ 132.448220][ T5788] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 133.286082][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.293427][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.565389][ T6745] loop2: detected capacity change from 0 to 32768 [ 133.600050][ T6745] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.323 (6745) [ 133.640370][ T6745] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 133.657364][ T6745] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 133.668134][ T6745] BTRFS info (device loop2): using free space tree [ 133.867974][ T6745] BTRFS info (device loop2): enabling ssd optimizations [ 133.921864][ T6745] BTRFS info (device loop2): auto enabling async discard [ 134.240202][ T5787] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 135.206608][ T6785] loop1: detected capacity change from 0 to 32768 [ 135.257236][ T6785] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 135.409750][ T6785] XFS (loop1): Ending clean mount [ 135.545875][ T6788] loop3: detected capacity change from 0 to 40427 [ 135.568304][ T6788] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 135.595590][ T6788] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 135.670585][ T6788] F2FS-fs (loop3): Found nat_bits in checkpoint [ 135.742150][ T5785] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 135.957201][ T6788] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 135.976074][ T6788] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 136.179476][ T6794] loop0: detected capacity change from 0 to 32768 [ 136.202383][ T6794] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.336 (6794) [ 136.252939][ T6794] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 136.292946][ T6794] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 136.319874][ T6794] BTRFS info (device loop0): enabling auto defrag [ 136.342216][ T6794] BTRFS info (device loop0): max_inline at 0 [ 136.355582][ T6794] BTRFS info (device loop0): enabling ssd optimizations [ 136.368830][ T6794] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 136.391016][ T6794] BTRFS info (device loop0): trying to use backup root at mount time [ 136.421924][ T6794] BTRFS info (device loop0): using free space tree [ 136.918169][ T5788] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 137.134019][ T6817] loop1: detected capacity change from 0 to 32768 [ 137.268052][ T6817] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 137.345658][ T6733] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop0 scanned by udevd (6733) [ 137.650613][ T6817] XFS (loop1): Ending clean mount [ 137.669124][ T6817] XFS (loop1): Quotacheck needed: Please wait. [ 137.796554][ T6817] XFS (loop1): Quotacheck: Done. [ 138.010140][ T5785] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 138.437844][ T6852] loop3: detected capacity change from 0 to 32768 [ 138.449006][ T6852] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.342 (6852) [ 138.483692][ T6852] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 138.494676][ T6852] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 138.509131][ T6852] BTRFS info (device loop3): using free space tree [ 138.631858][ T6852] BTRFS info (device loop3): enabling ssd optimizations [ 138.677225][ T6852] BTRFS info (device loop3): auto enabling async discard [ 138.907969][ T5786] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 139.391733][ T5842] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 139.597822][ T5842] usb 1-1: config 0 has no interfaces? [ 139.619176][ T5842] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 139.638913][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.661880][ T5842] usb 1-1: Product: syz [ 139.682438][ T5842] usb 1-1: Manufacturer: syz [ 139.700316][ T5842] usb 1-1: SerialNumber: syz [ 139.712041][ T785] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 139.721227][ T5842] usb 1-1: config 0 descriptor?? [ 139.838380][ T6881] loop2: detected capacity change from 0 to 32768 [ 139.861863][ T6881] XFS: ikeep mount option is deprecated. [ 139.885310][ T6881] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 139.924002][ T785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 139.946840][ T785] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 139.960863][ T785] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 139.970676][ T785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.984317][ T785] usb 4-1: config 0 descriptor?? [ 139.992324][ T6890] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 140.023552][ T6881] XFS (loop2): Ending clean mount [ 140.038485][ T6881] XFS (loop2): Quotacheck needed: Please wait. [ 140.118319][ T5842] usb 1-1: USB disconnect, device number 4 [ 140.190255][ T6881] XFS (loop2): Quotacheck: Done. [ 140.339824][ T5787] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 140.519404][ T785] logitech-djreceiver 0003:046D:C71B.0005: hidraw0: USB HID vff.fa Device [HID 046d:c71b] on usb-dummy_hcd.3-1/input0 [ 140.750100][ T6890] loop3: detected capacity change from 0 to 512 [ 140.777877][ T6890] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 140.872906][ T6890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.963849][ T6907] loop1: detected capacity change from 0 to 32768 [ 140.981882][ T6907] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.358 (6907) [ 141.022723][ T5859] usb 4-1: USB disconnect, device number 6 [ 141.049456][ T6907] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 141.093556][ T6907] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 141.133369][ T6907] BTRFS info (device loop1): max_inline at 0 [ 141.155165][ T6907] BTRFS info (device loop1): turning on sync discard [ 141.173814][ T6907] BTRFS info (device loop1): setting nodatacow, compression disabled [ 141.193124][ T6907] BTRFS info (device loop1): turning off barriers [ 141.200851][ T6907] BTRFS info (device loop1): turning on flush-on-commit [ 141.213933][ T6907] BTRFS info (device loop1): doing ref verification [ 141.232006][ T6907] BTRFS info (device loop1): force clearing of disk cache [ 141.245414][ T6907] BTRFS info (device loop1): enabling ssd optimizations [ 141.263004][ T6907] BTRFS info (device loop1): max_inline at 4096 [ 141.271135][ T6907] BTRFS info (device loop1): using free space tree [ 141.337839][ T6907] BTRFS info (device loop1): rebuilding free space tree [ 141.628292][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.867470][ T5785] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 143.295885][ T6945] loop2: detected capacity change from 0 to 40427 [ 143.325566][ T6945] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 143.352725][ T6945] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 143.431991][ T6945] F2FS-fs (loop2): Found nat_bits in checkpoint [ 143.572769][ T6945] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 143.592221][ T6945] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 143.909057][ T6964] loop3: detected capacity change from 0 to 512 [ 143.925626][ T6964] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 143.978937][ T6964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.000817][ T6957] loop0: detected capacity change from 0 to 32768 [ 144.009567][ T6964] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.081370][ T6957] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 144.094791][ T6950] loop1: detected capacity change from 0 to 40427 [ 144.104644][ T6950] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 144.132002][ T6950] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 144.227678][ T6950] F2FS-fs (loop1): Found nat_bits in checkpoint [ 144.397984][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.463534][ T6957] XFS (loop0): Ending clean mount [ 144.476505][ T6950] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 144.479897][ T6957] XFS (loop0): Quotacheck needed: Please wait. [ 144.499452][ T6950] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 144.661199][ T6957] XFS (loop0): Quotacheck: Done. [ 144.814814][ T5788] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 146.466634][ T7003] netlink: 'syz.2.382': attribute type 8 has an invalid length. [ 146.721931][ T965] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 146.941783][ T785] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 146.949695][ T965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.966916][ T965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.977611][ T965] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 146.991793][ T965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.023505][ T965] usb 1-1: config 0 descriptor?? [ 147.143956][ T785] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.162154][ T785] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 147.181920][ T785] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 147.191224][ T785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 147.199324][ T785] usb 3-1: SerialNumber: syz [ 147.434066][ T785] usb 3-1: 0:2 : does not exist [ 147.464226][ T785] usb 3-1: USB disconnect, device number 5 [ 147.520947][ T6733] udevd[6733]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.576178][ T7013] loop1: detected capacity change from 0 to 32768 [ 147.603943][ T7013] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.385 (7013) [ 147.641582][ T7013] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 147.653540][ T7013] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 147.665523][ T7013] BTRFS info (device loop1): using free space tree [ 147.717783][ T7013] BTRFS info (device loop1): enabling ssd optimizations [ 147.735796][ T7013] BTRFS info (device loop1): auto enabling async discard [ 147.854019][ T965] hid-led: probe of 0003:27B8:01ED.0006 failed with error -71 [ 147.864819][ T5785] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 147.869896][ T965] usb 1-1: USB disconnect, device number 5 [ 148.142639][ T7031] loop3: detected capacity change from 0 to 512 [ 148.257277][ T7031] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.388: invalid indirect mapped block 10 (level 1) [ 148.331600][ T7031] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.388: invalid indirect mapped block 8 (level 1) [ 148.355028][ T7031] EXT4-fs (loop3): 1 truncate cleaned up [ 148.372586][ T7031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.419221][ T7031] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz.3.388: unexpected EA_INODE flag [ 148.532599][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.941733][ T5842] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 149.134132][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 149.156248][ T5842] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 149.182134][ T7037] loop2: detected capacity change from 0 to 40427 [ 149.201775][ T5842] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 149.210942][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.229387][ T7037] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 149.237409][ T7037] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 149.252919][ T5842] usb 1-1: config 0 descriptor?? [ 149.269377][ T7041] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 149.324226][ T7037] F2FS-fs (loop2): Found nat_bits in checkpoint [ 149.496579][ T7037] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 149.521733][ T7037] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 149.725401][ T5842] logitech-djreceiver 0003:046D:C71B.0007: hidraw0: USB HID vff.fa Device [HID 046d:c71b] on usb-dummy_hcd.0-1/input0 [ 149.858670][ T7047] loop3: detected capacity change from 0 to 32768 [ 149.879346][ T7047] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 150.006264][ T7041] loop0: detected capacity change from 0 to 512 [ 150.063809][ T7041] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 150.074830][ T5960] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 150.133475][ T7041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.233525][ T5790] usb 1-1: USB disconnect, device number 6 [ 150.783418][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.815535][ T7056] loop1: detected capacity change from 0 to 32768 [ 151.849139][ T7056] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 151.967679][ T6733] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 152.941868][ T5790] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 153.038652][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.417'. [ 153.118092][ T7101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.417'. [ 153.147106][ T5790] usb 2-1: Using ep0 maxpacket: 32 [ 153.166375][ T5790] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 153.178199][ T5790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.200141][ T5790] usb 2-1: config 0 descriptor?? [ 153.444198][ T7091] loop3: detected capacity change from 0 to 40427 [ 153.451044][ T5790] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 153.472322][ T7091] F2FS-fs (loop3): invalid crc value [ 153.510876][ T5790] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 153.524755][ T7091] F2FS-fs (loop3): Found nat_bits in checkpoint [ 153.572645][ T5790] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 153.607022][ T5790] usb 2-1: media controller created [ 153.701093][ T5790] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.779949][ T7091] F2FS-fs (loop3): Start checkpoint disabled! [ 153.790769][ T7091] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 153.812536][ T5790] az6027: usb out operation failed. (-71) [ 153.821394][ T5790] az6027: usb out operation failed. (-71) [ 153.838070][ T5790] stb0899_attach: Driver disabled by Kconfig [ 153.855224][ T5790] az6027: no front-end attached [ 153.855224][ T5790] [ 153.873434][ T5790] az6027: usb out operation failed. (-71) [ 153.891738][ T5790] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 153.964195][ T5790] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 154.022282][ T5790] dvb-usb: schedule remote query interval to 400 msecs. [ 154.038869][ T7103] loop0: detected capacity change from 0 to 32768 [ 154.046334][ T5790] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 154.080370][ T5790] usb 2-1: USB disconnect, device number 4 [ 154.115352][ T7103] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 154.152353][ T7103] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 154.174869][ T5960] udevd[5960]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 154.182102][ T1080] kworker/u4:6: attempt to access beyond end of device [ 154.182102][ T1080] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 154.201521][ T7103] BTRFS info (device loop0): turning on flush-on-commit [ 154.207921][ T1080] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 154.230966][ T7103] BTRFS info (device loop0): enabling disk space caching [ 154.244015][ T1080] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 154.288884][ T7103] BTRFS info (device loop0): turning off barriers [ 154.322044][ T7103] BTRFS info (device loop0): doing ref verification [ 154.353617][ T7103] BTRFS info (device loop0): enabling auto defrag [ 154.360132][ T7103] BTRFS info (device loop0): force clearing of disk cache [ 154.383808][ T5790] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 154.418529][ T7103] BTRFS info (device loop0): enabling ssd optimizations [ 154.453098][ T7103] BTRFS info (device loop0): using spread ssd allocation scheme [ 154.460955][ T7103] BTRFS info (device loop0): using default commit interval 30s [ 154.489107][ T7103] BTRFS info (device loop0): disk space caching is enabled [ 154.662379][ T7103] BTRFS info (device loop0): rebuilding free space tree [ 154.736901][ T7103] BTRFS info (device loop0): disabling free space tree [ 154.761520][ T7103] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 154.794372][ T7103] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 154.876154][ T7138] loop3: detected capacity change from 0 to 128 [ 154.924702][ T7138] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 154.954402][ T5788] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 154.955149][ T5790] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 154.986831][ T7138] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 155.129039][ T6733] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop0 scanned by udevd (6733) [ 155.191890][ T5790] usb 2-1: Using ep0 maxpacket: 8 [ 155.199638][ T5790] usb 2-1: config 0 has no interfaces? [ 155.209162][ T5790] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 155.229147][ T5790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.241722][ T5790] usb 2-1: Product: syz [ 155.246236][ T5790] usb 2-1: Manufacturer: syz [ 155.255436][ T5790] usb 2-1: SerialNumber: syz [ 155.267708][ T1117] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 155.294337][ T5790] usb 2-1: config 0 descriptor?? [ 155.617322][ T7148] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 155.698122][ T7150] loop3: detected capacity change from 0 to 256 [ 155.787962][ T7119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.425'. [ 155.797410][ T7119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.425'. [ 155.812879][ T7150] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 155.879113][ T5790] usb 2-1: USB disconnect, device number 5 [ 156.324323][ T7163] loop3: detected capacity change from 0 to 256 [ 156.368485][ T7163] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.891822][ T7173] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 157.094337][ T785] kernel write not supported for file /input/mouse0 (pid: 785 comm: kworker/1:2) [ 157.713410][ T7182] loop2: detected capacity change from 0 to 32768 [ 157.749043][ T7182] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 157.812052][ T5790] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 157.842019][ T7182] XFS (loop2): Ending clean mount [ 157.938260][ T7205] loop0: detected capacity change from 0 to 128 [ 157.997619][ T7205] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 158.038928][ T7205] ext4 filesystem being mounted at /109/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 158.060335][ T5790] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 158.083251][ T5787] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 158.117671][ T5790] usb 2-1: config 0 interface 0 has no altsetting 0 [ 158.163168][ T5790] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 158.182222][ T5790] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 158.190572][ T5790] usb 2-1: Product: syz [ 158.200088][ T5790] usb 2-1: Manufacturer: syz [ 158.209753][ T5790] usb 2-1: SerialNumber: syz [ 158.225699][ T5788] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.236197][ T5790] usb 2-1: config 0 descriptor?? [ 158.253002][ T5790] usb 2-1: selecting invalid altsetting 0 [ 158.496042][ T7213] loop0: detected capacity change from 0 to 512 [ 158.506350][ T5859] usb 2-1: USB disconnect, device number 6 [ 158.508378][ T7213] EXT4-fs: Ignoring removed oldalloc option [ 158.548663][ T7213] EXT4-fs (loop0): 1 truncate cleaned up [ 158.585233][ T7213] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.683749][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.427534][ T7220] loop0: detected capacity change from 0 to 128 [ 159.453185][ T7220] EXT4-fs: Ignoring removed nobh option [ 159.464955][ T7220] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 159.484470][ T7220] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.659505][ T7225] loop2: detected capacity change from 0 to 2048 [ 159.662228][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 159.736730][ T7225] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.805094][ T5788] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 159.881848][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 159.905797][ T8] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 159.931740][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.969315][ T7231] loop0: detected capacity change from 0 to 512 [ 159.980814][ T8] usb 4-1: config 0 descriptor?? [ 160.056844][ T7231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.108774][ T7231] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.232998][ T8] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 160.253872][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 160.274735][ T8] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 160.293457][ T8] usb 4-1: media controller created [ 160.376878][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 160.405197][ T7243] loop1: detected capacity change from 0 to 64 [ 160.446985][ T8] az6027: usb out operation failed. (-71) [ 160.472105][ T8] az6027: usb out operation failed. (-71) [ 160.486701][ T5788] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 160.499636][ T8] stb0899_attach: Driver disabled by Kconfig [ 160.512463][ T8] az6027: no front-end attached [ 160.512463][ T8] [ 160.531378][ T28] audit: type=1800 audit(1759883369.722:7): pid=7243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.465" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 160.557414][ T8] az6027: usb out operation failed. (-71) [ 160.567280][ T8] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 160.576246][ T5788] EXT4-fs (loop0): Remounting filesystem read-only [ 160.612104][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 160.674515][ T8] dvb-usb: schedule remote query interval to 400 msecs. [ 160.686603][ T8] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 160.699808][ T8] usb 4-1: USB disconnect, device number 7 [ 160.866410][ T8] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 161.154516][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.235172][ T1117] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 161.262082][ T1117] Quota error (device loop0): write_blk: dquota write failed [ 161.290963][ T1117] Quota error (device loop0): free_dqentry: Can't write quota data block 5 [ 161.319457][ T1117] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 161.348476][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.351695][ T1117] Quota error (device loop0): write_blk: dquota write failed [ 161.403371][ T1117] Quota error (device loop0): free_dqentry: Can't write quota data block 5 [ 161.428122][ T7259] netlink: 'syz.2.472': attribute type 5 has an invalid length. [ 161.438253][ T7257] loop1: detected capacity change from 0 to 2048 [ 161.447457][ T7259] netlink: 'syz.2.472': attribute type 11 has an invalid length. [ 161.506956][ T7257] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.528539][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 161.554694][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.706958][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.721762][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 161.744606][ T8] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 161.761677][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.786784][ T8] usb 4-1: config 0 descriptor?? [ 161.856544][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.061891][ T8] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 162.078133][ T7262] loop2: detected capacity change from 0 to 64 [ 162.122511][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 162.181914][ T28] audit: type=1800 audit(1759883371.362:8): pid=7262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.475" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 162.213009][ T8] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 162.220257][ T8] usb 4-1: media controller created [ 162.360899][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.509569][ T8] az6027: usb out operation failed. (-71) [ 162.538901][ T8] az6027: usb out operation failed. (-71) [ 162.555652][ T8] stb0899_attach: Driver disabled by Kconfig [ 162.586447][ T8] az6027: no front-end attached [ 162.586447][ T8] [ 162.627489][ T8] az6027: usb out operation failed. (-71) [ 162.650455][ T8] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 162.693785][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 162.772084][ T8] dvb-usb: schedule remote query interval to 400 msecs. [ 162.779474][ T8] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 162.882929][ T8] usb 4-1: USB disconnect, device number 8 [ 163.078894][ T8] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 163.265772][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 163.293951][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 163.314302][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 163.327827][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 163.362077][ T5796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 163.371262][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 163.642393][ T7292] loop1: detected capacity change from 0 to 4096 [ 163.670514][ T7292] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 163.820741][ T7298] loop3: detected capacity change from 0 to 512 [ 163.847063][ T7298] EXT4-fs: Ignoring removed oldalloc option [ 163.956957][ T7298] EXT4-fs (loop3): 1 truncate cleaned up [ 163.988362][ T7298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.004131][ T28] audit: type=1800 audit(1759883373.212:9): pid=7292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.490" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 164.095943][ T28] audit: type=1800 audit(1759883373.232:10): pid=7303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.486" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 164.120020][ T28] audit: type=1800 audit(1759883373.242:11): pid=7292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.490" name="file3" dev="loop1" ino=31 res=0 errno=0 [ 164.252845][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.353947][ T7310] loop1: detected capacity change from 0 to 256 [ 164.474103][ T7310] FAT-fs (loop1): Directory bread(block 64) failed [ 164.480921][ T7310] FAT-fs (loop1): Directory bread(block 65) failed [ 164.513437][ T7310] FAT-fs (loop1): Directory bread(block 66) failed [ 164.520542][ T7310] FAT-fs (loop1): Directory bread(block 67) failed [ 164.537594][ T7310] FAT-fs (loop1): Directory bread(block 68) failed [ 164.561137][ T7310] FAT-fs (loop1): Directory bread(block 69) failed [ 164.577747][ T7310] FAT-fs (loop1): Directory bread(block 70) failed [ 164.586133][ T7310] FAT-fs (loop1): Directory bread(block 71) failed [ 164.593857][ T7310] FAT-fs (loop1): Directory bread(block 72) failed [ 164.601277][ T7310] FAT-fs (loop1): Directory bread(block 73) failed [ 164.614065][ T42] IPVS: stopping backup sync thread 7148 ... [ 165.301153][ T7282] chnl_net:caif_netlink_parms(): no params data found [ 165.450503][ T5791] Bluetooth: hci2: command tx timeout [ 165.552330][ T42] hsr_slave_0: left promiscuous mode [ 165.604327][ T42] hsr_slave_1: left promiscuous mode [ 165.627735][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.658764][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.696436][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.721969][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.754773][ T42] bridge_slave_1: left allmulticast mode [ 165.765115][ T42] bridge_slave_1: left promiscuous mode [ 165.806344][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.834365][ T5842] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 165.855761][ T42] bridge_slave_0: left allmulticast mode [ 165.861587][ T42] bridge_slave_0: left promiscuous mode [ 165.870569][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.990481][ T7354] loop1: detected capacity change from 0 to 512 [ 166.020368][ T7354] EXT4-fs: Ignoring removed oldalloc option [ 166.026857][ T5842] usb 3-1: Using ep0 maxpacket: 32 [ 166.036005][ T42] veth1_macvtap: left promiscuous mode [ 166.041233][ T5842] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 166.067564][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.072422][ T42] veth0_macvtap: left promiscuous mode [ 166.084078][ T7354] EXT4-fs (loop1): 1 truncate cleaned up [ 166.093726][ T5842] usb 3-1: config 0 descriptor?? [ 166.103353][ T7354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.141987][ T42] veth1_vlan: left promiscuous mode [ 166.162359][ T42] veth0_vlan: left promiscuous mode [ 166.322542][ T5842] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 166.357439][ T5842] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 166.402553][ T5842] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 166.440692][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.440955][ T5842] usb 3-1: media controller created [ 166.583924][ T5842] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.696288][ T5842] az6027: usb out operation failed. (-71) [ 166.728640][ T5842] az6027: usb out operation failed. (-71) [ 166.748615][ T5842] stb0899_attach: Driver disabled by Kconfig [ 166.754789][ T5842] az6027: no front-end attached [ 166.754789][ T5842] [ 166.767413][ T5842] az6027: usb out operation failed. (-71) [ 166.773768][ T5842] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 166.791110][ T5842] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 166.809456][ T5842] dvb-usb: schedule remote query interval to 400 msecs. [ 166.828412][ T5842] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 166.856140][ T5842] usb 3-1: USB disconnect, device number 6 [ 166.879960][ T5174] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 166.985084][ T5842] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 167.055970][ T7364] loop3: detected capacity change from 0 to 512 [ 167.083062][ T5174] usb 2-1: Using ep0 maxpacket: 8 [ 167.092686][ T5174] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 167.104581][ T5174] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 167.127682][ T5174] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 167.139643][ T5174] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.153494][ T5174] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 167.163341][ T5174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.172869][ T7364] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.198944][ T7364] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.272309][ T28] audit: type=1800 audit(1759883376.472:12): pid=7364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.503" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 167.406301][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.449214][ T5174] usb 2-1: GET_CAPABILITIES returned 0 [ 167.455172][ T5174] usbtmc 2-1:16.0: can't read capabilities [ 167.522062][ T5791] Bluetooth: hci2: command tx timeout [ 167.685368][ T5174] usb 2-1: USB disconnect, device number 7 [ 167.746284][ T7372] loop3: detected capacity change from 0 to 8192 [ 167.773782][ T7372] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 167.787602][ T7372] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 167.800602][ T7372] REISERFS (device loop3): using ordered data mode [ 167.819661][ T7372] reiserfs: using flush barriers [ 167.883162][ T7372] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 167.903617][ T7372] REISERFS (device loop3): checking transaction log (loop3) [ 167.943361][ T7372] REISERFS (device loop3): Using r5 hash to sort names [ 167.963608][ T7372] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 167.996641][ T7372] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 168.128882][ T7372] REISERFS warning (device loop3): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=255, len=3 - odd [ 168.217703][ T42] team0 (unregistering): Port device team_slave_1 removed [ 168.310122][ T42] team0 (unregistering): Port device team_slave_0 removed [ 168.590850][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.803883][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.821151][ T7384] loop3: detected capacity change from 0 to 64 [ 168.959660][ T7384] hfs: bad catalog entry type 65535 [ 169.161119][ T28] audit: type=1800 audit(1759883378.362:13): pid=7390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.511" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 169.601966][ T5791] Bluetooth: hci2: command tx timeout [ 169.952027][ T42] bond0 (unregistering): Released all slaves [ 170.369365][ T7282] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.392232][ T7282] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.416544][ T7282] bridge_slave_0: entered allmulticast mode [ 170.448886][ T7406] loop1: detected capacity change from 0 to 8192 [ 170.449458][ T7282] bridge_slave_0: entered promiscuous mode [ 170.471147][ T7282] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.492676][ T5174] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 170.510631][ T7282] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.529199][ T7282] bridge_slave_1: entered allmulticast mode [ 170.536595][ T7406] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 170.543676][ T7282] bridge_slave_1: entered promiscuous mode [ 170.557529][ T7406] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 170.602827][ T7406] REISERFS (device loop1): using ordered data mode [ 170.624993][ T7406] reiserfs: using flush barriers [ 170.660158][ T7282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.687069][ T7406] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 170.720592][ T7282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.742321][ T7406] REISERFS (device loop1): checking transaction log (loop1) [ 170.751489][ T5174] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 170.768097][ T5174] usb 4-1: config 0 has no interface number 0 [ 170.791074][ T5174] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 170.796546][ T7406] REISERFS (device loop1): Using r5 hash to sort names [ 170.806044][ T5174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.829671][ T7406] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 170.837276][ T5174] usb 4-1: Product: syz [ 170.862812][ T5174] usb 4-1: Manufacturer: syz [ 170.867499][ T5174] usb 4-1: SerialNumber: syz [ 170.876722][ T7282] team0: Port device team_slave_0 added [ 170.893933][ T7406] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 170.897049][ T5174] usb 4-1: config 0 descriptor?? [ 170.920927][ T7282] team0: Port device team_slave_1 added [ 170.989626][ T7406] REISERFS warning (device loop1): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=255, len=3 - odd [ 171.075301][ T7282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.091761][ T7282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.179050][ T7282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.221043][ T7282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.250040][ T7282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.301948][ T7282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.382046][ T5174] usb 4-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (1) [ 171.389953][ T5174] usb 4-1: Firmware version (0.0) predates our first public release. [ 171.429880][ T5174] usb 4-1: Please update to version 0.2 or newer [ 171.526237][ T7282] hsr_slave_0: entered promiscuous mode [ 171.547201][ T7423] loop1: detected capacity change from 0 to 64 [ 171.554480][ T7282] hsr_slave_1: entered promiscuous mode [ 171.598996][ T7282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.624380][ T7282] Cannot create hsr debugfs directory [ 171.658012][ T7423] hfs: bad catalog entry type 65535 [ 171.682260][ T5791] Bluetooth: hci2: command tx timeout [ 171.745856][ T7429] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 171.782015][ T5174] usb 4-1: USB disconnect, device number 9 [ 172.290567][ T7282] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 172.309672][ T7282] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 172.326735][ T7282] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.338658][ T7282] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 172.469668][ T7282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.505219][ T7282] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.529686][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.536954][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.564149][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.571428][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.870547][ T7282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.270063][ T7282] veth0_vlan: entered promiscuous mode [ 173.300433][ T7282] veth1_vlan: entered promiscuous mode [ 173.359854][ T7282] veth0_macvtap: entered promiscuous mode [ 173.390067][ T7282] veth1_macvtap: entered promiscuous mode [ 173.429197][ T7282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.442786][ T7282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.460655][ T7282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.474004][ T7282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.485189][ T7282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.495892][ T7282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.507874][ T7282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.538261][ T7282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.555132][ T7282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.565704][ T7282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.577917][ T7282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.590063][ T7282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.605287][ T7282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.619273][ T7282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.639778][ T7282] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.655034][ T7282] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.668652][ T7282] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.678837][ T7282] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.811534][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.830422][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.873189][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.882837][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.124318][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.474'. [ 174.147775][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.474'. [ 174.646470][ T7503] macvlan0: entered promiscuous mode [ 174.722783][ T7503] netlink: 'syz.2.529': attribute type 1 has an invalid length. [ 174.761991][ T7503] netlink: 'syz.2.529': attribute type 2 has an invalid length. [ 175.536182][ T7519] loop4: detected capacity change from 0 to 2048 [ 175.611992][ T7519] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.668653][ T7496] loop1: detected capacity change from 0 to 32768 [ 175.706793][ T7519] capability: warning: `syz.4.537' uses 32-bit capabilities (legacy support in use) [ 175.730384][ T7496] XFS: ikeep mount option is deprecated. [ 175.830979][ T7496] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 175.849344][ T7529] netlink: 'syz.2.539': attribute type 9 has an invalid length. [ 176.090208][ T7508] loop3: detected capacity change from 0 to 32768 [ 176.230474][ T7508] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 176.302463][ T7496] XFS (loop1): Ending clean mount [ 176.369768][ T7496] XFS (loop1): Quotacheck needed: Please wait. [ 176.606776][ T7508] XFS (loop3): Ending clean mount [ 176.615903][ T7496] XFS (loop1): Quotacheck: Done. [ 176.653027][ T7508] XFS (loop3): Quotacheck needed: Please wait. [ 176.846773][ T7508] XFS (loop3): Quotacheck: Done. [ 176.915988][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 176.934414][ T5785] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 176.958693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 176.970624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 176.985837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 177.013931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 177.022819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 177.031233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 177.041799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 177.050354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 177.495227][ T5786] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 177.790826][ T7574] pimreg: tun_chr_ioctl cmd 1074025677 [ 177.852043][ T7574] pimreg: linktype set to 823 [ 178.676131][ T7597] loop1: detected capacity change from 0 to 2048 [ 178.722921][ T7597] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.828477][ T7599] loop3: detected capacity change from 0 to 2048 [ 178.845854][ T7599] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 178.922656][ T7602] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.929181][ T7599] syz.3.553: attempt to access beyond end of device [ 178.929181][ T7599] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 179.525678][ T7618] loop1: detected capacity change from 0 to 1024 [ 179.601901][ T7618] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.621999][ T7612] loop2: detected capacity change from 0 to 32768 [ 180.655748][ T7612] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.556 (7612) [ 180.718175][ T7612] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 180.745950][ T7612] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 180.782373][ T7640] netlink: 'syz.4.564': attribute type 9 has an invalid length. [ 180.793336][ T7612] BTRFS info (device loop2): enabling ssd optimizations [ 180.824421][ T7612] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 180.854040][ T7612] BTRFS info (device loop2): force zstd compression, level 3 [ 180.877404][ T7612] BTRFS info (device loop2): ignoring data csums [ 180.895726][ T7642] netlink: 128 bytes leftover after parsing attributes in process `syz.1.565'. [ 180.910311][ T7612] BTRFS info (device loop2): turning on async discard [ 180.928640][ T7612] BTRFS warning (device loop2): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 180.946102][ T7642] netlink: 40 bytes leftover after parsing attributes in process `syz.1.565'. [ 180.997097][ T7612] BTRFS info (device loop2): metadata ratio 0 [ 181.024995][ T7612] BTRFS info (device loop2): using free space tree [ 181.460495][ T7668] loop3: detected capacity change from 0 to 128 [ 181.710522][ T5787] BTRFS info (device loop2: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 181.844682][ T7678] netlink: 68 bytes leftover after parsing attributes in process `syz.3.572'. [ 182.540500][ T7693] loop3: detected capacity change from 0 to 4096 [ 182.635878][ T7693] ntfs: (device loop3): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 182.692235][ T7693] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 182.741410][ T7693] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 182.791065][ T7698] loop1: detected capacity change from 0 to 2048 [ 182.811338][ T7693] ntfs: volume version 3.1. [ 182.846179][ T7698] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.091179][ T5786] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 183.219408][ T7683] loop4: detected capacity change from 0 to 32768 [ 183.237715][ T7704] loop2: detected capacity change from 0 to 4096 [ 183.308811][ T7683] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 183.328510][ T7704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.633307][ T7683] XFS (loop4): Ending clean mount [ 183.641435][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.681788][ T7683] XFS (loop4): Quotacheck needed: Please wait. [ 183.869147][ T7683] XFS (loop4): Quotacheck: Done. [ 184.088944][ T7282] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 184.668300][ T7748] loop4: detected capacity change from 0 to 128 [ 184.700500][ T7748] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.717601][ T7748] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 184.735235][ T7750] loop3: detected capacity change from 0 to 256 [ 184.809821][ T7750] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 184.851763][ T7748] fscrypt (loop4, inode 12): Mutually exclusive encryption flags (0x17) [ 184.867327][ T7750] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 184.992071][ T7282] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.439529][ T7770] loop4: detected capacity change from 0 to 32768 [ 186.487921][ T7770] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 186.635622][ T7282] (syz-executor,7282,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 186.685494][ T7282] ocfs2: Unmounting device (7,4) on (node local) [ 187.046870][ T7812] loop4: detected capacity change from 0 to 1024 [ 187.219789][ T7812] hfsplus: bad catalog folder thread [ 187.229664][ T7790] loop3: detected capacity change from 0 to 32768 [ 187.260484][ T7790] jfs_strtoUCS: char2uni returned -22. [ 187.266307][ T7790] charset = cp936, char = 0xfc [ 187.825669][ T7829] loop3: detected capacity change from 0 to 64 [ 187.946481][ T7829] Trying to free block not in datazone [ 187.981698][ T7829] Trying to free block not in datazone [ 188.022821][ T7829] Trying to free block not in datazone [ 188.023912][ T7832] Trying to free block not in datazone [ 188.052924][ T7832] minix_free_inode: bit 5 already cleared [ 188.225235][ T7836] netlink: 28 bytes leftover after parsing attributes in process `syz.4.627'. [ 188.470950][ T7818] loop2: detected capacity change from 0 to 32768 [ 188.607462][ T7818] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 188.650859][ T1137] (kworker/u4:10,1137,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=648518346341351496, rec_len=0, name_len=0 [ 188.762200][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 188.803151][ T7818] (syz.2.623,7818,0):ocfs2_remove_inode_range:1793 ERROR: status = -22 [ 188.840413][ T7818] (syz.2.623,7818,0):__ocfs2_change_file_space:2044 ERROR: status = -22 [ 188.905104][ T7851] loop3: detected capacity change from 0 to 8192 [ 188.978955][ T7851] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 188.995281][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 189.012629][ T7851] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 189.043505][ T7851] REISERFS (device loop3): using ordered data mode [ 189.050273][ T7851] reiserfs: using flush barriers [ 189.057614][ T5787] ocfs2: Unmounting device (7,2) on (node local) [ 189.057736][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 189.075235][ T23] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 189.087072][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.105766][ T23] usb 5-1: Product: syz [ 189.110043][ T23] usb 5-1: Manufacturer: syz [ 189.114258][ T7851] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 189.115054][ T23] usb 5-1: SerialNumber: syz [ 189.143178][ T23] usb 5-1: config 0 descriptor?? [ 189.191170][ T7851] REISERFS (device loop3): checking transaction log (loop3) [ 189.501948][ T7860] ALSA: mixer_oss: invalid index 40000 [ 189.546161][ T7851] REISERFS (device loop3): Using tea hash to sort names [ 189.564552][ T7851] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 189.586808][ T7851] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 189.623267][ T23] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 189.686020][ T7851] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 6) not found (pos 2) [ 189.686088][ T7862] loop2: detected capacity change from 0 to 512 [ 189.707791][ T7864] netlink: 'syz.1.640': attribute type 13 has an invalid length. [ 189.721541][ T7864] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.640'. [ 189.735253][ T7865] overlayfs: failed to resolve './bus': -2 [ 190.129773][ T5790] usb 5-1: USB disconnect, device number 2 [ 190.216958][ T7869] loop2: detected capacity change from 0 to 2048 [ 190.340880][ T7869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.377131][ T7869] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.651820][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.882456][ T7895] loop7: detected capacity change from 0 to 7 [ 190.951419][ T7895] Dev loop7: unable to read RDB block 7 [ 190.979151][ T7895] loop7: unable to read partition table [ 191.007799][ T7895] loop7: partition table beyond EOD, truncated [ 191.033469][ T7895] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 191.130588][ T7899] Dev loop7: unable to read RDB block 7 [ 191.151737][ T7899] loop7: unable to read partition table [ 191.187160][ T7899] loop7: partition table beyond EOD, truncated [ 192.341788][ T785] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 192.551866][ T785] usb 4-1: Using ep0 maxpacket: 16 [ 192.572074][ T785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.604451][ T785] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 192.644489][ T785] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 192.683770][ T785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.733335][ T785] usb 4-1: config 0 descriptor?? [ 193.172660][ T785] logitech 0003:046D:C623.0008: item fetching failed at offset 8/69 [ 193.192197][ T785] logitech 0003:046D:C623.0008: parse failed [ 193.211937][ T785] logitech: probe of 0003:046D:C623.0008 failed with error -22 [ 193.373519][ T5859] usb 4-1: USB disconnect, device number 10 [ 194.474773][ T8004] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.681'. [ 194.602960][ T8007] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 194.738671][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.745614][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.795851][ T8013] input: syz0 as /devices/virtual/input/input12 [ 195.625517][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 195.822021][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 195.831928][ T23] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 195.856838][ T23] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 195.878194][ T8027] loop4: detected capacity change from 0 to 32768 [ 195.886184][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.902958][ T23] usb 2-1: Product: syz [ 195.915419][ T23] usb 2-1: Manufacturer: syz [ 195.947426][ T23] usb 2-1: SerialNumber: syz [ 195.982498][ T23] usb 2-1: config 0 descriptor?? [ 196.004772][ T8027] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 196.050878][ T23] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 196.102452][ T23] usb 2-1: setting power ON [ 196.120549][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 196.172931][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 196.204422][ T23] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 196.224586][ T23] usb 2-1: media controller created [ 196.284833][ T7282] ocfs2: Unmounting device (7,4) on (node local) [ 196.312190][ T8034] dvb-usb: bulk message failed: -22 (3/0) [ 196.318363][ T8034] cxusb: i2c rd: len=4096 is too big! [ 196.318363][ T8034] [ 196.322737][ T8055] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 196.359650][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 196.364319][ T8034] dvb-usb: bulk message failed: -22 (3/0) [ 196.414731][ T8034] dvb-usb: bulk message failed: -22 (3/0) [ 196.427058][ T23] usb 2-1: selecting invalid altsetting 6 [ 196.440786][ T23] usb 2-1: digital interface selection failed (-22) [ 196.471743][ T23] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 196.493580][ T23] usb 2-1: setting power OFF [ 196.499067][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 196.530071][ T23] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 196.561793][ T23] (NULL device *): no alternate interface [ 196.669839][ T23] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 196.700963][ T23] usb 2-1: USB disconnect, device number 8 [ 197.630281][ T8089] loop3: detected capacity change from 0 to 1024 [ 197.733873][ T8089] syz.3.702: attempt to access beyond end of device [ 197.733873][ T8089] loop3: rw=2057, sector=262, nr_sectors = 65274 limit=1024 [ 197.792082][ T8089] syz.3.702: attempt to access beyond end of device [ 197.792082][ T8089] loop3: rw=1, sector=262, nr_sectors = 2048 limit=1024 [ 197.852349][ T8089] syz.3.702: attempt to access beyond end of device [ 197.852349][ T8089] loop3: rw=1, sector=2310, nr_sectors = 2048 limit=1024 [ 197.878906][ T8065] loop2: detected capacity change from 0 to 40427 [ 197.899937][ T8065] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 197.919246][ T8065] F2FS-fs (loop2): Image doesn't support compression [ 197.927383][ T8089] syz.3.702: attempt to access beyond end of device [ 197.927383][ T8089] loop3: rw=1, sector=4358, nr_sectors = 2048 limit=1024 [ 197.944400][ T8097] loop4: detected capacity change from 0 to 64 [ 197.948116][ T8065] F2FS-fs (loop2): Image doesn't support compression [ 197.994045][ T8065] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 198.010027][ T8065] F2FS-fs (loop2): invalid crc value [ 198.025158][ T8089] syz.3.702: attempt to access beyond end of device [ 198.025158][ T8089] loop3: rw=1, sector=6406, nr_sectors = 2048 limit=1024 [ 198.053122][ T8089] syz.3.702: attempt to access beyond end of device [ 198.053122][ T8089] loop3: rw=1, sector=8454, nr_sectors = 2048 limit=1024 [ 198.077207][ T8065] F2FS-fs (loop2): Found nat_bits in checkpoint [ 198.107803][ T8089] syz.3.702: attempt to access beyond end of device [ 198.107803][ T8089] loop3: rw=1, sector=10502, nr_sectors = 2048 limit=1024 [ 198.137586][ T28] audit: type=1800 audit(1759883407.322:14): pid=8097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.706" name="file0" dev="loop4" ino=8 res=0 errno=0 [ 198.169157][ T8094] Trying to free block not in datazone [ 198.178282][ T8089] syz.3.702: attempt to access beyond end of device [ 198.178282][ T8089] loop3: rw=1, sector=12550, nr_sectors = 2048 limit=1024 [ 198.202049][ T8094] Trying to free block not in datazone [ 198.218273][ T8094] Trying to free block not in datazone [ 198.224190][ T8089] syz.3.702: attempt to access beyond end of device [ 198.224190][ T8089] loop3: rw=1, sector=14598, nr_sectors = 2048 limit=1024 [ 198.286966][ T8089] syz.3.702: attempt to access beyond end of device [ 198.286966][ T8089] loop3: rw=1, sector=16646, nr_sectors = 2048 limit=1024 [ 198.303656][ T8065] F2FS-fs (loop2): Start checkpoint disabled! [ 198.352296][ T8065] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 198.938521][ T8120] loop1: detected capacity change from 0 to 64 [ 199.089169][ T8120] Trying to free block not in datazone [ 199.105575][ T8126] Trying to free block not in datazone [ 199.110251][ T8120] Trying to free block not in datazone [ 199.165519][ T8120] Trying to free block not in datazone [ 199.979622][ T8154] loop1: detected capacity change from 0 to 512 [ 200.058890][ T8154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.299492][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.695484][ T8177] loop1: detected capacity change from 0 to 16 [ 200.747371][ T8177] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 201.099665][ T8190] loop2: detected capacity change from 0 to 64 [ 201.229707][ T28] audit: type=1800 audit(1759883410.432:15): pid=8190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.733" name="file0" dev="loop2" ino=8 res=0 errno=0 [ 201.284521][ T8188] Trying to free block not in datazone [ 201.315395][ T8188] Trying to free block not in datazone [ 201.343128][ T8188] Trying to free block not in datazone [ 202.112716][ T8226] loop2: detected capacity change from 0 to 128 [ 202.225000][ T8226] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 202.242196][ T8226] ext4 filesystem being mounted at /183/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 202.355361][ T5787] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.035290][ T8258] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 203.053105][ T8258] macvtap1: entered allmulticast mode [ 203.090574][ T8258] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 203.149153][ T8258] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 203.164665][ T8258] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 204.261881][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.768'. [ 204.394779][ T8304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.768'. [ 204.495107][ T8309] loop2: detected capacity change from 0 to 2048 [ 204.592461][ T8309] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 204.623591][ T8316] loop1: detected capacity change from 0 to 64 [ 204.643342][ T8309] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.031990][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 205.242715][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 205.261902][ T23] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 205.310951][ T23] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 205.347389][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.373625][ T23] usb 5-1: Product: syz [ 205.390280][ T23] usb 5-1: Manufacturer: syz [ 205.404123][ T23] usb 5-1: SerialNumber: syz [ 205.430310][ T23] usb 5-1: config 0 descriptor?? [ 205.452170][ T23] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 205.470920][ T23] usb 5-1: setting power ON [ 205.481039][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 205.529941][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 205.578485][ T23] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 205.611773][ T23] usb 5-1: media controller created [ 205.670281][ T8319] dvb-usb: bulk message failed: -22 (3/0) [ 205.699759][ T8319] cxusb: i2c rd: len=4096 is too big! [ 205.699759][ T8319] [ 205.715951][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 205.733002][ T8343] dvb-usb: bulk message failed: -22 (3/0) [ 205.749538][ T8343] dvb-usb: bulk message failed: -22 (3/0) [ 205.815734][ T23] usb 5-1: selecting invalid altsetting 6 [ 205.815801][ T23] usb 5-1: digital interface selection failed (-22) [ 205.815817][ T23] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 205.816588][ T23] usb 5-1: setting power OFF [ 205.816639][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 205.816683][ T23] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 205.816697][ T23] (NULL device *): no alternate interface [ 205.923473][ T23] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 205.942570][ T23] usb 5-1: USB disconnect, device number 3 [ 206.083419][ T8314] loop3: detected capacity change from 0 to 40427 [ 206.112728][ T8314] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 206.112764][ T8314] F2FS-fs (loop3): Image doesn't support compression [ 206.112818][ T8314] F2FS-fs (loop3): Image doesn't support compression [ 206.112838][ T8314] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 206.117128][ T8314] F2FS-fs (loop3): invalid crc value [ 206.123452][ T8314] F2FS-fs (loop3): Found nat_bits in checkpoint [ 206.265055][ T8314] F2FS-fs (loop3): Start checkpoint disabled! [ 206.294133][ T8314] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 206.466988][ T8355] sp0: Synchronizing with TNC [ 207.161818][ T5842] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 207.352779][ T5842] usb 5-1: Using ep0 maxpacket: 8 [ 207.375618][ T5842] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.404834][ T5842] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 207.420440][ T5842] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 207.431648][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.439821][ T5842] usb 5-1: Product: syz [ 207.451026][ T5842] usb 5-1: Manufacturer: syz [ 207.458819][ T8376] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 207.470140][ T5842] usb 5-1: SerialNumber: syz [ 207.491129][ T8376] macvtap1: entered allmulticast mode [ 207.498652][ T8376] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 207.520624][ T8376] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 207.534525][ T8376] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 207.716609][ T5842] cdc_ncm 5-1:1.0: bind() failure [ 207.744099][ T5842] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 207.751188][ T5842] cdc_ncm 5-1:1.1: bind() failure [ 207.761148][ T5842] usb 5-1: USB disconnect, device number 4 [ 207.876192][ T8380] loop3: detected capacity change from 0 to 512 [ 207.897470][ T8380] EXT4-fs: Ignoring removed mblk_io_submit option [ 207.937115][ T8380] EXT4-fs: Ignoring removed nomblk_io_submit option [ 207.957041][ T8380] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 207.973994][ T8380] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 208.047582][ T8380] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4031: comm syz.3.797: Allocating blocks 41-42 which overlap fs metadata [ 208.091293][ T8380] Quota error (device loop3): write_blk: dquota write failed [ 208.109317][ T8380] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 208.122512][ T8380] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4031: comm syz.3.797: Allocating blocks 41-42 which overlap fs metadata [ 208.164995][ T8380] Quota error (device loop3): write_blk: dquota write failed [ 208.177885][ T8380] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 208.198991][ T8380] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.797: Failed to acquire dquot type 1 [ 208.217023][ T8380] EXT4-fs error (device loop3): mb_free_blocks:1938: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 208.263300][ T8380] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #12: comm syz.3.797: corrupted inode contents [ 208.321068][ T8380] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #12: comm syz.3.797: mark_inode_dirty error [ 208.360489][ T8380] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #12: comm syz.3.797: corrupted inode contents [ 208.392260][ T8380] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz.3.797: mark_inode_dirty error [ 208.404816][ T8380] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #12: comm syz.3.797: corrupted inode contents [ 208.427069][ T8380] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 208.436464][ T8380] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #12: comm syz.3.797: corrupted inode contents [ 208.449006][ T8380] EXT4-fs error (device loop3): ext4_truncate:4288: inode #12: comm syz.3.797: mark_inode_dirty error [ 208.460629][ T8380] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 208.471438][ T8380] EXT4-fs (loop3): 1 truncate cleaned up [ 208.485375][ T8380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.566098][ T8380] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 208.653427][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.066427][ T8405] loop3: detected capacity change from 0 to 256 [ 209.103636][ T8405] exfat: Deprecated parameter 'utf8' [ 209.135473][ T8405] exfat: Deprecated parameter 'namecase' [ 209.208965][ T8405] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xc465a08c, utbl_chksum : 0xe619d30d) [ 210.474137][ T8443] loop4: detected capacity change from 0 to 16 [ 210.492962][ T8443] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 211.552221][ T8461] [U] [ 211.555626][ T8461] [U] [ 211.558472][ T8461] [U] [ 211.561483][ T8461] [U] [ 211.591840][ T8461] [U] [ 211.594627][ T8461] [U] [ 211.597455][ T8461] [U] [ 211.600277][ T8461] [U] [ 211.602993][ T8461] [U] ( [ 211.605820][ T8461] [U]  [ 211.608716][ T8461] [U] [ 211.611458][ T8461] [U] [ 211.658088][ T8461] [U] [ 211.660935][ T8461] [U] [ 211.663705][ T8461] [U] [ 211.666474][ T8461] [U] [ 211.672924][ T8463] loop4: detected capacity change from 0 to 4096 [ 211.706193][ T8460] [U] [ 211.771010][ T8467] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.057920][ T8469] loop3: detected capacity change from 0 to 8192 [ 212.098617][ T8469] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 212.161949][ T5798] Bluetooth: hci1: command 0x0406 tx timeout [ 212.168155][ T5792] Bluetooth: hci0: command 0x0406 tx timeout [ 212.168195][ T5803] Bluetooth: hci3: command 0x0406 tx timeout [ 212.187510][ T8469] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 212.231863][ T8469] REISERFS (device loop3): using ordered data mode [ 212.238469][ T8469] reiserfs: using flush barriers [ 212.277784][ T8469] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 212.306665][ T8469] REISERFS (device loop3): checking transaction log (loop3) [ 212.580033][ T8474] loop1: detected capacity change from 0 to 128 [ 212.608428][ T8465] loop2: detected capacity change from 0 to 32768 [ 212.634148][ T8469] REISERFS (device loop3): Using tea hash to sort names [ 212.649774][ T8474] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 212.652895][ T8469] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 212.725359][ T8480] sctp: [Deprecated]: syz.4.837 (pid 8480) Use of struct sctp_assoc_value in delayed_ack socket option. [ 212.725359][ T8480] Use struct sctp_sack_info instead [ 212.802693][ T8474] ext4 filesystem being mounted at /237/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 212.872945][ T8474] fscrypt (loop1, inode 12): Direct key flag not allowed with different contents and filenames modes [ 212.987520][ T5787] read_mapping_page failed! [ 213.011859][ T5787] ERROR: (device loop2): txCommit: [ 213.011859][ T5787] [ 213.044153][ T5787] ERROR: (device loop2): remounting filesystem as read-only [ 213.083654][ T5785] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 213.638853][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.754769][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.821810][ T5842] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 213.906794][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.053755][ T5842] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 214.071714][ T5842] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.107007][ T5842] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 214.135404][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.147504][ T5842] usb 2-1: Product: syz [ 214.153530][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.156787][ T5842] usb 2-1: Manufacturer: syz [ 214.170892][ T5842] usb 2-1: SerialNumber: syz [ 214.187511][ T5842] usb 2-1: config 0 descriptor?? [ 214.201162][ T5842] ims_pcu 2-1:0.0: Missing CDC union descriptor [ 214.222569][ T5842] ims_pcu: probe of 2-1:0.0 failed with error -22 [ 214.248190][ T8500] sp0: Synchronizing with TNC [ 214.658769][ T23] usb 2-1: USB disconnect, device number 9 [ 215.310597][ T8517] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 215.317806][ T8517] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 215.369978][ T8517] vhci_hcd vhci_hcd.0: Device attached [ 215.438773][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.452666][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.473315][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.511551][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.522770][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.530638][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.555211][ T5174] vhci_hcd: vhci_device speed not set [ 215.571807][ T5859] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 215.624827][ T8535] loop1: detected capacity change from 0 to 64 [ 215.671273][ T5174] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 215.806179][ T5859] usb 4-1: config 0 has no interfaces? [ 215.832007][ T5859] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 215.841312][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.890218][ T5859] usb 4-1: config 0 descriptor?? [ 216.039242][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.859'. [ 216.139218][ T8521] usb 39-1: recv xbuf, 0 [ 216.140866][ T5859] usb 4-1: USB disconnect, device number 11 [ 216.183205][ T1117] vhci_hcd: stop threads [ 216.204394][ T1117] vhci_hcd: release socket [ 216.236150][ T1117] vhci_hcd: disconnect device [ 216.242944][ T5174] vhci_hcd: vhci_device speed not set [ 217.080783][ T11] hsr_slave_0: left promiscuous mode [ 217.127738][ T11] hsr_slave_1: left promiscuous mode [ 217.147973][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.169189][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.202645][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.223633][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.252162][ T11] bridge_slave_1: left allmulticast mode [ 217.257893][ T11] bridge_slave_1: left promiscuous mode [ 217.279108][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.290644][ T11] bridge_slave_0: left allmulticast mode [ 217.301210][ T11] bridge_slave_0: left promiscuous mode [ 217.308615][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.382341][ T11] veth1_macvtap: left promiscuous mode [ 217.417592][ T11] veth0_macvtap: left promiscuous mode [ 217.432892][ T11] veth1_vlan: left promiscuous mode [ 217.438334][ T11] veth0_vlan: left promiscuous mode [ 217.602219][ T5791] Bluetooth: hci1: command tx timeout [ 218.011896][ T5790] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 218.214355][ T5790] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 218.242230][ T5790] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 218.256527][ T5790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.271332][ T5790] usb 2-1: Product: syz [ 218.282948][ T5790] usb 2-1: Manufacturer: syz [ 218.287778][ T5790] usb 2-1: SerialNumber: syz [ 218.300436][ T5790] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 218.580677][ T11] team0 (unregistering): Port device team_slave_1 removed [ 218.667865][ T11] team0 (unregistering): Port device team_slave_0 removed [ 218.738078][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.814863][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.141032][ T5790] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 219.188490][ T5790] usb 2-1: USB disconnect, device number 10 [ 219.638931][ T11] bond0 (unregistering): Released all slaves [ 219.683316][ T5791] Bluetooth: hci1: command tx timeout [ 219.766098][ T8569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.867'. [ 219.798105][ T8569] vlan2: entered promiscuous mode [ 219.820038][ T8569] bond0: entered promiscuous mode [ 219.829858][ T8569] bond_slave_0: entered promiscuous mode [ 219.836480][ T8569] bond_slave_1: entered promiscuous mode [ 219.967131][ T8527] chnl_net:caif_netlink_parms(): no params data found [ 220.326443][ T5790] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 220.429003][ T8527] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.438853][ T8527] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.454560][ T8527] bridge_slave_0: entered allmulticast mode [ 220.471198][ T8527] bridge_slave_0: entered promiscuous mode [ 220.512100][ T5790] usb 2-1: Using ep0 maxpacket: 16 [ 220.518029][ T8527] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.519943][ T5790] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.567148][ T8527] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.582235][ T5790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 220.595179][ T8527] bridge_slave_1: entered allmulticast mode [ 220.628733][ T8527] bridge_slave_1: entered promiscuous mode [ 220.650615][ T5790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 220.718177][ T5790] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 220.769279][ T5790] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.817010][ T8527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.835484][ T5790] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 220.850844][ T5790] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 220.860394][ T5790] usb 2-1: Manufacturer: syz [ 220.891425][ T8527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.939330][ T5790] usb 2-1: config 0 descriptor?? [ 221.090224][ T8527] team0: Port device team_slave_0 added [ 221.138992][ T8527] team0: Port device team_slave_1 added [ 221.267176][ T8527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.282827][ T8527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.333078][ T8527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.344221][ T5790] rc_core: IR keymap rc-hauppauge not found [ 221.350589][ T5790] Registered IR keymap rc-empty [ 221.364533][ T5790] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.376222][ T8527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.398537][ T8527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.428201][ T5790] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.437251][ T8527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.467560][ T5790] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 221.513806][ T5790] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13 [ 221.569878][ T5790] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.616119][ T5790] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.626716][ T8527] hsr_slave_0: entered promiscuous mode [ 221.648245][ T8527] hsr_slave_1: entered promiscuous mode [ 221.661793][ T5790] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.689506][ T8527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.709335][ T5790] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.717046][ T8527] Cannot create hsr debugfs directory [ 221.762262][ T5790] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.771779][ T5791] Bluetooth: hci1: command tx timeout [ 221.812573][ T5790] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.861896][ T5790] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.893129][ T5790] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.941848][ T5790] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.992360][ T5790] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 222.047540][ T5790] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 222.067457][ T5790] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 222.082191][ T5790] usb 2-1: USB disconnect, device number 11 [ 222.614569][ T8527] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 222.686127][ T8527] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 222.752367][ T8527] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 222.815481][ T8527] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 223.085978][ T8653] loop3: detected capacity change from 0 to 1024 [ 223.110746][ T8653] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 223.198903][ T8653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.316046][ T8653] EXT4-fs error (device loop3): ext4_xattr_inode_iget:440: comm syz.3.886: inode #10: comm syz.3.886: iget: illegal inode # [ 223.412676][ T8653] EXT4-fs (loop3): Remounting filesystem read-only [ 223.443013][ T8527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.452147][ T8653] EXT4-fs warning (device loop3): ext4_xattr_inode_inc_ref_all:1146: inode #19: comm syz.3.886: cleanup dec ref error -5 [ 223.484218][ T8653] EXT4-fs warning (device loop3): ext4_xattr_block_set:2202: inode #19: comm syz.3.886: dec ref error=-5 [ 223.500945][ T8527] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.623236][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.630473][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.674385][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.681770][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.696107][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.844059][ T5791] Bluetooth: hci1: command tx timeout [ 224.018957][ T8683] program syz.4.893 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.492065][ T5790] kernel write not supported for file /input/mouse0 (pid: 5790 comm: kworker/0:4) [ 224.849004][ T8527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.211341][ T8707] loop4: detected capacity change from 0 to 4096 [ 225.422660][ T8707] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 225.505797][ T28] audit: type=1800 audit(1759883434.712:16): pid=8707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.901" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 225.646849][ T7282] ntfs3: loop4: ino=9, ntfs_sync_fs failed, -22. [ 226.052761][ T8527] veth0_vlan: entered promiscuous mode [ 226.105219][ T8527] veth1_vlan: entered promiscuous mode [ 226.131955][ T5790] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 226.205686][ T8527] veth0_macvtap: entered promiscuous mode [ 226.245398][ T8527] veth1_macvtap: entered promiscuous mode [ 226.293622][ T8527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.321933][ T8527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.343255][ T8527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.355758][ T5790] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 226.371879][ T5790] usb 4-1: config 0 has no interface number 0 [ 226.378342][ T8527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.402957][ T8527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.421795][ T5790] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 226.441490][ T5790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.451898][ T8527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.471674][ T5790] usb 4-1: Product: syz [ 226.478594][ T8527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.492009][ T5790] usb 4-1: Manufacturer: syz [ 226.497566][ T5790] usb 4-1: SerialNumber: syz [ 226.544394][ T5790] usb 4-1: config 0 descriptor?? [ 226.554339][ T8527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.579707][ T8720] loop1: detected capacity change from 0 to 32768 [ 226.590797][ T8527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.603002][ T8527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.614586][ T8527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.626366][ T8527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.649611][ T8720] [ 226.649611][ T8720] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.649611][ T8720] [ 226.661127][ T8527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.684527][ T8527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.705702][ T28] audit: type=1800 audit(1759883435.912:17): pid=8720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.903" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 226.743678][ T8527] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.760206][ T8527] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.776298][ T8720] ERROR: (device loop1): diWrite: ixpxd invalid [ 226.776298][ T8720] [ 226.780956][ T8527] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.805209][ T5790] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 226.817954][ T8720] ERROR: (device loop1): txCommit: [ 226.817954][ T8720] [ 226.827323][ T5790] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 226.843243][ T8527] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.853574][ T5790] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 226.872275][ T5790] usb 4-1: media controller created [ 226.946943][ T5785] [ 226.946943][ T5785] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.946943][ T5785] [ 226.954395][ T5790] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 227.010462][ T5785] [ 227.010462][ T5785] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 227.010462][ T5785] [ 227.127355][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.144886][ T5790] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 227.160274][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.264628][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.291398][ T5790] usb 4-1: USB disconnect, device number 12 [ 227.297704][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.684002][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 228.013260][ T5842] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 228.253048][ T5842] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.296675][ T5842] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.331669][ T5842] usb 2-1: config 0 interface 0 has no altsetting 0 [ 228.352787][ T5842] usb 2-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 228.372845][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.393435][ T5842] usb 2-1: config 0 descriptor?? [ 228.852886][ T5842] wacom 0003:056A:00BA.0009: Unknown device_type for 'HID 056a:00ba'. Assuming pen. [ 228.885068][ T5842] wacom 0003:056A:00BA.0009: hidraw0: USB HID v10.00 Device [HID 056a:00ba] on usb-dummy_hcd.1-1/input0 [ 228.946199][ T5842] input: Wacom Intuos4 8x13 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00BA.0009/input/input14 [ 229.152218][ T5842] usb 2-1: USB disconnect, device number 12 [ 229.517786][ T8765] loop3: detected capacity change from 0 to 32768 [ 229.638734][ T8765] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 229.874466][ T5786] ocfs2: Unmounting device (7,3) on (node local) [ 230.336691][ T8808] loop4: detected capacity change from 0 to 256 [ 230.361729][ T7248] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 230.550027][ T8783] loop5: detected capacity change from 0 to 32768 [ 230.587882][ T7248] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 230.632823][ T7248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.677309][ T8783] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 230.688561][ T7248] usb 4-1: Product: syz [ 230.708853][ T7248] usb 4-1: Manufacturer: syz [ 230.719588][ T7248] usb 4-1: SerialNumber: syz [ 230.742869][ T7248] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 230.906967][ T8] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 230.960807][ T8783] XFS (loop5): Ending clean mount [ 231.147936][ T8800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.186426][ T8800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.329612][ T5842] XFS (loop5): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 231.410842][ T8527] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 231.451772][ T5790] XFS (loop5): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xd0, xfs_rmapbt block 0x14 [ 231.471770][ T5790] XFS (loop5): Unmount and run xfs_repair [ 231.477945][ T5790] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 231.500026][ T5790] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 231.566990][ T7248] usb 4-1: USB disconnect, device number 13 [ 231.591395][ T5790] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 10 ................ [ 231.603757][ T5790] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 231.622309][ T5790] 00000030: 00 00 00 00 6c 4b dc c9 00 00 00 00 00 00 00 01 ....lK.......... [ 231.635472][ T5790] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 231.660372][ T5790] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 231.682364][ T5790] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 231.732284][ T5790] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 231.754534][ T5842] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x14 len 4 error 74 [ 231.798065][ T5842] XFS (loop5): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 231.816307][ T5842] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 232.332432][ T8] usb 4-1: Service connection timeout for: 256 [ 232.338914][ T8] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 232.385866][ T8] ath9k_htc: Failed to initialize the device [ 232.431507][ T7248] usb 4-1: ath9k_htc: USB layer deinitialized [ 232.616610][ T8866] loop3: detected capacity change from 0 to 256 [ 232.634341][ T8866] exfat: Deprecated parameter 'namecase' [ 232.640765][ T8866] exfat: Deprecated parameter 'utf8' [ 232.726606][ T8866] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 232.828767][ T5842] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 232.889280][ T8866] autofs4:pid:8866:autofs_fill_super: could not open pipe file descriptor [ 232.946526][ T5842] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 233.834633][ T8892] loop3: detected capacity change from 0 to 24 [ 233.901292][ T8892] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 233.995403][ T8892] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 234.389189][ T8891] loop4: detected capacity change from 0 to 8192 [ 234.500639][ T8891] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 234.521609][ C1] sched: RT throttling activated [ 234.721819][ T8891] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 234.785620][ T8891] REISERFS (device loop4): using ordered data mode [ 234.812852][ T8887] loop5: detected capacity change from 0 to 131072 [ 234.823216][ T8887] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 234.831678][ T8887] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 234.865161][ T8891] reiserfs: using flush barriers [ 234.871347][ T8887] F2FS-fs (loop5): invalid crc value [ 234.889789][ T8891] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 234.912164][ T8887] F2FS-fs (loop5): Found nat_bits in checkpoint [ 234.974373][ T8891] REISERFS (device loop4): checking transaction log (loop4) [ 234.993131][ T8887] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 235.000773][ T8887] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 235.399450][ T8891] REISERFS (device loop4): Using tea hash to sort names [ 235.442549][ T8891] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 237.245883][ T8944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.968'. [ 237.644085][ T5859] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 237.878142][ T5859] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 237.901878][ T5859] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.952443][ T5859] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 237.971687][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.991467][ T5859] usb 5-1: Product: syz [ 238.001889][ T5859] usb 5-1: Manufacturer: syz [ 238.006585][ T5859] usb 5-1: SerialNumber: syz [ 238.032845][ T5859] usb 5-1: config 0 descriptor?? [ 238.060307][ T5859] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 238.068088][ T5859] ims_pcu: probe of 5-1:0.0 failed with error -22 [ 238.566939][ T23] usb 5-1: USB disconnect, device number 5 [ 238.687544][ T8960] loop1: detected capacity change from 0 to 40427 [ 238.728927][ T8960] F2FS-fs (loop1): Found nat_bits in checkpoint [ 238.857714][ T8960] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 238.994318][ T5785] bio_check_eod: 23 callbacks suppressed [ 238.994337][ T5785] syz-executor: attempt to access beyond end of device [ 238.994337][ T5785] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 239.051721][ T5785] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 239.405285][ T8980] loop4: detected capacity change from 0 to 4096 [ 239.432162][ T8980] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 240.749544][ T8985] loop1: detected capacity change from 0 to 32768 [ 240.869412][ T8985] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 240.989947][ T8985] XFS (loop1): Ending clean mount [ 241.001103][ T9022] loop4: detected capacity change from 0 to 16 [ 241.037260][ T8985] XFS (loop1): Quotacheck needed: Please wait. [ 241.212559][ T8985] XFS (loop1): Quotacheck: Done. [ 241.453186][ T5785] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 241.577989][ T9029] loop4: detected capacity change from 0 to 2048 [ 241.688917][ T9029] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 241.722365][ T9029] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 241.797961][ T9029] UDF-fs: Scanning with blocksize 512 failed [ 241.895198][ T9029] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 241.911627][ T9029] UDF-fs: Scanning with blocksize 1024 failed [ 241.983896][ T9029] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 241.991968][ T9029] UDF-fs: Scanning with blocksize 2048 failed [ 242.031038][ T9029] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=385, location=385 [ 242.071735][ T9029] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 242.077095][ T9008] loop5: detected capacity change from 0 to 32768 [ 242.091796][ T9029] UDF-fs: Scanning with blocksize 4096 failed [ 242.098373][ T9029] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 242.139268][ T9008] XFS: noikeep mount option is deprecated. [ 242.231892][ T9008] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 242.316819][ T9029] netlink: 68 bytes leftover after parsing attributes in process `syz.4.996'. [ 242.344042][ T9024] loop3: detected capacity change from 0 to 32768 [ 242.419052][ T9024] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.992 (9024) [ 242.483065][ T9024] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 242.501163][ T9044] loop1: detected capacity change from 0 to 512 [ 242.509398][ T9024] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 242.551862][ T9024] BTRFS info (device loop3): force clearing of disk cache [ 242.562644][ T9024] BTRFS info (device loop3): enabling auto defrag [ 242.569528][ T9024] BTRFS info (device loop3): max_inline at 727 [ 242.584562][ T9044] EXT4-fs (loop1): 1 truncate cleaned up [ 242.587218][ T9024] BTRFS info (device loop3): enabling disk space caching [ 242.633284][ T9044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.648123][ T9024] BTRFS info (device loop3): disk space caching is enabled [ 242.709500][ T9008] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 242.754402][ T9044] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.998: invalid indirect mapped block 234881024 (level 0) [ 242.810882][ T9008] XFS (loop5): Starting recovery (logdev: internal) [ 242.853316][ T9008] XFS (loop5): Ending recovery (logdev: internal) [ 242.873460][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.922005][ T9024] BTRFS info (device loop3): enabling ssd optimizations [ 242.927752][ T9008] XFS (loop5): Metadata corruption detected at xfs_btree_lookup_get_block+0x516/0x640, xfs_bnobt block 0x8 [ 242.989781][ T9024] BTRFS info (device loop3): rebuilding free space tree [ 243.002074][ T9008] XFS (loop5): Unmount and run xfs_repair [ 243.068393][ T9066] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 243.077799][ T9024] BTRFS info (device loop3): disabling free space tree [ 243.111862][ T9024] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 243.131963][ T8527] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 243.160136][ T9068] loop1: detected capacity change from 0 to 256 [ 243.163006][ T9024] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 243.192937][ T9068] exfat: Deprecated parameter 'namecase' [ 243.199036][ T9068] exfat: Deprecated parameter 'utf8' [ 243.321740][ T9068] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 243.381371][ T28] audit: type=1800 audit(1759883452.582:18): pid=9024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.992" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 243.521132][ T5786] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 243.571899][ T9068] autofs4:pid:9068:autofs_fill_super: could not open pipe file descriptor [ 243.735376][ T5960] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop3 scanned by udevd (5960) [ 244.721061][ T9103] loop3: detected capacity change from 0 to 512 [ 244.796529][ T9103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.834124][ T9103] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.932643][ T5174] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 245.030321][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.065381][ T9114] loop4: detected capacity change from 0 to 128 [ 245.086358][ T9114] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 245.144309][ T9114] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.180170][ T5174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.231957][ T5174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.279632][ T5174] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 245.331683][ T5174] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 245.346340][ T5174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.359214][ T5174] usb 2-1: config 0 descriptor?? [ 245.599847][ T9126] loop3: detected capacity change from 0 to 64 [ 245.667860][ T9126] hfs: unable to locate alternate MDB [ 245.722400][ T9126] hfs: continuing without an alternate MDB [ 245.802979][ T5174] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xe [ 245.821406][ T5174] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 245.882676][ T5174] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 245.975496][ T5174] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 246.101094][ T5174] usb 2-1: USB disconnect, device number 13 [ 246.230947][ T9136] fido_id[9136]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 246.482913][ T9148] loop4: detected capacity change from 0 to 256 [ 246.792249][ T9152] loop3: detected capacity change from 0 to 2048 [ 246.834652][ T9152] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 246.850221][ T9157] netlink: 'syz.4.1029': attribute type 10 has an invalid length. [ 246.889794][ T9157] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1029'. [ 247.121747][ T5790] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 247.312113][ T5790] usb 2-1: Using ep0 maxpacket: 32 [ 247.330104][ T5790] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 247.352065][ T5790] usb 2-1: config 0 has no interface number 0 [ 247.382528][ T5790] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 247.411639][ T5790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.450868][ T5790] usb 2-1: Product: syz [ 247.457863][ T5790] usb 2-1: Manufacturer: syz [ 247.471674][ T5790] usb 2-1: SerialNumber: syz [ 247.494755][ T5790] usb 2-1: config 0 descriptor?? [ 247.510939][ T5790] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 247.550898][ T9176] loop4: detected capacity change from 0 to 64 [ 247.732288][ T5842] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 247.742634][ T5790] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 247.804282][ T5790] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 247.938106][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.972573][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.025079][ T5842] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 248.073252][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.105489][ T5842] usb 4-1: config 0 descriptor?? [ 248.160561][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 248.172338][ T5790] usb 2-1: USB disconnect, device number 14 [ 248.207038][ T5790] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 248.247467][ T5790] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 248.289171][ T5790] quatech2 2-1:0.51: device disconnected [ 248.421347][ T9196] loop4: detected capacity change from 0 to 64 [ 248.443128][ T9189] loop5: detected capacity change from 0 to 4096 [ 248.485080][ T9189] ntfs: (device loop5): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 248.501717][ T9189] ntfs: (device loop5): ntfs_read_inode_mount(): Failed to lookup $MFT/$DATA attribute extent. $MFT is corrupt. Run chkdsk. [ 248.550338][ T9189] ntfs: (device loop5): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 248.597110][ T9189] ntfs: (device loop5): ntfs_fill_super(): Failed to load essential metadata. [ 248.772589][ T5842] usb 4-1: language id specifier not provided by device, defaulting to English [ 248.942808][ T9207] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 248.961864][ T5842] uclogic 0003:256C:006D.000C: failed retrieving Huion firmware version: -71 [ 248.977782][ T9206] program syz.4.1042 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.988936][ T9207] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 249.002021][ T5842] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 249.032050][ T9207] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 249.034131][ T5842] uclogic: probe of 0003:256C:006D.000C failed with error -71 [ 249.102886][ T5842] usb 4-1: USB disconnect, device number 14 [ 249.688655][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1050'. [ 250.107540][ T9240] loop1: detected capacity change from 0 to 256 [ 250.157230][ T9240] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 250.175558][ T9241] loop4: detected capacity change from 0 to 2048 [ 250.195300][ T9240] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 250.224132][ T9241] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.274943][ T9240] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 250.989842][ T9264] loop1: detected capacity change from 0 to 256 [ 251.043980][ T9269] loop4: detected capacity change from 0 to 8 [ 251.537688][ T9274] loop3: detected capacity change from 0 to 2048 [ 251.670174][ T6733] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 252.871811][ T5842] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 252.896198][ T9319] loop1: detected capacity change from 0 to 64 [ 252.900856][ T9289] loop4: detected capacity change from 0 to 32768 [ 252.987637][ T9289] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 253.022127][ T7248] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 253.072057][ T5842] usb 4-1: Using ep0 maxpacket: 32 [ 253.080086][ T5842] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.091254][ T5842] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.124659][ T9319] [ 253.127243][ T9319] ====================================================== [ 253.136032][ T9319] WARNING: possible circular locking dependency detected [ 253.145121][ T9319] syzkaller #0 Not tainted [ 253.151174][ T9319] ------------------------------------------------------ [ 253.160617][ T9319] syz.1.1080/9319 is trying to acquire lock: [ 253.167855][ T9319] ffff88807b4e00b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x17e/0x1f0 [ 253.178026][ T9319] [ 253.178026][ T9319] but task is already holding lock: [ 253.186400][ T9319] ffff88807775a7f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xdb/0x1220 [ 253.198102][ T9319] [ 253.198102][ T9319] which lock already depends on the new lock. [ 253.198102][ T9319] [ 253.208885][ T9319] [ 253.208885][ T9319] the existing dependency chain (in reverse order) is: [ 253.218019][ T9319] [ 253.218019][ T9319] -> #1 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 253.227526][ T9319] __mutex_lock+0x129/0xcc0 [ 253.232755][ T9319] hfs_extend_file+0xdb/0x1220 [ 253.238334][ T9319] hfs_bmap_reserve+0x107/0x430 [ 253.243871][ T9319] __hfs_ext_write_extent+0x1fa/0x470 [ 253.249901][ T9319] hfs_ext_write_extent+0x162/0x1e0 [ 253.255929][ T9319] hfs_write_inode+0x92/0x7d0 [ 253.261330][ T9319] __writeback_single_inode+0x705/0xee0 [ 253.267545][ T9319] writeback_sb_inodes+0x77c/0xef0 [ 253.273464][ T9319] wb_writeback+0x450/0xba0 [ 253.279257][ T9319] wb_workfn+0x3ff/0xe20 [ 253.284622][ T9319] process_scheduled_works+0xa45/0x15b0 [ 253.291433][ T9319] worker_thread+0xa55/0xfc0 [ 253.297790][ T9319] kthread+0x2fa/0x390 [ 253.303299][ T9319] ret_from_fork+0x48/0x80 [ 253.309215][ T9319] ret_from_fork_asm+0x11/0x20 [ 253.314678][ T9319] [ 253.314678][ T9319] -> #0 (&tree->tree_lock/1){+.+.}-{3:3}: [ 253.322999][ T9319] __lock_acquire+0x2ddb/0x7c80 [ 253.328938][ T9319] lock_acquire+0x197/0x410 [ 253.335464][ T9319] __mutex_lock+0x129/0xcc0 [ 253.341538][ T9319] hfs_find_init+0x17e/0x1f0 [ 253.347737][ T9319] hfs_extend_file+0x2ef/0x1220 [ 253.354399][ T9319] hfs_bmap_reserve+0x107/0x430 [ 253.360049][ T9319] hfs_cat_create+0x1b4/0x620 [ 253.366622][ T9319] hfs_create+0x66/0xd0 [ 253.371838][ T9319] path_openat+0x1277/0x3190 [ 253.377591][ T9319] do_filp_open+0x1c5/0x3d0 [ 253.383253][ T9319] do_sys_openat2+0x12c/0x1c0 [ 253.388845][ T9319] __x64_sys_openat+0x139/0x160 [ 253.394569][ T9319] do_syscall_64+0x55/0xb0 [ 253.399985][ T9319] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.407745][ T9319] [ 253.407745][ T9319] other info that might help us debug this: [ 253.407745][ T9319] [ 253.419186][ T9319] Possible unsafe locking scenario: [ 253.419186][ T9319] [ 253.427190][ T9319] CPU0 CPU1 [ 253.432675][ T9319] ---- ---- [ 253.438076][ T9319] lock(&HFS_I(tree->inode)->extents_lock); [ 253.444099][ T9319] lock(&tree->tree_lock/1); [ 253.451532][ T9319] lock(&HFS_I(tree->inode)->extents_lock); [ 253.460173][ T9319] lock(&tree->tree_lock/1); [ 253.464885][ T9319] [ 253.464885][ T9319] *** DEADLOCK *** [ 253.464885][ T9319] [ 253.473252][ T9319] 4 locks held by syz.1.1080/9319: [ 253.478381][ T9319] #0: ffff88805507a418 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 253.488093][ T9319] #1: ffff88807775a338 (&type->i_mutex_dir_key#16){++++}-{3:3}, at: path_openat+0x7c6/0x3190 [ 253.499144][ T9319] #2: ffff88807e9b20b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfs_find_init+0x17e/0x1f0 [ 253.509192][ T9319] #3: ffff88807775a7f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xdb/0x1220 [ 253.521398][ T9319] [ 253.521398][ T9319] stack backtrace: [ 253.527739][ T9319] CPU: 1 PID: 9319 Comm: syz.1.1080 Not tainted syzkaller #0 [ 253.535526][ T9319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 253.546019][ T9319] Call Trace: [ 253.549404][ T9319] [ 253.552383][ T9319] dump_stack_lvl+0x16c/0x230 [ 253.557409][ T9319] ? load_image+0x3b0/0x3b0 [ 253.562132][ T9319] ? show_regs_print_info+0x20/0x20 [ 253.568090][ T9319] ? print_circular_bug+0x12b/0x1a0 [ 253.573410][ T9319] check_noncircular+0x2bd/0x3c0 [ 253.578505][ T9319] ? look_up_lock_class+0x75/0x140 [ 253.584018][ T9319] ? print_deadlock_bug+0x5d0/0x5d0 [ 253.589498][ T9319] ? lockdep_lock+0xe0/0x220 [ 253.594149][ T9319] ? _find_first_zero_bit+0xd3/0x100 [ 253.599683][ T9319] __lock_acquire+0x2ddb/0x7c80 [ 253.605076][ T9319] ? lock_chain_count+0x20/0x20 [ 253.610249][ T9319] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 253.616821][ T9319] ? verify_lock_unused+0x140/0x140 [ 253.622234][ T9319] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 253.628871][ T9319] ? _raw_spin_unlock+0x40/0x40 [ 253.633946][ T9319] ? stack_trace_save+0x9c/0xe0 [ 253.639267][ T9319] ? stack_trace_snprint+0xf0/0xf0 [ 253.644547][ T9319] lock_acquire+0x197/0x410 [ 253.649766][ T9319] ? hfs_find_init+0x17e/0x1f0 [ 253.669091][ T9319] ? hfs_extend_file+0x2ef/0x1220 [ 253.675026][ T9319] ? hfs_bmap_reserve+0x107/0x430 [ 253.682228][ T9319] ? __x64_sys_openat+0x139/0x160 [ 253.687951][ T9319] ? __might_sleep+0xe0/0xe0 [ 253.692854][ T9319] ? read_lock_is_recursive+0x20/0x20 [ 253.698738][ T9319] __mutex_lock+0x129/0xcc0 [ 253.703404][ T9319] ? hfs_find_init+0x17e/0x1f0 [ 253.708825][ T9319] ? hfs_find_init+0x17e/0x1f0 [ 253.713628][ T9319] ? mutex_lock_nested+0x20/0x20 [ 253.718890][ T9319] ? __kmem_cache_alloc_node+0x13e/0x260 [ 253.724555][ T9319] ? hfs_find_init+0xa7/0x1f0 [ 253.729344][ T9319] ? hfs_find_init+0xa7/0x1f0 [ 253.734128][ T9319] ? __kmalloc+0xe2/0x240 [ 253.738497][ T9319] hfs_find_init+0x17e/0x1f0 [ 253.743154][ T9319] hfs_extend_file+0x2ef/0x1220 [ 253.748224][ T9319] ? hfs_get_block+0xbd0/0xbd0 [ 253.753113][ T9319] ? rcu_is_watching+0x15/0xb0 [ 253.758464][ T9319] ? trace_contention_end+0x39/0xe0 [ 253.764581][ T9319] ? __mutex_lock+0x304/0xcc0 [ 253.769410][ T9319] ? hfs_find_init+0x17e/0x1f0 [ 253.774832][ T9319] ? mutex_lock_nested+0x20/0x20 [ 253.780439][ T9319] hfs_bmap_reserve+0x107/0x430 [ 253.785365][ T9319] hfs_cat_create+0x1b4/0x620 [ 253.790662][ T9319] ? hfs_cat_build_key+0x170/0x170 [ 253.796544][ T9319] ? _raw_spin_unlock+0x28/0x40 [ 253.802393][ T9319] ? hfs_new_inode+0x92b/0xbf0 [ 253.807783][ T9319] hfs_create+0x66/0xd0 [ 253.812342][ T9319] ? hfs_lookup+0x2a0/0x2a0 [ 253.817389][ T9319] path_openat+0x1277/0x3190 [ 253.822224][ T9319] ? do_filp_open+0x3d0/0x3d0 [ 253.827869][ T9319] do_filp_open+0x1c5/0x3d0 [ 253.832844][ T9319] ? vfs_tmpfile+0x490/0x490 [ 253.837853][ T9319] ? _raw_spin_unlock+0x28/0x40 [ 253.842870][ T9319] ? alloc_fd+0x58f/0x630 [ 253.847544][ T9319] do_sys_openat2+0x12c/0x1c0 [ 253.852275][ T9319] ? do_sys_open+0xe0/0xe0 [ 253.856947][ T9319] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 253.863706][ T9319] ? lock_chain_count+0x20/0x20 [ 253.869576][ T9319] __x64_sys_openat+0x139/0x160 [ 253.876178][ T9319] do_syscall_64+0x55/0xb0 [ 253.882111][ T9319] ? clear_bhb_loop+0x40/0x90 [ 253.887285][ T9319] ? clear_bhb_loop+0x40/0x90 [ 253.892261][ T9319] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.898922][ T9319] RIP: 0033:0x7f4b8a18eec9 [ 253.903739][ T9319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.924966][ T9319] RSP: 002b:00007f4b8b064038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 253.934774][ T9319] RAX: ffffffffffffffda RBX: 00007f4b8a3e5fa0 RCX: 00007f4b8a18eec9 [ 253.943564][ T9319] RDX: 0000000000141042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 253.952038][ T9319] RBP: 00007f4b8a211f91 R08: 0000000000000000 R09: 0000000000000000 [ 253.960744][ T9319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.969199][ T9319] R13: 00007f4b8a3e6038 R14: 00007f4b8a3e5fa0 R15: 00007ffc3f0e0c48 [ 253.977214][ T9319] [ 253.983179][ T5842] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.011630][ T5842] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 254.034077][ T5842] usb 4-1: config 0 interface 0 has no altsetting 0 [ 254.044224][ T7248] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 254.053442][ T5842] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 254.063097][ T9289] XFS (loop4): Ending clean mount [ 254.067415][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.077436][ T7248] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.113317][ T9289] XFS (loop4): Quotacheck needed: Please wait. [ 254.120831][ T5842] usb 4-1: config 0 descriptor?? [ 254.138785][ T9289] XFS (loop4): Quotacheck: Done. [ 254.155166][ T7248] usb 6-1: config 0 descriptor?? [ 254.215449][ T7248] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 254.336327][ T7282] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 254.598812][ T5842] hid-thrustmaster 0003:044F:B65D.000D: unknown main item tag 0x0 [ 254.609077][ T5842] hid-thrustmaster 0003:044F:B65D.000D: unknown main item tag 0x0 [ 254.620350][ T5842] hid-thrustmaster 0003:044F:B65D.000D: unknown main item tag 0x0 [ 254.629851][ T5842] hid-thrustmaster 0003:044F:B65D.000D: unknown main item tag 0x0 [ 254.641530][ T5842] hid-thrustmaster 0003:044F:B65D.000D: unknown main item tag 0x0 [ 254.661507][ T5842] hid-thrustmaster 0003:044F:B65D.000D: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 254.684556][ T5842] hid-thrustmaster 0003:044F:B65D.000D: Wrong number of endpoints? [ 254.849490][ C1] hid-thrustmaster 0003:044F:B65D.000D: Unknown packet type 0x0, unable to proceed further with wheel init [ 255.029979][ T7248] usb 6-1: USB disconnect, device number 2 [ 255.069439][ T5842] usb 4-1: USB disconnect, device number 15 [ 256.167157][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.175994][ T1292] ieee802154 phy1 wpan1: encryption failed: -22